# changelog

author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-4
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-0
changelog:
  - Update to krb5-1.13.1
    - patch krb5-1.12-selinux-label was updated and renamed to krb5-1.13-selinux-label
    - patch krb5-1.11-dirsrv-accountlock was updated and renamed to krb5-1.13-dirsrv-accountlock
    - drop patch for krb5-1.12-pwdch-fast, fixed in krb5-1.13
    - drop patch for krb5-1.12ish-kpasswd_tcp, fixed in krb5-1.13
    - drop patch for krb5-master-rcache-internal-const, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-cleanup, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-source, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-test, no longer needed
    - drop patch for krb5-master-move-otp-sockets, no longer needed
    - drop patch for krb5-master-mechd, no longer needed
    - drop patch for krb5-master-strdupcheck, no longer needed
    - drop patch for krb5-master-compatible-keys, no longer needed
    - drop patch for krb5-1.12-system-exts, fixed in krb5-1.13
    - drop patch for 0001-In-ksu-merge-krb5_ccache_copy-and-_restricted, no longer needed
    - drop patch for 0002-In-ksu-don-t-stat-not-on-disk-ccache-residuals, no longer needed
    - drop patch for 0003-Use-an-intermediate-memory-cache-in-ksu, no longer needed
    - drop patch for 0004-Make-ksu-respect-the-default_ccache_name-setting, no longer needed
    - drop patch for 0005-Copy-config-entries-to-the-ksu-target-ccache, no longer needed
    - drop patch for 0006-Use-more-randomness-for-ksu-secondary-cache-names, no longer needed
    - drop patch for 0007-Make-krb5_cc_new_unique-create-DIR-directories, no longer needed
    - drop patch for krb5-1.12-kpasswd-skip-address-check, fixed in krb5-1.13
    - drop patch for 0000-Refactor-cm-functions-in-sendto_kdc.c, no longer needed
    - drop patch for 0001-Simplify-sendto_kdc.c, no longer needed
    - drop patch for 0002-Add-helper-to-determine-if-a-KDC-is-the-master, no longer needed
    - drop patch for 0003-Use-k5_transport-_strategy-enums-for-k5_sendto, no longer needed
    - drop patch for 0004-Build-support-for-TLS-used-by-HTTPS-proxy-support, no longer needed
    - drop patch for 0005-Add-ASN.1-codec-for-KKDCP-s-KDC-PROXY-MESSAGE, no longer needed
    - drop patch for 0006-Dispatch-style-protocol-switching-for-transport, no longer needed
    - drop patch for 0007-HTTPS-transport-Microsoft-KKDCPP-implementation, no longer needed
    - drop patch for 0008-Load-custom-anchors-when-using-KKDCP, no longer needed
    - drop patch for 0009-Check-names-in-the-server-s-cert-when-using-KKDCP, no longer needed
    - drop patch for 0010-Add-some-longer-form-docs-for-HTTPS, no longer needed
    - drop patch for 0011-Have-k5test.py-provide-runenv-to-python-tests, no longer needed
    - drop patch for 0012-Add-a-simple-KDC-proxy-test-server, no longer needed
    - drop patch for 0013-Add-tests-for-MS-KKDCP-client-support, no longer needed
    - drop patch for krb5-1.12ish-tls-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-nodelete-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-untyped-default-ccache-name, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-no-ccache, fixed in krb5-1.13.1
    - drop patch for krb5-ksu_not_working_with_default_principal, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5354_support_keyless_principals_in_ldap, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
    - added patch krb5-1.14-Support-KDC_ERR_MORE_PREAUTH_DATA_REQUIRED
    - added patch krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - fix for CVE-2015-2694 (#1218020) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed RH
    bug #1156144 ("krb5 upstream test t_kdb.py failure")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - Rebase to new upstream version 1.14.1
  - Remove pax logic
  - Resolves: #1292153
  - Resolves: #1135427
  - Resolves: #1265509
  - Resolves: #1265510
  - Resolves: #1296241


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-16
changelog:
  - Fix kprop/iprop handling of default realm
  - Fix t_kprop.py
  - Resolves: #1290561
  - Resolves: #1302967
  - Resolves: #1292795


author: Robbie Harwood <rharwood@redhat.com> - 1.15-1
changelog:
  - Rebase to 1.15-final
  - Resolves: #1389073
  - Resolves: #1367169
  - Resolves: #1389072
  - Resolves: #1366863


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-1
changelog:
  - Bump to krb5-1.15.1 (very small change)
  - Apply some sanity to our patches and ordering
  - Resolves: #1389073


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-4
changelog:
  - Backport certauth plugin and related pkinit changes
  - Note: related changes cannot be tested because RHEL does not allow
    binary git diffs
  - Resolves: #1428484


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> - 20100309-4
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584007)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100924-2
changelog:
  - disable only known to be broken builtins, let other enabled
  - skip regression tests if /dev/fd is missing


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-4
changelog:
  - bind Home, End, Delete,... key correctly for emacs mode
  - do not crash when executed from deleted directory


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-5
changelog:
  - ksh could not enter directories with path containing /.something (#889748)
  - file name autocomplete prevented following numeric input (#889745)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-12
changelog:
  - ksh sometimes wrote wrong byte sequence to terminal when vi editing 
    mode was used (#1026360)
  - fix errors in man page (#1030867)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-15
changelog:
  - fix argv rewrite (#1047507)
  - fix memory leak (#1048995)
  - standard error output could get misdirected (#1048272)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070328)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-20
changelog:
  - fix segfault in job list code (#1084406)
  - do not resend signal on termination (#1085385)
  - fix brace expansion on/off (#1099935)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070871)
  - fix parser errors related to the end of the here-document marker (#1111120)
  - ksh hangs when command substitution fills out the pipe buffer (#1077090)
  - using typeset -l with a restricted variabled caused segmentation fault (#1121960)
  - monitor mode was documented incorrectly (#1100215)
  - do not crash when unsetting running function from another one (#1100215)
  - should report an error when trying to cd into directory without execution bit (#1109893)
  - job locking mechanism did not survive compiler optimization (#1116506)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-21
changelog:
  - include symlink for restricted shell (#1146161)
  - ksh hangs when command substitution containing pipe fills out the pipe buffer (#1138751)
  - current directory could differ from PWD (#1135573)
  - cd builtin could break IO redirection (#1133585)
  - return code from a function could be wrong (#1116507)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: David Walluck <david@anti-microsoft.org> 0:4.1-5jpp
changelog:
  - add Distribution and Vendor tags
  - fix jpackage-utils requirement
  - change gmake to %__make
  - break %description lines


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-8
changelog:
  - Resolves: bug 684012 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=640750


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.22-8
changelog:
  - Fixes from package review
  - Change Requires: on tools subpackage to be the exact version/release
  - Remove unnecessary BuildRoot directive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
changelog:
  - New upstream release 1.0.0
  - SOname bump to account for module loading changes
  - Rename libldb-tools to ldb-tools to make upgrades easier


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-2
changelog:
  - Build and install API documentation
  - Build tdb_compat and ccan statically. They have no upstream releases to
    link against yet and their API is in flux. It is unsafe to make them
    public and shared at this time.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-3
changelog:
  - Add explicit mention of the bundled libreplace
  - https://fedorahosted.org/fpc/ticket/120
  - Add explicit mention of bundled libtdb_compat and libccan
  - https://fedorahosted.org/fpc/ticket/119


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.4-1
changelog:
  - New upstream release
  - Add ldb_module_error() routine
  - Fedora: work around unreliable configure check for pytevent
  - Drop patch to ignore --disable-silent-rules (included in tarball)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove "xorg-x11" from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libICE to version 0.99.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libICE to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: xorg-x11-proto-devel"
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.0.4-6
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0.8-6
changelog:
  - Fix duplicate documentation (#1001256) by not using %doc
  - Turn on verbose build output via V=1 make
  - Use %?_isa in -devel base package dep


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated to libX11-0.99.2 from the X11R7 RC1 release.
  - Added en_GR.UTF-8 locale to file manifest.
  - Forcibly remove Xcms.txt


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libX11 to version 0.99.3 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added libX11-0.99.3-datadir-locale-dir-fix.patch, to fix build to install
    the locale data files into datadir instead of libdir. (#173282)


author: Mike A. Harris <mharris@redhat.com> 0.99.4-1
changelog:
  - Updated libX11 to version 0.99.4 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added libX11-1.0.1-setuid.diff to fix potential security issue (#196094)
  - Change dependency on "filesystem" package to "xorg-x11-filesystem" package,
    so we can control this dep centrally.
  - Added NEWS to doc list.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libX11 to version 1.0.2
  - Bump BuildRequires and Requires to "xorg-x11-proto-devel >= 7.1-2" to meet
    new "xproto >= 7.0.6" dependency.
  - Disable libX11-0.99.3-datadir-locale-dir-fix.patch as it is now included
    upstream.
  - Remove autoconf dependency as we no longer need it.


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Adam Jackson <ajax@redhat.com> 1.1.2-3
changelog:
  - libX11-1.1.2-GetMotionEvents.patch: Fix the definition of XGetMotionEvents
    to match the argument order in the headers. (#274671)


author: Adam Jackson <ajax@redhat.com> 1.1.3-2
changelog:
  - libX11-1.1.3-xkb-lock-fix.patch: Don't LockDisplay() recursively.  Fixes
    Gnome hang at logout. (#326461)


author: Adam Jackson <ajax@redhat.com> 1.1.4-3
changelog:
  - libX11-1.1.4-xcb-xreply-leak.patch: Fix a leak when the client has a
    non-fatal error handler. (mclasen, fdo #17616)


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added dependency on xorg-x11-libXmu-devel to devel subpackage, as libXaw
    headers include libXmu headers directly which caused xkbutils to fail to
    build.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix all "BuildRequires:" deps with s/xorg-x11-//g


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXaw to version 0.99.1 from X11R7 RC1
  - Update file manifest to find manpages in "man3x"
  - Added {_includedir}/X11/Xaw/Template.c to file manifest


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added libXaw-0.99.2-bug-173027-libtool-sucks.patch to fix bug #173027,
    added 'autoconf' invocation prior to configure, and conditionalized it
    all with with_libtool_sucks_workaround macro.
  - Added _smp_mflags to make invocation.
  - Use *.h glob in file manifest instead of listing each header individually.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXaw to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193423)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "BuildRequires: libXt-devel" for (#190169)


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Mike A. Harris <mharris@redhat.com> 1.1.5-1
changelog:
  - Updated libXcursor to version 1.1.5 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 1.1.5.1-1
changelog:
  - Updated libXcursor to version 1.1.5.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added default index.theme file to set BlueCurve as the default cursor theme
    to fix bug (#175532).


author: Mike A. Harris <mharris@redhat.com> 1.1.6-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Parag <paragn@fedoraproject.org> - 1.1.10-2
changelog:
  - Merge-Review #226066
  - Removed XFree86-libs, xorg-x11-libs as Obsoletes
  - Removed BR:pkgconfig
  - Few spec cleanups


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2
changelog:
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXdmcp to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xdmcp.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 3.0.1-1
changelog:
  - Updated libXfixes to version 3.0.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.0.1.1-1
changelog:
  - Updated libXfixes to version 3.0.1.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 4.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
  - Added "Requires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
    to devel package, needed by xfixes.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXi to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> 1.1.3-2
changelog:
  - Merge-review #226076
  - Removed BR:pkgconfig
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length AUTHORS README file


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-2
changelog:
  - 0001-Handle-unknown-device-classes.patch: don't corrupt memory when a
    server sends unknown device classes.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-3
changelog:
  - Fix 0001-Handle-unknown-device-classes.patch: missing prototype change for
    copy_classes in XIQueryDevice caused parameter corruption (#744960)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Mike A. Harris <mharris@redhat.com> 3.5.2-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added missing sxpm binary to devel subpackage
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 3.5.2-4
changelog:
  - Although ./configure checks for libXt and libXext, and indicates
    that they are missing, it continues to build anyway, and just does not
    build sxpm if they are not present.  Therefore, libXt-devel and
    libXext-devel are required build deps in order to get sxpm built.
  - Added missing defattr to devel subpackage.


author: Mike A. Harris <mharris@redhat.com> 3.5.2-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new style X library package names


author: Mike A. Harris <mharris@redhat.com> 3.5.4-1
changelog:
  - Updated libXpm to version 3.5.4 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.5.4.1-1
changelog:
  - Updated libXpm to version 3.5.4.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libX11-devel" to devel subpackage as xpm.h includes various
    X headers. (#174163)
  - Added missing build dep libXau-devel


author: Mike A. Harris <mharris@redhat.com> 3.5.5-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193427)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> 3.5.7-2
changelog:
  - Merge-Review #226081
  - Removed BR:pkgconfig
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: parag <paragn@fedoraproject.org> 3.5.7-3
changelog:
  - Merge-Review #226081
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Bump release and correct changelog


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXrandr to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXrandr to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 1.1.0.1-1
changelog:
  - Updated libXrandr to version 1.1.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193428)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192724)
  - Remove package ownership of mandir/libdir/etc.


author: Adam Jackson <ajax@redhat.com> 1.2.0-3
changelog:
  - BuildRequire on the randrproto virtual instead of a magic x-x-p-d version.
  - Fix -devel package to require sufficiently new randrproto.


author: parag <paragn@fedoraproject.org> 1.2.2-2
changelog:
  - Merge-Review #226083
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 0.9.0.1-1
changelog:
  - Updated libXrender to version 0.9.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.9.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193429)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> 0.9.4-2
changelog:
  - Merge-Review #226084
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Added Requires: libX11-devel to libXt-devel subpackage, as Xt headers
    include Xlib headers causing xterm and other things to fail to compile.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXt to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in 'man3x'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXt to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Invoke ./configure --with-xfile-search-path=%{_datadir}/X11/app-defaults
    to make sure Xt is looking in the right place for app-defaults files.


author: Kristian Høgsberg <krh@redhat.com> 0.99.2-3
changelog:
  - Use the default value from configure.ac for --with-xfile-search-path
    except with %{_datadir} instead of $(libdir), so Xt can search for
    app-default files as usual.
  - Move the --with-xfile-search-path outside the with_static condition.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXt to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated libXt to version 1.0.0 from X11R7 RC4
  - Added makestrs and it's manpage to the devel subpackage.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193503)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Adam Jackson <ajackson@redhat.com> 1.0.2-2
changelog:
  - Added libXt-1.0.2-libsm-fix.patch to remove libSM from the Requires: line
    in the installed pkgconfig file.  Apps should link against libSM if they
    need it, but we shouldn't force them to link against it if they don't.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-3.fc6
changelog:
  - Add the {_datadir}/X11/app-defaults directory to the file manifest, as
    libXt is the canonical owner of the directory.  Discovered in (#198025).


author: parag <paragn@fedoraproject.org> - 1.0.4-4
changelog:
  - Merge-Review #226090
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS NEWS file


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXtst to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXtst to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193504)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> - 1.0.3-2
changelog:
  - Merge-Review #226091
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS file


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXv to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXv to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: libXext-devel" to libXv-devel subpackage, to avoid all
    packages that depend on libXv-devel from having to manually specify that
    dependency themselves, as it is required by Xv.  (#192167)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "BuildRequires: pkgconfig" for (#193505)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226093
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXvMC to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193506)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Touch XvMCConfig during install phase, and add to file manifest as a ghost
    file, so that it is owned by the package if the user creates it. (#192254)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXxf86vm to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXxf86vm to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193509)
  - Use "make install DESTDIR=..." instead of makeinstall macro, to fix (#192731)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - pam.patch differentiated between different kinds of bad logins.
    In particular, "user does not exist" and "bad password" were treated
    differently.  This was a minor security hole.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Merged Red Hat changes into main util-linux source, updated package to
    development util-linux (nearly 2.7).


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated MCONFIG to automatically determine the architecture
  - added glibc header hacks to fdisk code
  - rdev is only available on the intel


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch top build on the arm without PAM and related utilities, for now.
  - build hwclock only on intel


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - .perms patch to login to make it retain root in parent process
    for pam_close_session to work correctly


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - if hwclock is to be compiled on sparc,
    it must actually work. Also, it should obsolete
    clock, otherwise it clashes.
  - limit the swap size in mkswap for 2.2.1+ kernels
    by the actual maximum size kernel can handle.
  - fix kbdrate on sparc, patch by J. S. Connell
    <ankh@canuck.gen.nz>


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include sfdisk (#1164)
  - fix write (#1784)
  - use positive logic in spec file (ifarch rather than ifnarch).
  - (re)-use 1st matching utmp slot if search by mypid not found.
  - update to 2.9o
  - lastb wants bad logins in wtmp clone /var/run/btmp (#884)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9t:
  - national language support for hwclock
  - Japanese messages (both by Daisuke Yamashita)
  - German messages and some misc i18n fixes (Elrond)
  - Czech messages (Jiri Pavlovsky)
  - wall fixed for /dev/pts/xx ttys
  - make last and wall use getutent() (Sascha Schumann)
  	[Maybe this is bad: last reading all of wtmp may be too slow.
  	Revert in case people complain.]
  - documented UUID= and LABEL= in fstab.5
  - added some partition types
  - swapon: warn only if verbose


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9u:
  - Czech more.help and messages (Jiri Pavlovsky)
  - Japanese messages (Daisuke Yamashita)
  - fdisk fix (Klaus G. Wagner)
  - mount fix (Hirokazu Takahashi)
  - agetty: enable hardware flow control (Thorsten Kranzkowski)
  - minor cfdisk improvements
  - fdisk no longer accepts a default device
  - Makefile fix


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9v:
  - cfdisk no longer believes the kernel's HDGETGEO
  	(and may be able to partition a 2 TB disk)


author: Christian 'Dr. Disk' Hechelmann <drdisk@tc-gruppe.de>
changelog:
  - added locale message catalogs to %file
  - added patch for non-root build
  - vigr.8 and /usr/lib/getopt  man-page was missing from file list
  - /etc/fdprm really is a config file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - hostid is now in sh-utils. On sparc, install hostid as sunhostid (#4581).
  - update to 2.9w:
  -  Updated mount.8 (Yann Droneaud)
  -  Improved makefiles
  -  Fixed flaw in fdisk


author: Matt Wilson <msw@redhat.com>
changelog:
  - updated to util-linux 2.10c
  - deprecated IMAP login mail notification patch17
  - deprecated raw patch22
  - depricated readprofile patch24


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - raw control file was /dev/raw, now /dev/rawctl.
  - raw access files were /dev/raw*, now /dev/raw/raw*.


author: Matt Wilson <msw@redhat.com>
changelog:
  - use snprintf - not sprintf - when doing
    sprintf ("%s\n", _("Some string")) to avoid overflows and
    segfaults.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.10o
  -  fdformat: fixed to work with kernel 2.4.0test6 (Marek Wojtowicz)
  -  login: not installed suid
  -  getopt: by default install aux files in /usr/share/misc
  - update to 2.10n:
  -  added blockdev.8
  -  change to elvtune (andrea)
  -  fixed overrun in agetty (vii@penguinpowered.com)
  -  shutdown: prefer umounting by mount point (rgooch)
  -  fdisk: added plan9
  -  fdisk: remove empty links in chain of extended partitions
  -  hwclock: handle both /dev/rtc and /dev/efirtc (Bill Nottingham)
  -  script: added -f (flush) option (Ivan Schreter)
  -  script: added -q (quiet) option (Per Andreas Buer)
  -  getopt: updated to version 1.1.0 (Frodo Looijaard)
  -  Czech messages (Jiri Pavlovsky)
  - login.1 man page had not /var/spool/mail path (#16998).
  - sln.8 man page (but not executable) included (#10601).
  - teach fdisk 0xde(Dell), 0xee(EFI GPT), 0xef(EFI FAT) partitions (#17610).


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed problem w/ empty extended partitions
  - added patch to fix the date in the more man page
  - set OPT to pass optimization flags to make rather then RPM_OPT_FLAG
  - fixed fdisk -l /Proc/partitions parsing
  - updated to 2.10s


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated kill man page
  - added patch to fix vipw race
  - updated vipw to edit /etc/shadow and /etc/gshadow, if appropriate
  - added patch to disassociate login from tty, session, and pgrp


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed bug #29131, where ipc.info didn't have an info dir entry,
    added the dir entry to ipc.texi (Patch58)


author: Matt Wilson <msw@redhat.com>
changelog:
  - patched mkcramfs to use the PAGE_SIZE from asm/page.h instead of hard
    coding 4096 (fixes mkcramfs on alpha...)


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Requires: kernel >= 2.2.12-7 to Conflicts: kernel < 2.2.12-7
    (fixes a initscripts -> util-linux -> kernel -> initscripts prereq loop)


author: Erik Troan <ewt@redhat.com>
changelog:
  - upgraded to 2.11a (kbdrate moved to kbd, among other things)
  - turned off ALLOW_VCS_USE
  - modified mkcramfs to not use a large number of file descriptors
  - include mkfs.bfs


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11a-3
changelog:
  - Fix up login - exiting immediately even if the password is correct
    is not exactly a nice feature.
  - Make definite plans to kill people who update login without checking
    if the new version works ;)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11b-1
changelog:
  - Fix up login for real (a console session should be the controlling tty)
    by reverting to 2.10s code (#36839, #36840, #39237)
  - Add man page for agetty (#39287)
  - 2.11b, while at it


author: Bill Nottingham <notting@redhat.com>
changelog:
  - revert the patch that calls setsid() in login that we had reverted
    locally but got integrated upstream (#46223)


author: Elliot Lee <sopwith@redhat.com> 2.11f-13
changelog:
  - Patch/idea #76 from HJL, fixes bug #54741 (race condition in login 
  acquisition of controlling terminal).


author: Elliot Lee <sopwith@redhat.com> 2.11f-16
changelog:
  - Merge patches 36, 75, 76, and 77 into patch #37, to attempt resolve all the remaining issues with #54741.


author: Elliot Lee <sopwith@redhat.com> 2.11f-17
changelog:
  - Add patch38 (util-linux-2.11f-ctty2.patch) to ignore SIGINT/SIGTERM/SIGQUIT in the parent, so that ^\ won't break things.


author: Elliot Lee <sopwith@redhat.com> 2.11n-3
changelog:
  - Add util-linux-2.11n-ownerumount.patch (#56593)
  - Add patch102 (util-linux-2.11n-colrm.patch) to fix #51887
  - Fix #53452 nits.
  - Fix #56953 (remove tunelp on s390)
  - Fix #56459, and in addition switch to using sed instead of perl.
  - Fix #58471
  - Fix #57300
  - Fix #37436
  - Fix #32132


author: Elliot Lee <sopwith@redhat.com> 2.11n-7
changelog:
  Fix various bugs:
  - Add patch110 (skipraid) to properly skip devices that are part of a RAID array.
  - Add patch111 (mkfsman) to update the mkfs man page's "SEE ALSO" section.
  - remove README.cfdisk
  - Include partx
  - Fix 54741 and related bugs for good(hah!) with patch113 (ctty3)


author: Elliot Lee <sopwith@redhat.com> 2.11n-10
changelog:
  - Finish fixing #60675 (ipcrm man page), updated the patch.
  - Fix #61203 (patch114 - dumboctal.patch).


