# changelog

author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-82
changelog:
  - Label /var/lib/softhsm as named_cache_t. Allow named_t to manage named_cache_t dirs.
  Resolves:rhbz#1331315
  - Label named-pkcs11 binary as named_exec_t.
  Resolves: rhbz#1331315
  - Allow glusterd daemon to get systemd status
  Resolves: rhbz#1321785
  - Allow logrotate dbus-chat with system_logind daemon
  Resolves: rhbz#1283134
  - Allow pcp_pmlogger to read kernel network state Allow pcp_pmcd to read cron pid files
  Resolves: rhbz#1336211
  - Add interface cron_read_pid_files()
  Resolves: rhbz#1336211
  - Allow pcp_pmlogger to create unix dgram sockets
  Resolves: rhbz#1336211
  - Add hwloc-dump-hwdata SELinux policy
  Resolves: rhbz#1344054
  - Remove non-existing jabberd_spool_t() interface and add new jabbertd_var_spool_t.
  Resolves: rhbz#1121171
  - Remove non-existing interface salk_resetd_systemctl() and replace it with sanlock_systemctl_sanlk_resetd()
  Resolves: rhbz#1259764
  - Create label for openhpid log files. 
  esolves: rhbz#1259764
  - Label /var/lib/ganglia as httpd_var_lib_t
  Resolves: rhbz#1260536
  - Allow firewalld_t to create entries in net_conf_t dirs.
  Resolves: rhbz#1304723
  - Allow journalctl to read syslogd_var_run_t files. This allows to staff_t and sysadm_t to read journals
  Resolves: rhbz#1288255
  - Include patch from distgit repo: policy-RHEL-7.1-flask.patch.
  Resolves: rhbz#1329560
  - Update refpolicy to handle hwloc
  Resolves: rhbz#1344054
  - Label /etc/dhcp/scripts dir as bin_t
  - Allow sysadm_role to run journalctl_t domain. This allows sysadm user to read journals.
  Resolves: rhbz#1288255


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-83
changelog:
  - Allow krb5kdc_t to communicate with sssd
  Resolves: rhbz#1319933
  - Allow prosody to bind on prosody ports
  Resolves: rhbz#1304664
  - Add dac_override caps for fail2ban-client
  Resolves: rhbz#1316678
  - dontaudit read access for svirt_t on the file /var/db/nscd/group
  Resolves: rhbz#1301637
  - Allow inetd child process to communicate via dbus with systemd-logind
  Resolves: rhbz#1333726
  - Add label for brltty log file
  Resolves: rhbz#1328818
  - Allow dspam to read the passwd file
  Resolves: rhbz#1286020
  - Allow snort_t to communicate with sssd
  Resolves: rhbz#1284908
  - svirt_sandbox_domains need to be able to execmod for badly built libraries.
  Resolves: rhbz#1206339
  - Add policy for lttng-tools package.
  Resolves: rhbz#1256374
  - Make mirrormanager as application domain.
  Resolves: rhbz#1328234
  - Add support for the default lttng-sessiond port - tcp/5345.  This port is used by LTTng 2.x central tracing registry session daemon.
  - Add prosody ports
  Resolves: rhbz#1304664
  - Allow sssd read also sssd_conf_t dirs
  Resolves: rhbz#1350535


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-84
changelog:
  - Fix typo in brltty SELinux module
  - Add new SELinux module sbd
  Resolves: rhbz#1322725
  - Allow pcp dmcache metrics collection
  Resolves: rhbz#1309883
  - Allow pkcs_slotd_t to create dir in /var/lock Add label pkcs_slotd_log_t
  Resolves: rhbz#1350782
  - Allow openvpn to create sock files labeled as openvpn_var_run_t
  Resolves: rhbz#1328246
  - Allow hypervkvp daemon to getattr on  all filesystem types.
  Resolves: rhbz#1349356
  - Allow firewalld to create net_conf_t files
  Resolves: rhbz#1304723
  - Allow mock to use lvm
  Resolves: rhbz#1271209
  - Allow keepalived to create netlink generic sockets.
  Resolves: rhbz#1349809
  - Allow mirromanager creating log files in /tmp
  Resolves:rhbz#1328818
  - Rename few modules to make it consistent with source files
  Resolves: rhbz#1351445
  - Allow vmtools_t to transition to rpm_script domain
  Resolves: rhbz#1342119
  - Allow nsd daemon to manage nsd_conf_t dirs and files
  Resolves: rhbz#1349791
  - Allow cluster to create dirs in /var/run labeled as cluster_var_run_t
  Resolves: rhbz#1346900
  - Allow sssd read also sssd_conf_t dirs
  Resolves: rhbz#1350535
  - Dontaudit su_role_template interface to getattr /proc/kcore Dontaudit su_role_template interface to getattr /dev/initctl
  Resolves: rhbz#1086240
  - Add interface lvm_getattr_exec_files()
  Resolves: rhbz#1271209
  - Fix typo Compliling vs. Compiling
  Resolves: rhbz#1351445


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-85
changelog:
  - Allow virtual machines to rw infiniband devices.
  Resolves: rhbz#1210263
  - Allow opensm daemon to rw infiniband_mgmt_device_t
  Resolves: rhbz#1210263
  - Allow systemd_hwdb_t to relabel /etc/udev/hwdb.bin file.
  Resolves: rhbz#1350756
  - Make label for new infiniband_mgmt deivices
  Resolves: rhbz#1210263


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-86
changelog:
  - Allow udev to manage systemd-hwdb files
  - Add interface systemd_hwdb_manage_config()
  Resolves: rhbz#1350756
  - Fix paths to infiniband devices. This allows use more then two infiniband interfaces.
  Resolves: rhbz#1210263


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-87
changelog:
  - Allow lttng tools to block suspending
  Resolves: rhbz#1256374
  - Allow creation of vpnaas in openstack
  Resolves: rhbz#1352710
  - virt: add strict policy for virtlogd daemon
  Resolves:rhbz#1311606
  - Update makefile to support snapperd_contexts file
  Resolves: rhbz#1352681


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-88
changelog:
  - Allow rhsmcertd to copy certs into /etc/docker/cert.d
  - Add interface docker_rw_config()
  Resolves: rhbz#1344500
  - Fix logrotate fc file to label also /var/lib/logrotate/ dir as logrotate_var_lib_t
  Resolves: rhbz#1355632
  - Allow rhsmcertd to read network sysctls
  Resolves: rhbz#1329475
  - Label /var/log/graphite-web dir as httpd_log_t
  Resolves: rhbz#1310898
  - Allow mock to use generic ptys
  Resolves: rhbz#1271209
  - Allow adcli running as sssd_t to write krb5.keytab file.
  Resolves: rhbz#1356082
  - Allow openvswitch connect to openvswitch_port_t type.
  Resolves: rhbz#1335024
  - Add SELinux policy for opendnssec service.
  Resolves: rhbz#1350957
  - Create new SELinux type for /usr/libexec/ipa/ipa-dnskeysyncd
  Resolves: rhbz#1350957
  - label /dev/ndctl0 device as nvram_device_t
  Resolves: rhbz#1355809


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-89
changelog:
  - Allow firewalld to manage net_conf_t files.
  Resolves:rhbz#1304723
  - Allow logrotate read logs inside containers.
  Resolves: rhbz#1303514
  - Allow sssd to getattr on fs_t
  Resolves: rhbz#1356082
  - Allow opendnssec domain to manage bind chace files
  Resolves: rhbz#1350957
  - Fix typo in rhsmcertd  policy module
  Resolves: rhbz#1329475
  - Allow systemd to get status of systemd-logind daemon
  Resolves: rhbz#1356141
  - Label more ndctl devices not just ndctl0
  Resolves: rhbz#1355809


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-90
changelog:
  - Allow ipa-dnskey read system state.
  Reasolves: rhbz#1350957
  - Allow dogtag-ipa-ca-renew-agent-submit labeled as certmonger_t to create /var/log/ipa/renew.log file
  Resolves: rhbz#1350957


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-92
changelog:
  - Dontaudit mock_build_t can list all ptys.
  Resolves: rhbz#1271209
  - Allow ftpd_t to mamange userhome data without any boolean.
  Resolves: rhbz#1097775
  - Add logrotate permissions for creating netlink selinux sockets.
  Resolves: rhbz#1283134
  - Allow lsmd_plugin_t to exec ldconfig.
  Resolves: rhbz#1238066
  - Allow vnstatd domain to read /sys/class/net/ files
  Resolves: rhbz#1358243
  - Remove duplicate allow rules in spamassassin SELinux module
  Resolves:rhbz#1358175
  - Allow spamc_t and spamd_t domains create .spamassassin file in user homedirs
  Resolves:rhbz#1358175
  - Allow sshd setcap capability. This is needed due to latest changes in sshd
  Resolves: rhbz#1357857
  - Add new MLS attribute to allow relabeling objects higher than system low. This exception is needed for package managers when processing sensitive data.
  Resolves: rhbz#1330464
  - Allow gnome-keyring also manage user_tmp_t sockets.
  Resolves: rhbz#1257057
  - corecmd: Remove fcontext for /etc/sysconfig/libvirtd
  Resolves:rhbz#1351382


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-93
changelog:
  - Dontaudit mock to write to generic certs.
  Resolves: rhbz#1271209
  - Add labeling for corosync-qdevice and corosync-qnetd daemons, to run as cluster_t
  Resolves: rhbz#1347514
  - Revert "Label corosync-qnetd and corosync-qdevice as corosync_t domain"
  - Allow modemmanager to write to systemd inhibit pipes
  Resolves: rhbz#1365214
  - Label corosync-qnetd and corosync-qdevice as corosync_t domain
  Resolves: rhbz#1347514
  - Allow ipa_helper to read network state
  Resolves: rhbz#1361636
  - Label oddjob_reqiest as oddjob_exec_t
  Resolves: rhbz#1361636
  - Add interface oddjob_run()
  Resolves: rhbz#1361636
  - Allow modemmanager chat with systemd_logind via dbus
  Resolves: rhbz#1362273
  - Allow NetworkManager chat with puppetagent via dbus
  Resolves: rhbz#1363989
  - Allow NetworkManager chat with kdumpctl via dbus
  Resolves: rhbz#1363977
  - Allow sbd send msgs to syslog Allow sbd create dgram sockets. Allow sbd to communicate with kernel via dgram socket Allow sbd r/w kernel sysctls.
  Resolves: rhbz#1322725
  - Allow ipmievd_t domain to re-create ipmi devices Label /usr/libexec/openipmi-helper as ipmievd_exec_t
  Resolves: rhbz#1349058
  - Allow rasdaemon to use tracefs filesystem.
  Resolves: rhbz#1364380
  - Fix typo bug in dirsrv policy
  - Some logrotate scripts run su and then su runs unix_chkpwd. Allow logrotate_t domain to check passwd.
  Resolves: rhbz#1283134
  - Add ipc_lock capability to sssd domain. Allow sssd connect to http_cache_t
  Resolves: rhbz#1362688
  - Allow dirsrv to read dirsrv_share_t content
  Resolves: rhbz#1363662
  - Allow virtlogd_t to append svirt_image_t files.
  Resolves: rhbz#1358140
  - Allow hypervkvp domain to read hugetlbfs dir/files.
  Resolves: rhbz#1349356
  - Allow mdadm daemon to read nvme_device_t blk files
  Resolves: rhbz#1362564
  - Allow selinuxusers and unconfineduser to run oddjob_request
  Resolves: rhbz#1361636
  - Allow sshd server to acces to Crypto Express 4 (CEX4) devices.
  Resolves: rhbz#1362539
  - Fix labeling issue in init.fc file. Path /usr/lib/systemd/fedora-* changed to /usr/lib/systemd/rhel-*.
  Resolves: rhbz#1363769
  - Fix typo in device interfaces
  Resolves: rhbz#1349058
  - Add interfaces for managing ipmi devices
  Resolves: rhbz#1349058
  - Add interfaces to allow mounting/umounting tracefs filesystem
  Resolves: rhbz#1364380
  - Add interfaces to allow rw tracefs filesystem
  Resolves: rhbz#1364380
  - Add interface dev_read_nvme() to allow reading Non-Volatile Memory Host Controller devices.
  Resolves: rhbz#1362564
  - Label /sys/kernel/debug/tracing filesystem
  Resolves: rhbz#1364380
  - Allow sshd setcap capability. This is needed due to latest changes in sshd
  Resolves: rhbz#1357857


