# changelog

author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-147
changelog:
  - Fix man pages for SELinux users
  - Allow all user domains to setexec
  - Allow cobblerd to get SELinux status and booleans
  - Add labeling for /etc/zipl.conf
  Resolves:#813803
  - Allow fenced to read SNMP lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-149
changelog:
  - Add labeling for /usr/sbin/matahari-dbus-sysconfigd
  - Add additional labeling for zarafa
  - Allow guest_t to fix labeling
  - Corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - squashfs does not support xattr in RHEL6
  Resolves:#815898
  - Remove pyzor labeling and move it to spamassassin.fc
  - Fix config.tgz


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-151
changelog:
  - Add openstack-nova, openstack-keystone, openstack-glance, openstack-quantum policies
  - Allow sysadm_t to create other crontabs
  - Allow nfsd_t to read defaul_t link files
  - Fix labeling for /var/run/heartbeat
  - Fixes for admin_template() interface to make sysadm_secadm.pp module working correctly
  - More fixes for condor policy
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Fix auth_role() interface
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-152
changelog:
  - Add label for condor_starter
  Resolves:#807682
  - Dontaudit sys_module for brctl
  - Allow winbind to send signull to smbd
  - Add jacorb port definition


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-154
changelog:
  - Allow fenced to manage snmpd lib files
  - Allow certmonger to get attributes on init script files
  Resolves:#790967
  - Fix labeling for Firefox plugins
  Resolves:#747993
  - Add mta_signal_user_agent() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-155
changelog:
  - Allow setroubleshootd to execute rpm
  Resolves:#833053
  - Add labeling for /usr/lib/flash-plugin/libflashplayer.so


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-156
changelog:
  - Allow user to login using ssh with random MLS range
  Resolves:#837815
  - Allow virtd_t to create mtab with the proper labeling
  - Add support for check_icmp nagios plugin
  - Make chkconfig working on MLS for sysadm_t
  - Allow dovecot to manage mail_home_rw_t
  - Add support for fsav
  - Allow clamscan to use amavisd-new
  - Add support for rhnsd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-157
changelog:
  - Allow procmail to manage mail home data
  - We should only block MCS node_bind on mcsuntrustedproc
  - Fixes for amavis
  Resolves:#837815


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-159
changelog:
  - Allow munin_stats to read munin logs
  - Allow updpwd to write all MLS levels
  - Make piranha_web_t as nsswitch domain
  - Allow munin mail plugins to read exim log files
  - Backport sanlock policy from Fedora
  Resolves:#831908
  - Allos dac_override, sys_nice for sasl
  - Add labeling for /var/named/chroot/usr/lib64
  - Add support for gitolite3
  - Allow confined users to send mail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-160
changelog:
  - Add named_bind_http_port boolean
  - Add port definition for 8953/tcp
  - spice-vdagent(d)'s are going to log over to syslog
  - Fix labeling for /usr/sbin/rpc.* binaries to label them as rpcd_exec_t
  - Add sensord policy
  - Allow oddjob_mkhomedir to write on nfs share
  - Add virt_bridgehelper policy
  - Allow clamd to write/delete own pid file with clamd_var_run_t label
  - Add support for wdmd tmpfs
  - Add initrc_domain attribute 
  - Add bcfg2 policy
  - Modify ssh_chroot_rw_homedirs boolean to allow manage apache system r/w content if for /var/www as home
  - Add pacemaker policy
  - Allow snmpd to connect to corosync over unix stream socket
  - Allow crontab to read NFS
  - Add new type selinux_login_config_t for /etc/selinux/TYPE/logins directory and allow sssd to manage files in this directory
  Resolves:#843814
  - Add labeling for /opt/sartest directory
  - Add initrc_domain attribute to allow domains to work as initrc_t domain
  - heartbeat should be running as rgmanager_t instead of corosync_t
  - Add glusterd policy
  - Add l2tpd policy
  - Add numad policy
  Resolves:#801493


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-162
changelog:
  - Add pkcslotd policy
  Resolves:#851483
  - Allow cyrus-imapd init script to write cyrus data
  - Fix labeling for /dev/twa


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-166
changelog:
  - More fixes for openshift and add support for opeshift labeling instead of stickshift
  - /etc/selinux/<type>/logins should be owned by the policy package
  Resolves:#855889
  - Add labeling for /var/tmp/DNS_25      
  - Allow postfix_local_t to execute files on nfs_t
  - Add fixes for kadmind
  - Add rhnsd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-167
changelog:
  - Allow postfix_locat to search stickshift lib files
  - Dontaudit sys_ptrace cap for httpd if httpd_stickshift is on
  - Allow openshift domains change process identity
  - SELinux is reporting that openshift domains are trying to write into their proc directories
  Resolves:#855889


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-168
changelog:
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - pppd wants to read /usr/share/radiusclient-ng/dictionary
  - Add ssh_chroot_manage_apache_content and ssh_chroot_full_access booleans
  - snmp wants to also manage snmp dirs for amavisd-snmp support
  - Add labeling for virsh_fenced
  - Allow nmbd_t to crate dirs with samba_var_t labeling
  - Add clamscan_can_scan_system boolean
  - Allow all domains to getattr on prelink_exec_t
  - Add postgresql_can_rsync boolean
  - Allow pulse to domain transition to iptables
  - Allow nslcd sys_nice capability
  - Allow corosync to connect to saphostctrl ports
  - Allow passwd to read generic /tmp dirs
  - Add policy for qemu-qa
  - Add new antivirus policy module for antivirus programs
  Resolves:#838260


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-169
changelog:
  - Fix spec file to silent restorecon errors on files which do not exist
  - Fix passenger backport
  Resolves:#839831


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-172
changelog:
  - Update httpd_runstickshift boolean
  - Remove transition from sysadm_t to fsadm_t
  Resolves:#852763
  - Make vmware-host as unconfined domain
  - Allow all domains to read usr_t
  - Fix labeling for all log files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-173
changelog:
  - syslogd_t now support kerberos
  Resolves:#867001
  - Fix openshift labeling for binaries
  - Allow passwd to read usr_t links/files
  - Add labeling for /var/lib/sss/mc


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-174
changelog:
  - openshift user domains wants to r/w ssh tcp sockets
  - Allow mount to relabelfrom unlabeled file systems
  - Additional fix for syslog/kerberos
  Resolves:#867001


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-175
changelog:
  - Add initial openswitch policy. Domains are unconfined
  Resolves:#845417
  - Add labeling for /usr/sbin/mcollectived
  - Allow openshift domains to read /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-177
changelog:
  - Allow dnsmasq to manage virt run files
  Resolves:#843543
  - Allow setroubleshootd to read /proc/irq
  - Backport fixes for virt_use_* booleans
  - Allow qemu-ga to use ttyS0
  - Allow dhcpc to manage dhclient-eth0.pid labeled as virt_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-178
changelog:
  - Fix labeling for OpenShift binaries
  - Add samba_portmapper boolean and labeling for /var/run/samba
  Resolves:#871816
  - Backport dspam policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-180
changelog:
  - Allow openshift domains to execute tmux
  - Allow wdmd to getattr on tmpfs_t
  Resolves:#831908
  - Add labeling for /var/nmbd/unexpected
  - Allow winbind to create samba pid dir
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes for syslogd
  - Fenced communicates with libvirt
  - Fix labeling for libflashplayer.so
  - Add labeling for /var/lib/zarafa-webapp
  - Allow dspam to read localization
  - Add labeling for Z-Push
  - Allow rpc.svcgssd to search nfsd_fs_t dirs
  - Allo cgred to read all sysctl


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-181
changelog:
  - Allow kdumpgui to read/write to zipl.conf
  Resolves:#877108
  - Add /proc/numactl support for confined users
  - Make proc_numa_t an MLS Trusted Object
  - Make ccs_tool and cman_tool labeled as rgmanager_exec_t
  - Fix cron_admin_role interface
  - Add support for opendkim


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-182
changelog:
  - Fix labeling for /var/named/chroot/usr/lib
  Resolves:#843732
  - Allow amavis to stream connect to snmpd
  Resolves:#839250
  - Additional fixes for log files related to logrotate
  - Allow all domains to read base etc_t file type
  - Allow logrotate to list root home directory
  - Fix labeling for /var/log/z-push
  - Allow cyrus init scriptu to manage cyrus data files
  - Dontaudit leaks of locks or generic log files to systemprocesses
  - Allow ricci-modrpm to send syslog msgs
  - Allow munin to have kill capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-184
changelog:
  - Add support for tcp/10026 port as dspam_port_t
  - Allow dspam to connect/bind to dspam_port_t
  - Add uconfined_munin_plugin_exec_t for all plugins which are not covered by munin plugins policy
  - Allow domains that can read sssd_public_t files to also list the directory
  Resolves:#881413
  - Allow programs to run in fips_mode using fips_mode boolean
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow sshd to look into the mysql home directory for authorized_keys
  - Make rsync as homemanager which allows to manage CIFS/NFS	  
  -


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-185
changelog:
  - Apache is sending sinal to openshift_initrc_t now
  -  Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Allow winbind to manage samba_var_t sock files
  - Allow git-daemon and httpd to serve the same dir
  Resolves:#883143
  - Allow dac_override for nrpe


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-186
changelog:
  - Allow virtd to manage dnsmasq pid files
  - Allow all samba domains to create samba directory in var_t directory
  - Dontaudit attempts by openshift to read apache logs
  - Add labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-187
changelog:
  - Add missing labeling for /usr/share/ovirt-guest-agent/ovirt-guest-agent.py
  Resolves:#885432
  - Add labeling for /var/nmbd
  - apache/drupal can run clamscan on uploaded content


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-188
changelog:
  - Allow rpcd_t to read /var/run/utmp
  - Make glance domains as permissive instead of just glance_t
  - Allow kill capability for ftpd
  - Add labeling for prespawn helper script
  Resolves:#886619
  - Allow winbind to stream connect to nmbd
  - Allow transition from virt domains to bridgehelper domain
  - Add support for watchdog script from sanlock
  - Add labeling for tmp-inst
  - Fix rhev policy
  - Update virt_qemu_ga policy
  - Backport wm_domain policy
  - Backport virtd_lxc_t and make it as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-189
changelog:
  - Allow virt_qemu_ga to execute shutdown
  - sssd needs to connect to kerberos password port if a user changes his password
  - More fixes for the dspam domain
  - Allow dovecot to execute bash
  - Additional fixes for passenger
  Resolves:#886619
  - Add labeling for /var/run/checkquorum-timer


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-190
changelog:
  - Allow virtd to settattr on virt image dirs in MLS
  Resolves:#885045
  - Allow all postfix domains to connect to mysql stream
  - Call init_daemon_domain for rsync_t
  - Add labeling for /var/lib/pgsql/ssh 
  - Allow certmonger to send signal to itself
  - Allow rsyslog to read user tmp files using logging_syslog_can_read_tmp boolean
  - Add support for 1228/tcp and 1228/udp ports and allow corosync touse them
  - Allow corosync to read wdmd tmpfs
  - Allow wdmd to execute consoletype
  - Update man pages using sepolicy from Fedora
  - Fix admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-191
changelog:
  - Remove pam_selinux due to conflict
  - Add labeling for /etc/multipath - lvm_metadata_t
  Resolves:#880407
  - Add additional gitolite3 labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-192
changelog:
  - Label /usr/lib/yaboot/addnote as bin_t
  - Allow postfix_local to read/write /var/spool/postfix/active
  - Allow postfix domains to list /tmp
  - Allow wdmd to transition to kdump
  Resolves:#887793
  - Add labeling for /var/named/chroot/etc/localtime


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-193
changelog:
  - Fix ssh_sysadm_login boolean for MLS
  Resolves:#865759
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - More fixes for qemu-ga to make "guest-fsfreeze-freeze" working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-194
changelog:
  - qdiskd needs to read usr_t/bin_t files
  - Allow dpsam to connect/bind to spamd ports
  - Allow munin services plugins to bind to generic node
  Resolves:#865759


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-195
changelog:
  - Make matahari domains as unconfined
  - Allow nscd to connect to nmbd
  Resolves:#901565
  - Allow setcap/getcap for syslogd


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-196
changelog:
  - Backport openshfit fixes
  - Allow cgred to use notify 
  Resolves:#913673
  - Allow mount to transition to gluster 
  - Fix tuned policy to make it working with the lastet tuned package


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-197
changelog:
  - Fix /etc/dhcp labeling
  - Back port openshift fixes
  - Make dirsrv-admin server restarted from console working
  - Add ftpd_use_fusefs boolean
  Resolves:#913673
  - openshift_cron_t needs dac_override


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-198
changelog:
  - Allow dirsrv-admin script to exec apache modules
  - Add labeling for dirsrv-admin lock file
  - Add labeling for /var/lib/owncloud
  - Add labeling for /var/www/moodle
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-199
changelog:
  - qemu-ga needs to execute scripts in /usr/libexec/qemu-ga
  - Allow openshift_cron_t to manage openshift_var_lib_t sym links
  - Allow dovecot-auth to execute bin_t
  - Allow mysqld-safe to execute bin_t
  - Allow procmail to manage user tmp files
  - Allow sanlock to kill svirt_t
  Resolves:#913673


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-203
changelog:
  - Allow dnsmasq to stream connect to quantum
  - Allow ifconfig domtrans to iptables and execute ldconfig
  Resolves:#966106
  - Make openshift_initrc_t as initrc domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-204
changelog:
  - Allow iptables to read and write quantum inherited pipes
  - Allow iptables to send sigchld to quantum
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-205
changelog:
  - Remove domtrans for quantum which needs to stay in the same domain
  - Allow qemu to manage nova lib files
  - Allow hald to read svirt images
  Resolves:#966106


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-208
changelog:
  - Merge cluster administrative domains to cluster_t. Back ported from Fedora
  Resolves:#915151
  - Aadd additinal rules for disk plugins
  - Allow setuid/setgid caps for syslogd_t
  - Dontaudit sendmail to  write dovecote-deliver tmp files
  - Add suppport for /var/lib/openvpn
  - /var/spool/snmptt is a directory which snmdp needs to write to