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - adjust mainframe patches to apply to current rpm
  - do not include fdisk until it is fixed to work on mainframe


author: Elliot Lee <sopwith@redhat.com> 2.11n-17
changelog:
  - Fix teg's swapondetect patch to not print out the usage message when 
  'swapon -a -e' is run. (#66690) (edit existing patch)
  - Apply hjl's utmp handling patch (#66950) (patch116)
  - Fix fdisk man page notes on IDE disk partition limit (#64013) (patch117)
  - Fix mount.8 man page notes on vfat shortname option (#65628) (patch117)
  - Fix possible cal overflow with widechars (#67090) (patch117)


author: Elliot Lee <sopwith@redhat.com> 2.11n-19
changelog:
  - Make a note here that this package was the source of the single change 
  contained in util-linux-2.11f-18 (in 7.2/Alpha), and also contains the 
  rawman patch from util-linux-2.11f-17.1 (in 2.1AS).
  - Package has no runtime deps on slang, so remove the BuildRequires: 
  slang-devel.


author: Elliot Lee <sopwith@redhat.com> 2.11w-2
changelog:
  - Remove some crack/unnecessary patches while submitting stuff upstream.
  - Build with -D_FILE_OFFSET_BITS=64


author: Elliot Lee <sopwith@redhat.com> 2.11y-1
changelog:
  - Update to 2.11y
  - Fix #80953
  - Update patch0, patch107, patch117, patch120 for 2.11y
  - Remove patch60, patch61, patch207, patch211, patch212, patch119, patch121
  - Remove patch122, patch200


author: Elliot Lee <sopwith@redhat.com> 2.11y-31
changelog:
  - Add patch140 (alldevs) to fix #101772. Printing the total size of
    all devices was deemed a lower priority than having all devices
    (e.g. /dev/ida/c0d9) displayed.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added pesudo flavors for nfsv4 mounts.
  - Added BuildRequires: libselinux-devel and Requires: libselinux
    when WITH_SELINUX is set.


author: <SteveD@RedHat.com>
changelog:
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running.


author: <SteveD@RedHat.com>
changelog:
  - Reworked how the rpc.idmapd and rpc.gssd checks were
    done due to review comments from upstream.
  - Added rpc_strerror() so the '-v' flag will show RPC errors.


author: <SteveD@RedHat.com>
changelog:
  - Make RPC error messages displayed with -v argument
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running
  - Ping NFS v4 servers before diving into kernel
  - Make v4 mount interruptible which also make the intr option on by default


author: <SteveD@RedHat.com>
changelog:
  - Updated the nfs-mount.patch to correctly 
    handle the mounthost option and to ignore 
    servers that do not set auth flavors


author: Alasdair Kergon <agk@redhat.com>
changelog:
  - Add device-mapper mount-by-label support
  - Fix segfault in mount-by-label when a device without a label is present.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Made the NFS security checks more explicit to avoid confusion
    (an upstream fix)
  - Also removed a compilation warning


author: Elliot Lee <sopwith@redhat.com> 2.12a-6
changelog:
  - Fix #16415, #70616 with rdevman.patch
  - Fix #102566 with loginman.patch
  - Fix #104321 with rescuept.patch (just use plain lseek - we're in _FILE_OFFSET_BITS=64 land now)
  - Fix #130016 - remove raw.
  - Re-add agetty (replacing it with mgetty is too much pain, and mgetty is much larger)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Updated the NFS and NFS4 code to the latest CITI patch set
    (in which they incorporate a number of our local patches).


author: Steve Dickson <SteveD@RedHat.com> 2.12a-18
changelog:
  - Made NFS mounts adhere to the IP protocol if specified on
    command line as well as made NFS umounts adhere to the
    current IP protocol. Fix #140016


author: Elliot Lee <sopwith@redhat.com> 2.12p-1
changelog:
  - Update to util-linux-2.12p. This changes swap header format
    from - you may need to rerun mkswap if you did a clean install of
    FC3.


author: Karel Zak <kzak@redhat.com> 2.12p-4
changelog:
  - added /var/log/lastlog to util-linux (#151635)
  - disabled 'newgrp' in util-linux (enabled in shadow-utils) (#149997, #151613)
  - improved mtab lock (#143118)
  - fixed ipcs typo (#151156)
  - implemented mount workaround for duplicated labels (#116300)


author: Karel Zak <kzak@redhat.com> 2.12p-8
changelog:
  - fix #154498 - util-linux login & pam session
  - fix #155293 - man 5 nfs should include vers as a mount option
  - fix #76467 - At boot time, fsck chokes on LVs listed by label in fstab
  - new Source URL
  - added note about ATAPI IDE floppy to fdformat.8
  - fix #145355 - Man pages for fstab and fstab-sync in conflict


author: Karel Zak <kzak@redhat.com> 2.12p-9.5
changelog:
  - fix #157656 - CRM 546998: Possible bug in vipw, changes permissions of /etc/shadow and /etc/gshadow
  - fix #159339 - util-linux updates for new audit system (pam_loginuid.so added to util-linux-selinux.pamd)
  - fix #159418 - sfdisk unusable - crashes immediately on invocation
  - fix #157674 - sync option on VFAT mount destroys flash drives
  - fix .spec file /usr/sbin/{hwclock,clock} symlinks


author: Karel Zak <kzak@redhat.com> 2.12p-9.7
changelog:
  - fix #159339 - util-linux updates for new audit system
  - fix #158737 - sfdisk warning for large partitions, gpt
  - fix #150912 - Add ocfs2 support
  - NULL is better than zero at end of execl()


author: Karel Zak <kzak@redhat.com> 2.13-0.2.pre2
changelog:
  - /usr/share/misc/getopt/* -move-> /usr/share/doc/util-linux-2.13/getopt-*
  - the arch command marked as deprecated
  - removed: elvtune, rescuept and setfdprm
  - removed: man8/sln.8 (moved to man-pages, see #10601)
  - removed REDAME.pg and README.reset
  - .spec file cleanup
  - added schedutils (commands: chrt, ionice and taskset)


author: Karel Zak <kzak@redhat.com> 2.13-0.3.pre2
changelog:
  - fix #166923 - hwclock will not run on a non audit-enabled kernel
  - fix #159410 - mkswap(8) claims max swap area size is 2 GB
  - fix #165863 - swsusp swaps should be reinitialized
  - change /var/log/lastlog perms to 0644


author: Karel Zak <kzak@redhat.com> 2.13-0.4.pre4
changelog:
  - fix #169628 - /usr/bin/floppy doesn't work with /dev/fd0
  - fix #168436 - login will attempt to run if it has no read/write access to its terminal
  - fix #168434 - login's timeout can fail - needs to call siginterrupt(SIGALRM,1)
  - fix #165253 - losetup missing option -a [new feature]
  - update PAM files (replace pam_stack with new "include" PAM directive)
  - remove kbdrate from src.rpm
  - update to 2.13pre4


author: Karel Zak <kzak@redhat.com> 2.13-0.6.pre5
changelog:
  - update to upstream 2.13pre5
  - remove separated cramfs1.1 (already in upstream package)
  - remove odd symlink /usr/bin/mkcramfs -> ../../sbin/mkfs.cramfs
  - fix #170171 - ipcs -lm always report "max total shared memory (kbytes) = 0"


author: Karel Zak <kzak@redhat.com> 2.13-0.11.pre6
changelog:
  - update to upstream version 2.13-pre6
  - fix #172203 - mount man page in RHEL4 lacks any info on cifs mount options


author: Karel Zak <kzak@redhat.com> 2.13-0.13
changelog:
  - fix #174676 - hwclock audit return code mismatch
  - fix #176441: col truncates data
  - fix #174111 - mount allows loopback devices to be mounted more than once to the same mount point
  - better wide chars usage in the cal command (based on the old 'moremisc' patch)


author: Steve Dickson <steved@redhat.com> 2.13-0.14
changelog:
  - Updated the gssd_check() and idmapd_check(), used with
    nfsv4 mounts, to looked for the correct file in /var/lock/subsys
    which stops bogus warnings.


author: Karel Zak <kzak@redhat.com> 2.13-0.16
changelog:
  - fix #181782 - mkswap should automatically add selinux label to swapfile
  - fix #180730 - col is exiting with 1 (fix util-linux-2.12p-col-EILSEQ.patch)
  - fix #181896 - broken example in schedutils man pages
  - fix #177331 - login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
  - fix #177523 - umount -a should not unmount sysfs
  - fix #182553 - fdisk -l inside xen guest shows no disks


author: Jesse Keating <jkeating@redhat.com> 2.13-0.20
changelog:
  - Better calling of restorecon as suggested by Bill Nottingham
  - prereq restorecon to avoid ordering issues


author: Steve Dickson <steved@redhat.com> 2.13-0.21
changelog:
  - fix #183713 - foreground mounts are not retrying as advertised
  - fix #151549 - Added 'noacl' mount flag
  - fix #169042 - Changed nfsmount to try udp before using tcp when rpc-ing
  		the remote rpc.mountd (iff -o tcp is not specified).
  		This drastically increases the total number of tcp mounts
  		that can happen at once (ala autofs).


author: Dan Walsh <dwalsh@RedHat.com> 2.13-0.24
changelog:
  - Remove requirement on restorecon, since we can do the same thing
  - with chcon/matchpathcon, and not add requirement on policycoreutils


author: Karel Zak <kzak@redhat.com> 2.13-0.25
changelog:
  - fix #187014 - umount segfaults for normal user
  - fix #183446 - cal not UTF-8-aware
  - fix #186915 - mount does not translate SELIinux context options though libselinux
  - fix #185500 - Need man page entry for -o context= mount option
  - fix #152579 - missing info about /etc/mtab and /proc/mounts mismatch
  - fix #183890 - missing info about possible ioctl() and fcntl() problems on NFS filesystem
  - fix #191230 - using mount --move results in wrong data in /etc/mtab
  - added mount subtrees support
  - fdisk: wrong number of sectors for large disks (suse#160822)
  - merge fdisk-xvd (#182553) with new fdisk-isfull (#188981) patch 
  - fix #181549 - raw(8) manpage has old information about dd
  - remove asm/page.h usage


author: Karel Zak <kzak@redhat.com> 2.13-0.32
changelog:
  - add IPv6 support to the login command (patch by Milan Zazrivec)
  - fix #198626 - add keyinit instructions to the login PAM script 
    (patch by David Howells)


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
  		(split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.44
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - use ncurses only
  - fix #218915 - fdisk -b 4K
  - upgrade to -pre7 release
  - fix building problem with raw0 patch
  - fix #217186 - /bin/sh: @MKINSTALLDIRS@: No such file or directory 
    (port po/Makefile.in.in from gettext-0.16)
  - sync with FC6 and RHEL5:
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support ("raw0" is wrong device name)
  - fix #216760 - mount with context or fscontext option fails
    (temporarily disabled the support for additional contexts -- not supported by kernel yet)
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #211749 - add -r option to losetup to create a read-only loop


author: Karel Zak <kzak@redhat.com> 2.13-0.47
changelog:
  - fix #217240 - namei ignores non-directory components instead of saying "Not a directory"
  - fix #217241 - namei enforces symlink limits inconsistently


author: Karel Zak <kzak@redhat.com> 2.13-0.51
changelog:
  - fix #150493 - hwclock --systohc sets clock 0.5 seconds slow
  - fix #220873 - starting RPC idmapd: Error: RPC MTAB does not exist.
  		(added rpc_pipefs to util-linux-2.13-umount-sysfs.patch)
  - fix #227903 - mount -f does not work with NFS-mounted


author: Karel Zak <kzak@redhat.com> 2.13-0.52
changelog:
  - rebase to util-linux-ng (new util-linux upstream fork,
  		based on util-linux 2.13-pre7)
  - more than 70 Fedora/RHEL patches have been merged to upstream code


author: Karel Zak <kzak@redhat.com> 2.13-0.54
changelog:
  - port "blockdev --rmpart" patch from util-linux
  - use same Provides/Obsoletes setting like in util-linux


author: Karel Zak <kzak@redhat.com> 2.13-0.57
changelog:
  - fix #253664 - util-linux-ng fails to build on sparc (patch by Dennis Gilmore)
  - rebase to new GIT snapshot


author: Karel Zak <kzak@redhat.com> 2.13-0.59
changelog:
  - add release number to util-linux Provides and increment setarch Obsoletes
  - fix #254114 - spec typo
  - upgrade to floppy-0.16
  - add BuildRequires: popt-devel


author: Karel Zak <kzak@redhat.com> 2.13.1-3
changelog:
  - upgrade to new upstream release
  - fix #427874 - util-linux-ng gets "excess command line argument" on update


author: Karel Zak <kzak@redhat.com> 2.14-0.1
changelog:
  - upgrade to 2.14-rc3
  - remove arch(8) (deprecated in favor of uname(1) or arch(1) from coreutils)
  - add a new command ldattach(8)
  - cfdisk(8) linked with libncursesw


author: Karel Zak <kzak@redhat.com> 2.14-3
changelog:
  - update util-linux-ng-2.14-mount-file_t.patch to make
    the SELinux warning optional (verbose mode is required)


author: Karel Zak <kzak@redhat.com> 2.14.1-3
changelog:
  - fix #465761 -  mount manpage is missing uid/gid mount options for tmpfs
  - refresh util-linux-ng-2.14-mount-file_t.patch (fuzz=0)


author: Karel Zak <kzak@redhat.com> 2.14.2-0.2
changelog:
  - fix #480413 - util-linux-ng doesn't include scriptreplay
  - fix #479002 - remove dependency on ConsoleKit-libs
  - upgrade to 2.14.2-rc2


author: Karel Zak <kzak@redhat.com> 2.14.2-1
changelog:
  - upgrade to stable 2.14.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.14/v2.14.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.14.2-5
changelog:
  - fix #489672 - flock segfaults when file name is not given (upstream)
  - fix #476964 - Mount /var/tmp with tmpfs creates denials
  - fix #487227 - fdisk 4KiB hw sectors support (upstream)
  - fix #477303 - renice doesn't support -n option (upstream)


author: Karel Zak <kzak@redhat.com> 2.15.1-0.1
changelog:
  - upgrade to 2.15.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15.1-rc1-ChangeLog 
  - merged patches:
    util-linux-ng-2.14-login-remote.patch
    util-linux-ng-2.14-fdisk-4k-I.patch
    util-linux-ng-2.14-fdisk-4k-II.patch
    util-linux-ng-2.14-fdisk-4k-III.patch
    util-linux-ng-2.14-dmesg-r.patch
    util-linux-ng-2.14-flock-segfaults.patch
    util-linux-ng-2.14-renice-n.patch
  - new commands: lscpu, ipcmk
  - remove support for "managed" and "kudzu" mount options
  - cleanup spec file
  - enable built-in libblkid (replacement for the old blkid from e2fsprogs)


author: Karel Zak <kzak@redhat.com> 2.16-1
changelog:
  - upgrade to 2.16
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.16/v2.16-ReleaseNotes
  - enable built-in libuuid (replacement for the old uuid stuff from e2fsprogs)
  - new commands switch_root, uuidgen and uuidd (subpackage)


author: Karel Zak <kzak@redhat.com> 2.16-9
changelog:
  - fix #522718 - sfdisk -d /dev/xxx | sfdisk --force /dev/yyy fails when LANG is set
  - fix typo in swsuspend detection


author: Tomas Mraz <tmraz@redhat.com> - 2.16-10
changelog:
  - use password-auth common PAM configuration instead of system-auth and
    drop pam_console.so call from the remote PAM config file


author: Karel Zak <kzak@redhat.com> 2.17-0.1.git5e51568
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)  
  - new commands: fallocate, unshare, wipefs
  - libblkid supports topology and partitions probing
  - remove support for --rmpart[s] from blockdev(8) (util-linux-ng-2.14-blockdev-rmpart.patch)
  - merged upstream:
    util-linux-ng-2.14-sfdisk-dump.patch
    util-linux-ng-2.16-blkid-swsuspend.patch
    util-linux-ng-2.16-libblkid-compression.patch
    util-linux-ng-2.16-libblkid-ext2.patch
    util-linux-ng-2.16-switchroot-tty.patch


author: Karel Zak <kzak@redhat.com> 2.17-0.2.git10dfc39
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)


author: Karel Zak <kzak@redhat.com> 2.17-0.3
changelog:
  - upgrade to 2.17-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.5
changelog:
  - upgrade to 2.17-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-1
changelog:
  - upgrade to the final 2.17
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ChangeLog
  - fix #545147 - util-linux-ng : Violation of the Packaging Guidelines
    (remove uuid and blkid static libs)


author: Karel Zak <kzak@redhat.com> 2.17-2
changelog:
  - remove Provides: lib{uuid,blkid}-static (thanks to Michael Schwendt)
  - remove useless URL to sf.net


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to the final 2.17.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - fix #581252 - remounting tmpfs fails because of hidden rootcontext=
  - fix #580296 - "rtcwake" does miss the "off" option
  - fix #575734 - use microsecond resolution for blkid cache entries
  - upgrade to the bugfix release 2.17.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - minor fixed in spec file


author: Karel Zak <kzak@redhat.com> 2.18-0.1
changelog:
  - upgrade to the release 2.18-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.18-0.2
changelog:
  - upgrade to 2.18-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.18-1
changelog:
  - upgrade to the final 2.18
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.18-2
changelog:
  - fix #615719 - tmpfs mount fails with 'user' option.
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work
  - fix #618957 - ISO images listed in fstab are mounted twice at boot


author: Karel Zak <kzak@redhat.com> 2.19-0.1
changelog:
  - upgrade to the release 2.19-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19-0.3
changelog:
  - upgrade to the release 2.19-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc2-ChangeLog
  - fix #671893 - SELinux is preventing /bin/chown from 'setattr' accesses
    on the file mounts.


author: Karel Zak <kzak@redhat.com> 2.19-0.4
changelog:
  - upgrade to the release 2.19-rc3
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc3-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19-1
changelog:
  - upgrade to the release 2.19
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes
  - remove /sbin/mount.tmpfs -- integrated to mount(8)


author: Karel Zak <kzak@redhat.com> 2.19.1-0.1
changelog:
  - upgrade to the release 2.19.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19.1-1
changelog:
  - upgrade to the release 2.19.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19.1-2
changelog:
  - fix #716483 - /var/tmp --(BIND-mounted)--> /tmp disrupts/hangs bootup
  - fix #709681 - failure to mount if a mount point ends with a slash in /etc/fstab
  - fix #709319 - 'mount -a' mounts already mounted directories
  - fix kernel version parsing


author: Karel Zak <kzak@redhat.com> 2.20-0.1
changelog:
  - upgrade to the release 2.20-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.20-0.2
changelog:
  - upgrade to the release 2.20-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.21-0.1
changelog:
  - upgrade to the release 2.21-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.21/v2.21-ReleaseNotes
  - add {fsck,mkfs}.minix
  - add new command chcpu(8)
  - add new command prlimit(1)
  - enable raw(8) command
  - move 60-raw.rules from /etc from /usr/lib/udev/rules.d
  - move blkid cache from etc to /run/blkid


author: Karel Zak <kzak@redhat.com> 2.21.2-1
changelog:
  - upgrade to bugfix release 2.21.2
  - fix #814699 - namei(1) incorrectly resolves relative symlinks
  - fix #820707 - Impossible to unmount nfsv4/krb5 mounts after network disconnect
  - fix #816877 - libmount does not close device fd before mount(2)
  - fix #822705 - unable to login after installing


author: Karel Zak <kzak@redhat.com> 2.22-0.1
changelog:
  - upgrade to the release 2.22-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.22/v2.22-ReleaseNotes
  - add sulogin, utmpdump, lslocks, wdctl


author: Karel Zak <kzak@redhat.com> 2.22-1
changelog:
  - upgrade to the release 2.22
  - enable eject(1) from util-linux, obsolete original eject package
  - fix #853164 - setuid program should have full RELRO
  - fix #851230 - probe_ntfs: /usr/sbin/blkid was killed by SIGSEGV


author: Karel Zak <kzak@redhat.com> 2.22.2-3
changelog:
  - fix #882305 - agetty: unstable /dev/tty* permissions
  - fix #885314 - hexdump segfault
  - fix #896447 - No newlines in piped "cal" command
  - fix libblkid cache usage (upstream patch)
  - fix #905008 - uuidd: /usr/sbin/uuidd has incorrect file permissions


author: Karel Zak <kzak@redhat.com> 2.23-0.1
changelog:
  - upgrade to the release 2.23-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.23/v2.23-ReleaseNotes
  - add nsenter and blkdiscard
  - remove tunelp


author: Karel Zak <kzak@redhat.com> 2.23.2-1
changelog:
  - upgrade to stable release 2.23.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.23/v2.23.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.23.2-3
changelog:
  - refresh and rename patches
  - fix #987787 - Remove lastlogin from su
  - fix #950497 - problem umounting loop device
  - fix #921498 - multiple internal testsuite failures


author: Karel Zak <kzak@redhat.com> 2.23.2-4
changelog:
  - fix #1005566 - recount_geometry: Process /usr/sbin/fdisk was killed by signal 8 (SIGFPE)
  - fix #1005194 - su generates incorrect log entries


author: Karel Zak <kzak@redhat.com> 2.23.2-6
changelog:
  - fix #1010193 - libmount umount issues
  - fix #1009349 - Joking sfdisk rewriting PT after "n"
  - fix #1007885 - utmpdump is not IPv6 ready


author: Karel Zak <kzak@redhat.com> 2.23.2-7
changelog:
  - fix #1024366 - losetup does not use loop-control to add device
  - fix #1016471 - document that blockdev --setbsz call has never worked


author: Karel Zak <kzak@redhat.com> 2.23.2-9
changelog:
  - fix #1039189 - taskset man page PERMISSIONS section is incorrect
  - fix #1050852 - lscpu: support discontinuous NUMA nodes


author: Karel Zak <kzak@redhat.com> 2.23.2-11
changelog:
  - fix #1046849 - filesystem type is not correctly displayed by df command
  - fix #1055490 - libblkid: Do not problem for backup btrfs superblock
  - fix #1054186 - wipefs does not clean gpt header fully, PMBR remains


author: Karel Zak <kzak@redhat.com> 2.23.2-15
changelog:
  - fix #1078618 - flock nfs file fails on nfsv4
  - fix #1047376 - blkid hangs while reading from /dev/fd0
  - fix #1079931 - fsck: warning on kdump boot


author: Karel Zak <kzak@redhat.com> 2.23.2-17
changelog:
  - fix #1067354 - dmesg -w output not line-buffered
  - fix #1072298 - util-linux/lscpu: '--sysroot' broken on XFS
  - fix #1072930 - hwclock --systohc can hang on busy or virtual machine
  - fix #1077310 - wipefs problem with some live .isos
  - fix #1077864 - swapon: allow a more flexible swap discard policy
  - fix #1080407 - libblkid XFS detection is too fragile
  - fix #1115442 - kill(1) doesn't check errno after calling strtol()
  - fix #1127823 - losetup does not accept offset
  - fix #1127891 - wipefs 4k disks and gpt partitions
  - fix #1136111 - "findmnt" returns incomplete output on kernel-3.14
  - fix #1140591 - improve mount --move documentation
  - fix #1131522 - backport --fork and --mount-proc to unshare(1)
  - fix #1113043 - backport lslogins(1)


author: Karel Zak <kzak@redhat.com> 2.23.2-23
changelog:
  - fix #1225235 - blockdev --report fails on loop and pmem devices
  - fix #1225053 - [RFE] backport fstrim -a and unit file
  - fix #1131523 - mount does not appear to be correctly documented for default mount options
  - fix #1147526 - Incorrect message printed when su is killed
  - fix #1165702 - make login(1) insensitive to SIGXFSZ and huge lastlog
  - fix #1184558 - logger silently changes facility from kern to user
  - fix #1198243 - blkid does not recognize xfs external log device
  - fix #1208081 - lsblk does not list dm-multipath and partitioned devices
  - fix #1209594 - RHEL7: unshare: add --propagation, use MS_PRIVATE by default
  - fix #1229436 - Remove patch that disables User Namespaces
  - fix #1116100 - Add -Z SELInux option to nsenter


author: Karel Zak <kzak@redhat.com> 2.23.2-29
changelog:
  - fix #1029385 - lack of non-ascii support
  - fix #1092520 - util-linux - PIE and RELRO check
  - fix #1153770 - backport lsipc
  - fix #1248003 - mount only parses <param>=<value> lines from fstab fs_spec field available from blkid block device
  - fix #1271850 - mount -a doesn't catch a typo in /etc/fstab and a typo in /etc/fstab can make a system not reboot properly
  - fix #1281839 - [RFE]Bind mounts should be handled gracefully by the operating system
  - fix #1290689 - util-linux: /bin/login does not retry getpwnam_r with larger buffers, leading to login failure
  - fix #1296366 - Bash completion for more(1) handles file names with spaces incorrectly
  - fix #1296521 - RHEL7: update audit event in hwclock
  - fix #1298384 - RFE: add SCHED_DEADLINE support to chrt
  - fix #1304246 - fdisk 'f' subcommand updates partition ranges wrongly
  - fix #1304426 - [rfe] /bin/su should be improved to reduce stack use
  - fix #1326615 - util-linux/lscpu: Fix model and model name on Power Systems
  - fix #1327886 - Backport blkdiscard's "-z" flag to RHEL
  - fix #1332084 - [RFE] Inclusion of lsns command in util-linux Package
  - fix #1335671 - extra quotes around UUID confuses findfs in RHEL (but not in Fedora)
  - fix #1344222 - logger port option in help is misleading
  - fix #1344482 - util-linux fails valid_pmbr() size checks if device is > 2.14TB, Device label type: dos instead of gpt
  - fix #587393 - [RFE] Make sure util-linux is ready for writable overlays


author: Karel Zak <kzak@redhat.com> 2.23.2-32
changelog:
  - improve patch for chrt(1) deadline support #1298384
  - fix #1007734 - blkid shows devices as /dev/block/$MAJOR:$MINOR
  - fix #1349536 - Extended partition loop in MBR partition table leads to DOS


author: Karel Zak <kzak@redhat.com> 2.23.2-36
changelog:
  - fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
  - fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
  - fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
  - fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
  - fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
  - fix #1369436 - losetup man page incorrect syntax for Setup loop device
  - fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
  - fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
  - fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
  - fix #1417722 - umount -a results in selinux being reported as Disabled
  - fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
  - fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
  - fix #1403971 - /usr/bin/more crash in end_it due to double free
  - fix #1358095 - ipcs shows wrong gid information
  - fix #1358097 - ipcs shows strange status message in ja locale
  - fix #1378100 - fix swapon discard option parsing
  - fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
  - fix #1358755 - Backport request for zramctl on util-linux v2.23.2
  - fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
  - fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
  - fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
  - fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices


author: Karel Zak <kzak@redhat.com> 2.23.2-41
changelog:
  - fix #1451704 - IMSM RAID on 4k disks not assembled on boot
  - force gettext messages refresh (for #1358097 bugfix)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.10-6
changelog:
  - Fix sys/capabilities.h header (#55727)
  - Move to /lib, some applications seem to be using this rather early
    (#55733)


author: Jakub Jelinek <jakub@redhat.com> 1.10-12
changelog:
  - CFLAGS was using COPTFLAG variable, not COPTFLAGS
  - build with -fpic
  - apply the IA-64 patch everywhere, use capget/capset from glibc,
    not directly as _syscall (as it is broken on IA-32 with -fpic)
  - reenable alpha


author: Mike A. Harris <mharris@redhat.com> 1.10-13
changelog:
  - Removed %name macro sillyness from package Summary, description text, etc.
  - Removed archaic Prefix: tag
  - lib64 fixes everywhere to use _lib, _libdir, etc
  - Removed deletion of RPM_BUILD_DIR from %clean section
  - Added -q flag to setup macro
  - Severely cleaned up spec file, and removed usage of perl


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36.2-1
changelog:
  - Update to 0.36.2, fixing packaging the libraries (#605434)
  - Remove the dependency on redhat-lsb (#603578)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1
changelog:
  - Update to 0.37
  - use /sys/fs/cgroup as default directory to mount control groups (and rely on
    systemd mounting tmpfs there)


author: Jan Safranek <jsafrane@redhat.com> 0.37.1-4
changelog:
  - fixed cgconfig service not to unmount stuff it did not mount
  - added better sample cgconfig.conf file to reflect systemd
    mounting all controllers during boot (#702111)


author: Peter Schiffer <pschiffe@redhat.com> - 0.38-3
changelog:
  - resolves: #850183
    scriptlets replaced with new systemd macros (thanks to vpavlin)
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2.8-1
changelog:
  - Initial build. Imported SPEC from openSUSE.
    * Added a new constructor for ChamplainMarkers made of an image.
    * Double clicking on the map will now zoom and recenter.
    * When resizing a ChamplainView, the centered content will still be
      centered after the resizing. Can be disabled.
    * The Map's license is displayed by default on the lower right corner. 
    * Fixed map centering on startup.
    * Fixed missing zoom level in OpenStreetMap Mapnik.
    * Fixed zooming and centering behaviour. (GNOME Bugzilla #558026)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2.8-2
changelog:
  - Removed 'Requires: clutter-devel >= 0.8 pkgconfig' from libchamplain-devel
    for all distributions, except Fedora 10.
  - Fixed sample code to not use generic headers.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.3.3-1
changelog:
  - Version bump to 0.3.3.
    * Support for custom map sources and listing available map sources.
    * Smooth movement to a new position. (GNOME Bugzilla #557641)
    * Keep the center of the map in the center after a resize. (GNOME Bugzilla
        * Double click to zoom and center. (GNOME Bugzilla #557644)
    * Added a way to know the maximum and minimum zoom level. (GNOME Bugzilla
        * Fixed unwanted wrap effect when panning at zoom level >= 8. (GNOME
      Bugzilla #558020)
    * Fixed center on and zooming in behavior. (GNOME Bugzilla #558026)
    * Lack of user feedback during loading of tiles. (GNOME Bugzilla #559522)
    * Added missing zoom level to OpenStreetMap Mapnik. (GNOME Bugzilla
        * Fixed wrong elastic effect affecting Emapthy's map view. (GNOME Bugzilla
        * Added disk cache management. (GNOME Bugzillla #568931)
    * Host application should be able to limit the maximum and minimum zoom
      levels. (GNOME Bugzilla #571702)
    * Allow host applications to draw lines/routes on the map. (GNOME Bugzilla
        * Support proxies. (GNOME Bugzilla #573937)
    * Provide a way to make visible a bunch of markers. (GNOME Bugzilla #574809)
    * Do not allow negative zoom levels. (GNOME Bugzilla #575138)
    * Fixed corrupted map when double-clicking at maximum level. (GNOME Bugzilla
        * Prevent ChamplainNetworkMapSource from crashing when setting "proxy-uri".
      (GNOME Bugzilla #575902).
    * Implemented advanced markers. (GNOME Bugzilla #576055)
    * Various memory management fixes for ChamplainTile. (GNOME Bugzilla
        * Any go_to should stop a previous and not yet finished go_to. (GNOME
      Bugzilla #576832)
    * Prevent segmentation fault on 32 bit platforms. (GNOME Bugzilla #576698)
    * Introduced a new signal called ChamplainView::animation-completed. (GNOME
      Bugzilla #577169)
    * Set decel-rate correctly. (GNOME Bugzilla #580785)
    * champlain_network_map_source_fill_tile should be private. (GNOME Bugzilla
        * Fixed champlain_view_center_on. (GNOME Bugzilla #583502)
    * Fixed "longitude" and "latitude" properties, which were reversed. (GNOME
      Bugzilla #584365)
    * Make the cache work the first time. (GNOME Bugzilla #584390)
    * GNOME Goal: use accessor functions instead direct access. (GNOME Bugzilla
      - Added 'BuildRequires: chrpath' for removing rpaths.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.3.5-1
changelog:
  - Version bump to 0.3.5.
    * Marker selection API. (GNOME Bugzilla #577909)
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.5.news
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.4.news
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.5.changes
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.4.changes


author: Matthias Clasen <mclasen@redhat.com> - 0.3.6-1
changelog:
  - Version bump to 0.3.6.
    * New marker animation API.
    * Ported to Clutter 1.0. (GNOME Bugzilla #576391)
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.6.news
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.6.changes


author: Matthias Clasen <mclasen@redhat.com> - 0.3.90-1
changelog:
  - Version bump to 0.3.90.
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.90.news
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.90.changes


author: Matthias Clasen <mclasen@redhat.com> - 0.3.91-1
changelog:
  - Version bump to 0.3.91.
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.91.news


author: Debarshi Ray <rishi@fedoraproject.org> - 0.4.0-1
changelog:
  - Version bump to 0.4.0.
    * ChamplainView now has keyboard shortcuts (but not when used with
      GtkChamplainEmbed).
    * Removed deprecated symbols introduced in 0.3.
    * Fixed X error when using GtkChamplainEmbed. (GNOME Bugzilla #590692)
    * Events were not being sent until the mouse moved. (GNOME Bugzilla #590727)
    * Fixed memory leak in ChamplainLayer. (GNOME Bugzilla #593505)
    * Initial center_on should not result on the map being in Antarctica.
      (GNOME Bugzilla #594963)
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.92.news
    * http://download.gnome.org/sources/libchamplain/0.3/libchamplain-0.3.92.changes


author: Debarshi Ray <rishi@fedoraproject.org> - 0.4.1-1
changelog:
  - Version bump to 0.4.1.
    * Added champlain_view_remove_layer.
    * ChamplainSelectionLayer now has a "changed" signal.
    * Added champlain_marker_get_highlighted_text_color,
      champlain_marker_set_highlighted_text_color and
      Added champlain_marker_get_highlighted_color.
    * Fixed slowdowns with big caches.
    * Don't emit invalid latitude and longitude notifications.
    * Ensure map is displayed in Eye of GNOME's champlain plugin. (GNOME
      Bugzilla #598106)
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.1.news
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.1.changes