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-94
changelog:
  - Allow ipmievd domain to create lock files in /var/lock/subsys/
  Resolves:rhbz#1349058
  - Update policy for ipmievd daemon.
  Resolves:rhbz#1349058
  - Dontaudit hyperkvp to getattr on non security files.
  Resolves: rhbz#1349356
  - Label /run/corosync-qdevice and /run/corosync-qnetd as corosync_var_run_t
  Resolves: rhbz#1347514
  - Fixed lsm SELinux module
  - Add sys_admin capability to sbd domain
  Resolves: rhbz#1322725
  - Allow vdagent to comunnicate with systemd-logind via dbus
  Resolves: rhbz#1366731
  - Allow lsmd_plugin_t domain to create fixed_disk device.
  Resolves: rhbz#1238066
  - Allow opendnssec domain to create and manage own tmp dirs/files
  Resolves: rhbz#1366649
  - Allow opendnssec domain to read system state
  Resolves: rhbz#1366649
  - Update opendnssec_manage_config() interface to allow caller domain also manage opendnssec_conf_t dirs
  Resolves: rhbz#1366649
  - Allow rasdaemon to mount/unmount tracefs filesystem.
  Resolves: rhbz#1364380
  - Label /usr/libexec/iptables/iptables.init as iptables_exec_t Allow iptables creating lock file in /var/lock/subsys/
  Resolves: rhbz#1367520
  - Modify interface den_read_nvme() to allow also read nvme_device_t block files.
  Resolves: rhbz#1362564
  - Label /var/run/storaged as lvm_var_run_t.
  Resolves: rhbz#1264390
  - Allow unconfineduser to run ipa_helper_t.
  Resolves: rhbz#1361636


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-95
changelog:
  - Label /etc/pki/pki-tomcat/ca/ as pki_tomcat_cert_t
  Resolves:rhbz#1366915
  - Allow certmonger to manage all systemd unit files
  Resolves:rhbz#1366915
  - Grant certmonger "chown" capability
  Resolves:rhbz#1366915
  - Allow ipa_helper_t stream connect to dirsrv_t domain
  Resolves: rhbz#1368418
  - Update oracleasm SELinux module
  Resolves: rhbz#1331383
  - label /var/lib/kubelet as svirt_sandbox_file_t
  Resolves: rhbz#1369159
  - Add few interfaces to cloudform.if file
  Resolves: rhbz#1367834
  - Label /var/run/corosync-qnetd and /var/run/corosync-qdevice as cluster_var_run_t. Note: corosync policy is now par of rhcs module
  Resolves: rhbz#1347514
  - Allow krb5kdc_t to read krb4kdc_conf_t dirs.
  Resolves: rhbz#1368492
  - Update networkmanager_filetrans_named_content() interface to allow source domain to create also temad dir in /var/run.
  Resolves: rhbz#1365653
  - Allow teamd running as NetworkManager_t to access netlink_generic_socket to allow multiple network interfaces to be teamed together.
  Resolves: rhbz#1365653
  - Label /dev/oracleasmfs as oracleasmfs_t. Add few interfaces related to oracleasmfs_t type
  Resolves: rhbz#1331383
  - A new version of cloud-init that supports the effort to provision RHEL Atomic on Microsoft Azure requires some a new rules that allows dhclient/dhclient hooks to call cloud-init.
  Resolves: rhbz#1367834
  - Allow iptables to creating netlink generic sockets.
  Resolves: rhbz#1364359


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-96
changelog:
  - Allow arpwatch to create netlink netfilter sockets. Resolves: rhbz#1358261
  - Fix file context for /etc/pki/pki-tomcat/ca/
  - new interface oddjob_mkhomedir_entrypoint()
  - Move label for /var/lib/docker/vfs/ to proper SELinux module
  - Allow mdadm to get attributes from all devices.
  - Label /etc/puppetlabs as puppet_etc_t.
  - Allow systemd-machined to communicate to lxc container using dbus
  - Allow systemd_resolved to send dbus msgs to userdomains Resolves: rhbz#1236579
  - Allow systemd-resolved to read network sysctls Resolves: rhbz#1236579
  - Allow systemd_resolved to connect on system bus. Resolves: rhbz#1236579
  - Make entrypoint oddjob_mkhomedir_exec_t for unconfined_t
  - Label all files in /dev/oracleasmfs/ as oracleasmfs_t Resolves: rhbz#1331383


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-97
changelog:
  - Add oracleasm_conf_t type and allow oracleasm_t to create /dev/oracleasm
  Resolves: rhbz#1331383
  - Label /usr/share/pcp/lib/pmie as pmie_exec_t and /usr/share/pcp/lib/pmlogger as pmlogger_exec_t
  Resolves: rhbz#1206525
  - Allow mdadm_t to getattr all device nodes
  Resolves: rhbz#1365171
  - Add interface dbus_dontaudit_stream_connect_system_dbusd()
  Resolves:rhbz#1052880
  - Add virt_stub_* interfaces for docker policy which is no longer a part of our base policy.
  Resolves: rhbz#1372705
  - Allow guest-set-user-passwd to set users password.
  Resolves: rhbz#1369693
  - Allow samdbox domains to use msg class
  Resolves: rhbz#1372677
  - Allow domains using kerberos to read also kerberos config dirs
  Resolves: rhbz#1368492
  - Allow svirt_sandbox_domains to r/w onload sockets
  Resolves: rhbz#1342930
  - Add interface fs_manage_oracleasm()
  Resolves: rhbz#1331383
  - Label /dev/kfd as hsa_device_t
  Resolves: rhbz#1373488
  - Update seutil_manage_file_contexts() interface that caller domain can also manage file_context_t dirs
  Resolves: rhbz#1368097
  - Add interface to write to nsfs inodes
  Resolves: rhbz#1372705
  - Allow systemd services to use PrivateNetwork feature
  Resolves: rhbz#1372705
  - Add a type and genfscon for nsfs.
  Resolves: rhbz#1372705
  - Allow run sulogin_t in range mls_systemlow-mls_systemhigh.
  Resolves: rhbz#1290400


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-98
changelog:
  - Update oracleasm SELinux module that can manage oracleasmfs_t blk files. Add dac_override cap to oracleasm_t domain.
  Resolves: rhbz#1331383
  - Add few rules to pcp SELinux module to make ti able to start pcp_pmlogger service
  Resolves: rhbz#1206525


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-99
changelog:
  - Allow iscsid create netlink iscsid sockets.
  Resolves: rhbz#1358266
  - Improve regexp for power_unit_file_t files. To catch just systemd power unit files.
  Resolves: rhbz#1375462


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-100
changelog:
  - Allow ftp daemon to manage apache_user_content
  Resolves: rhbz#1097775
  - Label /etc/sysconfig/oracleasm as oracleasm_conf_t
  Resolves: rhbz#1331383
  - Allow oracleasm to rw inherited fixed disk device
  Resolves: rhbz#1331383
  - Allow collectd to connect on unix_stream_socket
  Resolves: rhbz#1377259


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-101
changelog:
  - Allow pcp_pmcd_t domain transition to lvm_t Add capability kill and sys_ptrace to pcp_pmlogger_t
  Resolves: rhbz#1309883


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-103
changelog:
  - Allow sssd_selinux_manager_t to manage also dir class.
  Resolves: rhbz#1368097
  - Add interface seutil_manage_default_contexts_dirs()
  Resolves: rhbz#1368097


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-104
changelog:
  - Use selinux-policy-migrate-local-changes.sh instead of migrateStore* macros
  - Add selinux-policy-migrate-local-changes service
  Resolves: rhbz#1381588


author: Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-105
changelog:
  - Allow GlusterFS with RDMA transport to be started correctly. It requires ipc_lock capability together with rw permission on rdma_cm device.
  Resolves: rhbz#1384488
  - Allow glusterd to get attributes on /sys/kernel/config directory.
  Resolves: rhbz#1384483


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-106
changelog:
  - Fix error message during update from RHEL-7.2 to RHEL-7.3, when /usr/sbin/semanage command is not installed and selinux-policy-migrate-local-changes.sh script is executed in %post install phase of selinux-policy package
  Resolves: rhbz#1392010


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-108
changelog:
  - Update systemd on RHEL-7.2 box to version from RHEL-7.3 and then as a separate yum command update the selinux policy systemd will start generating USER_AVC denials and will start returning "Access Denied" errors to DBus clients
  Resolves: rhbz#1393505


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-109
changelog:
  - Allow puppetagent_t to access timedated dbus. Use the systemd_dbus_chat_timedated interface to allow puppetagent_t the access.
  Resolves: rhbz#1399250


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-112
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Allow systemd to stop glusterd_t domains.
  Resolves: rhbz#1400493


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-113
changelog:
  - Fixes for containers Allow containers to attempt to write to unix_sysctls. Allow cotainers to use the FD's leaked to them from parent processes.
  Resolves: rhbz#1403254


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-115
changelog:
  - Allow glusterd_t to bind on med_tlp port.
  Resolves: rhbz#1404152
  - Update ctdbd_t policy to reflect all changes.
  Resolves: rhbz#1402451
  - Label tcp port 24009 as med_tlp_port_t
  Resolves: rhbz#1404152
  -  Issue appears during update directly from RHEL-7.0 to RHEL-7.3 or above. Modules pkcsslotd and vbetools missing in selinux-policy package for RHEL-7.3 which causing warnings during SELinux policy store migration process. Following patch fixes issue by skipping pkcsslotd and vbetools modules migration.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-116
changelog:
  - Allow glusterd_t to bind on glusterd_port_t udp ports.
  Resolves: rhbz#1404152
  - Revert: Allow glusterd_t to bind on med_tlp port.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-117
changelog:
  - Allow systemd container to read/write usermodehelperstate
  Resolves: rhbz#1403254
  - Label udp ports in range 24007-24027 as gluster_port_t
  Resolves: rhbz#1404152


