# changelog

author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - get rid of the 3d-screensavers package - now that qt-GL is part of qt,
    there's no need to keep them separate to avoid the dependency.


author: Than Ngo <than@redhat.com>
changelog:
  - fix gnome-session so that KDE2 can be started from gdm
  - pam/kde2 instead pam/kde to avoid problem with KDE1
  - don't requires qt-GL, It's now in qt


author: Than Ngo <than@redhat.com>
changelog:
  - fix dependency problem with KDE1 so that KDE1 and KDE2 can be installed
    at the same time
  - add missing ldconfig in %post anf %postun
  - fix for reading config files in /etc/X11/xdm, add Xsession to requires


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - rebuild, now that kdelibs2 works on alpha
  - use the same ugly hack to get kdebase to compile
  - remove ksysguard on alpha (even more compiler problems)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - ExcludeArch ia64 for now
  - remove gnome .desktop file, we get it from gnome-core now.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Build the OpenGL screensavers, and move them to a separate package
  - Improve the spec file (BuildPrereqs etc.)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - start autorun if present in startkde
  - check for configured soundcard before running sound services


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added link to /etc/X11/applnk, .directory file
  - included lowcolor icon sub-package
  - enable .desktop file access


author: Preston Brown <pbrown@redhat.com>
changelog:
  - customized startkde script to set up user environment if not present.
  - mention kthememgr in description.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - snapshot, includes kde 1.1.1 + fixes
  - kvt removed for security reasons.  It is a steaming pile of...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - today's snapshot makes kfm a bit nicer and some other fixes
  - moved default rc files to kdesupport


author: Preston Brown <pbrown@redhat.com>
changelog:
  - removed bell.xpm (used to be in fvwm2-icons, don't want installer to see
  - this previous connection and autoselect kdebase for upgrade).


author: John Dennis <jdennis@redhat.com> - 2.0.5-3
changelog:
  - Resolve: bug #436564: socket.getsockopt() on ppc generates exception
  	  Fix typo in original setroubleshoot-get_credentials.patch


author: John Dennis <jdennis@redhat.com> - 2.0.5-2
changelog:
  - Resolve: bug #437857: python error in system shutdown
  	- Resolve: bug #436564: socket.getsockopt() on ppc generates exception


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug #428252: Problem with update/remove old version
  	- Add code to validate xml database version, if file is incompatible it is not read,
  	  the next time the database is written it will be in the new version format.
  	  This means the database contents are not preserved across database version upgrades.
  	- Remove postun trigger from spec file used to clear database between incompatible versions
  	  the new database version check during database read will handle this instead
  	- bullet proof exit status in init script and rpm scriptlets
  	- Resolve bug #247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  	- Resolve bug #376041: Cannot check setroubleshoot service status as non-root
  	- Resolve bug #332281: remove obsolete translation
  	- Resolve bug #344331: No description in gnome-session-properties
  	- Resolve bug #358581: missing libuser-python dependency
  	- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin
  	- Resolve bug #427260: German Translation
  	- enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  	- updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  	- implement uid,username checks
  	- rpc methods now check for authenticated state
  	- fix html handling of summary string
  	- add 'named' messages to status bar, make sure all messages either timeout or are named
  	- fix ordering of menus, resolves bug #427418
  	- add 'hide quiet' to browser view filtering, resolves bug #427421
  	- tweak siginfo text formatting
  	- add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  	- Completed most work for version 2 of setroubleshoot, prepare for test release
  	- import Dan's changes from the mainline
  	  primarily allow_postfix_local_write_mail_spool plugin
  	- escape html, fix siginfo.format_html(), siginfo.format_text()
  	- add async-error signal
  	- change identity to just username
  	- make sure set_filter user validation works and reports error in browser
  	- fix generation of line numbers and host when connected to audispd
  	- add permissive notification, resolves bug #231334: Wording doesn't change for permissive mode
  	- resolves bug #244345: avc path information incomplete
  	- get the uid,gid when a client connects to the server
  	- set_filter now verifies the filter is owned by the user,
  	- resolves bug #288261: setroubleshoot lack of user authentication
  	- remove filter options which weren't being used
  	- change '@' in audit data hostname to '.'
  	- remove restart dialog
  	  resolves bug #321171: sealert's dialog after update is higly confusing
  	- fix rpc xml arg
  	- fix handling of host value
  	- tweak what fields are in signature
  	- move data items which had been in 'avc' object into siginfo
  	- clean up siginfo format
  	- large parts of new audit data pipeline working, checkpoint
  	- fix duplicate xml nodes when generating xml tree
  	- audit event can now be xml serialized
  	- switch from using int's for audit record types to strings
  	- avoid conversion headaches and possibilty of not being
  	  able to convert a new unknown type
  	- add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  	- add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  	- use metaclass for xml class init
  	- start adding xml support to audit data classes
  	- Use metaclass to wrap class init
  	- move xml serialization code from signature.py to xml_serialize.py
  	- simplify aspect of the serialization code
  	- add unstructured xml mapping, each xml element name has its content mapped to obj.name
  	- modify xml serialization to be driven by xml contents
  	- general clean up
  	- checkpoint conversion of serialization to use metaclasses
  	- clean up class/data specifications for XmlSerializable
  	- add support for client rpc testing
  	- add changelog entry
  	- add SubProcess class to setroubleshootd in preparation to
  	- run daemon as subprocess so we can gather results and
  	  compare them to the expected data we sent
  	- rewrite all plugins to use new v2 audit data
  	- add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  	- add new test support: add config section 'test', add boolean 'analyze' to
  	  config test section, add class TestPluginReportReceiver which is installed
  	  if test.analyze is True, it prints analysis report. In test_setroubleshootd
  	  send AUDIT_EOE to assure sequential event processing so analysis results
  	  have same ordering as events that are sent by test_setroubleshootd
  	- alert signatures now include host information, alerts will be grouped by host


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
  	  In configure.ac search for xdg-open and htmlview in priority order,
  	  set variable html_browser_open to the one found, in spec file require
  	  xdg-utils for fedora and htmlview for RHEL.

  	- add "Host" column in browser
  	  add "Toggle Column Visibility" menu to toggle display of any column on/off

  	- Resolves bug #310261: setroubleshoot notifications aren't throttled

  	- add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
  	  emit cached event. Disable timeouts used to flush events if
  	  AUDIT_EOE has been seen.


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
  	  new log file scanning code introduced for the browser.

  	- update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  	- update Polish translation (Piotr Drąg (raven@pmail.pl))

  	- Resolves bug #239893: sealert wakes up very often
  	  This was caused by the use of threads and pygtk's thread signal
  	  handling.  The only use of threads in sealert was for log file
  	  scanning so that the UI would remain responsive during a
  	  scan. Threads in sealert have now been completely
  	  removed. Instead the scanning work is performed in a gobject idle
  	  function called from the main loop. The idle function is written
  	  as a python generator function which allows for the function to
  	  perform a small amount of work, save it's execution state and
  	  return. The next time the idle function is called from the main
  	  loop it resumes execution from it's last state until it decides
  	  to yield control again. This way the long running scan/analysis
  	  can be performed in small successive units of work during the
  	  time the application is otherwise idle and it does not interfere
  	  with the rest of the GUI event processing. Everything now occurs
  	  in an event loop, think of it as the applications process/thread
  	  scheduler whose event handlers execute time slices.

  	- rewrote parts of the audit input pipeline to use generators
  	  instead of callbacks, thus permitting the logfile scanning code
  	  to yield control with more granularity. Also updated
  	  test_setroubleshootd and audisp_listen to use the new
  	  generator/yield logic.

  	- rewrote the dialog used for scanning log files, progress bar
  	  updates are now in the dialog, the scan can be terminated part
  	  way through, errors from the scan are reported in pop-up dialog,
  	  one can only dismiss the dialog with success if the scan had
  	  been successfully run to completion, otherwise the user is only
  	  left with the option to cancel.

  	- Relates bug #252035  bug #247469, setroubleshootd and sealert should
  	  exit if SELinux is disabled.

  	- add utility functions escape_html() and unescape_html()

  	- fix initial sort order in browser, track sort order in browser

  	- modify AVC.get_path() to only return a value if the 'path' field is
  	  set, formerly it also considered the fields 'name' & 'file' which were
  	  incorrect. get_path() now also looks to see if the string begins with a
  	  slash for a fully qualified path, if not it looks to see if its a 
  	  pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
  	  the instance information inside the brackets and returns just the type of 
  	  the pseudo path. This is done because we do not want path information
  	  in the signature to be unique for each instance of the denial.

  	- modify the TimeStamp class to hide it's internal datetime member,
  	  remove the cmp() method, the internal __cmp__ will be automatically invoked.

  	- require selinux policy version in spec file to allow system dbus use
  	
  	- Resolves bug #256601: audit2allow generates incorrect syntax when comma "," in
  	  denied list

  	- update po i18n files

  	- Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  	- can listen for audit events on either /var/run/audit_events
  	  in bindary protocol mode or /var/run/audisp_events in
  	  text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
  	  from setroubleshoot
  	
  	- export ClientConnectionHandler from rpc.py as a base class.
  	  Derive SetroubleshootdClientConnectionHandler and
  	  AuditClientConnectionHandler from ClientConnectionHandler.

  	- add audisp_listen as test program

  	- create setroubleshoot sym link in top devel directory pointing
  	  to src so import setroubleshoot.foo if PYTHONPATH=topdir

  	- add get_option, convert_cfg_type to config.py.in so that one
  	  can pass optional dict to override config file settings

  	- rewrite log_init() so it's easier for other programs to use it,
  	  fix the import logic concering log & config

  	- remove log code from test_setroubleshoot, now just does import
  	  from setroubleshoot.
  	
  	- test_setroubleshootd can now handle audit records in both text
  	  and binary formats, can be selected by command line arg. It can now
  	  either output to clients connecting on a socket or to stdout. Can
  	  now optionally exit after N socket client connections.

  	- remove non audit record lines from test data

  	- remove config_init() and log_init() from package __init__.py
  	  It was the wrong place to call them, now call them when the
  	  process initializes before the first setroubleshoot imports

  	- add parse_config_setting() and set_config() to config module
  	- setroubleshootd now accepts -c --config command line arg
  	- test_sectroubleshoot: add err defines & program_error exception
  	  add is_valid() tests to assure we read a valid audit record
  	  log the unrecognized line if not valid, clean up socket close()

  	- Relates Bug #247056, update initscript to LSB standards
  	  Note: LSB initscripts in Fedora is not yet a resolved issue,
  	  the changes implemented were to add an LSB block and support
  	  the new LSB try-restart and force-reload commands. However
  	  the new /lib/lsb/init-functions are NOT currently used as this
  	  is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  	- wrap XML generation inside try/except
  	- correct how access list is obtained in avc_auparse.py
  	- add try/except around top level of AnalyzeThread.run so exceptions
  	  in the thread get reported and the analysis thread does not just die.
  	- also add try/except around LogfileThread.process_logfile
  	- add new function assure_file_ownership_permissions()
  	- server now forces it's database file permissions/ownership to be 0600 root:root
  	- rpm now forces the server's database file permissions/ownership to be 0600 root:root
  	- Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  	- clean up some other rpmlint warnings in setroubleshoot.spec
  	- fix missing install of setroubleshoot icon and sym link to it
  	- Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
  	  also run desktop-file-install in rpm install
  	- add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  	- Resolves Bug #250979, Bug #250932 Missing dependencies
  	- Restore plugins/Makefile.am which got nuked somehow
  	- remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  	- wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
  	  all consequences of the same problem, setroubleshootd/sealert when run
  	  in a non latin language environment because of incompatibilities in
  	  i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
  	  built-in audit parsing.
  	- fix bug in log file scanning and detail display update
  	- Resolves Bug# 238516, python pkg directory not owned


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  	- Check for paths in filesystem before suggesting chcon -R 
  	- Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  	- Fix performance problems in setroubleshoot browser log file scanning
  	- Significant rewrite of data/view management code in setroubleshoot
  	  browser. data and view now cleanly separated, can easily switch
  	  between data views while maintaining selections, view state, with
  	  proper update of status information in status area
  	- Resolves Bug# 227806: right click context menu resets selection
  	- Logfile scans now operate in independent thread, proper asynchronous
  	  updates of browser during scan, browser used to appear to hang
  	- Resolved Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  	- Add toobar support
  	- Implement GUI to edit email recipient list in setroubleshoot browser
  	- Added user help to setroubleshoot browser
  	- Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  	- improve traceback error reporting in sealert
  	- rewrite AboutDialog, replacing glade version
  	- Resolves bug #229849  Bug# 230115, Related bug #221850: fix uuid code to resolve
  	  '_uuid_generate_random' is not defined error


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  	- Resolved: Bug# 224343 sealert's "Aditional Info:" text should be in white box
  	- Resolved: Bug# 224336 sealert should have GtkRadioButtons in menu View
  	- Related: bug #224351
  	  Rewrite parts of logging support to better support changing output
  	  categories, output destinations. Now -v -V verbose works in sealert.
  	- Resolves bug# 225161, granted AVC's incorrectly identified as a denial
  	- add alert count to status bar
  	- add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  	- Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Resolved: bug# 221850
  	  plugin module loading was failing in python 2.5 with the message
  	  "SystemError: Parent module 'plugins' not loaded". This is due to a
  	  change in behavior between python 2.4 and 2.5, in python 2.4 the lack
  	  of a parent module was silently ignored. The fix is to load
  	  plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  	- change SETroubleshootDatabase so it is optional if it's backed
  	  by a file, this fixes the problem of us littering temporary files
  	  when scanning logfiles which does not require persistence.

  	- disable the view logfile menu item if no logfile has been opened

  	- fix redundant log messages for case where there is no log file and
  	  the console flag is set. When there is no log file the logging
  	  module opens a console stream, thus the console stream produced
  	  by the console flag was redundant.

  	- add username and password command line arguments
  	  rework startup logic so that all command line args are processed
  	  before we do any real work
  	
  	- rework the email preferences so that each email address can
  	  have a filter type associated with it.

  	  add a new filter_type "Ignore After First Alert" which filters
  	  after the first alert has been delivered

  	- add UI for setting the email addresses alerts are sent to.
  	  Add menu item to edit email list, add email list dialog.
  	  Remove 'recipient' config file entry, now list is stored
  	  in seperate file. Add rpc to query and set the email list,
  	  the GUI calls this to get the current list from the server
  	  and set it in the server, it is the server which reads and 
  	  writes the file. Add 'enable' flag to each email entry.
  	  Modify how the server iterates over the email list when it
  	  receives an alert. When marking an alert as having been sent
  	  the username is the email address but with 'email:' prepended so
  	  as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Resolved: #216575, more translations
  	- Replace delete and expunge menu labels with something more intuitive
  	- add ability for browser to be restarted with identical window
  	  position and state
  	- add pkg version and protocol version to logon handshake, test for
  	  compatibility between clint and server, prompt for restart
  	- add non-modal restart dialog
  	- add dialog to display traceback if sealert faults with an uncaught
  	  exception, try to limit invisible errors
  	- fix return args on rpc method
  	- add instance id to server


author: Dan Walsh <dwalsh@redhat.com> - 1.8.8-1
changelog:
  - Additional Translations
  	- Change sealert to be able to run without X-Windows
  	- Resolved: #216575


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Resolves: bug# 218150,
  	  "If view is set to "hide delete" you cannot filter new entries"
  	  Actually, the bug was toggle cell renderer was connected to the
  	  base model instead of the model attached to the view, the sort
  	  model, this meant the toggle was occuring on the wrong row if
  	  the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
  	  is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Resolves: bug# 217961, sealert needs pygtk2-libglade
  	- more i18n translations
  	- Resolves: bug# 217710, date representation did not respect locale,
  	  at the same time remove old date formatting code, now cruft since
  	  we can't use it because it was specific to US English.
  	- fix how selections are handled when rows are expunged.
  	- add Copy to Edit menu, for copying selection from detail pane,
  	  unfortunately gtkhtml2 widget does not preserve line breaks between
  	  table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Resolves: bug# 216936, bug# 215290, add 'Copy Alert' edit menu item
  	- clean up menu items, add tooltips
  	- fix printing so it will work with multiple alerts, force font to
  	  monospace 10pt, display error dialog if printing fails.
  	- Resolves: bug# 216908, platform and raw audit messages were not wrapped
  	  to fit on page.
  	- Related: bug# 216575, update i18n po files
  	- Resolves: bug# 216941, set default folder for save operation, also set
  	  default filename
  	- Resolves: #bug 216327 add menu items "toggle hide deleted", "select none". Add model
  	  filter to control visibility of alerts
  	- Resolves: bug# 214218, sealert with no command line
  	  arguments induces startup as dbus service, this had been a
  	  regression.
  	- Resolves: bug# 216327, rework how deletes are performed in browser. Delete
  	  now marks each seleted siginfo with a delete flag, expunge
  	  permanently deletes siginfo's marked for deletion, also add undelete
  	  command, removed delete confirmation dialog. Modify how text
  	  attributes in cell renderer are computed to allow for
  	  strike-throughs of alerts marked for deletion.
  	- multiple alerts can now be selected, add select all command,


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  	- Add command line utilities
  	- logfile scanning finally seems to work connected to browser
  	- Additional Information section of report now includes line
  	  number information (if alert was generated from logfile)
  	- replace database update_callback() with notify interface, a more
  	  generic solution more easily shared between components
  	- object implementing rpc method is now explicitly attached via
  	  connect_rpc_interface() instead of walking the MRO chain with
  	  magic exclusions. explicitly connecting is more flexible and
  	  robust (no getting the wrong object by mistake)
  	- fix handling of return args in local rpc case
  	- fix signal connections between audit and logfile
  	- split databae and database_properties for audit and logfile
  	- fix initial connection state
  	- fix lookup_local_id


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  	- log file parsing now approx 4 times faster
  	- greatly enhance the statistics reporting capability in attempt
  	  to diagnose slow log file parsing performance
  	- make gathering of environmenatal information optional,
  	  environment information is only relevant at the time the
  	  alert fires, not in a post processing scenario
  	- clean up several places where environmental information was
  	  assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  	- Fix icon
      [John Dennis <jdennis@redhat.com>]
  	- Memory leak fixes
  	- Substitution fixes
  	- File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  	- setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  	- Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  	- clear the GUI of old data before loading new data,
  	  fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  	- fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  	- fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  	- Add signal handling to client and server.
  	- Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  	- Add rpm information for target.
  	- Add hostname and uname to signature info
  	- Add display of the full AVC
  	- Add display of the analysis id
  	- Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  	- add CommunicationChannel class to encapsulate data transfer
  	  operations, in particular to provide an object threads can lock
  	  during data transfer.
  	- checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  	- dispatcher.py: rework how audit messages injected into the
  	  system and processed. Much of this work was in support of log file
  	  scanning which should be coupled to the exact same processing code
  	  as audit messages arriving from the audit socket. In essence log
  	  file scanning synthesizes an audit message and we inject it into
  	  the system the same way socket messages are injected. This was
  	  also an excellent moment correctly handle out of order audit
  	  messages, something we were not able to handle previously. This
  	  may have been contributing to splitting what should have been a
  	  single alert into two or more separate alerts because we didn't
  	  recongize the incoming audit events as a single event. Correctly
  	  assembling out of order messages introduced a fair amount of extra
  	  complexity as we now maintain a cache of recent audit events, this
  	  is fully documented in dispatcher.py
  	- Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  	- Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  	- Hook up the rest of the menu bars on browser window
  	- Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  	- add delete_signatures() method to AlertClient class
  	- start using the AppBar in the browser.
  	- "open logfile" now connected all the way from browser menu
  	  to server rpc, still needs implementation, but "plumbing" is working.
  	- fixes for the date/time dialog
  	- remove install of setroubleshoot.glade, we now only use
  	  setroubleshoot_browser.glade
  	- some fixed to DateTimeDialog


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
  	  fix reference to my_draw() in print function.

  	- make browser window hidden by default so it does not flash
  	  when it's first realized, connect to the "realize" signal to
  	  initially position the vpane, add signal handlers to track
  	  when the browser is visible, the presentation of the status
  	  icon now checks if the browser is visible, the status icon is
  	  not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  	- remove all vestiges of popup alert, now browser is the only
  	  UI game in town
  	- restore the automatic updating of the browser window which had
  	  been a regression, the AlertClient class now emits signals which
  	  the GUI classes can connect to receive signals from the fault server,
  	  also fix the "mark seen" regression
  	- browser.py: restore mark_seen timeout


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  	- Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  	- fix signature inflation, all data attached to a signature is now
  	  encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
  	  longer reaches into a signature looking for information, it looks
  	  in the siginfo. The Plugin class now defines the method
  	  get_signature() which report() calls to obtain the signature. The
  	  default signature provided by the Plugin class includes the
  	  analysisID, an AVC with just the src & target contexts, and the
  	  object_path. All data accesses and parameters which had been "sig
  	  and solution" are now done via the unified siginfo class. There is
  	  still a bit more work to be done on this but this represents a
  	  reasonble point to checkpoint the code in CVS.


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug #203479, missing requires of audit-libs-python
  	- add support to sealert to listen on a dbus session signal to display
  	  the gui. This is needed for when the status icon is not visible and
  	  the user wants to see the UI. There is now a seperate program
  	  setroubleshoot_launch_gui which emits the signal.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
  	  reports the traceback in the log file, and continues with the next
  	  plugin. Previously a bad plugin caused the entire plugin loading
  	  to abort and no plugins were loaded.
  	- Add "daemon_name" to automake variables, change pid file to match
  	- turn off "noreplace" on config file till things settle down a bit
  	- browser.py now validates data, also test for missing column data in the
  	  cell_data function to avoid exceptions.
  	- add stub for analyzie_logfile() rpc call
  	- turn off balloon notifications by default in config file,
  	  libnotify is just plain busted at this point :-(
  	- only the setroubleshootd daemon creates it's log file
  	  under /var/log now, the user app's do it in /tmp, change file
  	  permissions on /var/log/setroubleshoot back to 0644.
  	- sealert now looks up the username rather than hardcoding it to "foo"
  	- CamelCase to lowercase_underscore clean up


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  	- Fix up handling of mls ranges in context
  	- Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  	- add first seen, last seen, and report count to alert detail view
  	- make the seen icon work, if the alert has been displayed more
  	  than N seconds, mark the alert as having been seen by the user
  	  and update the icon is the list view
  	- change the schema for the xml data; the database now has a version,
  	  there is a local id attached to each signature, the filter list in
  	  the siginfo was replaced by a list of per user data, the per user
  	  data now contains the filter, seen_flag. Modify all the code which
  	  was operating on the filter information to use the new model.
  	- fix the xml serialization so that booleans can be used as a basic
  	  type and also so that non-string types can be used in element
  	  attributes (e.g. int, bool) and the serialization code will
  	  automatically convert between python types and strings.


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  	- clean up and rework the timestamp code in util.py so that
  	  time zones are handled properly, there were a number of bugs.
  	  Hopefully it's correct now because timezone handling is a pain.
  	- change the time format in the browser so all times are displayed
  	  identically, the friendly time relative format was hard to compare.
  	- modify the plugin 'make install' to delete all existing plugin's
  	  prior to installing the new ones
  	- add popup menu to status icon to choose between browser and
  	  alert GUI (not fully connected yet). Several bug fixes related
  	  to changing the filter_type from a string to an int.
  	- add filter selection to bottom pane, change filter_type from
  	  string to integer constant. Enhance how columns are handled.
  	  Get init_combo_box to work. Remove unused RPM and Bugzilla
  	  fields from bottom pane. Modify the default size of the browser
  	  window. Fix missing import in util.py.
  	- add ability in broswer to sort on columns, initially the report
  	  count column and the last seen date column. The date column now
  	  stores a TimeStamp object instead of a string. Add new method
  	  to TimeStamp to return a friendly string relative to the current
  	  time. The date column in the browser now has a cell data function
  	  which invokes the friendly format method of the TimeStamp object.
  	- add ability fo serialize to/from xml for classes which can
  	  inititialized from strings and serialized as strings (e.g. numbers,
  	  TimeStamps, etc.)
  	- add count of how many times a signature is reported, the date
  	  when first and last reported, add columns for report count and
  	  last date count to browser.
  	- checkpoint browser code, list pane and detail pane now working.
  	- add initial support for browser applet, move some functions which
  	  kept getting reused to util.py
  	- add reporting of environment to email alert (email alerts still
  	  need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  	- Fix disable_trans.py set_boolean call
  	- Complete all boolean plugins except disable
  	- Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  	- modify SetFilter in server to return errors instead of
  	  throwing an exception. Default the filter list on each alert display.
  	- minor tweaks to alert queue handling
  	- fix analyze() parameter list in ftp_is_daemon.py plugin
  	- sealert now responds to pending alerts more correctly, it shows
  	  how many pending alerts are in the queue, if you filter the pending
  	  alert status is updated, the next alert button will advance you
  	  to the next alert in the queue
  	- simplify major pieces of sealert by coalescing common code
  	  into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  	- Complete all boolean plugins except disable
  	- Make Close button work.
  	- Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  	- Add generic templating mechanism to Plugin
  	- Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  	- Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  	- Change AVC to have additional helpers for matching messages.
  	- Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
  	  avc. Much cleaner interface and no longer uses audit2allow cruft.
  	- Remove toolbar from popup window since it did nothing, and I
  	  think it looks better without it.
  	- fix allow_execmod plugin to report better data.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-3jpp.1
changelog:
  - Re-sync with latest from JPP.
  - Update patch for BZ #157585 to apply cleanly.
  - Partially adopt new naming convention.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-2jpp_1fc
changelog:
  - Merge spec and patches with latest from JPP.
  - Clean source tar ball off prebuilt jars and classes.
  - Use classpathx-jaf and jms for buildrequires for the time being.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.8-7jpp
changelog:
  - Add scripts and freedesktop.org menu entries for LogFactor5 and Chainsaw.
  - Include log4j.dtd and install SGML/XML catalogs.
  - Require jpackage-utils, jaxp_parser_impl.
  - Crosslink with local xml-commons-apis javadocs.
  - Don't BuildRequire JUnit, the test suite is not included :(
  - Fix Group.


author: David Walluck <david@anti-microsoft.org> 0:1.2.8-6jpp
changelog:
  - add jpackage-utils requirement
  - add epochs to all versioned requirements
  - use jmx explicitly for now until mx4j works


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.1.3-8jpp
changelog:
  - versioned dir for javadoc
  - drop j2ee package
  - no dependencies for manual and javadoc packages
  - adaptation for new jaf and javamail packages


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.1.3-1mdk
changelog:
  - 1.1.3
  - used new source packaging policy
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.0.4-2mdk
changelog:
  - merged with Henri Gomez <hgomez@users.sourceforge.net> specs:
  -  changed name to log4j
  -  changed javadir to /usr/share/java
  -  dropped jdk & jre requirement
  -  added jikes support
  -  changed description
  - added xerces requirement
  - more macros


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4.1
changelog:
  - don't create DT_TEXTREL binaries on ia64 (#462581, PR target/26090)
  - ignore install-info failures in scriptlets (#223680)
  - don't include cpp.debug in compat-gcc-34-debuginfo (#227021)


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4
changelog:
  - buildrequire elfutils-devel, so that libgcc_s is properly built
    on ia64
  - on ppc*/s390* make sure all needed math *l stubs are included
  - add -lnldbl_nonshared to ppc*/s390* specs


author: Stepan Kasal <skasal@redhat.com> - 0.2.6-1
changelog:
  - New upstream version.
  - Do use %{?dist} after all.
  - Use `make %{?_smp_mflags}'.
  - Move pkgconfig description to -devel package.
  - The -devel package now requires glib2-devel.


author: Joe Orton <jorton@redhat.com> 1.2.2-2
changelog:
  - avoid linking against -lrt
  - don't print -L${libdir} in --libs output
  - don't export -lcrypt/-luuid in .la file


author: Joe Orton <jorton@redhat.com> 0.9.6-6
changelog:
  - don't override CFLAGS at build time
  - allow setting TCP_NODELAY and TCP_CORK concurrently
  - use _exit() not exit() in child if exec*() fails (upstream #30913)


author: Joe Orton <jorton@redhat.com> 0.9.6-5
changelog:
  - add from 0.9.x branch:
   * fix for apr_{uid,gid}_* error handling (r239592)
   * fix for apr_file_ write flushing (r267192)
  - add backport for use of readdir64_r (r265032, r265681, r265684)


author: Joe Orton <jorton@redhat.com> 0.9.4-22
changelog:
  - backport fixes from HEAD:
   * correct implementation of nested mutexes
   * support for POSIX semaphores on LP64 platforms


author: Joe Orton <jorton@redhat.com> 0.9.4-15
changelog:
  - add support for setuid/setgid/sticky bits (André Malo)
  - add apr_threadattr_{guardsize,stacksize}_set() (latter by Jeff Trawick)


author: Joe Orton <jorton@redhat.com> 0.9.4-14
changelog:
  - enable posixsem and process-shared pthread mutex support, but
    ensure that sysvsem remains the default mechanism


author: Joe Orton <jorton@redhat.com> 0.9.4-13
changelog:
  - entirely remove 2Gb file size limit from apr_file_copy();
    fixes "svnadmin hotcopy" on repos with >2Gb strings table
  - work around getnameinfo bugs with v4-mapped addresses
  - fix apr_time_exp_get() for dates in 2038 (Philip Martin)


author: Joe Orton <jorton@redhat.com> 0.9.4-10
changelog:
  - fix configure check for mmap of /dev/zero
  - just put -D_GNU_SOURCE in CPPFLAGS not _{BSD,SVID,XOPEN}_SOURCE


author: Joe Orton <jorton@redhat.com> 0.9.4-6
changelog:
  - define apr_off_t as int/long/... to prevent it changing
    with _FILE_OFFSET_BITS on 32-bit platforms


author: Joe Orton <jorton@redhat.com> 0.9.3-7
changelog:
  - use AI_ADDRCONFIG in getaddrinfo() support (#73350)
  - include a working libtool script rather than relying on
   /usr/bin/libtool (#97695)


author: Than Ngo <than@redhat.com> - 4.0.8-7
changelog:
  - Resolves: #513600, [kn_IN][te_IN] switchdesk fails to start in kn_IN/te_IN locale
  - Resolves: #521285, fix shebang line of system Python executables


author: Than Ngo <than@redhat.com> 4.0.4-1
changelog:
  - fix wrong RB id of enlightenment which causes switchdesk crashed #124408
  - fix bug in setting default wm, bug #124292, #122260
  - fix bug in creating .Xclients, bug #123545
  - add selection button for System Default #110312


author: Than Ngo <than@redhat.com> 4.0.0-1
changelog:
  - 4.0.0 release
  - fixed #40226, #71711, #71990, #72744, #75751, #78603, #81801, #84043, #85077, #89347, #105880, #108582, #109683, #110312, #114190

  - Thu Jun 26 2003 Than Ngo <than@redhat.com> 3.9.8-18
  - build with gcc-3.3-12
  - fix desktop file issue
  - cleanup specfile
  - disable debuginfo


author: Mike A. Harris <mharris@redhat.com> 3.9.8-11
changelog:
  - Changed ./configure to rpm %configure macro so libdir is set right on x86_64
  - More prefix/share -> /usr/share fixes, removal of {prefix}, and usage of
    {_prefix} instead
  - Changed make install to %makeinstall macro


author: Mike A. Harris <mharris@redhat.com> 3.9.8-10
changelog:
  - Changed all occurances of {prefix}/foo to proper RPM macros and other spec
    file cleanups
  - Fix for unpackaged files in buildroot detected by new rpm policy


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - desktop-file (#69506)
  - fix wmaker (#65303)
  - sync with cvs
  - remove acconfig.h from CVS, it creates a config.h 
    with invalid deklarations
  - fix comments in switchdesk-gnome.c
  - fix CXXFLAGS in src/Makefile.am


