The following Fedora 16 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-2012-9029/boost-1.47.0-7.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9037/thunderbird-lightning-1.5-2.fc16,thunderbird-13.0-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9078/lighttpd-1.4.31-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9206/hostapd-0.7.3-9.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9116/quagga-0.99.21-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9135/python3-3.2.3-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9314/gd-2.0.35-17.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-6614/gdb-7.3.50.20110722-16.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9425/openstack-nova-2011.3.1-10.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9414/mosh-1.2.2-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9399/xen-4.1.2-8.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-8956/mumble-1.2.3-5.fc16.1
https://admin.fedoraproject.org/updates/FEDORA-2012-9313/ImageMagick-6.7.0.10-5.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9324/mysql-5.5.24-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-8675/arpwatch-2.1a15-18.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9337/roundcubemail-0.7.2-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-7593/tomcat6-6.0.35-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-8021/sudo-1.8.3p1-3.fc16
The following Fedora 16 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/FEDORA-2012-9507/selinux-policy-3.10.0-89.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9531/kernel-3.4.2-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9324/mysql-5.5.24-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9314/gd-2.0.35-17.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9274/gstreamer-plugins-good-0.10.30-6.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9267/lxpanel-0.5.10-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9171/qtwebkit-2.2.2-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9477/analitza-4.8.4-1.fc16,ark-4.8.4-1.fc16,blinken-4.8.4-1.fc16,cantor-4.8.4-1.fc16,filelight-4.8.4-2.fc16,gwenview-4.8.4-1.fc16,jovie-4.8.4-1.fc16,kaccessible-4.8.4-1.fc16,kactivities-4.8.4-1.fc16,kalgebra-4.8.4-1.fc16,kalzium-4.8.4-1.fc16,kamera-4.8.4-1.fc16,kanagram-4.8.4-1.fc16,kate-4.8.4-1.fc16,kbruch-4.8.4-1.fc16,kcalc-4.8.4-2.fc16,kcharselect-4.8.4-2.fc16,kcolorchooser-4.8.4-1.fc16,kdeaccessibility-4.8.4-1.fc16,kdeadmin-4.8.4-1.fc16,kdeartwork-4.8.4-1.fc16,kde-baseapps-4.8.4-1.fc16,kdebindings-4.8.4-1.fc16,kdeedu-4.8.4-1.fc16,kdegames-4.8.4-1.fc16,kdegraphics-4.8.4-1.fc16,kdegraphics-mobipocket-4.8.4-1.fc16,kdegraphics-strigi-analyzer-4.8.4-1.fc16,kdegraphics-thumbnailers-4.8.4-1.fc16,kde-l10n-4.8.4-1.fc16,kdelibs-4.8.4-4.fc16,kdemultimedia-4.8.4-3.fc16,kdenetwork-4.8.4-1.fc16,kdepim-4.8.4-2.fc16,kdepimlibs-4.8.4-1.fc16,kdepim-runtime-4.8.4-1.fc16,kdeplasma-addons-4.8.4-1.fc16,kde-printer-applet-4.8.4-1.fc16,kde-runtime-4.8.4-1.fc16,kdesdk-4.8.4-1.fc16,kdetoys-4.8.4-1.fc16,kdeutils-4.8.4-1.fc16,kde-wallpapers-4.8.4-1.fc16,kde-workspace-4.8.4-2.fc16,kdf-4.8.4-2.fc16,kfloppy-4.8.4-1.fc16,kgamma-4.8.4-1.fc16,kgeography-4.8.4-1.fc16,kgpg-4.8.4-1.fc16,khangman-4.8.4-1.fc16,kig-4.8.4-1.fc16,kimono-4.8.4-1.fc16,kiten-4.8.4-1.fc16,klettres-4.8.4-1.fc16,kmag-4.8.4-1.fc16,kmousetool-4.8.4-1.fc16,kmouth-4.8.4-1.fc16,kmplot-4.8.4-1.fc16,kolourpaint-4.8.4-1.fc16,konsole-4.8.4-1.fc16,kremotecontrol-4.8.4-1.fc16,kross-interpreters-4.8.4-1.fc16,kruler-4.8.4-1.fc16,ksaneplugin-4.8.4-1.fc16,ksecrets-4.8.4-1.fc16,ksnapshot-4.8.4-1.fc16,kstars-4.8.4-1.fc16,ktimer-4.8.4-1.fc16,ktouch-4.8.4-1.fc16,kturtle-4.8.4-1.fc16,kwallet-4.8.4-1.fc16,kwordquiz-4.8.4-1.fc16,libkdcraw-4.8.4-1.fc16,libkdeedu-4.8.4-1.fc16,libkexiv2-4.8.4-1.fc16,libkipi-4.8.4-1.fc16,libksane-4.8.4-1.fc16,marble-4.8.4-1.fc16,okular-4.8.4-1.fc16,oxygen-icon-theme-4.8.4-1.fc16,parley-4.8.4-1.fc16,pykde4-4.8.4-1.fc16,qyoto-4.8.4-1.fc16,rocs-4.8.4-1.fc16,ruby-korundum-4.8.4-1.fc16,ruby-qt-4.8.4-1.fc16,smokegen