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-118
changelog:
  - Allow firewalld to getattr open search read modules_object_t:dir
  Resolves: rhbz#1418391
  - Fix label for nagios plugins in nagios file conxtext file
  Resolves: rhbz#1277718
  - Add sys_ptrace capability to pegasus domain
  Resolves: rhbz#1381238
  - Allow sssd_t domain setpgid
  Resolves:rhbz#1416780
  - After the latest changes in nfsd. We should allow nfsd_t to read raw fixed disk.
  Resolves: rhbz#1350927
  - Allow kdumpgui domain to read nvme device
  Resolves: rhbz#1415084
  - su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization.
  Resolves: rhbz#1146987
  - Add user namespace capability object classes.
  Resolves: rhbz#1368057
  - Add module_load permission to class system
  Resolves:rhbz#1368057
  - Add the validate_trans access vector to the security class 
  Resolves: rhbz#1368057
  - Add "binder" security class and access vectors
  Resolves: rhbz#1368057
  - Allow ifconfig_t domain read nsfs_t
  Resolves: rhbz#1349814
  - Allow ping_t domain to load kernel modules.
  Resolves: rhbz#1388363


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-119
changelog:
  - Add interface init_stream_connectto()
  Resolves:rhbz#1365947
  - Allow rhsmcertd domain signull kernel.
  Resolves: rhbz#1379781
  - Allow kdumpgui domain to read nvme device
  - Allow insmod_t to load kernel modules
  Resolves: rhbz#1421598
  - Add interface files_load_kernel_modules()
  Resolves: rhbz#1421598
  - Add SELinux support for systemd-initctl daemon
  Resolves:rhbz#1365947
  - Add SELinux support for systemd-bootchart
  Resolves: rhbz#1365953


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-120
changelog:
  - Allow initrc_t domain to run rhel-autorelabel script properly during boot process
  Resolves: rhbz#1379722
  - Allow systemd_initctl_t to create and connect unix_dgram sockets
  Resolves: rhbz#1365947
  - Allow ifconfig_t to mount/unmount nsfs_t filesystem
  Resolves: rhbz#1349814
  - Add interfaces allowing mount/unmount nsfs_t filesystem
  Resolves: rhbz#1349814


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-122
changelog:
  - Allow nfsd_t domain rw sysctl_rpc_t dirs
  Resolves: rhbz#1405304
  - Allow cgdcbxd_t to manage cgroup files.
  Resolves: rhbz#1358493
  - Allow cmirrord_t domain to create netlink_connector sockets
  Resolves: rhbz#1412670
  - Allow fcoemon to create netlink scsitransport sockets
  Resolves: rhbz#1362496
  - Allow quota_nld_t create netlink_generic sockets
  Resolves: rhbz#1358679
  - Allow cgred_t create netlink_connector sockets
  Resolves: rhbz#1376357
  - Add dhcpd_t domain fowner capability
  Resolves: rhbz#1358485
  - Allow acpid to attempt to connect to the Linux kernel via generic netlink socket.
  Resolves: rhbz#1358478
  - Rename docker module to container module
  Resolves: rhbz#1386916
  - Allow setflies to mount tracefs
  Resolves: rhbz#1376357
  - Allow iptables to read nsfs files.
  Resolves: rhbz#1411316
  - Allow systemd_bootchart_t domain create dgram sockets.
  Resolves: rhbz#1365953
  - Rename docker interfaces to container
  Resolves: rhbz#1386916


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-123
changelog:
  - Allow nfsd_t domain to create sysctls_rpc_t files
  Resolves: rhbz#1405304
  - Allow openvswitch to create netlink generic sockets.
  Resolves: rhbz#1397974
  - Create kernel_create_rpc_sysctls() interface
  Resolves: rhbz#1405304


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-124
changelog:
  - Allow rhsmcertd_t dbus chat with system_cronjob_t
  Resolves: rhbz#1405341
  - Allow openvswitch exec hostname and readinitrc_t files
  Resolves: rhbz#1405479
  - Improve SELinux context for mysql_db_t objects.
  Resolves: rhbz#1391521
  - Allow postfix_postdrop to communicate with postfix_master via pipe.
  Resolves: rhbz#1379736
  - Add radius_use_jit boolean
  Resolves: rhbz#1426205
  - Label /var/lock/subsys/iptables as iptables_lock_t
  Resolves: rhbz#1405441
  - Label /usr/lib64/erlang/erts-5.10.4/bin/epmd as lib_t
  Resolves: rhbz#1332803
  - Allow can_load_kernmodule to load kernel modules.
  Resolves: rhbz#1423427
  Resolves: rhbz#1424621


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-125
changelog:
  - Update ganesha policy
  Resolves: rhbz#1426554
  Resolves: rhbz#1383784
  - Allow chronyd to read adjtime
  Resolves: rhbz#1416015
  - Fixes for chrony version 2.2
  Resolves: rhbz#1416015
  - Add interface virt_rw_stream_sockets_svirt()
  Resolves: rhbz#1415841
  - Label /dev/ss0 as gpfs_device_t
  Resolves: rhbz#1383784
  - Allow staff to rw svirt unix stream sockets.
  Resolves: rhbz#1415841
  - Label /rhev/data-center/mnt as mnt_t
  Resolves: rhbz#1408275
  - Associate sysctl_rpc_t with proc filesystems
  Resolves: rhbz#1350927
  - Add new boolean: domain_can_write_kmsg
  Resolves: rhbz#1415715


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-128
changelog:
  - Add handling booleans via selinux-policy macros in custom policy spec files.
  Resolves: rhbz#1380854


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-130
changelog:
  - Allow gssproxy to get attributes on all filesystem object types.
  Resolves: rhbz#1430295
  - Allow ganesha to chat with unconfined domains via dbus
  Resolves: rhbz#1426554
  - add the policy required for nextcloud
  Resolves: rhbz#1425530
  - Add nmbd_t capability2 block_suspend
  Resolves: rhbz#1425357
  - Label /var/run/chrony as chronyd_var_run_t
  Resolves: rhbz#1416015
  - Add domain transition from sosreport_t to iptables_t
  Resolves: rhbz#1359789
  - Fix path to /usr/lib64/erlang/erts-5.10.4/bin/epmd
  Resolves: rhbz:#1332803


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-131
changelog:
  - Remove tomcat_t domain from unconfined domains
  Resolves: rhbz#1432083
  - Create new boolean: sanlock_enable_home_dirs()
  Resolves: rhbz#1432783
  - Allow mdadm_t domain to read/write nvme_device_t
  Resolves: rhbz#1431617
  - Remove httpd_user_*_content_t domains from user_home_type attribute. This tighten httpd policy and acces to user data will be more strinct, and also fix mutual influente between httpd_enable_homedirs and httpd_read_user_content
  Resolves: rhbz#1383621
  - Dontaudit domain to create any file in /proc. This is kernel bug.
  Resolves: rhbz#1412679
  - Add interface dev_rw_nvme
  Resolves: rhbz#1431617


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-132
changelog:
  - Add haproxy_t domain fowner capability
  Resolves: rhbz#1386233
  - Allow domain transition from ntpd_t to hwclock_t domains
  Resolves: rhbz#1375624
  - Allow cockpit_session_t setrlimit and sys_resource
  Resolves: rhbz#1402316
  - Dontaudit svirt_t read state of libvirtd domain
  Resolves: rhbz#1426106
  - Update httpd and gssproxy modules to reflects latest changes in freeipa
  Resolves: rhbz#1432115
  - Allow iptables read modules_conf_t
  Resolves: rhbz#1367520


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-133
changelog:
  - Allow drbd load modules
  Resolves: rhbz#1134883
  - Revert "Add sys_module capability for drbd
  Resolves: rhbz#1134883"
  - Allow stapserver list kernel modules
  Resolves: rhbz#1325976
  - Update targetd policy
  Resolves: rhbz#1373860
  - Add sys_admin capability to amanda
  Resolves: rhbz#1371561
  - Allow hypervvssd_t to read all dirs.
  Resolves: rhbz#1331309
  - Label /run/haproxy.sock socket as haproxy_var_run_t
  Resolves: rhbz#1386233
  - Allow oddjob_mkhomedir_t to mamange autofs_t dirs.
  Resolves: rhbz#1408819
  - Allow tomcat to connect on http_cache_port_t
  Resolves: rhbz#1432083
  - Allow geoclue to send msgs to syslog.
  Resolves: rhbz#1434286
  - Allow condor_master_t domain capability chown.
  Resolves: rhbz#1277506
  - Update mta_filetrans_named_content() interface to allow calling domain create files labeled as etc_aliases_t in dir labeled as etc_mail_t.
  Resolves: rhbz#1167468
  - Allow nova domain search for httpd configuration.
  Resolves: rhbz#1190761
  - Add sys_module capability for drbd
  Resolves: rhbz#1134883
  - Allow user_u users stream connect to dirsrv, Allow sysadm_u and staff_u users to manage dirsrv files
  Resolves: rhbz#1286474
  - Allow systemd_networkd_t communicate with systemd_networkd_t via dbus
  Resolves: rhbz#1278010


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-134
changelog:
  - Allow named_t domain bind on several udp ports
  Resolves: rhbz#1312972
  - Update nscd_use() interface
  Resolves: rhbz#1281716
  - Allow radius_t domain ptrace
  Resolves: rhbz#1426641
  - Update nagios to allos exec systemctl
  Resolves: rhbz#1247635
  - Update pcp SELinux module to reflect all pcp changes
  Resolves: rhbz#1271998
  - Label /var/lib/ssl_db as squid_cache_t Label /etc/squid/ssl_db as squid_cache_t
  Resolves: rhbz#1325527
  - Allow pcp_pmcd_t domain search for network sysctl Allow pcp_pmcd_t domain sys_ptrace capability Resolves: rhbz#1336211


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-136
changelog:
  - geoclue wants to dbus chat with avahi
  Resolves: rhbz#1434286
  - Allow iptables get list of kernel modules
  Resolves: rhbz#1367520
  - Allow unconfined_domain_type to enable/disable transient unit
  Resolves: rhbz#1337041
  - Add interfaces init_enable_transient_unit() and init_disable_transient_unit
  - Revert "Allow sshd setcap capability. This is needed due to latest changes in sshd"
  Resolves: rhbz#1435264
  - Label sysroot dir under ostree as root_t
  Resolves: rhbz#1428112


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-137
changelog:
  - Dontaudit firewalld wants write to /root
  Resolves: rhbz#1438708
  - Dontaudit firewalld to create dirs in /root/
  Resolves: rhbz#1438708
  - Allow sendmail to search network sysctls
  Resolves: rhbz#1369376
  - Add interface gssd_noatsecure()
  Resolves: rhbz#1438036
  - Add interface gssproxy_noatsecure()
  Resolves: rhbz#1438036
  - Dontaudit pcp_pmlogger_t search for xserver logs. Allow pcp_pmlogger_t to send signals to unconfined doamins Allow pcp_pmlogger_t to send logs to journals
  Resolves: rhbz#1379371
  - Allow chronyd_t net_admin capability to allow support HW timestamping.
  Resolves: rhbz#1416015
  - Update tomcat policy
  Resolves: rhbz#1436689
  Resolves: rhbz#1436383
  - Allow certmonger to start haproxy service
  Resolves: rhbz#1349394
  - Allow init noatsecure for gssd and gssproxy
  Resolves: rhbz#1438036


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-139
changelog:
  - Fix all AVC denials during pkispawn of CA
  Resolves: rhbz#1436383
  - Update pki interfaces and tomcat module
  Resolves: rhbz#1436689