  - Enabled GObject Introspection, and added 'Requires: gobject-introspection'
    and 'BuildRequires: gir-repository-devel'. Patched to fix build failure.
    (GNOME Bugzilla #598942)
  - Explicitly disabled debug code.
  - RPaths fixed by upstream. Removed 'BuildRequires: chrpath'.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.4.2-1
changelog:
  - Version bump to 0.4.2.
    * Fixed acceptable values of "decel-rate". (GNOME Bugzilla #595552)
    * Fixed GObject Introspection build failure. (GNOME Bugzilla #598942)
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.2.news
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.2.changes


author: Debarshi Ray <rishi@fedoraproject.org> - 0.4.3-1
changelog:
  - Version bump to 0.4.3.
    * A new scale.
    * User configurable additional license text to view.
    * An option to highlight points in polygons.
    * Fixed segmentation fault in function cairo_set_generator.
      (GNOME Bugzilla #604784)
    * Fixed segmentation fault when polygon has been deleted before redraw.
    * Made queue_redraw visible to subclasses.
    * Some memory usage improvements by reusing images already loaded.
    * Don't eat clicks on the map when using ChamplainSelectionLayer.
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.3.news
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.3.changes


author: Debarshi Ray <rishi@fedoraproject.org> - 0.4.5-1
changelog:
  - Version bump to 0.4.5.
    * Asynchronously load the tiles from the cache.
    * GObject Introspection is in a working state.
    * Limit the internal operations that happen when the user moves.
    * Limit the number of times the scale is redrawn.
    * Optimized the initialization process. Only the needed tiles are loaded.
    * Properly get rid of marker's previous image properly.
    * Removed the need to explicitly set the size of actors.
    * Deprecated champlain_view_set_size in favor of clutter_actor_set_size.
      (GNOME Bugzilla #580372)
    * Load the tiles in spiral order. (GNOME Bugzilla #606393)
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.5.news
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.4.news
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.5.changes
    * http://download.gnome.org/sources/libchamplain/0.4/libchamplain-0.4.4.changes
  - Added 'BuildRequires: chrpath' for removing rpaths.
  - Added README to %doc.
  - Added demos/markers.h to %doc of libchamplain-gtk-devel.


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.6.1-1
changelog:
  - Version bump to 0.6.1. Enable python and vala bindings
    http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.6/libchamplain-0.6.1.news


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.0.news


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.12.1-1
changelog:
  - Update to 0.12.1
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.1.news


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.12.3-1
changelog:
  - Update to 0.12.3
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.3.news


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Jindrich Novy <jnovy@redhat.com> 5.0.21-0.2
changelog:
  - remove C# documentation
  - disable/remove rpath
  - fix description
  - tighten dependencies
  - run ldconfig for cxx and sql subpackages


author: Jindrich Novy <jnovy@redhat.com> 5.1.19-1
changelog:
  - update to 5.1.19
  - rename -devel-static to -static subpackage (#617800)
  - build java on all arches


author: Jindrich Novy <jnovy@redhat.com> 5.2.36-1
changelog:
  - update to 5.2.36,
    http://download.oracle.com/otndocs/products/berkeleydb/html/changelog_5_2.html#id3647664


author: W. Michael Petullo <mike[@]flyn.org> - 1.9.0.1-3
changelog:
  - Require libsoup >= 2.25.92, as this version supports SOUP_ENCODING_EOF
  message encoding, required for HTTP 1.0 clients.


author: W. Michael Petullo <mike[@]flyn.org> - 1.9.0.3-1
changelog:
  - New upstream version.
  - Use "-p /sbin/ldconfig."
  - Remove requires that are already known by RPM.
  - libdmapsharing-devel package now requires pkgconfig.
  - Remove irrelevant INSTALL documentation.


author: W. Michael Petullo <mike[@]flyn.org> - 2.1.8-1
changelog:
  - New upstream version.
  - Update Source and URL.
  - BuildRequire gdk-pixbuf2-devel for DACP.
  - BuildRequire libsoup-devel >= 2.32 for DACP.
  - BuildRequire gstreamer-plugins-base-devel >= for transcoding.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libfontenc to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added libfontenc-0.99.2-use-datadir-for-encodings.patch and invoke aclocal
    and automake to activate the changes.  This fixes a bug reported against
    mkfontscale, in which it looks in _datadir for the font encodings files,
    which was traced back to libfontenc (#173875).
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-2" to ensure that
    /usr/include/X11 is a directory rather than a symlink before this package
    gets installed, to avoid bug (#173384).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libfontenc to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated libfontenc to version 1.0.0 from X11R7 RC4
  - Added libfontenc-1.0.0-get-fontdir-from-pkgconfig.patch which now replaces
    libfontenc-0.99.2-use-datadir-for-encodings.patch by using pkgconfig to
    query fontutil.pc for fontdir.
  - Added "BuildRequires: font-utils >= 1.0.0" to find fontutil.pc
  - Removed libfontenc-0.99.2-use-datadir-for-encodings.patch


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: autoconf" temporarily as long as autoconf is needed


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions (#470219)
  - hobble the library to drop the ECC support


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-1
changelog:
  - workaround for build on S390 (#548825)
  - spec file cleanups
  - upgrade to new minor upstream release


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 1.4.6-3
changelog:
  - Make the FIPS-186-3 DSA implementation CAVS testable
  - add configurable source of RNG seed /etc/gcrypt/rngseed
    in the FIPS mode (#700388)


author: Tomas Mraz <tmraz@redhat.com> 1.5.0-8
changelog:
  - fix multilib conflict in libgcrypt-config
  - fix minor memory leaks and other bugs found by Coverity scan


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Michel Salim <salimma@fedoraproject.org> - 0.6.1-3
changelog:
  - Move typelib file to main package (# 735081)
  - Re-enable unit tests on all Fedora releases
  - -devel subpackage no longer depends on vala and gobject-introspection-devel


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.0.90-2
changelog:
  - some fixes in spec
  - moved *.vapi to devel
  - removed INSTALL from doc
  - added comment to yorba ticket link
  - corrected typo in description


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.0.90-4
changelog:
  - changed configure portion
  - added Requires:  vala for devel
  - made the file section more precise
  - bugzilla #599097 
  - changed patch to include a default LIB setting


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.4-2
changelog:
  - Fix assertion calling deprecated acl function
  - Clear the client's session when the service disconnects
  - Implement setting of Type property in gnome_keyring_item_set_info()


author: Matthias Clasen <mclasen@redhat.com> - 2.22.0-2
changelog:
  - Split the plugins capplet off into a subpackage, since we don't
    have any plugins and don't want the capplet by default


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Jindrich Novy <jnovy@redhat.com> 2.4.0-0.2
changelog:
  - review fixes, thanks to Hans de Goede: (#437285)
    - remove unused macro
    - don't exclude s390/s390x
    - preserve timestamps
    - fix license


author: Jindrich Novy <jnovy@redhat.com> 2.4.0-1
changelog:
  - backport patch from upstream to avoid segfault when
    data phase is skipped for certain devices (#435413)
  - initial build


author: Stepan Kasal <skasal@redhat.com> 2.4.0-3
changelog:
  - drop gphoto2-norpath.patch
  - use quoted here-document in %prep
  - fix some typos in m4 sources
  - run autoreconf to get autotools right


author: Jindrich Novy <jnovy@redhat.com> 2.4.1-2
changelog:
  - fix obsoletes
  - workaround problem with coreutils-6.12 and RHEL5-xen kernels
    what prevents libgphoto2 koji build


author: Jindrich Novy <jnovy@redhat.com> 2.4.2-1
changelog:
  - update to 2.4.2
  - contains many fixes in the Canon camera communication interface
  - drop build patch, no more needed


author: Jindrich Novy <jnovy@redhat.com> 2.4.6-1
changelog:
  - update to 2.4.6
  - new IDs for Kodak V803, M1063, Canon PowerShot A650IS, SD990 (aka IXUS 980IS),
    SD880IS, A480, Canon EOS 50D, Fuji FinePix S1000fd
  - many Canon related fixes


author: David Zeuthen <davidz@redhat.com> 2.4.6-3
changelog:
  - Add patch from http://sourceforge.net/tracker/?func=detail&aid=2801117&group_id=8874&atid=308874
    and generate generic udev rules for device identification (ID_GPHOTO2* properties)


author: Hans de Goede <hdegoede@redhat.com> 2.5.0-3
changelog:
  - Fix the usbscsi port driver not working, this fixes many miniature
    (keychain) photo frames no longer being accessible


author: Alexander Larsson <alexl@redhat.com> - 0.4.2-1
changelog:
  - update to 0.4.2
  - Change %description to reflect newer features
  - Remove TODO file from %doc as it's not included anymore
  - Explicitly disable the python bindings, they are in the python-gpod package in
    Extras until the Core/Extras merge


author: Todd Zullinger <tmz@pobox.com> - 0.5.2-1
changelog:
  - update to 0.5.2
  - replace %makeinstall with %{__make} DESTDIR=%{buildroot} install
  - build python bindings, merging python-gpod package from extras
  - make %setup quiet
  - patch to fixup building of the python docs, BR libxslt
  - update license tag


author: Todd Zullinger <tmz@pobox.com> - 0.6.0-2
changelog:
  - add the NEWS file, which contains some info on getting newer iPods working
  - split out API docs into a separate package
  - set %defattr for python-gpod


author: Todd Zullinger <tmz@pobox.com> - 0.6.0-8
changelog:
  - The -devel package should require gtk2-devel as well
  - Add gdk-pixbuf-2.0 to the pkg-config file requirements


author: Todd Zullinger <tmz@pobox.com> - 0.6.0-10
changelog:
  - Fix path to hal callout (this should help setup the SysInfoExtended
    file automagically)
  - Use /var/run/hald as mount dir for hal callout
  - Require hal
  - Require main package for the -doc subpackage


author: Todd Zullinger <tmz@pobox.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Make doc subpackage noarch (on Fedora >= 10)
  - Drop --with-hal-callouts-dir from configure, the upstream default works now


author: Todd Zullinger <tmz@pobox.com> - 0.7.90-1
changelog:
  - Update to 0.7.90
  - Adjust default hal callout path (#547049)
    (Temporaily use --with-hal-callouts-dir=%{_libexecdir}/scripts)


author: Todd Zullinger <tmz@pobox.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Drop upstreamed mount-dir location patch
  - Fix temp mount dir configure option typo
  - Drop duplicate libimobiledevice-devel BR
  - Remove pointless %{__$command} macros


author: Christian Krause <chkr@fedoraproject.org> - 0.8.0-5
changelog:
  - Change patch to fix 32 bit issues in the mono bindings
    (Itdb_Track data structure contained wrong values on x86 systems)


author: Christian Krause <chkr@fedoraproject.org> - 0.8.2-1
changelog:
  - Update to 0.8.2
  - Drop upstreamed patches
  - Prevent python-gpod from advertising _gpod.so in its Provides


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8.2-7
changelog:
  - libgpod.pc Requires: libimobiledevice-1.0 ... overlinking (#818594)
  - tighten subpkg deps (via %_isa)
  - omit -devel deps that (should) get autodetected already


author: Elliot Lee <sopwith@redhat.com> 2.0.0-7
changelog:
  - More missing libXau hackery (prog_as.patch so we can run auto* to pull 
  in an updated libtool)
  - _smp_mflags


author: Lennart Poettering <lpoetter@redhat.com> - 0-0.7.20100629git4176e5
changelog:
  - New snapshot
  - Split off -units package where other packages can depend on without pulling in the whole of systemd


author: Lennart Poettering <lpoetter@redhat.com> - 8-3
changelog:
  - Reexecute after installation, take ownership of /var/run/user
  - https://bugzilla.redhat.com/show_bug.cgi?id=627457
  - https://bugzilla.redhat.com/show_bug.cgi?id=627634


author: Lennart Poettering <lpoetter@redhat.com> - 10-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=630401
  - https://bugzilla.redhat.com/show_bug.cgi?id=630225
  - https://bugzilla.redhat.com/show_bug.cgi?id=626966
  - https://bugzilla.redhat.com/show_bug.cgi?id=623456


author: Lennart Poettering <lpoetter@redhat.com> - 14-1
changelog:
  - Upstream update
  - Enable hwclock-load by default
  - Obsolete readahead
  - Enable /var/run and /var/lock on tmpfs


author: Lennart Poettering <lpoetter@redhat.com> - 24-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694079
  - https://bugzilla.redhat.com/show_bug.cgi?id=693289
  - https://bugzilla.redhat.com/show_bug.cgi?id=693274
  - https://bugzilla.redhat.com/show_bug.cgi?id=693161


author: Lennart Poettering <lpoetter@redhat.com> - 25-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694788
  - https://bugzilla.redhat.com/show_bug.cgi?id=694321
  - https://bugzilla.redhat.com/show_bug.cgi?id=690253
  - https://bugzilla.redhat.com/show_bug.cgi?id=688661
  - https://bugzilla.redhat.com/show_bug.cgi?id=682662
  - https://bugzilla.redhat.com/show_bug.cgi?id=678555
  - https://bugzilla.redhat.com/show_bug.cgi?id=628004


author: Lennart Poettering <lpoetter@redhat.com> - 26-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=699394
  - https://bugzilla.redhat.com/show_bug.cgi?id=698198
  - https://bugzilla.redhat.com/show_bug.cgi?id=698674
  - https://bugzilla.redhat.com/show_bug.cgi?id=699114
  - https://bugzilla.redhat.com/show_bug.cgi?id=699128


author: Lennart Poettering <lpoetter@redhat.com> - 26-2
changelog:
  - Bugfix release
  - https://bugzilla.redhat.com/show_bug.cgi?id=707507
  - https://bugzilla.redhat.com/show_bug.cgi?id=707483
  - https://bugzilla.redhat.com/show_bug.cgi?id=705427
  - https://bugzilla.redhat.com/show_bug.cgi?id=707577


author: Michal Schmidt <mschmidt@redhat.com> - 28-3
changelog:
  - Apply patches from current upstream
  - https://bugzilla.redhat.com/show_bug.cgi?id=709909
  - https://bugzilla.redhat.com/show_bug.cgi?id=710839
  - https://bugzilla.redhat.com/show_bug.cgi?id=711015


author: Michal Schmidt <mschmidt@redhat.com> - 28-4
changelog:
  - Apply patches from current upstream.
  - Fixes memory size detection on 32-bit with >4GB RAM (BZ712341)


author: Lennart Poettering <lpoetter@redhat.com> - 35-1
changelog:
  - New upstream release
  - Update post scripts
  - Resolves: #726683, #713384, #698198, #722803, #727315, #729997, #733706, #734611


author: Michal Schmidt <mschmidt@redhat.com> - 37-2
changelog:
  - A couple of fixes from upstream:
  - Fix a regression in bash-completion reported in Bodhi.
  - Fix a crash in isolating.
  - Resolves: #717325


author: Michal Schmidt <mschmidt@redhat.com> - 38-5
changelog:
  - Build against libgee06. Reenable gtk tools.
  - Delete unused patches.
  - Add easy building of git snapshots.
  - Remove legacy spec file elements.
  - Don't mention implicit BuildRequires.
  - Configure with --disable-static.
  - Merge -units into the main package.
  - Move section 3 manpages to -devel.
  - Fix unowned directory.
  - Run ldconfig in scriptlets.
  - Split systemd-analyze to a subpackage.


author: Lennart Poettering <lpoetter@redhat.com> - 42-1
changelog:
  - New upstream release
  - Save a bit of entropy during system installation (#789407)
  - Don't own /etc/os-release anymore, leave that to fedora-release


author: Dennis Gilmore <dennis@ausil.us> - 43-2
changelog:
  - don't conflict with fedora-release systemd never actually provided
  - /etc/os-release so there is no actual conflict


author: Dennis Gilmore <dennis@ausil.us> - 44-3
changelog:
  - apply patch from upstream so we can build systemd on arm and ppc
  - and likely the rest of the secondary arches


author: Michal Schmidt <mschmidt@redhat.com> - 44-4
changelog:
  - Add triggers from Bill Nottingham to correct the damage done by
  the obsoleted systemd-units's preun scriptlet (#807457).


author: Michal Schmidt <mschmidt@redhat.com> - 185-4.gita2368a3
changelog:
  - Update to current git snapshot
  - Add systemd-readahead-analyze
  - Drop upstream patch
  - Split systemd-libs
  - Drop duplicate doc files
  - Fixed License headers of subpackages


author: Lennart Poettering <lpoetter@redhat.com> - 188-1
changelog:
  - New upstream release
  - Enable gdm and avahi by default via the preset file
  - Convert /etc/sysconfig/desktop to display-manager.service symlink
  - Enable hardened build


author: Lennart Poettering <lpoetter@redhat.com> - 188-3
changelog:
  - Remount file systems MS_PRIVATE before switching roots
  - https://bugzilla.redhat.com/show_bug.cgi?id=847418


author: Ray Strode <rstrode@redhat.com> 188-4
changelog:
  - more scriptlet fixes
  (move dm migration logic to %posttrans so the service
  files it's looking for are available at the time
  the logic is run)


author: Lennart Poettering <lpoetter@redhat.com> - 189-3
changelog:
  - Update preset policy
  - Rename preset policy file from 99-default.preset to 90-default.preset so that people can order their own stuff after the Fedora default policy if they wish


author: Lennart Poettering <lpoetter@redhat.com> - 190-1
changelog:
  - New upstream release
  - Take possession of /etc/localtime, and remove /etc/sysconfig/clock
  - https://bugzilla.redhat.com/show_bug.cgi?id=858780
  - https://bugzilla.redhat.com/show_bug.cgi?id=858787
  - https://bugzilla.redhat.com/show_bug.cgi?id=858771
  - https://bugzilla.redhat.com/show_bug.cgi?id=858754
  - https://bugzilla.redhat.com/show_bug.cgi?id=858746
  - https://bugzilla.redhat.com/show_bug.cgi?id=858266
  - https://bugzilla.redhat.com/show_bug.cgi?id=858224
  - https://bugzilla.redhat.com/show_bug.cgi?id=857670
  - https://bugzilla.redhat.com/show_bug.cgi?id=856975
  - https://bugzilla.redhat.com/show_bug.cgi?id=855863
  - https://bugzilla.redhat.com/show_bug.cgi?id=851970
  - https://bugzilla.redhat.com/show_bug.cgi?id=851275
  - https://bugzilla.redhat.com/show_bug.cgi?id=851131
  - https://bugzilla.redhat.com/show_bug.cgi?id=847472
  - https://bugzilla.redhat.com/show_bug.cgi?id=847207
  - https://bugzilla.redhat.com/show_bug.cgi?id=846483
  - https://bugzilla.redhat.com/show_bug.cgi?id=846085
  - https://bugzilla.redhat.com/show_bug.cgi?id=845973
  - https://bugzilla.redhat.com/show_bug.cgi?id=845194
  - https://bugzilla.redhat.com/show_bug.cgi?id=845028
  - https://bugzilla.redhat.com/show_bug.cgi?id=844630
  - https://bugzilla.redhat.com/show_bug.cgi?id=839736
  - https://bugzilla.redhat.com/show_bug.cgi?id=835848
  - https://bugzilla.redhat.com/show_bug.cgi?id=831740
  - https://bugzilla.redhat.com/show_bug.cgi?id=823485
  - https://bugzilla.redhat.com/show_bug.cgi?id=821813
  - https://bugzilla.redhat.com/show_bug.cgi?id=807886
  - https://bugzilla.redhat.com/show_bug.cgi?id=802198
  - https://bugzilla.redhat.com/show_bug.cgi?id=767795
  - https://bugzilla.redhat.com/show_bug.cgi?id=767561
  - https://bugzilla.redhat.com/show_bug.cgi?id=752774
  - https://bugzilla.redhat.com/show_bug.cgi?id=732874
  - https://bugzilla.redhat.com/show_bug.cgi?id=858735


author: Lennart Poettering <lpoetter@redhat.com> - 194-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=859614
  - https://bugzilla.redhat.com/show_bug.cgi?id=859655


author: Lennart Poettering <lpoetter@redhat.com> - 195-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=831665
  - https://bugzilla.redhat.com/show_bug.cgi?id=847720
  - https://bugzilla.redhat.com/show_bug.cgi?id=858693
  - https://bugzilla.redhat.com/show_bug.cgi?id=863481
  - https://bugzilla.redhat.com/show_bug.cgi?id=864629
  - https://bugzilla.redhat.com/show_bug.cgi?id=864672
  - https://bugzilla.redhat.com/show_bug.cgi?id=864674
  - https://bugzilla.redhat.com/show_bug.cgi?id=865128
  - https://bugzilla.redhat.com/show_bug.cgi?id=866346
  - https://bugzilla.redhat.com/show_bug.cgi?id=867407
  - https://bugzilla.redhat.com/show_bug.cgi?id=868603


author: Michal Schmidt <mschmidt@redhat.com> - 195-4
changelog:
  - add dmraid-activation.service to the default preset
  - add yum protected.d fragment
  - https://bugzilla.redhat.com/show_bug.cgi?id=869619
  - https://bugzilla.redhat.com/show_bug.cgi?id=869717


author: Michal Schmidt <mschmidt@redhat.com> - 195-6
changelog:
  - Fix cyclical dep between systemd and systemd-libs.
  - Avoid broken build of test-journal-syslog.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873387
  - https://bugzilla.redhat.com/show_bug.cgi?id=872638


author: Michal Schmidt <mschmidt@redhat.com> - 195-7
changelog:
  - Revert udev killing cgroup patch for F18 Beta.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873576


author: Lennart Poettering <lpoetter@redhat.com> - 195-8
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=873459
  - https://bugzilla.redhat.com/show_bug.cgi?id=878093


author: Michal Schmidt <mschmidt@redhat.com> - 196-2
changelog:
  - added spice-vdagentd.service to presets (Lennart, #876237)
  - BR cryptsetup-devel instead of the legacy cryptsetup-luks-devel provide name
  (requested by Milan Brož).
  - verbose make to see the actual build flags


author: Michal Schmidt <mschmidt@redhat.com> - 196-3
changelog:
  - Disable hardening on s390(x) because PIE is broken there and produces
  text relocations with __thread (#868839).


author: Michal Schmidt <mschmidt@redhat.com> - 197-2
changelog:
  - Added qemu-guest-agent.service to presets (Lennart, #885406).
  - Add missing pygobject3-base to systemd-analyze deps (Lennart).
  - Do not require hwdata, it is all in the hwdb now (Kay).
  - Drop dependency on dbus-python.


author: Michal Schmidt <mschmidt@redhat.com> - 201-2
changelog:
  - Automatically discover whether to run autoreconf and add autotools and git
  BuildRequires based on the presence of patches to be applied.
  - Use find -delete.