-4.8.4-1.fc16,smokekde-4.8.4-1.fc16,smokeqt-4.8.4-1.fc16,step-4.8.4-1.fc16,superkaramba-4.8.4-1.fc16,svgpart-4.8.4-1.fc16,sweeper-4.8.4-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9014/gawk-4.0.1-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-8996/python-bugzilla-0.7.0-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9063/dracut-018-55.git20120606.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9037/thunderbird-lightning-1.5-2.fc16,thunderbird-13.0-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-9055/soprano-2.7.6-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-8765/koji-1.7.0-2.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-6994/upower-0.9.16-1.fc16
https://admin.fedoraproject.org/updates/FEDORA-2012-3319/GConf2-3.2.3-4.fc16
The following builds have been pushed to Fedora 16 updates-testing
BitchX-1.2-13.fc16
aeolus-conductor-0.10.2-1.fc16
gfal2-2.0.0-0.9.2012061511snap.fc16
ipset-6.11-1.fc16
kernel-3.4.2-1.fc16
nordugrid-arc-2.0.0-1.fc16
nordugrid-arc-doc-1.1.2-1.fc16
perl-Devel-BeginLift-0.001003-1.fc16
perl-Devel-Pragma-0.54-1.fc16
php-digitalsandwich-Phake-1.0.2-1.fc16
python-libcloud-0.10.1-2.fc16
python-ropemode-0.1-0.3.rc2.fc16
selinux-policy-3.10.0-89.fc16
Details about builds:
================================================================================
BitchX-1.2-13.fc16 (FEDORA-2012-9512)
IrcII chat client
--------------------------------------------------------------------------------
Update Information:
newest dev release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2012 Dan Mashal <vicodan@xxxxxxxxxxxxxxxxx> 1.2-13
-Updated to latest source code (svn rev 207)
* Sun Jun 3 2012 Dan Mashal <vicodan@xxxxxxxxxxxxxxxxx> 1.2-12
-Updated to latest source code (svn rev 204)
--------------------------------------------------------------------------------
================================================================================
aeolus-conductor-0.10.2-1.fc16 (FEDORA-2012-9540)
The Aeolus Conductor
--------------------------------------------------------------------------------
Update Information:
update to upstream release v0.10.2-1
update to upstream release v0.10.1-1
update to upstream release v0.10.1-2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2012 Steve Linabery <slinaber@xxxxxxxxxx> - 0.10.2-1
- a552589 Set aeolus user home directory to /usr/share/aeolus-conductor
- 47f5639 Fix the filter view toggle after converge-ui layout changes
* Wed Jun 13 2012 Steve Linabery <slinaber@xxxxxxxxxx> - 0.10.1-2
- 5c150ad Create homedir for aeolus user
* Thu Jun 7 2012 Steve Linabery <slinaber@xxxxxxxxxx> - 0.10.1-1
- 81f10a6 Refactor SessionEntity model to work properly with API
- 1945d37 Fixed deployment rollback
- 187756e Fix the new Provider Account form error
* Wed Jun 6 2012 Steve Linabery <slinaber@xxxxxxxxxx> - 0.10.0-1
- 274fb0b rm3343: credential: make attributes accessible/protected
- a66fd19 RM 3246: fix smaller issues in instance model
- b3dc87c RM3244: fix minor issues
- 04450b5 sanitize the use of details_tab param
- f1cbeea Add BuildRequires for rubygem-compass and rubygem-compass-960-plugin
- b388935 rpmbuild changes: added converge-ui files, compass Require dependency, converge-ui symlinks creation and scss compilation using compass into spec file
- 2836e75 Removed old favicon and added new into public/images to be compatible with converge-ui layout
- 9f019b6 Removed Sass::Plugin scss compilation from development enviromnent config because Compass watcher takes care of scss compilation
- 1cc41e8 Moved compass config file to proper place, removed unnecessary compass.scss file
- dfdfb0d Finishing touches in converge-ui integration
- 86c6978 Added symlink for fonts, removed fonts conductor stylesheet, removed conductor fonts folder content
- 36a7d9d updated converge-ui to latest version
- d49ce9f converge-ui meeting updates
- 7500a18 Adding compass gem dependancy and symbolic link for converge-ui template.