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-140
changelog:
  - Allow pcp_pmcd_t net_admin capability.
  - Allow pcp_pmcd_t read net sysctls
  - Allow system_cronjob_t create /var/run/pcp with pcp_var_run_t
  Resolves: rhbz#1336211


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-142
changelog:
  - Allow sbd_t to read/write fixed disk devices
  Resolves: rhbz#1440165
  - Add sys_ptrace capability to radiusd_t domain
  Resolves: rhbz#1426641
  - Allow cockpit_session_t domain connects to ssh tcp ports.
  Resolves: rhbz#1413509


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-143
changelog:
  - Hide broken symptoms when using kernel 3.10.0-514+ with network bonding. Postfix_picup_t domain requires NET_ADMIN capability which is not really needed.
  Resolves: rhbz#1431859
  - Fix policy to reflect all changes in new IPA release
  Resolves: rhbz#1432115
  Resolves: rhbz#1436689


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-145
changelog:
  - Update tomcat policy to adjust for removing unconfined_domain attr.
  Resolves: rhbz#1432083
  - Allow httpd_t domain read also httpd_user_content_type lnk_files.
  Resolves: rhbz#1383621
  - Allow httpd_t domain create /etc/httpd/alias/ipaseesion.key with label ipa_cert_t
  Resolves: rhbz#1436689
  - Dontaudit <user>_gkeyringd_t stream connect to system_dbusd_t
  Resolves: rhbz#1052880
  - Label /var/www/html/nextcloud/data as httpd_sys_rw_content_t
  Resolves: rhbz#1425530
  - Add interface ipa_filetrans_named_content()
  Resolves: rhbz#1432115
  - Allow tomcat use nsswitch
  Resolves: rhbz#1436689
  - Allow certmonger_t start/status generic services
  Resolves: rhbz#1436689
  - Allow dirsrv read cgroup files.
  Resolves: rhbz#1436689
  - Allow ganesha_t domain read/write infiniband devices.
  Resolves: rhbz#1383784
  - Allow sendmail_t domain sysctl_net_t files
  Resolves: rhbz#1369376
  - Allow targetd_t domain read network state and getattr on loop_control_device_t
  Resolves: rhbz#1373860
  - Allow condor_schedd_t domain send mails.
  Resolves: rhbz#1277506
  - Alow certmonger to create own systemd unit files.
  Resolves: rhbz#1436689
  - Allow staff to systemctl virt server when staff_use_svirt=1
  Resolves: rhbz#1415841
  - Allow unconfined_t create /tmp/ca.p12 file with ipa_tmp_t context
  Resolves: rhbz#1432115
  - Label /sysroot/ostree/deploy/rhel-atomic-host/* as root_t
  Resolves: rhbz#1428112


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-146
changelog:
  - Allow pki_tomcat_t domain read /etc/passwd.
  Resolves: rhbz#1436689
  - Allow tomcat_t domain read ipa_tmp_t files
  Resolves: rhbz#1436689
  - Label new path for ipa-otpd
  Resolves: rhbz#1446353
  - Allow radiusd_t domain stream connect to postgresql_t
  Resolves: rhbz#1446145
  - Allow rhsmcertd_t to execute hostname_exec_t binaries.
  Resolves: rhbz#1445494
  - Allow virtlogd to append nfs_t files when virt_use_nfs=1
  Resolves: rhbz#1402561


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-147
changelog:
  - Improve ipa_cert_filetrans_named_content() interface to also allow caller domain manage ipa_cert_t type.
  Resolves: rhbz#1436689


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-148
changelog:
  - Allow hypervkvp_t domain execute hostname
  Resolves: rhbz#1449064
  - Dontaudit sssd_selinux_manager_t use of net_admin capability
  Resolves: rhbz#1444955
  - Allow tomcat_t stream connect to pki_common_t
  Resolves: rhbz#1447436
  - Dontaudit xguest_t's attempts to listen to its tcp_socket
  - Allow sssd_selinux_manager_t to ioctl init_t sockets
  Resolves: rhbz#1436689
  - Allow <role>_su_t to create netlink_selinux_socket
  Resolves rhbz#1146987
  - Allow unconfined_t to module_load any file
  Resolves rhbz#1442994


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-149
changelog:
  - Update targetd policy to accommodate changes in the service
  Resolves: rhbz#1424621
  - Allow tomcat_domain connect to    * postgresql_port_t    * amqp_port_t Allow tomcat_domain read network sysctls
  Resolves: rhbz#1450819
  - Update virt_rw_stream_sockets_svirt() interface to allow confined users set socket options.
  Resolves: rhbz#1415841
  - Allow radius domain stream connec to postgresql
  Resolves: rhbz#1446145
  - Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
  Resolves: rhbz#1449977
  - Allow glusterd_t domain start ganesha service
  Resolves: rhbz#1448090
  - Made few cosmetic changes in sssd SELinux module
  Resolves: rhbz#1448060
  - sssd-kcm should not run as unconfined_service_t BZ(1447411)
  Resolves: rhbz#1448060
  - Add sssd_secrets labeling Also add named_filetrans interface to make sure all labels are correct
  Resolves: rhbz#1448056
  - Allow keepalived_t domain read usermodehelper_t
  Resolves: rhbz#1449769
  - Allow tomcat_t domain read pki_common_t files
  Resolves: rhbz#1447436
  - Add interface pki_read_common_files()
  Resolves: rhbz#1447436


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-150
changelog:
  - Allow tomcat domain read rpm_var_lib_t files Allow tomcat domain exec rpm_exec_t files Allow tomcat domain name connect on oracle_port_t Allow tomcat domain read cobbler_var_lib_t files.
  Resolves: rhbz#1451318
  - Allow sssd_t domain creating sock files labeled as sssd_var_run_t in /var/run/
  Resolves: rhbz#1448056 Resolves: rhbz#1448060
  - Allow tomcat_domain connect to    * postgresql_port_t    * amqp_port_t Allow tomcat_domain read network sysctls
  Resolves: rhbz#1450819
  - Make able deply overcloud via neutron_t to label nsfs as fs_t
  Resolves: rhbz#1373321
  - Allow netutils setpcap capability
  Resolves:1444438


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-151
changelog:
  - nmbd_t needs net_admin capability like smbd
  Resolves: rhbz#1431859
  - Dontaudit net_admin capability for domains postfix_master_t and postfix_qmgr_t
  Resolves: rhbz#1431859
  - Allow rngd domain read sysfs_t
  Resolves: rhbz#1451735
  - Add interface pki_manage_common_files()
  Resolves: rhbz#1447436
  - Allow tomcat_t domain to manage pki_common_t files and dirs
  Resolves: rhbz#1447436
  - Use stricter fc rules for sssd sockets in /var/run
  Resolves: rhbz#1448060
  - Allow certmonger reads httpd_config_t files
  Resolves: rhbz#1436689
  - Allow keepalived_t domain creating netlink_netfilter_socket.
  Resolves: rhbz#1451684
  - Allow tomcat domain read rpm_var_lib_t files Allow tomcat domain exec rpm_exec_t files Allow tomcat domain name connect on oracle_port_t Allow tomcat domain read cobbler_var_lib_t files.
  Resolves: rhbz#1451318
  - Make able deply overcloud via neutron_t to label nsfs as fs_t
  Resolves: rhbz#1373321


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-152
changelog:
  - Allow httpd_t reading kerberos kdc config files
  Resolves: rhbz#1452215
  - Allow tomcat_t domain connect to ibm_dt_2 tcp port.
  Resolves: rhbz#1447436
  - Allow stream connect to initrc_t domains
  Resolves: rhbz#1447436
  - Allow  dnsmasq_t domain to read systemd-resolved pid files.
  Resolves: rhbz#1453114
  - Allow tomcat domain name_bind on tcp bctp_port_t
  Resolves: rhbz#1451757
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1447669
  - Allow condor_master_t write to sysctl_net_t
  Resolves: rhbz#1277506
  - Allow nagios check disk plugin read /sys/kernel/config/
  Resolves: rhbz#1277718
  - Allow pcp_pmie_t domain execute systemctl binary
  Resolves: rhbz#1271998
  - Allow nagios to connect to stream sockets. Allow nagios start httpd via systemctl
  Resolves: rhbz#1247635
  - Label tcp/udp port 1792 as ibm_dt_2_port_t
  Resolves: rhbz#1447436
  - Add interface fs_read_configfs_dirs()
  - Add interface fs_read_configfs_files()
  - Fix systemd_resolved_read_pid interface
  - Add interface systemd_resolved_read_pid()
  Resolves: rhbz#1453114
  - Allow sshd_net_t domain read/write into crypto devices
  Resolves: rhbz#1452759
  - Label 8999 tcp/udp as bctp_port_t
  Resolves: rhbz#1451757


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-154
changelog:
  - Add few allow rules to ganesha module
  Resolves: rhbz#1448090
  - Allow condor_master_t to read sysctls.
  Resolves: rhbz#1277506
  - Add dac_override cap to ctdbd_t domain
  Resolves: rhbz#1435708
  - Label 8750 tcp/udp port as dey_keyneg_port_t
  Resolves: rhbz#1448090


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-155
changelog:
  - Create new interface: glusterd_read_lib_files()
  - Allow ganesha read glusterd lib files.
  - Allow ganesha read network sysctls
  Resolves: rhbz#1448090


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-156
changelog:
  - Add new boolean virt_use_glusterd
  Resolves: rhbz#1455994
  - Add capability sys_boot for sbd_t domain
  - Allow sbd_t domain to create rpc sysctls.
  Resolves: rhbz#1455631
  - Allow ganesha_t domain to manage glusterd_var_run_t pid files.
  Resolves: rhbz#1448090


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-157
changelog:
  - Allow tomcat to connect on all unreserved ports
  - Allow ganesha to connect to all rpc ports
  Resolves: rhbz#1448090
  - Update ganesha with another fixes.
  Resolves: rhbz#1448090
  - Update rpc_read_nfs_state_data() interface to allow read also lnk_files.
  Resolves: rhbz#1448090
  - virt_use_glusterd boolean should be in optional block Update ganesha module to allow create tmp files
  Resolves: rhbz#1448090
  - Hide broken symptoms when machine is configured with network bounding.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-158
changelog:
  - Allow iscsi domain load kernel module.
  Resolves: rhbz#1457874
  - Allow keepalived domain connect to squid tcp port
  Resolves: rhbz#1457455
  - Allow krb5kdc_t domain read realmd lib files.
  Resolves: rhbz#1436689
  - xdm_t should view kernel keys
  Resolves: rhbz#1432645


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-160
changelog:
  - Allow named_t to bind on udp 4321 port
  Resolves: rhbz#1312972
  - Allow systemd-sysctl cap. sys_ptrace
  Resolves: rhbz#1458999


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-163
changelog:
  - Allow sssd_t to read realmd lib files.
  Resolves: rhbz#1436689
  - Add permission open to files_read_inherited_tmp_files() interface
  Resolves: rhbz#1290633
  Resolves: rhbz#1457106


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-164
changelog:
  - Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
  Resolves: rhbz#1424621
  - Add interface lvm_manage_metadata
  Resolves: rhbz#1424621


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-166
changelog:
  - Add new boolean gluster_use_execmem
  Resolves: rhbz#1469027
  - Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
  Resolves: rhbz#1468581