author: Harald Hoyer <harald@redhat.com> 202-2
changelog:
  - nspawn create empty /etc/resolv.conf if necessary
  - python wrapper: add sd_journal_add_conjunction()
  - fix s390 booting
  - Resolves: rhbz#953217


author: Harald Hoyer <harald@redhat.com> 202-3
changelog:
  - fix ENOENT for getaddrinfo
  - Resolves: rhbz#954012 rhbz#956035
  - crypt-setup-generator: correctly check return of strdup
  - logind-dbus: initialize result variable
  - prevent library underlinking


author: Lennart Poettering <lpoetter@redhat.com> - 204-5
changelog:
  - Rename 90-display-manager.preset to 85-display-manager.preset so that it actually takes precedence over 90-default.preset's "disable *" line (#903690)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 206-3
changelog:
  - add dependency on kmod >= 14
  - remove /var/log/journal to make journal non-persistant (#989750)
  - add hypervkvpd.service to presets (#924321)


author: Harald Hoyer <harald@redhat.com> 206-4
changelog:
  - journal: handle multiline syslog messages
  - man: Fix copy&paste error
  - core: synchronously block when logging
  - journal: immediately sync to disk as soon as we receieve an EMERG/ALERT/CRIT message
  - initctl: use irreversible jobs when switching runlevels
  - udev: log error if chmod/chown of static dev nodes fails
  - udev: static_node - don't touch permissions uneccessarily
  - tmpfiles: support passing --prefix multiple times
  - tmpfiles: introduce --exclude-prefix
  - tmpfiles-setup: exclude /dev prefixes files
  - logind: update state file after generating the session fifo, not before
  - journalctl: use _COMM= match for scripts
  - man: systemd.unit: fix volatile path
  - man: link up scope+slice units from systemd.unit(5)
  - man: there is no session mode, only user mode
  - journal: fix hashmap leak in mmap-cache
  - systemd-delta: Only print colors when on a tty
  - systemd: fix segv in snapshot creation
  - udev: hwdb - try reading modalias for usb before falling back to the composed one
  - udevd: respect the log-level set in /etc/udev/udev.conf
  - fstab-generator: respect noauto/nofail when adding sysroot mount


author: Harald Hoyer <harald@redhat.com> 206-5
changelog:
  - obsolete upstart
  Resolves: rhbz#978014
  - obsolete hal
  Resolves: rhbz#975589
  - service: always unwatch PIDs before forgetting old ones
  Resolves: rhbz#995197
  - units: disable kmod-static-nodes.service in containers
  - use CAP_MKNOD ConditionCapability
  - fstab-generator: read rd.fstab=on/off switch correctly
  - backlight: add minimal tool to save/restore screen brightness
  - backlight: instead of syspath use sysname for identifying
  - sysctl: allow overwriting of values specified in "later"
  - systemd-python: fix initialization of _Reader objects
  - udevd: simplify sigterm check
  - libudev: fix hwdb validation to look for the *new* file
  - units: make fsck units remain after exit
  - udev: replace CAP_MKNOD by writable /sys condition
  - libudev-enumerate.c:udev_enumerate_get_list_entry() fixed
  - journal: fix parsing of facility in syslog messages


author: Harald Hoyer <harald@redhat.com> 206-8
changelog:
  - support "debug" kernel command line parameter
  - journald: fix fd leak in journal_file_empty
  - journald: fix vacuuming of archived journals
  - libudev: enumerate - do not try to match against an empty subsystem
  - cgtop: fixup the online help
  - libudev: fix memleak when enumerating childs


author: Lukas Nykryn <lnykryn@redhat.com> - 207-2
changelog:
  - Advertise hibernation only if there's enough free swap
  - swap: create .wants symlink to 'auto' swap devices
  - Verify validity of session name when received from outside
  - polkit: Avoid race condition in scraping /proc
  Resolves: rhbz#1005142


author: Lukas Nykryn <lnykryn@redhat.com> - 207-5
changelog:
  - create /etc/rc.d/rc.local (#968401)
  - cgroup: always enable memory.use_hierarchy= for all cgroups (#1011575)
  - remove user@.service (#1019738)
  - drop some out-of-date references to cgroup settings (#1000004)
  - explain NAME in systemctl man page (#978954)


author: Harald Hoyer <harald@redhat.com> 207-6
changelog:
  - changed systemd-journal-gateway login shell to /sbin/nologin
  - backported a lot of bugfixes
  - udev: path_id - fix by-path link generation for scm devices
  Resolves: rhbz#888707


author: Lukas Nykryn <lnykryn@redhat.com> - 207-9
changelog:
  - treat reload failure as failure (#1036848)
  - improve journal performance (#1029604)
  - backport bugfixes (#1043525)
  - fix handling of trailing whitespace in split_quoted (#984832)
  - localed: match converted keymaps before legacy (#903776)
  - improve the description of parameter X in tmpfiles.d page (#1029604)
  - obsolete ConsoleKit (#1039761)
  - make rc.local more backward comaptible (#1039465)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 207-12
changelog:
  - shell-completion: remove load and dump from systemctl (#1048066)
  - delta: ensure that d_type will be set on every fs (#1050795)
  - tmpfiles: don't allow label_fix to print ENOENT when we want to ignore it (#1044871)
  - udev/net_id: Introduce predictable network names for Linux on System z (#870859)
  - coredumpctl: in case of error free pattern after print (#1052786)


author: Michal Sekletar <msekleta@redhat.com> - 208-1
changelog:
  - rebase to systemd-208 (#1063332)
  - do not create symlink /etc/systemd/system/syslog.service (#1055421)


author: Michal Sekletar <msekleta@redhat.com> - 208-2
changelog:
  - require redhat-release package
  - call systemd-tmpfiles after package installation (#1059345)
  - move preset policy out of systemd package (#903690)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-7
changelog:
  - setup tty permissions and group for /dev/sclp_line0 (#1070310)
  - cdrom_id: use the old MMC fallback (#1038015)
  - mount: don't send out PropertiesChanged message if actually nothing got changed (#1069718)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-8
changelog:
  - rules: mark loop device as SYSTEMD_READY=0 if no file is attached (#1067422)
  - utmp: make sure we don't write the utmp reboot record twice on each boot (#1053600)
  - rework session shutdown logic (#1047614)
  - introduce new stop protocol for unit scopes (#1064976)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-9
changelog:
  - fixes crashes in logind and systemd (#1073994)
  - run fsck before mouting root in initramfs (#1056661)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-11
changelog:
  - logind-session: save stopping flag (#1082692)
  - unit: add waiting jobs to run queue in unit_coldplug (#1083159)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-12
changelog:
  - units/serial-getty@.service: add [Install] section (#1083936)
  - units: order network-online.target after network.target (#1072431)
  - util: consider both fuse.glusterfs and glusterfs network file systems (#1080229)
  - core: make StopWhenUnneeded work in conjunction with units that fail during their start job (#986949)
  - cgroups-agent: down-grade log level (#1044386)
  - random-seed: raise POOL_SIZE_MIN constant to 1024 (#1066517)
  - delta: do not use unicode chars in C locale (#1088419)
  - core: print debug instead of error message (#1105608)
  - journald: always add syslog facility for messages coming from kmsg (#1113215)
  - fsck,fstab-generator: be lenient about missing fsck.<type> (#1098310)
  - rules/60-persistent-storage: add nvme pcie ssd scsi_id ENV (#1042990)
  - cgls: fix running with -M option (#1085455)
  - getty: Start getty on 3270 terminals available on Linux on System z (#1075729)
  - core: Added support for ERRNO NOTIFY_SOCKET  message parsing (#1106457)
  - socket: add SocketUser= and SocketGroup= for chown()ing sockets in the file system (#1111761)
  - tmpfiles: add --root option to operate on an alternate fs tree (#1111199)
  - units: make ExecStopPost action part of ExecStart (#1036276)
  - machine-id: only look into KVM uuid when we are not running in a container (#1123452)
  - util: reset signals when we fork off agents (#1134818)
  - udev: do not skip the execution of RUN when renaming a network device fails (#1102135)
  - man: mention System Administrator's Guide in systemctl manpage (#978948)
  - vconsole: also copy character maps (not just fonts) from vt1 to vt2, vt3, ... (#1002450)
  - localed: consider an unset model as a wildcard (#903776)
  - systemd-detect-virt: detect s390 virtualization (#1139149)
  - socket: introduce SELinuxContextFromNet option (#1113790)
  - sysctl: make --prefix allow all kinds of sysctl paths (#1138591)
  - man: mention localectl in locale.conf (#1049286)
  - rules: automatically online hot-added CPUs (#968811)
  - rules: add rule for naming Dell iDRAC USB Virtual NIC as 'idrac' (#1054477)
  - bash-completion: add verb set-property (#1064487)
  - man: update journald rate limit defaults (#1145352)
  - core: don't try to connect to d-bus after switchroot (#1083300)
  - localed: check for partially matching converted keymaps (#1109145)
  - fileio: make parse_env_file() return number of parsed items (#1069420)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-13
changelog:
  - tmpfiles: minor modernizations (#1147524)
  - install: when looking for a unit file for enabling, search for templates only after traversing all search directories (#1147524)
  - install: remove unused variable (#1147524)
  - bootctl: typo fix in help message (#1147524)
  - logind: ignore failing close() on session-devices (#1147524)
  - sysfs-show.c: return negative error (#1147524)
  - core: only send SIGHUP when doing first kill, not when doing final sigkill (#1147524)
  - cgroup: make sure to properly send SIGCONT to all processes of a cgroup if that's requested (#1147524)
  - core: don't send duplicate SIGCONT when killing units (#1147524)
  - efi: fix Undefined reference efi_loader_get_boot_usec when EFI support is disabled (#1147524)
  - macro: better make IN_SET() macro use const arrays (#1147524)
  - macro: make sure we can use IN_SET() also with complex function calls as first argument (#1147524)
  - core: fix property changes in transient units (#1147524)
  - load-modules: properly return a failing error code if some module fails to load (#1147524)
  - core/unit: fix unit_add_target_dependencies() for units with no dependencies (#1147524)
  - man: there is no ExecStopPre= for service units (#1147524)
  - man: document that per-interface sysctl variables are applied as network interfaces show up (#1147524)
  - journal: downgrade vaccuum message to debug level (#1147524)
  - logs-show: fix corrupt output with empty messages (#1147524)
  - journalctl: refuse extra arguments with --verify and similar (#1147524)
  - journal: assume that next entry is after previous entry (#1147524)
  - journal: forget file after encountering an error (#1147524)
  - man: update link to LSB (#1147524)
  - man: systemd-bootchart - fix spacing in command (#1147524)
  - man: add missing comma (#1147524)
  - units: Do not unescape instance name in systemd-backlight@.service (#1147524)
  - manager: flush memory stream before using the buffer (#1147524)
  - man: multiple sleep modes are to be separated by whitespace, not commas (#1147524)
  - man: fix description of systemctl --after/--before (#1147524)
  - udev: properly detect reference to unexisting part of PROGRAM's result (#1147524)
  - gpt-auto-generator: don't return OOM on parentless devices (#1147524)
  - man: improve wording of systemctl's --after/--before (#1147524)
  - cgroup: it's not OK to invoke alloca() in loops (#1147524)
  - core: don't try to relabel mounts before we loaded the policy (#1147524)
  - systemctl: --kill-mode is long long gone, don't mention it in the man page (#1147524)
  - ask-password: when the user types a overly long password, beep and refuse (#1147524)
  - logind: don't print error if devices vanish during ACL-init (#1147524)
  - tty-ask-password-agent: return negative errno (#1147524)
  - journal: cleanup up error handling in update_catalog() (#1147524)
  - bash completion: fix __get_startable_units (#1147524)
  - core: check the right variable for failed open() (#1147524)
  - man: sd_journal_send does nothing when journald is not available (#1147524)
  - man: clarify that the ExecReload= command should be synchronous (#1147524)
  - conf-parser: never consider it an error if we cannot load a drop-in file because it is missing (#1147524)
  - socket: properly handle if our service vanished during runtime (#1147524)
  - Do not unescape unit names in [Install] section (#1147524)
  - util: ignore_file should not allow files ending with '~' (#1147524)
  - core: fix invalid free() in killall() (#1147524)
  - install: fix invalid free() in unit_file_mask() (#1147524)
  - unit-name: fix detection of unit templates/instances (#1147524)
  - journald: make MaxFileSec really default to 1month (#1147524)
  - bootchart: it's not OK to return -1 from a main program (#1147524)
  - journald: Fix off-by-one error in "Missed X kernel messages" warning (#1147524)
  - man: drop references to removed and obsolete 'systemctl load' command (#1147524)
  - units: fix BindsTo= logic when applied relative to services with Type=oneshot (#1147524)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-15
changelog:
  - core: do not segfault if /proc/swaps cannot be opened (#1151239)
  - man: we don't have 'Wanted' dependency (#1152487)
  - environment: append unit_id to error messages regarding EnvironmentFile (#1147691)
  - udevd: add --event-timeout commandline option (#1154778)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-16
changelog:
  - logind: use correct "who" enum values with KillUnit. (#1155502)
  - logind: always kill session when termination is requested (#1155502)
  - udev: net_id - correctly name netdevs based on dev_port when set (#1155996)


author: Lukas Nykryn <lnykryn@redhat.com> - 208-17
changelog:
  - udev: net_id dev_port is base 10 (#1155996)
  - udev: Fix parsing of udev.event-timeout kernel parameter (#1154778)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 217-0.2
changelog:
  - spec fixes
  - core: introduce new Delegate=yes/no property controlling creation of cgroup subhierarchies


author: Lukáš Nykrýn <lnykryn@redhat.com> - 218-0.3
changelog:
  - rebase to 218
  - remove networkd tmpfiles snipets due to packaging issues
  - add resolved subpackage
  - backport some nspawn features from upstream


author: Lukas Nykryn <lnykryn@redhat.com> - 219-2
changelog:
  - udev: restore udevadm settle timeout (#1210981)
  - udev: settle should return immediately when timeout is 0 (#1210981)
  - udev: Fix ping timeout when settle timeout is 0 (#1210981)
  - detect-virt: use /proc/device-tree (#1207773)
  - ARM: detect-virt: detect Xen (#1207773)
  - ARM: detect-virt: detect QEMU/KVM (#1207773)
  - Persistent by_path links for ata devices (#1045498)
  - man: document forwarding to syslog better (#1177336)
  - man: fix typos in previous comimt (#1177336)
  - LSB: always add network-online.target to services with priority over 10 (#1189253)
  - rules: enable memory hotplug (#1105020)
  - rules: reload sysctl settings when the bridge module is loaded (#1182105)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-3
changelog:
  - console-getty.service: don't start when /dev/console is missing (#1222517)
  - resolved: Do not add .busname dependencies, when compiling without kdbus. (#1222517)
  - man: add journal-remote.conf(5) (#1222517)
  - mount: don't run quotaon only for network filesystems (#1222517)
  - mount: fix up wording in the comment (#1222517)
  - udev: net_id - fix copy-paste error (#1222517)
  - man: don't mention "journalctl /dev/sda" (#1222517)
  - units: move After=systemd-hwdb-update.service dependency from udev to udev-trigger (#1222517)
  - units: explicitly order systemd-user-sessions.service after nss-user-lookup.target (#1222517)
  - zsh-completion: update loginctl (#1222517)
  - zsh-completion: add missing -M completion for journalctl (#1222517)
  - zsh-completion: update hostnamectl (#1222517)
  - shell-completion: systemctl switch-root verb (#1222517)
  - core/automount: beef up error message (#1222517)
  - man: remove 'fs' from 'rootfsflags' (#1222517)
  - shared: fix memleak (#1222517)
  - udevd: fix synchronization with settle when handling inotify events (#1222517)
  - python-systemd: fix is_socket_inet to cope with ports (#1222517)
  - man: fix examples indentation in tmpfiles.d(5) (#1222517)
  - systemctl: avoid bumping NOFILE rlimit unless needed (#1222517)
  - exit-status: Fix "NOTINSSTALLED" typo (#1222517)
  - tmpfiles: there's no systemd-forbid-user-logins.service service (#1222517)
  - kmod-setup: load ip_tables kmod at boot (#1222517)
  - util: Fix assertion in split() on missing ' (#1222517)
  - units: set KillMode=mixed for our daemons that fork worker processes (#1222517)
  - unit: don't add automatic dependencies on device units if they aren't supported (#1222517)
  - update-done: ignore nanosecond file timestamp components, they are not reliable (#1222517)
  - sd-daemon: simplify sd_pid_notify_with_fds (#1222517)
  - fstab-generator: add x-systemd.requires and x-systemd.requires-mounts-for (#1164334)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-4
changelog:
  - core: Fix assertion with empty Exec*= paths (#1222517)
  - rules: load sg module (#1186462)
  - util: add shell_maybe_quote() call for preparing a string for shell cmdline inclusion (#1016680)
  - bus-util: be more verbose if dbus job fails (#1016680)
  - notify: fix badly backported help message (#1199644)
  - cryptsetup: craft a unique ID with the source device (#1226333)
  - systemctl: introduce --now for enable, disable and mask (#1233081)
  - udev: also create old sas paths (#957112)
  - journald: do not strip leading whitespace from messages (#1227396)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-5
changelog:
  - Revert "core: one step back again, for nspawn we actually can't wait for cgroups running empty since systemd will get exactly zero notifications about it" (#1199644)
  - bus-creds: always set SD_BUS_CREDS_PID when we set pid in the mask (#1230190)
  - sd-bus: do not use per-datagram auxiliary information (#1230190)
  - sd-bus: store selinux context at connection time (#1230190)
  - journald: simplify context handling (#1230190)
  - bash-completion: add verb set-property (#1235635)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-6
changelog:
  - sd-bus: don't inherit connection creds into message creds when we have a direct connection (#1230190)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-8
changelog:
  - sysv-generator test: Fix assertion (#1222517)
  - man: avoid line break in url (#1222517)
  - Add VARIANT as a standard value for /etc/os-release (#1222517)
  - Fix permissions on /run/systemd/nspawn/locks (#1222517)
  - generators: rename add_{root,usr}_mount to add_{sysroot,sysroot_usr}_mount (#1222517)
  - Generate systemd-fsck-root.service in the initramfs (#1222517)
  - units: fix typo in systemd-resolved.service (#1222517)
  - core: don't consider umask for SocketMode= (#1222517)
  - timedate: fix memory leak in timedated (#1222517)
  - coredump: make sure we vacuum by default (#1222517)
  - tmpfiles: don't fail if we cannot create a subvolume because a file system is read-only but a dir already exists anyway (#1222517)
  - resolved: fix crash when shutting down (#1222517)
  - resolved: allow DnsAnswer objects with no space for RRs (#1222517)
  - id128: add new sd_id128_is_null() call (#1222517)
  - journalctl: Improve boot ID lookup (#1222517)
  - test-hashmap: fix an assert (#1222517)
  - units: make sure systemd-nspawn@.slice instances are actually located in machine.slice (#1222517)
  - Revert "journald-audit: exit gracefully in the case we can't join audit multicast group" (#1222517)
  - journald: handle more gracefully when bind() fails on audit sockets (#1222517)
  - udev: link-config - fix corruption (#1222517)
  - udev/net_id: Only read the first 64 bytes of PCI config space (#1222517)
  - shared: generator - correct path to systemd-fsck (#1222517)
  - logind: Save the user’s state when a session enters SESSION_ACTIVE (#1222517)
  - small fix ru translation (#1222517)
  - kmod-setup: don't warn when ipv6 can't be loaded (#1222517)
  - Partially revert "ma-setup: simplify" (#1222517)
  - ima-setup: write policy one line at a time (#1222517)
  - ata_id: unbotch format specifier (#1222517)
  - install: explicitly return 0 on success (#1222517)
  - systemd.service.xml: document that systemd removes the PIDFile (#1222517)
  - core: handle --log-target=null when calling systemd-shutdown (#1222517)
  - man: ProtectHome= protects /root as well (#1222517)
  - timedatectl: trim non-local RTC warning to 80 chars wide (#1222517)
  - escape: fix exit code (#1222517)
  - man: information about available properties (#1222517)
  - journal: in persistent mode create /var/log/journal, with all parents. (#1222517)
  - sysv-generator: fix wrong "Overwriting existing symlink" warnings (#1222517)
  - mount: don't claim a device is gone from /proc/self/mountinfo before it is gone from *all* lines (#1222517)
  - mount: properly check for mounts currently in /proc/self/mountinfo (#1222517)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-9
changelog:
  - units: add [Install] section to tmp.mount
  - bus-util: add articles to explanation messages (#1016680)
  - bus-util: print correct warnings for units that fail but for which we have a NULL result only (#1016680)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-11
changelog:
  - journald-server: don't read audit events (#1252409)
  - everything: remove traces of --user (#1071363)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-12
changelog:
  - selinux: fix check for transient units (#1255129)
  - socket: fix setsockopt call. SOL_SOCKET changed to SOL_TCP. (#1135599)
  - selinux: fix missing SELinux unit access check (#1185120)
  - selinux: always use *_raw API from libselinux (#1256888)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-14
changelog:
  - Revert "sysctl.d: default to fq_codel, fight bufferbloat" (#1263158)
  - loginctl: print nontrivial properties in logictl show-* (#1260465)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-15
changelog:
  - login: fix label on /run/nologin (#1264073)
  - udev-rules: prandom character device node permissions (#1264112)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-16
changelog:
  - login: fix gcc warning, include missing header file (#1264073)
  - shutdown: make sure /run/nologin has correct label (#1264073)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-17
changelog:
  - sd-event: fix prepare priority queue comparison function (#1266479)
  - units: run ldconfig also when cache is unpopulated (#1265539)
  - selinux: fix regression of systemctl subcommands when absolute unit file paths are specified (#1185120)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-19
changelog:
  - udev: make naming for virtio devices opt-in (#1269216)
  - tmpfiles.d: don't clean SAP sockets either (#1186044)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-20
changelog:
  - run: synchronously wait until the scope unit we create is started (#1272368)
  - device: rework how we enter tentative state (#1283579)
  - core: Do not bind a mount unit to a device, if it was from mountinfo (#1283579)
  - logind: set RemoveIPC=no by default (#1284588)
  - sysv-generator: follow symlinks in /etc/rc.d/init.d (#1285492)
  - sysv-generator test: always log to console (#1279034)
  - man: RemoveIPC is set to no on rhel (#1284588)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1298109)
  - test sysv-generator: Check for network-online.target. (#1279034)
  - arm/aarch64: detect-virt: check dmi (#1278165)
  - detect-virt: dmi: look for KVM (#1278165)
  - Revert "journald: turn ForwardToSyslog= off by default" (#1285642)
  - terminal-util: when resetting terminals, don't wait for carrier (#1266745)
  - basic/terminal-util: introduce SYSTEMD_COLORS environment variable (#1247963)
  - ask-password: don't abort when message is missing (#1261136)
  - sysv-generator: do not join dependencies on one line, split them (#1288600)
  - udev: fibre channel: fix NPIV support (#1266934)
  - ata_id: unreverse WWN identifier (#1273306)
  - Fixup WWN bytes for big-endian systems (#1273306)
  - sd-journal: introduce has_runtime_files and has_persistent_files (#1082179)
  - journalctl: improve error messages when the specified boot is not found (#1082179)
  - journalctl: show friendly info when using -b on runtime journal only (#1082179)
  - journalctl: make "journalctl /dev/sda" work (#947636)
  - journalctl: add match for the current boot when called with devpath (#947636)
  - man: clarify what happens when journalctl is called with devpath (#947636)
  - core: downgrade warning about duplicate device names (#1296249)
  - udev: downgrade a few warnings to debug messages (#1289461)
  - man: LEVEL in systemd-analyze set-log level is not optional (#1268336)
  - Revert "udev: fibre channel: fix NPIV support" (#1266934)
  - udev: path-id: fibre channel NPIV - use fc_vport's port_name (#1266934)
  - systemctl: is-active/failed should return 0 if at least one unit is in given state (#1254650)
  - rules: set SYSTEMD_READY=0 on DM_UDEV_DISABLE_OTHER_RULES_FLAG=1 only with ADD event (#1312011)
  - s390: add personality support (#1300344)
  - socket_address_listen - do not rely on errno (#1316452)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-21
changelog:
  - path_id: reintroduce by-path links for virtio block devices (#952567)
  - journal: fix error handling when compressing journal objects (#1292447)
  - journal: irrelevant coding style fixes (#1292447)
  - install: follow unit file symlinks in /usr, but not /etc when looking for [Install] data (#1159308)
  - core: look for instance when processing template name (#1159308)
  - core: improve error message when starting template without instance (#1142369)
  - man/tmpfiles.d: add note about permissions and ownership of symlinks (#1296288)
  - tmpfiles: don't follow symlinks when adjusting ACLs, fille attributes, access modes or ownership (#1296288)
  - udev: filter out non-sensically high onboard indexes reported by the kernel (#1230210)
  - test-execute: add tests for RuntimeDirectory (#1324826)
  - core: fix group ownership when Group is set (#1324826)
  - fstab-generator: cescape device name in root-fsck service (#1306126)
  - core: add new RandomSec= setting for time units (#1305279)
  - core: rename Random* to RandomizedDelay* (#1305279)
  - journal-remote: change owner of /var/log/journal/remote and create /var/lib/systemd/journal-upload (#1327303)
  - Add Seal option in the configuration file for journald-remote (#1329233)
  - tests: fix make check failure (#1159308)
  - device: make sure to not ignore re-plugged device (#1332606)
  - device: Ensure we have sysfs path before comparing. (#1332606)
  - core: fix memory leak on set-default, enable, disable etc (#1331667)
  - nspawn: fix minor memory leak (#1331667)
  - basic: fix error/memleak in socket-util (#1331667)
  - core: fix memory leak in manager_run_generators() (#1331667)
  - modules-load: fix memory leak (#1331667)
  - core: fix memory leak on failed preset-all (#1331667)
  - sd-bus: fix memory leak in test-bus-chat (#1331667)
  - core: fix memory leak in transient units (#1331667)
  - bus: fix leak in error path (#1331667)
  - shared/logs-show: fix memleak in add_matches_for_unit (#1331667)
  - logind: introduce LockedHint and SetLockedHint (#3238) (#1335499)
  - import: use the old curl api (#1284974)
  - importd: drop dkr support (#1284974)
  - import: add support for gpg2 for verifying imported images (#1284974)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-22
changelog:
  - nspawn: when connected to pipes for stdin/stdout, pass them as-is to PID 1 (#1307080)
  - mount: remove obsolete -n (#1339721)
  - core: don't log job status message in case job was effectively NOP (#3199) (#1280014)
  - core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (#1305608)
  - logind: process session/inhibitor fds at higher priority (#1305608)
  - Teach bus_append_unit_property_assignment() about 'Delegate' property (#1337922)
  - sd-netlink: fix deep recursion in message destruction (#1330593)
  - add REMOTE_ADDR and REMOTE_PORT for Accept=yes (#1341154)
  - core: don't dispatch load queue when setting Slice= for transient units (#1343904)
  - run: make --slice= work in conjunction with --scope (#1343904)
  - myhostname: fix timeout if ipv6 is disabled (#1330973)
  - readahead: do not increase nr_requests for root fs block device (#1314559)
  - manager: reduce complexity of unit_gc_sweep (#3507) (#1344556)
  - hwdb: selinuxify a bit (#3460) (#1343648)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-23
changelog:
  - udevadm: explicitly relabel /etc/udev/hwdb.bin after rename (#1350756)
  - systemctl: return diffrent error code if service exist or not (#3385) (#1047466)
  - systemctl: Replace init script error codes with enum (#3400) (#1047466)
  - systemctl: rework "systemctl status" a bit (#1047466)
  - journal-verify: don't hit SIGFPE when determining progress (#1350232)
  - journal: avoid mapping empty data and field hash tables (#1350232)
  - journal: when verifying journal files, handle empty ones nicely (#1350232)
  - journal: explain the error when we find a non-DATA object that is compressed (#1350232)
  - journalctl: properly detect empty journal files (#1350232)
  - journal: uppercase first character in verify error messages (#1350232)
  - journalctl: make sure 'journalctl -f -t unmatched' blocks (#1350232)
  - journalctl: don't print -- No entries -- in quiet mode (#1350232)
  - sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#1342173)
  - manager: Only invoke a single sigchld per unit within a cleanup cycle (#1342173)
  - manager: Fixing a debug printf formatting mistake (#1342173)
  - core: support IEC suffixes for RLIMIT stuff (#1351415)
  - core: accept time units for time-based resource limits (#1351415)
  - time-util: add parse_time(), which is like parse_sec() but allows specification of default time unit if none is specified (#1351415)
  - core: support <soft:hard> ranges for RLIMIT options (#1351415)
  - core: fix rlimit parsing (#1351415)
  - core: dump rlim_cur too (#1351415)
  - install: fix disable via unit file path (#1348208)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-25
changelog:
  - units: increase watchdog timeout to 3min for all our services (#1267707)
  - core: bump net.unix.max_dgram_qlen really early during boot (#1267707)
  - core: fix priority ordering in notify-handling (#1267707)
  - tests: fix personality tests on ppc64 and aarch64 (#1361049)
  - systemctl: consider service running only when it is in active or reloading state (#3874) (#1362461)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-26
changelog:
  - install: do not crash when processing empty (masked) unit file (#1159308)
  - Revert "install: fix disable via unit file path" (#1348208)
  - systemctl: allow disable on the unit file path, but warn about it (#3806) (#1348208)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-27
changelog:
  - tmpfiles: enforce ordering when executing lines (#1365870)
  - Introduce bus_unit_check_load_state() helper (#1256858)
  - core: use bus_unit_check_load_state() in transaction_add_job_and_dependencies() (#1256858)
  - udev/path_id: correct segmentation fault due to missing NULL check (#1365556)
  - rules: load sg driver also when scsi_target appears (#45) (#1322773)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-29
changelog:
  - fix gcc warnings about uninitialized variables (#1318994)
  - journalctl: rework code that checks whether we have access to /var/log/journal (#1318994)
  - journalctl: Improve boot ID lookup (#1318994)
  - journalctl: only have a single exit path from main() (#1318994)
  - journalctl: free all command line argument objects (#1318994)
  - journalctl: rename boot_id_t to BootId (#1318994)
  - util: introduce CMSG_FOREACH() macro and make use of it everywhere (#1318994)
  - journald: don't employ inner loop for reading from incoming sockets (#1318994)
  - journald: fix count of object meta fields (#1318994)
  - journal-cat: return a correct error, not -1 (#1318994)
  - journalctl: introduce short options for --since and --until (#1318994)
  - journal: s/Envalid/Invalid/ (#1318994)
  - journald: dispatch SIGTERM/SIGINT with a low priority (#1318994)
  - lz4: fix size check which had no chance of working on big-endian (#1318994)
  - journal: normalize priority of logging sources (#1318994)
  - Fix miscalculated buffer size and uses of size-unlimited sprintf() function. (#1318994)
  - journal: Drop monotonicity check when appending to journal file (#1318994)
  - journalctl: unify how we free boot id lists a bit (#1318994)
  - journalctl: don't trust the per-field entry tables when looking for boot IDs (#1318994)
  - units: remove udev control socket when systemd stops the socket unit (#49) (#1370133)
  - logind: don't assert if the slice is missing (#1371437)
  - core: enable transient unit support for slice units (#1370299)
  - sd-bus: bump message queue size (#1371205)
  - install: fix disable when /etc/systemd/system is a symlink (#1285996)
  - rules: add NVMe rules (#3136) (#1274651)
  - rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974) (#1274651)
  - rules: fix for possible whitespace in the "model" attribute (#1274651)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-30
changelog:
  - systemctl,pid1: do not warn about missing install info with "preset" (#1373950)
  - systemctl/core: ignore masked units in preset-all (#1375097)
  - shared/install: handle dangling aliases as an explicit case, report nicely (#1375097)
  - shared/install: ignore unit symlinks when doing preset-all (#1375097)
  - 40-redhat.rules: don't hoplug memory on s390x (#1370161)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-30.1
changelog:
  - If the notification message length is 0, ignore the message (#4237) (#1381573)
  - systemctl: suppress errors with "show" for nonexistent units and properties (#1380686)
  - 40-redhat.rules: disable auto-online of hot-plugged memory on IBM z Systems (#1381123)
  - pid1: don't return any error in manager_dispatch_notify_fd() (#4240) (#1381573)
  - pid1: process zero-length notification messages again (#1381573)
  - pid1: more informative error message for ignored notifications (#1381573)