- bd736c7 Unified UI (converge-ui) changes to header, footer using the converge-ui git submodule.
- 5674223 Revert "Revert "Merge branch 'gelato'""
- e3cd48d RM3311 fix for date range to be inclusive of times
- 3a4be6f RM3311 added date select, ordering options, and csv export to log history
- bf0595d Redmine #3345: Initial user groups implementation
- 5b34b65 BZ 827562 - Upgrade from CloudForms 1.0 to CloudForms 1.0.1 requires additional data definition not provided by rails migration
- 537b86f Moving the service parameter type attr off the parameter tag onto the value tag because the type only applys when we collect a value.
- e8f5b1e If an assambly doesn't define any configserver params, config for this assembly is not sent to configserver.
- 65c7767 Bug 807745 add 'use provider accounts' to global image admin role
- c8e2f50 bug 808031: allow Global Provider user to view Provider Accounts
- 18ae85c Fix files declaration for daemons subpkg
- 05a2632 Fix images#show when there's no existing build
- 3a146ec BZ815784 added Pool Family Quota Used column to Pool Families table
- 8ebf737 Fix spec
- 049958c Unifiy the way we store error messages for model attributes
- 333a884 BZ808393: Fix invalid name error message
- 759dbbe BZ808338: fix ajax caching for IE
- dec27f2 BZ 806846 Disabled submit_tag in images#new views when no provider are enabled
- 144afb2 BZ 806846 ImageController: removed duplicate code, fixed flash displaying
- bdc6f3e Fix mustache template handler to work with Rails 3.1 and above
- 799bd3a RM #3269: Figure out what is wrong with deps (ruby/bundler mode)
- 4b03851 BZ#801971 - Scalability: Catalog Images tab, /conductor/pools/1?details_tab=images&only_tab=true, is slow
- ccfd67e Styling for pool catalog images tab
- bf85e5f BZ815357: api: tests for template xml in CDATA
- b3c4ecd BZ815357: api: handle template xml in CDATA in images controller
- 290dde4 BZ804543: template relaxng: make rootpw mandatory
- fe8d4ed Corrected removed obsolette load_tab_captions_and_details_tab method from pool_families controller, replaced provider_account header with helper method
- 445665b Revert "removed obsolette load_tab_captions_and_details_tab method from pool_families controller, replaced provider_account header with helper method"
- 5c54d1d BZ810919 mustach-ify pretty-view pool header so that instance/deployment counts are automatically updated
- f454171 removed obsolette load_tab_captions_and_details_tab method from pool_families controller, replaced provider_account header with helper method
- b602b93 pool_families partials cleanup
- 4cfd406 Fixed typo - renamed 'stopable' to 'stoppable'
- eb0dc37 3322 - Added deployment's history tab
- 1df022a Added basic events for deployment state changes
- f96aa8f 3321 - Added partial launch support
- 7bfb7e2 3320 - Added deployment rollback
- 1a46ebb BZ806001 - aeolus-configure will always create an admin user, need to key of a uuid not name
- dbdc389 Fix line limit violations in images_controller for mustache patchset
- 2f3471e Fix line limit violations in some views for mustache patchset
- dbb9bcf Fix line limit violations in deployables_controller for mustache patchset
- e374dd1 Delete jquery-template js lib
- 1c2932b Mustachifying images/show
- 0138aae Mustachifying pools/_deployments
- aaf99e9 Mustachifying deployables/show
- 8c8be91 Redmine #3319: Set up conductor to use new Bundler extension point.