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-170
changelog:
  - Add few rules to make working targetd daemon with SELinux
  Resolves: rhbz#1373860
  - Allow ipmievd_t domain to load kernel modules
  Resolves: rhbz#1441081
  - Allow logrotate to reload transient systemd unit
  Resolves: rhbz#1440515
  - Add certwatch_t domain dac_override and dac_read_search capabilities
  Resolves: rhbz#1422000
  - Allow postgrey to execute bin_t files and add postgrey into nsswitch_domain
  Resolves: rhbz#1412072
  - Allow nscd_t domain to search network sysctls
  Resolves: rhbz#1432361
  - Allow iscsid_t domain to read mount pid files
  Resolves: rhbz#1482097
  - Allow ksmtuned_t domain manage sysfs_t files/dirs
  Resolves: rhbz#1413865
  - Allow keepalived_t domain domtrans into iptables_t
  Resolves: rhbz#1477719
  - Allow rshd_t domain reads net sysctls
  Resolves: rhbz#1477908
  - Add interface seutil_dontaudit_read_module_store()
  - Update interface lvm_rw_pipes() by adding also open permission
  - Label /dev/clp device as vfio_device_t
  Resolves: rhbz#1477624
  - Allow ifconfig_t domain unmount fs_t
  Resolves: rhbz#1477445
  - Label /dev/gpiochip* devices as gpio_device_t
  Resolves: rhbz#1477618
  - Add interface  dev_manage_sysfs()
  Resolves: rhbz#1474989


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-171
changelog:
  - Allow targetd_t to create own tmp files.
  - Dontaudit targetd_t to exec rpm binary file.
  Resolves: rhbz#1373860
  Resolves: rhbz#1424621


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-173
changelog:
  - Allow tomcat to setsched 
  Resolves: rhbz#1492730
  - Fix rules blocking ipa-server upgrade process
  Resolves: rhbz#1478371
  - Add new boolean tomcat_read_rpm_db()
  Resolves: rhbz#1477887
  - Allow tomcat to connect on mysqld tcp ports
  - Add ctdbd_t domain sys_source capability and allow setrlimit
  Resolves: rhbz#1491235
  - Fix keepalived SELinux module
  - Allow automount domain to manage mount pid files
  Resolves: rhbz#1482381
  - Allow stunnel_t domain setsched
  Resolves: rhbz#1479383
  - Add keepalived domain setpgid capability
  Resolves: rhbz#1486638
  - Allow tomcat domain to connect to mssql port
  Resolves: rhbz#1484572
  - Remove snapperd_t from unconfined domaines
  Resolves: rhbz#1365555
  - Fix typo bug in apache module
  Resolves: rhbz#1397311
  - Dontaudit that system_mail_t is trying to read /root/ files
  Resolves: rhbz#1147945
  - Make working webadm_t userdomain
  Resolves: rhbz#1323792
  - Allow redis domain to execute shell scripts.
  Resolves: rhbz#1421326
  - Allow system_cronjob_t to create redhat-access-insights.log with var_log_t
  Resolves: rhbz#1473303
  - Add couple capabilities to keepalived domain and allow get attributes of all domains
  Resolves: rhbz#1429327
  - Allow dmidecode read rhsmcertd lock files
  Resolves: rhbz#1300799
  - Add new interface rhsmcertd_rw_lock_files()
  Resolves: rhbz#1300799
  - Label all plymouthd archives as plymouthd_var_log_t
  Resolves: rhbz#1478323
  - Allow cloud_init_t to dbus chat with systemd_timedated_t
  Resolves: rhbz#1440730
  - Allow logrotate_t to write to kmsg
  Resolves: rhbz#1397744
  - Add capability kill to rhsmcertd_t
  Resolves: rhbz#1398338
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464063
  - Allow winbind to manage smbd_tmp_t files
  Resolves: rhbz#1475566
  - Dontaudit that system_mail_t is trying to read /root/ files
  Resolves: rhbz#1147945
  - Make working webadm_t userdomain
  Resolves: rhbz#1323792
  - Allow redis domain to execute shell scripts.
  Resolves: rhbz#1421326
  - Allow system_cronjob_t to create redhat-access-insights.log with var_log_t
  Resolves: rhbz#1473303
  - Add couple capabilities to keepalived domain and allow get attributes of all domains
  Resolves: rhbz#1429327
  - Allow dmidecode read rhsmcertd lock files
  Resolves: rhbz#1300799
  - Add new interface rhsmcertd_rw_lock_files()
  Resolves: rhbz#1300799
  - Label all plymouthd archives as plymouthd_var_log_t
  Resolves: rhbz#1478323 
  - Allow cloud_init_t to dbus chat with systemd_timedated_t
  Resolves: rhbz#1440730
  - Allow logrotate_t to write to kmsg
  Resolves: rhbz#1397744
  - Add capability kill to rhsmcertd_t
  Resolves: rhbz#1398338
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464063
  - Allow winbind to manage smbd_tmp_t files
  Resolves: rhbz#1475566
  - Add interface systemd_tmpfiles_run
  - End of file cannot be in comment
  - Allow systemd-logind to use ypbind
  Resolves: rhbz#1479350
  - Add creating opasswd file with shadow_t SELinux label in auth_manage_shadow() interface
  Resolves: rhbz#1412838
  - Allow sysctl_irq_t assciate with proc_t
  Resolves: rhbz#1485909
  - Enable cgourp sec labeling
  Resolves: rhbz#1485947
  - Add cgroup_seclabel policycap.
  Resolves: rhbz#1485947
  - Allow sshd_t domain to send signull to xdm_t processes
  Resolves: rhbz#1448959
  - Allow updpwd_t domain auth file name trans
  Resolves: rhbz#1412838
  - Allow sysadm user to run systemd-tmpfiles
  Resolves: rbhz#1325364
  - Add support labeling for vmci and vsock device
  Resolves: rhbz#1451358
  - Add userdom_dontaudit_manage_admin_files() interface
  Resolves: rhbz#1323792
  - Allow iptables_t domain to read files with modules_conf_t label
  Resolves: rhbz#1373220
  - init: Add NoNewPerms support for systemd.
  Resolves: rhbz#1480518
  - Add nnp_nosuid_transition policycap and related class/perm definitions.
  Resolves: rhbz#1480518
  - refpolicy: Infiniband pkeys and endports
  Resolves: rhbz#1464484


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-174
changelog:
  - We should not ship selinux-policy with permissivedomains enabled.
  Resolves: rhbz#1494172
  - Fix order of installing selinux-policy-sandbox, because of depedencied in sandbox module, selinux-policy-targeted needs to be installed before selinux-policy-sandbox
  Resolves: rhbz#1492606


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-175
changelog:
  - Allow pegasus_openlmi_services_t to read generic certs
  Resolves: rhbz#1462292
  - Allow ganesha_t domain to read random device
  Resolves: rhbz#1494382
  - Allow zabbix_t domain to change its resource limits
  Resolves: rhbz:#1504074
  - Add new boolean nagios_use_nfs
  Resolves: rhbz#1504826
  - Allow system_mail_t to search network sysctls
  Resolves: rhbz#1505779
  - Add samba_manage_var_dirs() interface
  - Fix typo bug in virt filecontext file
  - Allow nagios_script_t to read nagios_spool_t files
  Resolves: rhbz#1426824
  - Allow samba to manage var dirs/files
  Resolves: rhbz#1415088
  - Allow sbd_t to create own sbd_tmpfs_t dirs/files
  Resolves: rhbz#1380795
  - Allow firewalld and networkmanager to chat with hypervkvp via dbus
  Resolves: rhbz#1377276
  - Allow dmidecode to read rhsmcert_log_t files
  Resolves: rhbz#1300799
  - Allow mail system to connect mariadb sockets.
  Resolves: rhbz#1368642
  - Allow logrotate_t to change passwd and reloead services
  Resolves: rhbz#1450789
  - Allow mail system to connect mariadb sockets.
  Resolves: rhbz#1368642
  - Allow logrotate_t to change passwd and reloead services
  Resolves: rhbz#1450789
  - Allow pegasus_openlmi_services_t to read generic certs
  Resolves: rhbz#1462292
  - Allow ganesha_t domain to read random device
  Resolves: rhbz#1494382
  - Allow zabbix_t domain to change its resource limits
  Resolves: rhbz:#1504074
  - Add new boolean nagios_use_nfs
  Resolves: rhbz#1504826
  - Allow system_mail_t to search network sysctls
  Resolves: rhbz#1505779
  - Add samba_manage_var_dirs() interface
  - Fix typo bug in virt filecontext file
  - Allow nagios_script_t to read nagios_spool_t files
  Resolves: rhbz#1426824
  - Allow samba to manage var dirs/files
  Resolves: rhbz#1415088
  - Allow sbd_t to create own sbd_tmpfs_t dirs/files
  Resolves: rhbz#1380795
  - Allow firewalld and networkmanager to chat with hypervkvp via dbus
  Resolves: rhbz#1377276
  - Allow dmidecode to read rhsmcert_log_t files
  Resolves: rhbz#1300799
  - Allow mail system to connect mariadb sockets.
  Resolves: rhbz#1368642
  - Allow logrotate_t to change passwd and reloead services
  Resolves: rhbz#1450789
  - Allow chronyd_t do request kernel module and block_suspend capability
  Resolves: rhbz#1350765
  - Allow system_cronjob_t to create /var/lib/letsencrypt dir with right label
  Resolves: rhbz#1447278
  - Allow httpd_t also read httpd_user_content_type dirs when httpd_enable_homedirs is enables
  Resolves: rhbz#1491994
  - Allow svnserve to use kerberos
  Resolves: rhbz#1475271
  - Allow conman to use ptmx. Add conman_use_nfs boolean
  Resolves: rhbz#1377915
  - Add nnp transition for services using: NoNewPrivileges systemd security feature
  Resolves: rhbz#1311430
  - Add SELinux support for chronyc
  Resolves: rhbz#1470150
  - Add dac_read_search capability to openvswitch_t domain
  Resolves: rhbz#1501336
  - Allow svnserve to manage own svnserve_log_t files/dirs
  Resolves: rhbz#1480741
  - Allow keepalived_t to search network sysctls
  Resolves: rhbz#1477542
  - Allow puppetagent_t domain dbus chat with rhsmcertd_t domain
  Resolves: rhbz#1446777
  - Add dccp_socket into socker_class_set subset
  Resolves: rhbz#1459941
  - Allow iptables_t to run setfiles to restore context on system
  Resolves: rhbz#1489118
  - Label 20514 tcp/udp ports as syslogd_port_t Label 10514 tcp/udp portas as syslog_tls_port_t
  Resolves: rhbz:#1411400
  - Make nnp transition Active
  Resolves: rhbz#1480518
  - Label tcp 51954 as isns_port_t
  Resolves: rhbz#1390208
  - Add dac_read_search capability chkpwd_t
  Resolves: rhbz#1376991
  - Add support for running certbot(letsencrypt) in crontab
  Resolves: rhbz#1447278
  - Add init_nnp_daemon_domain interface
  - Allow xdm_t to gettattr /dev/loop-control device
  Resolves: rhbz#1462925
  - Allow nnp trasintion for unconfined_service_t
  Resolves: rhbz#1311430
  - Allow unpriv user domains and unconfined_service_t to use chronyc
  Resolves: rhbz#1470150
  - Allow iptables to exec plymouth.
  Resolves: rhbz#1480374
  - Fix typo in fs_unmount_tracefs interface.
  Resolves: rhbz#1371057
  - Label postgresql-check-db-dir as postgresql_exec_t
  Resolves: rhbz#1490956