author: Michal Sekletar <msekleta@redhat.com> - 219-30.5
changelog:
  - on update from systemd version 219-21 and older generate udev rules that preserve old network interface names on VMware VMs (#1391944)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-31
changelog:
  - If the notification message length is 0, ignore the message (#4237) (#1380175)
  - systemctl: suppress errors with "show" for nonexistent units and properties (#1380259)
  - 40-redhat.rules: disable auto-online of hot-plugged memory on IBM z Systems (#1375603)
  - pid1: don't return any error in manager_dispatch_notify_fd() (#4240) (#1380259)
  - pid1: process zero-length notification messages again (#1380259
  - pid1: more informative error message for ignored notifications (#1380259)
  - manager: 219 needs u->id in log_unit_debug (#1380259)
  - virt: add possibility to skip the check for chroot (#1379852)
  - load-fragment: fix parsing values in bytes and prevent returning -ERANGE incorrectly (#1396277)
  - core: fix assertion check (#1396312)
  - tmp.mount.hm4: After swap.target (#3087) (#1298355)
  - make sure all swap units are ordered before the swap target (#1298355)
  - Recognise Lustre as a remote file system (#4530) (#1390542)
  - unit: don't add Requires for tmp.mount (#1372249)
  - core: return 0 from device_serialize() (#1403249)
  - mtd_probe: include stdint (#1404251)
  - tests: fix failure of test-execute if /dev/mem is not available (#5028) (#1410056)
  - sd-journal: properly export has_{persistent|runtime}_files() (#1409527)
  - core: add possibility to set action for ctrl-alt-del burst (#4105) (#1353028)
  - failure-action: generalize failure action to emergency action (#1353028)
  - core: use emergency_action for ctr+alt+del burst (#1353028)
  - udev/path_id: introduce support for NVMe devices (#4169) (#1373150)
  - core: fix CapabilityBoundingSet merging (#1409586)
  - core: fix capability bounding set parsing (#1409586)
  - core: make parsing of RLIMIT_NICE aware of actual nice levels (#1409588)
  - shared: fix double free in unmask (#5005) (#1409997)
  - shared: fix double free in link (#1409997)
  - shared: check strdup != NULL (#1409997)
  - core: improve error message when RefuseManualStart(Stop) is hit (#5132) (#1026648)
  - systemctl: fix 'is-enabled' exit status on failure when executed in chroot (#4773) (#1413964)
  - man: document that the automatic journal limits are capped to 4G by default (#1418547)
  - random-seed: raise POOL_SIZE_MIN to 1024 (#1386824)
  - bash-completion: add support for --now (#5155) (#1351806)
  - basic: fix touch() creating files with 07777 mode (#1416062)
  - udev: net_id: add support for phys_port_name attribute (#4506) (#1392426)
  - install: introduce UnitFileFlags (#1413041)
  - shared, systemctl: teach is-enabled to show installation targets (#1413041)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-32
changelog:
  - udev: fix crash with invalid udev.log-priority (#1245293)
  - core: make exec code a bit more readable (#1421181)
  - core: Private*/Protect* options with RootDirectory (#1421181)
  - core: if the start command vanishes during runtime don't hit an assert (#1421658)
  - systemctl: make sure that --now is carried out (#5209) (#1417459)
  - udev: inform systemd how many workers we can potentially spawn (#4036) (#1361601)
  - service: log_unit consumes id of unit not a unit (#1421658)
  - automount: add expire support (#1354410)
  - fstab-generator: fix memleak (#1354410)
  - remove bus-proxyd (#1317518)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-33
changelog:
  - execute: Add new PassEnvironment= directive (#1426214)
  - test-execute: Add tests for new PassEnvironment= directive (#1426214)
  - test-execute: Clarify interaction of PassEnvironment= and MANAGER_USER (#1426214)
  - load-fragment: resolve specifiers in RuntimeDirectory (#1428110)
  - Add microphone mute keymap for Dell Precision (#1413477)
  - hwdb: update micmute YCODE on device node at DELL LATITUDE laptops for mic mute button. (#5012) (#1413477)
  - udev/path_id: improve and enhance bus detection for Linux on z Systems (#1274401)
  - core: port config_parse_bounding_set to extract_first_word (#1387398)
  - core: simplify parsing of capability bounding set settings (#1387398)
  - test: add test for capability bounding set parsing (#1387398)
  - capabilities: keep bounding set in non-inverted format. (#1387398)
  - capabilities: added support for ambient capabilities. (#1387398)
  - man: add AmbientCapabilities entry. (#1387398)
  - test-capability: rebase to upstream version (#1387398)
  - namespace: don't fail on masked mounts (#1433687)
  - sysv-generator: Provides: $network should also pull network.target to transaction (#5652) (#1438749)
  - Install: correctly report symlink creations (#1435098)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-35
changelog:
  - tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
  - util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-37
changelog:
  - core: add support for the "pids" cgroup controller (#1337244)
  - core: add new DefaultTasksMax= setting for system.conf (#1337244)
  - logind: add a new UserTasksMax= setting to logind.conf (#1337244)
  - core: support percentage specifications on TasksMax= (#1337244)
  - core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
  - core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-39
changelog:
  - tests: set tasks_max to infinity (#1337244)
  - Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
  - sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
  - load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
  - core: manager: add some missing dbus properties (#1427927)
  - core: manager: expose DefaultLimit* as properties on dbus (#1427927)
  - fstab-generator: remove bogus condition (#1446171)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-40
changelog:
  - readahead-collect: don't print warning message when handling symlink (#1387095)
  - tmpfiles: don't recursively descend into journal directories in /var (#1411199)
  - tmpfiles: also set acls on /var/log/journal (#1411199)
  - tmpfiles: set acls on system.journal explicitly (#1411199)
  - sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
  - units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
  - systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
  - sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-6
changelog:
  - Require libguestfs 1.7.17 (newer version in RHEL 6.1).
  - Require febootstrap-supermin-helper instead of febootstrap
    resolves: RHBZ#670299.


author: Richard W.M. Jones <rjones@redhat.com> - 7.0-2
changelog:
  - Resync against Rawhide package (ntfs-3g 2013.1.13).
  - Drop HAL file since HAL is dead.
    resolves: rhbz#819939


author: Richard W.M. Jones <rjones@redhat.com> - 7.1-2
changelog:
  - New package for RHEL 7.1
  - Rebase to ntfs-3g 2014.2.15
    resolves: rhbz#1100319
  - Change the package so it works with supermin5.
  - Remove dependency on external FUSE.


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Matthias Clasen <mclasen@redhat.com> 2.26.1-3
changelog:
  - Fix multilib parallel-installability (#477672)
  - Remove some old optimizations that are now no-ops


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Doug Ledford <dledford@redhat.com> - 1.3.11-1
changelog:
  - Update to latest upstream release (dependency for another package)
  - Enable valgrind in build
  - Related: bz1092538


author: Doug Ledford <dledford@redhat.com> - 1.3.12-1
changelog:
  - Build on s390
  - Update to latest version to work with OPA enabled libibumad
  - Related: bz1169962, bz1186159


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.4-3
changelog:
  - disable broken python/cython bindings (for now, currently FTBFS)
  - track soname
  - tighten  subpkg deps


author: Peter Hutterer <peter.hutterer@redhat.com> 0.13.0-5
changelog:
  - Reduce palm detection threshold to 70mm (#1209753)
  - Don't allow taps in the top part of the palm zone (#1209753)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.17.0-5
changelog:
  - Use physical values for the hystersis where possible (#1230462)
  - Disable right-edge palm detection when edge scrolling is active
    (fdo#90980)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.18.0-4
changelog:
  - Steepen deceleration curve to get better 1:1 movement on slow speeds
    (#1231304)
  - Provide custom accel method for <1000dpi mice (#1227039)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.20.0-6
changelog:
  - Fix broken 2fg scrolling on single-touch touchpads (#1246651)
  - Drop distance threshold for 2fg gesture detection (#1246868)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.4-3
changelog:
  - disable MT for semi-mt devices to solve the various two- and three-finger
    issues (at the cost of pinch gestures) (#1295073)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-2
changelog:
  - Apply several important fixes from upstream 1.10 branch
  - Related: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-3
changelog:
  - Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names'
                        setting


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-4
changelog:
  - Resolves: #983587 - sss_debuglevel did not increase verbosity in
                        sssd_pac.log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-5
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
changelog:
  - New upstream release 1.11 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
  - Related: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
changelog:
  - New upstream release 1.11.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
changelog:
  - New upstream release 1.11.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
  - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
changelog:
  - Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with
                             sssd_be crash
  - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is
                             from different domain than group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-2
changelog:
  - Skip netgroups that don't provide well-formed triplets
  - Related: rhbz#991549 -  sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-3
changelog:
  - Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-4
changelog:
  - Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad
                             manpage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-5
changelog:
  - Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved
                             using ad_matching_rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-6
changelog:
  - Resolves: rhbz#1028057 - Improve detection of the right domain when
                             processing group with members from several domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-7
changelog:
  - Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the
                             "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-9
changelog:
  - Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when
                             using id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-10
changelog:
  - Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext
                             password to ldap_default_authtok


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-11
changelog:
  - Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is
                             never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-13
changelog:
  - Resolves: rhbz#1023409 - Valgrind sssd "Syscall param
                             socketcall.sendto(msg) points to uninitialised
                             byte(s)"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-14
changelog:
  - Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups
                             are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-15
changelog:
  - Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global
                             Catalog
  - Resolves: rhbz#1030483 - Individual group search returned multiple
                             results in GC lookups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-16
changelog:
  - The AD provider is able to resolve group memberships for groups with
    Global and Universal scope
  - Related: rhbz#1033096 - tokenGroups do not work reliable with Global
                            Catalog


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-17
changelog:
  - Re-initialize subdomains after provider startup
  - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is
                            never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-21
changelog:
  - Resolves: rhbz#1048184 - Group lookup does not return member with multiple
                             names after user lookup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-22
changelog:
  - Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses
                             FOREST keyword.
  - Fix two memory leaks in the PAC responder (Related: rhbz#991065)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-23
changelog:
  - Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter
                              is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-25
changelog:
  - Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit
                             fallbacks and overrides settings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-26
changelog:
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-28
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain
  - Fix return value when searching for AD domain flat names
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-29
changelog:
  - Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when
                             ldap_search_base cannot be parsed.
  - Fix a typo in the man page
  - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-30
changelog:
  - Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude
                             uidNumber in filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-31
changelog:
  - Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud
                             DEBUG message in case Kerberos authentication
                             times out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-32
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-34
changelog:
  - Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd
                            sudoers plugin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-35
changelog:
  - Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while
                             regular lookups connect to GC


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-36
changelog:
  - Resolves: rhbz#1059253 - Man page states default_shell option supersedes
                             other shell options but in fact override_shell does.
  - Use the right domain for AD site resolution
  - Related: rhbz#743503 -  [RFE] sssd should support DNS sites


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-38
changelog:
  - Resolves: rhbz#1059753 - Warn with a user-friendly error message when
                             permissions on sssd.conf are incorrect


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-39
changelog:
  - Resolves: rhbz#872177 - [RFE] subdomain homedir template should be
                            configurable/use flatname by default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-40
changelog:
  - Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes
                             have been replicated to the Global Catalog or not


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-41
changelog:
  - Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE
                             attribute when expiring users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-43
changelog:
  - Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send'
                             should be added to RHEL7


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-44
changelog:
  - Resolves: rhbz#1033069 - Configuring two different provider types might
                             start two parallel enumeration tasks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-45
changelog:
  - Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading
                             spaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-48
changelog:
  - Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from
                             ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-49
changelog:
  - Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                             manually, if ID mapping configuration changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-50
changelog:
  - Pull some follow up man page fixes from upstream
  - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                            manually, if ID mapping configuration changes
  - Related: rhbz#1064908 - MAN: Remove misleading memberof example from
                            ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-51
changelog:
  - Fix idmap documentation
  - Bump idmap version info
  - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-52
changelog:
  - Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together
                             with the AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-53
changelog:
  - Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name
                             component in home dir path


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-54
changelog:
  - Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA
                             correctly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-55
changelog:
  - Resolves: rhbz#1073631 - sssd fails to handle expired passwords
                             when OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-56
changelog:
  - Related: rhbz#1072995 -  AD group inconsistency when using AD provider
                             in sssd-1.11-40


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-57
changelog:
  - Related: rhbz#1066096 - not retrieving homedirs of AD users with
                            posix attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-58
changelog:
  - Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong
                            sysdb subdir when a trusted user logs in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-59
changelog:
  - Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA
                            password migration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-60
changelog:
  - Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file
                             with format expected by pam_selinux


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68
changelog:
  - Resolves: rhbz#1097286 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-69
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-70
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-2
changelog:
  - Use libsemanage for SELinux label changes
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-3
changelog:
  - Add the low-level server changes for running as unprivileged user
  - Package the libsss_semange library needed for SELinux label changes
  - Related: rhbz#1113783 - sssd should run under unprivileged user 
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-4
changelog:
  - Fix regressions caused by views patches when SSSD is connected to a
    pre-4.0 IPA server
  - Related: rhbz#1109756 - Rebase SSSD to 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-5
changelog:
  - Amend the sssd-ldap man page with info about lockout setup
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137014 - Shell fallback mechanism in SSSD 
  - Resolves: rhbz#790854 - 4 functions with reference leaks within sssd (src/python/pyhbac.c)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-6
changelog:
  - Include the responder and packaging patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1153518 - service lookups returned in lowercase with
                             case_sensitive=preserving
  - Resolves: rhbz#1158809 - Enumeration shows only a single group multiple
                             times


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-8
changelog:
  - Support overriding SSH public keys with views
  - Support extended attributes via the extop plugin
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137010 - disable midpoint refresh for netgroups if ptask
                             refresh is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-9
changelog:
  - Include the ldap_child and selinux_child patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-10
changelog:
  - Fix two regressions in the new selinux_child process
  - Related: rhbz#1113783 - sssd should run under unprivileged user
  - Resolves: rhbz#1132365 - Remove password from the PAM stack if OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-12
changelog:
  - Move adding the user from pretrans to pre, copy adding the user to
    sssd-krb5-common and sssd-ipa as well in order to work around yum
    ordering issue
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-15
changelog:
  - Resolves: rhbz#1153603 - Proxy Provider: Fails to lookup case sensitive
                             users and groups with case_sensitive=preserving


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-16
changelog:
  - Use upstreamed patches for the rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-17
changelog:
  - Update man page to clarify TGs should be disabled with a custom search base
  - Related: rhbz#1161741 - TokenGroups for LDAP provider breaks in corner cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-18
changelog:
  - Support views for IPA users
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-19
changelog:
  - Resolves: rhbz#1153593 - Manpage description of case_sensitive=preserving
                            is incomplete


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-20
changelog:
  - Resolves: rhbz#1163742 - "debug_timestamps = false" and "debug_microseconds
                             = true" do not work after enabling journald
                             with sssd.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-22
changelog:
  - Handle IPA group names returned from the extop plugin
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-23
changelog:
  - Add an option that describes where to put generated krb5 files to
  - Related: rhbz#1135043 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-24
changelog:
  - Resolves: rhbz#1165794 - sssd does not work with custom value of option
                             re_expression


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-25
changelog:
  - Use alternatives for libwbclient
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-26
changelog:
  - Handle migrating clients between views
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-27
changelog:
  - Resolves: rhbz#1166727 - pam_sss domains option: Untrusted users from
                             the same domain are allowed to auth.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-28
changelog:
  - Fix typo in libwbclient-devel alternatives invocation
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-30
changelog:
  - krb5_child and ldap_child do not call Kerberos calls as root
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-31
changelog:
  - Resolves: rhbz#1169739 - selinuxusermap rule does not apply to trusted
                             AD users
  - Enable running unit tests without cmocka
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-32
changelog:
  - Resolves: rhbz#1124320 - [FJ7.0 Bug]: getgrent returns error because sss
                             is written in nsswitch.conf as default.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-34
changelog:
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Remove Coverity warnings in krb5_child code
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Rebuild to add several forgotten Patch entries
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Sumit Bose <sbose@redhat.com> - 1.12.2-37
changelog:
  - Resolves: rhbz#1169459 - sssd-ad: The man page description to enable GPO HBAC
                             Policies are unclear
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Sumit Bose <sbose@redhat.com> - 1.12.2-38
changelog:
  - Resolves: rhbz#1171215 - Crash in function get_object_from_cache
  - Resolves: rhbz#1171383 - getent fails for posix group with AD users after
                             login
  - Resolves: rhbz#1171382 - getent of AD universal group fails after group users
                             login
  - Resolves: rhbz#1170300 - Access is not rejected for disabled domain
  - Resolves: rhbz#1162486 - Error processing external groups with
                             getgrnam/getgrgid in the server mode
  - Resolves: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-39
changelog:
  - Resolves: rhbz#1175408 - SSSD should not fail authentication when only allow
                             rules are used
  - Resolves: rhbz#1175705 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-40
changelog:
  - Resolves: rhbz#1177140 - gpo_child fails if "log level" is enabled in smb.conf
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-43
changelog:
  - Resolves: rhbz#1182183 - pam_sss(sshd:auth): authentication failure with
                             user from AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-44
changelog:
  - Resolves: rhbz#1184140 - Users saved throug extop don't have the
                             originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-45
changelog:
  - Open socket to the PAC responder in krb5_child before dropping root
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-46
changelog:
  - Handle GID override in MPG domains
  - Handle views with mixed-case domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-55
changelog:
  - Fix endianess bug in fill_id()
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-57
changelog:
  - Run the restart in sssd-common posttrans
  - Explicitly require libwbclient
  - Resolves: rhbz#1187113 - sssd deamon was not running after RHEL 7.1 upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.2
changelog:
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.3
changelog:
  - Set a pointer in ldap_child to NULL to avoid warnings
  - Related: rhbz#1198759 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.4
changelog:
  - Handle case where there is no default and no rules
  - Resolves: rhbz#1192314 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.5
changelog:
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.6
changelog:
  - Initialize variable in the views code in one success and one failure path
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-59
changelog:
  - Resolves: rhbz#1201840 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-60
changelog:
  - Filter out domain-local groups during AD initgroups operation
  - Related: rhbz#1201840 - SSSD downloads too much information when fetching
                            information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0.1alpha
changelog:
  - Resolves: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Relax the libldb requirement
  - Resolves: rhbz#1221992 - sssd_be segfault at 0 ip sp error 6 in
                             libtevent.so.0.9.21
  - Resolves: rhbz#1221839 - SSSD group enumeration inconsistent due to
                             binary SIDs
  - Resolves: rhbz#1219285 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Resolves: rhbz#1217559 - [RFE] Support GPOs from different domain controllers
  - Resolves: rhbz#1217350 - ignore_group_members doesn't work for subdomains
  - Resolves: rhbz#1217127 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1216285 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set
  - Resolves: rhbz#1214719 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1214718 - Overridde with --login fails trusted adusers
                             group membership resolution
  - Resolves: rhbz#1214716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1214337 - Overrides with --login work in second attempt
  - Resolves: rhbz#1212489 - Disable the cleanup task by default
  - Resolves: rhbz#1211830 - external users do not resolve with
                             "default_domain_suffix" set in IPA server sssd.conf
  - Resolves: rhbz#1210854 - Only set the selinux context if the context
                             differs from the local one
  - Resolves: rhbz#1209483 - When using id_provider=proxy with
                             auth_provider=ldap, it does not work as expected
  - Resolves: rhbz#1209374 - Man sssd-ad(5) lists Group Policy Management
                             Editor naming for some policies but not for all
  - Resolves: rhbz#1208507 - sysdb sudo search doesn't escape special characters
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface
  - Resolves: rhbz#1206566 - SSSD does not update Dynamic DNS records if
                             the IPA domain differs from machine hostname's
                             domain
  - Resolves: rhbz#1206189 - [bug] sssd always appends default_domain_suffix
                             when checking for host keys
  - Resolves: rhbz#1204203 - sssd crashes intermittently
  - Resolves: rhbz#1203945 - [FJ7.0 Bug]: getgrent returns error because
                             sss is written in nsswitch.conf as default
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only
  - Resolves: rhbz#1202245 - SSSD's HBAC processing is not permissive enough
                             with broken replication entries
  - Resolves: rhbz#1201271 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything
  - Resolves: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                             user logs in with password and token code from IPA
  - Resolves: rhbz#1199541 - Read and use the TTL value when resolving a
                             SRV query
  - Resolves: rhbz#1199533 - [RFE] Implement background refresh for users,
                             groups or other cache objects
  - Resolves: rhbz#1199445 - Does sssd-ad use the most suitable attribute
                             for group name?
  - Resolves: rhbz#1198477 - ccname_file_dummy is not unlinked on error
  - Resolves: rhbz#1187103 - [RFE] User's home directories are not taken
                             from AD when there is an IPA trust with AD
  - Resolves: rhbz#1185536 - In ipa-ad trust, with 'default_domain_suffix' set
                             to AD domain, IPA user are not able to log unless
                             use_fully_qualified_names is set
  - Resolves: rhbz#1175760 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires
  - Resolves: rhbz#1163806 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1205160 - Complain loudly if backend doesn't start due
                             to missing or invalid keytab


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 upstream
  - Related: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Resolves: rhbz#910187 - [RFE] authenticate against cache in SSSD
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-3
changelog:
  - Add support for InfoPipe wildcard requests
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1206565 - [RFE] Add dualstack and multihomed support
  - Resolves: rhbz#1187146 - If v4 address exists, will not create nonexistant
                             v6 in ipa domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-8
changelog:
  - Remove OTP from PAM stack correctly
  - Related: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                            user logs in with password and token code from IPA
  - Handle sssd-owned keytabs when sssd runs as root
  - Related: rhbz#1205144 - RFE: Support one-way trusts for IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-9
changelog:
  - Fix memory cache integration tests
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups
  - Resolves: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-10
changelog:
  - Resolves: rhbz#1244949 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-11
changelog:
  - Remove binary blob from SC patches as patch(1) can't handle those
  - Related: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-12
changelog:
  - More memory cache related fixes
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-13
changelog:
  - Fix missing dependency of sssd-tools
  - Resolves: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                             named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-14
changelog:
  - Bump release number
  - Related: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                            named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-15
changelog:
  - Resolves: rhbz#1249015 - KDC proxy not working with SSSD krb5_use_kdcinfo
                             enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-16
changelog:
  - Fix race condition in invalidating the memory cache
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-19
changelog:
  - Resolves: rhbz#1202724 - [RFE] Add a way to lookup users based on CAC
                             identity certificates


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-20
changelog:
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA
                            subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-22
changelog:
  - Resolves: rhbz#1244950 - Add index for 'objectSIDString' and maybe to
                             other cache attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-23
changelog:
  - Support import/export for local overrides
  - Support FQDNs for local overrides
  - Resolves: rhbz#1254184 - sss_override does not work correctly when
                             'use_fully_qualified_names = True'


author: Martin Kosek <mkosek@redhat.com> - 1.13.0-25
changelog:
  - Resolves: rhbz#1254189 - sss_override contains an extra parameter --debug
                             but is not listed in the man page or in
                             the arguments help