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-210
changelog:
  - Allow nrpe to list /var
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Add support for strongswan
  - Fix description of ftpd_use_fusefs boolean
  - Allow kdumpgui to write dos files for /boot/efi/EFI/fedora/grub.cfg
  - Back port tgtd fixes from Fedora to allow sys_rawio cap
  - Add support for OpenDMARCD
  Resolves:#983551
  - Allow openvpn to run unconfined scripts
  - Allow amavis to execute shell
  Resolves:#979421
  - man pages should be owned only by selinux-policy-doc package
  - Fix fs_manage_nfs_files and fs_manage_nfs_dirs boolean to allow to search autofs
  - Allow mysqld-safe sys_nice/sys_resource caps
  Resolves:#975921
  - Add labeling for /boot/etc/yaboot.conf
  Resolves:#973156
  - /var/log/syslog-ng should be labeled var_log_t
  - Back port munin-cgi fixes
  - Fix ftp_home_dir boolean 
  - Allow kdump to read kcore on MLS system
  - Add support for svn ports
  - Add labels for /dev/ptp*
  - Add labels for /etc/security/opasswd
  - Fix labeling for /etc/localtime lnk file
  - Add  tftp booleans for NFS/CIFS access
  - Merge amavis,clamd,clamscan,freshclam policies to antivirus policy
  - Label all nagios plugins as nagios_unconfined_plugin_exec_t by default
  - Add additional ports as mongod_port_t
  - Allow sandbox domains to use inherted terminals
  - Allow pegasus to execute mount in pegasus_t domain
  - Fix *_admin interfaces  and interface descriptions
  - Allow yppasswdd to use NIS
  - Allow nagios to manage nagios spool files
  - Allow ABRT to domtrans to prelink
  Resolves:#921234
  - Fix labeling for /var/lib/dspam/
  Resolves:#919456
  - Label postfix-policyd-spf-perl as bin_t
  - Allow nrpe to run sudo
  - Label /usr/bin/yum-builddep as rpm_exec_t
  - Label /usr/local/bin/x11vnc as xserver_exec_t
  - Allow logwatch to domtrans to mdadm
  - Allow postfix-master to list /tmp dir
  - Add lldpad policy and make it as unconfined domain
  - Allow sysadm to admin postfix
  - ALlow postfix_virtual to stream connect to mysql
  - Update zabbix policy
  - Activate watchod policy and make it as unconfined
  - Add httpd_serve_cobbler_files boolean
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add oracleasm policy
  - Add support for pand
  - Add awstats_purge_apache_log_files boolean
  - Back port smstools policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-212
changelog:
  - Update rules for antivirus domains
  Resolves:#999471
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow chroot_user_t to read/write inherited user domain pty
  - Allow to start guest while the libvirtd is started with valgrind
  - Allow lldpad to talk with fcoemon
  - Allow chronyd sched_setscheduler


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-213
changelog:
  - Add openhpid policy
  Resolves:#1000521
  - Fix rhcs_domain_template to allow cluster_t to create socket in /var/run with correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-214
changelog:
  - Allow git daemons to read localization
  - Allow tgtd_t to connect to isns ports
  Resolves:#1003571
  - Cleanup antivirus policy and add additional fixes
  - Fix labeling for munin CGI scripts
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Fix fs_search_auto_mountpoints to allow search automount tmp dirs
  Resolves:#990661


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-215
changelog:
  - Add port definition of pka_ca to port 829 for openshift
  - Rename quantum to neutron
  - Allow rpcd to request the kernel to load a module
  - Allow ovsdb-server to create dirs/files in /tmp directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-216
changelog:
  - Remove transition from virtd_t to qemu_t to stay in virtd_t if selinux_driver is None in qemu.conf
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-217
changelog:
  - Fix virtd_lxc_t to be able to communicate with hal
  - Allow NM and wireless working together
  Resolves:#1009661
  - Allow my_print_default to read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-218
changelog:
  - Add support for /var/log/qemu-ga directory
  - Regenerate man pages for domains
  Resolves:#880728
  - Allow setgid capability for ipsec_t
  - Allow ipsec to send signull to itself
  - Add tcp/9000 as http_port_t
  - Allow dirsrv_t to create tmpfs_t directories
  - Fix git_role() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-219
changelog:
  - Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
  - Allow tzdate to unlink etc_t lnk files
  - Allow jabberd to connect to jabber_interserver port
  - Fix description for logging_syslog_can_read_tmp boolean
  - Update ipsec rules and labels
  Resolves:#986883
  - Allow pegasus transition to mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-220
changelog:
  - Allow cobblerd to stream connect to MySQL
  - Allow cobblerd to execute ldconfig
  - Allow openstack-glance to access to amqp
  - Add labeling for /var/run/charon.*
  - Make munin "df" plugins working
  Resolves:#908095


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-221
changelog:
  - Fix /var/run/charon labeling
  - More fix for strongswant and ipsec.secretes
  - Allow sandbox domain to use inherited user terminals


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-223
changelog:
  - Fix dovecot_rw_pipes() interface
  - Allow piranha_pulse_t to search tmpfs
  - Allow sysadm to stream connect to postfix-master process
  - Label /usr/sbin/fence_sanlockd as fenced_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-225
changelog:
  - Re-write rules to create tmpfs for all piranha tmpfs files/dirs
  - Allow piranha-lvs to manage piranha_tmpfs_t
  Resolves:#1018306


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-226
changelog:
  - Label /usr/sbin/fence_scsi as fenced_exec_t
  - Fix cluster domains to create dirs in /var/run/cluster as var_run_t to make resource scripts working
  Resolves:#915151


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-227
changelog:
  - Resource agents needs to manage /etc/cluster to place own config files
  Resolves:#915151
  - tgtd needs ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-228
changelog:
  - Add daemons_enable_cluster_mode boolean and turn on it by default until RHEL6.6
  Resolves:#915151
  - Add tcp/8893 as milter port
  - Allow antivirus domain to read localization without the boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-229
changelog:
  - Add bootloader_exec_t labeling for /sbin/grubby
  Resolves:#915729
  - Add etc_runtime_t label for zipl.conf
  - Allow daemons to manage cluster lib files if daemons_enable_cluster_mode is enabled


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-231
changelog:
  - Add named_cache_t label for /var/lib/unbound
  - Fix puppet_domtrans_master() interface to make passenger working correctly if it wants to read puppet config files
  - Allow anitvirus domains to manage own log dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-232
changelog:
  - Add more fixes for zabbix-agent
  - Fix neutron labeling
  - Allow all domains to read sysfs_t due to glibc change
  - Allow ping to read inherited zabbix tmp files
  Resolves:#1039851
  - Allow hostname to read/write inherited rpm script files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-233
changelog:
  - Add support for OpenShift syslog plugin
  - Allow snmpd to getattr on removeable and fixed disks
  - Add shmemnetgrp and getnetgrp to access_vectors
  Resolves:#1025758


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-235
changelog:
  - Add support for nginx
  Resolves:#1045041
  - Change shutdown_t to also read wtmp
  - Added support for hypervkvpd
  - Add preupgrade policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-236
changelog:
  - Added conman policy
  - Added label for conman port
  - Added support for mip6d policy
  - Added support for isns
  - Added rtas_errd policy
  - Added support for keepalived policy
  - Add label samba_spool_t for /var/spool/samba
  - Allow httpd_t to bind preupgrade port if httpd_run_preupgrade boolean is enabled
  - Allow openshift_cron_t to append to openshift log files
  - dontaudit sudo domains listing /dev
  - Allow read/write to login records
  - Allow auditctl getattr access on blk_file
  - Allow nova-scheduler to read utmp
  - Added stapserver policy
  - Added support for freeipmi services
  - Added lsm policy
  - Added support for pcp service
  - Added chown capability to dhcpd_t domain
  - Add boolean to allow openshift domains nfs access
  - Allow abrt to read man pages and getcap
  - Allow cgroupdrulesengd to create content in cgoups directories
  - Dontaudit smbd_t sending out random signuls
  - Backport all zabbix changes
  - Allow mcelog write access to nscd socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-237
changelog:
  - Fixes for mirrormanager
  - Fix swift interface
  - Allow lsmd_plugin_t to read localization
  - Allow keepalived read snmp libs, Allow keepalived connect to agentx port
  - Allow keepalived read localization
  - Added setuid capability to lsm service
  - Added some swift rules to rsync policy
  - Remove duplicate line entry in .fc
  - Do not send/receive packets when ftpd_use_passive_mode is disabled
  - Add mirrormanager policy to RHEL6 Fixes Bug 1042864
  - Update permissivedomains by mirrormanager
  - Add mirrormanager policy
  - Added support for openwsmand
  - Added policy for swift
  - Added support for sblim
  - label also 64bit heartbeat libs
  - Allow kill capability on varnish
  - Added haveged policy
  - Add missing kernel_rw_stream_socket_perms
  - Label tcp/udp port no. 3052 as apc, Allow apcups to bind on apc port
  - Allow logwatch stream connect to courier service
  - Fix mcelog policy
  - Back port rsyslog fixes from RHEL7 for rsyslog7
  - Fix whitespace
  - Add support for osad
  - Fix automount policy
  - Added policy for bacula
  - add radvd_read_pid_files inteface
  - Add missing syslog-conn port
  - Allow httpd_t write to kernel keyring
  - Allow httpd_sys_script_t domain to send system log messages 
  - Allow passwd_t to write to ipa trusted user files in /tmp 
  - Boolean to allow mcelog use all the user ttys 
  - Allow icecast to use any tcp ports 
  - Define oracleasm_t as a device node 
  - Allow sudomain to getattr of kernel interface
  - Add squid directory in /var/run
  - Allow automount read nfs symlinks
  - Allow asterisk to connect to the apache ports
  - allow abrt to read mcelog log file 
  - allow udev to search radvd files under the /run dir 
  - allow auditctl getattr access on blk_file 
  Resolves:#1080555
  - Allow ssh to manage nfs links


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-238
changelog:
  - Allow domain to read an append inherited tmp files
  - Dontauit leaks of var_t into ifconfig_t
  - Allow fsdaemon_t to read/write device_t char files 
  Resolves:#1035363
  - Remove sblim_filetrans_named_content in RHEL6
  - We don't have systemd in RHEL6.
  - one more fix for bacula_admin()
  - fix bacula_run_admin()
  - Remove shadow_t label from /etc/security/opasswd 
  - Fix logrotate_use_nfs boolean
  - Allow userdom to read inherited users files in /tmp 
  - Allow certmonger_t read puppet libs
  - Allow in logging_inherit_append_all_logs also ioctl and append
  - Label pacemaker_remoted as cluster_exec_t
  - Tag some conman exec files
  - Allow conman to read localization
  - Should use rw_socket_perms rather then sock_file on a unix_stream_socket
  - Added conman fixes
  - Allow apache to manage passenger sock_files
  - Allow bacula to bind on 9103 tcp port
  - Allow postfix stream connect to antivirus
  - Allow osad to read localization


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-239
changelog:
  - Fixed lsmd_plugin_t
  Resolves:#1111619
  - Added glusterd_conf_t alias glusterd_etc_t
  - Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory 
  Resolves:#982160
  - Label zabbix-proxy files
  Resolves:#1018211
  - allow sshd to write to all process levels in order to change passwd when running at a level
  Resolves:#837616
  - Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range 
  Resolves:#837616
  - Rename quantum port to neutron 
  Resolves:#1024927
  - Added zarafa_read_lib_files interface
  - Added dont audit list non security files in xdm_t 
  Resolves:#1030760
  - Added more fixes relates to 
  Resolves:#1060656
  - Added dontaudit rules to xdm_t 
  Resolves:#1030760
  - Allow procmail to run zarafa-degent 
  Resolves:#1060656
  - Add userdom_user_application_domain in xauth 
  Resolves:#1013832
  - Allow dmesg read raw memory 
  Resolves:#1030762
  - Allow communication between postfix and cyrus 
  Resolves:#1057307


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-240
changelog:
  - Allow nagios to stream connect to postgresqlBZ #1015708
  Resolves:#1015708
  - Allow hypervkvp read localization
  - Fix postfix_admin()
  - Add lldpad policy for MLS


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-241
changelog:
  - Remove deny_ptrace from interfaces
  - Add setpgid procces to mip6d_t
  - Added support for hv_vss_daemon
  - Allow keepalived also managed snmp lib dirs
  - Allow chroot_user_t unconfined shell domtrans
  Resolves:#1082183
  - Label swift-object-expirer as swift_exec_t
  - Allow keepalived manage snmp files, dontaudit list tmp files
  Resolves:#1053450
  - Additional fix for calling postfix interfaces in sysadm.te to make postfix_admin() working


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-243
changelog:
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-244
changelog:
  - Add support for vdsm 
  Resolves:#1064270
  - Allow userdomain role to access prelink_mask_t
  - Rename module glusterfs to glusterd 
  Resolves:#1052206
  - Allow gfs_controld_t to getattr on all file systems 
  Resolves:#1110886
  - Allow apache to manage pid sock files 
  Resolves:#1042864
  - Bind TCP/UDP sockets to the nfs port
  - The /var/run/tuned directory is not a regular file 
  Resolves:#1117685
  - Allow utilize winbind for authentication to AD. 
  Resolves:#1084177
  - Dont audit access on /etc/init.d/mcollective for kdump_t
  - FIx labeling in networkmanager.fc
  - Allow passenger to connect to MySQL
  - ALlow passenger to read locales
  - Dontaudit relabelfrom/relabelto for all variablefiles for prelink_map_t
  - Change all var_lib_t types to have also variablestatefile attribute
  - Implement new prelink_mask_t domain to which transition all domain by default (using fips_mode boolean) except prelink_transition domains.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-245
changelog:
  - Allow setpgid for all sandbox domains.
  - Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs working with sandbox.
  - One more fix for osad.te
  - Back port osad changes from RHEL7.
  - Rename svirt_lxc_file_t to svirt_sandbox_file_t.
  - Label nginx init script as httpd_initrc_exec_t 
  Resolves:#1045041
  - Allow postfix_smtpd to stream connect to antivirus 
  Resolves:#1105889
  - Label init thttpd file as httpd_initrc_exec_t 
  Resolves:#1069843
  - Allow httpd to setattr on httpd_log files
  Resolves:#1111581
  - Add tomcat
  - Allow zabbix to read system network state
  - Allow ndc to read random and urandom device 
  Resolves:#1110397
  - Add kerberos support for radiusd.
  - Allow procmail to ioctl on zarafa-deliver executable.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-246
changelog:
  - Add boolean to allow user login programs access to /etc/shadow
  - Use old icecast_connect_any boolean name and dontaudit list /tmp with tmp_t labeling
  - Remove unused interface rtas_errd_systemctl 
  Resolves:#1121169
  - Allow prelink_mask to use user terminals and dontaudit relabel tmpfiles.
  - Dontaudit r/w inherited lockfiles/tmpfiles for prelink_mask_t.
  - Allow prelink_mask to append all log files.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-247
changelog:
  - Add all login domain auth_can_read_shadow_passwords attribute.
  - Added support for dhcrelay service
  Resolves: #1123338
  - We need to call auth_tunable_read_shadow in auth_shadow boolean.
  - Move authlogin_shadow to authlogin.if.
  - Add filetrans also for bacula log files.
  - Dontaudit kdumpgui to read openshift_initrc_exec_t
  Resolves: #1023336
  - Allow squid to manage squid_var_run_t sock_file
  Resolves: #1102346
  - Alloe bacula manage bacula_log_t dirs
  Resolves: #1122545
  - Added sys_ptrace cap. to stapserver_t
  Resolves: #811366
  - Label also /var/run/glusterd.socket file as glusterd_var_run_t
  Resolves: #1052206
  - Added support for collectd daemon
  Resolves: #1024715
  - Label conmans pid file as conman_var_run_t, Resolves: #1122106
  - Fix authlogin_shadow boolean to have it for all login_pgm domains
  - Dontaudit r/w inherited all log files for prelink_mask_t
  - Label zabbix_var_lib_t directories
  Resolves: #1053205
  - Allow all sblim domain to read localization data
  Resolves:##1122022


