Hello! The 3.8-rc3 release for the SELinux userspace is now available at: https://github.com/SELinuxProject/selinux/wiki/Releases I signed all tarballs using my gpg key, see .asc files. You can download the public key from https://github.com/bachradsusi.gpg Thanks to all the contributors, reviewers, testers and reporters! If you miss something important not mentioned bellow, please let me know. Note: 3.8-rc2 was skipped due to the regression in regex spec ordering which is fixed in 3.8-rc3 Changes ------- * Always build for LFS mode on 32-bit archs. * libsemanage: Mute error messages from selinux_restorecon introduced in 3.8-rc1 * Regex spec ordering is restored to pre 3.8-rc1 * Binary fcontext files format changed, files using old format are ignored * Code improvements and bug fixes Shortlog of the changes since 3.8-rc1 release --------------------------------------------- Christian Göttsche (15): libselinux: make use of calloc(3) libselinux: avoid dynamic allocation in openattr() libselinux: move functions out of header file libsepol: harden availability check against user CFLAGS libselinux: harden availability check against user CFLAGS libselinux: avoid memory allocation in common file label lookup libselinux: use vector instead of linked list for substitutions libselinux: simplify string formatting libselinux/utils: use correct error handling libsepol: avoid unnecessary memset(3) calls in hashtab checkpolicy: drop host bits in IPv6 CIDR address libselinux/utils: drop reachable assert in sefcontext_compile libsepol: add missing word separators in error message libselinux/fuzz: update for lookup_all() change libselinux: restore previous regex spec ordering Petr Lautrbach (3): Update VERSIONs to 3.8-rc2 for release. sepolgen-ifgen: allow M4 escaped filenames Update VERSIONs to 3.8-rc3 for release. Steve Langasek (1): Always build for LFS mode on 32-bit archs. Vit Mojzis (1): libsemanage: Mute error messages from selinux_restorecon