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-26
changelog:
  - Resolves: rhbz#1256398 - sssd cannot resolve user names containing
                             backslash with ldap provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-29
changelog:
  - Resolves: rhbz#1263587 - sss_override --name doesn't work with RFC2307
                             and ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-30
changelog:
  - Patches required for better handling of failover with one-way trusts
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA subdomain
                            code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-31
changelog:
  - Remove -d from sss_override manpage
  - Related: rhbz#1259512 - sss_override : The local override user is not found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-33
changelog:
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-34
changelog:
  - Fix a Coverity warning in dyndns code
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-35
changelog:
  - Resolves: rhbz#1250135 - Detect re-established trusts in the IPA
                             subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-36
changelog:
  - Resolves: rhbz#1266107 - AD: Conditional jump or move depends on
                             uninitialised value


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40
changelog:
  - Resolves: rhbz#1270827 - local overrides: don't contact server with
                             overridden name/id


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-42
changelog:
  - Resolves: rhbz#1300740 - [RFE] IPA: resolve external group memberships
                             of IPA groups during getgrnam and getgrgid


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-44
changelog:
  - Resolves: rhbz#1308913 - sssd be memory leak in sssd's memberof plugin
  - More patches from upstream related to the memory leak


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-45
changelog:
  - Resolves: rhbz#1334159 - IPA provider crashes if a netgroup from a
                             trusted domain is requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-46
changelog:
  - Resolves: rhbz#1296902 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-47
changelog:
  - Resolves: rhbz#1336706 - sssd_nss memory usage keeps growing when trying
                             to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-48
changelog:
  - Resolves: rhbz#1290853 - [sssd] Trusted (AD) user's info stays in sssd
                             cache for much more than expected.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-49
changelog:
  - Resolves: rhbz#1336688 - sssd tries to resolve global catalog servers
                             from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-50
changelog:
  - Build the PAC plugin with krb5-1.14
  - Related: rhbz#1336688 - sssd tries to resolve global catalog servers
                            from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0alpha-1
changelog:
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - The rebase includes fixes for the following bugzillas:
  - Resolves: rhbz#789477 - [RFE] SUDO: Support the IPA schema
  - Resolves: rhbz#1059972 - RFE: SSSD: Automatically assign new slices for
                             any AD domain
  - Resolves: rhbz#1233200 - man sssd.conf should clarify details about
                             subdomain_inherit option.
  - Resolves: rhbz#1238144 - Need better libhbac debuging added to sssd
  - Resolves: rhbz#1265366 - sss_override segfaults when accidentally adding
                             --help flag to some commands
  - Resolves: rhbz#1269512 - sss_override: memory violation
  - Resolves: rhbz#1278566 - crash in sssd when non-Englsh locale is used
                             and pam_strerror prints non-ASCII characters
  - Resolves: rhbz#1283686 - groups get deleted from the cache
  - Resolves: rhbz#1290378 - Smart Cards: Certificate in the ID View
  - Resolves: rhbz#1292238 - extreme memory usage in libnfsidmap sss.so
                             plug-in when resolving groups with many members
  - Resolves: rhbz#1292456 - sssd_be AD segfaults on missing A record
  - Resolves: rhbz#1294670 - Local users with local sudo rules causes
                             LDAP queries
  - Resolves: rhbz#1296618 - Properly remove OriginalMemberOf attribute in
                             SSSD cache if user has no secondary groups anymore
  - Resolves: rhbz#1299553 - Cannot retrieve users after upgrade from 1.12
                             to 1.13
  - Resolves: rhbz#1302821 - Cannot start sssd after switching to non-root
  - Resolves: rhbz#1310877 - [RFE] Support Automatic Renewing of Kerberos
                             Host Keytabs
  - Resolves: rhbz#1313014 - sssd is not closing sockets properly
  - Resolves: rhbz#1318996 - SSSD does not fail over to next GC
  - Resolves: rhbz#1327270 - local overrides: issues with sub-domain users
                             and mixed case names
  - Resolves: rhbz#1342547 - sssd-libwbclient: wbcSidsToUnixIds should not
                             fail on lookup errors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0beta1-2
changelog:
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - Resolves: rhbz#790113 - [RFE] "include" directive in sssd.conf
  - Resolves: rhbz#874985 - [RFE] AD provider support for automount lookups
  - Resolves: rhbz#879333 - [RFE] SSSD admin tool request - status overview
  - Resolves: rhbz#1140022 - [RFE]Allow sssd to add a new option that would
                             specify which server to update DNS with
  - Resolves: rhbz#1290380 - RFE: Improve SSSD performance in large
                             environments
  - Resolves: rhbz#883886 - sssd: incorrect checks on length values during
                            packet decoding
  - Resolves: rhbz#988207 - sssd does not detail which line in configuration
                            is invalid
  - Resolves: rhbz#1007969 - sssd_cache does not remove have an option to
                             remove the sssd database
  - Resolves: rhbz#1103249 - PAC responder needs much time to process large
                             group lists
  - Resolves: rhbz#1118257 - Users in ipa groups, added to netgroups are
                             not resovable
  - Resolves: rhbz#1269018 - Too much logging from sssd_be
  - Resolves: rhbz#1293695 - sssd mixup nested group from AD trusted domains
  - Resolves: rhbz#1308935 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user
  - Resolves: rhbz#1315766 - SSSD PAM module does not support multiple
                             password prompts (e.g. Password + Token) with sudo
  - Resolves: rhbz#1316164 - SSSD fails to process GPO from Active Directory
  - Resolves: rhbz#1322458 - sssd_be[11010]: segfault at 0 ip 00007ff889ff61bb
                             sp 00007ffc7d66a3b0 error 4 in
                             libsss_ipa.so[7ff889fcf000+5d000]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-1
changelog:
  - New upstream release 1.14.0
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - Resolves: rhbz#835492 - [RFE] SSSD admin tool request - force reload
  - Resolves: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)
  - Resolves: rhbz#1278691 - Please fix rfc2307 autofs schema defaults
  - Resolves: rhbz#1287209 - default_domain_suffix Appended to User Name
  - Resolves: rhbz#1300663 - Improve sudo protocol to support configurations
                             with default_domain_suffix
  - Resolves: rhbz#1312275 - Support authentication indicators from IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-2
changelog:
  - Explicitly BuildRequire newer ding-libs
  - Resolves: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-3
changelog:
  - Sync a few minor patches from upstream
  - Fix a failover issue
  - Resolves: rhbz#1334749 - sssd fails to mark a connection as bad on
                             searches that time out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-5
changelog:
  - Sync a few minor patches from upstream
  - Fix sssctl manpage
  - Fix nss-tests unit test on big-endian machines
  - Fix several issues in the config schema
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-6
changelog:
  - Resolves: rhbz#1349882 - sssd does not work under non-root user
  - Also cherry-pick a few patches from upstream to fix config schema
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-7
changelog:
  - Resolves: rhbz#1350520 - [abrt] sssd-common: ipa_dyndns_update_send():
                             sssd_be killed by SIGSEGV


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-9
changelog:
  - Resolves: rhbz#1354414 - New or modified ID-View User overrides are not
                             visible unless rm -f /var/lib/sss/db/*cache*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-11
changelog:
  - fix capaths output
  - Resolves: rhbz#1344940 - GSSAPI error causes failures for child domain
                             user logins across IPA - AD trust
  - also fix Coverity issues in the secrets responder and suppress noisy
    debug messages when setting the timestamp cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-12
changelog:
  - handle unresolvable sites more gracefully
  - Resolves: rhbz#1346011 - sssd is looking at a server in the GC of a
                             subdomain, not the root domain.
  - fix compilation warnings in unit tests


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-13
changelog:
  - Resolves: rhbz#1304992 - Handle overriden name of members in the
                             memberUid attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-15
changelog:
  - Resolves: rhbz#1364118 - [abrt] [faf] sssd: unknown function():
                             /usr/libexec/sssd/sssd_nss killed by 11
  - Resolves: rhbz#1361563 - Wrong pam error code returned for password
                             change in offline mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-16
changelog:
  - Cherry-pick patches from upstream that fix several regressions
  - Avoid checking local users in all cases
  - Resolves: rhbz#1353951 - sssd_pam leaks file descriptors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-17
changelog:
  - Fix regressions in the simple access provider
  - Resolves: rhbz#1360806 - sssd does not start if sub-domain user is used
                             with simple access provider
  - Apply a number of specfile patches to better match the upstream spefile
  - Related: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-18
changelog:
  - Resolves: rhbz#1349900 - gpo search errors out and gpo_cache file is
                             never created


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-19
changelog:
  - Add several small fixes related to the config API
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-20
changelog:
  - Resolves: rhbz#1290500 - [feat] command to manually list
                             fo_add_server_to_list information


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-21
changelog:
  - Resolves: rhbz#1271280 - sssd stores and returns incorrect information
                             about empty netgroup (ldap-server: 389-ds)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-22
changelog:
  - Resolves: rhbz#1268874 - Add an option to disable checking for trusted
                             domains in the subdomains provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-24
changelog:
  - Add socket-activation plumbing for the sssd-secrets responder
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-25
changelog:
  - Fix RPM scriptlet plumbing for the sssd-secrets responder
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-26
changelog:
  - Resolves: rhbz#1368324 - libsss_autofs.so is packaged in two packages
                             sssd-common and libsss_autofs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-27
changelog:
  - Resolves: rhbz#1362023 - SSSD fails to start when ldap_user_extra_attrs
                             contains mail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-28
changelog:
  - Resolves: rhbz#1364033 - sssd exits if clock is adjusted backwards
                             after boot


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-31
changelog:
  - Apply forgotten patch
  - Resolves: rhbz#1368496 - sssd is not able to authenticate with alias
  - Resolves: rhbz#1366470 - sssd: throw away the timestamp cache if
                             re-initializing the persistent cache
  - Fix deleting non-existent secret
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-32
changelog:
  - Resolves: rhbz#1371152 - SSSD qualifies principal twice in IPA-AD trust
                             if the principal attribute doesn't exist on the
                             AD side


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-35
changelog:
  - Fix permissions for the private pipe directory
  - Resolves: rhbz#1362716 - selinux avc denial for vsftp login as ipa user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-37
changelog:
  - Resolves: rhbz#1373444 - unable to create group in sssd cache
  - Resolves: rhbz#1373577 - unable to add local user in sssd to a group in sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-38
changelog:
  - Resolves: rhbz#1372753 - Access denied for user when access_provider =
                             krb5 is set in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-39
changelog:
  - Resolves: rhbz#1375182 - SSSD goes offline when the LDAP server returns
                             sizelimit exceeded


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-40
changelog:
  - Resolves: rhbz#1375299 - sss_groupshow <user> fails with error "No such
                             group in local domain. Printing groups only
                             allowed in local domain"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-42
changelog:
  - Resolves: rhbz#1371631 - login using gdm calls for gdm-smartcard when
                             smartcard authentication is not enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-44
changelog:
  - Resolves: rhbz#1372075 - AD provider: SSSD does not retrieve a domain-local
                             group with the AD provider when following AGGUDLP
                             group structure across domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-45
changelog:
  - Resolves: rhbz#1378911 - No supplementary groups are resolved for users
                             in nested OUs when domain stanza differs from AD
                             domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-1
changelog:
  - Update to upstream 1.15.0
  - Resolves: rhbz#1393824 - Rebase SSSD to version 1.15
  - Resolves: rhbz#1407960 - wbcLookupSid() fails in pdomain is NULL
  - Resolves: rhbz#1406437 - sssctl netgroup-show Cannot allocate memory
  - Resolves: rhbz#1400422 - Use-after free in resolver in case the fd is
                             writeable and readable at the same time
  - Resolves: rhbz#1393085 - bz - ldap group names don't resolve after
                             upgrading sssd to 1.14.0 if ldap_nesting_level is set to 0
  - Resolves: rhbz#1392444 - sssd_be keeps crashing
  - Resolves: rhbz#1392441 - sssd fails to start after upgrading to RHEL 7.3
  - Resolves: rhbz#1382602 - autofs map resolution doesn't work offline
  - Resolves: rhbz#1380436 - sudo: ignore case on case insensitive domains
  - Resolves: rhbz#1378251 - Typo In SSSD-AD Man Page
  - Resolves: rhbz#1373427 - Clock skew makes SSSD return System Error
  - Resolves: rhbz#1306707 - Need better handling of "Server not found in
                             Kerberos database"
  - Resolves: rhbz#1297462 - Don't include 'enable_only=sssd' in the localauth
                             plugin config


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-2
changelog:
  - Fix several packaging issues, notably the p11_child is no longer setuid
    and the libwbclient used a wrong version number in the symlink


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream 1.15.1
  - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
  - Resolves: rhbz#1327085 - Don't prompt for password if there is already
                             one on the stack
  - Resolves: rhbz#1378722 - [RFE] Make GETSIDBYNAME and GETORIGBYNAME
                             request aware of UPNs and aliases
  - Resolves: rhbz#1405075 - [RFE] Add PKINIT support to SSSD Kerberos provider
  - Resolves: rhbz#1416526 - Need correction in sssd-krb5 man page
  - Resolves: rhbz#1418752 - pam_sss crashes in do_pam_conversation if no
                             conversation function is provided by the
                             client app
  - Resolves: rhbz#1419356 - Fails to accept any sudo rules if there are
                             two user entries in an ldap role with the same
                             sudo user
  - Resolves: rhbz#1421622 - SSSD - Users/Groups are cached as mixed-case
                             resulting in users unable to sign in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-1
changelog:
  - Update to upstream 1.15.2
  - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
  - Resolves: rhbz#1418728 - IPA - sudo does not handle associated conflict
                             entries
  - Resolves: rhbz#1386748 - sssd doesn't update PTR records if A/PTR zones
                             are configured as non-secure and secure
  - Resolves: rhbz#1214491 - [RFE] Make it possible to configure AD subdomain
                             in the SSSD server mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-2
changelog:
  - Resolves: rhbz#1340711 - [RFE] Use one smartcard and certificate for
                             authentication to distinct logon accounts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-4
changelog:
  - Resolves: rhbz#1330196 - [RFE] Short name input format with SSSD for
                             users from all domains when domain autodiscovery
                             is used or when IPA client resolves trusted AD
                             domain users
  - Also backport some buildtime fixes for the KCM responder
  - Related: rhbz#1396012 - [RFE] KCM ccache daemon in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-5
changelog:
  - Resolves: rhbz#1434991 - Issue processing ssh keys from certificates in
                             ssh respoder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-6
changelog:
  - Resolves: rhbz#1425891 - Support delivering non-POSIX users and groups
                             through the IFP and PAM interfaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-7
changelog:
  - Fix off-by-one error in the KCM responder
  - Related: rhbz#1396012 - [RFE] KCM ccache daemon in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-9
changelog:
  - Resolves: rhbz#1414023 - Create troubleshooting tool to determine if a
                             failure is in SSSD or not when using layered
                             products like RH-SSO/CFME etc


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-10
changelog:
  - Resolves: rhbz#1427195 - sssd_nss consumes more memory until restarted
                             or machine swaps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-11
changelog:
  - Resolves: rhbz#1438374 - [abrt] [faf] sssd: vfprintf():
                             /usr/libexec/sssd/sssd_be killed by 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-12
changelog:
  - Resolves: rhbz#1432112 - sssctl config-check does not give any error
                             when default configuration file is not present


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-13
changelog:
  - Resolves: rhbz#1438388 - [abrt] [faf] sssd: unknown function():
                             /usr/libexec/sssd/sssd_pam killed by 6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-14
changelog:
  - Resolves: rhbz#1415167 - pam_acct_mgmt with pam_sss.so fails in
                             unprivileged container unless
                             selinux_provider = none is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-15
changelog:
  - Resolves: rhbz#1431858 - Wrong principal found with ad provider and long
                             host name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-16
changelog:
  - Resolves: rhbz#1402532 - D-Bus interface of sssd is giving inappropriate
                             group information for trusted AD users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-17
changelog:
  - Allow completely server-side unqualified name resolution if the domain order is set,
    do not require any client-side changes
  - Related: rhbz#1330196 - [RFE] Short name input format with SSSD for users from
                            all domains when domain autodiscovery is used or when
                            IPA client resolves trusted AD domain users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-18
changelog:
  - Remove an unused variable from the sssd-secrets responder
  - Related: rhbz#1398701 - [sssd-secrets] https proxy talks plain http
  - Improve two DEBUG messages in the client trust code to aid troubleshooting
  - Fix standalone application domains
  - Related: rhbz#1425891 - Support delivering non-POSIX users and groups
                            through the IFP and PAM interfaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-19
changelog:
  - Resolves: rhbz#1428866 - Using ad_enabled_domains configuration option
                             in sssd.conf causes nameservice lookups to fail.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-20
changelog:
  - Resolves: rhbz#1441545 - With multiple subdomain sections id command
                             output for user is not displayed for both domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-21
changelog:
  - Resolves: rhbz#1446139 - Infopipe method ListByCertificate does not
                             return the users with overrides


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-22
changelog:
  - Resolves: rhbz#1427749 - SSSD in server mode iterates over all domains
                             for group-by-GID requests, causing unnecessary
                             searches


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.2-23
changelog:
  - Resolves: rhbz#1430494 - expect sss_ssh_authorizedkeys and
                             sss_ssh_knownhostsproxy manuals to be packaged
                             into sssd-common package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-24
changelog:
  - Resolves: rhbz#1434992 - Wrong pam return code for user from subdomain
                             with ad_access_filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-25
changelog:
  - Resolves: rhbz#1445445 - Smart card login fails if same cert mapped to
                             IdM user and AD user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-28
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15
  - Also apply an additional patch for rhbz#1441545


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-29
changelog:
  - Reapply patch by Lukas Slebodnik to fix upgrade issues with libwbclient
  - Resolves: rhbz#1439457 - SSSD does not start after upgrade from 7.3 to 7.4 
  - Resolves: rhbz#1449107 - error: %pre(sssd-common-1.15.2-26.el7.x86_64)
                             scriptlet failed, exit status 3


author: Sumit Bose <sbose@redhat.com> - 1.15.2-30
changelog:
  - Resolves: rhbz#1449726 - sss_nss_getlistbycert() does not return results from
                             multiple domains
  - Resolves: rhbz#1447098 - sssd unable to search dbus for ipa user by
                             certificate
  - Additional patch for rhbz#1440132


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-31
changelog:
  - Resolves: rhbz#1446535 - Group resolution does not work in subdomain
                             without ad_server option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-32
changelog:
  - Resolves: rhbz#1306707 - Need better debug message when krb5_child
                             returns an unhandled error, leading to a
                             System Error PAM code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-34
changelog:
  - Resolves: rhbz#1446302 - crash in sssd-kcm due to a race-condition
                             between two concurrent requests


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-36
changelog:
  - Resolves: rhbz#1389796 - Smartcard authentication with UPN as logon name
                             might fail
  - Fix Coverity issues in patches for rhbz#1445445


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-37
changelog:
  - Resolves: rhbz#1428906 - sssd intermittently failing to resolve groups
                             for an AD user in IPA-AD trust environment.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-38
changelog:
  - Resolves: rhbz#1457644 - Segfault in access_provider = krb5 is set in
                             sssd.conf due to an off-by-one error when
                             constructing the child send buffer
  - Resolves: rhbz#1456531 - Option name typos are not detected with validator
                             function of sssctl config-check command in domain
                             sections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-39
changelog:
  - Resolves: rhbz#1450094 - Properly support IPA's promptusername config
                             option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-40
changelog:
  - Resolves: rhbz#1449729 - org.freedesktop.sssd.infopipe.GetUserGroups
                             does not resolve groups into names with AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-43
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-44
changelog:
  - Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                             after changing default_domain_suffix to
                             ADdomin in /etc/sssd/sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-47
changelog:
  - Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                             most of the entries once the cleanup task kicks in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-48
changelog:
  - Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                             information retured by the KDC during
                             PKINIT/Smartcard authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-49
changelog:
  - Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                             from trusted domains with the same name when
                             shortname user resolution is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50
changelog:
  - Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                             connected to AD child domain


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Marc Wiriadisastra <marc@mwiriadi.id.au> - 0.0-0.3.20060920alpha
changelog:
  - Got source using wget -N
  - Removed some doc's
  - Shifted doc line for doc package
  - Added install -p


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Steve Dickson <steved@redhat.com> 0.24-3
changelog:
  - Used the newly added --with-pluginpath config flag to 
    redefine where the plugins live (bz 664641).


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.5.95-1.git20120713
changelog:
  - update to 0.9.5.95 (0.9.6-rc1)  snapshot
  - editor: fixed UI mnemonics
  - editor: fix defaults for PPP echo values
  - applet: various crash and stability fixes
  - applet: show IPv6 addressing page for VPN plugins that support it
  - applet: port to GSettings and split out 0.8 -> 0.9 migration code into standalone tool


author: Dan Williams <dcbw@redhat.com> - 0.9.5.96-1
changelog:
  - Update to 0.9.6-rc2
  - lib: recognize PKCS#12 files exported from Firefox
  - lib: fix some wireless dialog crashes


author: Dan Williams <dcbw@redhat.com> - 0.9.7.997-1
changelog:
  - Update to 0.9.7.997 (0.9.8-beta2)
  - editor: better handling of gateway entry for IPv4
  - editor: fix some mnemonics (rh #893466)
  - editor: fix saving connection when ignoring CA certificate
  - editor: enable Bridge connection editing
  - editor: hide widgets not relevant for VPN connections


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-1.git20130327
changelog:
  - Update to 0.9.8.2 snapshot
  - Updated translations
  - editor: don't overwrite bridge/bond master interface name with UUID
  - applet: fix WWAN PIN dialog invalid "label1" entry widget
  - editor: fix allowed values for VLAN ID and MTU
  - editor: preserve existing PPP connection LCP echo failure and reply values
  - editor: ensure changes to the STP checkbox are saved
  - editor: hide BSSID for AdHoc connection (rh #906133)
  - editor: fix random data sneaking into IPv6 route gateway fields
  - editor: fix handling of initial entry for MAC address widgets


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-3.git20130430
changelog:
  - editor: fix possible crash canceling connection edit dialog
  - applet: only request secrets from the user when allowed to
  - applet: fix signal icons with newer libpng
  - applet: fix possible crash getting secrets with libsecret


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-5.git20130906
changelog:
  - editor: fix missing user/password when re-editing a connection (rh #1000564)
  - editor: fix handling of missing CA certificate prompts (rh #758076) (rh #809489)
  - editor: fix handling of bonding modes (rh #953076)
  - applet/editor: add InfiniBand device support (rh #867273)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-6.git20130906
changelog:
  - libnm-gtk: fix for enabling the Apply button for PEAP and TTLS (rh #1000564)
  - libnm-gtk: only save CA certificate ignored value when connection is saved
  - editor: fix display of VLAN parent interface


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-7.git20131011
changelog:
  - editor: add support for Team devices (rh #1003646)
  - editor: don't use deprecated WEP40 and WEP104 values for pairwise (rh #1005171)
  - editor: add 'primary' option for bond interfaces (rh #1013727)
  - editor: dis-allow IPv6 scopes in DNS server entry (rh #962449)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-8.git20131108
changelog:
  - editor: improve handling of NPAR/SRIOV devices in bonds (rh #804527)
  - editor: allow creating bridge masters without slaves


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-9.git20131212
changelog:
  - applet: fix crash if some resources were not available (rh #1034500)
  - editor: default to user-saved secrets and allow changing secret storage (rh #879566)
  - applet/editor: fix various Coverity-found defects (rh #1025894)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-13.git20140307
changelog:
  - Update to new git master snapshot
  - connection-editor: allow VLANs/slaves of more device types (rh #1045203)
  - connection-editor: add DCB configuration UI (bgo #711032) (rh #1068688)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.3-1.git20160615.28a0e28
changelog:
  - New snapshot:
  - applet: make new auto connections only available for current user (rh #1176042)
  - editor: allow forcing always-on-top windows for installer (rh #1097883)
  - editor: allow changing bond MTU (rh #1177582)
  - editor: use ifname instead of UUID in slaves' master property (rh #1083186)
  - editor: allow adding Bluetooth connections (rh #1229471)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.6-1
changelog:
  - Align with the 1.0.6 upstream release:
  - editor: add support for setting MTU on team connections (rh #1255927)
  - editor: offer bond connections in vlan slave picker (rh #1255735)


author: Jiří Klimeš <jklimes@redhat.com> - 1.0.6-2
changelog:
  - libnm-gtk: fix a possible crash on widgets destroy (rh #1267326)
  - libnm-gtk: use symbolic icons for password store menu (rh #1267330)


author: Lubomir Rintel <lrintel@redhat.com> - 1.4.0-1
changelog:
  - Update to network-manager-applet 1.4.0 release
  - c-e: add editor for teaming devices (rh #1079465)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-0.1.git20170326.f260f8a
changelog:
  - Update to network-manager-applet 1.8 snapshot
  - c-e: add missing mnemonic characters to buttons (rh #1434317)
  - c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


author: Christopher Aillon <caillon@redhat.com> - 0.3.0-4
changelog:
  - Require a desktop-notification-daemon to be present.  Currently,
    this is notify-daemon, but libnotify doesn't specifically require
    that one.  Require 'desktop-notification-daemon' which daemons
    providing compatible functionality are now expected to provide.


author: Luke Macken <lmacken@redhat.com> - 0.4.2-3
changelog:
  - Add upstream patch libnotify-0.4.2-status-icon.patch to emit the correct
    property change notification 'status-icon' instead of 'attach-icon'


author: Christopher Aillon <caillon@redhat.com> - 0.4.2-4
changelog:
  - Add upstream patch (r2899) to correct an invalid assertion when
    creating notifications using status icons


author: Matthias Clasen <mclasen@redhat.com> - 0.4.4-1
changelog:
  - Update to 0.4.4, which contains important bug fixes 
    and memory leak fixes
  - Require pkgconfig in the -devel package


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.1-1
changelog:
  - Fix and simplify udev rule.
  - Fedora:
    - Fix minimum RAM requirements for F16 and F17.
  - Add data on:
    - Fedora 18
    - GNOME 3.6
    - Ubuntu 12.10
  - Fixes to doc build.
  - Install script:
    - Add get_config_param method.
    - Differenciate between expected/output script names.
    - Add more utility functions.
  - Add 'installer-reboots' parameter to medias.
  - osinfo-detect does not die of DB loading errors anymore.
  - More type-specific entity value getters/setters.
  - Fixe and update RNG file.
  - Add 'subsystem' property/attribute to devices.


author: Christophe Fergeau <cfergeau@redhat.com> 0.2.5-1
changelog:
  - New upstream release 0.2.5
  - Disable udev rule as it's no longer required with newer
    systemd/util-linux


author: Christophe Fergeau <cfergeau@redhat.com> - 0.2.5-2
changelog:
  - BuildRequires /usr/bin/pod2man as this will automatically pick the right
    package rather than conditionally requiring a package that is only
    available in f19+
  - Do not Requires: udev when building libosinfo without its udev rule
    (which is done on f19+)


author: Miroslav Lichvar <mlichvar@redhat.com> 14:0.9.5-1
changelog:
  - split from tcpdump package (#193657)
  - update to 0.9.5
  - don't package static library
  - maintain soname


author: Miroslav Lichvar <mlichvar@redhat.com> 14:1.1.1-3
changelog:
  - ignore /sys/net/dev files on ENODEV (#693943)
  - drop ppp patch
  - compile with -fno-strict-aliasing


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Bastien Nocera <bnocera@redhat.com> 1.5.0-1
changelog:
  - Disable vala, as it was disabled upstream:
  http://git.gnome.org/browse/libpeas/commit/?id=1031aaeeef282ab2bb65cb6ae48fa4abff453c4d


author: Krzysztof Czurylo <krzysztof.czurylo@intel.com> - 1.1-1
changelog:
  - NVML 1.1 release
  - Update link to source tarball
  - Add libpmempool subpackage
  - Remove obsolete patches


author: Jeff Moyer <jmoyer@redhat.com> - 1.2.1-1.el7
changelog:
  - Update to latest stable release
  - Pull in pending stable patches for the test harness
  - disable % check temporarily until all test issues are resolved
  - Resolves: bz#1383467 bz#1382407


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.0-2
changelog:
  - remove "." from Summary
  - Add "check-devel to BuildRequires
  - Add "make check" to check section
  - Changed a buildroot to RPM_BUILD_ROOT
  - Document alphatag, numcomm and dirty variables.