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed switchdesk-helper script, and cleaned up manpage so we don't
    refer to AnotherLevel etc (#31142)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Handle KDE 2.0 (Bug #20371)
  - Make the desktop names for the textmode frontend case insensitive
  - Add Swedish translation to Desktop file (RFE #15362)
  - Add German translation to Desktop file
  - Fix up help text when neither switchdesk-kde nor switchdesk-gnome is
    installed
  - Fix up %description - we support WindowMaker, fvwm and twm.
  - Add the missing Xclients.fvwm file


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add docs for the KDE2 switch on command line (Bug #16743)
  - Fix crash in switchdesk-gnome (Bug #16743)
  - fix some minor oddities


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - add enlightenment, twm, windowmaker to gnome version, remove AnotherLevel
  - fix build with current KDE 2.0
  - stop using egcs++
  - fix a number of bugs
  - ExcludeArch ia64 for now (kdelibs doesn't compile there)


author: Tim Waugh <twaugh@redhat.com> 1.6.7-5
changelog:
  - Moved libhpip library to main package (bug #457440).
  - Don't use "/usr/bin/env python" for Python scripts (bug #521857).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to make hpssd message parser more robust (bug #457052).
  - Applied patches to fix insecure alert emails (bug #455235).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed post scriptlet to make sure it restarts the daemon on upgrade
    (part of bug #320021).
  - Build requires openssl-devel (part of bug #320021).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-4.1
changelog:
  - Fixed default config file (bug #212953).
  - Fixed operation on IPv6-enabled machines (bug #212948).  Local-only
    sockets are IPv4,
  - Moved libhpip to hpijs sub-package (bug #212532).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-2
changelog:
  - 1.6.7.
  - Conflict with selinux-policy < 2.3.4 to make sure new port numbers are
    known about (bug #201357).


author: Tim Waugh <twaugh@redhat.com> 0.9.10-5
changelog:
  - Patchlevel 1.
  - Fixed another case-sensitive match.
  - Require hpijs sub-package (bug #189140).
  - Don't package unneeded files (bug #189162).
  - Put fax PPD in the right place (bug #186213).


author: Tim Waugh <twaugh@redhat.com> 0.9.10-4
changelog:
  - Use case-insensitive matching.  0.9.8 gave all-uppercase in some
    situations.
  - Last known working hpijs comes from 0.9.8, so use that.


author: Tim Waugh <twaugh@redhat.com> 0.9.3-4
changelog:
  - Conflicts: hpijs from before this package provided it.
  - Conflicts: system-config-printer < 0.6.132 (i.e. before HPLIP support
    was added)


author: Tim Waugh <twaugh@redhat.com> 0.9.3-1
changelog:
  - Use /usr/share/applications for putting desktop files in (bug #159932).
  - Requires PyQt (bug #159932).


author: Bob Relyea <rrelyea@redhat.com> 0.05-9
changelog:
  - integrate review comments:
  - rename timing patch.
  - make libusb-version a define.
  - use pkg-config to find the appropriate flags and directories for pcsc-lite
  - fix service restart to be more friendly
  - remove mac specific README


author: Bob Relyea <rrelyea@redhat.com> 0.05-8
changelog:
  - add provides pcsc-ifd-handler so which fulfills the pcsc-lite dependency for
    at least one reader.


author: Bob Relyea <rrelyea@redhat.com> 0.05-2
changelog:
  - correct timing sleeps so slow tokens still work on fast machines.
  - add make variables to control the install target location


author: Miloslav Trmac <mitr@redhat.com> - 1.88-3.el5.1
changelog:
  - Preserve application exit code
    Resolves: #210893
  - Don't use PAM data after it was freed
    Resolves: #211188


author: Martin Bacovsky <mbacovsky@redhat.com> 1.86-1
changelog:
  - fix userpasswd - Query window pops up three times if cancelling passwd (#202924)
  - Serbian latin script translation added (#203003)


author: Jindrich Novy <jnovy@redhat.com> 1.85-1
changelog:
  - fix userpasswd - don't crash if pam produces multi-line output (#175735)
    Thanks to toddp@bestweb.net
  - added Serbian translation (#176152)


author: Jindrich Novy <jnovy@redhat.com> 1.83-1
changelog:
  - accept gecos information on commandline for userinfo,
    patch by mclasen@redhat.com (#173232)
  - update translations


author: Jindrich Novy <jnovy@redhat.com> 1.82-1
changelog:
  - don't use pam_stack.so
  - introduce userformat to better handle device formatting
    and removing usermount from menus (#132559)


author: Jindrich Novy <jnovy@redhat.com> 1.80-1
changelog:
  - fix "Unknown error" when password is mistyped in userpasswd (#135500)
  - add icons to windows for usermode-gtk applications (#155867)
  - add missing checks for some PAM error codes
  - fix ungettextized error message
  - update translations


author: Jindrich Novy <jnovy@redhat.com> 1.78-1
changelog:
  - pam-panel-icon has popup menu to choose to forget/keep
    authentization by right clicking as usual for other panel applets (#75845)
  - fix race condition (#142254)


author: Jindrich Novy <jnovy@redhat.com> 1.77-1
changelog:
  - preserve LANGUAGE environment variable in userhelper (#82300)
  - use badge instead of keyring icon for pam-panel-icon (#122487)
  - icon is not showed in the panel when logged as root (#75234)
  - use new environment variable USERHELPER_UID to identify
    an user who executed an application via userhelper  (#116186)


author: Jindrich Novy <jnovy@redhat.com> 1.76-1
changelog:
  - fix dependencies to Perl-XML-Parser #124170
  - use pamconsole instead of user in /etc/fstab to let
    usermount work with hal #139820


author: Jindrich Novy <jnovy@redhat.com> 1.75-1
changelog:
  - make pam-panel-icon using localized strings (#138609)
  - update translations
  - fix usermount to use "-I" option only for vfat and msdos fs
  - fix Makefile.am to not to use "Release" from spec to name dist tarballs


author: Jindrich Novy <jnovy@redhat.com> 1.74-1
changelog:
  - add patch from Mathew Miller (mattdm@mattdm.org) to use
    own user's password instead of root's in authentization
    (the user must be a member of specific group to enable it)


author: Jindrich Novy <jnovy@redhat.com> 1.73-1
changelog:
  - add support to configure.in for more languages
  - update translations from upstream
  - generate build scripts by autogen.sh


author: Rik van Riel <riel@redhat.com> 1.72-2
changelog:
  - add dependency on passwd (bz #125010)
  - make sure the Release: isn't part of the path name and tarball name


author: Ray Strode <rstrode@redhat.com> 1.72-1
changelog:
  - remove X-Red-Hat-Base category from userinfo.desktop
  - fix `make distcheck'
  - use proper value types for Terminal keys in desktop entries
  - remove upstreamed mkfs patch


author: Jindrich Novy <jnovy@redhat.com> 1.71-3
changelog:
  - installation to Preferences/More Preferences as a request
    of Ray Strode (rstrode@redhat.com) and #131605


author: Dan Walsh <dwalsh@redhat.com> 1.70-7
changelog:
  - More fixes for SELinux.  roll back to only use root for auth.
  - Add getenforce checks
  - Add root_passwd check


author: Nalin Dahyabhai <nalin@redhat.com> 1.70-1
changelog:
  - fix accidental mixup of role and type setting up new selinux context
  - log the new selinux context if we're running an app in a new selinux context


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't disable use of deprecated GLib and GTK+ APIs, reported by the
    mysterious Pierre-with-no-last-name


author: Nalin Dahyabhai <nalin@redhat.com> 1.69-1
changelog:
  - all around: cleanups
  - consolehelper: coalesce multiple messages from PAM again
  - usermount: handle user-not-allowed-to-control-mounts error correctly (#100457)
  - userhelper: trim off terminating commas when changing chfn info


author: Nalin Dahyabhai <nalin@redhat.com> 1.67-1
changelog:
  - work around GTK+ clearing DESKTOP_STARTUP_ID at gtk_init() time, so that
    startup notification actually works (#84684)


author: Nalin Dahyabhai <nalin@redhat.com> 1.66-1
changelog:
  - consolehelper-gtk: complete startup notification at startup
  - userhelper: pass startup notification data to consolehelper-gtk
  - consolehelper-gtk: setup startup notification for children if userhelper
    requests it


author: Nalin Dahyabhai <nalin@redhat.com> 1.63-2
changelog:
  - remove directory names from PAM config files, allowing the same config
    files to work for both arches on multilib boxes
  - translation updates


author: Nalin Dahyabhai <nalin@redhat.com> 1.63-1
changelog:
  - userhelper: swallow the exec'd program's exit status, which would be
    misinterpreted by consolehelper anyway


author: Nalin Dahyabhai <nalin@redhat.com> 1.62-1
changelog:
  - consolehelper: suppress dialog on successful execution
  - userhelper: return 0 on success, not 1 (what was I *thinking*?)


author: Nalin Dahyabhai <nalin@redhat.com> 1.61-1
changelog:
  - userinfo: exit properly on escape. handle site_info field properly. go
    insensitive while running child process.
  - userpasswd: exit properly on cancel.
  - all of the above: reap the child instead of checking for pipe close -- this
    way is more robust (#68578,72684).
  - usermount: run mount/umount synchronously. capture stderr and display in a
    dialog. desensitize action buttons when no filesystems are selected.
  - consolehelper: display errors if we're attempting to run bogus programs
    (#72127)
  - translation updates (#70278)


author: Nalin Dahyabhai <nalin@redhat.com> 1.60-1
changelog:
  - reconnect the "cancel" and "ok" buttons in userinfo
  - heed the cancel button when prompting for passwords in userinfo (#68578)
  - translation update


author: Nalin Dahyabhai <nalin@redhat.com> 1.59-2
changelog:
  - change "forget password" to "forget authorization", because we don't actually
    remember the password (that would be scary, #71476)
  - translation update


author: Nalin Dahyabhai <nalin@redhat.com> 1.59-1
changelog:
  - pam-panel-icon: overhaul, change the 'locked' icon to keyring-small, nix the
    'unlocked' icon
  - consolehelper-gtk: properly set up the dialog buttons (should be 'cancel/ok'
    when we're asking questions, was always 'close')
  - disappear pam_timestamp_init


author: Nalin Dahyabhai <nalin@redhat.com> 1.56-1
changelog:
  - userinfo: prevent users from selecting "nologin" as a shell (#68579)
  - don't strip binaries by default; leave that to the buildroot policy
  - use desktop-file-install


author: Nalin Dahyabhai <nalin@redhat.com> 1.54-1
changelog:
  - suppress even error messages from Xlib when consolehelper calls
    gtk_init_check() to see if the display is available


author: Nalin Dahyabhai <nalin@redhat.com> 1.52-1
changelog:
  - attempt to make prompts at the console more meaningful
  - when falling back, reset the entire environment to the user's


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - stop giving the user chances to enter the right password if we get a
    conversation error reading a response (appears to be masked by libpam)
    (#62195)
  - always center consolehelper dialog windows


author: Nalin Dahyabhai <nalin@redhat.com> 1.50-1
changelog:
  - fix userpasswd dialog message being incorrect for password changes
  - use a dumb conversation function when text mode is invoked without a tty -- if
    the service's configuration doesn't call for prompts, then it'll still work
  - port from pwdb to libuser
  - catch child-exit errors correctly again
  - fix keyboard-grabbing


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the grand libglade/gtk2 overhaul
  - allow disabling display of GUI windows by setting "GUI=false" in the
    console.apps configuration file (default: TRUE)
  - allow disabling display of GUI windows by recognizing a magic option
    on the command-line of the program being wrapped (NOXOPTION, no default)


author: Nalin Dahyabhai <nalin@redhat.com> 1.44-1
changelog:
  - only try to call gtk_main_quit() if we've got a loop to get out of (#54109)
  - obey RPM_OPT_FLAGS, obey


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set XAUTHORITY if we fall back to regular behavior (#26343)
  - make the suid helper 04711 instead of 04755


author: Yukihiro Nakai <ynakai@redhat.com>
changelog:
  - Some fix for Japanese environment.
  - Use gtk_set_locale() instead of setlocale()
  - Copyright update.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix the /usr/bin/shutdown wrapper so that root can call shutdown
  - only include the /usr/bin/shutdown wrapper on 6.x
  - also sanitize LC_MESSAGES
  - tweak sanitizing checks (from mkj)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix incorrect user name
  - add a shell wrapper version of /usr/bin/shutdown
  - build for 6.x errata
  - bump revision to upgrade the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix stdin/stdout redirection shenanigans (#11706)
  - fix authentication and execution as users other than root
  - make sure the right descriptors are terminals before dup2()ing them
  - cut out an extra-large CPU waster that breaks GUI apps


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install translations
  - fixup a messy text string
  - make "Mount"/"Unmount" translatable
  - stop prompting for passwords to shut down -- we can hit ctrl-alt-del anyway,
    and gdm users can just shut down without logging in


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - strip all binaries by default
  - add the name of the program being run to the userhelper dialog
  - add a graphic to the userhelper-wrap package
  - add a button to jump straight to nonprivileged operation when supported


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - The root exploit fix created a bug that only showed up in certain
    circumstances.  Unfortunately, we didn't test in those circumstances...


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed old complex broken gecos parsing, replaced with simple working parsing
  - can now blank fields (was broken by previous fix for something else...)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - FALLBACK/RETRY in consolehelper/userhelper
  - session management fixed for consolehelper/userhelper SESSION=true
  - fix memory leak and failure to close in error condition (#3614)
  - fix various bugs where not all elements in userinfo got set


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - better check for X availability
  - center windows to make authentication easier (improve later with
    transients and embedded windows where possible)
  - applink -> applnk
  - added a little padding, especially important when running without
    a window manager, as happens when running from session manager at
    logout time


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - updated userhelper.8 man page for consolehelper capabilities
  - moved from wmconfig to desktop entries


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - strip binaries
  - use defattr
  - fix spec file ( rm -rf $(RPM_BUILD_ROOT) is a stupid thing to do ! )


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - Updated the packages... now includes userpasswd for changing passwords
    and newer versions of usermount and userinfo.  No known bugs or
    misfeatures. 
  - Fixed the file list...


author: Michael K. Johnson <johnsonm@redhat.com> x.2.14-1
changelog:
  - explicitly check for tux syscall not implemented (#102740)
  - explicitly express tux syscall # for s390x as well as s390 (#102740)


author: Matt Wilson <msw@redhat.com> x.2.13-1
changelog:
  - fix syscall number for ppc, ppc64 which is now 225, not 224 (#86366)
    from Julie DeWandle
  - fix buildreq for glib to be glib2


author: Michael K. Johnson <johnsonm@redhat.com> x.2.11-1
changelog:
  - Added support for 32-bit userland with 64-bit kernel
     o Requires new protocol version 3
     o major version of package matches protocol version
     o Package can be built to support protocol versions 2 and 3.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Preparing for new release:
    o  New, faster date routine
    o  Better command-line option handling
    o  Removed counttux now that tux2w3c has the -c option
    o  Fixed docroot/modulepath handling
    o  More info in tux2w3c


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.4-5jpp_1fc
changelog:
  - Merge with latest from JPP.
  - Remove fileversion and my_version macros.
  - Remove notexentests patch and replace with a patch to disable
  - failure on tests.


author: Gary Benson <gbenson@redhat.com>
changelog:
  - Build with servletapi5.
  - Add NOTICE file as per Apache License version 2.0.
  - Skip some failing tests.


author: Ralph Apel <r.apel at r-apel.de> 0:1.4-3jpp
changelog:
  - Adapt to jdom-1.0-1 replacing org.jdom.input.DefaultJDOMFactory
    by org.jdom.DefaultJDOMFactory in AnakiaJDOMFactory.java
    as well as using org.jdom.output.Format in AnakiaTask.java
  - Therefore require jdom >= 0:1.0-1


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.3.1-2jpp
changelog:
  - Add Epochs to dependencies.
  - Add explicit defattrs.
  - Add non-versioned javadoc symlinks.
  - Use sed instead of bash 2 extension when symlinking jars during build.
  - Use full URL in Source.
  - Fix -javadoc Group tag.
  - Drop patch in favour of ant options.
  - BuildRequire jpackage-utils and antlr (latter needed for Anakia tests).


author: Richard Bullington-McGuire <rbulling@pkrinternet.com> 1.3-1jpp
changelog:
  - 1.3 stable release
  - Updated for JPackage 1.5
  - Run JUnit regression tests as part of the build process
  - Added patch file to fix test case classpath for JUnit standard locations


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.3-0.rc1.1jpp
changelog:
  - 1.3.0rc1
  - dropped patch
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for demo package


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Harald Hoyer <harald@redhat.com> 2.01-10.el5.1
changelog:
  - added patch from David Robinson to check for the image parameter
    (rhbz#436933)
  - added patch to prevent memset warning (rhbz#221169)
  - Resolves: rhbz#436933, rhbz#221169


author: Harald Hoyer <harald@redhat.com> 8:2.01.01.0.a03-1
changelog:
  - version 2.01.01a03
  - DVD patch from http://crashrecovery.org/oss-dvd.html adds support
    for DVD+RW and DVD+R DL burning


author: Harald Hoyer <harald@redhat.com> - 8:2.01.1-4
changelog:
  - use scd? instead of sg? for scsi scanning (may only work
    with a medium inserted, see bug 134822)


author: Harald Hoyer <harald@redhat.com> - 8:2.01.1-3
changelog:
  - better globbing
  - readded O_EXCL opening for the direct device opening case, 
    e.g. dev=/dev/cdrom
  - removed some debugging messages (bug 82089)


author: Harald Hoyer <harald@redhat.com> - 8:2.01.0.a33-1
changelog:
  - new version
  - [cdrtools changelog]: The changes in this release are as follows:
    Cdrecord now tries to check DMA speed, and prevents users from not
    using burnproof if the system is too slow. A bug in mkisofs
    -dvd-video was fixed. A bug in NT SPTI SCSI handling was fixed.


author: Harald Hoyer <harald@redhat.com> - 8:2.01.0.a32-1
changelog:
  - new version
  - [cdrtools changelog]: The clone option was documented in the man page.  
    cdda2wav/readcd -scanbus now works correctly readcd and  gives a 
    summary of defective sector numbers at the end. The  mkisofs 
    -H/-L/-P options were marked as reserved by POSIX, and mkisofs 
    was sped up for very long pathological directories  
    (all filenames need to be renamed for 8.3).


author: Harald Hoyer <harald@redhat.com> - 8:2.01-0.a27.2
changelog:
  - added dvd patch from http://people.mandrakesoft.com/~warly/files/cdrtools/
  - added note to manpage about configuration path change


author: Mike A. Harris <mharris@redhat.com> 1.10-10
changelog:
  - Quelled rpmlint warning messages by adding Provides: cdrecord-cdda2wav to
    cdda2wav subpackage and Provides: mkisofs to mkisofs subpackage


author: Mike A. Harris <mharris@redhat.com> 1.10-8
changelog:
  - Added cdrtools-1.10-mkisofs-sharing.patch to fix bug (#56304)
  - Added zisofs support patch from Hans Peter Anvin for bugzilla enhancement
    request number (#59251), which requires a Linux kernel 2.4.14 or newer in
    order to have zisofs support.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.10-3
changelog:
  - Add Epoch - the new cdrecord subpackage had a smaller Epoch than the
    standalone cdrecord package from 7.1, causing update problems (#49963)


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - split to a cdrtools srpm
  - itterated to 1.10
  - applied alane@geeksrus.net's patch to fix bug #19841


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - upgraded to 1.8.1 - updated the redhat patch (renamed to
    "conflocation"), remove the SILO patch (it should be
    supported now...). Is the IDE-patch still necesarry?
  - upgraded source location
  - don't strip manually


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 1.8a40
  - according to the author, cdda2wav and mkisofs are more recent in this
    package, so build them out of this tree too
  - add sparc patch from jakub


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - removed the mkisofs subpackage - we have mkisofs provided by 
    a'nother package (doh!)
  - moved former mkisofs diagnostic binaries to the main package
  - get rod of the cdda2wav too; cdparanoia is now in the distribution and
    it is a whole lot better too


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-13
changelog:
  - There are some nonsense warnings and errors while using usermod,
    so ignore them.
    Resolves: #458144


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-10
changelog:
  - Set home dir for user ident to /
    Resolves: #458144
  - Identify right error in get_tok_uint and similar functions
    Resolves: #438787
  - Work rigth with valist when logging is on.
    Resolves: #446844


author: Adrian Havill <havill@redhat.com> - 1.4.2-8
changelog:
  - tweak setting of uid/gid for key file so systems with no prior
    ident user/group don't generate a warning (#135837)


author: Adrian Havill <havill@redhat.com> - 1.4.2-4
changelog:
  - slightly better error checking for insane cases
  - tweak of the openssl requires dependency loop (#131291)
  - as ident.key is created in %post, tweak so verify passes (#131530)
  - make the uid/gid for ident conform to the past (#135752)


author: Adrian Havill <havill@redhat.com> - 1.4.0-1
changelog:
  - revise makefile; don't over-optimize as gcc can produce bad code
  - ptr cleanup when multiquery and missing /proc/net/tcp*
  - improve create_opt (error handling, debugging, identifiers)
  - add --prefix option for matching IPv4 to IPv6


author: Adrian Havill <havill@redhat.com> - 1.3.4-1
changelog:
  - retry reading proc with pauses to reduce false negatives
  - match IPv4 addresses against IPv6 compatibility addresses


author: Adrian Havill <havill@redhat.com> - 1.3.1-1
changelog:
  - increase default connections-per-sec/max-instances for HP
  - more doc cleanup
  - remove unnecessary rootdir check for -N/--ident


author: Adrian Havill <havill@redhat.com> - 1.3.0-1
changelog:
  - add unknown-error only -e option
  - edit readme, add rfc to docdir
  - code cleanup; remove static buffers, orthagonalize id names
  - ipv6 hybrid addr zero run correction
  - extra eight bits added to random key


author: Adrian Havill <havill@redhat.com> - 1.2.7-1
changelog:
  - added Provides to satisfy HP pkg rpm dep (#121447, #111640)
  - more code cleanup; minimize --resolve dns lookups


author: Adrian Havill <havill@redhat.com> - 1.2.4-1
changelog:
  - code vet and minor changes re alan@'s comments
  - default operating mode to alias all usernames as 'nobody'
    to prevent noobies from getting their mail addr harvested
  - clean up README documentation


author: Adrian Havill <havill@redhat.com> - 1.2.3-1
changelog:
  - mark xinetd conf file as a noreplace config file
  - more robust error checking for proper rfc1413 tokens


author: Adrian Havill <havill@redhat.com> - 1.2.0-1
changelog:
  - A few tweaks in the cmdline options for orthagonality
  - minor bug fix regarding reading from stdin in some multiquery cmdline cases
  - add --resolve


author: Adrian Havill <havill@redhat.com> - 1.0.0-2
changelog:
  - Obsolete pidentd -- authd and pidentd can't/shouldn't coexist on FC/RHEL
  - license tweak to allow openssl under any condition
  - no spec url needed; package is not worthy enough.


author: Than Ngo <than@redhat.com> 6:3.1.4-2
changelog:
  - backport from CVS to fix atlantikdesigner crashed on startup
  - fix miscompiled code, (bug #106198, #106888)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Run ldconfig in %post and %postun to make libkdegames happy
  - Replace absolute symlinks with relative symlinks (#24787)


author: Marek Grac <mgrac@redhat.com> - 2.0.115-95
changelog:
  - fence_vmware_soap -o list doesn't expose proper virtual machine path for fencing
    Resolves: rhbz#715107


author: Marek Grac <mgrac@redhat.com> - 2.0.115-94
changelog:
  - fence_ipmilan will not parse args with passwd_script option in cluster.conf
    Resolves: rhbz#732773


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-93
changelog:
  - cman: Clean shutdown_con if the controlling process is killed.
    Resolves: rhbz#590101
  - qdisk: Fix man page example
    Resolves: rhbz#745536
  - cman: fix building of debuginfo package (enable -g)
    Resolves: rhbz#746599


author: Marek Grac <mgrac@redhat.com> - 2.0.115-90
changelog:
  - fence_rhevm needs to change "UP" status to "up" state as the REST-API has changed
    Resolves: rhbz#731167
  - fence_ipmilan should honor ipmilan's -L option
    Resolves: rhbz#726731


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-89
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#727492
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#704243


author: Marek Grac <mgrac@redhat.com> - 2.0.115-88
changelog:
  - fence_bladecenter: Reboot operation did not work correctly with --missing-as-off
    Resolves: rhbz#689851
  - fence_drac5: Fix list support for Dell DRAC CMC
    Resolves: rhbz#718194
  - fence_drac5: drac5 firmware does not close ssh session correctly
    Resolves: rhbz#730634


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-86
changelog:
  - cman: do not free shutdown connection untill the very end to prevent
    spurious messages to be written to syslog
    Resolves: rhbz#727215


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-85
changelog:
  - fence_vmware_soap: Fix RHEL5-specific path issue
    (fence_vmware_soap_fix_rhel5_specific_path_issue.patch)
    Resolves: rhbz#717372


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-82
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Ancillary fix for 678061
    Resolves: rhbz#678061


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-81
changelog:
  - cman: Don't increment on LEAVING->MEMBER transition
    (don_t_increment_on_leaving_>member_transition.patch)
    Resolves: rhbz#649533
  - cman: Clarify 'expected' option
    (clarify_expected_option.patch)
    Resolves: rhbz#688701


author: Marek Grac <mgrac@redhat.com> - 2.0.115-80
changelog:
  - fence agents: Fix problems with SSL support 
    (fence_cisco_ucs-fence_rhevm-Problems-with-SSL-support.patch)
    Resolves: rhbz#693395

  - fence_ipmilan: Operation monitor should return correct exit code
    (fence_ipmilan-returns-incorrect-status-on-monitor-op.patch)
    Resolves: rhbz#693427

  - fence_vmware_soap: New fence agent for VMWare using SOAP API
    (Add-support-for-UUID.patch)
    (fence_vmware_soap-New-fence-agent-for-VMWare-using-SOAP.patch)
    Resolves: rhbz#634567


author: Marek Grac <mgrac@redhat.com> - 2.0.115-79
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Fix-for-support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Marek Grac <mgrac@redhat.com> - 2.0.115-77
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-76
changelog:
  - fence-agents: Fence_rhevm needs to change "RUNNING" status to "UP" status as the REST-API has changed.
    (fence_rhevm_needs_to_change_running_status_to_up_status_as_the_rest_api_has_changed.patch)
    Resolves: rhbz#681670
  - fence_rhevm: Update URL to RHEV-M REST API
    (fence_rhevm_update_url_to_rhev_m_rest_api.patch)
    Resolves: rhbz#681676


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-75
changelog:
  - fence_ipmilan: Fix manual page to describe usage with HP iLO 3
    (fence_ipmilan_fix_manual_page_to_describe_usage_with_hp_ilo_3.patch)
    Resolves: rhbz#671089
  - qdiskd: Fix bad timer check - RHEL5
    (qdiskd_fix_bad_timer_check_rhel5.patch)
    Resolves: rhbz#679274


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-74
changelog:
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into_part2.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-73
changelog:
  - Add "diag" option to fence_ipmilan
    (fence_ipmilan-Add-diag-option-to-support-ipmitool.patch)
    Resolves: rhbz#678061
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-72
changelog:
  - Improve error handling in RSA fence agent
    (fence_rsa-Better-error-handling.patch)
    Resolves: rhbz#678018
  - Automatic generation of manual pages
    (fence-agents-Automatic-generation-of-manual-pages.patch)
    (fence-agents-add-XSLT-template.patch)
    (library-Metadata-are-not-correct-if-agent-does-not-s.patch)
    Resolves: rhbz#488959


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-71
changelog:
  - Display the node's votes in cman_tool status
    (display_the_node_s_votes_in_cman_tool_status.patch)
    Resolves: rhbz#653508
  - cman: Fix cman_tool reporting with quorum disk
    (cman_fix_cman_tool_reporting_with_quorum_disk.patch)
    Resolves: rhbz#654894


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-70
changelog:
  - ccs: Allow ccs_tool to use alternate base ports
    (ccs_allow_ccs_tool_to_use_alternate_base_ports.patch)
    ccs: Update manual page for ccs_tool
    (ccs_update_manual_page_for_ccs_tool.patch)
    Resolves: rhbz#656427


author: Lon Hohberger <lhh@redhat.com> 2.0.115-69
changelog:
  - fence-agents: Add man pages for ucs, ifmib, rhevm
    (fence_agents_add_man_pages_for_ucs,_ifmib,_rhevm.patch)
    Resolves: rhbz#663808


author: Lon Hohberger <lhh@redhat.com> 2.0.115-67
changelog:
  - fence_scsi_test: add 'clear' action
    (fence_scsi_test_add_clear_action.patch)
    fence_scsi_test: document 'clear' action in man page.
    (fence_scsi_test_document_clear_action_in_man_page.patch)
    Resolves: rhbz#603838


author: Marek Grac <mgrac@redhat.com> 2.0.115-66
changelog:
  - cman: ownership of /var/log/cluster clobbers log files
    (fence_egenera_revert.patch)
    Resolves: rhbz#659090


author: Lon Hohberger <lhh@redhat.com> 2.0.115-64
changelog:
  - cman: Fix fail_recv_const length calculation
    (fix_fail_recv_const_length_calculation.patch)
    Resolves: rhbz#587080
  - Replace incorrect patch for "ccsd: Add error when bind fails" 
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996


author: Lon Hohberger <lhh@redhat.com> 2.0.115-63
changelog:
  - Updated patch for mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246


author: Lon Hohberger <lhh@redhat.com> 2.0.115-62
changelog:
  - fence_scsi_test: Add man page to Makefile.
    (fence_scsi_test_add_man_page_to_makefile.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-59
changelog:
  - fence_scsi_test: rewrite to more accurately test
    (fence_scsi_test_rewrite_to_more_accurately_test.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-58
changelog:
  - Disable fence_cisco_ucs & fence_rhevm since they depend
    on a package which is not available at this point.
    Related: rhbz#595385 rhbz#579859


author: Marek Grac <mgrac@redhat.com> - 2.0.115-56
changelog:
  - fence agents: fix build system for fence_rhevm
    (fence_rhevm-fix_build_system.patch)
    Resolves: rhbz#595385
  - fence agents: fix path to library
    (fence_cisco_ucs-library_path.patch)
    Resolves: rhbz#579859
  - fence agents: new fence agent for IF-MIB
    (fence_ifmib.patch)
    Resolves: rhbz#572863


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-55
changelog:
  - GFS2 mount fails incorrectly after correctly failed second-mount attempt
    (gfs2_mount_fails_incorrectly_after_correctly_failed_second_mount_attempt.patch)
    Resolves: rhbz#559735
  - cman: Make qdiskd heuristics time out
    (make_qdiskd_heuristics_time_out.patch)
    Resolves: rhbz#589266


author: Marek Grac <mgrac@redhat.com> - 2.0.115-54
changelog:
  - fence agents: New fence agent for RHEV-M REST API
    (fence_rhevm.patch)
    Resolves: rhbz#595385
  - fence agents: New fence agent for Cisco UCS
    (fence_cisco_ucs.patch)
    Resolves: rhbz#579859
  - New dependency added: python-pycurl


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-53
changelog:
  - Fence agents: Rename power-wait to power_wait and add
    help information, replacing previous patch.
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-52
changelog:
  - Fence agents: add power-wait to fence_ipmilan for iLO3 devices
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: David Teigland <teigland@redhat.com> - 2.0.115-51
changelog:
  - fenced: use post_join_delay after cluster join
    (fenced-use-post_join_delay-after-cluster-join.patch)
    Resolves: rhbz#575952
  - gfs_controld: fix plock owner syncing
    (gfs_controld-fix-plock-owner-syncing.patch)
    Resolves: rhbz#624156
  - gfs_controld: fix plock owner in unmount
    (gfs_controld-fix-plock-owner-in-unmount.patch)
    Resolves: rhbz#624554


author: David Teigland <teigland@redhat.com> - 2.0.115-50
changelog:
  - group_tool: list more than 64 groups
    (group_tool-list-more-than-64-groups.patch)
    Resolves: rhbz#561509