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-176
changelog:
  - Allow chronyc_t domain to use user_ptys
  Resolves: rhbz#1470150
  - allow ptp4l to read /proc/net/unix file
  - Allow conmand to use usb ttys.
  Resolves: rhbz#1505121
  - Label all files /var/log/opensm.* as opensm_log_t because opensm creating new log files with name opensm-subnet.lst
  Resolves: rhbz#1505845
  - Allow chronyd daemon to execute chronyc.
  Resolves: rhbz#1508486
  - Allow firewalld exec ldconfig.
  Resolves: rhbz#1375576
  - Allow mozilla_plugin_t domain to dbus chat with devicekit
  Resolves: rhbz#1460477
  - Dontaudit leaked logwatch pipes
  Resolves: rhbz#1450119
  - Label /usr/bin/VGAuthService as vmtools_exec_t to confine this daemon.
  Resolves: rhbz#1507048
  - Allow httpd_t domain to execute hugetlbfs_t files
  Resolves: rhbz#1507682
  - Allow nfsd_t domain to read configfs_t files/dirs
  Resolves: rhbz#1439442
  - Hide all allow rules with ptrace inside deny_ptrace boolean
  Resolves: rhbz#1421075
  - Allow tgtd_t domain to read generic certs
  Resolves: rhbz#1438532
  - Allow ptp4l to send msgs via dgram socket to unprivileged user domains
  Resolves: rhbz#1429853
  - Allow dirsrv_snmp_t to use inherited user ptys and read system state
  Resolves: rhbz#1428568
  - Allow glusterd_t domain to create own tmpfs dirs/files
  Resolves: rhbz#1411310
  - Allow keepalived stream connect to snmp
  Resolves: rhbz#1401556
  - After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy
  Resolves: rhbz#1507089


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-177
changelog:
  - Allow jabber domains to connect to postgresql ports
  Resolves: rhbz#1438489
  - Dontaudit accountsd domain creating dirs in /root
  Resolves: rhbz#1456760 
  - Dontaudit slapd_t to block suspend system
  Resolves: rhbz: #1479759 
  - Allow spamc_t to stream connect to cyrus.
  Resolves: rhbz#1382955 
  - allow imapd to read /proc/net/unix file
  Resolves: rhbz#1393030 
  - Allow passenger to connect to mysqld_port_t
  Resolves: rhbz#1433464


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-178
changelog:
  - Add dependency for policycoreutils-2.5.18 becuase of new cgroup_seclabel policy capability
  Resolves: rhbz#1510145


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-179
changelog:
  - Allow ldap_t domain to manage also slapd_tmp_t lnk files
  Resolves: rhbz#1510883
  - Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
  Resolves: rhbz:#1508360
  - Add dac_read_search and dac_override capabilities to ganesha
  Resolves: rhbz#1483451


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-181
changelog:
  - Allow tomcat_t to manage pki_tomcat pid files
  Resolves: rhbz#1478371
  - networkmanager: allow talking to openvswitch
  Resolves: rhbz#1517247
  - Allow networkmanager_t and opensm_t to manage subned endports for IPoIB VLANs
  Resolves: rhbz#1517895
  - Allow domains networkmanager_t and opensm_t to control IPoIB VLANs
  Resolves: rhbz#1517744
  - Fix typo in guest interface file
  Resolves: rhbz#1468254
  - Allow isnsd_t domain to accept tcp connections.
  Resolves: rhbz#1390208


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-182
changelog:
  - Label /dev/drm_dp_aux* as xserver_misc_device_t
  Resolves: rhbz#1520897
  - Allow sysadm_t to run puppet_exec_t binaries as puppet_t
  Resolves: rhbz#1255745


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-184
changelog:
  - Allow chronyc_t domain to manage chronyd_keys_t files.
  Resolves: rhbz#1530525
  - Make virtlog_t domain system dbus client
  Resolves: rhbz#1481109
  - Update openvswitch SELinux module
  Resolves: rhbz#1482682
  - Allow virtd_t to create also sock_files with label virt_var_run_t
  Resolves: rhbz#1484075


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-185
changelog:
  - Allow vmtools_t domain creating vmware_log_t files
  Resolves: rhbz#1507048
  - Allow openvswitch_t domain to acces infiniband devices
  Resolves: rhbz#1532705


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-186
changelog:
  - Allow virt_domains to acces infiniband pkeys.
  Resolves: rhbz#1533183
  - Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
  Resolves: rhbz#1535133
  - Allow audisp_remote_t domain write to files on all levels
  Resolves: rhbz#1534924


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-187
changelog:
  - Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
  Resolves: rhbz#1535196
  - Add new interface ppp_filetrans_named_content()
  Resolves: rhbz#1530601
  - Allow keepalived_t read sysctl_net_t files
  Resolves: rhbz#1477542
  - Allow puppetmaster_t domtran to puppetagent_t
  Resolves: rhbz#1376893
  - Allow kdump_t domain to read kernel ring buffer
  Resolves: rhbz#1540004
  - Allow ipsec_t domain to exec ifconfig_exec_t binaries.
  Resolves: rhbz#1539416
  - Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
  Resolves: rhbz#1530601
  - Allow updpwd_t domain to create files in /etc with shadow_t label
  Resolves: rhbz#1412838
  - Allow iptables sysctl load list support with SELinux enforced
  Resolves: rhbz#1535572


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-188
changelog:
  - Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
  Resolves: rhbz#1540702
  - Allow keepalived_t domain getattr proc filesystem
  Resolves: rhbz#1477542
  - Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
  Resolves: rhbz#1538544
  - Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
  Resolves: rhbz:#1539416
  - Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
  Resolves: rhbz#1479350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-189
changelog:
  - Allow dirsrv_t domain to create tmp link files
  Resolves: rhbz#1536011
  - Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
  Resolves: rhbz#1428568
  - Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
  - Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
  Resolves: rhbz#1539416


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-190
changelog:
  - Allow openvswitch domain to manage svirt_tmp_t sock files
  Resolves: rhbz#1540702
  - Fix broken systemd_tmpfiles_run() interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-192
changelog:
  - Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
  Resolves: rhbz#1546721


author: Dominic Cleal <dcleal@redhat.com> 2.3.5-1
changelog:
  - Rebase to addressable 2.3.5 (dcleal@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 2.3.6-5
changelog:
  - Rebuild for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 0.7.0-1
changelog:
  - Update algebrick to 0.7.0 (inecas@redhat.com)
  - Add full rubygems.org source URL (dcleal@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.7.3-5
changelog:
  - Rebuild for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 2.0.0-3
changelog:
  - Converted to tfm SCL (dcleal@redhat.com)
  - Fixes #9703 - change %{dist} to %{?dist} (jmontleo@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 3.0.0-2
changelog:
  - Rebuild for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Lukas Zapletal <lzap+git@redhat.com> 0.0.8-4
changelog:
  - Fixed dependency in the -doc subpackage (lzap+git@redhat.com)
  - Fixed doc subpackages (lzap+git@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.0.9-1
changelog:
  - Packaged /doc (martin.bacovsky@gmail.com)
  - Update rubygem-apipie-bindings to 0.0.9 (martin.bacovsky@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 0.0.11-1
changelog:
  - Update rubygem-apipie-bindings to 0.0.11 (martin.bacovsky@gmail.com)
  - Remove unused fastercsv dependency (dcleal@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 0.0.4-5
changelog:
  - Make apipie-params depend on rake (#15342, aruzicka@redhat.com)
  - Modernise spec file, correct license/URL (dominic@cleal.org)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.0.5-2
changelog:
  - Rebuild for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Pavel Pokorný <pajkycz@gmail.com> 0.0.9-1
changelog:
  - New version of apipie-rails gem (pajkycz@gmail.com)
  - fixed client generator
  - resource level error descriptions
  - response supported formats


author: Miroslav Suchý <msuchy@redhat.com> 0.0.11-3
changelog:
  - summary should not end with dot (msuchy@redhat.com)
  - fix spelling (msuchy@redhat.com)
  - do not package Gemfile.lock (msuchy@redhat.com)


author: Ivan Necas <inecas@redhat.com> 0.0.18-1
changelog:
  - param_group and def_param_group keywords
  - :action_aware options for reusing param groups for create/update actions
  - support for multiple see links at action and ability to provide
    description of see links


author: Lukas Zapletal <lzap+git@redhat.com> 0.0.18-4
changelog:
  - fixing ruby193 scl package (lzap+git@redhat.com)
  - require ruby193-build for tagging (msuchy@redhat.com)


author: Ivan Necas <inecas@redhat.com> 0.0.21-1
changelog:
  - Use new version of apipie-rails - needed by the Foreman (inecas@redhat.com)
  - remove empty tito.props and definition which are duplicate with default from
    rel-eng/tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.3.5-1
changelog:
  - Update apipie-rails to 0.3.5 (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Daniel Lobato Garcia <me@daniellobato.me> 0.5.4-1
changelog:
  - Update apipie-rails to 0.5.4 (ares@users.noreply.github.com)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Daniel Lobato Garcia <me@daniellobato.me> 0.5.6-1
changelog:
  - Update apipie-rails to 0.5.6 (pcreech@redhat.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Dominic Cleal <dcleal@redhat.com> 4.2.0-1
changelog:
  - Update audited to 4.2.0 (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Sam Kottler <shk@redhat.com> 1.0.2-9
changelog:
  - Make the spec work on fedora + RHEL + scl (shk@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 1.7.0-1
changelog:
  - Bump rubygem-awesome_print to 1.7.0 (akofink@redhat.com)
  - Remove unused non-SCL gem (dominic@cleal.org)


author: Dominic Cleal <dcleal@redhat.com> 3.0.3.0-3
changelog:
  - Replace tfm-rubygem-sass with ror41-rubygem-sass (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Ivan Ne?as <inecas@redhat.com> 0.1.0-1
changelog:
  - Update concurrent-ruby-edge to 0.1.0 (inecas@redhat.com)
  - Automatic commit of package [rubygem-concurrent-ruby-edge] minor release
    [0.1.0.pre3-1]. (dcleal@redhat.com)
  - Initial build of concurrent-ruby library (inecas@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.2.0-1
changelog:
  - Update concurrent-ruby-edge to 0.2.0 (stbenjam@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Eric D. Helms <ericdhelms@gmail.com> 0.2.4-1
changelog:
  - Bump concurrent-ruby-edge to 0.2.4 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 1.4.7-2
changelog:
  - Rebuild packages for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 1.2.3-4
changelog:
  - Rebuild packages for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Ivan Ne?as <inecas@redhat.com> 0.8.2-1
changelog:
  - Update dynflow to 0.8.2 (inecas@redhat.com)
  - Automatic commit of package [rubygem-dynflow] minor release [0.8.1-1].
    (dcleal@redhat.com)
  - Update dynflow to 0.8.1 (inecas@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.8.9-1
changelog:
  - Update dynflow to 0.8.9 (stbenjam@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)
  - Add foremandist to more plugins (dcleal@redhat.com)


author: Daniel Lobato Garcia <me@daniellobato.me> 0.8.30-1
changelog:
  - Update Dynflow to 0.8.30 (inecas@redhat.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.8-1
changelog:
  - Update to version 0.7.8.
  - Replaced defines with more appropriate globals.
  - Added Build dependency on rubygem-eventmachine.
  - Fixed running tests for the new version.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.14.1-1
changelog:
  - Update to Excon 0.14.1
  - Removed no longer needed patch for downgrading dependencies.
  - Remove newly bundled certificates and link to system ones.