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.1-1
changelog:
  - SPEC: add procps to BuildRequire
  - SPEC: remove automake and autoconf from BuildRequire
  - SPEC: remove call to ./autogen.sh
  - SPEC: update to new upstream version 0.4.1
  - LOOP: check read() return value
  - DOCS: add missing @param on new timeout argument
  - BUILD: only set -g and -O options if explicitly requested.
  - BUILD: Remove unneccessary check for library "dl"
  - BUILD: improve the release build system


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.0-1
changelog:
  - LOOP: handle errors from the poll function
  - LOOP: make the item type applicable to jobs too.
  - LOOP: fix the todo calculations.
  - TEST: check for a single job causing a cpu spin
  - LOOP: prevent jobs from consuming too much cpu.
  - Get coverity to ignore this warning.
  - Change example code to use fgets instead of gets
  - LOG: pass the result of qb_log_thread_start() back to the user
  - Fix some issues found by clang
  - Add clang-analyzer check
  - Add a split timer to the stopwatch.
  - IPC: merge common code into new function
  - IPC: better handle a disconnect been called from within connection_created()
  - IPC: fix scary typo
  - IPC: fix server error handling


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.1-1
changelog:
  - Fix "make distcheck" add include path to AM_CPPFLAGS
  - Bump the version to 0.10.1
  - clang: Remove unused code
  - TEST: make the ipc failure test closer to corosync's case.
  - RB: add a debug message if trying to read a message of the wrong size
  - IPC: split up the recv into chuncks of 2 seconds. (#788742)
  - Be more consistent with the internal logs.
  - LOOP: make it possible to pass in NULL as the default loop instance
  - RB: use the proper struct not the typedef in the implementation.
  - RB: Fix potential mem leak
  - Don't mix enums (QB_TRUE/TRUE)
  - use random() not rand()
  - Remove dead code
  - set umask before calling mkstemp()
  - Use safer versions of string functions (strcpy -> strlcpy)
  - Increase the coverity aggressiveness
  - TEST: make the loop ratelimit test more forgiving.


author: Angus Salkeld <asalkeld@redhat.com> - 0.11.1-1
changelog:
  - configue libqb to not use epoll as it seems broken (#800865)
  - LOOP: remove some old timerfd code.
  - TEST: add a test to check the order of the jobs
  - LOOP: when new jobs are added they are added to the head instead of the tail.
  - LOG: Now the array is self locking we can make the lookup array dynamic
  - Add locking to the array when growing.
  - IPC: make the _request_q_len_get() function more obvious.
  - IPC: fix multiple receives from qb_ipc_us_recv()
  - IPC: make sure that the wrong union member is not written to.
  - TIMER: check for null timer handle

  Wed Mar 7 2012  Angus Salkeld <asalkeld@redhat.com> - 0.11.0-1
  - ARRAY: cleanup the pointer sizeof()
  - LOG: turn off __attribute__(section) for powerpc (not working)
  - TESTS: move the util tests into "slow-tests" (i.e. optional)
  - TEST: make the test_priority the same type as in the callsite
  - LOG: make the log arrays manually grow-able since we need to lock the calls.
  - RB: fix test failure on ppc
  - RB: change the name of the size to word_size to be more clear
  - TEST: add some more signal tests.
  - LOOP: fix deletion of signal handlers when they are pending
  - LOOP: signal handlers were always added as high priority.
  - TEST: deal with mac's limited sed
  - check: add debugging to the configure options and remove unused options
  - TEST: properly clear the filters
  - LOG: expose the mechanism to get a dynamic callsite.
  - Revert part of my COARSE grained timer commit
  - Remove timerfd usage and go back to timelist.
  - UTIL: if possible use COARSE resolution clocks - they are much faster.
  - ARRAY: save memory (in the bins array) and allow holes in the array
  - LOOP: add qb_loop_timer_is_running()
  - LOOP: allow stop() and run() to be called with NULL loop instance.
  - LOOP: fix doxygen parameter comment
  - LOG: add stdout target
  - LOOP: add a function to delete jobs
  - LOG: remove debug printf's
  - LOG: remove an old/incorrect doxygen comment.
  - LOG: add a hostname %H format specifier.
  - LOG: Add qb_log_filter_fn_set()


author: Angus Salkeld <asalkeld@redhat.com> - 0.13.0-1
changelog:
  - Remove unneccessary __attribute__ ((aligned(8))) from internal headers
  - IPC: add a new function to get (and alloc) the extended stats.
  - Revert "Add the event queue length to the connection stats."
  - IPC: cleanup better on a failed client connect.
  - IPC(soc): be more consistent with control struct size
  - IPC: kill a compiler warning
  - IPC(soc): pass in the correct size into munmap()
  - TEST: Use /bin/sh not /bin/bash
  - TEST: check for lost shared mem on bsd too
  - rb: cleanup the semaphores
  - Fix some small issues in ./check
  - Cleanup the .gitignore files
  - configure.ac tweaks
  - Remove HZ and use sysconf instead.
  - SUN_LEN() macro is present if __EXTENSIONS__ is defined on Illumos
  - PF_UNIX is a POSIX standard name
  - Test for log facility names
  - IPC: drop log message to debug.
  - IPC: fix retrying of partial recv's and sends.
  - IPC: initialize enough shared mem for all 3 one way connections.
  - IPC: keep retrying to recv the socket message if partially recv'ed (part 2)
  - IPC: keep retrying to recv the socket message if partially recv'ed
  - IPC: handle the server shutdown better
  - IPC: handle a connection disconnect from the server better
  - IPC: make it possible to send events in the connected callback.
  - Add the event queue length to the connection stats.
  - IPC: add a is_connected client side function.
  - Fix typo in ./check
  - docs: clarify the need to use request/response headers
  - Remove unused local variable
  - IPC: change the socket recv function to read the response header.
  - Add some special commands into the ipc example
  - TEST: improve the tracing in the ipc tests.
  - Make "make (s)rpm" work more reliably
  - TEST: add a test to confirm we get the events we send.
  - TEST: reuse send_and_check for events.
  - IPC: make it possible for a root client to talk to a non-root server.
  - Run ./Lindent in the examples directory
  - Add some debug code to the ipcclient example
  - IPC: make sure ipc (socket) clients can connect to a server running as root.
  - IPC: allow qb to bump the max_message_size
  - IPC: check for a sane minimum max_message_size
  - add rpl_sem.h loop_poll_int.h to noinst_headers
  - Handle errors more consistently
  - call recv_ready on socket types
  - Handle a recv of size 0
  - make bsd shm path better by default.
  - Fix kqueue on freebsd.
  - Get the example socket includes right.
  - Fix kqueue compiling.
  - POLL: seperate out the poll/epoll and add kqueue
  - Test existence of getpeer* functions
  - Add inet header to tcpclient example
  - Don't link with setpshared if unavailable
  - NetBSD doesn't have semun defined
  - Use MADV_NOSYNC only on systems where available
  - Use SCHED_BATCH only on platforms where available
  - Fix a bug introduced by the bsd patch.
  - Cleanup the selection of semaphores to use
  - Fix some leaks in the logging.
  - Try and improve the portability on bsd variants.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.0-1
changelog:
  LOG: fix threaded logging.
  Add user control of the permissions that are set on the shared mem files
  LOG: Restrict string trucation during serialization to when a precision is specified
  LOG: Gracefully fail when the caller exceeds QB_LOG_MAX_LEN
  LOG: Observe field widths when serializing string arguments
  RB: use the same mechanism in reclaim as read/peek to detect end-of-ring
  Add needs_response_ack option to ./check
  RB: fix wrong sem_flg IPC_NOWAIT option
  TESTS: fix warning about unused functions
  Remove D_FORTIFY_SOURCE from check.
  Open shared mem file in /dev/shm only for linux
  Don't use msg_flags on solaris (recvmsg).
  Turn off attribute_section on solaris
  ipc example: add -e (events) option
  IPC: if the server returns EAGAIN or ETIMEOUT the check the connection
  LOG: make it possible to fsync() on each file log.
  IPC: make sure that the created callback happens before dispatches
  LOG: fix the printing of %p in the blackbox
  IPC: On bsd's use the notifier for responses
  IPC: interpret ECONNRESET and EPIPE as ENOTCONN
  cleanup some warnings
  config: use newer AC_COMPILE_IFELSE()
  blackbox: fix %p formatting
  LOG: put all fields in the blackbox (added priority and tags)
  example: make the priority uint8_t
  Remove strerror out of check_funcs
  RB: fix compiler warning.
  Add replacement function stpcpy
  Add missing AC_TYPE_UINT16_T to configure.ac
  Use AC_FUNC_STRERROR_R and STRERROR_R_CHAR_P
  Add stpcpy strcasecmp to the check_funcs
  Move some conditional defines into code (from the configure script)
  Remove some unused configure checks
  Remove message queues
  Check for union semun properly
  Blackbox: provide more space for log messages when reading from the blackbox.
  Add the blackbox reader manpage to the spec file
  Enable error logging for the blackbox reader
  RB: Read the file size into an initialized variable of the correct size
  Add a tool to dump the blackbox.
  RB: to be safer save the read and write pointers at the top of the blackbox
  avoid unwarranted use of strncpy: use memcpy instead
  blackbox: fix the print_from_file()
  RB: add an option to not use any semaphores
  LOG: tweak the blackbox format string
  LOG: accept NULL strings into the blackbox
  LOG: protect close and reload from calling log
  Add benchmark option (-b) to examples/ipcclient
  TEST: make rbreader/writer more like the other benchmarking apps
  IPC: log the connection description in all logs
  TEST: re-organise the ipc test suites
  IPC: only modify the dispatch if we get EAGAIN
  Correctly display timestamp in blackbox


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.1-1
changelog:
  RB: set the new read pointer after clearing the header (#839605).
  RB: improve the debug print outs
  RB: be more explicit about the word alignment
  RB: cleanup the macros for wrapping the index
  RB: use sem_getvalue as a tie breaker when read_pt == write_pt
  RB: if read or peek don't get the message then re-post to the semaphore
  RB: convert the rb_peek() status into a recv like status.
  RB: use internal reclaim function
  IPC: use calloc instead of malloc to fix valgrind warnings
  Upgrade the doxygen config.
  Fix a valgrind error.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.2-1
changelog:
  Get libqb building on cygwin.
  ipc_us: slightly more robust cmsg handling
  ipc_us: on Linux, set SO_PASSCRED on the sending socket too
  ipc_us: clear request unused fields
  TEST: Include writing and reading the blackbox in the log_long_msg test
  LOG: fix qb_vsnprintf_deserialize()
  blackbox: fix 64-bit big-endian issues
  Remove IPC_NEEDS_RESPONSE_ACK and turn off shm ipc on solaris
  Define unix path max for openbsd
  Only turn on ipc_needs_response_ack=yes for solaris
  Some improvements to kqueue usage.
  kqueue: drop log message to trace.
  Fix splint warning
  openbsd requires netinet/in.h before arpa/inet.h
  Avoid strcpy() use strlcpy() instead.
  Fix kqueue complile warnings
  openbsd doesn't have EBADMSG
  openbsd has a different UNIX_PATH_MAX
  LOG: change qb_vsprintf_serialize() into qb_vsnprintf_serialize()
  TEST: increase timeout to 6 secs as the recv timeout is 5 secs
  TEST: get the logic right - grrr.
  Turn off attribute_section on netbsd
  Some missing pshared semaphore checks
  Cleanup the checks for pshared semaphores
  Add a config check for pthread_mutexattr_setpshared
  Remove uses of timersub and use qb_util_stopwatch
  RB: change the #error to ENOTSUP if no usable shared process sem
  LOOP-KQUEUE: fix reference before assignment.
  build: fix libqb.pc creation and make maintainer-clean
  LOG: Make sure the semaphores are initialized.
  build: remove bashism in cc support check
  Catch disconnected sockets on Solaris
  Don't free rb->shared_hdr in qb_rb_create_from_file()
  Check error return of qb_ipcs_uc_recv_and_auth()
  Fix removal of automatically installed doc files when building rpms
  Add the mailing list to the travis email notifications.
  Work around debian not setting the arch path in splint.
  Remove color-tests and parallel-tests automake options.
  Add travis continuous integration config
  LOG: Invoke custom log filter function if tag changes
  tests/rbwriter: don't ignore write failure
  ipcs: avoid use-after-free for size-0 || disconnect-request


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.3-1
changelog:
  IPC: Pass the timeout to poll() if the recv function returns EAGAIN
  LOG: make the format comparison safe and sane
  LOG: don't break on empty callsites, just ignore them
  LOG: use the array callback to register new callsites
  array: add a mechanism to get a callback when a bin is allocated
  Solaris based operating systems don't define MSG_NOSIGNAL and SO_NOSIGPIPE.
  Make sure atomic's are initialized (for non-gcc atomic).


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-1
changelog:
  - move reporter plugins from abrt to libreport
  - fixed provides/obsolete to properly obsolete report package
  - wizard: make more fields editable


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-2
changelog:
  - obsolete report in rawhide properly rhbz#723320
  - added button to add attachments
  - ignore backup files
  - improved support for interactive plugins
  - added description text for logger
  - added python bindings for interactive plugins
  - Resolves: #723320


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-3
changelog:
  - enable bugzilla reporter for analyzer=libreport rhbz#725970
  - improved compatibility with anaconda


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-7
changelog:
  - added glob support to event xml files
  - changed handling of long text files
  - added a simple editor as a fallback when no editor is installed (i.e in anaconda) rhbz#728479
  - Resolves: #733448 #728479


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-9
changelog:
  - don't allow sending reports with bad rating rhbz#672023
  - don't allow reporting without duphash rhbz#739182
  - tell users to fill out reports in English rhbz#734037
  - fixed config for kerneloops reporter rhbz#731189
  - Resolves: #672023 #739182 #734037 #731189


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5.982-1
changelog:
  - re-fix rhbz#730887
  - re-fixed prgname (nice icons in gnome3) rhbz#741231
  - Resolves: #741231 #730887


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.7-1
changelog:
  - new version
  - added support for bodhi (preview)
  - dropped unused patches
  - reporter-bugzilla/rhts: add code to prevent duplicate reporting. Closes rhbz#727494 (dvlasenk@redhat.com)
  - wizard: search thru all items + tabbed details rhbz#748457 (jmoskovc@redhat.com)
  - wizard: add "I don't know what caused this problem" checkbox. Closes rhbz#712508 (dvlasenk@redhat.com)
  - reporter-bugzilla: add optional 'Product' parameter. Closes rhbz#665210 (dvlasenk@redhat.com)
  - rhbz#728190 - man pages contain suspicious version string (npajkovs@redhat.com)
  - reporter-print: expand leading ~/ if present. Closes rhbz#737991 (dvlasenk@redhat.com)
  - reporter-rhtsupport: ask rs/problems endpoint before creating new case. (working on rhbz#677052) (dvlasenk@redhat.com)
  - reporter-mailx: use Bugzilla's output format. Closes rhbz#717321. (dvlasenk@redhat.com)
  - report-newt: add option to display version (rhbz#741590) (mlichvar@redhat.com)
  - Resolves: #727494 #748457 #712508 #665210 rhbz#728190 #737991 #677052 #717321 #741590


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-1
changelog:
  - new version
  - added bodhi plugin rhbz#655783
  - one tab per file on details page rhbz#751833
  - search box search thru all data (should help with privacy) rhbz#748457
  - fixed close button position rhbz#741230
  - rise the attachment limit to 4kb rhbz#712602
  - fixed make check (rpath problem)
  - save chnages in editable lines rhbz#710100
  - ignore backup files rhbz#707959
  - added support for proxies rhbz#533652
  - Resolves: 753183 748457 737991 723219 712602 711986 692274 636000 631856 655783 741257 748457 741230 712602 753183 748457 741230 712602 710100 707959 533652


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-2
changelog:
  - fixed crash in bodhi plugin
  - re-upload better backtrace if available
  - fixed dupe finding for selinux
  - don't duplicate comments in bugzilla
  - fixed problem with empty release


author: Nikola Pajkovsky <npajkovs@redhat.com> 2.0.8-4
changelog:
  - 768647 - [abrt] libreport-plugin-bugzilla-2.0.8-3.fc16: libreport_xatou:
             Process /usr/bin/reporter-bugzilla was killed by signal 11 (SIGSEGV)


author: Jakub Filak <jfilak@redhat.com> 2.0.12-1
changelog:
  - new upstream release
  - trac#642: run the next event if the current one finished without errors
  - trac#641: don't allow event chain to continue, if user don't want to steal a directory
  - trac#640: report-gtk replaces 'Forward' button with 'Close' button on finished reporting
  - Fix bugs uncovered by Coverity. Closes rhbz#809416
  - Resolves: #809416


author: Jakub Filak <jfilak@redhat.com> 2.0.12-2
changelog:
  - report-gtk: fixed bug in automatic running of next event
  - don't try to delete dump dir which doesn't exist rhbz#799909
  - Resolves: #799909


author: Jakub Filak <jfilak@redhat.com> 2.0.12-3
changelog:
  - wizard: small changes to message texts and one function name
  - trac#623: dd_opendir() fails if time file doesn't contain valid time stamp
  - trac#660: report-cli asks for premission to send sensitive data
  - trac#660: report-gtk asks for permission to send sensitive data
  - trac#660: report-gtk: introduce generic ask_yes_no() function for options
  - trac#660: add support for sendining-sensitive-data event option
  - Do not check for analyzer == "Kerneloops" when appending "TAINTED" msg
  - fix leaks in list_possible_events()


author: Jakub Filak <jfilak@redhat.com> 2.0.12-4
changelog:
  - rhbz#846389: generate koops description according to rhbz std template
  - trac#556: skip not provided bz bug description template fields
  - report-gtk: don't log THANKYOU message
  - added internal_libreport.h into POTFILES.in rhbz#801255
  - updated po files
  - Resolves: #801255, #846389


author: Jakub Filak <jfilak@redhat.com> 2.0.12-5
changelog:
  - rhbz#741255: don't autodetect executable for sealert reports
  - show message from the server for known uReports
  - trac#678: reporter-bugzilla: do not attach empty files
  - Resolves: #741255


author: Jakub Filak <jfilak@redhat.com> 2.0.13-1
changelog:
  - rhbz#741255: don't autodetect executable for sealert reports
  - reporter-ureport: save backtrace hash to reported_to
  - trac#683: show the description file in bugzilla comment 0
  - trac#684: report-gtk saves only loaded files
  - reporter-ureport: allow sending attachments
  - event_config_dialog: make it resizable; tweak Uploader hint
  - add python binding for problem_data_send_to_abrt
  - reporter-ureport: attach bug ID from reported_to
  - reporter-ureport: make configurable only URL to a server
  - Resolves: #741255


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.14-1
changelog:
  - added error callback to get notification about download failure rhbz#786640
  - rhbz#767186: show a link to a page describing the ABRT configuration
  - spec: silence rpmdiff rhbz#857425
  - don't show the credential in logs rhbz#856960
  - rhbz#852165: warn if adding commands without any rule condition
  - rhbz#851855: process ureport server errors correctly
  - reporter-bugzilla: fix adding users to CC. (Partially?) closes rhbz#841338
  - Resolves: #786640, #767186, #857425, #856960, #852165, #851855, #841338


author: Jakub Filak <jfilak@redhat.com> 2.0.15-1
changelog:
  - remove unnecessary flag from words highlighting functions
  - report-gtk: rework forbidden words highlighting
  - add xmalloc_fopen_fgetline_fclose helper for reading one-line files
  - update GUI before highlighting of forbidden words
  - clear warnings after switching to a next page
  - tweak conditions in show next forbidden word functions
  - reporter-ureport: respect chrooted os_release
  - Fix typos.
  - rhbz#861679: report-gtk: immediately release dump directory lock
  - add a few helpers for reading files as one malloced block


author: Jakub Filak <jfilak@redhat.com> 2.0.16-1
changelog:
  - expand events from a chain and process expanded events separately
  - report-gtk: move selection of event to a right place
  - fix a crash while report-gtk startup (use the correct variable)
  - wizard: allow "non-reportable" reporting for experts; disallow it for non-experts
  - fix typo in function name, remove unnecessary forward declaratioins
  - wizard: fix a thinko in last commit (thanks Jakub)
  - wizard: check for NON_REPORTABLE file, stop if it exists.FILE
  - wizard: remove unnecessary if (1) {...} block. No code changes
  - don't update the selected event while processing it
  - check D-Bus err name without leaking nor crashing
  - ureport: always include offset
  - add Makefile target release-fix
  - Resolves: #864803, #864803, #863595


author: Jakub Filak <jfilak@redhat.com> 2.0.17-1
changelog:
  - update CWD after stealing of a dump directory
  - get product/version from system configuration
  - shorten bz summary if its length exceeds 255 chars
  - add full kerneloops to the uReport
  - reporter-bz: require bz version match when searching for dups. Closes rhbz#849833
  - reporter-bz: eliminate bugzilla_struct::b_product - use auto var instead
  - Move struct bugzilla_struct to its only user, reporter-bugzilla.c
  - reporter-bz: do not needlessly open dd if -f; assorted small fixes
  - added relro to reportclient.so and _pyreport.so rhbz#812283
  - bz reporter: include ROOTDIR, OS_RELEASE_IN_ROOTDIR, EXECUTABLE elements
  - Fix report-newt segfault
  - Resolves: #741647, #812283, #849833, #867118, #869032


author: Jakub Filak <jfilak@redhat.com> 2.0.18-1
changelog:
  - reporter-bz: tighten up checking that BZ server gave us its version; fix recently broken settings parsing
  - reporter-bz: make selinux-policy special case controllable from config file
  - reporter-bz: if we create a new bug but cross-version dup exists, add a note
  - reporter-bz: make rhbz_search_duphash static, use it more widely


author: Jakub Filak <jfilak@redhat.com> 2.0.19-1
changelog:
  - introduce a new formating feature for Bugzilla plugin
  - use gtk_show_uri() instead of own launcher
  - update kerneloops urls
  - don't force the minimal rating trac#854
  - add support for forwarding of report client requests
  - fix i18n in event client communication protocol
  - add event name to the error message - can't get secret item
  - switch all load_conf_file() calls to use skipKeysWithoutValue=false
  - hide the spinner when the event processing is finishes trac#852
  - add a method for loading of configuration of a single event
  - unlock secret collection only on meaningful demand
  - fix secret item look up for gnome-keyring