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-49
changelog:
  - cman: Change flags to be values instead of bitmasks
    (cman_change_flags_to_be_values_instead_of_bitmasks.patch)
    Resolves: rhbz#595394


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-48
changelog:
  - gfs_controld: set last_plock_time for ownership operations
    (gfs_controld_set_last_plock_time_for_ownership_operations.patch)
    Resolves: rhbz#578632


author: Marek Grac <mgrac@redhat.com> - 2.0.115-47
changelog:
  - Method to cause one node to delay fencing in a cluster
    (fencing-delay_1.patch)
    (fencing-delay_2.patch)
    (fencing-delay_3.patch)
    (fencing-delay_4.patch)
    Resolves: rhbz#613064


author: Marek Grac <mgrac@redhat.com> - 2.0.115-46
changelog:
  - Not all parameters appear in metadata
    (fencing_Not_all_parameters_in_metadata.patch)
    Resolves: rhbz#619034
  - make "port" a synonym of "module_name" for drac5 
    (fence_drac5-synonym-for_modulename.patch)
    Resolves: rhbz#619776
  - Return codes of fencing agent 
    (fence_correct_return_codes.patch)
    (fence_correct_return_codes-ipmilan.patch)
    Resolves: rhbz#583034


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-45
changelog:
  - qdisk: mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246
  - ccsd: Add error when bind fails
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996
  - fence-agents: Update fence_ack_manual man page
    (update_fence_ack_manual_man_page.patch)
    Resolves: rhbz#578604


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-44
changelog:
  - reorder patches
  - gfs_controld: Add extended information to 'group_tool dump plocks' (gfs)
    (add_extended_information_to_group_tool_dump_plocks_gfs.patch)
    Resolves: rhbz#514264
  - cman: make libcman /dev/zero fd close-on-exec
    (cman_make_libcman_dev_zero_fd_close_on_exec.patch)
    Resolves: rhbz#585218
  - cman: set fail_recv_const to 2500
    (cman_set_fail_recv_const_to_2500.patch)
    Resolves: rhbz#587080
  - cman: fix consensus calculation
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#611391


author: Marek Grac <mgrac@redhat.com> 2.0.115-42
changelog:
  - fence_egenera: possible symlink vulnerability
  - fencing: Some fencing agents do not support login using keys
  - Resolves: rhbz#519682 rhbz#582334


author: Marek Grac <mgrac@redhat.com> 2.0.115-41
changelog:
  - fence_ilo: will throw exception if user does not 
    have power priviledges
  - Resolves: rhbz#576176


author: Marek Grac <mgrac@redhat.com> 2.0.115-40
changelog:
  - fence_rsb: force stdout close for fence_rsb
  - fence_rackswitch: fix warnings in build process
  - fence_rackswitch: should accept unknown parameters
  - fence_wti: add direct support for WTI VMR
  - fence_apc: fails for some port numbers 
  - Resolves: rhbz#583045 rhbz#578615 rhbz#606315 rhbz#607265


author: Marek Grac <mgrac@redhat.com> 2.0.115-39
changelog:
  - fence_vmware: fix building for fence_vmware_helper.pl
  - fence_wti: support non-default TCP ports for telnet/ssh
  - Resolves: rhbz#590304 rhbz#572996


author: Marek Grac <mgrac@redhat.com>
changelog:
  - fence_ipmilan: correct return codes + manual page info
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-37
changelog:
  - fencing: work around bad nss/nspr headers which contain
    non-ANSI prototypes
  - Resolves: rhbz#575157


author: Marek Grac <mgrac@redhat.com> - 2.0.115-36
changelog:
  - fencing: correct return codes (perl + python based agents)
  - fence_ilo: remove import of openSSL into fence agent
  - fencing: preliminary support for generating manual pages
  - Resolves: rhbz#583049 rhbz#583053
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-34
changelog:
  - fencing: Fix fence_snmp so it returns an error code if the passphrase
    is too short
  - Resolves: rhbz#573834


author: Marek Grac <mgrac@redhat.com> - 2.0.115-30
changelog:
  - fence_scsi does not accept unknown options on STDIN
  - fence_scsi man page contains invalid option
  - Resolves: rhbz#515731 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-26
changelog:
  - New fence agent for VMWare (TechPreview)
  - Fence agent for HP iLO2 MP
  - Fence agent for RSB ends with traceback
  - Resolves: rhbz#508722 rhbz#545054 rhbz#548577


author: Marek Grac <mgrac@redhat.com> - 2.0.115-25
changelog:
  - fence_egenera symlink attack vulnerability
  - Security feature for SNMP based agent: apc_snmp & ibmblade
  - Change default timeout values for various fence agents
  - Version is not shown in several fence agents
  - Resolves: rhbz#519682 rhbz#532922 rhbz#546340 rhbz#549124
  - Resolves: rhbz#549113


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-24
changelog:
  - cman: automatically configure consensus based on token timeout
  - Add readconfig & dumpconfig to fence_tool
  - Make groupd handle partition merges
  - Resolves: rhbz#544482 rhbz#546082 rhbz#514662


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-22
changelog:
  - scsi_reserve should always echo after failure
  - scsi_reserve should handle multipath with partitions
  - fence_scsi_test: add debug information
  - fence_scsi_test should not allow -c and -s options together
  - Resolves: rhbz#514260 rhbz#516625 rhbz#516763 rhbz#528832


author: Marek Grac <mgrac@redhat.com> - 2.0.115-19
changelog:
  - fence: Fencing fails when used without telnet or ssh
  - fence: APC changed product name (MasterSwitch -> Switched Rack PDU)
  - fence: fix invalid initalization introduced by retry-on option
  - Resolves: rhbz#512343 rhbz#447481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-18
changelog:
  - fence: Broken device detection for DRAC3 ERA/O
  - fence: Fix case sensitivities in action parameter
  - Resolves: rhbz#489809 rhbz#528938


author: Marek Grac <mgrac@redhat.com> - 2.0.115-17
changelog:
  - fence: fencing_snmp fails on all operations & traceback fix
  - fence: accept unknown options from standard input
  - fence: fence_apc unable to obtain plug status
  - Resolves: rhbz#528916 rhbz#532916 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-16
changelog:
  - fence: timeout options added 
  - fence: better XML generation for metadata (needed for default values)
  - fence: better default timeout for bladecenter
  - fence: retry-on option used in iLO fence agent
  - fence: add missing-as-off option (missing blade/device is always OFF)
  - Resolves: rhbz#507514 rhbz#526806 rhbz#248006


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-15
changelog:
  - make qdiskd "master-wins" node work
  - make qdisk self-fence system if write errors take longer than interval*tko
  - Resolves: rhbz#511113 rhbz#372901


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-14
changelog:
  - Make service_cman.lcrso executable, so that RPM adds it to the debuginfo pkg
  - Resolves: rhbz#511346


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-11
changelog:
  - Fix fence_scsi, multipath and persistent reservations
  - scsi_reserve now handles failures
  - cman_tool leave remove reduces quorum when no services are connected
  - Resolves: rhbz#514260 rhbz#516625 rhbz#515446


author: Marek Grac <mgrac@redhat.com> - 2.0.115-4
changelog:
  - Add option 'list devices' for fencing agents
  - Add support for switching IPv4/IPv6
  - Fence agent ends with traceback if option is missing
  - Add option to set port for SSH/telnet
  - Resolves: rhbz#519697 rhbz#520458 rhbz#506928 rhbz#506928


author: Marek Grac <mgrac@redhat.com> - 2.0.115-3
changelog:
  - Force stdout close for fencing agents
  - Support for long options 
  - Resolves: rhbz#518622 rhbz#519670


author: Chris Feist <cfeist@redhat.com> - 2.0.114-1
changelog:
  - local variable 'verbose_filename' referenced before assignment has been fixed
  - RSA II fencing agent has been fixed.
  - Resolves: rhbz#493802 rhbz#514758


author: Chris Feist <cfeist@redhat.com> - 2.0.113-1
changelog:
  - Limitations with 2-node fence_scsi are now properly documented in the man
    page.
  - Resolves: rhbz#512998


author: Chris Feist <cfeist@redhat.cmo> - 2.0.106-1
changelog:
  - The lssyscfg command can take longer than the shell timeout which will
    cause fencing to fail, we now wait longer for the lssyscfg command to
    complete.
  - Resolves: rhbz#504705


author: Chris Feist <cfeist@redhat.com> - 2.0.104-1
changelog:
  - Broadcast communcations are now possible with cman
  - fence_lpar can now login to IVM systems
  - Resolves: rhbz#502674 rhbz#492808


author: Chris Feist <cfeist@redhat.com> - 2.0.103-1
changelog:
  - fence_apc no longer fails with a pexpect exception
  - symlink vulnerabilities in fance_apc_snmp were fixed
  - The virsh fencing agent was added.
  - Resolves: rhbz#496629 rhbz#498952 rhbz#501586


author: Chris Feist <cfeist@redhat.com> - 2.0.101-1
changelog:
  - The SCSI fence agent now verifies that sg_persist is installed properly.
  - The DRAC5 fencing agent now properly handles a modulename.
  - QDisk now logs warning messages if it appears it's I/O to shared storage
    is hung.
  - Resolves: rhbz#496724 rhbz#500450 rhbz#500567


author: Chris Feist <cfeist@redhat.com> - 2.0.100-1
changelog:
  - Support has been added for ePowerSwitch 8+ devices
  - cluster.conf files can now have more than 52 entries inside a block inside
    the <cman> block
  - The output of the group_tool dump sub commands are no longer NULL padded.
  - Using device="" instead of label="" no longer causes qdiskd to incorrectly
    exit
  - The IPMI fencing agent has been modified to timeout after 10 seconds.  It is
    also now possible to specify a different timeout with the '-t' option.
  - The IPMI fencing agent now allows punctuation in the password
  - Quickly starting and stopping the cman service no longer causes the cluster
    membership to become inconsistent across the cluster
  - An issue with lock syncing causing 'receive_own from ...' errors in syslog
    has been fixed
  - An issue which caused gfs_controld to segfault when mounting hundreds of
    filesystems has been fixed
  - The LPAR fencing agent now properly reports status when an LPAR is in
    Open Firmware
  - The APC SNMP fencing agent now properly recognizes outletStatusOn and
    outletStatusOff returns codes from the SNMP agent
  - WTI Fencing agent can now connect to fencing devices with no password
  - The rps-10 fencing agent now properly performs a reboot when run with no
    options.
  - The IPMI fencing agent now supports different cipher types with the '-C'
    option
  - Qdisk now properly scans devices and partitions
  - Added support for LPAR/HMC v3
  - cman now checks to see if a new node has state to prevent killing the first
    node during cluster setup
  - service qdiskd start now works properly
  - The McData fence agent now works properly with the Sphereon 4500 model
  - The Egenera fence agent can now specify an ssh login name
  - APC Fence agent works with non-admin accounts with firmware 3.5.x
  - fence_xvmd now tries two methods to reboot a virtual machine
  - Connections to openais are now allowed from unprivileged CPG clients with
    user and group of 'ais'
  - Support has been added for Cisco 9124/9134 SAN switches
  - groupd no longer allows the default fence domain to be '0' which would cause
    rgmanager to hang
  - The RSA fence agent now supports ssh enabled RSA II devices
  - DRAC fence agent now works with iDRAC on the Dell M600 Blade Chassis
  - fence_drac5 now shows proper usage instructions
  - cman no longer uses the wrong node name when getnameinfo() fails
  - The SCSI fence agent now verifies that sg_persist is installed properly
  - Resolves: rhbz#467112 rhbz#468966 rhbz#470318 rhbz#276541 rhbz#447964 rhbz#472786 rhbz#474163 rhbz#480401 rhbz#481566 rhbz#484095 rhbz#481664 rhbz#322291 rhbz#447497 rhbz#484956 rhbz#485700 rhbz#485026 rhbz#485199 rhbz#470983 rhbz#488958 rhbz#487501 rhbz#491640 rhbz#480178 rhbz#485469 rhbz#480836 rhbz#493207 rhbz#493802 rhbz#462390 rhbz#498329 rhbz#488565 rhbz#499871


author: Chris Feist <cfeist@redhat.com> - 2.0.96-1
changelog:
  - WTI fencing agent no longer powers off/on power if it is unable to get
    status.
  - Resolves: rhbz#468904


author: Chris Feist <cfeist@redhat.com> - 2.0.89-1
changelog:
  - Fixed issue with fence_apc failing with a pexpect exception.
  - Added fence agent for VMware ESX.
  - Additional logging information has been added by fence_scsi.
  - groupd now detects dead daemons and removes their nodes from the cluster.
  - A network interface selection option has been added for fence_xvmd.
  - Resolves: rhbz#460054 rhbz#251048 rhbz#460909 rhbz#318571 rhbz#457104


author: Chris Feist <cfeist@redhat.com> - 2.0.88-1
changelog:
  - Fix cman_tool nodes -a.
  - nolock gfs filesystems are ignored in the groupd startup.
  - skip_undefined option added for fenced.
  - groupd improved to better handle upgrades.
  - man pages for fence agents have been updated.
  - LPAR/HMC fence agent updated to fix state detection.
  - New option added to fence_tool to delay before join.
  - fence_tool -m option has been added for 2 node clusters.
  - group_tool ls is now scriptable.
  - Fixed qdiskd file descriptor leak.
  - qdiskd can no longer updated cman if the disk is unavailable.
  - qdisk no longer freezes cluster when FC cable is unplugged
  - Resolves: rhbz#454401 rhbz#315741 rhbz#459127 rhbz#457104 rhbz#448043 rhbz#460190 rhbz#460190 rhbz#459754 rhbz#459678 rhbz#460645 rhbz#460937 rhbz#442541


author: Chris Feist <cfeist@redhat.com> - 2.0.87-3
changelog:
  - An option to the init script has been added to prevent joining to the fence
    domain.
  - stop_cman="1" now works if heuristics fail during initialization.
  - qdiskd now works with block devices which are not in /proc/partitions
  - Quorum device info can now be displayed with 'cman_tool status'.
  - A dirty node is now prevented from joining the cman cluster.
  - A bug which caused "Node X is undead" error messages to be printed is fixed.
  - When groupd starts up it now ignores nolock file systems.
  - cman is now only notified that a fence has occured when all devices have completed
    successfully.
  - plocks are now read from dlm or lock_dlm.
  - Support for a 24-port APC fencing device has been added.
  - gfs_controld now ignores the write(2) return value on plock devices.
  - Several infinite loops were fixed.
  - gfs_controld now retries recovery for a withdrawn journal.
  - apc_snmp fence agent has been added.
  - Resolves: rhbz#455598 rhbz#455865 rhbz#362031 rhbz#443358 rhbz#442541 rhbz#315741 rhbz#456403 rhbz#450169 rhbz#444615 rhbz#446128 rhbz#444529 rhbz#442451 rhbz#438905


author: Chris Feist <cfeist@redhat.com> - 2.0.81-1
changelog:
  - cman now starts correctly when additional params are given to network-bridge 
  - fencde admin override now updates cman
  - qdisk master abdication now works properly
  - groupd no longer processes messages from dead nodes
  - dlm no longer complains about closing a connection to node 0 when shutting
    down qdisk
  - Resolves: rhbz#434790 rhbz#435189 rhbz#430264 rhbz#436984 rhbz#437496 rhbz#315711


author: Chris Feist <cfeist@redhat.com> - 2.0.80-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed alignment problem with ppc64
  - Prevent "reservation conflict" messages when scsi_reserve starts.
  - Leave the fence domain if scsi_reserve fails to register with any device.
  - Improve logging in scsi_reserve script.
  - Use "locking_type = 0" for all lvm commands (ie. vgs).
  - Fix SCSI reservations scripts to handle LVM mirrors and stripes.
  - Not an error if fence_scsi attempts to remove a non-existent key from a
    device.
  - Resolves: rhbz#429633 rhbz#429546 rhbz#373491 rhbz#373511 rhbz#373541 rhbz#373571 rhbz#429033


author: Chris Feist <cfeist@redhat.com> - 2.0.79-1
changelog:
  - Dumping of debug logs from daemons has been improved
  - Plock performance has been improved
  - ccs_tool now returns the proper exit status
  - ccs lookup functions now recognize alternative hostnames better
  - ccs_connect now fails properly when a non-root user calls it
  - Endian issues which caused problems on multi-arch clusters were fixed
  - Possible NULL pointer dereferences in cman were fixed
  - Quorum is now properly reduced when a node leaves using
    "cman_tool leave remove"
  - Resolves: rhbz#317181 rhbz#359271 rhbz#404451 rhbz#249781 rhbz#323711 rhbz#289501 rhbz#418741 rhbz#267441 rhbz#271701


author: Chris Feist <cfeist@redhat.com> - 2.0.75-1
changelog:
  - Potential NULL pointer dereferences were removed.
  - Correctly reduce quorum when a node leaves using "cman_tool leave remove"
  - Quorum is now recalculated when cman has the new nodes expected_votes.
  - Updated cman_tool man page
  - Resolves: rhbz#323931 rhbz#317561 rhbz#327721


author: Chris Feist <cfeist@redhat.com> - 2.0.71-1
changelog:
  - A memory leak was fixed in fence_xvmd.
  - fence_egenera script no longer will fence a node during a crash dump.
  - Resolves: rhbz#251358 rhbz#250152


author: Chris Feist <cfeist@redhat.com> - 2.0.44-1
changelog:
  - New upstream sources.
  - Resolves: rhbz#213878 rhbz#216902 rhbz#213763 rhbz#217436
  - Resolves: rhbz#217460 rhbz#211836 rhbz#211918


author: Joshua Daniel Franklin <joshuadfranklin@yahoo.com> 1.10-2
changelog:
  - Change License string to "ASL 2.0" instead of "Apache Software License"
  - Disable debug files with "--enable-debug=no" (BZ #427013)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.00-2
changelog:
  - --with-system-pinerc=%_sysconfdir/pine.conf
    --with-system-fixed-pinerc=%_sysconfdir/pine.conf.fixed (#426512)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 0.999-3
changelog:
  - EXTRACFLAGS=$RPM_OPT_FLAGS
  - --with-c-client-target=lfd
  - --with-passfile=.alpine.passfile
  - Requires: mailcap


author: Joshua Daniel Franklin <joshuadfranklin@yahoo.com> 0.999-2.2
changelog:
  - remove problem cc5.sol file
  - integrate changes from Patrick "Jima" Laughton <jima@beer.tclug.org>


author: Elliot Lee <sopwith@redhat.com> 2.0.0-7
changelog:
  - More missing libXau hackery (prog_as.patch so we can run auto* to pull 
  in an updated libtool)
  - _smp_mflags


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-12.2
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-10
changelog:
  - fix bug when unselect command on proxy mode caused segmentation fault (#679253)
  - fix lmtp ignorequota on ia64 (#584088)
  - replace instances of #!/usr/bin/env python with #!/usr/bin/python (#521338)
  - don't require lm_sensors-devel, net-snmp-devel is enough (#437999)
  - fix file descriptor leak when moving mailbox folder with quota set (#253854)
  - document that client ignores mupdate_port option (#504813)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-5
changelog:
  - don't modify imapd.conf if not necessary, 
    fix different time for source files across archs (#497317)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-4
changelog:
  - fix mupdate connection (#326511)
  - fix tls and authentication for LMTP (#250189)
  - extend ctl_cyrusdb man page (#463230)


author: Petr Rockai <prockai@redhat.com> - 2.3.7-1
changelog:
  - update to latest upstream version, fixes a fair amount of issues
  - forward-port the autocreate and rmquota patches (used latest
    upstream patches, those are for 2.3.3)


author: Petr Rockai <prockai@redhat.com> - 2.3.1-3
changelog:
  - install perl modules into vendor_perl instead of site_perl
  - change mode of perl .so files to 755 instead of 555
  - update pam configuration to use include directive instead
    of deprecated pam_stack
  - change prereq on cyrus-imapd-utils to requires


author: Petr Rockai <prockai@redhat.com> - 2.3.1-2.99.test1
changelog:
  - testing build for RHEL5
  - address bunch of rpmlint errors and warnings
  - rename perl-Cyrus to cyrus-imapd-perl to be consistent with rest
    of package (the cyrus modules are not part of cpan)
  - added provides on cyrus-nntp and cyrus-murder (the functionality
    is part of main package now)
  - hardcoded a bunch of build parameters for RHEL-5
  - removed generation of README.buildoptions
  - the two above made it possible to get rid of most build-time parameter
    guessing from environment
  - get rid of internal autoconf (iew)
  - don't strip binaries, renders -debuginfo useless...
  - remove prereq's in favour of newly added requires(...)


author: John Dennis <jdennis@redhat.com> - 2.3.1-2
changelog:
  - bring up to Simon Matter's 2.3.1-2 release
  - fix bug #173319, require cyrus-sasl-lib instead of cyrus-sasl
  - fix bug #176470, hardcoded disttag


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.18
changelog:
  - update rpm_set_permissions script
  - add snmp support as build time option, disabled by default
    because it doesn't build on older distributions


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.13
changelog:
  - add autosievefolder patch
  - add rmquota+deletemailbox patch
  - change default path for make_md5, add md5 directory


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.10
changelog:
  - spec file cleanup
  - add more cvt_cyrusdb_all fixes
  - fix pre/post scripts
  - fix requirements
  - add patch to set Invoca RPM config defaults
  - add sync directory used for replication
  - add autocreate patch


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-12
changelog:
  - add quickstart/stop option to init script to bypass db import/export
  - add authid_normalize patch
  - add allow_auth_plain_proxying patch
  - update gcc4 patch
  - remove useless fdatasync patch
  - add private autoconf used for build, remove autoconf dependency
  - generate correct docs including man pages
  - remove unneeded files from doc directory


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-6
changelog:
  - fix recovery problems with db4, which do not exist with db3
  - fix logic for handling ssl certs
  - remove initlog from init script


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-5
changelog:
  - add notifytest to the distribution
  - add functionality to convert all berkeley databases to skiplist
    on shutdown and convert them back as needed on startup. This should
    solve the upgrade problems with Berkeley databases.


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-4.14
changelog:
  - add gcc4 patch
  - determine and handle pki directory for openssl correctly
  - add skiplist recovery docs
  - add notify_sms patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added nolinkimapspool patch
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - change license field to BSD, its not exact BSD, but BSD is the closest


author: John Dennis <jdennis@redhat.com> - 2.2.12-6.fc4
changelog:
  - the openssl package moved all its certs, CA, Makefile, etc. to /etc/pki
    now we are consistent with the openssl directory changes.


author: John Dennis <jdennis@redhat.com> - 2.2.12-5.fc4
changelog:
  - we finally have a common directory, /etc/pki for certs, so create
    /etc/pki/cyrus-imapd and put the ssl pem file there. The /etc/cyrus-imapd
    location will not be used, this change supercedes that.


author: John Dennis <jdennis@redhat.com> - 2.2.12-4.fc4
changelog:
  - fix bug #141479, move ssl pem file from /usr/share/ssl/certs to /etc/cyrus-imapd/cyrus-imapd.pem
  - change license field to BSD, its not exact BSD, but BSD is the closest.


author: John Dennis <jdennis@redhat.com> - 2.2.12-1.2.fc4
changelog:
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - fix changelog chronological order
  - fix bug 118832, cyrus-imapd is modifying /etc/services


author: John Dennis <jdennis@redhat.com> - 2.2.10-11.2.fc4
changelog:
  - make _contribdir identical to Simon's,
    I had been getting burned by rpm's bizarre handling of macros in comments


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - remove special ownership and permissions from deliver
  - enable deliver-wrapper per default
  - enable OutlookExpress seenstate patch per default


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use /usr/lib for /usr/lib/cyrus-imapd, it's a mess on x86_64
  - don't use /usr/lib for symlinks
  - remove /usr/lib pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed allnumeric patch, not needed anymore
  - made groupcache a compile time option
  - rename nntp's pam service, fixes RedHat's bug #142672


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated groupcache patch
  - updated cvt_cyrusdb_all to use runuser instead of su if available
  - added upd_groupcache tool


author: John Dennis <jdennis@redhat.com> 2.2.10-3.devel
changelog:
  - fix bug #141673, dup of bug #141470
    Also make cyrus.conf noreplace in addition to imapd.conf
    Remove the verify overrides on the noreplace config files,
    we do want config file changes visible when verifying


author: John Dennis <jdennis@redhat.com> 2.2.10-1.devel
changelog:
  - update to Simon Matter's 2.2.10 RPM,
    fixes bug #139382, 
    security advisories: CAN-2004-1011 CAN-2004-1012 CAN-2004-1013 CAN-2004-1015


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - changed requirement for file >= 3.35-1 from BuildPrereq to
    Requires, fixes RedHat's bug #124991
  - added acceptinvalidfrom patch to fix RedHat's bug #137705


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - fixed symlinks for x86_64, now uses the _libdir macro
    reported by John Dennis, fixes RedHat's bug #128964
  - removed obsoletes tag, fixes RedHat's bugs #127448, #129274


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate and autosieve patches
  - made authorization a compile time option
  - added sieve-bc_eval patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated to 2.2.7
  - modified autocreate patch or 2.2.7
  - removed snmpargs patch which was needed for RedHat 6.2


author: John Dennis <jdennis@redhat.com> - 2.2.6-2,FC3,1
changelog:
  - bring up to date with Simon Matter's latest upstream rpm 2.2.6-2
  - comment out illegal tags Packager, Vendor, Distribution
    build for FC3


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate, autosieve and rmquota patches
  - fixed rmquota patch to build on gcc v3.3.x
  - added lmtp_sieve patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - don't enable cyrus-imapd per default
  - rename fetchnews to cyrfetchnews to avoid namespace conflicts with leafnode
  - replace fetchnews with cyrfetchnews in man pages
  - replace master with cyrus-master in man pages


author: Dan Walsh <dwalsh@redhat.com>
changelog:
  - change su within init script to get input from /dev/null
    this prevents hang when running in SELinux
  - don't use -fpie as default, it breaks different distributions


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - merged in most changes from Karsten Hopp's RedHat package
  - fixed permissions of files in contrib, thank you
    Edward Rudd for reporting it.
  - modified snmp patch to make it build on RedHat 6.2 again


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - switch to Simon Matter's cyrus-imapd package, which has
    some major improvements over the old Red Hat package.
    - configdirectory moved from /var/imap to /var/lib/imap
    - sasl_pwcheck_method changed to saslauthd
  - needed to delete package/vendor tags for buildsystem.
  - added USEPIE variable for linking with -fpie flag
  - removed rpath from linker arguments
  - removed email header from README.HOWTO-recover-mailboxes
  - added lib64 patch
  - use CFLAGS from specfile in imtest subdir
  - disable -pie on ppc for now


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - convert sieve scripts to UTF-8 only if sievec failed before
  - add note to the readme about limiting loggin on busy servers
  - added build time option to chose the syslog facility


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - add sendmail m4 macro, some people were looking for it
  - just one source for pam default configuration (they were all the same)
  - added /etc/pam.d/lmtp
  - added build support for RedHat Beta severn


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate patch to 0.8.1
  - removed creation of spool/config dirs, not needed anymore
  - added cyrus_sharedbackup to contrib


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - upgraded to 2.1.14
  - removed now obsolete forcedowncase patch
  - use --with-extraident to add extra version information
  - updated munge8bit patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added functionality to patch the IPv6 patch on the fly if
    autoconf > 2.13, we can now use newer autoconf again.


author: Paul Bender <pbender@qualcomm.com>
changelog:
  - fixed spec file so that autoconf 2.13 will always be used,
    since the IPv6 patch requires autoconf <= 2.13


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - update to 2.1.12
  - added logrotate entry for /var/log/auth.log
  - modified init script to use builtin daemon mode


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed autoconf hack, not needed anymore
  - enabled build on RedHat Beta Phoebe
  - added services entry for lmtp
  - cleanup spec file


author: Troels Arvin <troels@arvin.dk>
changelog:
  - Explicitly changed files-section to
     - use defattr for simple (root-owned 0644) files
     - explictly set root as user/group owner where
       the user/group ownership was previously indicated
       as "-"; this allows building valid packages without
       having to being root when building


author: Simon Matter <simix@datacomm.ch>
changelog:
  - remove creation of cyrus user at build time
  - added scripts from ftp://kalamazoolinux.org/pub/projects/awilliam/cyrus/


author: Simon Matter <simix@datacomm.ch>
changelog:
  - modified path in deliver-wrapper, thank you Richard L. Phipps
  - added RedHat 2.1AS support to the perlhack detection
  - added build time option to force syncronous updates on ext3


author: Simon Matter <simix@datacomm.ch>
changelog:
  - included support for different autoconf versions
  - modified the perl build and install process
  - made some .spec changes to build on RedHat 7.x and limbo


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added compile time parameters to configure the package based on
    the idea from Luca Olivetti <luca@olivetti.cjb.net>
  - make deliver-wrapper a compile time option


author: Simon Matter <simix@datacomm.ch>
changelog:
  - upgraded to cyrus-imapd 2.1.3
  - removed some stuff that was cleaned up in the sources
  - added compile time options for db backends


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added some %dir flags
  - removed /usr/lib/sasl/Cyrus.conf
  - added conf templates
  - build time option for usage of saslauth group


author: Simon Matter <simix@datacomm.ch>
changelog:
  - dependency of cyrus-sasl >= 1.5.24-22
  - dotstuffing patch for sendmail calls made by sieve for outgoing
    mails
  - patch for ability to force ipurge to traverse personal folders


author: Simon Matter <simix@datacomm.ch>
changelog:
  - changed default auth to pam
  - remove several %dir from %files sections
  - change from /usr/lib/cyrus -> /usr/libexec/cyrus
  - rename source files to something like cyrus...
  - added rehash tool
  - changed to hashed spool


author: John Hefferman <john.hefferman@cern.ch> - 0.3.16.7-3.slc5
changelog:
  - Removed bugfix for W2008 fixed by hotfix KB 951191 as it prevented computer account passwords being reset when there was a matching User account


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: Harald Hoyer <harald@redhat.com> - 2:3.81-4
changelog:
  - removed references how to scan microsoft.com (bz #164962)
  - finally got rid of gtk+-devel dependency


author: Tim Powers <timp@redhat.com>
changelog:
  - update to nmap-2.54BETA7 to possibly fix bug #20199
  - use the desktop file provided by the package instead of using my own
  - patches in previous version are depreciated. Included in SRPM for
    reference only


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man pages so that they are in an FHS compliant location
  - use %makeinstall
  - use predefined RPM macros wherever possible


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 2.53
  - using applnk now
  - use %configure, and %{_prefix} where possible
  - removed redundant defines at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - based on origional spec file from
  	http://www.insecure.org/nmap/index.html#download
  - general cleanups, removed lots of commenrts since it madethe spec hard to
  	read
  - changed group to Applications/System
  - quiet setup
  - no need to create dirs in the install section, "make
  	prefix=$RPM_BUILD_ROOT&{prefix} install" does this.
  - using defined %{prefix}, %{version} etc. for easier/quicker maint.
  - added docs
  - gzip man pages
  - strip after files have been installed into buildroot
  - created separate package for the frontend so that Gtk+ isn't needed for the
  	CLI nmap 
  - not using -f in files section anymore, no need for it since there aren't that
  	many files/dirs
  - added desktop entry for gnome


author: Tim Waugh <twaugh@redhat.com> 4.2.7-22.2
changelog:
  - Compile libgimpprint with -fno-strict-aliasing (bug #450318).
  - For devel, utils, and plugin sub-packages, adjust main package
    requirement to include release (bug #450320).


author: Tomas Mraz <tmraz@redhat.com> - 4.2.7-20
changelog:
  - rebuilt with new gnutls
  - dropped the openssl-devel buildrequires as gnutls linkage is pulled
    from cups-libs


author: Tim Waugh <twaugh@redhat.com> 4.2.7-2
changelog:
  - Ship %{_datadir}/%{name}/ppds directory (feature #124687).
  - Browse that directory when asking for a PPD (feature #124687).
  - Build requires gettext-devel (bug #135042).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Not much point in installing the plug-in into a 1.2 directory since
    we know it won't work for that.


author: Tim Waugh <twaugh@redhat.com> 4.2.4-5
changelog:
  - Use 'reload' not 'condrestart' for cups.
  - Reload cups on first install as well as upgrade (part of bug #82500).