author: Dominic Cleal <dcleal@redhat.com> 0.23.0-1
changelog:
  - Rebase to excon 0.23.0 (dcleal@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 2.4.0-4
changelog:
  - Disable debuginfo package (dominic@cleal.org)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.9.1-5
changelog:
  - More rebuilds for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Refs #18123 revert "change multipart-post dep to RPM name from virtual"
    (github@kohlvanwijngaarden.nl)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Ivan Necas <inecas@redhat.com> 1.10.1-9
changelog:
  - update dep specs (inecas@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 1.29.0-1
changelog:
  - Update fog to 1.29.0 (dcleal@redhat.com)
  - Fixes #9703 - change %{dist} to %{?dist} (jmontleo@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 1.40.0-1
changelog:
  - Update fog to 1.40.0 (dominic@cleal.org)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 1.42.0-1
changelog:
  - Update fog to 1.42 (oprazak@redhat.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Dominic Cleal <dcleal@redhat.com> 0.4.0-1
changelog:
  - Update fog-aws to 0.4.0 (dcleal@redhat.com)
  - Fixes #9703 - change %{dist} to %{?dist} (jmontleo@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 1.32.0-1
changelog:
  - Update fog-core to 1.32.0 (dcleal@redhat.com)
  - Fixes #9703 - change %{dist} to %{?dist} (jmontleo@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.3.0-2
changelog:
  - More rebuilds for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Fix gem to be referenced by git-annex (dominic@cleal.org)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.1.0-3
changelog:
  - More rebuilds for Rails 5.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 1.0.1-1
changelog:
  - Update fog-json to 1.0.1 (dcleal@redhat.com)
  - Fixes #9703 - change %{dist} to %{?dist} (jmontleo@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 0.4.0-1
changelog:
  - Update fog-libvirt to 0.4.0 (dominic@cleal.org)
  - Use rubygem-ruby-libvirt on Fedora, replaces ruby-libvirt in F23+
    (dominic@cleal.org)


author: Daniel Lobato Garcia <me@daniellobato.me> 1.11.3-1
changelog:
  - Update fog-vsphere to 1.11.3 (me@daniellobato.me)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Dominic Cleal <dcleal@redhat.com> 0.1.2-1
changelog:
  - Update fog-xml to 0.1.2 (dcleal@redhat.com)
  - Fixes #9703 - change %{dist} to %{?dist} (jmontleo@redhat.com)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.2.1-1
changelog:
  - Update to 0.2.1
  - Added check section
  - Introduced doc subpackage
  - Added tests patch for the case when output is redirected to a file (would fail in mock and koji)


author: Dominic Cleal <dcleal@redhat.com> 5.1.0-1
changelog:
  - Update friendly_id to 5.1.0 (dcleal@redhat.com)
  - Update dependencies to ror SCL (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Scott Seago <sseago@redhat.com> - 1.93.0-2
changelog:
  - Initial package (of rubygem-gettext)
    Set at release 2 to supercede ruby-gettext-package-1.93.0-1


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Now require rubygem(locale)
  - Rescue NoMethodError on gem call on gettext.rb
  - Reintroduce 4 args bindtextdomain() compatibility


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.0.2-6
changelog:
  - Patch from upstream git to remove memoization with
    coordination with rubygem-locale side change
  - Patch from upstream git to fix test failure on arm


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 3.1.4-7
changelog:
  - More rebuilds for Rails 5.1 (ericdhelms@gmail.com)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 0.9.4-1
changelog:
  - remove empty tito.props and definition which are duplicate with default from
    rel-eng/tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 1.0.3-1
changelog:
  - Update gettext_i18n_rails_js to 1.0.3 (dcleal@redhat.com)
  - Update dependencies to ror SCL (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Sam Kottler <shk@redhat.com> 0.0.2-14
changelog:
  - Add multi_json dependency to hammer and fix gem_dir (shk@redhat.com)
  - Fix changelog (shk@redhat.com)


author: Sam Kottler <shk@redhat.com> 0.0.3-2
changelog:
  - Add configuration example to packaged files (shk@redhat.com)
  - Fix readme path (shk@redhat.com)
  - Add docs and other files that are new in the 0.0.3 release (shk@redhat.com)
  - Add docs and other files that are new in the 0.0.3 release (shk@redhat.com)
  - Bump hammer_cli version to 0.0.3 (shk@redhat.com)


author: Sam Kottler <shk@redhat.com> 0.0.3-3
changelog:
  - Fix typo in macro (shk@redhat.com)
  - Use macros provided by rubygems-devel on Fedora (shk@redhat.com)


author: Martin Ba?ovský <martin.bacovsky@gmail.com> 0.1.0-1
changelog:
  - Bump to 0.1.0 (martin.bacovsky@gmail.com)
  - hammer_cli - new config location and dependencies (tstrachota@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.1.4-1
changelog:
  - Update hammer_cli to 0.1.4 (martin.bacovsky@gmail.com)
  - Added rb-readline dependency to rubygem-hammer_cli
    (martin.bacovsky@gmail.com)
  - Refresh Hammer cli_config file (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.2.0-1
changelog:
  - Update hammer_cli to 0.2.0 (dcleal@redhat.com)
  - refs #10154 - require locale 2.0.6 (dcleal@redhat.com)
  - Refresh hammer-cli dep versions (dcleal@redhat.com)
  - refs #8829 - use config/ template from gem (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.3.0-1
changelog:
  - Update hammer_cli to 0.3.0 (dcleal@redhat.com)
  - fixes #8979 - convert hammer packages to SCL (dcleal@redhat.com)
  - Require clamp >=1.0.0 (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.3.0-2
changelog:
  - Use tfm-ruby in shebang line (dcleal@redhat.com)
  - Converted to tfm SCL (dcleal@redhat.com)
  - Increase range of non-SCL obsoletes to cover 1.9 versions (dcleal@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 0.8.0-1
changelog:
  - Update hammer_cli to 0.8.0 (dominic@cleal.org)
  - Package man page from gem into mandir (#7453, dominic@cleal.org)


author: Eric D. Helms <ericdhelms@gmail.com> 0.10.0-1
changelog:
  - Update hammer_cli to 0.10.0 (tstrachota@redhat.com)
  - Add LICENSE file, clarify doc/license tags (dominic@cleal.org)
  - Remove table_print (dominic@cleal.org)


author: Dominic Cleal <dominic@cleal.org> 0.10.1-1
changelog:
  - Update hammer_cli to 0.10.1 (dominic@cleal.org)
  - refs #19083 - require apipie-bindings >= 0.2.0 (dominic@cleal.org)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.11.0-2
changelog:
  - More rebuilds for Rails 5.1 (ericdhelms@gmail.com)
  - Add rubygem-unicode (github@kohlvanwijngaarden.nl)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.12.0-1
changelog:
  - Update rubygem-hammer_cli to 0.12.0 (martin.bacovsky@gmail.com)
  - Restructure foreman packages to prepare for obal (pcreech@redhat.com)


author: Martin Ba?ovský <mbacovsk@redhat.com> 0.0.7-1
changelog:
  - Bumped to 0.0.7 (mbacovsk@redhat.com)
  - Fixed default config file
  - remove deps on awesome_print and terminal-table


author: Dominic Cleal <dcleal@redhat.com> 0.0.9-2
changelog:
  - Mark cli_config.yml as a config file (dcleal@redhat.com)
  - Update default config for Foreman installation and non-root users
    (dcleal@redhat.com)


author: Martin Ba?ovský <martin.bacovsky@gmail.com> 0.1.0-1
changelog:
  - Bump to 0.1.0 (martin.bacovsky@gmail.com)
  - hammer_cli_foreman - new config location (tstrachota@redhat.com)


author: Martin Ba?ovský <martin.bacovsky@gmail.com> 0.1.1-1
changelog:
  - Rebased hammer_cli_foreman to 0.1.1 (martin.bacovsky@gmail.com)
  - Removed credentials from config file (martin.bacovsky@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 0.2.0-1
changelog:
  - Update hammer_cli_foreman to 0.2.0 (dcleal@redhat.com)
  - refs #8829 - use config/ template from gem (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.3.0-1
changelog:
  - Update hammer_cli_foreman to 0.3.0 (dcleal@redhat.com)
  - fixes #8979 - convert hammer packages to SCL (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.3.0-2
changelog:
  - Converted to tfm SCL (dcleal@redhat.com)
  - Increase range of non-SCL obsoletes to cover 1.9 versions (dcleal@redhat.com)


author: Eric D. Helms <ericdhelms@gmail.com> 0.10.0-1
changelog:
  - Update hammer_cli_foreman to 0.10.0 (tstrachota@redhat.com)
  - Add LICENSE file, clarify doc/license tags (dominic@cleal.org)


author: Dominic Cleal <dominic@cleal.org> 0.10.1-1
changelog:
  - Update hammer_cli_foreman to 0.10.1 (dominic@cleal.org)
  - refs #19358 - require rest-client >= 1.8.0 (dominic@cleal.org)
  - refs #19362 - require apipie-bindings >= 0.2.0 (dominic@cleal.org)


author: Daniel Lobato Garcia <me@daniellobato.me> 0.12.0-1
changelog:
  - Update rubygem-hammer_cli_foreman to 0.12.0 (martin.bacovsky@gmail.com)
  - Restructure foreman packages to prepare for obal (pcreech@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.7.0-6
changelog:
  - change ruby(abi) to ruby(release) for F19+ (dcleal@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.7.0-7
changelog:
  - Converted to tfm SCL (dcleal@redhat.com)
  - Fixes #9703 - change %{dist} to %{?dist} (jmontleo@redhat.com)
  - Add full rubygems.org source URL (dcleal@redhat.com)


author: Jonas Courteau <rpms@courteau.org> - 0.8.0-1
changelog:
  - Initial package
  - Submitted https://github.com/bluemonk/ipaddress/issues/23 upstream to remove extra file from gem


author: Jordan OMara <jomara@redhat.com> 0.0.4-1
changelog:
  - rdoc/task -> rake/rdoctask for older rpm support (jomara@redhat.com)
  - Updating readme (jomara@redhat.com)


author: Jordan OMara <jomara@redhat.com> 0.0.6-1
changelog:
  - Adding some heavy recursive tests (jomara@redhat.com)
  - Updating README to fix formatting (jsomara@gmail.com)
  - Adding anon_queries to AD config; Fixing AD recursive group walk
    (jomara@redhat.com)
  - Fixing a posix merge_filter bug. NEEDS SOME TESTS (jomara@redhat.com)
  - Fixing a few minor bugs (jomara@redhat.com)