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.20-1
changelog:
  - New version 2.0.20
  - updated po files
  - add abrt-screencast to POTFILES.in
  - added screen casting support to the wizard
  - fix memory leaks in workflow code
  - report_problem_in_dir(): make LIBREPORT_DEL_DIR work
  - add Yes/No dialog saving answer
  - refactor: move ask_yes_no_save_result from wizard to libreport-gtk
  - added anaconda workflows rhbz#885690
  - report-python: export dd_delete_item too
  - report-python: export DD_OPEN_READONLY too
  - strtrimch: optimize it a bit
  - show only workflows applicable to actual problem directory
  - report-gtk: destroy global text cache only once
  - change rules for FILENAME_NOT_REPORTABLE to always include trailing period.
  - ask for BZ login/BZ pwd if Login attempt failed
  - ask for BZ login/BZ password if not provided by conf
  - remove new line from ask/ask_password responses
  - add ask_yes_no_yesforever() to Python client API
  - make client API independent on translation
  - run_event: use client functions for the communication callbacks
  - clean the workflow buttons when refreshing the event page
  - Fix a bug - inverted check for failed rename() call
  - wrap the not_reportable label .trac#908
  - don't show events without configuration in preferences .trac#881
  - - implemented saving/loading configuratio for workflows - related to trac#822
  - reporter-bz: add AVC's description added to BZ comment
  - add microseconds to dump dir name (problem ID)
  - teach reporter-bugzilla to read BZ ID from reported_to element
  - teach reporter-bugzilla to add reporter to CC
  - introduce a function deleting dd's element
  - introduce a function getting no. of Bytes of dd's element
  - make event config name immutable
  - fixed segv in the last commit
  - made struct workflow private related to trac#822
  - don't show the spinner if the problem is not reportable trac#852
  - made the config_item_info structure private
  - added workflows trac#822
  - added x,--expert cmdline option to enable expert mode
  - switch comment and event selector page
  - use get_ and set_ functions to access event_config_t
  - reporter-bz: don't return NULL on %non_existing_item% - use "" instead
  - refactoring the xml and conf loader code related to trac#822
  - reporter-bugzilla: add a --debug option
  - reporter-bz: fix a summary line formatting bug
  - let logging_callback and post_run_callback members be None
  - expose make_run_event_state_forwarding() in Python API
  - reporter-bz: change syntax of bugzilla_format_*.conf to require "text::", not "text:"
  - reporter-bz: add support for line continuation and simple text in bugzilla_format*.conf


author: Jakub Filak <jfilak@redhat.com> 2.1.0-1
changelog:
  - dd: unify error handling in save_binary_file()
  - dd_sanitize: don't sanitize symlinks
  - rpm: preserve old configuration for <F17 and <REHL7
  - configure: change defaults to be compliant with /var/tmp/abrt
  - configure: fix dump dir mode help string
  - dd: always sanitize mode of saved file
  - rhbz: replace obsolete methods by their substitutes
  - reporter-rhtsupport: improve error detection and logging
  - mailx: remove extra trailing newline in help text
  - spec: add requires section for pygobject3
  - reporter-rhtsupport: retain " Beta" suffix in version. Closes rhbz#896090
  - Fix bugs discoverent by Coverity
  - bz: swap 'bug id' arg with 'item name' arg in attach fn call
  - dd: move dir accessibility check from abrt to libreport
  - don't overwrite "type" rhbz#902828
  - move chown functionality from ABRT DBus to libreport
  - expose configure cmd options for dump dir mode and ownership
  - cli: guard against user ^Z-ing editor and being stuck
  - report-cli: don't close tty fd too early
  - report-cli: switch terminal's fg process group to editor's one; and back
  - dd: open symlinks on request
  - minor fix to the pkg-config file
  - reporter-rhtsupport: extract error message from Strata-Message: header
  - add build time condition for dump dir ownership schema
  - reporter-bz: post a comment to dup bug, if we found a dup. version 2.
  - report-cli: use Client API
  - report-cli: add event name prefix before question
  - run_event: default callbacks for logging and errors
  - make default dump dir mode configurable at build time
  - Stop reading text files one byte at a time
  - make dd_delete_item check that dd is locked
  - never follow symlinks rhbz#887866
  - Revert "reporter-bz: post a comment to dup bug, if we found a dup."
  - wizard: make radio-button text wrap
  - reporter-bz: post a comment to dup bug, if we found a dup.
  - added missing article
  - make the dependency on recordmydesktop soft - related to rhbz#891512
  - cli: use !ec_skip_review as indicator that the event is a reporter
  - Add and use "report-cli" event instead of removed "report-cli -r" option
  - cli: remove superfluous problem_data_free() call
  - uReport: add more explanatory message when upload fails
  - report-cli rework
  - don't require recordmydesktop on RHEL rhbz#891512
  - fixed the relro flags rhbz#812283
  - bugzilla_format_kernel.conf: Attach dmesg element. Closes rhbz#826058
  - bugzilla_format_kernel.conf: fix %summary
  - Make get_dirsize_find_largest_dir less talkative.
  - Minor fixes: robustify start_command(), fix style, fix English in msgs
  - Fix typo, remove c-format from a not c-formatted message
  - Resolves: #826058, #902828


author: Jakub Filak <jfilak@redhat.com> 2.1.1-1
changelog:
  - move 'reporter-mailx' from post-create event to notify(-dup) event
  - reporter-bugzilla: use base64 XMLRPC type for encoded data instead of string type
  - ureport: fix extra quoting when reporting error messages
  - Resolves: #908210


author: Jakub Filak <jfilak@redhat.com> 2.1.2-1
changelog:
  - always treat os-release as textual related to rhbz#922433
  - is_text_file(): bump allowable non-ASCII chars from 2% to 10%. Closes rhbz#922433
  - report-gtk: don't clear warnings after reporting is finished
  - report-gtk: show tabs only in verbose expert mode
  - report-gtk: prettify the workflow buttons rhbz#917694
  - report-gtk: add a button to report reporting failures
  - uReport: do not show URL twice in error output
  - uReport: detect missing type field at client side
  - uReport: add more explanatory message when upload fails
  - uReport: improve messages. Closes #579
  - workflows: a less confusing event name for reporting to Fedora infrastructure
  - workflows: correct an event name for reporting to Fedora in anaconda config
  - fixed workflow localization closes #137
  - run_event_state: expose children_count in python wrapper
  - add the proxy options to the addvanced section of event configurations
  - don't suid before running yum related to rhbz#759443
  - update translation
  - ss: stop reconnecting to the session bus
  - ss: destroy all timeout GSources attached to the main context
  - ss: add a timeout to the waiting for the Completed signal
  - dd: convert time at lock time
  - spawn_next_command: make process group creation optional
  - fork_execv_on_steroids: fix close/move order of fds, move getpwuid out of fork
  - problem API: generate UUID if is missing instead of DUPHASH
  - fix logic of 'Dont ask me again' dialogues (stop returning true for all options)
  - make [p]error_msg[_and_die] more fork-in-multithreaded-app safe
  - Make forking code paths more robust.
  - curl_debug: fix use of "%.*s" (need to pass an int, not size_t)
  - curl_debug: prettify debug output
  - Resolves: #871126, #885055, #890778, #901467, #916389, #917684, #917694, #919536, #922433, #923117


author: Jakub Filak <jfilak@redhat.com> 2.1.3-1
changelog:
  - rhbz: get id of duplicate from correct field
  - change the "exited with" message with something less technical closes #143
  - Integration with satyr
  - dump_dir_accessible_by_uid(): clear errno if error didn't occur
  - reporter-rhtsupport: improve logging
  - reporter-rhtsupport: upload file to BigFileURL if it is large
  - dd: document used errno values in dump_dir_accessible_by_uid()
  - add rhel package with appropriate workflow definitions
  - add workflow definitions for RHEL
  - improve is_text_file() to not treat valid Unicode as bad_chars
  - reporter-rhtsupport: fix double-free error
  - reporter-upload: move file upload function to lib/
  - reporter-upload: factor out HTTP PUT upload
  - reporter-rhtsupport: skip hints check if uploaded data is really large
  - reporter-rhtsupport: make -t[CASE_ID] work without FILEs. Closes #140
  - reporter-rhtsupport: factor out tarball creation
  - RHTS support: regularize order of functions and comments
  - fread_with_reporting: make progress indicator less noisy
  - report-gtk: update excluded elements check boxes before emergency analysis event
  - Resolves: #921941


author: Jakub Filak <jfilak@redhat.com> 2.1.4-1
changelog:
  - support /etc/os-release
  - added flag to not retry locking the incomplete problem dir
  - ureport: save solutions in not-reportable item
  - wizard: make value column click-sortable too
  - wizard: fix clickability of the item list column header
  - wizard: eliminate evd->error_msg member
  - wizard: remove a bunch of evd->foo members
  - debuginfo downloader should enable repos matching *debug* closes #138
  - Replace "THANKYOU" with EXIT_STOP_EVENT_RUN exit code (70)
  - debuginfo downloader: fix DebugInfoDownload::download() error paths.
  - report-gtk: handle user cancellation gracefully
  - logging: refine errors reporting
  - emit a message when searching bugzilla for duplicates closes #151
  - reporter-upload: create tarball with the name based on directory's name
  - reporter-rhtsupport: generate archive name from problem dir name
  - added report-cli event for anaconda should help with rhbz#950544
  - ss: skip option holding NULL values
  - spec: added new event for anaconda reporting rhbz#926916
  - distinguish the event configuration by problem type in the UI closes #149
  - report-gtk: show Next Step btn at workflow start
  - curl upload helper: upload data with "application/octet-stream" content type
  - reporter-rhtsupport: fix hint query to use correct URL


author: Jakub Filak <jfilak@redhat.com> 2.1.5-1
changelog:
  - make the uploader event available for all report types
  - ureport: add conversion from abrt vmcore type to ureport KERNELOOPS type
  - fixed relro flags rhbz#812283
  - rhbz: don't pass NULL in platform argument
  - add function getting information about dump dir for uid
  - anaconda: add proper configuration
  - rhbz: do not try to attach empty files
  - try to delete dump dirs using abrtd in the first step
  - workflow config: use scrollbars instead of enormous window size
  - Resolves: #971117, #958961


author: Jakub Filak <jfilak@redhat.com> 2.1.6-1
changelog:
  - add related packages version in emergency event
  - replace functions deprecated in Gtk-3.10 with their substitutes
  - fixed the bugzilla private group names rhbz#985881
  - workflows: add Anaconda work flow for RHEL
  - add missing manual pages for configuration files, binaries and scripts
  - added options to create private bz tickets rhbz#803772
  - skip the workflow selection if there is only 1 available closes #167
  - added missing workflows for Fedora rhbz#866027
  - spec: double up percent signs in chagelog entries
  - spec: make anaconda package description more generic
  - spec: install RHEL anaconda work flow
  - spec: added new workflow files rhbz#866027
  - spec: build only workflow subpkg relevant for host's OS
  - spec: install all manual pages
  - spec: install only documentation files
  - spec: drop unnecessary Obsoletes and Provides
  - spec: add manual pages to packages
  - spec: specify all config files
  - spec: replace btparser with satyr
  - move non-conf XML files from /etc/libreport/ to /usr/share/libreport/
  - Update satyr support, drop btparser compatibility
  - fixed typo in config file related #866027
  - resize the config window upon collapsing Advanced section
  - rhbz: test xmlrpc env for errors in abrt_xmlrpc_call_params()
  - rhbz: test rhbz_new_bug() return value for errors
  - wizard: show accurate messages
  - spec: add dependency on fros rhbz#958979
  - use fros instead of hard dependency on recordmydesktop rhbz#958979
  - Resolves: #965937, #973167


author: Jakub Filak <jfilak@redhat.com> 2.1.7-1
changelog:
  - Fix problem_item_format() to work properly after 2038 on x32. #691
  - Use proper json-c requirement in libreport-web.pc.
  - abrt-cli info: even -s 10 should show one-liners. #690
  - add checks for existing dumpdir items - closes #164
  - Create helper functions for sha1-hashing strings. #694
  - can now use custom repo filters for enabling repos, related abrt/abrt#688
  - add docstrings, remove global variable - related #171
  - fixed exception handling - closes #173
  - added checks for locked dump directory to dd_* functions, closes #133
  - fixed the symlinks handling in get_file_list abrt/abrt#686
  - make the build in the the build directory to not pollute the source tree
  - fixed debugInfoDownload so that it can process local repos - closes #48
  - Increase text size limit from 1Mb to 8 MB. rhbz#887570.
  - print warning when there is not engough free space for debuginfos, closes #170
  - autogen.sh: improve dependency parser
  - ignore directories without type element - rhbz#958968
  - abrt_xmlrpc: increase XML_SIZE_LIMIT to 4 mbytes. rhbz#961520.
  - ask user to create a private report if it contains sensitive data - rhbz#960549
  - updated translation rhbz#860555
  - updated transifex url
  - do not leak file rhbz#997871
  - in KDE session open URLs in kde-open
  - report-gtk: use wrapped text for warning labels
  - spec: remove abrt-screencast
  - remove obsoleted abrt-screencast
  - Fix create_symlink_lockfile() to not emit ENOENT when asked not to.
  - do not store potentially big data in /tmp
  - New public function create_symlink_lockfile()
  - Resolves: #958968, #981271


author: Jakub Filak <jfilak@redhat.com> 2.1.7-2
changelog:
  - Enable reporting to Red Hat Bugzilla for Anaconda bugs
  - Enable reporting to Red Hat Customer Portal for Anaconda bugs
  - Resolves: #1015554


author: Jakub Filak <jfilak@redhat.com> 2.1.7-4
changelog:
  - Use the RHEL-specific FAF URL by default
  - Load a config file from several directories
  - Resolves: #1031701


author: Jakub Filak <jfilak@redhat.com> 2.1.11-1
changelog:
  - Update translations
  - map_string_t: fix overflow detection in "to int conversion"
  - add type agnostic functions for map_string_t
  - %description spelling fix.
  - remove left over debug stmts from conf files fns
  - spec: remove RHEL files from non-RHEL builds
  - update titles of RHTS workflows
  - spec: add a package which ships Anaconda RHEL BZ WFS
  - add Anaconda Bugzilla reporting workflows for RHEL
  - spec: add a package which ships RHEL Bugzilla workflows
  - add Bugzilla reporting workflows for RHEL
  - remove file options not matching any setting
  - Resolves: #1015093, #1035352, #1035377, #1050152


author: Jakub Filak <jfilak@redhat.com> 2.1.11-2
changelog:
  - define D-Bus configuration interfaces
  - add Java Reporting workflows
  - remove Workflows tab in Preferences
  - Resolves: #1054713, #1055610, #1055633


author: Jakub Filak <jfilak@redhat.com> 2.1.11-5
changelog:
  - report-cli: use the Client API for communication to user
  - workflow_RHELvmcore: run analyze_VMcore too
  - Resolves: #1058845, #1059651


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-6
changelog:
  - turn off Bugzilla for Anaconda bugs in GA releases
  - Provide SYSLOG_FACILITY when logging through journal
  - KB article URL as a link to help for ABRT configuration
  - load the user list of ignored words
  - localization: properly handle locales with encoding suffix
  - event configuration: load default values from configuration directory
  - Resolves: #1029438, #1062135, #1063320, #1063339, #1063804, #1064261


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-7
changelog:
  - send an ureport before creating a customer case
  - correct name of RH Customer Portal in Anaconda
  - fix suggestion text for screen casting programs
  - fix typos in error messages
  - translation updates
  - Resolves: #1064961, #1069111, #1069340


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-9
changelog:
  - do not export empty configuration options as environment variables
  - translation updates
  - Resolves: #1062498, #1073610


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-12
changelog:
  - localization fixes
  - update man pages
  - provide workflows for logger, mailx, reportuploader
  - uploader: correct capitalization of the event name
  - rhtsupport: re-prompt for credentials
  - rhtsupport: submit ureport
  - uploader: allow secure password/credentials input for crash upload
  - make_description: user-friendly order and add reason to the list
  - make_description: add not_reportable to the list
  - python-report: parse release/version from os-release
  - ureport: Attach portal cases
  - ureport: Add authentication support when sending attachments
  - ureport: Add option to include hostname and machine id in uReport    2014-09-19
  - ureport: Add entitlement HTTP headers when using RHSM certificate authorization  2014-09-19
  - fix: huge debug log messages causing libreport to SEGV   2014-09-22
  - augeas: exclude bugzilla format configurations
  - bugzilla: add comment to closed bugs too
  - SELinux AVC: include 'package' in bugzilla bug reports
  - gui: close dialogues on Enter key
  - gui: fix: collapsing Advanced section in configuration doesn't change size of window
  - gui: allow users to reconfigure libreport and retry reporting
  - Resolves: #965963, #1087866, #1014788, #1104313, #1066486, #1067440, #1101240, #1139987, #1140044, #1067143, #1094203, #1142380, #1139922, #1139557, #1140224, #1087861, #1069917, #1066520, #1075452, #1067123, #1056101, #1084028, #1087866


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-13
changelog:
  - rhtsupport: attach contact email to uReport
  - rhtsupport: send ureport before creating description
  - ureport: fix a bug in the response parser
  - ureport: update the man page
  - uploader: accept empty string as password
  - Resolves: #1150388
  - Related: #1139987, #1066486


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-14
changelog:
  - ureport: don not fail with multiple entitlement certs
  - ureport: don not use uReport_URL in reporter-rhtsupport
  - Related: #1139987, #1140224


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - switch the default dump dir mode to 0750
  - harden against directory traversal, crafted symbolic links
  - avoid race-conditions in dump dir opening
  - Resolves: #1212098, #1217483, #1217500


author: Richard Marko <rmarko@redhat.com> - 2.1.11-24
changelog:
  - ureport: add functionality to use consumer certificate
  - report-python: fix getVersion_fromOSRELEASE
  - RHTSupport: include reported_to in Support cases
  - Resolves: #1223805, #1198551, #1197108


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - don't warn about missing 'type' if the locking fails
  - don't spit unnecessary debug messages
  - Related: #1243280, #1243280


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-35
changelog:
  * Thu Sep  1 2016 Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-35.el7.centos
  - Translation updates
  - Related: #1304240


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Paul Wouters <pwouters@redhat.com> - 3.5-1
changelog:
  - Initial package for RHEL7
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.11
  - Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
  - Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
  - Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
  - Resolves: rhbz#1108256 addconn compatibility with openswan
  - Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
  - Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
  - Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
  - Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
  - Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
  - Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
  - Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
  - Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
  - Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA


author: Paul Wouters <pwouters@redhat.com> - 3.12-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.12
  - Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)
  - Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request


author: Paul Wouters <pwouters@redhat.com> - 3.12-2
changelog:
  - Resolves: rhbz#1105171 (Update man page entry)
  - Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement


author: Paul Wouters <pwouters@redhat.com> - 3.12-4
changelog:
  - Resolves: rhbz#1134297 aes-ctr cipher is not supported
  - Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)


author: Paul Wouters <pwouters@redhat.com> - 3.12-5
changelog:
  - Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1056559 loopback support deprecated
  - Resolves: rhbz#1182224 Add new option for BSI random requirement
  - Resolves: rhbz#1170018 [increase] SELinux context string size limit
  - Resolves: rhbz#1127313 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Resolves: rhbz#1203794 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-10
changelog:
  - Resolves: rhbz#1212121 Support CAVS testing of the PRF/PRF+ functions
  - Resolves: rhbz#1127313 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1207689 libreswan ignores module blacklist [updated modprobe handling]
  - Resolves: rhbz#1218358 pluto crashes in fips mode without dracut-fips package


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1267370 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1166146 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1259209 CVE-2015-3240
  - Resolves: rhbz#1199374 libreswan does not enforce all FIPS or IPsec Suite B restrictions
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1283468 keyingtries=0 is broken
  - Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
  - Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
  - Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
  - Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
  - Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
  - Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
  - Resolves: rhbz#1272112 ipsec whack man page discrepancies
  - Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
  - Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
  - Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
  - Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
  - Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address


author: Paul Wouters <pwouters@redhat.com> - 3.15-7
changelog:
  - Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
  - Resolves: rhbz#1361721 libreswan pluto segfault


author: Paul Wouters <pwouters@redhat.com> - 3.15-8
changelog:
  - Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
  - Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]


author: Paul Wouters <pwouters@redhat.com> - 3.20-2
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
  - Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
  - Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.20-3
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
  - Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
  - Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add a patch that moves the includes to librsvg-1/librsvg
  - in preparation for a later librsvg 2 library.


author: Dan Williams <dcbw@redhat.com> - 2.6.4-7
changelog:
  - Fix usage of "%{_bindir}/update-gdk-pixbuf-loaders %{_host}" 
    to point to right place and architecture


author: Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
changelog:
  - Must use the same rpm macro for the host triplet as the
    gtk2 package, otherwise things can fall apart.  (#137676)


author: Matthias Clasen <mclasen@redhat.com> - 2.31.0-0.1.20100628git
changelog:
  - Update to a git snapshot that builds against standalone gdk-pixbuf
  - Drop librsvg3 package
  - Drop svg theme engine


author: Adam Tkac <atkac redhat com> - 2.31.0-0.3.20100628git
changelog:
  - fix crash in rsvg-gobject.c:instance_dispose function
    (https://bugzilla.gnome.org/show_bug.cgi?id=623383)


author: Hans de Goede <hdegoede@redhat.com> - 2.35.0-3
changelog:
  - Fix including rsvg.h always causing a deprecated warning, as this breaks
    apps compiling with -Werror


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
    of the use of the non-standard format (original patch changed
    for style).
  - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  - Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  - Merged patch to drop support for old /etc/sysconfig/selinux and
  - /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
   This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
changelog:
  - Update to upstream 
  	* Add const qualifiers to public API where appropriate by KaiGai Kohei.

  2.0.95 2010-06-10
  	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
  	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
  - add python3 subpackage from David Malcolm


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
changelog:
  - Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
changelog:
  Add patch from dbhole@redhat.com to initialize thread keys to -1
  Errors were being seen in libpthread/libdl that were related
  to corrupt thread specific keys. Global destructors that are called on dl 
  unload. During destruction delete a thread specific key without checking 
  if it has been initialized. Since the constructor is not called each time 
  (i.e. key is not initialized with pthread_key_create each time), and the 
  default is 0, there is a possibility that key 0 for an active thread gets 
  deleted. This is exactly what is happening in case of OpenJDK.

  Workaround patch that initializes the key to -1. Thus if the constructor is not
  called, the destructor tries to delete key -1 which is deemed invalid by 
  pthread_key_delete, and is ignored.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
changelog:
  - Clean up patch to make handling of constructor  cleanup more portable
    * db_language object class support for selabel_lookup from KaiGai Kohei.
    * Library destructors for thread local storage keys from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
changelog:
  -Update to upstream
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
changelog:
  - Move /selinux to /sys/fs/selinux
  - Add selinuxexeccon
  - Add realpath to matchpathcon to handle matchpathcon * type queries.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
changelog:
  - Only call dups check within selabel/matchpathcon if you are validating the 
  context
  - This seems to speed the loading of labels by 4 times.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
changelog:
  -Update to upstream
  	* Release, minor version bump
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-0817
  	* mapping fix for invalid class/perms after selinux_set_mapping
  	* audit2why: work around python bug not defining
  	* resolv symlinks and dot directories before matching

  2.1.2 2011-0803
  	* audit2allow: do not print statistics
  	* make python bindings for restorecon work on relative path
  	* fix python audit2why binding error
  	* support new python3 functions
  	* do not check fcontext duplicates on use
  	* Patch for python3 for libselinux

  2.1.1 2011-08-02
  	* move .gitignore into utils
  	* new setexecon utility
  	* selabel_open fix processing of substitution files
  	* mountpoint changing patch.
  	* simplify SRCS in Makefile

  2.1.1 2011-08-01
  	* Remove generated files, introduce more .gitignore


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Change matchpatcon to use proper myprintf
  - Fix symlink_realpath to always include "/"
  - Update to upstream
  	* selinux_file_context_verify function returns wrong value.
  	* move realpath helper to matchpathcon library
  	* python wrapper makefile changes


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
changelog:
  - Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
  prefixes.  Now you can specify a ";" separated list of prefixes and the 
  labeling system will only load regular expressions that match these prefixes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* utils: matchpathcon: remove duplicate declaration
  	* src: matchpathcon: use myprintf not fprintf
  	* src: matchpathcon: make sure resolved path starts
  	* put libselinux.so.1 in /lib not /usr/lib
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* Makefiles: syntax, convert all ${VAR} to $(VAR)
  	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
  	* regenerate .pc on VERSION change
  	* label: cosmetic cleanups
  	* simple interface for access checks
  	* Don't reinitialize avc_init if it has been called previously
  	* seusers: fix to handle large sets of groups
  	* audit2why: close fd on enomem
  	* rename and export symlink_realpath
  	* label_file: style changes to make Eric happy.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to upstream
  	* selinuxswig_python.i: don't make syscall if it won't change anything
  	* Remove assert in security_get_boolean_names(3)
  	* Mapped compute functions now obey deny_unknown flag
  	* get_default_type now sets EINVAL if no entry.
  	* return EINVAL if invalid role selected
  	* Updated selabel_file(5) man page
  	* Updated selabel_db(5) man page
  	* Updated selabel_media(5) man page
  	* Updated selabel_x(5) man page
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* use -W and -Werror in utils


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
changelog:
  - Add patch from Richard Haines
        When selabel_lookup found an invalid context with validation enabled, it
        always stated it was 'file_contexts' whether media, x, db or file.
        The fix is to store the spec file name in the selabel_lookup_rec on
        selabel_open and use this as output for logs. Also a minor fix if key is
        NULL to stop seg faults.
  - Fix setenforce manage page.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  -Update to upstream
  	* Fix setenforce man page to refer to selinux man page
  	* Cleanup Man pages
  	* merge freecon with getcon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
changelog:
  - Change selinux_binary_policy_path to return /sys/fs/selinux/policy
  - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
  - avc_has_perm will now return yes if the machine is in permissive mode
  - Make work with ruby-1.9


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
changelog:
  - Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
  - Otherwise search for policy on disk


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Fix dead links to www.nsa.gov/selinux
  	* Remove jump over variable declaration
  	* Fix old style function definitions
  	* Fix const-correctness
  	* Remove unused flush_class_cache method
  	* Add prototype decl for destructor
  	* Add more printf format annotations
  	* Add printf format attribute annotation to die() method
  	* Fix const-ness of parameters & make usage() methods static
  	* Enable many more gcc warnings for libselinux/src/ builds
  	* utils: Enable many more gcc warnings for libselinux/utils builds
  	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
  	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
  	* Update Makefiles to handle /usrmove
  	* utils: Stop separating out matchpathcon as something special
  	* pkg-config to figure out where ruby include files are located
  	* build with either ruby 1.9 or ruby 1.8
  	* assert if avc_init() not called
  	* take security_deny_unknown into account
  	* security_compute_create_name(3)
  	* Do not link against python library, this is considered
  	* bad practice in debian
  	* Hide unnecessarily-exported library destructors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix to compile with Fortify source
        * Add -O compiler flag
        * Check return code from asprintf
  - Fix handling of symbolic links in / by realpath_not_final


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
changelog:
  - Fix booleans.subs name, change function name to selinux_boolean_sub, 
    add man page, minor fixes to the function


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
  	* Fortify source now requires all code to be compiled with -O flag
  	* asprintf return code must be checked
  	* avc_netlink_recieve handle EINTR
  	* audit2why: silence -Wmissing-prototypes warning
  	* libsemanage: remove build warning when build swig c files
  	* matchpathcon: bad handling of symlinks in /
  	* seusers: remove unused lineno
  	* seusers: getseuser: gracefully handle NULL service
  	* New Android property labeling backend
  	* label_android_property whitespace cleanups
  	* additional makefile support for rubywrap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* Add support for lxc_contexts_path
  	* utils: add service to getdefaultcon
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* boolean name equivalency
  	* getsebool: support boolean name substitution
  	* Add man page for new selinux_boolean_sub function.
  	* expose selinux_boolean_sub
  	* matchpathcon: add -m option to force file type check
  	* utils: avcstat: clear sa_mask set
  	* seusers: Check for strchr failure
  	* booleans: initialize pointer to silence coveriety
  	* stop messages when SELinux disabled
  	* label_file: use PCRE instead of glibc regex functions
  	* label_file: remove all typedefs
  	* label_file: move definitions to include file
  	* label_file: do string to mode_t conversion in a helper function
  	* label_file: move error reporting back into caller
  	* label_file: move stem/spec handling to header
  	* label_file: drop useless ncomp field from label_file data
  	* label_file: move spec_hasMetaChars to header
  	* label_file: fix potential read past buffer in spec_hasMetaChars
  	* label_file: move regex sorting to the header
  	* label_file: add accessors for the pcre extra data
  	* label_file: only run regex files one time
  	* label_file: new process_file function
  	* label_file: break up find_stem_from_spec
  	* label_file: struct reorg
  	* label_file: only run array once when sorting
  	* Ensure that we only close the selinux netlink socket once.
  	* improve the file_contexts.5 manual page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
changelog:
  - Add new function mode_to_security_class which takes mode instead of a string.
  - Possibly will be used with coreutils.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Return EPERM if login program can not reach default label for user
  - Attempt to return container info from audit2why


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update to latest patches from eparis/Upstream
  -    Fix errors found by coverity
  -    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
  -    audit2why: remove a useless policy vers variable
  -    audit2why: use the new constraint information


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Ondrej Oprala patch to optimize set*con functions
  -    Set*con now caches the security context and only re-sets it if it changes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - setfscreatecon after fork was broken by the Set*con patch.
  - We needed to reset the thread variables after a fork.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
changelog:
  - Update to upstream 
          * audit2why: make sure path is nul terminated
          * utils: new file context regex compiler
          * label_file: use precompiled filecontext when possible
          * do not leak mmapfd
          * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
          * man: make selinux.8 mention service man pages
          * audit2why: Fix segfault if finish() called twice
          * audit2why: do not leak on multiple init() calls
          * mode_to_security_class: interface to translate a mode_t in to a security class
          * audit2why: Cleanup audit2why analysys function
          * man: Fix program synopsis and function prototypes in man pages
          * man: Fix man pages formatting
          * man: Fix typo in man page
          * man: Add references and man page links to _raw function variants
          * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
          * man: context_new(3): fix the return value description
          * selinux_status_open: handle error from sysconf
          * selinux_status_open: do not leak statusfd on exec
          * Fix errors found by coverity
          * Change boooleans.subs to booleans.subs_dist.
          * optimize set*con functions
          * pkg-config do not specifc ruby version
          * unmap file contexts on selabel_close()
          * do not leak file contexts with mmap'd backend
          * sefcontext_compile: do not leak fd on error
          * matchmediacon: do not leak fd 
          * src/label_android_property: do not leak fd on error