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "BuildRequires: pkgconfig" for (#193505)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: libXext-devel" to libXv-devel subpackage, to avoid all
    packages that depend on libXv-devel from having to manually specify that
    dependency themselves, as it is required by Xv.  (#192167)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXv to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXv to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Bill Nottingham <notting@redhat.com> 1.3.30.2-2
changelog:
  - alternatives: fix removal of manual links (#525051, <dtardon@redhat.com>)
  - ntsysv man page tweak (#516599)
  - add resetpriorities to the chkconfig man page (#501225)
  - Fix runlevel list in man page (#466740)
  - alternatives: clarify error messages with more context (#441443)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - for LSB scripts, use any chkconfig: priorities as a basis,
    instead of 50/50 (#172599)
  - fix LSB script dependency setting when no chkconfig: line
    is present (#161870, <jean-francois.larvoire@hp.com>)
  - fix LSB script dependency setting when one of Required-Stop
    or Required-Start: is missing (#168457)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix segfault on directories in /etc/xinetd.d (#166385)
  - don't needlessly rewrite xinetd files (#81008)


author: Bill Nottingham <notting@redhat.com> 1.3.14-1
changelog:
  - resize reasonably with larger screens (#74156)
  - don't error out completely on bad symlink (#74324)
  - use ngettext (#106176)
  - error out on invalid start/stop values (#109858)
  - some man page updates
  - fix return code of chkconfig for xinetd services (#63123)
  - sort chkconfig --list display (#61576, <shishz@alum.rpi.edu>)


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-2
changelog:
  - Fix readXinetdServiceInfo to return error on not regular files
  - Fix chkconfig to not write messages if readXinetdServiceInfo gets an error


author: Bill Nottingham <notting@redhat.com> 1.3.4-1
changelog:
  - don't apply the dependency logic to things that already have
    start/stop priorities
  - fix silly display bug in --config


author: Bill Nottingham <notting@redhat.com>
changelog:
  - alternatives: handle initscripts too; --initscript command-line option
  - chkconfig/ntsysv (and serviceconf, indirectly): services with
     *no* links in /etc/rc*.d are no longer displayed with --list, or
     available for configuration except via chkconfig command-line options
  - alternatives: fix trying to enable disable a null service


author: Bill Nottingham <notting@redhat.com>
changelog:
  - actually, put the alternatives stuff back in /usr/sbin
  - ship /etc/alternatives dir
  - random alternatives fixes


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Prereq: initscripts >= 5.18 to Conflicts: initscripts < 5.18
  - fixed sumary and description where a global string replace nuked them


author: Matt Wilson <msw@redhat.com>
changelog:
  - added support for a "hide: true" tag in initscripts that will make
    services not appear in ntsysv when run with the "--hide" flag


author: Arnaldo Carvalho de Melo <acme@conectiva.com.br>
changelog:
  - added pt_BR translations
  - added more translatable strings
  - support for i18n init.d scripts description


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-dynapro to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for dynapro input driver generated automatically
    by my xorg-driverspecgen script.


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-9.el5
changelog:
  - fix pnmtofiasco failures on ppc and s390x (#509366)
  - fix typos in pamperspective man pages (#510501)
  - fix pgmtopbm (#510759)
  - fix buffer overlow in xpmtoppm (#567597)
  - fix endianess issue with xwdtopnm (#574362)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-7.el5
changelog:
  - rebase to 10.35.58 (#479017)
  - fix ppmfade, ppmrainbow
  - fix doublefree corruption and couple of memleaks in pnmtofiasco
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)
  - fix ppmdfont and ppmddumpfont and svgtopam (thanks to Jiri Moskovcak)
  - add BR: ghostscript
  - use correct macro arguments (#246707)
  - fix segfault in ximtoppm (#482867)
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise,
    cameratopam, fiascotopnm so that they match their man pages
    (#483011, #483070, #483243, #483245, #482829, #482839)
  Resolves: #246707, #479017, #476864, #476867, #483011, #483070
  Resolves: #483243, #483245, #482867, #482829, #482839


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-4.fc6
changelog:
  - legal fixes (#202519):
  - remove pbmtols, spottopgm, jbig and hpcd stuff from source
    and doc tarballs


author: Jindrich Novy <jnovy@redhat.com> 10.34-3.fc6
changelog:
  - pamscale won't waste all system resources by usage of uninitialized
    variables for output image resolution (#199871)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 10.34-1
changelog:
  - update to 10.34
  - drop .ppmtogif, .nstring patches
  - remove some overflow checks from .security patch, it's
    now resolved in the new upstream version
  - don't use svgalib by default (don't compile/ship ppmsvgalib)
  - don't compile svgtopam because of the libxml dependency
  - add BuildRequires libX11-devel
  - fix build on x86_64 and ppc64


author: Jindrich Novy <jnovy@redhat.com> 10.33-2
changelog:
  - fix image corruption in ppmtogif, thanks to Gilles Detillieux (#188597)
  - fix nsting.h to let pnmtopng and other utilities using seekable opening
    mode work on x86_64 (#188594)


author: Jindrich Novy <jnovy@redhat.com> 10.33-1
changelog:
  - update to 10.33
  - drop upstreamed .ppmdepth patch
  - fix segfault in ppmtompeg when encoding jpeg images (#185970)


author: Jindrich Novy <jnovy@redhat.com> 10.32-1
changelog:
  - update to 10.32
  - drop .msbmp patch, applied upstream
  - sync the rest of the patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.31-3
changelog:
  - fix segfault caused by usage of uninitialized variables while
    parsing cmdline arguments in pnmtopng (#179645)
  - add validity check for date/time in pnmtopng
  - fix unchecked sscanf reads


author: Jindrich Novy <jnovy@redhat.com> 10.30-1
changelog:
  - update to 10.30
  - update manpath, gcc4 patches
  - update security patch - fixed length problem in rle_addhist
  - update partly upstreamed bmptopnm, pnmtopng patches
  - drop manpath patch
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.29-1
changelog:
  - update to 10.29
  - drop upstreamed .libpm, .pnmtojpeg, .pbmtolj patches
  - update .CAN-2005-2471 patch


author: Jindrich Novy <jnovy@redhat.com> 10.28-2
changelog:
  - fix segfault in pbmtolj caused by unchecked assertions
    caused by definition of NDEBUG (#160429)
  - drop hunk from .security patch causing dual inclusion
    of string.h in pbmtolj.c


author: Jindrich Novy <jnovy@redhat.com> 10.28-1
changelog:
  - update to 10.28
  - regenerated man pages
  - sync .security, .security2, .badlink, .libpm, .gcc4 patches
  - drop upstreamed .pngtopnm, .pnmcolormap patches


author: Jindrich Novy <jnovy@redhat.com> 10.27-2
changelog:
  - fix invalid strcmp condition in bmptopnm, typo in pnmtojpeg
    (David Constanzo, #157106, #157118)
  - proper read longs and shorts in libpm.c (David Constanzo, #157110)
  - fix segfault in bmptopnm caused by freeing an uninitialized pointer


author: Jindrich Novy <jnovy@redhat.com> 10.27-1
changelog:
  - update to the new 10.27 release
  - update .security2, .security patch
  - regenerate man pages
  - remove jbig, hpcd
  - remove config_template from /usr
  - don't create symlink to pamtopnm


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-3
changelog:
  - fix overflow checking of integers with incompatible endianess
    causing problems using xwdtopnm (#147790)


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-2
changelog:
  - add .gcc4 patch to fix some missing declarations of headers,
    some pointer signedness mismatches, remove xmalloc2
  - rebuilt with gcc4


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-1
changelog:
  - update to netpbm-10.26.4, remove jbig, hpcd
  - this version fixes #149924
  - regenerate man pages (don't include man pages without binaries - #146863)


author: Jindrich Novy <jnovy@redhat.com> 10.26-1
changelog:
  - update to netpbm-10.26-1, remove jbig, hpcd
  - regenerate man pages, remove man pages for non existent binaries
  - update security patch, additional fixes
  - drop upstreamed misc patch, merge malloc patch with security patch


author: Jindrich Novy <jnovy@redhat.com> 10.25-3
changelog:
  - include man pages in troff format, thanks to Michal Jaegerman (#136959)
  - drop bmpbpp patch, fixed upstream
  - remove pcdovtoppm, ppmsvgalib, vidtoppm man pages because binaries
    for them are not present (#136471)


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Mike A. Harris <mharris@redhat.com> 10.11.1.2-1
changelog:
  - Updated xorg-x11-drv-vmware to version 10.11.1.2 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 10.10.2-1
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Deglob file manifest.
  - Limit "ExclusiveArch" to x86, x86_64, ia64


author: Mike A. Harris <mharris@redhat.com> 10.10.2-0
changelog:
  - Initial spec file for vmware video driver generated automatically
    by my xorg-driverspecgen script.


author: Zack Cerza <zcerza@redhat.com> - 0.6.0-1
changelog:
  - New upstream release.
  - Add Requires for xorg-x11-xinit.
  - Add Requires for gnome-python2-gconf.
  - Bump pyspi Requires.


author: Zack Cerza <zcerza@redhat.com> - 0.5.2-1
changelog:
  - New upstream release.
  - Update Requires from Xvfb to xorg-x11-server-Xvfb.
  - Bump pyspi Requires.
  - Remove ImageMagick Requires.
  - Escape post-macro in changelog-macro.


author: Zack Cerza <zcerza@redhat.com> - 0.5.1-1
changelog:
  - Remove BuildRequires on at-spi-devel. Added one on python.
  - Use macros instead of absolute paths.
  - Touch _datadir/icons/hicolor/ before running gtk-update-icon-cache.
  - Require and use desktop-file-utils.
  - postun = post.
  - Shorten BuildArchitectures to BuildArch. The former worked, but even vim's 
    hilighting hated it.
  - Put each *Requires on a separate line.
  - Remove __os_install_post definition.
  - Use Fedora Extras BuildRoot.
  - Instead of _libdir, which kills the build if it's /usr/lib64, use a
    python macro to define python_sitelib and use that.
  - Remove the executable bit on the examples in install scriptlet.
  - Remove call to /bin/rm in post scriptlet.
  - Use dist in Release.


author: Zack Cerza <zcerza@redhat.com> - 0.5.0-2
changelog:
  - It looks like xorg-x11-Xvfb changed names. Require 'Xvfb' instead.
  - Remove Requires on python-elementtree, since RHEL4 didn't have it. The 
    functionality it provides is probably never used anyway, and will most likely
    be removed in the future.
  - Don't run gtk-update-icon-cache if it doesn't exist.


author: Zack Cerza <zcerza@redhat.com> - 0.5.0-1
changelog:
  - New upstream release.
  - Added missing BuildRequires on at-spi-devel.
  - Added Requires on pyspi >= 0.5.3.
  - Added Requires on rpm-python, pygtk2, ImageMagick, xorg-x11-Xvfb, 
    python-elementtree.
  - Moved documentation (including examples) to the correct place.
  - Make sure /usr/share/doc/dogtail is removed.
  - Added 'gtk-update-icon-cache' to %post.


author: Olivier Fourdan <ofourdan@redhat.com> 6.2.8.0-11.el5
changelog:
  Fix assertion failed when using "identify -verbose" when there's no
    image information available (502626)


author: Olivier Fourdan <ofourdan@redhat.com> 6.2.8.0-10.el5
changelog:
  Fix memory allocation failure when using color option (616538)
    Fix hang when converting broken GIF (693989)
    Fix conversion of rotated landscape PDF (694922)


author: Norm Murray <nmurray@redhat.com> 6.2.8.0-5.el5
changelog:
  - update quantum memory patch (necessary for CVE fixes)
  - backport functionality for SetImageExtent (necessary for CVE fixes)
  - Add patch for CVE-2008-1096 (#286411)
  - Add patch for CVE-2008-1097 (#285861)
  - update patch for CVE-2007-4986


author: - Bastien Nocera <bnocera@redhat.com> - 6.2.8.0-3.el5.5
changelog:
  - Add patch for CVE-2007-1797 (#235071)
  - Add patch for CVE-2007-4988 (#310081)
  - Add patch for CVE-2007-4985 (#310091)
  - Add patch for CVE-2007-4986 (#310121)
  Related: rhbz #411391


author: Matthias Clasen <mclasen@redhat.com> - 6.2.8.0-3.fc6
changelog:
  - fix several integer and buffer overflows (#202193, CVE-2006-3743)
  - fix more integer overflows (#202771, CVE-2006-4144)


author: Matthias Clasen <mclasen@redhat.com> 6.2.4.6-1
changelog:
  - Update to 6.2.4-6
  - Drop upstreamed patches
  - Disable DPS (#158984)
  - Add missing requires (#165931)


author: <mclasen@redhat.com> - 6.2.1.7-1
changelog:
  - Update to 6.2.1
  - Include multiple improvements and bugfixes
    by Rex Dieter et al (111961, 145466, 151196, 149970, 
    146518, 113951, 145449, 144977, 144570, 139298)


author: Tim Waugh <twaugh@redhat.com> 6.0.7.1-4
changelog:
  - The devel subpackage requires XFree86-devel (bug #126509).
  - Fixed build requirements (bug #120776).  From Robert Scheck.


author: Karsten Hopp <karsten@redhat.de> 5.5.6-1
changelog:
  - update
  - specfile fixes
            - verified that the upstream version fixes the following bugreports:


author: Karsten Hopp <karsten@redhat.de> 5.4.7-3
changelog:
  - fix non-cpp headers in -devel package
  - fix #62157 (wrong path for include files in ImageMagick-devel)
  - fix #63897 (use _target instead of _arch) in libtool workaround
  - fix #65860, #65780 (tiff2ps) expands images to >10 MB Postscript files.


author: Karsten Hopp <karsten@redhat.de> 5.4.7-1
changelog:
  - update
  - fix localdoc patch
  - fix %files section
  - disable nonroot patch
  - fix #62100,55950,62162,63136 (display doesn't start form gnome menu)
  - fix libtool workaround
  - moved Magick*-config into -devel package (#64249)


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.4.0-1
changelog:
  - 5.4.0
  - work around build system breakage causing applications to be named
    i386-redhat-linux-foo rather than foo


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.3.7-1
changelog:
  - 5.3.7
  - Fix build without previously installed ImageMagick-devel (#49816)
  - Move perl bindings to a separate package.


author: Matt Wilson <msw@redhat.com>
changelog:
  - remove hacks to move perl man pages
  - don't include the perl*/man stuff, these files go in /usr/share/man now.


author: Matt Wilson <msw@redhat.com>
changelog:
  - bootstrap rebuilt to nuke broken libbz2 deps
  - add Prefix: tag such that the FHS macros work properly


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - hacks to make it work with the new perl
  - version 4.1.0 (actually installs the sonames as 4.0.10... doh!)
  - make sure the libraries have the x bit on


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-microtouch to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for microtouch input driver generated automatically
    by my xorg-driverspecgen script.


author: David Cantrell <dcantrell@redhat.com> - 8.4.12-1
changelog:
  - Upgraded to tcl-8.4.12
  - Use ksh rather than bash for the configure script (known bug w/ bash-3.1)
  - Generate HTML docs from source
  - Add in the Tk source for HTML doc generation


author: Jens Petersen <petersen@redhat.com> - 8.4.11-1
changelog:
  - update to latest stable release
    - update tcl-8.4-autoconf.patch
  - buildrequire sed and use it instead of perl for editting tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.7-2
changelog:
  - improve tcl8.3.5-tclConfig-package-path-90160.patch to look in libdir in
    addition to datadir for packages, so that tclsh can load binary packages
    in lib64 (135310)


author: Jens Petersen <petersen@redhat.com> - 8.4.7-1
changelog:
  - update to 8.4.7
    - replace tcl-8.4.5-no_rpath.patch by tcl-8.4-no_rpath.patch
    - replace tcl-8.4.5-autoconf.patch by tcl-8.4-autoconf.patch
  - no longer obsolete itcl


author: Jens Petersen <petersen@redhat.com> - 8.4.5-6
changelog:
  - apply tcl-8.4.5-autoconf.patch to build with autoconf 2.5x
    (Robert Scheck, #116773)
  - use %{name} more extensively for script portability
  - run "make test" by default when building (can be disabled with
    "--without check")
  - add a backwards compatible symlink /usr/lib/tk8.4 ->
    /usr/share/tk8.4 (Michal Jaegermann, part of #90160)
  - use "mkdir -p" instead of "mkdirhier" (Robert Scheck, #116771)
  - include some doc files


author: Jens Petersen <petersen@redhat.com> - 8.4.5-2
changelog:
  - put private header files under generic and unix subdirs
  - include real generic/tclPort.h not just a symlink to tclUnixPort.h
  - add tclMath.h to /usr/include/tcl-private/generic for building tk
  - remove build remnants from tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.5-1
changelog:
  - new package split out from tcltk
  - update to tcl 8.4.5 (#88429)
    - drop tcl-8.3.3-heiierarchy.patch, tcl-8.3.3-dlopen.patch
      and tcl8.3.5-koi8-u.enc-88806.patch
  - include private include headers under /usr/include/tcl-private
  - filtered changelog for tcl
  - buildrequire autoconf213 (#110583) [mvd@mylinux.com.ua]


author: Jens Petersen <petersen@redhat.com> - 8.3.5-90
changelog:
  - split out devel files from tcl and tk into -devel subpackages (#90087)
  - fix tcl package path in tclConfig.sh to point to datadir (#90160)
    [reported by Michal Jaegermann]
  - remove gratuitous whitespace in koi8-u.enc (#88806)
    [reported with fix by Victor Cheburkin]
  - update ucs4 patch to also change regcustom.h, but disable it for now (#89098)


author: Jens Petersen <petersen@redhat.com> - 8.3.5-84
changelog:
  - link all libs with DT_SONAME using tcl.m4 patch (#81297)
  - drop synthetic lib provides
  - remove obsolete patches from srpm
  - update buildrequires
  - use buildroot instead of RPM_BUILD_ROOT
  - install all man pages under mandir, instead of moving some from /usr/man
  - install libtcl and libtk mode 755
  - introduce _genfilelist macro for clean single-sweep find filelist generation
    for each package
  - use perl to remove buildroot prefix from filelists


author: Jens Petersen <petersen@redhat.com> 8.3.5-76
changelog:
  - make it build on x86_64 (details below)
  - don't explicitly update config.{guess,sub} since %configure does it for us
  - added "--without check" rpmbuild option to disable running tests in future
  - build and install tcl and tk with script files under datadir (not libdir)
  - generate filelists from datadir and not from mandir from now on


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.5, tk-8.3.5, tcl-html-8.3.5
  - update url for tcl, tk, tclx, itcl, tcllib
  - build without all makecfg patches for now
    - in particular use upstream versioned library name convention
  - add backward compatible lib symlinks for now
  - add unversioned symlinks for versioned bindir files
  - use make's -C option rather than jumping in and out of source dirs
    during install
  - use INSTALL_ROOT destdir-like make variable instead of makeinstall
    for all subpackages except tix and itcl


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.4, tk-8.3.4 (#75600), tcllib-1.3, itcl-3.2.1,
    tix-8.1.3 (#59098)
  - drop obsolete tcl cruft, tcl refcount, tix perf patches
  - added tcltk html manual
  - drop the crud compat dir symlinks in libdir
  - package now builds without tcl or tk installed (partly #52606)
    - replace all relative paths by absolutes ones, using new tcltktop
    - give absolute paths to tcl and tk when configuring
    - give buildroot bindir path to tcllib make
    - export buildroot libdir in LD_LIBRARY_PATH when installing
  - replace tclvers and tkvers by tcltkvers and use it
  - replace tcl_major and tk_major by tcltk_major and use it
  - don't explicitly provide 64bit libs on ia64 and sparc64


author: Adrian Havill <havill@redhat.com>
changelog:
  * Mon Aug  8 2001 Adrian Havill <havill@redhat.com>
  - re-enable glibc string and math inlines; recent gcc is a-ok.
  - optimize at -O2 instead of -O
  - rename "soname" patches related to makefile/autoconf changes
  - added elf "needed" for tk, tclx, tix, itk


author: Adrian Havill <havill@redhat.com>
changelog:
  - used %makeinstall to brute force fix any remaining unflexible makefile dirs
  - fixed bad ref count release in tcl (bug 49406)
  - revert --enable-threads, linux is (still) not ready (yet) (bug 49251)


author: Adrian Havill <havill@redhat.com>
changelog:
  - refresh all sources to latest stable (TODO: separate expect/expectk)
  - massage out some build stuff to patches (TODO: libtoolize hacked constants)
  - remove patches already rolled into the upstream
  - removed RPATH (bugs 45569, 46085, 46086), added SONAMEs to ELFs
  - changed shared object filenames to something less gross
  - reenable threads which seem to work now
  - made compile-friendly for IA64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging changes.
  - revert --enable-threads, linux is not ready (yet) (#11789).
  - tcl/tk: update to 8.3.1 (#10779).
  - abstract major tcltk version for soname expansion etc.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to (tcl,tk}-8.2.3, expect-5.31, and itcl-3.1.0, URL's as well.
  - use perl to drill out pre-pended RPM_BUILD_ROOT.
  - configure with --enable-threads (experimental).
  - correct hierarchy spelling (#7082).


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - added patch to remove libieee test in configure.in for tcl and tk.
    Shouldn't be needed anymore for glibc systems, but this isn't the "proper" 
    solution for all systems
  - fixed src urls


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4 (#444803)
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions
  - hobble the library to drop the ECC support
  - add hmac FIPS integrity verification check


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Jens Petersen <petersen@redhat.com> - 23.0-2
changelog:
  - tweak tcl scripts to run tclsh and require Tclx instead, since tclx-8.4
    no longer provides /usr/bin/tcl


author: Jens Petersen <petersen@redhat.com> - 23.0-1
changelog:
  - update to 23.0 release
  - make package noarch
  - remove .cvsignore files
  - remove unnecessary playlists and file (Jef Spaleta, #177760)


author: Jens Petersen <petersen@redhat.com> 17.0-1
changelog:
  - update to 17.0
  - adjust source url
  - quieten setup
  - remove some obsolete cleanup deletions
  - use _datadir, _infodir, _bindir, _prefix, and buildroot
  - clean buildroot before installing, and at the end
  - actually install info dir file entry on install (#74136)
  - don't include texi and sgml files in docs dir
  - encode spec changelog in utf-8


author: David Woodhouse <dwmw2@redhat.com> - 1.32-1
changelog:
  - update to bluez-hcidump 1.32
  - Fix BNEP IPv6 parsing (#196879)
  - Support IPv6 in -n and -s options (#196878)


author: Jason Corley <jason.corley@gmail.com> 0:3.1-9jpp
changelog:
  - update copyright to contain current year
  - rebuild on RHEL4 to avoid broken jar repack script in FC6


author: Matt Wringe <mwringe@redhat.com> - 0:3.1-7jpp
changelog:
  - Add tomcat5 subpackage
  - Add versioning to provides and obsoletes
  - Move rm -rf %RPM_BUILD_ROOT from %prep to %install
  - Add missing maven dependencies


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:3.1-4jpp-1fc
changelog:
  - Add conditional native compilation.
  - Update commons-collections-3.1-project_xml.patch to exclude reference
    to maven-plugin-changelog which requires netbeans-svc etc.
  - Set test.failonerror to false and add patch for build.xml for ant builds
    with gcj to avoid stopping the build on test failures on GCJ.
  - Merge with latest JPP version.


author: Aizaz Ahmed <aahmed@redhat.com> 0:2.1-4jpp_5rh
changelog:
  - Added trigger to restore symlinks that are removed if ugrading
    from a commons-collections rhug package


author: Henri Gomez <hgomez@users.sourceforge.net> 2.0-3jpp
changelog:
  - use sed instead of bash 2.x extension in link area to make spec compatible 
    with distro using bash 1.1x


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-5jpp
changelog:
  - renamed to %{name}
  - additional sources in individual archives
  - versioned dir for javadoc
  - section macro


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-hyperpen to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for hyperpen input driver generated automatically
    by my xorg-driverspecgen script.


author: Ivana Varekova <varekova@redhat.com> - 1.10-4
changelog:
  - add pkgconfig dependency
  - separate static libraries to -static subpackage
  - fix gsl-config script - thanks Patrice Dumas


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.1.1 bugfix release
  - Stop the gsl-config script from printing -I/usr/include 
    and -L/usr/lib (#59500)


author: Michael Fulbright <msf@redhat.com>
changelog:
  - started with package for gmp from Toshio Kuratomi <toshiok@cats.ucsc.edu>
  - cleaned up file list
  - fixed up install-info support


author: Gary Benson <gbenson@redhat.com> - 0:1.0-3jpp_1fc
changelog:
  - Upgrade to 1.0-3jpp.
  - Rearrange how BC-compiled stuff is built and installed.
  - Don't bundle servletapi sources (which weren't used anyway).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-2
changelog:
  - make srpm was using rpm to do a build.  changed that to use rpmbuild if
    it exists, and fallback to rpm if it doesn't.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-1
changelog:
  - Use libc syscall(2) instead of rolling our own calling mechanism.  This 
    change is inspired due to a failure to build with newer gcc, since clobber 
    lists were wrong.
  - Add -fpic to the CFLAGS for all architectures.  Should address bz #109457.
  - change a #include from <linux/types.h> to <sys/types.h>.  Fixes a build
    issue on s390.


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - libaio 0.3.93 test release
  - add powerpc support from Gianni Tedesco <gianni@ecsc.co.uk>
  - add s/390 support from Arnd Bergmann <arnd@bergmann-dalldorf.de>


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - add requires initscripts >= 6.47-1 to get boot time libredhat-kernel 
    linkage correct.
  - typo fix


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - make the dummy install as /lib/libredhat-kernel.so.1.0.0 so 
    that ldconfig will link against it if no other is installed.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.1.33-9
changelog:
  - add /usr/sbin/useradd as a prereq for the -sendfax subpackage, because
    we call it during the -sendfax %pre scriptlet (#203266)


author: Jason Vas Dias <jvdias@redhat.com> 1.1.33-3_FC5
changelog:
  - fix bug 162174: prevent uninterruptable hang on exit() when
                    direct line disconnected (kernel bug 164002)
  		  do tcflush(1,TCOFLUSH) before exit() in sig_goodbye()
  	  	  block signals before entering syslog()
    workaround build system 'buffer overflow checks' bug:
                    use memcpy instead of sprintf in record.c, line 53


author: Jason Vas Dias <jvdias@redhat.com> 1.1.31-2
changelog:
  - Fixed bug: 115261 - let faxspool work if acroread isn't installed
  - or gs can't understand its level3 output .


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.28-7
changelog:
  - rotate mgetty.log.unknown and mgetty.log.callback (#68049)
  - don't logrotate already-rotated logs (#68422)


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.28-3
changelog:
  - rotate the mgetty and vgetty logs by default, specifying them with
    wildcards in the logrotate configs (#62159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.1.26
  - add logrotate.vm and logrotate.vgetty (note from Heiner Kordewiner)
  - add voice/{Announce,Changelog,Readme} to documentation set


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change the default group in the vgetty configuration file from phone to uucp,
    which matches the settings for faxes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.1.25
  - ditch the elsa patch in favor of the current vgetty patch
  - don't need to strip binaries, buildroot policies do that
  - add docs to the voice subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out quoting patch
  - change Copyright: distributable to License: GPL
  - add URL
  - remove logging changes from excl patch, based on input from Gert
  - rework ia64 patch, break out gets/fgets change based on input from Gert


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all scripts quote variables where possible (#17179)
  - make sure all scripts use mktemp for generating temporary files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - forcibly strip binaries (#12431)
  - change dependency on libgr-progs (which is gone) to netgr-progs (#10819)
  - change dependency on giftoppm to giftopnm (#8088)
  - attempt to plug some potential security problems (#11874)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Overhaul for FHS fixes.
  - Stop removing logs in postun.
  - Stop stripping everything.
  - ia64 fixes.


author: Jos Vos <jos@xos.nl>
changelog:
  - Use a patch for creating policy.h using policy.h-dist.
  - Add viewfax subpackage (X11 fax viewing program).
  - Add logrotate config files for mgetty and sendfax log files.
  - Properly define ECHO in Makefile for use with bash.
  - Add optional use of dialin.config (for modems supporting this).
  - Change default notification address to "root" (was "faxadmin").
  - Change log file names according to better defaults.
  - Change default notify program to /etc/mgetty+sendfax/new_fax (was
    /usr/local/bin/new_fax).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add faxrunqd man page (problem #850)
  - add missing pbm2g3 (and man page); remove unnecessary "rm -f pbmtog3"
  - delete redundant ( cd tools; make ... )


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715
changelog:
  - modify tgetstr to make screen happy (#202480)
  - use CFLAGS when linking (#199369)
  - change BuildRoot tag to comply with Fedora packaging guidelines


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-20
changelog:
  - update to patch 20060701
  - don't strip libraries, chmod +x them
  - move .so links to devel package
  - add gpm-devel to buildrequires
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 5.5-11
changelog:
  - According Henrik Nordstrom (hno@squid-cache.org)
    Diff between the two versions of curses.h on x86_64
    Patch ncurses-5.5-chtypeaslong2.patch
    See #178824


author: Petr Raszyk <praszyk@redhat.com> 5.4-21
changelog:
  - Clear window after: filter()+'terminal-resizing'+endwin()
    doupdate()+endwin()
    See bug #174498, patch ncurses-5.4-endwinfilter.patch


author: 5.4-19 <praszyk@redhat.com> 5.4-19
changelog:
  - Clear window after: filter()+initscr()+endwin()+refresh()
    See bug #2966, patch ncurses-5.4-filter.patch


author: Petr Rockai <prockai@redhat.com> - 5.4-17
changelog:
  - apply patch from Hans de Goede, fixing BR142659 [The
    terminfo data for kbs changed from \177 to ^H]


author: Adrian Havill <havill@redhat.com> 5.4-11
changelog:
  - add latest rollup patches and weekly patches
  - remove home/end patch, which is now included in latest
    terminfo.src and termcap.src
  - add term.sh to /etc/profile.d, reference in /etc/bashrc
  - modify term.sh to support rxvt (#122815 comment 93)


author: Adrian Havill <havill@redhat.com> 5.4-9
changelog:
  - remove terminfo try-to-please-all xterm hackery; it's now ptty
    and profile's job to point to the correct terminal. (#122815)


author: Adrian Havill <havill@redhat.com> 5.4-5
changelog:
  - remove --with-gpm from configure, as it adds a pkg
    dependency (#122336) and causes too many problems vs its benefits


author: Adrian Havill <havill@redhat.com> 5.4-3
changelog:
  - link "xterm" to "xterm-color" as temp fix for escape problem (#115448)
  - remove old zcat for PATCH1


author: Adrian Havill <havill@redhat.com> 5.3-9
changelog:
  - remove not-so safe-sprintf configure option because the code does
    not appear to be stable enough for some apps. (#103790)


author: Adrian Havill <havill@redhat.com> 5.3-7
changelog:
  - fixed the safe sprintf code that was enabled in the previous release
    by the configure parameter. (#101486)


author: Adrian Havill <havill@redhat.com> 5.3-5
changelog:
  - added latest rollup patch with widec/UTF8 centric weekly (20030517)
  - added --enable-widec to configure (#86311)
    original work done by Mr. Sam <sam@email-scan.com>
  - require sharutils (#86605)
  - add gpm, xmc support
  - add debug syms back into package
  - updated autoconf/configure patch


author: Adrian Havill <havill@redhat.com> 5.3-3
changelog:
  - remunged xterm changes from 5.2 patch for 5.3
  - updated screen entry (#82951)
  - fixed ka3, kb2 and kf0 entries (#77506)


author: Adrian Havill <havill@redhat.com> 5.3-1
changelog:
  - upgrade to 5.3 for sake of utf-8, wide chars (#77585 ...)
  - spec file summary/desc grammar (#73583)
  - add Requires: for c++ devel subpkg (#74002)
  - terminfo.src patches no longer needed
  - adjust autoconf patch


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-26
changelog:
  - Remove duplicated files (#62752)
  - Don't strip libraries (#60398)
  - Remove cbt capability from xterm description (#61077)


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-17
changelog:
  - Patchlevel 20020209
  - Fix zero-substitution of cf_cv_type_of_bool (#59450)
  - Fix rebuilding of configure script with autoconf 2.5x


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.2
  - Fix typo in man page (Bug #20205)
  - update the "screen" terminfo entries to the version supplied with
    screen 3.9.8


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Add xterm patch from Hans de Goede <hans@highrise.nl>
  - Patch 20000108, this fixes a problem with a header file.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - revert to the old major number - because the ABI is not changed (and we
    should be handling the changes via symbol versioning anyway)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix a typo in spec
  - Add the 19991006 patch, fixing some C++ STL compatibility problems.
  - get rid of profiling and debugging versions - we need to save space...