author: Jordan OMara <jomara@redhat.com> 0.1.0-1
changelog:
  - Adding the rest of free ipa support - testing, configuration
    (jomara@redhat.com)
  - Adding FreeIPA support (jomara@redhat.com)
  - Fix for empty set return for missing ldap user (jomara@redhat.com)
  - Removing files that shouldnt have been committed (jomara@redhat.com)


author: Jordan OMara <jomara@redhat.com> 0.1.1-1
changelog:
  - A few minor IPA bugs (jomara@redhat.com)
  - Adding .rvmrc; unit tests only support 1.9.3 (jomara@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.4.7-2
changelog:
  - Final set of rebuilds (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 2.0.9-9
changelog:
  - Fix checks against scl name, optimise rhel/empty SCL conditional
    (dcleal@redhat.com)
  - Converted to tfm SCL (dcleal@redhat.com)
  - Add full rubygems.org source URL (dcleal@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 2.0.9-12
changelog:
  - Final set of rebuilds (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)
  - Switch to using gem_install macro (ericdhelms@gmail.com)
  - Remove unused non-SCL awesome_print, locale gems (dominic@cleal.org)


author: Dominic Cleal <dcleal@redhat.com> 0.12.0-2
changelog:
  - Fix build errors and modernise specs (dcleal@redhat.com)
  - Update dependencies to ror SCL (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 1.1.0-5
changelog:
  - Update dependencies to ror SCL (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)
  - Fix build errors and modernise specs (dcleal@redhat.com)


author: Shreyank Gupta <sgupta@redhat.com> - 2.0.23-2
changelog:
  - Using %exclude for setup.rb
  - Keeping net-ssh.gemspec for tests
  - Moved file-not-utf8 correction to before %check section


author: Shreyank Gupta <sgupta@redhat.com> - 2.0.23-3
changelog:
  - test command from test/README.txt
  - Remove gem "test-unit" line
  - Removed Requires rubygem(rake)
  - BuildRequires/Requires: rubygem(mocha) for tests


author: Eric D. Helms <ericdhelms@gmail.com> 4.0.1-2
changelog:
  - Fixes #20018 - Bump release version (aruzicka@redhat.com)
  - Fixes #20018 - Backport ProxyCommand patch for net-ssh (aruzicka@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 0.11.0-1
changelog:
  - Update netrc to 0.11.0 (dominic@cleal.org)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Lukas Zapletal <lzap+git@redhat.com> 0.4.7-5
changelog:
  - rubygem-oauth works for non-SCL as well (lzap+git@redhat.com)
  - remove empty tito.props and definition which are duplicate with default from
    rel-eng/tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.5.4-1
changelog:
  - Update oauth to 0.5.4 (oprazak@redhat.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Miroslav Suchý <msuchy@redhat.com> 0.8.6-3
changelog:
  - 998459 - move README and LICENSE to main package
  - 998459 - remove excessive cp
  - 998459 - use virtual requires
  - 998459 - remove ruby mri requires


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.8.7-7
changelog:
  - Final set of rebuilds (ericdhelms@gmail.com)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 4.0.18-9.3
changelog:
  - Replace native library loading patch, force rubygems to add 'exts' to load
    path instead (dcleal@redhat.com)
  - Fix ruby_libdir for Ruby 1.8 builds (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 4.0.18-9.4
changelog:
  - Keep passenger_native_support in native/ dir for RHSCL compatibility
  - Fix extdir on Ruby 1.8 (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 0.15.1-1
changelog:
  - Update pg to 0.15.1 (dcleal@redhat.com)
  - Update dependencies to ror SCL (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)
  - Fix build errors and modernise spec (dcleal@redhat.com)


author: Daniel Lobato Garcia <me@daniellobato.me> 0.21.0-1
changelog:
  - Update pg to 0.21 (eric.d.helms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Dominic Cleal <dcleal@redhat.com> 1.0.1-1
changelog:
  - Update po_to_json to 1.0.1 (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Eric D. Helms <ericdhelms@gmail.com> 0.13.1-1
changelog:
  - Bump rubygem-rabl to 0.13.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 4.0.7-1
changelog:
  - Update rails-i18n to 4.0.7 (dcleal@redhat.com)
  - Update dependencies to ror SCL (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Eric D. Helms <ericdhelms@gmail.com> 5.0.4-1
changelog:
  - Bump rails-i18n to 5.0.4 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)


author: Dominic Cleal <dcleal@redhat.com> 0.0.20-1
changelog:
  - rebase to rbovirt-0.0.20.gem (dcleal@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Daniel Lobato Garcia <me@daniellobato.me> 0.1.4-1
changelog:
  - Update rbovirt to 0.1.4 (inecas@redhat.com)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 0.1.4-2
changelog:
  - Final set of rebuilds (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Automatic commit of package [rubygem-rbovirt] minor release [0.1.4-1.fm1_16].
    (me@daniellobato.me)
  - Update rbovirt to 0.1.4 (inecas@redhat.com)


author: Francesco Vollero <fvollero@redhat.com> - 1.2.3-2
changelog:
  - Fix License to MIT
  - Removed the >= 0 versions from rubygems Requires
  - Add Requires and BuildRequires: ruby(abi) = 1.8
  - Executed the test suite.


author: Dominic Cleal <dcleal@redhat.com> 1.6.0-1
changelog:
  - Rebase to rbvmomi 1.6.0 (dcleal@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Eric D. Helms <ericdhelms@gmail.com> 2.4.0-1
changelog:
  - Bump rubygem-responders to 2.4.0 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 3.2.2-1
changelog:
  - Bump rubygem-roadie to 3.2.2 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Eric D. Helms <ericdhelms@gmail.com> 1.2.1-1
changelog:
  - Bump roadie-rails to 1.2.1 (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Sam Kottler <shk@redhat.com> 0.4.0-9
changelog:
  - Remove requires: libvirt (shk@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Matthew Kent <mkent@magoazul.com> - 1.2.4-2
changelog:
  - Move pt_testcase.rb to the build stage so it's included in the rpm (#541512).
  - Drop version requirements for sexp_processor and ruby_parser as they are new
    packages (#541512).


author: Matthew Kent <mkent@magoazul.com> - 2.0.4-2
changelog:
  - Move pt_testcase.rb to the build stage so it's included in the rpm (#541491).
  - Drop version requirements for sexp_processor as it is a new package
    (#541491).
  - Exclude gauntlet_rubyparser.rb as it introduces a circular dependency
    (#541491).


author: Miroslav Suchý <msuchy@redhat.com> 3.1.1-2
changelog:
  - spec2scl -i rubygem-ruby_parser.spec (msuchy@redhat.com)
  - rebase to ruby_parser-3.1.1.gem from Fedora (msuchy@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 1.2.0-5
changelog:
  - change ruby(abi) to ruby(release) for F19+ (dcleal@redhat.com)
  - remove unused BRs (dcleal@redhat.com)
  - delete all zero sized tito.props (msuchy@redhat.com)
  - with recent tito you do not need SCL meta package (msuchy@redhat.com)


author: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl> 1.3.2-2
changelog:
  - Final set of rebuilds (ericdhelms@gmail.com)
  - Use HTTPS URLs for github and rubygems (ewoud@kohlvanwijngaarden.nl)
  - Set proper download URLs for rubygems (komidore64@gmail.com)
  - Update safemode to 1.3.2 (tbrisker@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.3.7-1
changelog:
  - edit rubygem-scoped_search.spec according guidelines (msuchy@redhat.com)
  - import rubygem-scoped_search.spec from foreman-rpms (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.3.7-2
changelog:
  - fix filelist (msuchy@redhat.com)
  - create doc subpackage (msuchy@redhat.com)
  - fix requirements (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.3.7-6
changelog:
  - fix spelling error (msuchy@redhat.com)
  - module scoped_search.rb should not be executable (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.3.7-7
changelog:
  - 847504 - remove cached gem (msuchy@redhat.com)
  - 847504 - correctly use dist tag (msuchy@redhat.com)
  - 847504 - rewrap description (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.3.7-8
changelog:
  - 847504 - put in front of chmod link to github issue (msuchy@redhat.com)
  - 847504 - fix typo in summary (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.3.7-9
changelog:
  - test suite is failing on F17 a lot - disable for now (msuchy@redhat.com)
  - 847504 - use test suite (msuchy@redhat.com)
  - 847504 - remove dot files in %install section (msuchy@redhat.com)
  - 847504 - use macro in SOURCE0 (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.4.0-2
changelog:
  - do not run test, because it is not working (msuchy@redhat.com)
  - disable testing on other backend but sqllite (msuchy@redhat.com)
  - update to recent scoped_search-2.4.0.gem (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.4.1-1
changelog:
  - rebase to scoped_search-2.4.1 (msuchy@redhat.com)
  - require ruby193-build for tagging (msuchy@redhat.com)


author: Daniel Lobato Garcia <me@daniellobato.me> 4.1.2-1
changelog:
  - Update scoped_search to 0.4.2 (ares@users.noreply.github.com)
  - Set proper download URLs for rubygems (komidore64@gmail.com)


author: Dominic Cleal <dominic@cleal.org> 1.9.0-1
changelog:
  - Update sshkey to 1.9.0 (dominic@cleal.org)
  - Switch to using gem_install macro (ericdhelms@gmail.com)


author: Dominic Cleal <dcleal@redhat.com> 2.0-5
changelog:
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)
  - Fix build errors and modernise specs (dcleal@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 0.1.3-5
changelog:
  - Re-introduce unf, modernise spec (dominic@cleal.org)
  - Add full rubygems.org source URL (dcleal@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 0.0.6-6
changelog:
  - Re-introduce unf_ext, modernise spec (dominic@cleal.org)
  - Add full rubygems.org source URL (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 3.0.7-1
changelog:
  - Update will_paginate to 3.0.7 (dcleal@redhat.com)
  - Update dependencies to ror SCL (dcleal@redhat.com)
  - Replace ruby(abi) for ruby22 rebuild (dcleal@redhat.com)


author: Dominic Cleal <dcleal@redhat.com> 2.0-1
changelog:
  - Change to use rh-ror41, rh-ruby22 collections (dcleal@redhat.com)
  - Replace tfm-rubygem-sass with ror41-rubygem-sass (dcleal@redhat.com)
  - Replace tfm-rubygem-sprockets with ror41-rubygem-sprockets
    (dcleal@redhat.com)


author: Dominic Cleal <dominic@cleal.org> 2.0-3
changelog:
  - Add uuidtools to obsoleted packages (dominic@cleal.org)
  - Fix less, less-rails package names (dominic@cleal.org)


author: Dominic Cleal <dominic@cleal.org> 3.0-1
changelog:
  - Rebuild tfm against sclo-ror42 (dominic@cleal.org)
  - Remove foreigner and packages now in sclo-ror42 (dominic@cleal.org)


author: Eric D. Helms <ericdhelms@gmail.com> 4.0-1
changelog:
  - Update tfm to use Rails 5.1 and Ruby 2.4 (ericdhelms@gmail.com)
  - Remove babel-preset-es2015 (me@daniellobato.me)
  - use %license tag in tfm package (evgeni@golov.de)
  - drop unused rubygem-protected_attributes (evgeni@golov.de)
  - Remove flux packaging (ohadlevy@gmail.com)
  - Removed old tito.props entries (lzap+git@redhat.com)
  - Remove sinatra and tilt, replaced by EPEL7 (dominic@cleal.org)