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-248
changelog:
  - Allow openshift_cron_t to append to openshift log files, label /var/log/openshift 
  Resolves: #1034206
  - Do not send/receive packets when ftpd_use_passive_mode is disabled 
  Resolves: #1105544
  - Allow qemu-ga domtrans to hwclock 
  Resolves: #1062384
  - Allow sshd read access to files on ftp directory 
  Resolves: #1097387
  - dontaudit r/w inherited certs for prelink_mask_t.
  - Allow sblim_gatherd_t to search all mountpoints. This is caused by ps. Should not be needed in Fedora.
  - Fix labeling in dhcpc.fc.
  - Add labels also for glusterd sockets.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-249
changelog:
  - Add support for luci.
  - Add support for rhsmd and treat it with rhsmcertd_t.
  - Make zabbix_agent_t as unconfined domain for rhel6.6.
  - Allow chroot_user_t to change process identity.
  Resolves:#1082183
  - Revert "Remove shadow_t label from /etc/security/opasswd
  - Dontaudit relabel lib_t files for prelink_mask_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-250
changelog:
  - Dontaudit read/write/setattr all pipes for prelink domains on all domains
  Resolves:#1103674
  - Allow chroot_user_t to change the role.
  - Add sys_time caps for virt_qemu_ga_t
  - Add label for /usr/sbin/luci


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-251
changelog:
  - Allow tgtd service to read kernel network state
  Resolves: 1130040
  - Allow mail-servers policies to read pcp libs
  Resolves: 1130934
  - Allow passwd_t to read/write stream sockets
  Resolves: #1129296
  - Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run 'semodule -d unconfined' to make system running without unconfined domains. 
  - Dontaudit zebra to read getattr for all files and dirs
  Resolves: 1122031
  - Allow zebra to read /dev/urandom
  Resolves: #1122031
  - Label /var/lib/asterisk/agi-bin as bin_t
  - Added to lldpad policy sys_resource cap. and allow read localization 
  Resolves:1021984
  - Fix path to luci(/usr/sbin/luci) 
  Resolves:1023202
  - Add auth_can_read_shadow_passwords for rlogind.
  - Add authlogin_shadow boolean for all login domains.
  - Dontaudit rw all non security leaks.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-252
changelog:
  - Allow aide_t to read /dev/random and /dev/urandom.
  - Allow sysadm to talk with lldpad over unix dgram socket.
  - Allow sysadm to send/recv with unix dgram socket.
  - Allow crond_t to read lastlog.
  - Allow xdm_t to read plymouthd_spool_t files
  Resolves:#1131195
  - Allow hald to rpm dbus chat
  - Additional dontaudits for prelink_mask_t.
  - Add samba_domain attribute also for smbcontrol_t and winbind_helper_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-253
changelog:
  - Add additional dontaudits for prelink_mask_t
  Resolves:#1103674
  - Allow local_login_t and xdm_t to manage shadow_t because of PAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-254
changelog:
  - Dontaudit to read/write all dev nodes for prelink_mask_t.
  - Add label for path /var/lib/ctdb
  - Allow escd access to /var/run/pcscd.events directory
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-255
changelog:
  - Allow couriertcpd to read /var/spool/courier dir.
  - Allow prelink domain to rea /dev/mem.
  - ALlow transition to prelink_t instead of prelink_mask_t to ABRT domains/rpm.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-257
changelog:
  - Add fixes for sblim_sfcbd to make libvirt-cim working.
  - Allow keepalived stream connect to snmpd
  - Allow local_login_t and xdm_t to manage etc_t if authlogin_can_shadow boolean.
  - Allow prelink_transition_domain to send signal to prelink_mask_t.
  Resolves:#1103674


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-258
changelog:
  - Allow unlink lib_t located in /tmp for prelink_mask_t.
  Resolves:#1103674
  - Add support for pnp4nagios
  - Allow mysql to read all domain state
  - Allow sblim_sfcbd_t to search virt images
  - Revert "Remove shadow_t label from /etc/security/opasswd "


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-260
changelog:
  - Add virt_getattr_images and call it for sblim_sfcbd_t.
  - We also need to call virt_search_images for sblim.
  Resolves:#1140614


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-261
changelog:
  - Allow sys_ptrace and dac_override caps for collectd.
  - Add labeling for /etc/rc\.d/init\.d/htcacheclean.
  - Allow /usr/sbin/sfcbd to send audit msgs.
  - Allow postdrop to connect to master process over unix stream socket.
  - Allow ssh_t to connect to all unreserved ports.
  - Allow setfiles domain to access files with admin_home_t. semanage -i /root/testfile.
  - Don't relabel files under /dev/shm/
  - Allow munin_disk_plugin_t getattr access on blk_file 
  - Allow xauth_t and sshd_t to search automount_tmp_t if use_nfs_home_dirs boolean.
  - Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
  - Allow antivirus domains to read all dirs/files regardless of their MCS category set.
  - Add labeling for mariadb log/pid files/dirs.
  - Allow rsyslogd to read /proc/sys/vm/overcommit_memory file.
  - Allow slapd to read /usr/share/cracklib/pw_dict.hwm.
  - Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling.
  - Add support for /usr/libexec/sssd/selinux_child and create sssd_selinux_manager_t domain for it.
  - Allow qpidd to read network state and sysctls dirs
  Resolves:#1171275
  - Add labeling for /var/bacula directory.
  - mcelog runs as a daemon domain 
  - Allow shutdown to r/w iherited rhev-agetnd pipes.
  - Allow sshd to seind signull itself.
  - Add the 'base_ro_file_type' and 'base_file_type' attributes to RHEL6.
  - Allow prelink_mask_t getattr on filesystems that support xattrs
  - Allow radious to connect to apache ports to do OCSP check.
  - remove transition from unconfined user to auditctl.
  - Backport RHEL7 sblim-sfcb fixes.
  - Add bacula fixes related to unconfined scripts based on ssekidde@redhat.com patch.
  - Allow zebra to communicate with sssd 
  - Add interfaces fixes.
  - Added some optional blogs from timemaster policy to chronyd.
  - Added linuxptp policy
  - Add interface to read mysql db link files
  - Added cinder policy
  - Make munin yum plugin as unconfined by default.
  - Allow bitlbee connections to the system DBUS.
  - Allow hv_vss_daemon to call ioctl(FIFREEZE) on /boot.
  - Add rsync_server boolean to don't have a transition from initrc by default.
  - Dontaudit to r/w inherited pipes from httpd because of certmonger unconfined scripts.
  - Backport all capabilities for cvs from RHEL7.
  - Allow dccproc to execute bash.
  - Fix labeling for /usr/libexec/nm-dispatcher.action.
  - Allow logrotate to manage virt_cache.
  - Allow osad to execute rhn_check.
  - Make osad_t as unconfined domain.
  - Allow osad connect to jabber client port.
  - Allow rhev-agentd to access /dev/.udev/db/block:sr0.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-262
changelog:
  - Allow lsmd_t getattr all exec.
  Resolves:#1141719
  - Update afs policy
  Resolves:#1136396
  - Add support for /usr/sbin/named-sdb.
  - Add support for mongos service.
  - Allow cyrus to use tcp/2005 port.
  - More service wants to auth_use_nsswitch.
  - Allow apps that need to read sysctl_vm_overcommit_t be able to read it.
  - Update passenger rules from RHEL7.
  - Allow smartd to manage generich devices if they are created with wrong label.
  - Allow sblim-sfcb to execute itself.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-263
changelog:
  - Allow userdomain to manage pcscd pid fifo files.
  - Allow prelink domain access to /dev/console 
  Resolves:#1145662
  - Allow httpd search access on tomcat6 directory
  - Allow apcupsd to get attributes of filesystems with xattrs
  - Allow qemu-ga getattr access of all filesystems
  - Allow abrt to read network state information
  - Make collectd_t as unconfined domain.
  - Make rpcbind as nsswitch domain.
  - Back port labeling for /etc/my.cnf.d dir.
  - Allow dhcpd kill capability.
  - Allow cachefilesd to create cachefilesd_var_t
  - cvs_home backport from RHEL7.
  - Add support for new fence agent fence_mpath which is executed by fence_node
  - Allow lsmd plugin to run with configured SSSD.
  - Allow bacula access to tape devices
  - Allow sblim-sfcb setuid.
  - Allow sblim domain to read sysctls.
  - Allow ntp to read localtime and allow timemaster send a signal to ntpd.
  - Add cobblerd_t fixes
  - Allow mysqld_t to use pam
  - Dontaudit xguest_t communication with avahi_t via dbus
  - Allow cobblerd_t to communicate with sssd
  - Allow pmwebd to send and receive messages from avahi over dbus
  - Allow conman_t to commmunicate with sssd
  - Allow mysqld_t to send audit messages
  - Allow load_policy rw access to inherited sssd pipes
  - Update label for /etc/mcelog/.* files
  - Allow bacula_t to connect to psql via tcp/unix socket
  - Remove type to only match directories on /boot
  - Add more labels for ownCloud
  - Dontaudit net_admin capability for munin


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-264
changelog:
  - Allow qpidd to read own init script file.
  - Allow passenger to accept connection
  - Back port hypervkvp fixes from RHEL7
  - ALlow load_policy to list inotifyfs filesystem
  - Allow cluster domain to execute ldconfig and update lvm_read_config() interface
  -  Allow sssd_t to connect to samba TCP port
  - Allow NetworkManager to run arping
  Resolves:#1209854
  - Backport RHEL7 redis policy
  - Add apache log and lib labels for roundcubemail


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-265
changelog:
  - Allow redis to create /var/run/redis/redis.sock
  - Allow fence_mpathpersist to run mpathpersist which requires sys_admin capability.
  Resolves:#1206244
  - Allow rhn_check running as rpm to domtrans to shutdown domain
  - openshift_cache_t does exist


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-266
changelog:
  - Add audit_access permissions
  - Allow cupsd_t access to files in /etc dir
  - Allow hplip to dbus chat with all users.
  - Allow sblim-gathered sys_ptrace capability.
  - Allow sys_admin capability for gfs_controld
  - Add more cobbler labels to /var/lib/tftpboot/
  - Add new smbd_tmpfs_t type.
  - Add more fixes related to timemaster+ntp+ptp4l.
  - Fix cgdcbxd_admin() interface.
  - Add labeling for /var/tmp/kadmin_0 and /var/tmp/kiprop_0.
  - Dontaudit read access on admin_home_t for load_policy.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-267
changelog:
  - Allow ctdb to create rawip socket.
  - ALlow nmbd_t to crate nmbd_var_run_t dir under smbd_var_run_t.
  - Make ctdbd as userdom_home_reader.
  - Allow ctdbd to bind  smbd port.
  Resolves:#1219317


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-268
changelog:
  - Add labeling for /var/run/ctdb and allow samba domains to connect to ctdbd.
  Resolves:#1221929
  - Allow glusterd to read/write samba config files.
  - Update mysqld rules related to mysqld log files.
  - Add fixes for hypervkvp realed to ifdown/ifup scripts.
  - Update netlink_route_socket for ptp4l.
  - Allow sosreport to dbus chat with NM.
  - Allow glusterd to connect to /var/run/dbus/system_bus_socket.
  - ALlow glusterd to have sys_ptrace capability. Needed by gluster+samba configuration.
  - Add new boolean samba_load_libgfapi to allow smbd load libgfapi from gluster. Allow smbd to read gluster config files by default.
  - Allow gluster to transition to smbd. It is needed for smbd+gluster configuration.
  - Allow glusterd to read /dev/random.
  - Label all gluster hooks in /var/lib/gluster as bin_t. Thy are not created on the fly.
  - Update nagios_run_sudo boolean to allow run chkpwd.
  - Add labeling for /usr/sbin/kpropd.
  - Add nagios_run_sudo boolean
  - Allow ctdb to create rawip socket.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-269
changelog:
  - Fix labeling for /var/tmp/kiprop_0 to kadmind_tmp_t.
  - Allow postdrop runinng as postfix_postdrop_t to access /var/spool/postfix/public/pickup socket.
  - Allow gluster hooks scripts to transition to ctdbd_t.
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket.
  - Allow gluster transition to smbd_t also using samba init script.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-270
changelog:
  - Update policy rules for afs_fserver_t to allow connectto on unix_stream_socket instead of afs_t.
  - Allow smbd to access /var/lib/ctdb/persistent/secrets.tdb.0.
  - Allow glusterd to execute consoletype.
  - Glusterd wants to manage samba config files if they are setup together.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-271
changelog:
  - Remove ctdbd_manage_var_files() interface which is not used and is declared for the wrong type.
  Resolves:#1221929


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-272
changelog:
  - Allow hypervkvp to read default SELinux contexts.
  - Allow hypervkvp to write to /etc directories.
  - Update all man pages for RHEL6.7 SELinux domains/roles using the latest sepolicy-manpage from RHEL7.
  - Fix labeling for /var/lib/graphite-web
  - ALlow kpropd to connect to tcp/754 port.
  Resolves:#1220691
  - Allow php-fpm write access to /var/run/redis/redis.sock
  - Update fs_rw_inherited_nfs_files() to allow search auto mountpoints.
  - Dontaudit rpm leaks for prelink_mask_t.
  - Allow sysctl to have running under hypervkvp_t domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-273
changelog:
  - Fix redis_stream_connect interface.
  Resolves:#1220691
  - Allow kadmind to bind to kprop port.
  - Add new man pages for bacula


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have mknod capability. It creates a special file using mknod in a brick.
   - Update rules related to glusterd_brick_t.
   - Allow glusterd to execute lvm tools in the lvm_t target domain.
   - Allow glusterd to execute xfs_growfs in the target domain.
   - Add support for /usr/sbin/xfs_growfs.
   - Allow glusterd to create samba config files if it is started by service script and running with unconfined_u.
  Resolves:#1228109
  - Fix description for ftpd_use_passive_mode boolean.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-275
changelog:
  - Allow glusterd to have transition to insmod.
  - Allow glusterd to use geo-replication gluster tool.
  - Remove gluster from permissive domains.
  Resolves:#1229605


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-276
changelog:
  - Allow gluster to manage own log files.
  - S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
  - Label gluster python hooks also as bin_t.
  - Allow samba_t net_admin capability to make CIFS mount working.
  Resolves:#1229605
  - Allow ssh_keygen_t to manage keys located in /var/lib/gluster.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-278
changelog:
  - Allow logrotate get attributes of all unallocated tty device nodes.
  - Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
  - Allow glusterd to connect to init.
  Resolves:#1230371
  - Allow gluster do dbus chat with domain running as initrc_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.1
changelog:
  - Backport gluster fixes from RHEL7
   - execute showmount in own domain
  Resolves:#1248520
   - execute nsfd in own domain
   - allow gluster to connect to all ports
   - Add support for /usr/sbin/ctdbd_wrapper.
   - nrpe needs kill capability to make gluster moniterd nodes working.