- 57bdcf7 Redmine #3318: Add small extension library to bundler to load system gems
- 1b77242 Add BuildRequires: systemd-units for daemons subpackage
- da4472b Remove jquery-svg entries from rpm spec
- 89dcc58 Delete jquery-svg
- f7c7dfa application.js: Removed unused code
- 42af2a1 Removed unused JS libraries - yetii, trimpath-template
- 1332d3d RM 3144 specify default order for associated events
- 65a472e RM 3144 don't set unscoped as default, as this messes up uptime calculations
- 40100c2 Fix migration after paranoid gem changed the default scope
- 0c8f597 RM 3144 added soft_delete tests
- 1f1ac5b RM 3144 updated models to include acts_as_paranoid
- 01be2df RM 3144 add deleted_at column for soft delete
- 3486b97 RM 3144 added paranoia gem
- 5905bb8 adding service dependancy support for audrey
- a1fde11 Temporary Bugfix for adding providers.
- 708a82d added app/views/logs
- c406ca3 Revert "Merge branch 'gelato'"
- da432dd Removed useless @deployment_properties variable
- 65d9d8d Cleanup of deployments create action
- e6fcb93 Merge branch 'gelato'
- e142db5 RM 3145 touched up code to obey 80-character line limit
- 570795c RM 3145 updates reflecting new state attribute for deployments
- c64fe05 RM 3145 added css section for hover links
- 7f6c191 RM 3145 added cucumber tests
- e119c68 RM 3145 added logs section
- 3b50091 RM 3145 added logs page
- cc0e066 RM 3145 added logs controller
- 54e749d RM 3145 added logs route
- 8d778df Fix typo in UpdateStateForExistingDeployments migration
- 8e7559c Redmine3153 partials cleanup and fixes part1
- e3616e8 BZ 809722 - missing template for json response
- 482437a performance fixes for Redmine feature #3149
- f5010a6 Redmine #3158: Use denormalized model for permission checks
- 30473d7 redmine task #3157: UI to show inherited permissions
- f6b80e3 permissions denormalization: redmine #3155 and #3156
- 0cd0270 RM 3181 - delayed_job support - revised
- 03b6b45 Redmine #3233: Consolidate duplicated steps
- 4a49749 Redmine #3211: Switch step defs for login to use DMA
- 273833b Fixed setting of deployment state for existing deployments
- 73ccace bump version to 0.10.0
- 4594b35 import converge-ui stylesheet as partial to layout.scss
- 1e601d3 removed converge-ui files from lib
- e40e4eb changed simlinks, layout_helper is now unmodified, disabled most of the converge-ui stylesheets for now, reverted to conductor layout to prepare for incremental converge
- be1ebc7 added converge-ui repo as git submodule co vendor/converge-ui
- 622f629 Basic implementation of converge-ui code
- 003582a Copies converge-ui into lib/
* Thu May 3 2012 Martyn Taylor <mtaylor@xxxxxxxxxx> - 0.9.0-1
- Updated compilation of new sass files
--------------------------------------------------------------------------------
================================================================================
gfal2-2.0.0-0.9.2012061511snap.fc16 (FEDORA-2012-9536)
Grid file access library 2.0
--------------------------------------------------------------------------------
Update Information:
new snapshot of gfal 2.0 before official release
gfal2 0.8 preview for testing
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2012 Adrien Devresse <adevress at cern.ch> - 2.0.0-0.9.2012061511snap
- Snapshort of the 0.9 version for testing
--------------------------------------------------------------------------------
================================================================================
ipset-6.11-1.fc16 (FEDORA-2012-9535)
Manage Linux IP sets
--------------------------------------------------------------------------------
Update Information:
This fixes an incompatibility with a package from a well known
third-party repository.
It brings in newer version of IP Set, of which the changelog is
available at: http://ipset.netfilter.org/changelog.html
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 6 2012 Mathieu Bridon <bochecha@xxxxxxxxxxxxxxxxx> - 6.11-1
- New upstream release.
- Removed our patch, it has been integrated upstream. As such, we also don't
need to re-run autoreconf any more.
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 6.9.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-3.4.2-1.fc16 (FEDORA-2012-9531)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 3.4.2 stable update contains a number of bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 14 2012 Justin M. Forbes <jforbes@xxxxxxxxxx> 3.4.2-1
- Linux 3.4.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #830862 - Kernel panic at reboot (possibly NFS related).