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.0
  - some spec cleanups to make updating easier
  - add links *.so.5 to *.so.4 - they are fully binary compatible.
    (Why did they change the invocation number???)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - don't build the C++ demo code
  - update patch set to the current as of today (redid all the individual
    patches in a single one)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added terminfo entry for the poor guys using lat1 and/or lat-2 on their
    consoles... Enjoy linux-lat ! Thanks, Erik !


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - new patch to get xterm-color and nxterm terminfo entries
  - aliased them to rxvt, as that seems to satisfy everybody


author: Colin Walters <walters@redhat.com> 2:1.1.2-1
changelog:
  - Update to 1.1.2
  - Delete upstreamed libogg-1.1-64bit.patch
  - Delete upstreamed libogg-underquoted.patch


author: Martin Stransky <stransky@redhat.com> 1.9.2.3-2
changelog:
  - Added fix for rhbz#555760 -  Firefox Javascript anomily,
    landscape print orientation reverts to portrait (mozbz#546270)


author: Martin Stransky <stransky@redhat.com> 1.9.2.1-0.1.beta2
changelog:
  - Rebase to 1.9.2.1 Beta 2
  - fix the sqlite runtime requires again (#480989), add a check 
    that the sqlite requires is sane (by Stepan Kasal)


author: Jan Horak <jhorak@redhat.com> - 1.9.1-3
changelog:
  - Fixed wrong version of Firefox when loading 'about:' as location
  - Added patch to compile against latest GTK


author: Stepan Kasal <skasal@redhat.com> 1.9.1-0.21
changelog:
  - require sqlite of version >= what was used at buildtime (#480989)
  - in devel subpackage, drop version from sqlite-devel require; that's
    handled indirectly through the versioned require in main package


author: Martin Stransky <stransky@redhat.com> 1.9-0.56
changelog:
  - Changed "__ppc64__" to "__powerpc64__", 
    "__ppc64__" doesn't work anymore
  - Added fix for #443725 - Critical hanging bug with fix 
    available upstream (mozbz#429903)


author: Christopher Aillon <caillon@redhat.com> 1.9-0.beta2.10
changelog:
  - Update to latest trunk (2008-01-13)
  - Use CFLAGS instead of configure arguments
  - Random cleanups: BuildRequires, scriptlets, prefs, etc.


author: Martin Stransky <stransky@redhat.com> 1.9-0.beta2.7
changelog:
  - removed fedora specific pkg-config files
  - updated to the latest trunk (2008-01-07)
  - removed unnecessary patches
  - fixed idl dir (#427965)


author: Christopher Aillon <caillon@redhat.com> 1.9-0.beta2.4
changelog:
  - Don't Provide webclient (xulrunner is not itself a webclient)
  - Don't Obsolete old firefox, only firefox-devel
  - Kill legacy obsoletes (phoenix, etc) that were never in rawhide


author: Christopher Aillon <caillon@redhat.com> 1.9-0.alpha7.1
changelog:
  - Initial cut at XULRunner 1.9 Alpha 7
  - Temporarily revert camellia 256 support since our nss doesn't support it yet


author: Marek Kasik <mkasik@redhat.com> 2.2.1-28.el5_5.1
changelog:
  - Add freetype-2.2.1-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651759


author: Marek Kasik <mkasik@redhat.com> 2.2.1-27
changelog:
  - Add freetype-2.2.1-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.2.1-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Add freetype-2.2.1-CVE-2010-3054.patch
      (Protect against nested `seac' calls.)
  - Add freetype-2.2.1-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Resolves: #638142


author: Marek Kasik <mkasik@redhat.com> 2.2.1-25
changelog:
  - Add freetype-2.2.1-axis-name-overflow.patch
      (Avoid overflow when dealing with names of axes)
  - Resolves: #614012


author: Marek Kasik <mkasik@redhat.com> 2.2.1-24
changelog:
  - Modify freetype-2.2.1-CVE-2010-2519.patch (additional fix)
      (If the type of the POST fragment is 0, the segment is completely ignored)
  - Resolves: #614012


author: Marek Kasik <mkasik@redhat.com> 2.2.1-23
changelog:
  - Add freetype-2.2.1-CVE-2010-2527.patch
      (Use precision for `%s' where appropriate to avoid buffer overflows)
  - Resolves: #614012


author: Marek Kasik <mkasik@redhat.com> 2.2.1-22
changelog:
  - Add freetype-2.2.1-CVE-2010-2498.patch
      (Assure that `end_point' is not larger than `glyph->num_points')
  - Add freetype-2.2.1-CVE-2010-2499.patch
      (Check the buffer size during gathering PFB fragments)
  - Add freetype-2.2.1-CVE-2010-2500.patch
      (Use smaller threshold values for `width' and `height')
  - Add freetype-2.2.1-CVE-2010-2519.patch
      (Check `rlen' the length of fragment declared in the POST fragment header)
  - Resolves: #614012


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16
changelog:
  - Backport binary-search fixes from HEAD
  - Add freetype-2.2.1-ttcmap.patch
  - Resolves: #208734, #218326


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-15
changelog:
  - Fix rendering issue with some Asian fonts.
  - Add freetype-2.2.1-fix-get-orientation.patch
  - Resolves: #207261


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10
changelog:
  - Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841
  - Add freetype-2.2.1-memcpy-fix.patch


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1
changelog:
  - Update to 2.2.1
  - Remove FreeType 1, to move to extras
  - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid
  - Enable modules gxvalid and otvalid


author: Owen Taylor <otaylor@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to 2.1.9
  - Since we are just using automake for aclocal, use it unversioned,
    instead of specifying 1.4.


author: Owen Taylor <otaylor@redhat.com> 2.1.7-4
changelog:
  - Add patch from freetype CVS to fix problem with eexec (#117743)
  - Add freetype-devel to buildrequires and -devel requires
    (Maxim Dzumanenko, #111108)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-3
changelog:
  - Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and
    SIGILL crashes in mkfontscale which have been traced into freetype and seem
    to be caused by aliasing issues in freetype macros (#118021)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow compiling without the demos as that requires XFree86
    (this allows bootstrapping XFree86 on new archs)


author: Owen Taylor <otaylor@redhat.com> 2.1.4-1
changelog:
  - Version 2.1.4
  - Relibtoolize to get deplibs right for x86_64
  - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781)
  - Relativize absolute symlinks to fix the -debuginfo package 
    (#83521, Mike Harris)


author: Elliot Lee <sopwith@redhat.com> 2.1.3-7
changelog:
  - Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries 
    on ppc64.
  - Use _smp_mflags (for freetype 2.x only)


author: Owen Taylor <otaylor@redhat.com> 2.1.3-4
changelog:
  - Make FreeType robust against corrupt fonts with recursive composite 
    glyphs (#74782, James Antill)


author: Mike A. Harris <mharris@redhat.com> 2.1.3-2
changelog:
  - Update to freetype 2.1.3
  - Removed ttmkfdir sources and patches, as they have been moved from the
    freetype packaging to XFree86 packaging, and now to the ttmkfdir package
  - Removed patches that are now included in 2.1.3:
    freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch,
    freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch,
    freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch,
    freetype-2.1.2-leftright.patch
  - Conditionalized inclusion of freetype 1.4 library.


author: Mike A. Harris <mharris@redhat.com> 2.1.2-10
changelog:
  - Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS
  - Cleaned up various _foodir macros throughtout specfile
  - Removed with_ttmkfdir build option as it is way obsolete


author: Mike A. Harris <mharris@redhat.com> 2.0.8-2
changelog:
  - Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7
    on the freetype website.  Munged specfile to deal with the problem by using
    {oldversion} instead of version where appropriate.  <sigh>


author: Tim Powers <timp@redhat.com> 2.0.6-3
changelog:
  - bumping release so that we don't collide with another build of
    freetype, make sure to change the release requirement in the XFree86
    package


author: Mike A. Harris <mharris@redhat.com> 2.0.6-2
changelog:
  - Made ttmkfdir inclusion conditional, and set up a define to include
    ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new
    XFree86-font-utils package.


author: Elliot Lee <sopwith@redhat.com> 2.0.5-3
changelog:
  - Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating
    font list). (ttmkfdir-iso10646.patch)
  - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch)
  - Undo fix for #24253, assume compiler was fixed.


author: Mike A. Harris <mharris@redhat.com> 2.0.4-2
changelog:
  - Added new subpackage freetype-demos, added demos to build
  - Disabled ftdump, ftlint in utils package favoring the newer utils in
    demos package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4
changelog:
  - Add ft2build.h to -devel package, since it's included by all other
    freetype headers, the package is useless without it


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3
changelog:
  - Change "Requires: freetype = name/ver" to "freetype = version/release",
    and move the requirements to the subpackages.


author: Mike A. Harris <mharris@redhat.com> 2.0.3-1
changelog:
  - Updated to Freetype 2.0.3, minor specfile tweaks.
  - Freetype2 docs are is in a separate tarball now. Integrated it.
  - Built in new environment.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - libtool is used to build libttf, so use libtool to link ttmkfdir with it
  - fixup a paths for a couple of missing docs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin
  - freetype utilities moved to subpkg, X dependency removed from main pkg
  - libttf.so symlink moved to devel pkg


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - call libtoolize to sanitize config.sub and get ARM support
  - dispoze of the patch (not necessary anymore)


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-neomagic to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Deglob file manifest.
  - Limit "ExclusiveArch" to x86


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for neomagic video driver generated automatically
    by my xorg-driverspecgen script.


author: Dan Horák <dhorak@redhat.com> 2.2.4-23.el5
changelog:
  - fixed CKR_TEMPLATE_INCOMPLETE exception on an unwrap of an AES key (#538879)
  - fixed MAC computing during offload of MAC-hashing to CPACF using PKCS11 (#539168)
  - Resolves: #538879, #539168


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-22.el5
changelog:
  - Fixed memcmp problem for pkcsconf validation of PINs (#415931)
  - Fixed double free problem in key store (#435462)


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-17.el5
changelog:
  - Added the CCA STDLL for s390(x) arch (#253059)
  - Fixed a file descriptor leak for spin locks (#371021)


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-12.el5
changelog:
  - Moved the .so lib to the devel package (#219242)
  - Added proper multilib requirements for devel package (#219242)


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-5.el5
changelog:
  - Added the other archs according to #184631
  - Split out the devel parts of openCryptoki in a devel subpackage (#184631)


author: Phil Knirsch <pknirsch@redhat.com> 2.1.5-6.10
changelog:
  - Fixed quite a few warnings and actual errors (#143768)
  - Fixed the initscript for failed startups (#154495)


author: Phil Knirsch <pknirsch@redhat.com> 2.1.3-8
changelog:
  - Included updated initscript from IBM (#112542).
  - Changed permission of /etc/init.d/pkcsslotd to be executable (#112542).


author: Phil Knirsch <pknirsch@redhat.com> 2.1.3-4
changelog:
  - Fixed some smaller build problems.
  - Included and fixed new initscript for pkcs11 startup.
  - Fixed filelist.


author: Bill Nottingham <notting@redhat.com> - 11-1
changelog:
  - pirut/anaconda now use 24x24. update sizes
  - various additions/removals
  - python scripts aren't useful with current repositories, remove them


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.22
changelog:
  - Resolves: CVE-2011-0013 rhbz 675931
  - Resolves: CVE-2010-3718 rhbz 675931
  - Resolves: CVE-2011-1184 rhbz 744983
  - Resolves: CVE-2011-2204 rhbz 719181


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.15
changelog:
  - Resolves: rhbz#217630, 217141 naming-factory-dbcp.jar missing causes
  - JNDI errors. Change made to tomcat5.conf, added javax.sql.DataSource.
  - Factory to JAVA_OPTS


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.23-0jpp.9
changelog:
  - Merge fixes from Z-Streams to incorporate fixes for:
    Resolves: rhbz#427780 rhbz#504759 rhbz#503981 rhbz#504163
    Resolves: rhbz#457727 rhbz#449917 rhbz#458635 rhbz#456216


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.23-0jpp.7.2
changelog:
  From  David Knox <dknox@redhat.com>:
  - add patch for CVE-2007-5333
    Resolves: rhbz#427780
  - add patch for CVE-2008-5515
    Resolves: rhbz#504759
  - add patch for CVE-2009-0033
  - add patch for CVE-2009-0580
    Resolves: rhbz#503981
  - add patch for CVE-2009-0783
    Resolves: rhbz#504163


author: David Knox <dknox@redhat.com> - 0:5.5.23-0jpp.8
changelog:
  - First attempt to merge in:
    Resolves: rhbz#427780 rhbz#504759 rhbz#503981 rhbz#504163
    Resolves: rhbz#457727 rhbz#449917 rhbz#458635 rhbz#456216


author: David Walluck <dwalluck@redhat.com> 0:5.5.23-0jpp.7.1
changelog:
  - add patch for CVE-2008-1232
    Resolves: rhbz#457727
  - add patch for CVE-2008-1947
    Resolves: rhbz#449917
  - add patch for CVE-2008-2370
    Resolves: rhbz#458635
  - add patch for CVE-2008-2938
    Resolves: rhbz#456216


author: Fernando Nasser <fnasser@redhat.com> - 0:5.5.23-0jpp.5
changelog:
  From jean-frederic clere <jclere@redhat.com>:
  - Patch for CVE-2007-3382 and CVE-2007-3385
    Resolves: rhbz#254156


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.3
changelog:
  - Remove erroneous rebuild-gcj-db for javadoc subpackage
  - Add fixes for CVE-2007-2449 and CVE-2007-2450
  - Resolves: bug 244846, bug 244817


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.2
changelog:
  - Rebuild
  - Add catalina.out to the rpm and set explicit permissions; tomcat ownership
  - Resolves: bug 237088


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.1
changelog:
  - Resolves: bug 237088 
  - Merge 0:5.5.17-8jpp.2 with sources/patches from 5.5.23
  - Build against jakarta-commons-modeler 1.1 with MODELER-15 patch


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-3jpp_2fc
changelog:
  - Re-enable ppc64 and s390x
  - Disable JSP pre-compilation on ppc64 and x390x (FIXME)
  - Bootstrap mode (with apisonly) build


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-3jpp_1fc
changelog:
  - Full build
  - Do not build on ppc64 and s390x
  - Fix servlet-api.jar path
  - Add version to catalina .so
  From Ralph Apel <rapel@redhat.com>:
  - Re-add patch to add rt.jar
  - Add mx4j JMX API and struts to classpath


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-3jpp_0fc
changelog:
  - Upgrade
  - Use any JTA for now
  - Try and remove exclude for sample.war
  - Bootstrap build with apisonly


author: Ralph Apel <r.apel@r-apel.de> 0:5.5.17-3jpp
changelog:
  - Create option --with apisonly to build just tomcat5-servlet-2.4-api,
    tomcat5-jsp-2.0-api and its -javadoc subpackages
  - Create option --without ecj to build even when eclipse-ecj not available
  - Drop several unnecessary export CLASSPATH=


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-2jpp
changelog:
  - Requires on post things that are linked to at post
    Merge changes from downstream:
  - Fix line breaks in the tomcat5 init script
  - Split preun section among main package and the two new subpackages
  - Move catalina-ant*.jar to the server-lib subpackage to avoid circular
    dependency with the main package
  - Remove leading zero from alternative priorities
  - Rebuild with new classpath-mail as javamail alternative
  - Update versions of dependencies and move them to library subpackages
  - Use only jta from geronimo-specs


author: Ralph Apel <r.apel@r-apel.de> 0:5.5.16-3jpp
changelog:
  - Drop jdtCompilerAdapter from build-jar-repository
  - Use ant-trax in static webapp build
  - Duplicate admin-webapps jars in _javadir and make them world readable
  - Direct install of common-lib and server-lib to _javadir and symlink for TC5


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0:5.5.15-1jpp_5fc
changelog:
  - Require java-gcj-compat for post and postun sections of
    servlet-2.4-api, jsp-2.0-api-javadoc and
    server-lib sub-packages, since these three packages call
    /usr/bin/rebuild-gcj-db in their post and/or postun sections.


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.12-1jpp
changelog:
  - Place jsp in its own subpackage
  - Fix alternative links to jsp and servlet
  - Fix alternative priorities to jsp and servlet
  - Create library subpackages: common-lib and server-lib
    From Vadim Nasardinov <vadimn@redhat.com> 0:5.5.12-1jpp
  - Upgrade to 5.5.12
    From Deepak Bhole <dbhole@redhat.com>
  - Fix init script so it works with SELinux


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.9-1jpp
changelog:
  - Merge for upgrade
  - Change the user to tomcat from tomcat4
  - Relax permissions on appdir directory so jonas package can build
  - Remove spurious links to log4j.jar from common and server/lib
  - Remove spurious dependency on tyrex (only needed for tomcat4)
  - Make sure the main package installs first so user tomcat is created
  - Reinstate ssl code changes so that tomcat can be built with other SDKs
    and not only with Sun's or BEA's.


author: Jason Corley 0:5.5.4-12jpp
changelog:
  - Update the servletapi and servletapi-javadoc subpackages to the way proposed
    by Gary Benson (based on work by Ralph Apel) in the 5.0.30 RPMs


author: Jason Corley 0:5.5.4-10jpp
changelog:
  - Incorporate Fernando Nasser's javaxssl patch from the tomcat 5.0.28 RPM
  - Replace find ... -exec's with find | xargs


author: Jason Corley 0:5.5.4-9jpp
changelog:
  - First attempt at the whole servletapi issue
  - Replace jmxri references with mx4j
  - Build with JDK 1.4 and require a 1.4 JDK to run
  - Remove cruft
  - Clearly lost track of some stuff between changelog entries ;-)


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.27-2jpp
changelog:
  - Oops, don't require mx4j 2.0.1. 1.1.1 or later should be enough.
    jmxri won't work anymore since tc5 needs mx4j-tools.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.27-1jpp
changelog:
  - Update to 5.0.27 (stable)
  - Don't remove tomcat4 user/group on uninstall see the mailing list
    for discussion
  - build w/ xml-apis.jar instead of xmlParserAPIs.jar (release notes 5.0.27)
  - Require junit 3.8.1 or newer (release notes 5.0.26)
  - Require jakarta-commons-dbcp 1.2.1 or newer (release notes 5.0.27)
  - Require jakarta-commons-logging 1.0.4 or newer (release notes 5.0.27)
  - Require jakarta-commons-pool 1.1 or newer (release notes 5.0.27)


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.24-1jpp
changelog:
  - Update to 5.0.24
  - Require xerces-j2 2.6.2 (release notes 5.0.21), also require ant < 1.6
    as tomcat5 doesn't seem to build cleanly with 1.6 yet.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.19-2jpp
changelog:
  - Set JAVA_ENDORSED_DIRS by default in tomcat5.conf, it is otherwise empty
    Suggestion from Aleksander Adamowski <aleksander.adamowski@altkom.pl>


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.18-1jpp
changelog:
  - Update to 5.0.18
  - Build catalina before connectors
  - Hack connectors build
  - Require xerces-j2 2.6.0 (release notes 5.0.17)


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-4jpp
changelog:
  - Create TC4 user and group separately, lets TC5 work out of the box
    on Trustix (Patch from Iain Arnell)


author: Kaj J. Niemi <kajtzu@fi.basen.net> - 0:5.0.16-3jpp
changelog:
  - servletapi5 is required
  - move confdir/Catalina from admin-webapps to main package
    (otherwise we end up requiring tomcat5-admin-webapps for struts-webapps)


author: Kaj J. Niemi <kajtzu@fi.basen.net> - 0:5.0.16-2jpp
changelog:
  - Fix conflict with tomcat4 catalina-ant.jar in %_javadir by renaming it
    catalina-ant5.jar for now.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.9.1
changelog:
  - Struts should be 1.1 or later according to the release notes
  - The /admin webapp works now as well
  - manager.xml needs to be group writeable, otherwise tomcat complains


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.6
changelog:
  - Require xerces-j2 instead of just jaxp_parser_impl
  - Require jpackage commons-logging instead of internal version


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.beta.4
changelog:
  - Place jspapi, jmxri, commons-el in common/lib as mentioned in the
    upstream RELEASE-NOTES.txt. This makes jsps actually work.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.beta.3
changelog:
  - Separated jakarta-commons-el from tomcat
  - Require servletapi5 and jakata-commons-el
  - Added Patch #4 (tomcat5-5.0.16-cluster-pathelement.patch) which fixes
    build failure when servlet-api is renamed something else than the default
  - Added Patch #5 (tomcat5-5.0.16-skip-build-on-install.patch) which corrects
    servletapi/jspapi related build snafu on install. They're already built so
    it's OK to skip.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.beta.1
changelog:
  - 5.0.16
  - jakarta-commons-el included here instead of somewhere else for now,
    packaging unfinished
  - Patch #3 removes dependency to jsvc.tar.gz which doesn't seem to be anywhere


author: Jens Petersen <petersen@redhat.com> - 8.4.9-3
changelog:
  - tk-devel requires tcl-devel and xorg-x11-devel instead of XFree86-devel
  - use sed instead of perl for fixing tkConfig.sh
    - buildrequire sed instead of perl
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - rebuild with gcc 4


author: Jens Petersen <petersen@redhat.com> - 8.4.7-2
changelog:
  - move pkgIndex.tcl back into /usr/lib/tk8.4 so that multilib
    parallel installs works (135310)
    - drop tk-8.4.5-pkgIndex-loc.patch
    - remove any compat symlink present before installing
    - do not generate compat symlink after installing


author: Jens Petersen <petersen@redhat.com> - 8.4.7-1
changelog:
  - update to 8.4.7
    - replace tk-8.4.5-no_rpath.patch with tk-8.4-no_rpath.patch
    - replace tk-8.4.5-autoconf.patch with tk-8.4-autoconf.patch


author: Mike A. Harris <mharris@redhat.com> - 8.4.5-7
changelog:
  - Removed Requires: XFree86-libs and replaced with Buildrequires: XFree86-devel
    so that the package is X11 implementation agnostic for the inclusion of
    xorg-x11 (#118482)
  - Added Requires(post,postun): /sbin/ldconfig
  - Added BuildRequires: perl, as perl is used during %install


author: Jens Petersen <petersen@redhat.com> - 8.4.5-5
changelog:
  - add tk-8.4.5-autoconf.patch and build with autoconf 2.5x
    (Robert Scheck, #116776)
  - add tk-8.4.5-pkgIndex-loc.patch to install pkgIndex.tcl in the script dir
  - use %{name} throughout for greater portability
  - add a "--with check" rpmbuild option
  - use "mkdir -p" instead of "mkdirhier" (Robert Scheck, #116774)
  - /usr/lib/tk8.4 is now a compat symlink to /usr/share/tk8.4
  - include all the private header files under /usr/include/tk-private
  - add doc files


author: Jens Petersen <petersen@redhat.com> - 8.4.5-1
changelog:
  - new package split out from tcltk
  - update to tk 8.4.5 (#88429)
  - filtered changelog for tk
  - buildrequire autoconf213 (#110583) [mvd@mylinux.com.ua]
  - remove build remnants from tkConfig.sh


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.4, tk-8.3.4 (#75600), tcllib-1.3, itcl-3.2.1,
    tix-8.1.3 (#59098)
  - drop the crud compat dir symlinks in libdir
  - package now builds without tcl or tk installed (partly #52606)
    - replace all relative paths by absolutes ones, using new tcltktop
    - give absolute paths to tcl and tk when configuring
    - give buildroot bindir path to tcllib make
    - export buildroot libdir in LD_LIBRARY_PATH when installing
  - replace tclvers and tkvers by tcltkvers and use it
  - replace tcl_major and tk_major by tcltk_major and use it
  - don't explicitly provide 64bit libs on ia64 and sparc64


author: Adrian Havill <havill@redhat.com>
changelog:
  - used %makeinstall to brute force fix any remaining unflexible makefile dirs
  - revert --enable-threads, linux is (still) not ready (yet) (bug 49251)


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Avoid pulling in the example ELF executable into /usr/share. (#198001)
  - Mark man pages as documentation.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Make sure that CFLAGS in pfmlib/lib/ is used.
  - Separate build and install processes.
  - Clean up the descriptions.


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Ray Strode <rstrode@redhat.com> 2.4.2-2
changelog:
  - Move gthumb.desktop to redhat-menus (#131726)
  - Require recent desktop-file-utils
  - Call update-desktop-database from %postun


author: Christopher Aillon <caillon@redhat.com> 2.4.2-1
changelog:
  - gthumb.desktop: Add supported mime types (#131740)
    - gthumb.spec: Run update-desktop-database (#131740)
    - Update to 2.4.2


author: Warren Togami <wtogami@redhat.com> 2.3.2-2
changelog:
  - #111001 BR: libgnomeui-devel gettext libpng-devel
    BR or missing features: gphoto2-devel libjpeg-devel libtiff-devel


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.3-10.el5
changelog:
  - increase_makekeys.patch: Increase size of working arrays in the makekeys
    utility program to prevent build errors.
  - keysyms.patch: add key symbols for various multimedia keys (#496184)


author: Adam Jackson <ajax@redhat.com> 1.0.3-8.el5
changelog:
  - libX11-GB18030.patch: Fix the previous patch to unbreak input for non-UTF8
    locales (BIG5, etc.) (#220040)


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libX11 to version 1.0.2
  - Bump BuildRequires and Requires to "xorg-x11-proto-devel >= 7.1-2" to meet
    new "xproto >= 7.0.6" dependency.
  - Disable libX11-0.99.3-datadir-locale-dir-fix.patch as it is now included
    upstream.
  - Remove autoconf dependency as we no longer need it.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added libX11-1.0.1-setuid.diff to fix potential security issue (#196094)
  - Change dependency on "filesystem" package to "xorg-x11-filesystem" package,
    so we can control this dep centrally.
  - Added NEWS to doc list.


author: Mike A. Harris <mharris@redhat.com> 0.99.4-1
changelog:
  - Updated libX11 to version 0.99.4 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added libX11-0.99.3-datadir-locale-dir-fix.patch, to fix build to install
    the locale data files into datadir instead of libdir. (#173282)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libX11 to version 0.99.3 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated to libX11-0.99.2 from the X11R7 RC1 release.
  - Added en_GR.UTF-8 locale to file manifest.
  - Forcibly remove Xcms.txt


author: Rafael Schloming <rafaels@redhat.com> - 0.7.917557-4
changelog:
  - Changed defines to globals and moved to top.
  - Fixed typo in description.
  - Removed unnecessary python Requires/BuildRequires.


author: Michal Hlavinka <mhlavink@redhat.com> - 75-8
changelog:
  - lazy /dev files creation on ecryptfs module load prevents ecryptfsd 
    daemon to start (#554740)
  - passwd_file option used together with salt option breaks ecryptfs (#553629)


author: Michal Hlavinka <mhlavink@redhat.com> - 75-6
changelog:
  - security fixes:
  - privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
  - race condition when checking source during mount (CVE-2011-1833)
  - mtab corruption via improper handling (CVE-2011-1834)
  - key poisoning via insecure temp directory handling (CVE-2011-1835)
  - arbitrary file overwrite via lock counter race (CVE-2011-1837)


author: Michal Hlavinka <mhlavink@redhat.com> 75-3
changelog:
  - ask for password confirmation when creating openssl key (#500850)
  - removed executable permission from ecryptfs-dot-private (#500817)
  - ecryptfs-rewrite-file: improve of progress output (#500813)
  - don't error out when unwrapping and adding a key that already exists (#500810)
  - fix typo in ecryptfs-rewrite-file(1) (#500804)
  - add error message about full keyring (#501460)
  - gui sub-package must requires pygtk2-libglade (#500997)
  - require cryptsetup-luks for encrypted swap (#500824)
  - use blkid instead of vol_id (#500820)
  - don't rely on cryptdisks service (#500829)


author: Michal Hlavinka <mhlavink@redhat.com> 75-2
changelog:
  - don't hang when used with wrong/missing stdin (#499367)
  - don't print error when key already removed (#499167)
  - refuse mounting with too small rsa key (#499175)
  - don't error out when adding key that already exists (#500361)
  - allow only working key sizes (#500352)
  - retutn nonzero when fnek is not supported (#500566)
  - add icon for Access-Your-Private-Data.desktop file (#500623)
  - fix information about openssl_passwd in openssl_passwd_file (#499128)
  - don't list mount.ecryptfs_private twice


author: Michal Hlavinka <mhlavink@redhat.com> 74-1
changelog:
  - update to 74
  - fix difference between apps. real names and names in usage messages (#475969)
  - describe verobse and verbosity=X in man page (#470444)
  - adding passphrase to keyring is fixed (#469662)
  - mount won't fail with wrong/empty input to yes/no questions (#466210)
  - try to load modules instead of failing when it's missing (#460496)
  - fix wrong return codes (#479429)
  - resolves: #482834


author: Karsten Hopp <karsten@redhat.com> 56-3
changelog:
  - fix CFLAGS, remove static libs, -devel needs to requires pkgconfig (mnovak)
  - fix openssl parameter checks (Eric Sandeen)
  - Add mount helper gui (#445733, Jarod Wilson)
  - Add missing BR: desktop-file-utils (Jarod Wilson)


author: Mike Halcrow <mhalcrow@us.ibm.com> - 17-0
changelog:
  - Provide built-in fallback passphrase key module. Remove keyutils,
    openssl, and pam requirements (library dependencies take care of
    this). Include wrapped passphrase executables in file set.


author: Mike Halcrow <mhalcrow@us.ibm.com> - 10-0
changelog:
  - Remove verbose syslog() calls; change key module build to allow
    OpenSSL module to be disabled from build; add AUTHORS, NEWS, and
    THANKS to docs; update Requires with variables instead of hardcoded
    name and version.


author: Mike Halcrow <mhalcrow@us.ibm.com> - 9-1
changelog:
  - Minor update in README, add dist tag to Release, add --disable-rpath
    to configure step, and remove keyutils-libs from Requires.


author: Mike Halcrow <mhalcrow@us.ibm.com> - 8-0
changelog:
  - Introduce build support for openCryptoki key module.  Fix -dev build
    dependencies for devel package


author: Peter Jones <pjones@redhat.com> - 1.8.1-4
changelog:
  - Flush devices from parted's device cache, or else they become stail when
    devices are renamed (removes destroy() call).
  - Resolves: #219965


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-2
changelog:
  - Add parted.PedDevice.destroy() call to ped_device_destroy() in libparted.
    Needed to remove cached devices from the device list so future get()
    calls return correct info.
  - Related: rhbz#218861


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-1
changelog:
  - Rebuild for GNU parted-1.8.1
  - Determine Python version to use in %build so the source RPM is more
    easily moved between distribution releases.
  - Resolves: rhbz#218087


author: David Cantrell <dcantrell@redhat.com> - 1.8.0-1
changelog:
  - Bump version to 1.8.0 and require parted >= 1.8.0
  - Remove python-abi Requires line since rpm handles that automatically


author: Jeremy Katz <katzj@redhat.com> - 1.6.8-1
changelog:
  - update for new parted ABI
    - device -> heads, sectors, cylinders now refer to the bios geometry
  - require parted >= 1.6.12


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Initial build split out into separate source from the parted package.
  - Don't build on ppc64 right now due to parted build problems (#118183)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXi to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-20
changelog:
  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-13
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Mike A. Harris <mharris@redhat.com> 2.15.1-3.fc6
changelog:
  - Update utempter dependency and rebuild to ensure new libutempter is used.
  - Change BuildRoot to comply with Fedora packaging guidelines.
  - Change legacy style PreReqs to Requires({pre,post,postun}) style and update


author: John (J5) Palmieri <johnp@redhat.com> - 2.10.0-3
changelog:
  - Change the default icon theme back to Clearlooks as the Clearlooks
    icon theme will now inherit from Bluecurve


author: Dan Walsh <dwalsh@redhat.com> - 2.8.0-3
changelog:
  - Stat gnome_user_private_dir before doing chmod, firefox gets
  - blown up because of this in strict selinux policy.


author: Mark McLoughlin <markmc@redhat.com> 2.7.2-1
changelog:
  - Update to 2.7.2
  - Remove sound properties patches and desktop_gnome_accessibility_startup
    schemas - all seem to be upstream now


author: Colin Walters <walters@redhat.com> 2.6.0-3
changelog:
  - Apply another patch which fixes GNOME sound events, which
    due to what appears to be a glib bug, were broken by my
    previous patch.


author: Matt Wilson <msw@redhat.com> 2.0.2-5
changelog:
  - added libgnome-2.0.2-program-init.patch to enable correct module
    initialization when gnome_program_init is called after
    gnome_program_module_register


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.0.1
  - put bonobo monikers in file list (don't know what they 
    do, but assuming they do something)
  - include /etc/sound in file list


author: Havoc Pennington <hp@redhat.com>
changelog:
  - update CVS snap to 1.107.0.90, glib 1.3.11
  - add libxslt dep
  - require specific versions of dependent libs
  - add bunch of missing stuff to file list
  - install gconf schemas in post


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Joe Orton <jorton@redhat.com> 1.2.3-3
changelog:
  - update to 1.2.3
  - update to psvn.el r16070 from Stefan Reichoer
  - merge subversion.conf changes from RHEL4
  - merge filter-requires.sh changes from FC4 updates


author: Joe Orton <jorton@redhat.com> 1.2.0-3
changelog:
  - update to 1.2.1
  - fix BuildRequires for ruby and apr-util (#163126)
  - drop static library archives


author: Joe Orton <jorton@redhat.com> 1.1.3-8
changelog:
  - further swig bindings fix (upstream via Max Bowsher, #151798)
  - fix perl File::Path dependency in filter-requires.sh


author: Joe Orton <jorton@redhat.com> 1.1.3-7
changelog:
  - restore swig bindings support (from upstream via Max Bowsher, #141343)
  - tweak SELinux commentary in default subversion.conf


author: Joe Orton <jorton@redhat.com> 1.0.2-2
changelog:
  - add perl MODULE_COMPAT requirement for -perl subpackage
  - move perl man pages into -perl subpackage
  - clean up -perl installation and dependencies (Ville Skyttä, #123045)


author: Joe Orton <jorton@redhat.com> 1.0.0-2
changelog:
  - add fix for lack of apr_dir_read ordering guarantee (Philip Martin)
  - enable compression in ra_dav by default (Tobias Ringström)


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-24
changelog:
  - Properly initialize the random number generator when forking new process
    * ruby-1.8.7-CVE-2011-3009.patch
    - Related: rhbz#768830


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-22
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-CVE-2011-4815.patch
    - Resolves: rhbz#768830
  - Patch cleanup.