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.2
changelog:
  - Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
  Resolves:#1248520


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.6
changelog:
  - Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
  Resolves:#1257318
  Resolves:#1257319


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-279.el6_7.8
changelog:
  - Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
  Resolves:#1289019


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Dan Horák <dan@danny.cz> - 1.28-2
changelog:
  - include rescan-scsi-bus script 1.35
  - rebase patches and add fix for issue mentioned in #538787
  - Related: #538787


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Adam Stokes <ajs at redhat dot com> = 2.1-0
changelog:
  - Resolves: bz585923
  - Resolves: bz585942
  - Resolves: bz586409
  - Resolves: bz586389
  - Resolves: bz548096
  - Resolves: bz557828
  - Resolves: bz563637
  - Resolves: bz584253
  - Resolves: bz462823
  - Resolves: bz528881
  - Resolves: bz566170
  - Resolves: bz578787
  - Resolves: bz581817
  - Resolves: bz581826
  - Resolves: bz584695
  - Resolves: bz568637
  - Resolves: bz584767
  - Resolves: bz586370


author: Adam Stokes <ajs at redhat dot com> = 2.2-0
changelog:
  - Resolves: bz581921
  - Resolves: bz584253
  - Resolves: bz562651
  - Resolves: bz566170
  - Resolves: bz586450
  - Resolves: bz588223
  - Resolves: bz559737
  - Resolves: bz586405
  - Resolves: bz598978
  - Resolves: bz584763


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
    Resolves: bz622407
  - Add sssd plugin to collect configuration and logs
    Resolves: bz624162
  - Collect /etc/anacrontab in system plugin
    Resolves: bz622527
  - Correct handling of redhat-release for el6
    Resolves: bz622528


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
    Resolves: bz624162
  - Add support for collecting entitlement certificates in rhn.py
    Resolves: bz678665


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
    Resolves: bz659467
  - Collect /etc/dhcp in dhcp.py plugin
    Resolves: bz676522
  - Collect dmsetup ls --tree output in devicemapper.py
    Resolves: bz675559
  - Collect lsblk output in filesys.py
    Resolves: bz679433


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
    Resolves: bz600813
  - Add basic Infiniband plugin
    Resolves: bz673244
  - Add plugin for scsi-target-utils iSCSI target
    Resolves: bz677124
  - Fix autofs plugin LC_ALL usage
    Resolves: bz683404
  - Fix collection of lsusb and add collection of -t and -v outputs
    Resolves: bz691477
  - Extend data collection by qpidd plugin
    Resolves: bz726360
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
    Resolves: bz726427


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
    Resolves: bz704383
  - Add /proc/vmmemctl collection to vmware plugin
    Resolves: bz709491


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
    Resolves: bz683219
  - Add support for collecting Red Hat Subscrition Manager configuration
    Resolves: bz714293
  - Collect /etc/init on systems using upstart
    Resolves: bz694813
  - Don't strip whitespace from output of external programs
    Resolves: bz713449
  - Collect ipv6 neighbour table in network module
    Resolves: bz721163
  - Collect basic cgroups configuration data
    Resolves: bz729455


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-14
changelog:
  - Collect brctl show and showstp output
    Resolves: bz697899
  - Collect nslcd.conf in ldap plugin
    Resolves: bz682124


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
    Resolves: bz697899
  - Fix up2dateclient path in hardware plugin
    Resolves: bz736718


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
    Resolves: bz736718
  - Fix hardware plugin to support new lsusb path
    Resolves: bz691477


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18.el6
changelog:
  - Collect fence_virt.conf in cluster module
    Resolves: bz760995
  - Fix collection of /proc/net directory tree
    Resolves: bz730641
  - Gather output of cpufreq-info when present
    Resolves: bz760424
  - Fix brctl showstp output when bridges contain multiple interfaces
    Resolves: bz751273
  - Add /etc/modprobe.d to kernel module
    Resolves: bz749919
  - Ensure relative symlink targets are correctly handled when copying
    Resolves: bz782589
  - Fix satellite and proxy package detection in rhn plugin
    Resolves: bz749262
  - Collect stderr output from external commands
    Resolves: bz739080
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
    Resolves: bz784862
  - Fix installed-rpms formatting for long package names
    Resolves: bz767827
  - Add symbolic links for truncated log files
    Resolves: bz766583
  - Collect non-standard syslog and rsyslog log files
    Resolves: bz771501
  - Use correct paths for tomcat6 in RHN module
    Resolves: bz749279
  - Obscure root password if present in anacond-ks.cfg
    Resolves: bz790402
  - Do not accept embedded forward slashes in RHN usernames
    Resolves: bz771393
  - Add new sunrpc module to collect rpcinfo for gluster systems
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19.el6
changelog:
  - Collect additional diagnostic information for realtime systems
    Resolves: bz789096
  - Improve sanitization of RHN user and case number in report name
    Resolves: bz771393
  - Fix verbose output and debug logging
    Resolves: bz782339 
  - Add basic support for CloudForms data collection
    Resolves: bz752666
  - Add support for Subscription Asset Manager diagnostics
    Resolves: bz752670


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22.el6
changelog:
  - Correct aeolus debug invocation in CloudForms module
    Resolves: bz752666
  - Update gluster module for gluster-3.3
    Resolves: bz784061
  - Add additional command output to gluster module
    Resolves: bz768641
  - Add support for collecting gluster configuration and logs
    Resolves: bz752549


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-24.el6
changelog:
  - Fix katello and aeolus command string syntax
    Resolves: bz752666
  - Remove stray hunk from gluster module patch
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29.el6
changelog:
  - Collect the swift configuration directory in gluster module
    Resolves: bz822442
  - Update IPA module and related plug-ins
    Resolves: bz812395


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31.el6
changelog:
  - Avoid calling volume status when collecting gluster statedumps
    Resolves: bz849546
  - Use a default report name if --name is empty
    Resolves: bz822113
  - Quote tilde characters passed to shell in RPM module
    Resolves: bz821005
  - Collect KDC and named configuration in ipa module
    Resolves: bz825149
  - Sanitize hostname characters before using as report path
    Resolves: bz822174
  - Collect /etc/multipath in device-mapper module
    Resolves: bz817093
  - New plug-in for PostgreSQL
    Resolves: bz852049
  - Add OpenStack module
    Resolves: bz840057
  - Avoid deprecated sysctls in /proc/sys/net
    Resolves: bz834594
  - Fix error logging when calling external programs
    Resolves: bz824378
  - Use ip instead of ifconfig to generate network interface lists
    Resolves: bz833170


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32.el6
changelog:
  - Collect /proc/pagetypeinfo in memory module
    Resolves: bz809727
  - Strip trailing newline from command output
    Resolves: bz850433
  - Add sanlock module
    Resolves: bz850779
  - Do not collect archived accounting files in psacct module
    Resolves: bz850542
  - Call spacewalk-debug from rhn module to collect satellite data
    Resolves: bz859142


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33.el6
changelog:
  - Add Red Hat Update Infrastructure module
    Resolves: bz821323
  - Collect /proc/iomem in hardware module
    Resolves: bz840975
  - Collect subscription-manager output in general module
    Resolves: bz825968
  - Collect rhsm log files in general module
    Resolves: bz826312
  - Fix exception in gluster module on non-gluster systems
    Resolves: bz849546
  - Fix exception in psql module when dbname is not given
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35.el6
changelog:
  - Report --name and --ticket values as defaults
    Resolves: bz822113
  - Fix device-mapper command execution logging
    Resolves: bz824378
  - Fix data collection and rename PostreSQL module to pgsql
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-40.el6
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz876309
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz947424


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-41.el6
changelog:
  - Exclude RPC files from procfs data collection in networking module
    Resolves: bz913201
  - Add NFS client plug-in
    Resolves: bz907861
  - Restrict wbinfo collection to local domain in samba plug-in
    Resolves: bz986973


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-42.el6
changelog:
  - Update sosreport user interface text
    Resolves: bz878589
  - Preserve ownership and permissions on collected files
    Resolves: bz888724
  - Do not collect krb5.keytab in samba plug-in
    Resolves: bz987103
  - Collect output of 'ls -l /var/named' in named plug-in
    Resolves: bz896713
  - Collect /var/log/squid in squid plug-in
    Resolves: bz955671
  - Fix systool invocation in device-mapper plug-in
    Resolves: bz868719
  - Add plug-in to collect OpenHPI configuration
    Resolves: bz924338
  - Fix traceback in sar module when /var/log/sa does not exist
    Resolves: bz883443
  - Collect mountstats and mountinfo files in filesys plug-in
    Resolves: bz988417
  - Add crm_report integration for pacemaker to cluster plug-in
    Resolves: bz989292


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-43.el6
changelog:
  - Add restricted rpm verify
    Resolves: bz888589
  - Add new foreman plug-in
    Resolves: bz976386
  - Collect saved vmcore-dmesg.txt files in kdump plug-in
    Resolves: bz924839
  - Obfuscate luci secrets in cluster plug-in
    Resolves: bz986301
  - Remove rpm list collection from RHN module
    Resolves: bz884609
  - Add gluster geo-replication status and sync with RHS version
    Resolves: bz868711
  - Obscure passwords in libvirt and corosync data
    Resolves: bz883811
  - Make krb5 plug-in conform with sos-2.2 plug-in API
    Resolves: bz987103
  - Add further NIS data collection
    Resolves: bz928748
  - Fix symbol collection for modern kernels
    Resolves: bz970417
  - Disable 'ipsec barf' collection in openswan plug-in
    Resolves: bz924925
  - Add pam_ldap.conf collection to ldap plug-in
    Resolves: bz877395
  - Force LC_ALL=C for external commands
    Resolves: bz888488
  - Rationalise lvm2 plug-in lvmdump options
    Resolves: bz980959
  - Backport addCopySpecs from upstream
    Resolves: bz924338, bz907861


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-45.el6
changelog:
  - Fix collection of squid log files
    Resolves: bz955671
  - Fix regex substitution in openhpi plug-in
    Resolves: bz924338
  - Fix typo in /proc/kallsyms collection
    Resolves: bz970417
  - Fix exception while post-processing command output
    Resolves: bz986301, bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-46.el6
changelog:
  - Fix obfuscation of luci secrets in cluster plug-in
    Resolves: bz986301
  - Fix password substitution in libvirt plug-in
    Resolves: bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-54.el6
changelog:
  - [hpasm] new plugin to collect HP ASM information
    Resolves: bz915115
  - [sos] improve handling of fatal IO errors
    Resolves: bz1085042
  - [bootloader] collect grub.conf for UEFI based systems
    Resolves: bz1076388
  - [ctdb] add plugin to collect Samba CTDB information
    Resolves: bz961041
  - [keepalived] new plugin
    Resolves: bz1107862
  - [sssd] scrub ldap_default_authtok in sssd plugin
    Resolves: bz1013366
  - [haproxy] new plugin
    Resolves: bz1107866
  - [gluster] add 'logsize' and 'all_logs' plugin options
    Resolves: bz1002619


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-55.el6
changelog:
  - [selinux] pass --input-logs when calling ausearch
    Resolves: bz1032706
  - [printing] fix cups log file size limiting
    Resolves: bz1061529
  - [auditd] fix log size limiting
    Resolves: bz1061529
  - [hardware] call hardware.py directly instead of invoking python
    Resolves: bz1041770


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-56.el6
changelog:
  - [ipa] add ipa-replica-manage output
    Resolves: bz1012410
  - [bootloader] Include /etc/yaboot.conf
    Resolves: bz1001941
  - [cluster] collect /sys/fs/gfs2/*/withdraw
    Resolves: bz997174
  - [general] do not collect /var/log/sa
    Resolves: bz1001600
  - [networking] avoid Cisco cdp paths in /proc and /sys
    Resolves: bz1004936
  - [sar] Handle compressed binary data files better
    Resolves: bz1001600
  - [sar] Add file size limits
    Resolves: bz1001600
  - [sar] Enable XML data collection
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-57.el6
changelog:
  - [tomcat] update for tomcat6 and add password filtering
    Resolves: bz1088070
  - [filesys] collect dumpe2fs -h output by default
    Resolves: bz1105629
  - [rpm] reduce number of calls to rpm
    Resolves: bz1019872
  - Verify fewer packages in rpm plug-in
    Resolves: bz1019872
  - [bootloader] elide bootloader password
    Resolves: bz1101311
  - [plugin] backport do_path_regex_sub()
    Resolves: bz1101311
  - [networking] do not attempt to read use-gss-proxy
    Resolves: bz1079954
  - [mysql] limit log collection by default
    Resolves: bz1015783
  - [mysql] add optional database dump support
    Resolves: bz1032262
  - [docs] update man pages
    Resolves: bz1022226
  - [sosreport] log exceptions during Plugin.postproc()
    Resolves: bz1020445
  - [distupgrade] elide passwords in kickstart user directives
    Resolves: bz1052344


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-60.el6
changelog:
  - [mongodb] backport new plugin from upstream
  - [activemq] backport new plugin from upstream
  - [openshift] sync plugin with upstream
  - [plugin] backport collectExtOutputs and addCopySpecs
  - Make OpenShift module collect domain information
  - Add 'gear' option to OpenShift module
  - Add OpenShift module
    Resolves: bz1039755
  - [plugin] backport addCopySpecLimit tailit parameter
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-61.el6
changelog:
  - [powerpc] backport plugin from upstream
    Resolves: bz977190
  - [devicemapper] set locking_type=0 when calling lvm2 commands
    Resolves: bz1102282
  - [nfsserver] collect 'exportfs -v'
    Resolves: bz985512
  - [openshift] improve password redaction
    Resolves: bz1039755
  - [openshift] don't collect all of /etc/openshift
    Resolves: bz1039755


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-62.el6
changelog:
  - Restrict ldap and ds plugin paths to avoid collecting secrets
    Resolves: bz994628
  - Add certutil output to ldap and ds plugins to summarize certs
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-65.el6
changelog:
  - [grub] Fix grub.conf path for grub-1.x versions
    Resolves: bz1076388
  - [ds] Fix logging exception when plugin force-enabled
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-68.el6
changelog:
  - [ds] add collection of ds admin server configuration
    Resolves: bz994628
  - [ldap] ensure /etc/openldap/ content is collected
    Resolves: bz994628
  - [plugintools] preserve permissions on directories
    Resolves: bz1069786


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-14
changelog:
  - [mysql] test for boolean values in dbuser and dbpass
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-15
changelog:
  - [global] update el6 to upstream 3.2 release 
    Resolves: bz1144525
  - [global] sync 3.2-15.el6 with RHEL-7.1
    Resolves: bz1144525


author: Shane Bradley <sbradley@redhat.com> = 3.2-16
changelog:
  - [cluster] Added package luci and fix lockdumps capturing.
    Resolves: bz1171186
  - [puppet] Adding new plugin for puppet
    Resolves: bz1172880
  - [block] parted will use sector units instead of human units.
    Resolves: bz1086537
  - [foreman] Added option to prevent generic resource collection with foreman plugin. Remove the plugin katello since data collection done by foreman-debug.
    Resolves: bz1135290