https://bugzilla.redhat.com/show_bug.cgi?id=830862
[ 2 ] Bug #770444 - RFE: kernel-modules-extra should get added to installonlypkgs default list
https://bugzilla.redhat.com/show_bug.cgi?id=770444
[ 3 ] Bug #829016 - kernel 3.4.0-1 does not boot on xen domU, unable to handle kernel paging request
https://bugzilla.redhat.com/show_bug.cgi?id=829016
[ 4 ] Bug #825491 - kernel 3.4.0 iwlwifi flaky
https://bugzilla.redhat.com/show_bug.cgi?id=825491
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-2.0.0-1.fc16 (FEDORA-2012-9529)
Advanced Resource Connector Grid Middleware
--------------------------------------------------------------------------------
Update Information:
New version of the NorduGrid ARC middleware. For details about what's new see the release notes at:
http://www.nordugrid.org/arc/releases/12.05/release_notes_12.05.html
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 23 2012 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 2.0.0-1
- 2.0.0 Final Release
- Disable chelonia, hopi, isis and janitor
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-doc-1.1.2-1.fc16 (FEDORA-2012-9529)
Advanced Resource Connector Documentation
--------------------------------------------------------------------------------
Update Information:
New version of the NorduGrid ARC middleware. For details about what's new see the release notes at:
http://www.nordugrid.org/arc/releases/12.05/release_notes_12.05.html
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2012 Mattias Ellert <mattias.ellert@xxxxxxxxxxxx> - 1.1.2-1
- 1.1.2 Update
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Devel-BeginLift-0.001003-1.fc16 (FEDORA-2012-9508)
Make selected sub calls evaluate at compile time
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #830571 - Review Request: perl-Devel-BeginLift - Make selected sub calls evaluate at compile time
https://bugzilla.redhat.com/show_bug.cgi?id=830571
--------------------------------------------------------------------------------
================================================================================
perl-Devel-Pragma-0.54-1.fc16 (FEDORA-2012-9539)
Helper functions for developers of lexical pragmas
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #830575 - Review Request: perl-Devel-Pragma - Helper functions for developers of lexical pragmas
https://bugzilla.redhat.com/show_bug.cgi?id=830575
--------------------------------------------------------------------------------
================================================================================
php-digitalsandwich-Phake-1.0.2-1.fc16 (FEDORA-2012-9527)
Phake is a PHP mocking framework that is based on Mockito
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #818318 - Review Request: php-digitalsandwich-Phake - Phake is a PHP mocking framework that is based on Mockito
https://bugzilla.redhat.com/show_bug.cgi?id=818318
--------------------------------------------------------------------------------
================================================================================
python-libcloud-0.10.1-2.fc16 (FEDORA-2012-9526)
A Python library to address multiple cloud provider APIs
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 0.10.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 15 2012 Daniel Bruno dbruno@xxxxxxxxxxxxxxxxx - 0.9.1-2
- Update to upstream version 0.10.1
--------------------------------------------------------------------------------
================================================================================
python-ropemode-0.1-0.3.rc2.fc16 (FEDORA-2012-9538)
Helper for using rope refactoring library in IDEs
--------------------------------------------------------------------------------
Update Information:
Helper for using rope refactoring library in IDEs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #701954 - Review Request: python-ropemode - Helper for using rope refactoring library in IDEs
https://bugzilla.redhat.com/show_bug.cgi?id=701954
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.10.0-89.fc16 (FEDORA-2012-9507)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
- Allow systemd to read tmp_t link files - Backport ABRT policy from F17 - Allow nagios domains to execute bin_t - Allow pads to read kernel network state - Allow sudo domains to manage kerberos rcache files - Allow polipo to manage polipo_cache dirs - Allow nsswitch domains to read sssd public files - Dontaudit net_admin capability for collectd - Allow thumb_t to create gstreamer dirs - user_tcp_server boolean should be also for sysadm_t - Add labeling for /var/lib/lighttpd - Fix files_lib_filetrans_shared_lib() interface
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 12 2012 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.10.0-89
- Allow systemd to read tmp_t link files
- Backport ABRT policy from F17
- Allow nagios domains to execute bin_t
- Allow pads to read kernel network state
- Allow sudo domains to manage kerberos rcache files
- Allow polipo to manage polipo_cache dirs
- Allow nsswitch domains to read sssd public files
- Dontaudit net_admin capability for collectd
- Allow thumb_t to create gstreamer dirs
- user_tcp_server boolean should be also for sysadm_t
- Add labeling for /var/lib/lighttpd
- Fix files_lib_filetrans_shared_lib() interface
* Fri May 4 2012 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.10.0-88
- Allow jockey to use its own fifo_file
- Allow collectd to read /dev/random
- Allow collectd to send signal to itself
- Allow chronyd to send signal to itself
- Allow collectd to create packet socke
- Allow colord to create shm
- Fix description on httpd_graceful_shutdown
- Add httpd_graceful_shutdown boolean to allow httpd to connect to port 80
- Add clamscan_can_scan_system boolean
- Allow mysqld to read kernel network state
- Dontaudit fail2ban looking at gnome content
- Allow ldconfig to create /var/cache/ldconfig
* Wed Apr 25 2012 Miroslav Grepl <mgrepl@xxxxxxxxxx> 3.10.0-87
- More fixes for l2tpd
* Allow pppd to stream connet to l2tpd
* Allow l2tpd to send sigkill to pppd
* Allow l2tpd to use the generic pty
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #787643 - SELinux is preventing /usr/sbin/collectd from 'net_admin' accesses on the None .