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-21
changelog:
  - ruby recurses indefinitely when cwd is broken and path empty.
    * ruby-1.8.6-fix-indefinitely-recurse.patch
    - Resolves: rhbz#435631
  - REXML does not correctly normalize '&'.
    * ruby-1.8.6-fix-rexml-normalize.patch
    - Resolves: rhbz#577351
  - require 'rdoc/usage' raises an Exception because of a missing require.
    * ruby-1.8.5-lib-rdoc-ri-ri_options.rb-prevent-NameError.patch
    - Resolves rhbz#445399


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-20
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    * ruby-1.8.7-CVE-2010-0541.patch
  - Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
    * ruby-1.8.6-CVE-2009-4492.patch
  - Resolves: rhbz#709958


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-17
changelog:
  - security fixes. (#505088)
  - CVE-2007-1558: APOP password disclosure vulnerability.
  - CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
  - CVE-2009-1904: DoS vulnerability in BigDecimal.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-16
changelog:
  - CVE-2008-4310: real fix for CVE-2008-3656. original patch named as fix for
                   CVE-2008-3656 actually fixed different issue (CVE-2008-1145),
                   hence we are providing correct patch and renaming original
                   patch to refer to proper CVE.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-15
changelog:
  - security fixes. (#461591)
  - CVE-2008-3655: multiple insufficient safe mode restrictions.
  - CVE-2008-1145: WEBrick DoS vulnerability (CPU consumption).
  - CVE-2008-3657: missing "taintness" checks in dl module.
  - CVE-2008-3905: use of predictable source port and transaction id in DNS
                   requests done by resolv.rb module.
  - CVE-2008-3443: Memory allocation failure in Ruby regex engine
                   (remotely exploitable DoS).
  - CVE-2008-3790: DoS vulnerability in the REXML module.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-12
changelog:
  - security fixes. (#451929)
  - CVE-2008-2662: Integer overflow in rb_str_buf_append().
  - CVE-2008-2663: Integer overflow in rb_ary_store().
  - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
  - CVE-2008-2725: Integer overflow in rb_ary_splice().
  - CVE-2008-2726: Integer overflow in rb_ary_splice().


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-6
changelog:
  - security fix [CVE-2007-5162]
  - ruby-1.8.5-CVE-2007-5162.patch: patch for Net::HTTP that is insufficient
    verification of SSL certificate. (#320341)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-6303.patch: fix a infinite loop with certain HTTP
    request. (#218290)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long) 
    == sizeof(int). The patch does not fix the source of the problem, just 
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT) 
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch, 
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: Ray Strode <rstrode@redhat.com> - 0.16.4-3
changelog:
  - dont change to vt 1 on exit.  Adam Jackson says its dead
    code and X will always do the right thing.
  - change the colors to be more red
  - remove some code to invoke interactive bash shell as part of
    startup process (bug 209457)


author: Ray Strode <rstrode@redhat.com> - 0.16.3-6
changelog:
  - don't SIGKILL X server
  - wait for signal from X server that it's ready instead of
    just launching it an hoping for the best
  - only vt switch if things go bad, X and gdm will handle 
    making sure the right vt is active.
  - don't ever change the busy cursor to not busy (if we're not
    busy then rhgb shouldn't be running).


author: Mike A. Harris <mharris@redhat.com> 0.16.3-5
changelog:
  - Bump libxf86config-devel dep to ensure the fix for (#198653) is present.
  - Ensure the package has ownership of the dirs it creates.
  - Use Fedora Extras style BuildRoot tag.


author: Ray Strode <rstrode@redhat.com> - 0.16.3-4
changelog:
  - remove erroneous space from x conf filename.  Problem discovered
    from Mary Ellen Foster <mefoster@gmail.com> (bug 196885)


author: Ray Strode <rstrode@redhat.com> 0.16.2-13
changelog:
  - Don't run /sbin/chvt and never call waitpid on child.  Instead
    just change vts using the VT_ACTIVATE ioctl.  Patch from Peter
    Jones <pjones@redhat.com>.
  - Get rid of some other calls to waitpid and just let glib
    handle it.  The code was ignoring the return values anyway...
  - add a buildreq on libxf86config-devel


author: Ray Strode <rstrode@redhat.com> 0.16.2-10
changelog:
  - Don't switch out of details view if the user switched into
    it intially.  Patch from Mary Ellen Foster <mefoster@gmail.com>
    (bug 151239).


author: Ray Strode <rstrode@redhat.com> 0.16.2-9
changelog:
  - add BuildRequires: gettext
  - don't build in-tree copy of gtkexpander.c
  - don't switch to vt1 automatically after 35 seconds (bug 135783)


author: Daniel Veillard <veillard@redhat.com> 0.16.1
changelog:
  - switch to display :9 to fix #139704
  - delay creation of the fifo after X initialization to avoid deadlock
    with initscripts if X fails to start #135574
  - cleanup in case of deadly signal received
  - improved the debugging layer to chase aformentioned bugs.
  - po/*: update the translations


author: Elliot Lee <sopwith@redhat.com> 0.13.5-2
changelog:
  - rhgb-0.13.5-firstboot patch - don't do a timeout while we're running firstboot- Use _smp_mflags macro


author: Daniel Veillard <veillard@redhat.com> 0.13.2
changelog:
  - add support for specific conf file in /etc/rhgb/xorg.conf #131063
  - avoid dropping back to text mode between rhgb end and gdm #108665


author: Daniel Veillard <veillard@redhat.com> 0.13.1
changelog:
  - fix vt1 switching #131899
  - fix fsck reporting, exporing it to the vte, requires a patch to
    initscript too #107121, #129881
  - move temp fielsystem to /etc/rhgb/temp
  - provide a mechanism to output to the detailed view
  - automatically switch to detailed view or vt1 on timeouts


author: Jason Vas Dias <jvdias@redhat.com> - 3.10-1
changelog:
  - fix bug 176720: upgrade to 3.10
  - make .spec file conform to fedora-rpmdevtools spectemplate-perl.spec


author: Joe Orton <jorton@redhat.com> 0.24.4-3
changelog:
  - use BuildRequires not BuildPrereq, drop autoconf, libtool;
    -devel requires {openssl,zlib}-devel (#116744)


author: Jeff Johnson <jbj@redhat.com> 0.23.9-2
changelog:
  - force expat, include neon-config, for subversion build.
  - do "make check" (but ignore failure for now)


author: Bill Nottingham <notting@redhat.com> 006-2
changelog:
  - udev patch - right idea, awful execution. fix that (#163311)
  - add requirement for 2.6.13-rc1, basically


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-16
changelog:
  - Add patch to apply new_windows_always_on_top to windows that
    are raised or activated but denied focus as well.
    Resolves: bug 582769
  - Add patch to exclude the current application from the effect of
    no_focus_windows preference
    Resolves: bug 591944


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-14
changelog:
  - Add patch to allow apps to raise windows even when raise_on_click is false
    Resolves: bug 526045
  - Add patch to fix flicker when moving windows between monitors
    Resolves: bug 495939
  - Add patch to trap errors fixing BadWindow when closing windows
    Resolves: bug 523777
  - Add patch to fix problems when moving window with a modal dialog
    to another workspace
    Resolves: bug 237158
  - Add patch to fix KDE windows flashing when switching workspaces
    Resolves: bug 506537
  - Add patch to fix strict focus mode to check for terminals
    by res_class, not by res_name
    Resolves: bug 504223
  - Add patch to add a config option:
    /apps/general/metacity/place_on_current_monitor
    to enable the metacity >= 2.20 behavior where new windows are always
    placed on the current monitor
    Resolves: bug 523841
  - Add a patch so that when the pointer moves, and the window under
    the pointer isn't focused, it will be focused.
    Resolves: bug 530261
  - Add a patch to add a config option:
    /apps/general/metacity/no_focus_windows
    Which allows specifying expressions to match new windows that
    shouldn't be focused.
    Resolves: bug 530262
  - Add a patch to add a config option:
    /apps/general/metacity/new_windows_always_on_top
    Which, when set, will result in new windows always being placed on top.
    Resolves: bug 530263


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-13
changelog:
  - Add patch to allow the focused client to raise any of its windows,
    not just windows in the same group.
    Resolves: bug 503522


author: Soren Sandmann <sandmann@redhat.com> - 2.16.0-12
changelog:
  - Add patch to drop the grab on the focused window in click-to-focus
    mode without click to raise. Bug 442769


author: Soren Sandmann <sandmann@redhat.com> - 2.16.0-9
changelog:
  - Add patch from http://bugzilla.gnome.org/show_bug.cgi?id=348305 to fix
    https://bugzilla.redhat.com/show_bug.cgi?id=220283. Basically a big 
    s/Time/guint32/ due to braindamage in Xlib.


author: Soren Sandmann <sandmann@redhat.com>
changelog:
  - Remove GL dependencies.
  - Remove static-cm patch
  - add patch to fix more CurrentTime race conditions (bug 206263)


author: Soren Sandmann <sandmann@redhat.com> 2.15.5-1
changelog:
  - Update metacity to a cvs snapshot, and libcm 0.0.22. (The standalone
    libcm package is being put through the package review process).


author: Ray Strode <rstrode@redhat.com> - 2.13.89.0.2006.02.17-1
changelog:
  - Update to latest cvs snapshot to give meaningful failure error
    messages
  - Don't remove build root in install, because it triggers a
    rebuild of metacity


author: Ray Strode <rstrode@redhat.com> - 2.13.89.0.2006.02.16-1
changelog:
  - Update to cvs snapshot to add the ability to 
    runtime enable compositor
  - change %makeinstall to make install DESTDIR=..


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.5.90
  - add little script after configure that checks what config.h
    contains, to be sure we detected all the right features.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - grow size of top resize, and display proper cursor on enter notify
  - require latest intltool to try and fix metacity.schemas by
    regenerating it in non-UTF-8 locale


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.0.91 with raise/lower keybindings for msf, fixes to fullscreen
  - more apps that probably intend to be, fix for changing number of
    workspaces, fix for moving windows in multihead


author: Havoc Pennington <hp@redhat.com>
changelog:
  - upgrade to cvs snap 2.4.0.90 with pile of bugfixes from 
    this weekend
  - change default theme to bluecurve and require new redhat-artwork


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-6
changelog:
  - Using the libgnomeui stock icons requires to link against
    libgnomeui and init our app as a GNOME app, which we don't
    want to do. Use the evolution icon instead
  Related: rhbz#250403


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-5
changelog:
  - Require libgnome in the glade file, so that the GNOME
    stock icons can be used
  Related: rhbz#250403


author: Alexander Larsson <alexl@redhat.com> - 0.4-5
changelog:
  - Build in Core
  - Move gaim plugin into main package
  - Fix up some build requirements
  - No bluetooth on s390*


author: Paul W. Frields <stickster@gmail.com> - 0.4-3
changelog:
  - Rearrange Requires and BuildRequires for subpackages
  - Include default Evolution plugin in main package


author: Matthias Clasen <mclasen@redhat.com> - 2.15.1.cvs20060505-2
changelog:
  - Update to a cvs snapshot that supports the new GTK+ filechooser
    backend API
  - Require GTK+ 2.9.0


author: Ray Strode <rstrode@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0

  -* Thu Jan 27 2005 Matthias Clasen <mclasen@redhat.com> - 2.9.1-1
  - Update to 2.9.1
  - Drop upstreamed patches


author: Colin Walters <walters@redhat.com> 2.6.0-5
changelog:
  - Backport fileselector crash fix from HEAD
  - Remove unneeded calls to autotools
  - Remove BR on autotools


author: Alexander Larsson <alexl@redhat.com> 2.6.0-3
changelog:
  - Backport fixes from cvs
  -  fix fileselector crashes
  -  fix auth callback threadsafeness
  -  fix auth callback modal dialog bug


author: Tim Powers <timp@redhat.com> 2.2.0.1-5
changelog:
  - fixed requires so that we no longer require Xft and Xft-devel, but
    instead XFree86 and XFree86-devel >= 4.2.99


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.106.0.90 snap, glib 1.3.11
  - add explicit-versioned requires on dependency libs
  - do gconftool stuff, put schemas in file list
  - use makeinstall instead of destdir to avoid broken makefiles


author: Ivana Varekova <varekova@redhat.com> 12:0.60.3-1
changelog:
  - update to 0.60.3 - (bug 141968) thanks to Dawid Gajownik 
  - add BuildRequires: ncurses-devel, gettext 
  - add config script patch (thanks tmraz@redhat.com)


author: Adrian Havill <havill@redhat.com> 12:0.50.50.3-18
changelog:
  - make rpm own some unclaimed dirs (#112984, #113778)
  - explicitly claim kbd anbd dat files in /usr/share/aspell
  - a little spec file files cleanup-- macro subs, dir prefix
  - make /usr/lib/aspell; don't make the dictionary packages do it


author: Tim Powers <timp@redhat.com>
changelog:
  - fix broken pspell epoch dep
  - create $RPM_BUILD_ROOT/usr/bin by hand
  - remove /usr/doc
  - fix hardcoding of /usr/lib so that we can build on x86_64


author: Trond Eivind Glomsrød <teg@redhat.com> 0.33.7-1
changelog:
  - 0.33.7 bugfix release. Requested by the author, it fixes
    coredumps in sug-mode and when not using typo-analyses.
    It also contains code cleanups so it compiles with -ansi
  - should fix coredump on IA64 (#49746)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - .32.5 bugfix release (also contains improved documentation),
    obsolete old patch
  - the compatibility scripts are now part of the package itself
  - clean up build procedure
  - remove manual.aux file from docs (#16424)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - .32.1 bugfix release, obsolete old patch
  - rename to 0.32.1
  - add patch from author to change his email address
  - add spell and ispell compatibility scripts


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remember to obsolete ispell
  - build the Canadian and British dictionaries here now,
    as part of the main package. Same package names and 
    descriptions.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - .32
  - remove old patches, add a patch since namespace isn't 
    polluted as much anymore (as opposed to older toolchain)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - patch to work around compiler bug(?) wrt. inline functions
  - use CFLAGS and CXXFLAGS
  - set them to -O0 to work around YACB
  - copy libtool files for IA64 support


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - update to .31.1. My patch was upstreamed and is no longer needed.
  - new patch added so DESTDIR works properly


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (this entry includes some old ones...)
  - update to .31
  - added patch to make it compile with a pickier compiler
  - include /usr/share/pspell


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to .30.1
  - used build fixes from Ryan Weaver's 0.30.1-1 package on sourceforge
  - updated URL, download/ftp location
  - removed redundant define's at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - built for Powertools 6.1
  - removed %serial definitions from spec file to make versioning
    consistant with the other packages we ship.
  - changed build root path
  - general spec file cleanups


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [aspell-.27.2-2]
  - Changes from .27.1 to .27.2 (Mar 1, 1999)
  - Fixed a major bug that caused aspell to dump core when used
    without any arguments
  - Fixed another major bug that caused aspell to do nothing when used
    in interactive mode.
  - Added an option to exit in Aspell's interactive mode.
  - Removed some old documentation files from the distribution.
  - Minor changes on to the section on using Aspell with egcs.
  - Minor changes to remove -Wall warnings.


author: Dan Williams <dcbw@redhat.com> - 0.5.10-9
changelog:
  - Force-disconnect at init, deinit, deauth, and disassoc
  - Ignore torrents of disconnect events from the iwl drivers
  - Resolves: #506230


author: Dan Williams <dcbw@redhat.com> - 0.5.10-8
changelog:
  - Generalize disconnection-during-association fixes to iwl3945 and iwlagn
  - Force drivers to disassociate when required (see also #468967)
  - Resolves: #468441


author: Dan Williams <dcbw@redhat.com> - 0.4.8-10.2
changelog:
  - Backport the 'fragment_size' config option (Resolves: #427843)
  - Fix the 'condrestart' function of the sysvint script (Resolves: #217281)


author: Dan Williams <dcbw@redhat.com> - 0.4.8-10
changelog:
  - Add fix for madwifi and WEP (wpa_supplicant/hostap bud #140) (#rh190075#)
  - Fix up madwifi-ng private ioctl()s for r1331 and later
  - Update madwifi headers to r1475


author: Dan Williams <dcbw@redhat.com> - 0.4.8-6
changelog:
  - Add patch to make orinoco happy with WEP keys
  - Enable Prism54-specific driver
  - Disable ipw-specific driver; ipw2x00 should be using WEXT instead


author: Dan Williams <dcbw@redhat.com> - 0.4.8-4
changelog:
  - Add additional BuildRequires #rh181914#
  - Add prereq on chkconfig #rh182905# #rh182906#
  - Own /var/run/wpa_supplicant and /etc/wpa_supplicant #rh183696#


author: Douglas E. Warner <silfreed@silfreed.net> 0.4.6-1
changelog:
  - upgrade to 0.4.6
  - adding ctrl interface changes recommended 
    by Hugo Paredes <hugo.paredes@e-know.org>


author: Douglas E. Warner <silfreed@silfreed.net> 0.4.5-1
changelog:
  - upgrade to 0.4.5
  - updated config file wpa_supplicant is built with
    especially, the ipw2100 driver changed to just ipw
    and enabled a bunch more EAP
  - disabled dist tag


author: Douglas E. Warner <silfreed@silfreed.net> 0.4.2-1
changelog:
  - upgrade to 0.4.2
  - new sample conf file that will use any unrestricted AP
  - make sysconfig config entry
  - new BuildRoot for Fedora Extras
  - adding dist tag to Release


author: <than@redhat.com> 2.1.5-1
changelog:
  - 2.1.5 release
  - update c_cpp_reference
  - cleanup sepcfile
  - remove templates, which is now in new upstream
  - remove unneeded c_cpp_reference-2.0.1-config.patch
  - add missing mo files
  - fixed #75084, #73128, #70656, #77767, #74425


author: Than Ngo <than@redhat.com> 2.1.3-3
changelog:
  - Add fix to show/hide KaboutKDE and Report Bug menu item over
    KDE Action Restrictions in kdeglobals


author: Than Ngo <than@redhat.com> 2.1beta2-2
changelog:
  - fixed Strange characters appear in the output window (bug #59217)
  - fixed return-line feed sign in Kdevelop setup tool (bug #55032)


author: Than Ngo <than@redhat.com> 2.1beta1-1
changelog:
  - update to 2.1 beta1
  - fix build against gcc 3
  - fix some typo bugs
  - get rid of libkfile
  - update c_cpp_reference to 2.0.1


author: Than Ngo <than@redhat.com> 2.0-2
changelog:
  - fix a bug in creating documentation index when running KDevelop Setup (bug #52760)
  - backport some major bugfixes from 2.0.1


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update the C/C++ reference guide docs. The older version had a
    couple of examples that won't work with gcc 2.96-*


author: Than Ngo <than@redhat.com>
changelog:
  - update (only bugfixes)
  - fix up kdelibs documentation path
  - fix a dependency problem with kde-i18n package (Bug #27675)
  - add qt-designer into requires


author: Than Ngo <than@redhat.com>
changelog:
  - build snapshot 20001112, it works now with KDE2 and kde1-compat
  - fix libtool to build on sparc and alpha
  - don't use make -j


author: Than Ngo <than@redhat.de>
changelog:
  - add missing ldconfig in %post and %postun section (Bug #14924)
  - add missing C references stuff to kdevelop


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Fix up documentation path (Bug #7291)
  - Update to current stable branch - this should fix up the debugger problem
  - clean up spec file


author: Matt Wringe <mwringe at redhat.com> - 0:1.2.3-7jpp.1
changelog:
  - Merge with upstream version
  - Remove unnecessary define with_gcj_support
  - Add missing javadoc requires
  - Add missing javadoc postun


author: Matt Wringe <mwringe at redhat.com> - 0:1.2.3-6jpp_1fc
changelog:
  - Merge with upstream version
  - Remove dependency on maven, use ant instead
  - Natively compile jpackages


author: Matt Wringe <mringe at redhat.com> - 0:1.2.3-6jpp
changelog:
  - Add conditional native compiling
  - Add missing buildrequires: ant-nodeps and ant-trax
  - Add missing javadoc %ghost symlink


author: Fernando Nasser <fnasser@redhat.com> - 0:1.2.3-5jpp
changelog:
  - Update objectweb module to match JOnAS 4.6.x
  - Build without demo because JPP 1.7 lacks webwork and xwork


author: Fernando Nasser <fnasser@redhat.com> - 0:1.2.2-2jpp
changelog:
  - Add patch to prevent attempt to load DTD from the net, when it comes with
    the source and is locally available
  - Replace JOnAS specific tasks with code blessed by ObjectWeb
  - Do not save copies of the java files when patching.


author: Ralph Apel <r.apel at r-apel.de> - 0:1.2.2-1jpp
changelog:
  - Upgrade to 1.2.2
  - Add jsf requirement for demo
  - Drop jndi requirement for demo
  - Drop servletapi and mx4j requirement for main package
  - Buildrequire maven and use it to build docs


author: Ralph Apel <r.apel at r-apel.de> - 0:1.2.1-1jpp
changelog:
  - Upgrade to 1.2.1
  - Relax build-time dependencies
  - Relax dependency versions
  - Make subpackage xdoclet-demo optional


author: <rrati@redhat> - 3.9-3
changelog:
  - Fixed issue running the configd on python2.3
  - Fixed error if DAEMON_LIST isn't in the configuration pulled from the
    configuration store


author: <rrati@redhat> - 3.9-1
changelog:
  - Added -v to help of store and pool tools
  - Changed subsystem name from QMF_CONFIGD to CONFIGD
  - Added support for CONFIGD.QMF_BROKER_*
  - Always send reconfig when a new configuration is received


author: <rrati@redhat> - 3.8-9
changelog:
  - Fixed wallabyclient dep to make ver and release
  - Fixed upper bound on backoff.  Backoff is bounded by
    QMF_CONFIGD_CHECK_INTERVAL
  - Clarified question asking to use default value in store tool
  - Fixed deleting value for strings and maps that resulted in the value being
    "None" instead of '' in the store tool


author: <rrati@redhat> - 3.8-6
changelog:
  - Removed 99configd_security.config
  - Perform a node.update before accessing any node object info in get_config
  - Issue condor commands with the current running configuration rather
    than with the new config from the store


author: <rrati@redhat> - 3.8-5
changelog:
  - Added SEC_DEFAULT_ENCRYPTION and SEC_DEFAULT_INTEGRITY to new
    99configd_security.config.  Both are set to optional
  - Fixed issue with exception handling when obj.update fails
  - Fixed api versions in condor_configure_store
  - Added 3DES to list of crypto methods


author: <rrati@redhat> - 3.8-1
changelog:
  - Changes to reduce change of condor security changes preventing configd from
    operating
  - Reconfig events are only sent to master
  - Added defaults to some methods in python module
  - Fixed issues with adding/removing params


author: <rrati@redhat> - 3.7-1
changelog:
  - QMF authentication method can now be specified
  - Reset backoff factor/constants to default if they are < 0
  - Added edit command to the pool tool which will dump the group/node data into
    a file in YAML format and open an editor similar to how the store tool works
  - Added insert command to pool tool which will insert features at the highest
    priority
  - The configd will not print qmf related errors when it has been told to
    shutdown
  - Listing of a node will no longer list the node's configuration.  Added
    -v|--verbose option to list configuration
  - When listing a node, the parameter's explicitly set on the node are now
    explicitly listed
  - Print warning message before deleting entities from the store.
  - Print deletion message for each entity removed from the store if the user
    decides to continue the deletion process
  - Remove PyYYAML file/dependencies for RHEL 4


author: <matt@redhat> - 3.6-6
changelog:
  - Fixed crash in WallabyClient.py, appeared as crash listing a group (BZ638992)
  - Fixed condor_configd's failure to send any reconfig signals since 3.5-1 (BZ639352)


author: <rrati@redhat> - 3.6-1
changelog:
  - Faster error commandline error reporting
  - Fixed issue with pool tool removing must_change params when it shouldn't
  - Added hostname into the log
  - Fixed issue installing invalid configuration files.  Uses exponential
    backoff now.
  - Batter handling of errors when communicating with the store
  - Increased activation timeout to 10 minutes


author: <rrati@redhat> - 3.5-1
changelog:
  - Improved reconnection time to the configuration store
  - The node checkin method call timeout set to 20 seconds
  - Only latest configuration version is processed
  - Reduce performance hit when qmf broker is backed up
  - must_change params won't display a default value
  - Fixed issue changing param from must_change to not being one
  - Cast user input strings/booleans


author: <rrati@redhat> - 3.4-1
changelog:
  - Updated dependency versions
  - Fixed issue in error log message
  - Fixed issues with pool param verification
  - New configuration file system
  - pool command line error cases reported before attempting to contact store


author: <rrati@redhat> - 3.2-1
changelog:
  - Store detection performance improvements
  - Improved detection of parameters that much be changed
  - Fixed multiple additions of unknown entities when using the store tool
  - The configd drops perms on linux, sets perms of config file to 664
  - Changed wording when asking to use the default value in store tool


author: <rrati@redhat> - 3.1-1
changelog:
  - Updated dependency versions 
  - Improved error handling
  - Added support for broker user/password in configd
  - Fixed crash/deadlock issue in the configd
  - Group membership is handled as part of a node object, allowing for priorities


author: <rrati@redhat> - 3.0-1
changelog:
  - Transitioned to new NodeUpdatedNotice
  - Fixed error messages on tool exits
  - Initial checkin will restart/reconfig daemons as well as pull config
  - Moved some logging to DEBUG level
  - Special casing of non-daemoncore daemons
  - special casing of SC_DAEMON_LIST
  - Minor bug fixes


author: <rrati@redhat> - 2.8-0.1
changelog:
  - Shutdown/restart fixes in configd on Windows
  - Special handling of ConsoleCollector in condor_configure_pool
  - API transition: get methods replaced with properties


author: <rrati@redhat> - 2.7-0.6
changelog:
  - Fixed issue with configd's default configuration file
  - Fixed issue using parameter default values when configuring features with
    condor_configure_store


author: <rrati@redhat> - 2.7-0.5
changelog:
  - Fixed an issue with the configd asking for a configuration version when a
    node has never been configured
  - If the configd fails to contact the Store or configure itself, it will
    result in the configd exiting
  - Only set SIG_QUIT and other signals that would cause a core dump on
    non-win32 OSes
  - Cleaned up shutdown cases in configd


author: <rrati@redhat> - 2.7-0.2
changelog:
  - condor_configure_pool will prompt the user to use a value for a param
    set elsewhere in the pool configuration if a must_change param is not
    given a value


author: <rrati@redhat> - 2.7-0.1
changelog:
  - Increased config logging
  - Fixed issues with condor security disallowing the configd to
    restart/reconfig condor in some cases
  - --schedds and --qmfbroker can now be used in a remove operation
  - Improved VMUniverse and EC2E special case handling
  - Corrected errors in condor_configure_store help message
  - The configd now acts upon the WallabyConfigEvent
  - Support for versioned configurations
  - condor_configure_store will not allow setting a default value for
    a parameter if the MustChange is True
  - Listing default group will not show the Members field anymore
  - The configd now checkins in with the store after random wait between 0-10
    seconds instead of waiting another $UPDATE_INTERVAL to do so
  - Fixed issue where the config would always be retrieved even if the version
    hadn't changed
  - Fixed issues handling user inputed values that contain spaces
  - Fixed issues with qmfbroker and schedds options would step on each other
  - Improved error handling
  - A successful activation will cause an automatic snapshot to be taken
  - If an invalid port is given with -o, an error message is printed
  - Changed how date is displayed for a node's 'Last Check-in Time'
  - Gracefully handle broker/store going away
  - Do not perform final checkin when the configd exits
  - Poll the node's status before checking configuration versions
  - Removed explicit subsystems from Features
  - The metadata for a wallaby type is now presented with important
    information first.
  - Better handling of unicode strings
  - Moved to the com.redhat.grid.config namespace
  - Added lock mechanism to prevent preiodic checkin and event config
    retrieval from clashing


author: <rrati@redhat> - 2.6-0.5
changelog:
  - Added python-devel dep to python-wallabyclient
  - Fixed issue in configd moving new config file across file systems
  - Prevent configd from exiting if it is in the middle of installing the
    new configuration file
  - Added --take-snapshot to condor_configure_pool
  - Fixed syntax error in condor_configure_store when adding nodes from a
    configuration that added nodes the store didn't know about


author: <rrati@redhat> - 2.6-0.4
changelog:
  - Logging message cleanup in configd
  - Fixed error when applying configuration w/o features supplied on the
    commandline
  - Disallowed entering blank name for a saved snapshot
  - Removed --fast option


author: <rrati@redhat> - 2.6-0.1
changelog:
  - UI revamp.  Metadata is now entered through an editor rather than by being
    prompted.  $EDITOR is used if set, otherwise vi is used.
  - Removed utils.py, added new submodules
  - Specfile description updates
  - The tools package now depends on python-qmf instead of python-qpid
  - Updated calls to condorutils.run_cmd
  - Updated to new wallaby protocol.  No more fake lists/sets, function
    call renames.