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-17
changelog:
  - [policy/redhat] use /tmp as default temporary directory
  - [global] remove dependency on python-six
    Resolves: bz1144525


author: Shane Bradley <sbradley@redhat.com> = 3.2-18
changelog:
  - [openshift] Collect additional config files.
    Resolves: bz1166874
  - [activemq] Honour all_logs and get config on RHEL.
    Resolves: bz1165878


author: Shane Bradley <sbradley@redhat.com> = 3.2-19
changelog:
  - [cluster] Ensure cluster sets 'make' to False when calling get_cmd_output_path().
    Resolves: bz1190723


author: Shane Bradley <sbradley@redhat.com> = 3.2-26
changelog:
  - [cluster] Scrub password from crm_report data.
    Resolves: bz1206581
  - [networking] Use the correct options for nmcli.
    Resolves: bz1206661


author: Uri Lublin <uril@redhat.com> - 0.4.2-10
changelog:
  - spice: server: new-api (4 more patches)
       + streaming-video, agent-mouse, playback-compression.
  Related: #571286


author: Uri Lublin <uril@redhat.com> - 0.4.2-13
changelog:
  - remove Requires and BuildRequires mesa-libGLU-devel
    + open-gl is now disabled.
  - bumped release to -13 due to tag issue
  Related: #482556


author: Uri Lublin <uril@redhat.com> - 0.4.2-15
changelog:
  - Fix unsafe accesses
    + fix unsafe guest data accessing.
    + fix unsafe free() call.
    + fix unsafe cursor items handling.
    + add missing overflow check.
  Resolves: #568811


author: Uri Lublin <uril@redhat.com> - 0.7.2-2
changelog:
  - Rebase to spice upstream release 0.7.2
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.7.2-4
changelog:
  - smartcard -- libcacard 0.1.2 updates:
   - server
    - use network byte order when talking to device.
   - both
    - no more reader_id_t, uint32_t instead
    - no more ReaderAddResponse, use VSC_Error with
      code==VSC_SUCCESS instead.
    - change an assert to a red_printf("error:..")
      if got an unexpectedly undefined reader id.
   - client (not part of this package)
    - track number of expected reader insertions
  Resolves: #674937


author: Uri Lublin <uril@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream 0.7.3:
    + Mostly smart-card updates:
      - including all the changes in 0.7.2.4
    + Some gcc warning cleanups.
  - Fix permissions of spice-server.pc
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.0-1
changelog:
  - Rebase to upstream 0.8.0
    + Includes "Fix segfault on migration" patch
    + Some spice-client bug fixes.
  Resolves: #672035


author: Uri Lublin <uril@redhat.com> - 0.8.1-1
changelog:
  - Rebase to upstream 0.8.1, including
   + Make copy/paste support configurable
   + Some server/vdagent bugs fixed
  Resolves: #710200


author: Uri Lublin <uril@redhat.com> - 0.8.2-1
changelog:
  - Rebase to upstream 0.8.2, including
   + sasl support (fdo bz 34795)
   + support guest async io
   + support guest suspend and hibernate
   + add symbol versioning to libspice-server.so
   + prevent running an old spice-server with a newer qemu
   + Bug fixes (RHBZ): 714801, 713474, 674532, 653545
   + BuildRequires spice-protocol >= 0.8.1 and cyrus-sasl-devel
  Resolves: #723676


author: Uri Lublin <uril@redhat.com> - 0.8.2-3
changelog:
  - Drop unnecessary X11 and alsa requires from spice-server.pc
    + Fix a rpmdiff warning
  Related: rhbz#723676
  - server/red_dispatcher: fix wrong resolution set for tablet
  Resolves: rhbz#726973


author: Uri Lublin <uril@redhat.com> - 0.8.2-4
changelog:
  - semi-seamless migration support
  - added pyparsing.py as source, and using it to build the package.
  - client patches are not applied.
  - requires spice-protocol-0.8.1-2 (equivalent to upstream 0.8.2)
  - advertise itself as version 0.8.3, to notify the new feature.
  Resolves: rhbz#738266


author: Hans de Goede <hdegoede@redhat.com> - 0.10.1-1
changelog:
  - Rebase to upstream 0.10.1
  Resolves: rhbz#758089
  - This release adds support for usbredirection
  Resolves: rhbz#758091
  - This release fixes a bug in smartcard error handling
  Resolves: rhbz#741259


author: Christophe Fergeau <cfergeau@redhat.com> - 0.10.1-4
changelog:
  - add more logging for expired/invalid tickets
    Resolves: rhbz#787669
  - add more logging about use of certificates
    Resolves: rhbz#787678


author: Yonit Halperin <yhalperi@redhat.com> - 0.10.1-6
changelog:
  - Fix glitches in youtube movies
      + support video streams with frames of different sizes
    Resolves: rhbz#813826


author: Yonit Halperin <yhalperi@redhat.com> 0.10.1-9
changelog:
  - Fix memory leak during video streaming
    Resolves rhbz#821334
  - Fix segfault introduced when fixing rhbz#813826
    Related: rhbz#813826


author: Uri Lublin <uril@redhat.com> 0.11.3-1
changelog:
  - Rebase to upstream spice-server 0.11.3, which adds:
    * Support for seamless migration
    * Support for Render
    * spice-protocol is in the tarball now (a submodule in git)
    Resolves: rhbz#836123
    Resolves: rhbz#842353


author: Uri Lublin <uril@redhat.com> 0.12.0-1
changelog:
  - Rebase to upstream spice-server 0.12.0, which adds:
    * support setting client monitor configuration via device
      QXLInterface::client_monitors_config
    * support notifying guest of client capabilities
      QXLInterface::set_client_capabilities
    * new capability for A8 Surface support
    Resolves: rhbz#836123
    Resolves: rhbz#842353
    Resolves: rhbz#842310


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-5
changelog:
  - Fix various migration related bugs
    * don't process both cmd ring and dispatcher queue till migration data is received
    * fix assigning bad memory references to marshaller
    * fix memory corruption when receiving display migration data that exceeds 1024 bytes
    Resolves: rhbz#866929
    Resolves: rhbz#862352
    Resolves: rhbz#878700


author: Yonit Halperin <yhalperi@redhat.com> 0.12.0-7
changelog:
  - Fix mishandling of agent data received from the client after agent disconnection
    Resolves: rhbz#881980


author: Uri Lublin <uril@redhat.com> 0.12.0-9
changelog:
  - Fix calling set_client_capabilities when it is unsupported by qemu
    (fixes a crash when qemu-kvm is started with spice but without qxl)
    Resolves: rhbz#880276


author: Uri Lublin <uril@redhat.com> - 0.12.0-13
changelog:
  - Migration related fixes
    * Destroy video streams before sending MSG_MIGRATE
    * Fix wrong is_low_bandwidth setting after 2 migrations of a session
      that was originally a low bandwidth one.
    Resolves: rhbz#950029
    Resolves: rhbz#956345


author: Uri Lublin <uril@redhat.com> - 0.12.3-1
changelog:
  - Rebase to upstream 0.12.3 + some additional patches
    Resolves: rhbz#952671
    Resolves: rhbz#884812
    Resolves: rhbz#918472
    Resolves: rhbz#958276
    Resolves: rhbz#978403


author: Uri Lublin <uril@redhat.com> - 0.12.4-1
changelog:
  - Rebase to upstream 0.12.4
    Resolves: rhbz#952671
    Resolves: rhbz#859027
    Resolves: rhbz#823472
    Resolves: rhbz#961848
    Resolves: rhbz#977998
    Resolves: rhbz#887775


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-4
changelog:
  - Fix spice-server crash when client sends a password which is too long
    Resolves: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Make sure we build with -Wl,-z,relro. We used to be getting that flag
    from openssl, but this is no longer the case, and rpmdiff gave a huge
    warning about it being gone
    Related: rhbz#999839 (CVE-2013-4282)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix bad dates in changelog
    Resolves: rhbz#1038670
  - Fix crash on migration during reboot
    Resolves: rhbz#1004443
  - Use TLS 1.0 or better
    Resolves: rhbz#1035695


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-9
changelog:
  - Fix potential infinite loop on long running VMs (> 46 days)
    Resolves: rhbz#1072700
  - Fix assertion in video streaming code
    Resolves: rhbz#1086820


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12
changelog:
  - Fix spicevmc-related crash which could be triggered with older clients
    Resolves: rhbz#1163480
  - Fix crash when using VNC + QXL + rhel-6.0.0 machine type
    Resolves: rhbz#1135372


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-12.1
changelog:
  - Avoid race conditions reading monitor configs from guest. This race could
    trigger memory corruption host-side
    Resolves: rhbz#1239124


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP
  - Resolves: rhbz#584001 - Rebase sssd to 1.2
  - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
  - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
  - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
  - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
  - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
  -                         going online
  - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
  -                         HBAC rule


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-32
changelog:
  - Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-35
changelog:
  - Resolves: rhbz#645449 - 'getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - Related: rhbz#644072 - Rebase SSSD to 1.5
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  - Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Related:  rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - Also add the updated ding-libs to the BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-4
changelog:
  - Resolves: rhbz#674172 - Group members are not sanitized in nested group
  - processing
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
changelog:
  - Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named
  -                         "default"
  - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate
  -                         password
  - Resolves: rhbz#674141 - Traceback call messages displayed while
  -                         "sss_obfuscate" command is executed as a non-root
  -                         user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
changelog:
  - Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login
  - Resolves: rhbz#675284 - "no matching rule" message logged on all successful
  -                         requests
  - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for
  -                         authentication


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
changelog:
  - Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries
  - Resolves: rhbz#678410 - name service caches names, so id command shows
  -                         recently deleted users
  - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for
  -                         netgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#678593 - User information not updated on login for secondary
  -                         domains
  - Resolves: rhbz#678777 - IPA provider does not update removed group
  -                         memberships on initgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-9
changelog:
  - Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option
  - Resolves: rhbz#677318 - Does not read renewable ccache at startup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-10
changelog:
  - Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups
  - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-11
changelog:
  - Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on
  -                         ipa-server
  - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change
  - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option
  - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf
  -                         attribute on the server
  - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-12
changelog:
  - Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain
  -                         for base DN


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-13
changelog:
  - Related: rhbz#680440 - sssd does not handle kerberos server IP change
  -   SSSD was staying with the old server if it was still online


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-14
changelog:
  - Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min
  -                         waiting on netgroup
  - Resolves: rhbz#683431 - sssd consumes 100% CPU
  - Related: rhbz#680440  - sssd does not handle kerberos server IP change


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-15
changelog:
  - Resolves: rhbz#683860 - Skip users and groups that have incomplete contents
  - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5
  -                         in sssd.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-16
changelog:
  - Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them
  - Resolves: rhbz#689886 - group memberships are not populated correctly during
  -                         IPA provider initgroups
  - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-20
changelog:
  - Resolves: rhbz#690131 - Traceback messages seen while interrupting
  -                         sss_obfuscate using ctrl+d
  - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process
  -                         /usr/libexec/sssd/sssd_be was killed by signal 11
  -                         (SIGSEGV)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-21
changelog:
  - Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can
  -                         cause SSSD to stop caching and responding to
  -                         requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-23
changelog:
  - Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-24
changelog:
  - Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by
  -                         signal 11 (SIGSEGV)
  -                         Fix is to not attempt to resolve nameless servers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-35
changelog:
  - Resolves: rhbz#707282 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned
  - Resolves: rhbz#692404 - rfc2307bis groups are being enumerated even when the
  -                         gidNumber is out of the range of min_id,max_id.
  - Resolves: rhbz#699530 - Users with a local group as their primary GID are
  -                         denied access by the simple access provider
  - Resolves: rhbz#700172 - RFE: SSSD should support paged LDAP lookups
  - Resolves: rhbz#705434 - IPA provider fails initgroups() if user is not a
  -                         member of any group
  - Resolves: rhbz#703624 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-36
changelog:
  - Resolves: rhbz#698723 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-37
changelog:
  - Resolves: rhbz#707513 - Unable to authenticate users when username
  -                         contains "\0"


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-38
changelog:
  - Resolves: rhbz#707627 - Include valid "ldap_uri" formats in sssd-ldap man
  -                         page


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-39
changelog:
  - Resolves: rhbz#709342 - Typo in negative cache notification for initgroups()
  - Resolves: rhbz#708009 - "renew_all_tgts" and "renew_handlers" messages are
  -                         being logged multiple times when the provider comes
  -                         back online
  - Resolves: rhbz#707997 - The IPA provider does not work with IPv6
  - Resolves: rhbz#677327 - [RFE] Support overriding attribute value
  - Resolves: rhbz#692090 - SSSD is not populating nested groups in
  -                         Active Directory


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-41
changelog:
  - Resolves: rhbz#713961 - libsss_ldap segfault at login against OpenLDAP
  - Resolves: rhbz#713438 - sssd shuts down if inotify crashes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-42
changelog:
  - Resolves: rhbz#711416 - During the change password operation the ccache is
  -                         not replaced by a new one if the old one isn't
  -                         active anymore
  - Resolves: rhbz#715609 - Certificate validation fails with message
  -                         "Connection error: TLS: hostname does not match CN
  -                         in peer certificate"
  - Resolves: rhbz#719089 - IPA dynamic DNS update mangles AAAA records
  - Resolves: rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Honor TTL values when resolving hostnames


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-43
changelog:
  - Related:  rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Use ares_search instead of ares_query to honor
  -                         search entries in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-44
changelog:
  - Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 (SIGSEGV) when ldap_uri is misconfigured
  - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls 
  - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID
  - Resolves: rhbz#726475 - sssd_pam leaks file descriptors
  - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-45
changelog:
  - Related:  rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Related:  rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Fixes an issue on big endian platforms


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-47
changelog:
  - Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain
                            shells


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
  - Resolves: rhbz#733409 - Improve password policy error message
  - Resolves: rhbz#733663 - Authentication fails when there exists an empty
                            hbacsvcgroup
  - Resolves: rhbz#732935 - Add LDAP provider option to set
                            LDAP_OPT_X_SASL_NOCANON
  - Resolves: rhbz#734101 - sssd blocks login of ipa-users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-50
changelog:
  - Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple
                            external hosts along with managed host
  - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with
    krb5_validate = True and SElinux enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-51
changelog:
  - Resolves: rhbz#737157 - "System error" appears in log during change password
                            operation of a user in openldap server with ppolicy
                            enabled
  - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)"
                            messages are logged during change password operation
                            of a user in openldap server with ppolicy enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-52
changelog:
  - Resolves: rhbz#728343 - SSSD taking 5 minutes to log in
  - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-53
changelog:
  - Resolves: rhbz#741751 - HBAC rule evaluation does not properly handle host
                            groups
  - Resolves: rhbz#740501 - SSSD not functional after "self" reboot
  - Resolves: rhbz#742539 - HBAC: Hostname comparisons should be
                            case-insensitive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-55
changelog:
  - Resolves: rhbz#738621 - Lookup fails for non-primary usernames with
                            multi-valued uid
  - Resolves: rhbz#738629 - Group lookups doesn't return it's member for
                            sometime when the member has multi-valued uid
  - Resolves: rhbz#742295 - Use an explicit base 10 when converting uidNumber
                            to integer
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-56
changelog:
  - Resolves: rhbz#742278 - Rework the example config
  - Resolves: rhbz#746037 - Only access sssd_nss internal hash table if it was
                            initialized
  - Resolves: rhbz#742526 - SSSD's man pages are missing information
  - Resolves: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-57
changelog:
  - Resolves: rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
  - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-59
changelog:
  - Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems
  - Related:  rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
                            Fixes a crash introduced by the earlier patch.
  - Related:  rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
                            Fixes for internationalization