https://bugzilla.redhat.com/show_bug.cgi?id=787643
[ 2 ] Bug #799781 - SELinux having problems during clamscan
https://bugzilla.redhat.com/show_bug.cgi?id=799781
[ 3 ] Bug #808297 - SELinux is preventing /usr/libexec/fprintd from read access on the file /var/lib/sss/mc/passwd.
https://bugzilla.redhat.com/show_bug.cgi?id=808297
[ 4 ] Bug #816362 - SELinux is preventing /bin/bash from 'getattr' accesses on the file /lib/systemd/system/tor.service.
https://bugzilla.redhat.com/show_bug.cgi?id=816362
[ 5 ] Bug #816999 - SELinux is preventing /sbin/ldconfig from 'write' accesses on the directory /var/cache.
https://bugzilla.redhat.com/show_bug.cgi?id=816999
[ 6 ] Bug #817001 - SELinux is preventing /usr/bin/python2.7 from 'read' accesses on the directory /tmp.
https://bugzilla.redhat.com/show_bug.cgi?id=817001
[ 7 ] Bug #817336 - SELinux is preventing /usr/libexec/colord from 'create' accesses on the shared memory .
https://bugzilla.redhat.com/show_bug.cgi?id=817336
[ 8 ] Bug #818395 - SELinux is preventing /usr/sbin/collectd from using the 'signal' accesses on a process.
https://bugzilla.redhat.com/show_bug.cgi?id=818395
[ 9 ] Bug #818398 - SELinux is preventing /usr/sbin/chronyd from using the 'signal' accesses on a process.
https://bugzilla.redhat.com/show_bug.cgi?id=818398
[ 10 ] Bug #818399 - SELinux is preventing /usr/sbin/collectd from 'read' accesses on the chr_file random.
https://bugzilla.redhat.com/show_bug.cgi?id=818399
[ 11 ] Bug #818400 - SELinux is preventing /usr/sbin/collectd from 'create' accesses on the packet_socket .
https://bugzilla.redhat.com/show_bug.cgi?id=818400
[ 12 ] Bug #818486 - SELinux is preventing /opt/google/chrome/nacl_helper_bootstrap from 'read' accesses on the file /home/lamp/k (deleted).
https://bugzilla.redhat.com/show_bug.cgi?id=818486
[ 13 ] Bug #818808 - SELinux is preventing pkcon from 'ioctl' accesses on the fifo_file fifo_file.
https://bugzilla.redhat.com/show_bug.cgi?id=818808
[ 14 ] Bug #823103 - SELinux is preventing /usr/bin/polipo from 'create' accesses on the directory fedora.mirror.nexicom.net.
https://bugzilla.redhat.com/show_bug.cgi?id=823103
[ 15 ] Bug #823232 - SELinux violation when running "sudo su -"
https://bugzilla.redhat.com/show_bug.cgi?id=823232
[ 16 ] Bug #826028 - SELinux denies socket access to nslcd
https://bugzilla.redhat.com/show_bug.cgi?id=826028
[ 17 ] Bug #825423 - SELinux is preventing /usr/bin/pads from 'getattr' accesses on the file /proc/<pid>/net/dev.
https://bugzilla.redhat.com/show_bug.cgi?id=825423
[ 18 ] Bug #827179 - SELinux is preventing /usr/bin/perl from 'getattr' accesses on the file /usr/lib64/nagios/plugins/utils.pm.
https://bugzilla.redhat.com/show_bug.cgi?id=827179
[ 19 ] Bug #827481 - SELinux is preventing /bin/systemd-tmpfiles from 'read' accesses on the lnk_file tmp.
https://bugzilla.redhat.com/show_bug.cgi?id=827481
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