author: <rrati@redhat> - 2.4-0.1
changelog:
  - Changed logging method in configd from syslog to native logging to a file
  - Updated configuration file to configure logging
  - Changed QMF_CONFIG_CHECK_INTERVAL -> QMF_CONFIGD_CHECK_INTERVAL
  - Change hostname retrieval method to a more cross platform implementation
  - Fixed issue with unconfigured nodes not retrieving configurations from the
    store
  - Fixed error laying down configuration file
  - Added support for processing warning messages into pool
  - Fixed issue with pool prompting for param values when no params have been
    specified on the command line
  - Updated API calls for RemoveFeature and RemoveGroup


author: <rrati@redhat> - 2.0-0.3
changelog:
  - Added README to the tools package
  - Configurations can now be activated in the store
  - Nodes checkin with the store after receiving the configuration
  - The eventd check interval wasn't always an integer
  - Last Checkin Time is displayed in a more readable format
  - Node objects are no longer created in the store if the tools ask about a
    node that doesn't exist
  - Fixed detection of which parameters must be asked for when a configuration
    is changed


author: <rrati@redhat> - 2.0-0.2
changelog:
  - Fixed issues relating to prompting for params that must be set by the
    user when adding features to groups/nodes
  - Fixed issues setting features on groups/nodes
  - Fixed issues setting parameters on groups/nodes
  - Setting of schedulers and QMF info will no long overwrite other parameters
    on the group/node
  - Improved performance and accuracy of determining parameters that the user
    must set


author: <rrati@redhat> - 1.0-18
changelog:
  - Removed DC_DAEMON_LIST definition (BZ525746)
  - Moved create of the feature config directory and added better
    error handling (BZ525749)


author: <rrati@redhat> - 1.0-17
changelog:
  - Added support for configuring VM universe (BZ491237)
  - Removed all files from /opt (BZ493767)
  - Removed configuration of Trigger Service (BZ522531)
  - Fixed conflict with schedd and startd on same node (BZ495685)
  - Correct HA Schedd lock period (BZ496227)
  - HA Schedd name is now prompted for (BZ493340)
  - Fixed EC2E configuration for use with multiple hook keywords (BZ502879)


author: <rrati@redhat> - 1.0-15
changelog:
  - Fixed reporting of duplicate HA Schedulers (BZ486484)
  - Added configuration of condor trigger service


author: <rrati@redhat> - 1.0-12
changelog:
  - Default y/n answers clearly indicated (BZ481584)
  - Changed 'collector name' to 'pool description' (BZ481583)
  - Provide method to list nodes being managed and node/feature configs (BZ481582)
  - Update EC2 Enhanced configuration for BZ480841


author: <rrati@redhat> - 1.0-11
changelog:
  - Fix dependency parsing issue when removing features (BZ478894)
  - Removed HAD and Replication log levels for HA Central Managers


author: <rrati@redhat> - 1.0-9
changelog:
  - Allow all nodes administrative rights for themselves
  - Add shutdown delay for Amazon AMIs in EC2E routes


author: <rrati@redhat> - 1.0-3
changelog:
  - Corrected missed tool name changes in the README
  - Corrected missed dependencies for concurrency_limits and dynamic_provision
  - Fixed bug where concurrency_limits were not prompted for
  - Changed plugin locations to be relative to $(LIB)
  - Fixed configuration problem with dynamic provisioning.  SLOT_TYPE must use
    lowercase letters
  - Set default Negotiator Interval to 20 seconds
  - Condor reload is used to tell condor to re-read config files
  - Added TRANSFERER_LOG to ha_central_manager to avoid core dump
  - QMF_BROKER_PORT won't be listed in a config if it is not provided


author: Petr Machata <pmachata@redhat.com> 2.2.9-10
changelog:
  - Changed the placement of closing `while' of `do {} while' command
    under a -cdw option.  It's now cuddled up to the brace. (#67781)
  - Changed the indentation of cuddled `else': the brace is lined up
    under opening brace.  Let's see if people like it.  It looks less
    strange than before, but still it looks strange.


author: Petr Machata <pmachata@redhat.com> 2.2.9-9
changelog:
  - Silenting some warnings, voidifying some functions that were
    implicitly int but didn't actually return anything. (#114376)


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - Resolve bug #332281: remove obsolete translation
  	- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations from setroubleshoot-server
            package to this new independent package to allow easier updating
            of just the plugins


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-324
changelog:
  - More fixes for mcelog and MLS policy
  Resolves:#709370
  - Make cron jobs working in MLS
  Resolves:#769204
  - Add labeling for /var/cache/krb5rcache/


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-320
changelog:
  - Allow sssd to manage sssd lib lnk file
  Resolves:#754121
  - Allow postfix_smtpd to connect to milter


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-318
changelog:
  - Backport zarafa policy
  Resolves: #720462
  - Backport rhsmcertd policy
  - Allow rgmanager to run init script in initrc_t
  - Allow rsyslogd to read /usr/share/snmp/mibs/.index
  - Backport milter fixes


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-317
changelog:
  - Backport RHEL6 changes 
  	* Add dhcpc_exec_iptables boolean
  	* Add labeling for passwd.adjunct
  	* Allow domain transition from sysadm_t to passwd_t 
  	* Allow swat write to samba logs 
  	* Fixes for rgmanager
  	* Allow procmail to execute hostname
  	* MLS fixes


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-312
changelog:
  - Allow confined users to remove ssh home directory
  - Add support for iprinit, iprdump and iprupdate


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-306
changelog:
  - Add MLS fixes
  - Fix thunderbird.if interface
  - Allow pyzor to read pyzor config
  - Allow vsftpd kill
  - Allow named to update logs in chroot 
  - Fix labeling for iptabes files
  - Fix auth_use_nsswitch interface to call sssd_stream_connect interface
  - Allow domains to search default_t directories
  - Dontaudit sys_module for netutils_t


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-304
changelog:
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random.
  - Allow dnsmasq to read all tftp content
  - Allow openswan to enable coredump
  Resolves: #689960
  - Allow lvm setfscreate


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-301
changelog:
  - Make pyzor working with nfs home directories
  Resolves: #674689
  - Allow syslog setrlimit
  Resolves: #674452
  - Allow samba to create /etc/krb5.keytab
  Resolves: #672289
  - Allow samba to use utmp option
  Resolves: #667692
  - Allow clustat to bind on rpc ports
  Resolves: #651609


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-298
changelog:
  - Dontaudit iscsid sys_ptrace capability
  - Allow iscsid set the priority of kernel threads
  Resolves: #649691
  - Allow svirt sys_rawio and sys_admin capability using virt_use_sysfs boolean
  - Allow insmod send null signal to all domains
  - Dontaudit vbetool attemps to read or write to console
  - Allow consoletype to read and write init script unnamed pipes


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-291
changelog:
  - Fixes for rhcs policy
  - Allow winbind to connect to epmap port
  Resolves: #650141
  - Remove transition from unconfined to postfix-master


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-289
changelog:
  - Fixes for audisp-remote policy
  - Fix httpd_setrlimit boolean
  - Allow cups to manage printer spool lnk files
  Resolves: #646731


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-287
changelog:
  - Fixes for piranha-web policy
  Resolves: #584447
  - Make selinux-policy-base to provide version
  - Remove duplicate declaration for /etc/NetworkManager/dispatcher.d


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-286
changelog:
  - Add httpd_setrlimit boolean
  - Do not audit spamc attemps to read and write sendmail unix_stream_sockets
  Resolves: #637843


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-285
changelog:
  - Add home_bin_t type and allow procmail to execute it
  - Allow rpcd to set filesystem quotas of a filesystem with extended attributes
  Resolves: #621057
  - Add rpm_dontaudit_leaks code 
  - Make winbind_tmp_t as user tmp file
  Resolves: #598646
  - Fixes for rhcs policy


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-283
changelog:
  - Fix fptd_man page
  Resolves: #625498
  - Add support for newer HPLIP package
  Resolves: #626858
  - Allow pptp to read meminfo
  Resolves: #551380


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-281
changelog:
  - Add piranha policy
  - Fixes for rhcs policy
  Resolves: #588902
  - Add support for MSSQL
  Resolves: #570481
  - Fixes for BIND
  Resolves: #578187
  - Allow xm to read virt config link files
  Resolves: #579497
  - Fixes for ipsec policy
  Resolves: #591975
  - Allow postfix-smtpd sys_chroot capability
  Resolves: #592752
  - Allow rsyslogd to read random device
  Resolves: #593139
  - Fix label for /var/net-snmp directory
  - Fix label for oddjob
  - Allow apache to use mod_auth_pam via winbind
  Resolves: #579105


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-274
changelog:
  - Fix label for cluster ocf-shellfuncs
  - Add slapd_initrc_exec_t type
  - Fix fenced policy
  Resolves: #522158


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-273
changelog:
  - Allow samba domains to manage authentication cache
  Resolves: #507797
  - Add label for chrooted named log file
  Resolves: #562833


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-271
changelog:
  - Allow qemu to read from random number generator
  Resolves: #552763
  - Add label for /sbin/mke4fs
  Resolves: #532565
  - Add dhcpc ability to relabel net_conf_t files
  Resolves: #559355
  - Add iscsid fixes
  Resolves: #548599
  - Add new type for cups interface scripts
  Resolves: #550015


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-270
changelog:
  - Allow prelink to load and execute functions from shared libraries
  Resolves: #551664
  - Add label for /etc/xen directory
  Resolves: #554777


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-268
changelog:
  - Fix labels for postgrestgres test suite 
  Resolves: #551063
  - Fix multiple different specifications for /var/vdsm directory
  Resolves: #549492


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-267
changelog:
  - Add rgmanager fixes
  - Allow setkey to read sysadm tmp files 
  Resolves: #515687
  - Allow fsdaemon to write to SCSI generic device
  Resolves: #547387
  - Add attribute configfile and allow init script to read configfile
  Resolves: #546604


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-264
changelog:
  - Allow spamassassin to read /var/lib/spamassassin/ directory
  Resolves: #530750
  - Add rule to allow send/recv unlabeled packet to kernel.if
  Resolves: #530809
  - Add labeling for /sbin/e4fsck
  Resolves: #532565


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-263
changelog:
  - Fix strict policy to build with rgmanager policy
  - Fix policy to set the UNKNOWN=allow flag on Real Time Kernel
  Resolves: #531230


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-260
changelog:
  - Add clogd and other cluster patches from miroslav
  - Allow hplip_t to r/w cupsd_t socket
  Resolves: #483395
  - Allow ssh_keygen_t to write to /root/.ssh directory
  Resolves: #492519
  - Add Red Hat Cluster Policy
  Resolves: #503141
  Resolves: #522158
  - Allow sysadm_t to transition to setkey_t
  Resolves: #513447


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-258
changelog:
  - remove /usr/bin/env from poligygentool
  - Allow cyrus to communicate with snmp via stream socket
  Resolves: #523548


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-256
changelog:
  - Fix labeling on oracle libraries
  Resolves: #516780
  Resolves: #515491
  Resolves: #515687
  Resolves: #500400


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-254
changelog:
  - Add ipsec_match_default_spd back into userdomain
  - Allow sysadm_t to execute setkey and racoon executables
  - Dontaudit write of logwatch to etc_t
  - Allow samba as domain controller to change passwords
  Resolves: #475562


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-252
changelog:
  - Change mmap_low boolean to effect unconfined_t
  - Allow ipsec_t to read its init script
  Resolves: #511359


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-247
changelog:
  - Additional privs for privoxy, kpropd found in other dists
  - iscsi wants to look at the process state of all domains
  Resolves: #506057


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-246
changelog:
  - Allow semanage_t to transition to initrc_t in order to restart mcstrans
  Resolves: #460970
  - Additional rules for ipsec
  Resolves: #443646


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-242
changelog:
  - Allow all domains to search  bin_t and sbin_t
  - Allow qemu to write to /var/run/svirt/qemu
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-233
changelog:
  - Add rsync_client for Fedora Infrastructure
  - Allow spamd to exec itself when it gets a hup signal
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-232
changelog:
  - Allow spamd to exec itself when it gets a hup signal
  - Add Minimum policy for Ovirt to RHEL5
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-230
changelog:
  - Allow amanda to signal fsadm
  - Add context for /var/cache/cgit
  - Dontaudit apache leaked tcp_sockets
  - Fixes for cvs service
  -allow initrc_t and inetd_t siginh over their children
  - add privoxy_connect_any boolean
  - Allow smbd_t to signal nmbd_t
  Resolves: #498596


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-229
changelog:
  - Fix sepolgen error regression
  - Fix milter implementaion 
  - Additional rules required for update to automount
  Resolves: #497273


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-227
changelog:
  - Allow nfs to share removable devices
  - Allow ipsec additional privs for FIPS compliance
  Resolves: #497168


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-225
changelog:
  - add context for rpc.quoatad
  - Allow spamassassin to append to user_home_t for log files
    Resolves: #481387
  Resolves: #486187


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-222
changelog:
  - Allow spamc to append to user_home_t
  Resolves: #486187
  - Allow dbus to send message back to all services
  Resolves: #481628


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-217
changelog:
  - Allow saslauthd access to kerberos host rcache
  - Allow dbus to read all domains states
  Resolves: #489899


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-213
changelog:
  - Allow postfix_virtual_t to use private steam sock_file
  - Fix java shared library in IBM package
  Resolves: #486608


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-211
changelog:
  - Allow samba to edit apache files in home dir
  Resolves: #485111
  - Allow procmail to transition to spamassassin domains
  Resolves: #485107


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-208
changelog:
  - Allow samba to manage ALL files in home dir if boolean set
  - Fix typos in man pages
  Resolves: #477123


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-200
changelog:
  - Allow ldap to connect to sasl
  - avc denials during samba active directory join
  Resolves: #474852
  - samba - winbind - periodic avc denials
  Resolves: #474854
  - "Syntax error on line 1 ' [type=SQUOTE]" upgrading selinux-policy-devel
  Resolves: #474868
  - missing policy
  Resolves: #475273


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-199
changelog:
  - Allow apps that check password to write to faillog  
  audisp_remote needs to bind to audit ports
  Resolves: #474481
  - Allow xm to stream connect to virt
  Resolves: #472903


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-197
changelog:
  - Dontaudit search of /root for init daemons
  - Fixes for ricci
  - Allow xm to manage virt_image_t
  Resolves: #472903


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-188
changelog:
  - Fixes for Fedora Infrastructure
  - Make pegasus an unconfined_domain 
  - Add pki policy
  Resolves: #440151


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-182
changelog:
  - Change apache httpd_use_nfs to mean managing nfs shares
  - From Fedora Infrastructure
  Resolves: #469943


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-179
changelog:
  - Allow restorecon to read locale_t
  Resolves: #469402
  - Allow hal/pm-utils to look at /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-164
changelog:
  - Fix labeling on dhclient-lease files
  - Allow portmap_helper to bind to rpc ports
  Resolves: #451805


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-162
changelog:
  - Allow domains to read etc_runtime for access to modified denyhosts
  - Allow dhcpc_t to list dbusd_etc_t directory
  Resolves: #459888


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-155
changelog:
  - Complete backport of logging/audit policy
  - Allow pegasus to look at kernel xen information
  Resolves: #461624


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-154
changelog:
  - Allow portmak to read kernel state 
  - Allow ricci to figure out if cluster services are running
  Resolve: #461769


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-149
changelog:
  - Fix file context to install on strict/mls policy
  - Allow hal to modify input device
  Resolves: #442623


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-142
changelog:
  - add mmap_low boolean
  - Upgrade to latest networkmanager policy
  - Add kpropd policy
  - update nscd policy
  - Update ntp policy
  - Update openvpn policy
  - Fix ppp_read_read interface
  - fix portmapper to allow it to connect to all <1024 ports
  - Fix ricci_modstorage to be able to start clvmd
  Resolves: #442028
  Resolves: #447014
  Resolves: #455784


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-138
changelog:
  - Allow pam_console to setattr on cpu_device_t
  Resolves: #447403
  - selinux-policy support for virtio block devices
  Resolves: #446229


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-134
changelog:
  - Allow kerberos daemons to create log files
  - Resolves: 442981
  - Fix label on /usr/libexec/hal_lpadmin
  Resolves: #442951


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-124
changelog:
  - Fix deletion of dovecot files in strict/mls policy Resolves 434843
  - Allow hal to setsched on kernel
  Resolves: #435197


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-117
changelog:
  - Allow mailman to signal itself
  Resolves: #430639
  - Allow iscsid to setrlimit 
  Resolves: #430669
  - Additional fix to allow setroubleshoot to talk to dbus
  Resolves: #224351


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-114
changelog:
  - Allow restorecond to read homedir sym links
  - Allow mailservers/postfix to use nfs file systems
  Resolves: #245605


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-108
changelog:
  - Allow kudzu to domtrans to unconfined_t
  - Allow audit to send mail
  - Allow mailman and postfix to interact
  Resolves: #425806:


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-107
changelog:
  - Remove badly labeled pegasus directory
  - Allow postfix to work with NFS homedirs
  - Allow iptables to connect to ldap
  - Allow apache scripts to run nice
  - Allow ntpd to use /dev/ptmx for setting the time
  - Allow automount to read /dev/random
  - Allow samba to use kerberos
  - Allow squid to access to port 2048
  - Allow amanda to talk to ldap
  - Allow yppasswd to run pwupdate
  - Allow automount to mount squashfs
  - Add new nscd permissions
  - 
  Resolves: #245605
  Resolves: #248838
  Resolves: #251841
  Resolves: #253999
  Resolves: #316011
  Resolves: #326631
  Resolves: #350511
  Resolves: #366461
  Resolves: #390771
  Resolves: #247814
  Resolves: #238347
  Resolves: #351051
  Resolves: #254199
  Resolves: #288771
  Resolves: #294671
  Resolves: #317281
  Resolves: #340311
  Resolves: #340321
  Resolves: #386481
  Resolves: #327121
  Resolves: #416541
  Resolves: #416561
  Resolves: #414891

  Resolves: 383231
  Resolves: 254197
  Resolves: 266341
  Resolves: 248835
  Resolves: 326721
  Resolves: 319791
  Resolves: 359701
  Resolves: 374431
  Resolves: 403241
  Resolves: 251712
  Resolves: 283971
  Resolves: 284361
  Resolves: 300391
  Resolves: 339651
  Resolves: 383191
  Resolves: 279261


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-106.1
changelog:
  - dontaudit consoletype talking to hotplug
  - allow hotplug to signal ifconfig
  Resolves: 328211
  Resolves: 328251


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-97
changelog:
  - Fixup clmvd to allow creation of fixed devices
  - Fixes telnet/rlogin using replay cache
  Resolves: #284831


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-89
changelog:
  - Allow postfix to read master proc info
  - Allow unix_update to talk to nsswitch
  - Allow dmidecode to search sysfs_t
  Resolves: #263141


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-88
changelog:
  - Fix relabel of /var/run dir
  - Allow snmp to read any directory
  - Allow cimserver to create pegasus_data directories
  Resolves: #213809
  - Change to context on /var/run/libvirt
  Resolves: #249069


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-84
changelog:
  - Allow dovecot read of /tmp files for kerberos
  - Fix apache policy for virtual hosting
  - Allow Xen to run on nfs
  Resolves: #253744


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-76
changelog:
  - Allow xenconsole to manage xen log files
  - add mmap_zero for new kernel
  - Fixes for RHEL5
  Resolves:#244690


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-74
changelog:
  - Fix location of ypxfr on 64 bit platforms
  - Fixes for nagios, postfix, procmail, saslauthd, arpwatch, avahi, dovecot
  Resolves: #241621


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-71
changelog:
  - Allow netlable to read etc and work with init terminals
  - Change file context to have all of policy at SystemLow
  Resolves: #239079


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-67
changelog:
  - Allow logging into the console on s390
  Resolves: #237703
  - Additional avc's caused by change in unix_update
  Resolves: #236316


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-61
changelog:
  - Fix admin_domain_template to allow custom user types
  Resolves: #237133
  -Allow lvm to create/delete generic device_t direcories/files under /dev 
  Resolves: #237128


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-52
changelog:
  - Allow netutils to read sysfs
  Resolves: #235357
  - Allow samba to work as a PDC
  Resolves: #235360
  - Allow ypserv to bind to ports 600-1024
  Resolves: #235363
  - Fix kudzu to be able to telinit
  Resolves: #225443


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-50
changelog:
  - More work to allow kudzu to setup init correctly so getty will work
  Resolves: #225443
  - Allow pegasus to execute ifconfig
  Resolves: #227485
  - Allow Aide to look at lnk_files and other fixes
  Resolves: #234885
  - querying cups jobs with sysadm_r needs override mls restrictions
  Resolves: #234889


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-49
changelog:
  - Change init_daemon_domain(netlabel_mgmt_t,netlabel_mgmt_exec_t)
  - to init_system_domain(netlabel_mgmt_t,netlabel_mgmt_exec_t)
  Resolves: #233313


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-47
changelog:
  - Allow sysadm_r to transition to netlabel_mgmt
  Resolves: #233313
  - Allow kudzu to setup init correctly so getty will work
  Resolves: #225443


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-42
changelog:
  - Dontaudit restorecon writing to cron pipes
  - Fix filespec for /dev/ub*
  - Allow ftp and telnet to use kerberos key files
  - Allow syslog to use alternate ports
  - Allow radious to look at the routing table
  - Allow pyzor to getattr on autofs


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-39
changelog:
  - Add bugzilla policy
  - Allow procmail to create tmp files so spamassisin will work
  - Some fixes for pyzor


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-36
changelog:
  - Allow xen to work properly on ia64, needs to be able to read dosfs_t
  Resolves: #217362
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: FC6-227002
  - Allow spamd to connect to smtp port
  Resolves: FC6-227184
  - Fixes to make ypxfr work
  Resolves: FC6-227237
  - Allow audit fsetsid capability
  Resolves: FC6-227423
  - Allow syslog (syslog-ng) to tcp_connect to other syslog servers
  Resolves: FC6-218978


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-31
changelog:
  - Fix clvmd policy
  - Fix squid cgi script to run with correct context.
  - Maintain proper context on /etc/lvm/.cache file
  - Lots of fixes for ricci and friends
  - mount.nfs needs sys_resource
  - Change gstreamer context for only i386
  - Fix libXcomp file_context
  Resolves: #224441


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-28
changelog:
  - Allow logwatch to use ypbind
  - Allow system_crond_t to create cron_var_run_t files (prelink files)
  - dontaudit postfix-smtp reading /boot, fix file context on lmtp
  Resolves: #215722


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-27
changelog:
  - Fix senmail avc trying to read /root
  - More fixes for ssh transitions to userspace
  Resolves: #221608
  Resolves: #222548


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-26
changelog:
  - automounter needs setuid
  - prelink needs to be able to rw_dir_perms on usr_t
  - pcscd_t needs to be able to search sysfs_t
  - Lots of fixes to run sshd under xinetd
  Resolves: #219999


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-24
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow netlabel packets to flow.
  Resolves: #210426


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-23
changelog:
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
  	dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
  	* httpd_can_network_relay
  	* httpd_can_network_connect_db


author: Mark McLoughlin <markmc@redhat.com> 2.12.1-3
changelog:
  - Add patch to set the size of the IO thread stack to 256k in
    order to mitigate the apparent 10M jump in GNOME processes
    memory usage (#157297)


author: Mark McLoughlin <markmc@redhat.com> 2.10.0-4
changelog:
  - Backport alignment fix for 64 bit from 0.10.3 - fixes Nautilus crashing
    on startup (#126181). Thanks to Lamont R. Peterson <lamont@gurulabs.com>


author: Havoc Pennington <hp@redhat.com>
changelog:
  - build system somehow built against libglib-1.3.so.11
    even though pkg-config found 1.3.12? wtf?
    trying again


author: Havoc Pennington <hp@redhat.com>
changelog:
  - renaming more things
  - remove smp flags, doesn't work atm
  - fix .pc file, trying to get bonobo-activation to build


author: Pablo Saratxaga <srtxg@chanae.alphanet.ch>
changelog:
  - improved %files section, and added use of %{prefix} and install-info
    (well,... no. The info file has not dir info inside, commented out)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - make sure librom1394 is linked to libraw1394 and also
    libavc1394 is linked to librom1394 (also bz 156938)


author: Colin Walters <walters@redhat.com> 0.4.1-5
changelog:
  - Rerun autotools in attempt to get package to link to -lm
  - Add patch libavc1394-0.4.1-kill-configure-insanity.patch


author: Warren Togami <wtogami@redhat.com> 0.4.1-1
changelog:
  - upgrade to 0.4.1
  - Spec cleanups
  - License -> Copyright
  - Remove INSTALL; Add News, ChangeLog
  - Applications/Multimedia -> System Environment/Libraries


author: Deepak Bhole <dbhole@redhat.com> - 0:1.0-4jpp.1
changelog:
  - Added missing requirements.
  - Remove jaxen requirement, since we don't have it in fc yet.
  - Merge with fc spec.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-0.b7.6jpp
changelog:
  - versioned dir for javadoc
  - requires xalan-j2 >= 2.2.0
  - no dependencies for javadoc package
  - stricter dependency for demo package
  - section macro


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-0.b7.1mdk
changelog:
  - Requires and BuildRequires xalan-j2
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - added demo package


author: rtb <rtb@mail.cern.ch> 1.4.12-2.cern 27.05.2010
changelog:
  - dcache checker gives false alarms for controlled error conditions
  - p_lockless_validate line badly placed after including recommendations from reviewer


author: Jaroslaw.Polok@cern.ch
changelog:
  - changed packaging of modules again: to followup Fedora Core
    (draft) rules and allow yum/apt/up2date to handle these


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - obey CFLAGS set at configure-time on i386/x86_64 linux
  - openafs-krb5: look in $krb5_prefix/lib64 for Kerberos libraries if they are
    not found in $krb5_prefix/lib
  - build the modules for PAM on x86_64
  - when checking for res_search, try to link with it instead of checking for it
    in libraries, in case it's a macro or redefined by a macro
  - use %{ix86} instead of %{all_x86} where appropriate
  - install AFS libraries into %{_libdir} instead of %{_prefix}/lib


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-4
changelog:
  - Include my -dump_size patch to close
    bz#206129: Dump output size determined incorrectly
  - Clean up the spec file, following some suggestions in
    bz#185659: amanda 2.5.0
  - Use a tarball without the problematic contrib/sst directory.
  - Include my new_gnutar (based on a patch by Orion Poplawski
    <orion@cora.nwra.com>) to work around changed incremental file format
    in newer (>1.15.1) versions of gnutar.
  - include my -wildcards patch to turn on wildcards with new versions of tar.


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-3
changelog:
  - move libamclient-*.so to the base rpm, so that multilib support works.
    This fixes
    bz#205202 File conflicts


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-2
changelog:
  - New upstream version
  - Make the BuildRequires on /usr/bin/Mail rather than mailx, because we
    don't really care where the Mail command comes from.
  - include the amcheck_badtape patch by Paul Bijnens
    <paul.bijnens@xplanation.com> to fix a problem where amcheck doesn't
    realize the wrong tape is in the drive.
  - include the error_msg patch from Jean-Louis Martineau <martineau@zmanda.com>
    to fix a double-free problem
  - include the restore patch from Jean-Louis Martineau <martineau@zmanda.com>
    to fix an error in amrestore
  - include a slightly modified form of the big_holding_disk patch from
    Andrej Filipcic <andrej.filipcic@ijs.si> to fix a problem with holding
    disks bigger than 4tb


author: Jay Fenlason <fenlason@redhat.com> 2.5.0-2
changelog:
  - New upstream release: 2.5.0, with new features
  - Do not include our own amanda.conf anymore, use the one from the
    tarball.
  - Remove the static libraries.
  - Update the -pie patch
  - Turn on the new -with-ssh-security option.
  - Change the mode of ~amanda/.amandahosts to 600, since 2.5.0 requires
    it.
  - actually use the defconfig macro it this spec file.
  - Change the name of the index server to "amandahost" from localhost.
    Users should ensure that "amandahost.their-domain" points to their
    Amanda server.
  - Change amandahosts likewise.
  - Add dependency on /usr/bin/Mail
  - Ensure unversioned .so files are only in the -devel rpm.
  - Remove DUMPER_DIR and the files in it, as nothing seems to actually
    use them.
  - Include the -overflow patch from Jean-Louis Martineau
    <martineau@zmanda.com>


author: Jay Fenlason <fenlason@redhat.com> 2.4.5p1-3
changelog:
  - Fix spec file to use %{_localstatedir} instead of hardcoding /var/lib
  - Add amanda_user and amanda_group defines, to make changing the username
    easier.
  - Add a BuildRequires on /usr/bin/Mail


author: Jay Fenlason <fenlason@redhat.com> 2.4.5-2
changelog:
  - New upstream release.  This obsoletes the -bug144052 patch.
  - Reorg this spec file slightly to allow someone to specify
    index server, tape server and default configuration when
    rebuilding the rpms via something like
    'rpmbuild -ba --define "indexserver foo.fqdn.com" amanda.spec'
    This change suggested by Matt Hyclak <hyclak@math.ohiou.edu>.


author: Jay Fenlason <fenlason@redhat.com> 2.4.4p2-1
changelog:
  - New upstream version, includes the -sigchld and -client-utils
    patches.  Also includes a new chg-disk changer script and a new
    amqde "quick-and-dirty estimate" program (called from sendsize--not
    a user command.


author: Jay Fenlason <fenlason@redhat.com> 2.4.3-3
changelog:
  - Removed call to signal(SIGCHLD, SIG_IGN) which prevents wait...()
    from working on newer Red Hat systems.  This fixes bug #84092.


author: Jay Fenlason <fenlason@redhat.com> 2.4.3-2
changelog:
  - Add spec file entry for /usr/lib/amanda so owner/group set
    correctly  Fixes bugs 74025 and 73379.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 2.4.2p2 - fixes problems with amrecover (#26567)
  - made config files noreplace
  - don't build on IA64 right now, amanda doesn't like
    the dump there: It segfaults.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use %{version} in source URL, and thus actually use 
    2.4.2p1 instead of 2.4.2 (doh! # 28759)
  - add patch to handle bogus /dev/root entries (#28759)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't have "chunksize -1" as the default, as it's no longer
    supported
  - make it uid amanda, with home /var/lib/amada
    so programs can actually access it (#20510)
  - make .amandahosts a config file (#18322)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - build with shared libraries.
  - add amanda-devel package to contain static libraries.
  - update to 2.4.2-19991216-beta1 (#16818).
  - sort out client-server file confusions (#17232).
  - amandaidx-xinetd should have "wait = no" (#17551).
  - /var/lib/amanda needs operator.disk ownership (17913).
  - /etc/xinetd.d/amanda added to the amanda-server package (#18112).
  - ignore socket error message (#18322).