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-60
changelog:
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-64
changelog:
  - Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-67
changelog:
  - Resolves: rhbz#753842 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758157 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-2.beta2
changelog:
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3
  - Resolves: rhbz#786553 - sssd on ppc64 doesn't pull cyrus-sasl-gssapi.ppc as
                            a dependancy
  - Resolves: rhbz#785909 - --debug-timestamps=1 is not passed to providers
  - Resolves: rhbz#785908 - ldap_*_search_base doesn't fully limit the group and
                            netgroup search base correctly
  - Resolves: rhbz#785907 - [RFE] Add support to request canonicalization on krb
                            AS requests
  - Resolves: rhbz#785905 - [RFE] DEBUG timestamps should offer higher precision
  - Resolves: rhbz#785904 - [RFE] SSSD should have --version option
  - Resolves: rhbz#785902 - Errors with empty loginShell and proxy provider
  - Resolves: rhbz#785898 - Enable midway cache refresh by default
  - Resolves: rhbz#785888 - sssd returns empty netgroup at a second request for
                            a non-existing netgroup
  - Resolves: rhbz#785884 - Honour TTL when resolving host names
  - Resolves: rhbz#785883 - check DNS records before updates
  - Resolves: rhbz#785881 - List the keytab to pick the princiapl to use instead
                            of guessing
  - Resolves: rhbz#785880 - debug_level in sssd.conf overrides command-line
  - Resolves: rhbz#785879 - sss_obfuscate/python config parser modifies config
                            file too much
  - Resolves: rhbz#785877 - on reconnect we need to detect that a ipa/ds server
                            has been reinitialized
  - Resolves: rhbz#785741 - sssd.api.conf and sssd.api.d should not be in /etc
  - Resolves: rhbz#773660 - Kerberos errors should go to syslog
  - Resolves: rhbz#772163 - Iterator loop reuse cases a tight loop in the native
                            IPA netgroups code
  - Resolves: rhbz#771706 - sssd_be crashes during auth when there exists UTF
                            source host group in an hbacrule
  - Resolves: rhbz#771702 - sssd_pam crashes during change password operation
                            against a IPA server
  - Resolves: rhbz#771361 - case_sensitive function not working as intended for
                            ldap
  - Resolves: rhbz#768935 - Crash when applying settings
  - Resolves: rhbz#766941 - The full dyndns update message should be logged into
                            debug logs
  - Resolves: rhbz#766930 - [RFE] Add a new option to override home directory
                            value
  - Resolves: rhbz#766913 - [RFE] Add option to select validate and FAST keytab
                            principal name
  - Resolves: rhbz#766907 - Use [...] for IPv6 addresses in kdc info files
  - Resolves: rhbz#766904 - [RFE] Create a command line tool to change the debug
                            levels on the fly
  - Resolves: rhbz#766876 - [RFE] Make HBAC srchost processing optional
  - Resolves: rhbz#766141 - [RFE] SSSD should support FreeIPA's internal
                            netgroup representation
  - Resolves: rhbz#761582 - [RFE] Add ldap_sasl_minssf option
  - Resolves: rhbz#759186 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#755506 - [RFE] Add host-based (pam_host_attr) access control
  - Resolves: rhbz#753876 - [RFE] Add support for the services map
  - Resolves: rhbz#746181 - "getgrgid call returned more than one result" after
                            group name change in MSAD
  - Resolves: rhbz#744197 - [RFE] close LDAP connection to the server when idle
                            for some (configurable) time
  - Resolves: rhbz#742510 - [RFE] Separate Cache Timeouts for SSSD
  - Related:  rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#742052 - id -G group resolution takes extremely long
  - Resolves: rhbz#739312 - [RFE] sssd does not set shadowLastChange
  - Resolves: rhbz#736150 - [RFE] SSSD should support multiple search bases
  - Resolves: rhbz#735827 - [RFE] Ability to set a domain as case sensitive or
                            insensitive
  - Resolves: rhbz#735405 - [RFE] Option to disable warnings for unknown users
  - Resolves: rhbz#728212 - [RFE] sssd does not handle when paging control
                            disabled for openldap
  - Resolves: rhbz#726467 - SSSD takes 30+ seconds to login
  - Resolves: rhbz#721289 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 during auth when password for the user is
                            not set


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-3.beta2
changelog:
  - Handle filtering python Provides in a safer way
  - Related:  rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - Resolves: rhbz#761570 - [RFE] support looking up autofs maps via SSSD
  - Resolves: rhbz#788979 - sssd crashes during initgroups against a user
                            belonging to nested rfc2307bis group


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-5
changelog:
  - Resolves: rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#785871 - wrong build dependency on nscd
  - Resolves: rhbz#785873 - IPA host search base cannot be set
  - Resolves: rhbz#791208 - Entries lacking a POSIX username value break group
                            lookups
  - Resolves: rhbz#796307 - Simple Paged Search control needs to be used more
                            sparingly
  - Resolves: rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64
  - Resolves: rhbz#787035 - ipa - sssd slow response with thousands of user
                            entries
  - Resolves: rhbz#742509 - [RFE] Add SSSD Tool to purge cache
  - Resolves: rhbz#772297 - Fails to update if all nisNetgroupTriple or
                            memberNisNetgroup entries are deleted from a
                            netgroup
  - Resolves: rhbz#783138 - Backend occasionally goes offline under heavy load
  - Resolves: rhbz#797975 - sssd_be: The requested target is not configured is
                            logged at each login
  - Resolves: rhbz#735422 - Rebase SSSD to 1.8.0 in RHEL 6.3


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-7
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Use a patch and install the script to python_sitelib
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-8
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Fix typo in the patch
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-9
changelog:
  - Fix multilib-clean issue due to upgrade script
  - Remove old copy from the spec file
  - Related:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-10
changelog:
  - Fix explicit requires to use openldap instead of openldap-libs
  - Related:  rhbz#797282 - sssd-1.5.1-66.el6.x86_64 needs
                            openldap >= openldap-2.4.23-20.el6.x86_64


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-11
changelog:
  - Do not auto-upgrade debug levels
  - Tool still available for manual use
  - Reverts:  rhbz#753763 - Provide logging configuration compatibility on
                            SSSD 1.5/1.6 upgrade
  - Resolves: rhbz#798881 - Install-time warnings
  - Resolves: rhbz#798774 - IPA provider should assume that ipa_domain is also
                            the dns_discovery_domain
  - Resolves: rhbz#798655 - Password logins failing due to a process with high
                            UID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-12
changelog:
  - Resolves: rhbz#801407 - sssd_nss gets hung processing identical search
                            requests
  - Resolves: rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies
  - Resolves: rhbz#795562 - Infinite loop checking Kerberos credentials
  - Resolves: rhbz#798317 - sssd crashes when ipa_hbac_support_srchost is set to
                            true
  - Resolves: rhbz#799039 - --debug option for sss_debuglevel doesn't work
  - Resolves: rhbz#799915 - Unable to lookup netgroups with case_sensitive=false
  - Resolves: rhbz#799929 - Raise limits for max num of files sssd_nss/sssd_pam
                            can use
  - Resolves: rhbz#799971 - sssd_be crashes on shutdown
  - Resolves: rhbz#801533 - sssd_be crashes when resolving non-trivial nested
                            group structure
  - Resolves: rhbz#801368 - Group lookups doesn't return members with proxy
                            provider configured
  - Resolves: rhbz#801377 - getent returns non-existing netgroup name, when sssd
                            is configured as proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-15
changelog:
  - Update translations
  - Resolves: rhbz#802372 - Pick up latest translation files for SSSD
  - Resolves: rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Related:  rhbz#801451 - Logging in with ssh pub key should consult
                            authentication authority policies


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-17
changelog:
  - Related:  rhbz#802207 - getent netgroup hangs when
                            "use_fully_qualified_names = TRUE" in sssd
  - Resolves: rhbz#801719 - "Error looking up public keys" while ssh to replica
                            using IP address
  - Resolves: rhbz#803659 - Service lookup shows case sensitive names twice with
                            case_sensitive=false
  - Resolves: rhbz#803842 - Unable to bind to LDAP server when minssf set
  - Resolves: rhbz#805034 - accessing an undefined variable might cause crash
  - Resolves: rhbz#805108 - sss_ssh_knownhostproxy infinite loop hangs SSH login


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-18
changelog:
  - Resolves: rhbz#804057 - Initial service lookups having name with uppercase
                            alphabets doesn't work
  - Resolves: rhbz#804065 - Service lookup using case-sensitive protocol names
                            doesn't work when case_sensitive=false
  - Resolves: rhbz#805281 - sssd: Uses the wrong key when there a multiple
                            realms in a single keytab
  - Resolves: rhbz#805452 - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false
  - Resolves: rhbz#805918 - Wrong resolv_status might cause crash when name
                            resolution times out
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-20
changelog:
  - Related: rhbz#805452  - Unable to lookup user, group, netgroup aliases with
                            case_sensitive=false


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-21
changelog:
  - Resolves: rhbz#808458 - Authconfig crashes when sets krb realm
  - Resolves: rhbz#808597 - sssd_nss crashes on request when no back end is
                            running
  - Resolves: rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-22
changelog:
  - Fix typo in patch for SSH umask
  - Related:  rhbz#808107 - Coverity revealed memory management defects


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-23
changelog:
  - Resolves: rhbz#805924 - SSSD should attempt to get the RootDSE after binding
  - Resolves: rhbz#814237 - sdap_check_aliases must not error when detects the
                            same user
  - Resolves: rhbz#812281 - autofs client: map name length used as key length
  - Related:  rhbz#784870 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Related:  rhbz#814269 - sssd-1.5.1-66.el6_2.3.x86_64 freezes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-24
changelog:
  - Resolves: rhbz#805431 - NFS files/folders are mapped to nobody user if NFS
                            top level directory is chowned by a SSSD user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-25
changelog:
  - Resolves: rhbz#816616 - group members are now lowercased in case insensitive
                            domains


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-26
changelog:
  - Resolves: rhbz#818642 - Auth fails for user with non-default attribute names
  - Resolves: rhbz#819063 - sssd fails to provide partial data till paged search
                            returns "Size Limit Exceeded"
  - Resolves: rhbz#820585 - Group enumeration fails in proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-27
changelog:
  - Resolves: rhbz#820759 - AVC denial seen on sssd upgrade during ipa-client
                            upgrade
  - Resolves: rhbz#821044 - sss_groupadd no longer detects duplicate GID numbers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-28
changelog:
  - Resolves: rhbz#822236 - SSSD netgroups do not honor
                            entry_cache_nowait_percentage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-29
changelog:
  - Resolves: rhbz#824062 - sssd_be crashed with SIGSEGV in
                            _tevent_schedule_immediate()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-30
changelog:
  - Resolves: rhbz#824616 - sssd_nss crashes when configured with
                            use_fully_qualified_names = true


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-31
changelog:
  - Resolves: rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-32
changelog:
  - Fix protocol break for services map
  - Related:  rhbz#825028 - Service lookups by port number doesn't work on
                            s390x/ppc64 arches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.0-33
changelog:
  - Resolves: rhbz#840089 - Update the shadowLastChange attribute
                            with days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-1.rc1
changelog:
  - Rebase to 1.9.0 RC1
  - Resolves: rhbz#827606 - Rebase SSSD to 1.9 in 6.4
  - Bump the selinux-policy version number to pull in required fixes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-2
changelog:
  - Fix the "ca" translation of the sssd-simple manual page
  - Related: rhbz#827606 - Rebase SSSD to 1.9 in 6.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-5
changelog:
  - Do not send SIGKILL to service right after sending SIGTERM
  - Resolves: #771975
  - Fix the initial sudo smart refresh
  - Resolves: #869013
  - Implement password authentication for users from trusted domains
  - Resolves: #869071
  - LDAP child crashed with a wrong keytab
  - Resolves: #869150
  - The sssd_nss process grows the memory consumption over time
  - Resolves: #869443


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-6
changelog:
  - Resolves: rhbz#871576 - sssd does not resolve group names from AD
  - Resolves: rhbz#872324 - pam: fd leak when writing the selinux login file
                            in the pam responder
  - Resolves: rhbz#871424 - authconfig chokes on sssd.conf with chpass_provider
                            directive


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-7
changelog:
  - Resolves: rhbz#873032 - Move sss_cache to the main subpackage
  - Resolves: rhbz#829740 - Init script reports complete before sssd is actually
                            working
  - Resolves: rhbz#869466 - SSSD starts multiple processes due to syntax error in
                            ldap_uri
  - Resolves: rhbz#870505 - sss_cache: Multiple domains not handled properly
  - Resolves: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                            if the sssd is not running
  - Resolves: rhbz#872110 - User appears twice on looking up a nested group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-9
changelog:
  - Resolves: rhbz#873988 - Man page issue to list 'force_timeout' as an
                            option for the [sssd] section


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-10
changelog:
  - Resolves: rhbz#872180 - subdomains: Invalid sub-domain request type
  - Related: rhbz#867933 - invalidating the memcache with sss_cache doesn't work
                           if the sssd is not running


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-12
changelog:
  - Resolves: rhbz#870278 -  ipa client setup should configure host properly
                             in a trust is in place


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-16
changelog:
  - Resolves: rhbz#875738 - offline authentication failure always returns
                            System Error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-19
changelog:
  - Resolves: rhbz#877130 - LDAP provider fails to save empty groups
  - Related: rhbz#869466 - check the return value of waitpid()


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-20
changelog:
  - Resolves: rhbz#877126 - subdomains code does not save the proper
                            user/group name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-21
changelog:
  - Resolves: rhbz#877354 - ldap_connection_expire_timeout doesn't expire
                            ldap connections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-22
changelog:
  - Resolves: rhbz#861075 - SSSD_NSS failure to gracefully restart
                            after sbus failure


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-25
changelog:
  - Resolves: rhbz#878262 - ipa password auth failing for user principal
                            name when shorter than IPA Realm name
  - Resolves: rhbz#871843 - Nested groups are not retrieved appropriately
                            from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-26
changelog:
  - Resolves: rhbz#874673 - user id lookup fails using proxy provider
  - Fix a possibly uninitialized variable in the LDAP provider
  - Related: rhbz#877130


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-27
changelog:
  - Resolves: rhbz#824244 - sssd does not warn into sssd.log for broken
                            configurations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-28
changelog:
  - Resolves: rhbz#874616 - Silence the DEBUG messages when ID mapping code
                            skips a built-in group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-31
changelog:
  - Resolves: rhbz#882076 - SSSD crashes when c-ares returns success but an
                            empty hostent during the DNS update
  - Do not version libsss_sudo, it's not supposed to be linked against, but
    dlopened (Related: rhbz#761573)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-32
changelog:
  - Resolves: rhbz#875677 - password expiry warning message doesn't appear
                            during auth
  - Fix potential NULL dereference when skipping built-in AD groups
    (Related: rhbz#874616)
  - Add missing parameter to DEBUG message (Related: rhbz#829742)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-34
changelog:
  - Resolves: rhbz#877974 - updating top-level group does not reflect ghost
                            members correctly
  - Resolves: rhbz#880159 - delete operation is not implemented for ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-35
changelog:
  - Resolves: rhbz#882290 - arithmetic bug in the SSSD causes netgroup
                            midpoint refresh to be always set to 10 seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-36
changelog:
  - Resolves: rhbz#883336 - sssd crashes during start if id_provider is
                            not mentioned


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-37
changelog:
  - Resolves: rhbz#884480 - user is not removed from group membership during
                            initgroups
  - Fix incorrect synchronization in mmap cache (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-38
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider
  - Link sss_ssh_authorizedkeys and sss_ssh_knowhostsproxy with the client
    libraries (Related: #870060)
  - Move sss_ssh_knownhosts documentation to the correct section
    (Related: #870060)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-39
changelog:
  - Resolves: rhbz#882221 - Offline sudo denies access with expired
                            entry_cache_timeout
  - Fix several bugs found by Coverity and clang:
  - Check the return value of diff_gid_lists (Related: #869071)
  - Move misplaced sysdb assignment (Related: #827606)
  - Remove dead assignment (Related: #827606)
  - Fix copy-n-paste error in the memberof plugin (Related: #877974)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-40
changelog:
  - Resolves: rhbz#880546 - krb5_kpasswd failover doesn't work
  - Fix the error handler in sss_mc_create_file (Related: #789507)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-42
changelog:
  - Resolves: rhbz#885105 - sudo denies access with disabled
                            ldap_sudo_use_host_filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-43
changelog:
  - Resolves: rhbz#880176 - memberUid required for primary groups to match
                            sudo rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-44
changelog:
  - Resolves: rhbz#878419 - sss_userdel doesn't remove entries from in-memory
                            cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-45
changelog:
  - Resolves: rhbz#858345 - pam_sss(crond:account): Request to sssd
                            failed. Timer expired


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-46
changelog:
  - Resolves: rhbz#884600 - ldap_chpass_uri failover fails on using same
                            hostname


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-47
changelog:
  - Resolves: rhbz#882923 - Negative cache timeout is not working for proxy
                            provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-48
changelog:
  - Resolves: rhbz#880956 - Primary server status is not always reset after
                            failover to backup server happened
  - Silence a compilation warning in the memberof plugin (Related: rhbz#877974)
  - Do not steal resolv result on error (Related: rhbz#882076)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-49
changelog:
  - Resolves: rhbz#884666 - sudo: if first full refresh fails, schedule
                            another first full refresh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-50
changelog:
  - Resolves: rhbz#870045 - always reread the master map from LDAP
  - Resolves: rhbz#876531 - sss_cache does not work for automount maps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-52
changelog:
  - Related: rhbz#875851 - sysdb upgrade failed converting db to 0.11
  - Include more debugging during the sysdb upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-53
changelog:
  - Resolves: rhbz#885078 - sssd_nss crashes during enumeration if the
                            enumeration is taking too long


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-54
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed database
                            update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-57
changelog:
  - Resolves: rhbz#886091 - Disallow root SSH public key authentication
  - Add default section to switch statement (Related: rhbz#884666)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-58
changelog:
  - Resolves: rhbz#889168 - krb5 ticket renewal does not read the renewable
                            tickets from cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-62
changelog:
  - Resolves: rhbz#886848 - user id lookup fails for case sensitive users
                            using proxy provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-64
changelog:
  - Resolves: rhbz#891356 - Smart refresh doesn't notice "defaults" addition
                            with OpenLDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-66
changelog:
  - Resolves: rhbz#874579 - sssd caching not working as expected for selinux
                            usermap contexts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-67
changelog:
  - Resolves: rhbz#878583 - IPA Trust does not show secondary groups for AD
                            Users for commands like id and getent


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-68
changelog:
  - Resolves: rhbz#887961 - AD provider: getgrgid removes nested group
                            memberships


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-71
changelog:
  - Resolves: rhbz#895132 - Modifications using sss_usermod tool are not
                            reflected in memory cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-72
changelog:
  - Resolves: rhbz#894997 - sssd_be crashes looking up members with groups
                            outside the nesting limit


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-73
changelog:
  - Resolves: rhbz895615 - ipa-client-automount: autofs failed in s390x and
                           ppc64 platform


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-74
changelog:
  - Resolves: rhbz894381 - memory cache is not updated after user is deleted
                           from ldb cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-78
changelog:
  - Resolves: rhbz#896476 - SSSD should warn when pam_pwd_expiration_warning
                            value is higher than passwordWarning LDAP attribute.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-79
changelog:
  - Resolves: rhbz#902716 - Rule mismatch isn't noticed before smart refresh
                            on ppc64 and s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-84
changelog:
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-85
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#911329 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-86
changelog:
  - Resolves: rhbz#911299 - sssd: simple access provider flaw prevents intended
                            ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-88
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-90
changelog:
  - Resolves: #953165 - Enabling enumeration causes sssd_be process to
                        utilize 100% of the CPU


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-91
changelog:
  - Resolves: #967636 - SSSD frequently fails to return automount maps
                        from LDAP


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-93
changelog:
  - Resolves: #987479 - libsss_sudo should depend on sudo package with
                        sssd support


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-94
changelog:
  - Call restorecon on memcache files to force the right context on upgrades
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-95
changelog:
  - Mention that enumeration should be discouraged
  - Resolves: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-96
changelog:
  - Resolves: #988525 - sssd fails instead of skipping when a sudo ldap
                        filter returns entries with multiple CNs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-97
changelog:
  - Resolves: #986379 - sss_cache -N/-n should invalidate the hash table
                        in sssd_nss


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-98
changelog:
  - Resolves: #979046 - sssd_be goes to 99% CPU and causes significant login
                        delays when client is under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-99
changelog:
  - Clarify the min_id/max_id limits further
  - Resolves: #978994 - SSSD filter out ldap user/group if uid/gid is zero


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-101
changelog:
  - Resolves: #976273 - [RFE] Add a new override_homedir expansion for the
                        "original value"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-104
changelog:
  - Resolves: #971435 - Enhance sssd init script so that it would source
                        a configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-106
changelog:
  - Format patch to configure sysv script differently
  - RHEL-6 patch(1) apparently doesn't like the output of git format-patch
   -M -C and doesn't properly copy files on renames
  - Resolves: #971435 - Enhance sssd init script so that it would source a
    configuration.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-108
changelog:
  - Set correct state of SRV servers on resolving error
  - Resolves: #954275 - sssd fails connect to IPA server during boot when
                        spanning tree is enabled in network router.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-109
changelog:
  - Use permissive control when adding ghost users
  - Resolves: #928797 - cyclic group memberships may not work depending on
                        order of operations


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-112
changelog:
  - Resolves: #918394 - sssd etas 99% CPU and runs out of file descriptors
                        when clearing cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-113
changelog:
  - Resolves: #916997 - getgrnam / getgrgid for large user groups
                        is too slow due to range retrieval functionality


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-114
changelog:
  - Resolves: #914433 - sssd pam write_selinux_login_file creating the temp
                        file for SELinux data failed


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-115
changelog:
  - Apply a forgotten dependency for patch #254
  - Related: #916997 - getgrnam / getgrgid for large user groups
                       is too slow due to range retrieval functionality
  - Add two fixes for better handling of faulty SRV processing
  - Related: #954275 - sssd fails connect to IPA server during boot when
                       spanning tree is enabled in network router.
  - Remove enumerate=true from example in man page
  - Related: #988381 - clarify the disadvantages of enumeration in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-117
changelog:
  - Resolves: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-119
changelog:
  - Resolves: #948830 - sssd do too many disk writes causing delay in
                        "getent netgroup allmachines-netgroup" nested netgroups.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-120
changelog:
  - Resolves: #983028 - passwd returns "Authentication token manipulation
                        error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-121
changelog:
  - Print password complexity hint when password change fails with
    constraint violation
  - Related: #983028 - passwd returns "Authentication token manipulation
                       error" when entering wrong current password


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-122
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-123
changelog:
  - Silence restorecon on clean install
  - Resolves: #987456 - RHEL6 sssd upgrade restorecon workaround for
                        /var/lib/sss/mc context


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-124
changelog:
  - Resolves: #1002161 - large number of sudo rules results in error -
                         Unable to create response: Invalid argument


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-125
changelog:
  - Resolves: #997406 - sssd_nss core dumps under load
  - Resolves: #984814 - sssd_nss terminated with segmentation fault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-126
changelog:
  - Make IPA SELinux provider aware of subdomain users
  - A better version of already committed patch
  - Resolves: #954342 - In IPA AD trust setup, the sssd logs throws
                        'sysdb_search_user_by_name failed' error when
                        AD user tries to login via ipa client.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-128
changelog:
  - More upstream fixes to prevent memcache crashes
  - Related: #997406 - sssd_nss core dumps under load


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-129
changelog:
  - Do not crash when LDAP disconnects while a search is still in progress
  - Resolves: #1019979 - sssd_be segfault when authenticating against active
                         directory


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-130
changelog:
  - Inherit UID limits for subdomains
  - Resolves: #1020905 - Creating system accounts on a IdM client takes up
                         to 10 minutes when AD trust is configured in the IdM.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-131
changelog:
  - Allow combination of proxy id backend and LDAP auth backend
  - Resolves: #1025813 - SSSD: Allow for custom attributes in RDN when using
                         id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-132
changelog:
  - Resolves: #1038098 - sssd_nss grows memory footprint when netgroups
                         are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-134
changelog:
  Resolves: #1036168 - sssd can't retrieve auto.master when using the
                       "default_domain_suffix"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5.1-3
changelog:
  - Backport the InfoPipe patches needed for Sat6 integration
  - Related: #1051164 - Rebase SSSD to 1.11+ in RHEL6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-2
changelog:
  - Resolves: rhbz#1104145 - public key validator is too strict and does not
                             allow newlines anywhere in the public key string,
                             not even at the end


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-3
changelog:
  - Resolves: rhbz#1110369 - sssd is started before messagebus, making
                             sssd-ifp fail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-5
changelog:
  - Fix potential NULL dereference in IFP code
  - Related: rhbz#1110369 - sssd is started before messagebus, making
                            sssd-ifp fail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-7
changelog:
  - Resolves: rhbz#1042922 - [RFE] Add fallback to sudoRunAs when sudoRunAsUser
                             is not defined and no ldap_sudorule_runasuser mapping
                             has been defined in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-9
changelog:
  - Resolves: rhbz#1122158 - ad: group membership is empty when id mapping
                             is off and tokengroups are enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-11
changelog:
  - Resolves: rhbz#1109188 - dereferencing control failure against openldap
                             server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-12
changelog:
  - Resolves: rhbz#1111317 - [RFE] Add option for sssd to replace space with
                             specified character in LDAP group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-13
changelog:
  - Resolves: rhbz#1122873 -  Failover does not always happen from SRV
                              to hostname resolution(via /etc/hosts)
  - Remove spurious systemctl call on %postun


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-14
changelog:
  - Resolves: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-19
changelog:
  - Resolves: rhbz#1127757 - sssd can't retrieve sudo rules when using the
                             "default_domain_suffix" option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-20
changelog:
  - Resolves: rhbz#1127278 -  Auth fails when space in username is
                              replaced with character set by
                              override_default_whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-21
changelog:
  - Add notes about offline mode to sssd.conf
  - Related: rhbz#1110226 - Requests queued during transition from offline
                             to online mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-22
changelog:
  - Use the correct sudo iterator
  - Related: rhbz#1118336 - sudo: invalid sudoHost filter with asterisk


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-23
changelog:
  - Resolves: rhbz#1099290: RFE: Be able to configure sssd to honor openldap
                            account lock to restrict access via ssh key


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-25
changelog:
  - Resolves: rhbz#1111528 - Expired shadow policy user(shadowLastChange=0)
                             is not prompted for password change


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-26
changelog:
  - Resolves: rhbz#1130017 - Saving group membership fails if provider is AD,
                             POSIX attributes are used and primary group contains
                             the user as a member


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-28
changelog:
  - Resolves: rhbz#1125187 - simple_allow_groups does not lookup groups from
                             other AD domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-29
changelog:
  - Resolves: rhbz#1103487 - CVE-2014-0249 - sssd: incorrect expansion of group
                             membership when encountering a non-POSIX group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-31
changelog:
  - Resolves: rhbz#1141814 - Password expiration policies are not being
                             enforced by SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-32
changelog:
  - Resolves: rhbz#1160713 - TokenGroups for LDAP provider breaks in corner
                             cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.6-33
changelog:
  - Resolves: rhbz#1154042 - RHEL6.6 sssd (1.11) doesn't return all group
                             memberships against an IPA server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-1
changelog:
  - Resolves: rhbz#1168347 - Rebase sssd to 1.12.x
  - The rebase resolves the following RHEL bugzillas
  - Resolves: rhbz#1172865 - sssd.conf(5) man page gives bad advice about
                             domains parameter
  - Resolves: rhbz#1172494 - PAC: krb5_pac_verify failures should not
                             be fatal (backport fix from upstream)
  - Resolves: rhbz#1171782 - [RFE]: SSSD should preserve case for user
                             uid field
  - Resolves: rhbz#1170910 - SSSD should not fail authentication when only
                             allow rules are used
  - Resolves: rhbz#1168377 - [RFE] User's home directories and shells are
                             not taken from AD when there is an IPA trust with AD
  - Resolves: rhbz#1168363 - [RFE] Add domains= option to pam_sss
  - Resolves: rhbz#1168344 - [RFE] ID Views: Support migration from the sync
                             solution to the trust solution
  - Resolves: rhbz#1161564 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1148582 - inconsistent group information when multiple
                             ad domain sections are configured in sssd
  - Resolves: rhbz#1140909 - sssd.conf man page missing subdomains_provider
                             ad support
  - Resolves: rhbz#1139878 - SSSD connection terminated after failing
                             anonymous bind to IBM Tivoli Directory Server
  - Resolves: rhbz#1135838 - Man sssd-ldap shows parameter
                             ldap_purge_cache_timeout with "Default: 10800
                             (12 hours)"
  - Resolves: rhbz#1135432 - Dereference code errors out when dereferencing
                             entries protected by ACIs
  - Resolves: rhbz#1134942 - sssd does not recognize Windows server 2012
                             R2's LDAP as AD
  - Resolves: rhbz#1123291 - automount segfaults in sss_nss_check_header
  - Resolves: rhbz#1088402 - [RFE] Allow login through SSSD using multiple
                             attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-2
changelog:
  - Do not mark the selinux_child helper as setuid, we don't support rootless
    SSSD in 6.7
  - Related: rhbz#1168347 - Rebase sssd to 1.12.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-3
changelog:
  -  Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration
                             warning even if alternate authentication method
                             is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-4
changelog:
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query
  - Rebuild against latest krb5, add a versioned BuildRequires
  - Resolves: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-5
changelog:
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-7
changelog:
  - Resolves: rhbz#1194302 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-9
changelog:
  - Initialize a pointer in ldap_child to NULL
  - Resolves: rhbz#1198478 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-10
changelog:
  - Resolves: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-11
changelog:
  - Resolves: rhbz#1098147 - [RFE] Implement background refresh for users,
                             groups or other cache objects