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - only do reload of xinetd if xinetd is running (#16653)
  - don't show output of reload command to STDOUT (#16653)
  - don't use /usr/sbin/tcpd in amidx, xinetd is linked
    with tcp_wrappers
  - prereq initscripts (fixes #14572 and duplicates)


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed files/dirs ending up in the wrong packages.
  - last time it wasn't built with dump (doh!), this time it is. Now has a
  	BuildRequires for dump.


author: Tim Powers <timp@redhat.com>
changelog:
  - make sure the man pages are gzipped in each subpackage, overriding the build
  	system spec_install_post macro.
  - using mega spec file changes from Marc Merlin <merlin_bts@valinux.com> since
  	the package we were shipping in the past had some major issues (not in
  	Marc's words ;)
  - using Marc's added README and modified config files.
  - adapted patches written by Alexandre Oliva <oliva@dcc.unicamp.br> from Marc
  	Merlin's package so that the patch matches the source version (the patches
  	are the glibc2.1 and glibc2.2 patches)


author: Tim Powers <timp@redhat.com>
changelog:
  - fix so configure doesn't crap out (libtoolize --force)
  - gzip man pages, strip binaries
  - rebuilt for 6.2


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - updated to 2.4.0b6, fixes security hole among other things
    (as well as finally got the glibc patch in the main source.)


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.5
changelog:
  - Security: Fix Tunnel-Password zero-length attributes flaw (bug #521912)
    Resolves: CVE-2009-3111
  - rebase a couple of old patches (freeradius-0.9.0-com_err.patch,
    freeradius-1.0.0-samba3.patch) so they apply with fuzz=0


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.4
changelog:
  - Resolves: bug #287381 rlm_ldap could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow
    for some reason the freeradius-1.1.3-ldap.patch incorrectly changed
    ldap_int_tls_config() to ldap_set_option(), this reverts the incorrect patch


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.3
changelog:
  - Resolves: bug #447669 freeradius cannot be queried using net-snmp
  - force all files in /etc/raddb to be 640 root:radiusd, otherwise after dropping
    privileges the radiusd daemon cannot re-read it's config files on SIGHUP.
  - add group creation for radiusd
  - Resolves: bug #249308 freeradius (prior to 1.1.4) won't work with vista clients
  - Resolves: bug #440626 bad dist macro


author: Thomas Woerner <twoerner@redhat.com> 1.1.3-1.1
changelog:
  - fixed ldap code to not use internals, added LDAP_DEPRECATED compile time flag
    Resolves: rhbz#217688


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - new version 1.1.1
  - fixed incorrect rlm_sql globbing (#189095)
    Thanks to Yanko Kaneti for the fix.
  - fixed chown syntax in post script (#182777)
  - dropped gcc34, libdir and realloc-return patch
  - spec file cleanup with additional libtool build fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-2
changelog:
  - added missing build requires for libtool-ltdl-devel (#160877)
  - modified file list to get a report for missing plugins


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Jiri Skala <jskala@redhat.com> 7:2.6.STABLE21-4
changelog:
  - Resolves: #521926 - squid 'stop after stop' is not LSB compliant
  - Resolves: #496170 - Add arp filter option
  - Resolves: #516245 - negotiate support not enabled in squid
  - Resolves: #538738 - Squid accelerator mode works only if port 80 is opened
  - Resolves: #470843 - Squid 'error_map' does not work when used 'Accep-Encoding: gzip'


author: Jiri Skala <jskala@redhat.com> 7:2.6.STABLE21-1
changelog:
  - Resolves: #297521 update to the latest upstream STABLE21
  - Resolves: #245304 changed init script to be LSB compliant
  - Resolves: #250572 using refresh_stale_hit don't cause "clock going backwards"
  - Resolves: #436135 ported init script bug fixign of RHEL-4 to RHEL-5
  - Resolves: #442108 added define -D_FORTIFY_SOURCE=2
  - Resolves: #454255 fixed -g parameter handling of unix_group helper
  - Resolves: #448086 changed security context of /usr/local/squid to squid ownership:w
  - Resolves: #451923 solved repeated SIGABRTs


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE6-3
changelog:
  - added upstream fix for #223439 - Responses without Expires get 
    assigned one an hour in the future
  - Resolves: rhbz#223439


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE6-2
changelog:
  - added upstream fixes for CVE-2007-0247 - Squid crashes 
    when receiving certain FTP listings
  - Resolves: rhbz#222884


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add -j4 to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use /usr/lib
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38.3:.1
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2697, bug #721001).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38.3
changelog:
  - Better margin defaults (bug #244348).
  - Ship a defaultspooler file to avoid the need for spooler
    auto-detection (bug #454684).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38
changelog:
  - Change a2ps requirement to mpage.
  - Make CUPS driver work with drivers containing '-' in their names
    (bug #201398).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-32
changelog:
  - Fix foomatic-cleanupdrivers.
  - Updated db-engine to 3.0-20060117.
  - Handle PPDs with default option values of '0'.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-29
changelog:
  - Updated db-engine to 3.0-20051209.
  - Updated db-hpijs to 1.5-20051209.
  - Updated filters to 3.0-20051209.  No longer need rip-cvs patch.
  - Updated db to 3.0-20051209.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-28
changelog:
  - Remove explicit perl module package dependencies.  These should be
    picked up by the RPM during the build process automatically anyway.
    Fixes bug #167997.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-25
changelog:
  - Add IEEE 1284 ID for HP LaserJet 4200 (bug #166638).
  - Add IEEE 1284 ID for HP LaserJet 5000 (bug #167154).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-24
changelog:
  - Updated db to 3.0-20050804.
  - No longer need hplj5 patch.
  - Conflicts with system-config-printer before the parser bug was fixed.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Add IEEE 1284 ID for Epson Stylus Photo 915 (bug #160030).
  - Add IEEE 1284 ID for Ricoh Aficio 2228C PS (bug #160036).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix Postscript driver (bug #151645).
  - Add IEEE 1284 ID for HP DeskJet 5150 (bug #154518).
  - Add IEEE 1284 ID for HP LaserJet 2420 (bug #114191).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Corrected IEEE 1284 information for HP DeskJet 6540 (bug #147288).
  - Added IEEE 1284 information for Epson Stylus C82 (bug #147230).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Added IEEE 1284 information for Okidata Okipage 6ex (bug #143964).
  - Added IEEE 1284 information for Epson Stylus Photo R300 (bug #143939).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-10
changelog:
  - Added IEEE 1284 information for HP-Color_Inkjet_Printer_CP1700 (bug #141594).
  - Added IEEE 1284 information for Samsung-ML-1710 (bug #141163).
  - Added IEEE 1284 information for HP-OfficeJet_G95 (bug #141057).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-9
changelog:
  - Updated db to 20041124.
  - Updated hpijs-db to 1.5-20041124.
  - No longer need HP DJ 6122 patch.
  - No longer need ieee1284 patch.
  - Updated Omni-printers to 0.9.2.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-6
changelog:
  - Add autodetect information for HP LaserJet 8150 (bug #139683).
  - Add autodetect information for Epson Stylus Color 777 (bug #139629).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-5
changelog:
  - Ship data as non-executable (bug #139271).
  - Corrected autodetect information for HP Business InkJet 1100 (bug #139258).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-4
changelog:
  - Add autodetect information for HP Business InkJet 1100 (bug #139258).
  - Add autodetect information for Epson Stylus Photo 790 (bug #139266).
  - Add autodetect information for HP DJ 3820 (bug #139271).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-2
changelog:
  - Use gimp-print driver for HP 2000C (bug #133647).
  - Add autodetect information for Lexmark Z52 (bug #135178).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-1
changelog:
  - Updated filters to 3.0.2.
  - Updated db-engine to 3.0.2.
  - No longer need Omni PageSize patch or lvalue patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.1-1
changelog:
  - Upgrade db to 20040219.
  - Upgrade hpijs to 1.5-20040219.
  - Upgrade engine to 3.0.1.
  - Upgrade filters to 3.0.1.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-23
changelog:
  - Fix up HP Color Inkjet CP1700 support.
  - Remove PrintoutMode option from gimp-print driver to avoid breaking it.
  - Update filters to 3.0.1rc3.
  - Update engine to 3.0.1rc2
  - No long need symlink patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-21
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Revert Omni update temporarily.
  - Downgrade engine to 20031217 to stick to the stable branch.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-19
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - No longer need symlink patch.
  - Updated fontpath patch.
  - Updated engine to 20040112.
  - Updated db to 20040112.
  - Updated gimp-print data to 4.2.6.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-18
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Explicitly state conflict with hpijs < 1.5.
  - Make foomatic-ppdfile accept '-t type' like foomatic-datafile used to.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-14
changelog:
  - Updated db to 20031217.
  - Updated engine to 20031217.
  - Updated hpijs to 1.5-20031217.
  - Use relative symlinks.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-12
changelog:
  - Undo over-zealous percent escaping in PostScript.xml
  - Build requires libxml2-devel (bug #110589).
  - Use relative, not absolute, symlink for CUPS filter.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-10
changelog:
  - Updated db to 20031105.
  - Drop filters path patch.
  - Updated fontpath patch, both libdir patches.
  - Updated engine and filters to 3.0-20031105.
  - Updated hpijs db to 1.4-1.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-5
changelog:
  - Add some Dell printers.
  - Updated foomatic-db to 20030603.
  - Updated missing UPP list for ghostscript 7.07.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-0.beta2.1
changelog:
  - 3.0.0beta2.
  - Updated path patch.
  - No longer need FOOMATIC_LIBDIR, generic PS, ids, postscript-duplex,
    hpijs13, psc2210, duplex184 patches.
  - Add hpijs support back in.
  - Fix up references to old printer IDs.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-11
changelog:
  - Add autodetect info for HP DeskJet 656C.  It doesn't really do
    IEEE 1284 IDs, but since it's a USB device we can figure out its
    manufacturer and model anyway.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-1
changelog:
  - 2.0.2.
  - No longer need 67973, 970c patches.
  - Remove cups-drivers-* packages (no longer needed).
  - Remove files not shipped.  Ship filter.conf.
  - Conditionally restart cups.
  - Use libdir.
  - Don't put things in site_perl; use vendor_perl instead (bug #73528).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.3
changelog:
  - Remove explicit perl-Storable dependency; it should be perl(Storable),
    and that is picked up automatically.


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.2
changelog:
  - Fix release number.
  - Drop gen-ppds from the file manifest---use foomatic-compiledb instead
    (bug #63622).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.0.1
changelog:
  - Update to CVS.
  - Updated requirements.
  - Updated path and libdir patches.
  - Drop hpijs 1.0.2 patch.
  - foomatic-datafile has moved to %{_bindir}.
  - Update gimp-print data to 4.2.1.
  - Update Omni printer data to 0.6.1.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020130.1
changelog:
  - Update to CVS.
  - No longer need the cachedir patch.
  - Fix config file path.
  - Look in /usr/local/bin last, not first, in lpdomatic (bug #57915).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020129.1
changelog:
  - Update to CVS.
  - Patches no longer needed: prepend, fd3.
  - Use RPM_OPT_FLAGS.
  - Allow non-root users to use foomatic-datafile (bug #58956).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020124.1
changelog:
  - Update to CVS.
  - Updated Omni printers to those in Omni 0.5.1.
  - Updated patches: prepend, fd3.
  - Patches no longer needed: utf8, lpdomatic.
  - Added gimp-print (formerly stp) foomatic db info, and removed the old
    stp.xml file.
  - Conflict with ghostscript if it doesn't have gimp-print-4.2.0 yet.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20011218.2
changelog:
  - REALLY fix PCL fixup code (bug #55909, others).
  - PreReq fileutils, initscripts (bug #56984).
  - Fix prepends in lpdomatic (bug #57371).
  - Run foomatic-cleanupdrivers during install, to remove driver entries
    with no command line.
  - Put lpdomatic in /usr/sbin again.
  - Fix foomatic-gswrapper's file descriptor manipulations (bug #56871).


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.2
changelog:
  - fix the rest of the quoting issues with foomatic-combo-xml with the patch
  - foomatic-1.1-20011217-quotes.patch. This has been sent upstream.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.1
changelog:
  - respin to pull in latest foomatic database, fixes:
  -	properly use the cache in relation to foomatic-combo-xml's output
  -	fix _some_ of the quoting issues with calling foomatic-combo-xml


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011205.1
changelog:
  - respin to pull in latest foomatic database, fixes:
  -	droping half of a large job
  -	-Mutf8 added to the upstream filters
  -	miscelaneous printer db updates


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.5
changelog:
  - changed the patch to use the -Mutf8 command line option,
  - and to restart the printserver, after rebuilding the settings.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.4
changelog:
  - grumble. Some drivers use inline perl scripts, and need the 'use utf8;'
  - pragma. Without it, they break on _some_ of their options.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010905.1
changelog:
  - upgraded to latest foomatic, we now have fast overview generation!
  - this means that there is no prebuilt overview file.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010828.1
changelog:
  - WOW! The latest foomatic uses Till Kamppeter's C based combo compiler.
  - It is now fast enough that there is no real benifit to precompiling.
  - NOTE: this forces the package to stop being noarched.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010825.1
changelog:
  - did a fresh database pull, which contains the old japanese printers as well.
  - removed japanese hack.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010717mdk
changelog:
  - Added job listing/removal/manipulation and queue control to
    foomatic-printjob
  - Support for printing multiple copies with PDQ


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010714mdk
changelog:
  - Included the cupsomatic filter script
  - When a queue is set up, default options can be set now
  - Help messages of foomatic-configure and foomatic-printjob cleaned up.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010713mdk
changelog:
  - Many bugfixes in "foomatic-printjob".
  - "foomatic-configure" adds the Foomatic config file directory automatically
    to the search paths of PDQ.
  - Printing a help page under PDQ was broken.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010711mdk
changelog:
  - initial release.
  - Deleted the obsolete drivers "stp", "cZ11", and "hpdj".
  - Patch applied which flushes the memory cache regularly, otherwise
    foomatic-configure would hang when the Foomatic data of GIMP-Print is
    installed.


author: Than Ngo <than@redhat.com> 3.2-16.p1.1
changelog:
  - fix build problem with gcc-3.4
  - fix typo bug in isdnlog, bug #120568
  - fix capiplugin for working with pppd 2.4.2, bug #125723


author: Than Ngo <than@redhat.com> 3.2-10.p1
changelog:
  - fix build problem with new libpcap

  -* Wed Jan 14 2004 Than Ngo <than@redhat.com> 3.2-9.p1
  - fixed permission problem


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.1-50
changelog:
  - new upstream, needed to switch isdnlog to EUR currency for contries that
    have it
  - fix installation of pppcapiplugin man page
  - don't build against 2.4.5 kernel headers, they're not compatible with
    2.4.17.


author: Than Ngo <than@redhat.com> 3.1-48
changelog:
  - new upstream
  - remove some unused patch files
  - move pppcapiplugin to /usr/lib/pppd, The plugin option now looks in here
  - devel sub package
  - buildreqquires: linuxdoc-tools


author: Than Ngo <than@redhat.com> 3.1-47
changelog:
  - fixed symlinks bugs (bug #55306)
  - fix a bug in converting of old isdn configuration (bug #55083)
  - some hacks for ASUS COM ISDNLink ISA PnP


author: Than Ngo <than@redhat.com>
changelog:
  - make isdnctrl executable by normal users (Bug #30803)
  - fix a minor bug in triggerpostun
  - fix rebuild problem in beehive if kernel-source is missed


author: Than Ngo <than@redhat.com>
changelog:
  - split package into isdn4k-utils, isdn4k-utils-vboxgetty, xisdnload
  - convert old isdn configuration format into new format
  - add startup script for loading module and starting isdnlog


author: Than Ngo <than@redhat.de>
changelog:
  - add more documents
  - and missing config files to isdnlog
  - some fixes in vbox, isdnlog, vboxgetty
  - mark ioptions as %config(noreplace)
  - add pppdcapiplugin
  - add missing /sbin/ldconfig in %post and %postun
  - fix to build on ia64


author: Than Ngo <than@redhat.de>
changelog:
  - rebuilt for 7.0
  - FHS fixes
  - fix dependencies problem with new tcltk
  - fix to built with kernel-2.4


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix compilation with kernel 2.4.x
  - rebuild with new ncurses and Tcl
  - enable building of eurofile and divertctl stuff


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - use relative instead of absolute link in postinstall script
  - use only one patch-file for the config file
  - change from 0700 to 0755 perms
  - change Makefiles instead of moving things around in the spec file
  - include the manpages of the X11 progs only in the xisdnload rpm


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.2-1
changelog:
  - 1.0.2
  - Total overhaul of build precedure
  - Add many small helper programs added to 1.0.2
  - drop old patches


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-5
changelog:
  - Don't segfault when infile is a directory and "-f" is used (#56623)
  - Automake is evil. Add workaround


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging to build on solaris2.5.1.
  - remove config.cache from autoconf patch.
  - sparc: use %configure, but not the m4 macros.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - autoconfed and libtoolized package 
  - fixed Copyright (it's BSD, not GPL)
  - dumped bzless (less works fine with bz2-files)
  - rewrote build and install parts
  - separated main package and devel package


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - force compilation with egcs to avoid gcc optimization bug (thank God 
    we haven't been beaten by it)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-30
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729881)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-29
changelog:
  - dhclient.conf(5), dhclient(8) mention that interface-mtu option
    is also requested by default (RHBZ #694264)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-28
changelog:
  - Better fix for CVE-2011-0997: making domain-name check more lenient (RHBZ #690577)
  - dhclient requests interface-mtu option by default (RHBZ #694264)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-27
changelog:
  - dhclient.conf(5) fix (RHBZ #585855)
  - Make dhcpd init script LSB compliant (RHBZ #610128)
  - Use PID for seeding the random number generator in dhclient (RHBZ #623953)
  - Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay (RHBZ #624965)
  - 'lease imbalance' messages are not logged unless rebalance
    was actually attempted (RHBZ #661939)
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (RHBZ #685048)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-24
changelog:
  - A partner-down failover server no longer emits 'peer holds all free leases'
    if it is able to newly-allocate one of the peer's leases. (RHBZ #610219)
  - The server's "by client-id" and "by hardware address" hash table lists
    are now sorted according to the preference to re-allocate that lease to
    returning clients.  This should eliminate pool starvation problems
    arising when "INIT" clients were given new leases rather than presently
    active ones. (RHBZ #615995)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23
changelog:
  - fix dhclient to not renew it's lease too often when gets very short lease from server (#498658)
  - fix dhclient-script to not restart ntpd when not necessary (#532136)
  - fix dhcrelay initscript to restart dhcrelay properly (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-22
changelog:
  - Memory leak in the load_balance_mine() function is fixed. This would leak ~20-30 octets
    per DHCPDISCOVER packet while failover was in use and in normal state.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-21
changelog:
  - Display usage if init scripts get 'try-restart' or 'reload' args,
    set exit code to 3
    Resolves: rhbz#491868


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-20
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter
    Resolves: rhbz#441524


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-19
changelog:
  - Do not restart ntpd service unless necessary
    Resolves: rhbz#450301
  - Carry over relay agent options when client enters INIT or REBIND
    Resolves: rhbz#450545
  - Honor PEERNIS and PEERNTP variables completely in dhclient-script
    Resolves: rhbz#471543


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-14
changelog:
  - Display dhcpd error messages for 'service dhcpd configtest'
    Resolves: rhbz#447003
  - Parse dates and times correctly in lease files on 64-bit systems
    Resolves: rhbz#448615


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-12
changelog:
  - Avoid printing two OK/FAILURE messages when the stop() function runs
    in the dhcpd and dhcrelay init scripts
    Resolves: rhbz#439800


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Updated dhcpd init script to conform to script guidelines
    Resolves: rhbz#237978
  - Updated dhcrelay init script to conform to script guidelines
    Resolves: rhbz#237980


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Updated Xen partial checksums patch using PACKET_AUXDATA
  - Resolves: rhbz#221964
  - Related: rhbz#219681


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Skip checksum check on local packets so dhcpd runs correctly in Xen
    guests
  - Resolves: rhbz#221964
  - Related: rhbz#219681


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-1
changelog:
  - Rebase dhcp package (#218083)
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663
  - Build the MD5 functions we link against.
  - Set permission of libdhcp4client.so.1 to 0755 (#215910)
  - Do not link res_query.o in to libdhcp4client (#215501)
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)
  - Upgrade to ISC dhcp-3.0.5
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.
  - Send usage() screen in dhclient to stdout rather than the syslog (#210524)
  - Resolves: rhbz#218083


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
      binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
  	          host-name with trailing nul


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
  		  have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and 
    must be specified with the 'next-server' option ( not the tftp-boot-server option ?!?)
    which causes PXE boot clients to fail to load anything after the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup: 
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface 
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of 
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.       
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings            
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -			   comp -> binding_state,
  -			   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast 
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!' .
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212: 
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2 .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being 
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Ralph Apel <r.apel@r-apel.de> - 0:1.2.1-4jpp
changelog:
  - First JPP-1.7 release
  - Build with maven by default
  - Add option to build with straight ant
  - Add -manual subpackage when built with maven
  - Backported TestJOCLed from HEAD


author: Henri Gomez <hgomez@users.sourceforge.net> 1.0-1jpp
changelog:
  - 1.0 (cvs 20020606)
  - added short names in /usr/share/java, as does jakarta developpers
  - first jPackage release


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-tseng to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for tseng video driver generated automatically
    by my xorg-driverspecgen script.


author: Mayank Jain <majain@redhat.com> - m17n-lib-1_3_3-1_fc6
changelog:
  - Updated spec file for changes mentioned in RH bug 193524, comment 4
  - Thanks to Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Jens Petersen <petersen@redhat.com> - 1.3.1-1
changelog:
  - update to 1.3.1 release
    - rename use_otf and use_anthy macros to with_gui and with_examples
    - build --with-gui=no and replace m17n-lib-1.2.0-core-libs-only.patch
      with m17n-lib-no-gui-headers.patch and m17n-lib-nobuild-examples.patch


author: Caolan McNamara <caolanm@redhat.com> - 3.6-5.10
changelog:
  - Resolves: rhbz#226949 telegu rendering problem in OOo
  - Resolves: rhbz#228458 gujarati dependent vowel treated as independent
  - Resolves: rhbz#214948 multiple dependant vowel signs displayed as one


author: Caolan McNamara <caolanm@redhat.com> - 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Caolan McNamara <caolanm@redhat.com> - 3.6-2
changelog:
  - fix rh#205252#/icu#5365 (gnome#121882#/#icu#4026#) to make icu 
    like pango for multiple dependant vowels


author: Caolan McNamara <caolanm@redhat.com> - 3.6-0.1.d01
changelog:
  - rh#200728# update to prelease 3.6d01 to pick up on sinhala fixes
  - drop integrated rh190879.patch
  - drop integrated icu-3.4-sinhala1.patch


author: Ville Skyttä <ville.skytta at iki.fi> - 3.2-3
changelog:
  - Apply upstream case mapping mutex lock removal patch.
  - Build with gcc 3.2 as a temporary workaround for #152495.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:3.0-0.fdr.1
changelog:
  - Update to 3.0, datadirs patch no longer needed.
  - Package data in shared libs, drop -locales subpackage.
  - Rename -docs subpackage to libicu-doc, and generate graphs with graphviz.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.6.1-0.fdr.3
changelog:
  - Partial fix for bad datadirs returned by icu-config (works as long as
    data packaging mode is not "common" or "dll").


author: Matthew Barnes <mbarnes@redhat.com> - 2.14.2-6
changelog:
  - Require gecko-libs instead of firefox.
  - Add patch to make pkg-config look for mozilla-gtkmozembed even
    though we're using xulrunner.


author: John (J5) Palmieri <johnp@redhat.com> - 2.14.2-3
changelog:
  - Remove the Requires on the parent package from gtkmozembed
    so we don't pull in gnome-python2 also.  At some point we
    should look at what requires gnome-python2 and only Require it
    for those sub packages and not the parent package.


author: John (J5) Palmieri <johnp@redhat.com> - 2.13.3-1
changelog:
  - Update to 2.13.3
  - Move the gnome-python2-applet gnome-python2-gnomeprint 
    gnome-python2-gtksourceview gnome-python2-libwnck 
    gnome-python2-libgtop2 gnome-python2-nautilus-cd-burner 
    gnome-python2-metacity and gnome-python2-totem subpackages 
    to gnome-python2-desktop because gnome-python-extras was split upstream


author: John (J5) Palmieri <johnp@redhat.com> - 2.12.1-4
changelog:
  - Remove ifarch directives around mozembed since it is now built on
    ppc64. Bump release again and retag


author: David Malcolm <dmalcolm@redhat.com> - 2.12.0-1
changelog:
  - bump from 2.11.4 to 2.12.0
  - rename wnck_window_demands_attention to wnck_window_needs_attention, to track
    change made in libwnck C API in 2.11.4, #169383
  - added build requirement on gnome-media-devel, since this is needed to build
    mediaprofiles.so


author: Jeremy Katz <katzj@redhat.com> - 2.11.4-8
changelog:
  - totem subpackage shouldn't require mozilla
  - build again on s390{,x}, but don't do the -nautilus-cdburner subpackage


author: Dan Williams <dcbw@redhat.com> - 2.15.90-2.fc6
changelog:
  - Remove unecessary dependencies on gnome-python2-desktop from
      -libwnck and -rsvg subpackages (OLPC)


author: Miroslav Grepl <mgrepl@redhat.com> 1.33.12-14.7
changelog:
  - Remove semanage translation functionality
  Resolves: #460970
  - Fix semanage port add/delete problems
  Resolves: #505521
  - Fix instances of #!/usr/bin/env python in policycoreutils-gui
  Resolves: #521298
  - Fix semanage command does not support -node option
  Resolves: #527487


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.4
changelog:
  - Add semodule -DB support
  Resolves: #493115
  - Add ~/www ~/web to restorecond.conf
  Resolves: #458687
  - Fix sort order for portsPage
  Resolves: #468170
  - Allow <<none>> in homedir 
  Resolves: #354361


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.2
changelog:
  - Fix chcat throwing error messages while changing context  
  - stop genhomedircon creating duplicate entries
  Resolves: #433429


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.1
changelog:
  - Allow <<none>> to exist in homedir/genhomedircon handling it properly
  Resolves: #354361
  - Ignore granted messages with audit2allow
  Resolves: #441402
  - Fix semanage fcontext to quote regex
  Resolves: #435140
  - Fix chcat throwing error messages while changing context  
  Resolves: #220813
  - Make semanage understand -S option
  Resolves: #316011
  - genhomedircon matches misc in /home path


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-13
changelog:
  - Add support for selecting a store in semanage
  Resolves: #316011
  - Handle bad options on semodule command line
  - Add newrole support for alternate pam configurations
  Resolves: #336171


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-8
changelog:
  - Fix gui componants
  - Fix genhomedircon to use __default__ to get default user and prefix
  Resolves: #237324


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-7
changelog:
  - Fix service httpd status to return correct code
  Resolves: #232164
  - Update Linda Knippers patch for newrole on serial console
  Resolves: #228102


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: <willb@redhat> - 0.3.2-1
changelog:
  - updated to version 0.3.2-1
  - removed spurious debugging output
  - access modifiers now respected on properties


author: Kristian Høgsberg <krh@redhat.com> 2.12.1-4
changelog:
  - Spec file clean-ups from from Matthias Saou (#172923):
    - Explicitly disable rpath.
    - Exclude static modules from the main package.
    - Exclude static libraries from the devel package (useless).
    - Don't own entire /usr/share/gtk-doc.
    - Remove explicit pre/post /sbin/ldconfig deps (they're automatic with -p).
    - Change PreReqs to more correct Requires.
    - Fix devel summary.
    - Add _smp_mflags to build.


author: David Zeuthen <davidz@redhat.com> - 2.10.3-1
changelog:
  - Update to upstream release 2.10.3 (#158397). Temporarily disable
    the fix for #154939 since that may be fixed upstream.


author: Colin Walters <walters@redhat.com> 2.7.0-1
changelog:
  - Update to 2.7.0 CVS
  - Add current version of patch which implements dynamic updating,
    using libgnomecups.
  - Add Requires: libgnomecups. 
  - Add BuildPrereq: libgnomecups-devel.


author: Mike A. Harris <mharris@redhat.com> 2.5.4-2
changelog:
  - Removed PreReq: XFree86, as it seems bogus.  Probably a leftover from a
    long time ago that is not needed anymore.  This change is needed in order
    to make the package X11 implementation agnostic, however if there is
    something that it does really require from the XFree86 package, we can
    use a file or directory dependancy instead, or a virtual provide can be
    added if need be.
  - Added Requires(post): /sbin/ldconfig
  - Added Requires(postun): /sbin/ldconfig


author: Owen Taylor <otaylor@redhat.com> 2.3.1-2
changelog:
  - Make the fallback font "Sans Regular", not "Helvetica". Helvetica 
    was ending up picking the alphabetically first font on the system.
    (#79271. Tim Waugh)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix crash from HP Color LaserJet 4500 PPD file 
    (http://bugzilla.gnome.org/show_bug.cgi?id=106984)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - initial build of libgnomeprint 2.2 (version 2.1.4)
  - don't try to prereq ourselves, wtf was that about


author: Christopher Curran ccurran@redhat.com 5.2-11
changelog:
  - New or rewritten sections for installation, troubleshooting, networking and installation
  - Various updates for spelling, grammar and language
  - Formatting and layout issues resolved
  - Updated terminology and word usage to enhance usability and readability


author: Christopher Curran ccurran@redhat.com 5.2-7
changelog:
  - Resolves: #322761
  - Many spelling and grammar errors corrected.
  - Chapter on Remote Management added


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-14
changelog:
  - add patch from David Shaw to fix incorrectly detecting multiple plaintexts
    when processing multiple input files (#442815)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-13
changelog:
  - incorporate patch from Werner to work around clients which
    can't tell that multiple plain messages have been processed (#230457)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-10
changelog:
  - incorporate patch from Werner to fix use of stack variable after it goes
    out of scope (CVE-2006-6235, #218483)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-9
changelog:
  - rebuild
  - give configure a --with-termlib option which can be used to force the
    selection of libtermcap or libncurses, but don't flip the switch yet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-1
changelog:
  - update to 1.4.5, fixing additional size overflows in packet parsing (#200904,
    CVE-2006-3746)
  - temporarily disable curl support again


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.4.90-1
changelog:
  - update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90
    to avoid looking "newer" than the eventual 1.4.5
  - because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-6
changelog:
  - fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow
    detection (#198612)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-2
changelog:
  - apply patch from David Shaw to try multiple defaults if the the photo-viewer
    option isn't set (fixes #187880)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-3
changelog:
  - add patch from David Shaw to fix error reading keyrings created with older
    versions of GnuPG (Enrico Scholz, #182163)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change %post to check if the info files are there before attempting to
    add or remove them from the info index (#91641)