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-12
changelog:
  - Fix Coverity warning in ldap_child
  - Add better debugging
  - Related: rhbz#1198478 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-13
changelog:
  - Resolves: rhbz#1200093 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-14
changelog:
  - Fix internal error codes broken when fixing rhbz#1036745
  - Related: rhbz#1036745 - [RFE] Allow SSSD to issue shadow expiration
                            warning even if alternate authentication method
                            is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-15
changelog:
  - Fix PAM responder initgroups cache for subdomain users
  - Log extop failures better
  - Related: rhbz#1168344 - [RFE] ID Views: Support migration from the sync
                            solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-16
changelog:
  - Fix warning in SELinux code
  - Handle setups with empty default and no SELinux maps
  - Related: rhbz#1194302 - With empty ipaselinuxusermapdefault security
                            context on client is staff_u
  - Resolves: rhbz#1202305 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605
  - Resolves: rhbz#1201847 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-18
changelog:
  - Resolves: rhbz#1202728 - sssd-ad requires samba3, but ipa-server-trust-ad
                             requires samba4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-20
changelog:
  - Cherry-pick unit test changes from upstream to allow cherry-picking
    sssd-1-12 patches
  - Remove unused LDAP provider code to avoid static analyser warnings
  - Related: rhbz#1168347 - Rebase sssd to 1.12.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-21
changelog:
  - Handle TTL=0 in SRV queries correctly
  - Resolves: rhbz#1171378 - Read and use the TTL value when resolving a
                             SRV query


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-22
changelog:
  - Fix a typo in DEBUG message
  - Related: rhbz#1173198 - [RFE] Have OpenLDAP lock out ssh keys when
                            account naturally expires


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-23
changelog:
  - Resolves: rhbz#1205716 - Installing sssd-common-1.12.4-18.el6 might
                             install with wrong user account (root)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-25
changelog:
  - Resolves: rhbz#1206121 - ldap_access_order=ppolicy: Explicitly mention in
                             manpage that unsupported time specification will
                             lead to sssd denying access


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-27
changelog:
  - BuildRequire the proper libkrb5 version for correct localauth plugin build
  - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-28
changelog:
  - Resolves: rhbz#1207720 - id lookup resolves "Domain Local" group and
                             errors appear in domain log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-29
changelog:
  - Package the localauth plugin
  - Related: rhbz#1168357 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-30
changelog:
  - Related: rhbz#1211728 - Only set the selinux context if the context
                            differs from the local one


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-31
changelog:
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-32
changelog:
  - Resolves: rhbz#1212017 - Sudo responder does not respect filter_users
                             and filter_groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-33
changelog:
  - Resolves: rhbz#1213716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-34
changelog:
  - Resolves: rhbz#1170910 - SSSD should not fail authentication when only
                             allow rules are used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-35
changelog:
  - Resolves: rhbz#1213940 - Overridde with --login fails trusted adusers
                             group membership resolution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-36
changelog:
  - Resolves: rhbz#1212387 - sssd_be segfault id_provider = ad
                             src/providers/ad/ad_gpo.c:843


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-37
changelog:
  - Resolves: rhbz#1217328 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-38
changelog:
  - Include several upstream fixes related to ID views
  - Resolves: rhbz#1215195 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1213947 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1213822 - Overrides with --login work in second attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-39
changelog:
  - Resolves: rhbz#1216094 - /usr/libexec/sssd/selinux_child crashes and
                             gets avc denial when ssh


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-40
changelog:
  - Resolves: rhbz#1219844 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-41
changelog:
  - Resolves: rhbz#1221358 - SSSD doesn't work with ID mapping and disabled
                             subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-42
changelog:
  - Resolves: rhbz#1215765 - sssd nss responder gets wrong number of
                             secondary groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-45
changelog:
  - Resolves: rhbz#1226834 - id lookup for non-root domain users doesn't
                             return all groups on first attempt


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-46
changelog:
  - Resolves: rhbz#1227860 - Provide a way to disable the cleanup task
  - Resolves: rhbz#1227863 - ignore_group_members doesn't work for subdomains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47
changelog:
  - Resolves: rhbz#1232738 - Cache is not updated after user is deleted from
                             ldap server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.1
changelog:
  - Resolves: rhbz#1258398 - sysdb sudo search doesn't escape special
                             characters


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.6
changelog:
  - Resolves: rhbz#1291158 - Group members are not turned into ghost entries
                             when the user is purged from the SSSD cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-47.7
changelog:
  - Resolves: rhbz#1298252 - 'filter_users' in conjunction with
                             'default_domain_suffix'


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


author: Joe Orton <jorton@redhat.com> 1.0.0-2
changelog:
  - add fix for lack of apr_dir_read ordering guarantee (Philip Martin)
  - enable compression in ra_dav by default (Tobias Ringström)


author: Joe Orton <jorton@redhat.com> 1.0.2-2
changelog:
  - add perl MODULE_COMPAT requirement for -perl subpackage
  - move perl man pages into -perl subpackage
  - clean up -perl installation and dependencies (Ville Skyttä, #123045)


author: Joe Orton <jorton@redhat.com> 1.1.3-7
changelog:
  - restore swig bindings support (from upstream via Max Bowsher, #141343)
  - tweak SELinux commentary in default subversion.conf


author: Joe Orton <jorton@redhat.com> 1.1.3-8
changelog:
  - further swig bindings fix (upstream via Max Bowsher, #151798)
  - fix perl File::Path dependency in filter-requires.sh


author: Joe Orton <jorton@redhat.com> 1.2.0-3
changelog:
  - update to 1.2.1
  - fix BuildRequires for ruby and apr-util (#163126)
  - drop static library archives


author: Joe Orton <jorton@redhat.com> 1.2.3-3
changelog:
  - update to 1.2.3
  - update to psvn.el r16070 from Stefan Reichoer
  - merge subversion.conf changes from RHEL4
  - merge filter-requires.sh changes from FC4 updates


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Joe Orton <jorton@redhat.com> 1.4.3-3
changelog:
  - update to 1.4.3 (#228691)
  - remove trailing dot from Summary
  - use current preferred standard BuildRoot
  - add post/postun ldconfig scriptlets for -ruby and -javahl


author: Joe Orton <jorton@redhat.com> 1.4.4-2
changelog:
  - update to 1.4.4
  - add Provides: svn (#245087)
  - fix without-java build (Lennert Buytenhek, #245467)


author: Joe Orton <jorton@redhat.com> 1.4.4-3
changelog:
  - fix build with new glibc open()-as-macro
  - build all swig code in %build, not %install
  - BuildRequire perl(Test::More), perl(ExtUtils::MakeMaker)


author: Joe Orton <jorton@redhat.com> 1.4.4-4
changelog:
  - trim dependencies from .la files
  - detabify spec file
  - test suite disabled to ease stress on builders


author: Joe Orton <jorton@redhat.com> 1.5.6-3
changelog:
  - update to 1.5.6
  - autoload psvn (#238491, Tom Tromey)
  - regenerate swig bindings (#480503)
  - fix build with libtool 2.2 (#469524)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.5-3
changelog:
  - Apply svn2cl upstream patch to fix newline issues with libxml2 2.7.4+,
    see http://bugs.debian.org/546990 for details.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.6.6-5
changelog:
  - Include svn2cl and its man page only in the -svn2cl subpackage (#558598).
  - Do not include bash completion in docs, it's installed.


author: Joe Orton <jorton@redhat.com> - 1.6.11-4
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783, CVE-2011-1921 (#709221)
  - add security fix for CVE-2011-0715 (#681174)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672679)


author: Joe Orton <jorton@redhat.com> - 1.6.11-5
changelog:
  - add init script for svnserve (#720790, #711904)
  - fix segfault with "AuthzForceUsernameCase lower" (#751321)
  - fix parent directory access with merges (#749494)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
changelog:
  - adjust audit patch, do not scream when kernel is
    compiled without audit netlink support (#401201)


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
changelog:
  - fixed building with new libtool
  - fix for incorrect handling of groups in Runas_User
  - added /usr/local/sbin to secure-path


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
changelog:
  - moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
  - epoch number sync


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version
    Resolves: rhbz#554321
  - drop *.pod man page duplicates from docs
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598383


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-7
changelog:
  - move the sudo_end* calls before closefrom()
  - close audit_fd before exec
  - fixed typo in Makefile.in
    Resolves: rhbz#569313


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-1
changelog:
  - rebase to latest stable version
  - sudo now uses /var/db/sudo for timestamps
  - new command available: sudoreplay
  - use native audit support
  - sync configuration paths with the nss_ldap package
    Resolves: rhbz#615087
    Resolves: rhbz#652726
    Resolves: rhbz#634159
    Resolves: rhbz#603823


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-6
changelog:
  - removed the --with-ldap-*conf options
  - added RELRO flags
    Resolves: rhbz#709235
    Resolves: rhbz#709859


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-8
changelog:
  - created a separate ldap configuration file, sudo-ldap.conf
  - visudo: mark unused aliases as warnings, not errors
  - backported signal handling from 1.7.5
  - don't disable coredumping from the code, rely on /proc/sys/fs/suid_dumpable
  - use correct SELinux context when editing files with sudoedit
  - fixed visudo syntax checks
  - fixed typos and inconsistencies in documentation
  - switched to an updated -getgrouplist patch to fix sudo -l -U <user> behavior 
    Resolves: rhbz#760843
    Resolves: rhbz#736030
    Resolves: rhbz#697775
    Resolves: rhbz#726634
    Resolves: rhbz#708515
    Resolves: rhbz#736653
    Resolves: rhbz#667120
    Resolves: rhbz#769701
    Resolves: rhbz#751680
    Resolves: rhbz#604297
    Resolves: rhbz#797511


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-9
changelog:
  - fixed uninitialized value warning introduced with the sudoedit-selinux patch
    Resolves: rhbz#806386


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10
changelog:
  - fixed bug in Runas_Spec group matching (#810147)
  - disable `sudo -l' output word wrapping if the output
    is piped (#810326)
  - fixed `sudo -i' command escaping (#806095)
    Resolves: rhbz#806095
    Resolves: rhbz#810147
    Resolves: rhbz#810326


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-10.1
changelog:
  - backported ldap code modifications that fix an issue with tls_checkpeer (#810372)
    Resolves: rhbz#810372


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-11
changelog:
  - use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK (#821976)
    Resolves: rhbz#821976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
changelog:
  - rebase to 1.8.6p3
  - new -devel subpackage
  - new configuration file: /etc/sudo.conf
    Resolves: rhbz#852045 - ulimit -c got Operation not permitted
    Resolves: rhbz#804123 - sudo does not call pam_close_session() or pam_end()
    Resolves: rhbz#828707 - sudo fails to report error correctly when execv(3) fails
    Resolves: rhbz#844691 - Cannot set RLIMIT_NPROC to unlimited via pam_limits when running sudo
    Resolves: rhbz#759480 - Rebase sudo to 1.8 in RHEL 6.4
    Resolves: rhbz#846117 - Sudo interpretation of wildcard command arguments is more lenient providing a security risk
    Resolves: rhbz#789937 - [RFE] Add ability to treat files authoritatively in sudoers.ldap
    Resolves: rhbz#836242 - sudo -s -u USERNAME can't change ulimit -c


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - extended the default sudo-ldap.conf file
  - corrected default file permissions on sudo.conf, sudo-ldap.conf
  - added patch that introduces the cmnd_no_wait Defaults option
    Resolves: rhbz#840980 - sudo creates a new parent process
    Resolves: rhbz#860397 - new /etc/sudo-ldap.conf configuration file problems


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-5
changelog:
  - Include just one sample plugin in the documentation for the -devel
    subpackage. Don't include architecture specific files.
  - patch: Do not inform the user that the command was not permitted by
    the policy if they do not successfully authenticate.
    Resolves: rhbz#759480
    Resolves: rhbz#871303
    Resolves: rhbz#872740


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-6
changelog:
  - added patches to address a number of issues in ldap & sssd plugins
  - fixed README.LDAP updating in the spec file
    Resolves: rhbz#860397
    Resolves: rhbz#876208
    Resolves: rhbz#876578
    Resolves: rhbz#879675
    Resolves: rhbz#879633


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-8
changelog:
  - updated man-page
  - fixed handling of RLIMIT_NPROC resource limit
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - show the SUDO_USER in logs, if running commands as root
  - sssd: filter netgroups in the sudoUser attribute
    Resolves: rhbz#856901
    Resolves: rhbz#947276
    Resolves: rhbz#886648
    Resolves: rhbz#994563
    Resolves: rhbz#848111
    Resolves: rhbz#994626
    Resolves: rhbz#973228
    Resolves: rhbz#880150


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-9
changelog:
  - sssd: match against ipa_hostname from sssd.conf too when
    checking sudoHost
    Resolves: rhbz#853542


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-13
changelog:
  - RHEL-6.6 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - fix sesh login shell argv[0]
    - handle the "(none)" hostname correctly
    - SSSD: fix ipa_hostname handling
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    Resolves: rhbz#1065415
    Resolves: rhbz#1078338
    Resolves: rhbz#1052940
    Resolves: rhbz#1083064
    Resolves: rhbz#1033703
    Resolves: rhbz#1006447
    Resolves: rhbz#1006463
    Resolves: rhbz#1070952


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-14
changelog:
  - RHEL-6.6 erratum
    - SSSD: fixed netgroup filter patch
    - SSSD: dropped serparate patch for #1006463, the fix is now part
      of the netgroup filter patch
    Resolves: rhbz#1006463
    Resolves: rhbz#1083064


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-15
changelog:
  - RHEL-6.6 erratum
    - SSSD: dropped the ipahostnameshort patch, as it is not
      needed. rhbz#1033703 is a configuration issue.
    Related: rhbz#1033703


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-16
changelog:
  - RHEL-6.7 erratum
    - added zlib-devel build required to enable zlib compression support
    - fixed two typos in the sudoers.ldap man page
    - fixed a hang when duplicate nss entries are specified in nsswitch.conf
    - SSSD: implemented sorting of the result entries according to the
            sudoOrder attribute
    - LDAP: fixed logic handling the computation of the "user matched" flag
    - fixed restoring of the SIGPIPE signal in the tgetpass function
    - fixed listpw, verifypw + authenticate option logic in LDAP/SSSD
    Resolves: rhbz#1106433
    Resolves: rhbz#1138267
    Resolves: rhbz#1147498
    Resolves: rhbz#1138581
    Resolves: rhbz#1142122
    Resolves: rhbz#1094548
    Resolves: rhbz#1144448


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-17
changelog:
  - RHEL-6.7 erratum
    - added patch for CVE-2014-9680
    - added BuildRequires for tzdata
    Resolves: rhbz#1200253


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Marek Grac <mgrac@redhat.com> - 1.1.12-4
changelog:
  - Localization problem at startup
  - Extending LV creates a duplicate entry in /etc/fstab
  - Cannot start due to missing module gnome 
  - Resolves: rhbz#579055 rhbz#586554 rhbz#585501


author: Marek Grac <mgrac@redhat.com> - 1.1.12-5
changelog:
  - Modification of volume size fails
  - Update localization for supported languages
  - Resolves: rhbz#585845 rhbz#584985


author: Marek Grac <mgrac@redhat.com> - 1.1.12-6
changelog:
  - system-config-lvm spec file cleanups
  - Modification of volume size fails
  - Resolves: rhbz#604174 rhbz#603770


author: Marek Grac <mgrac@redhat.com> - 1.1.12-12
changelog:
  - Displays Logical Volumes without filesystem under 'Unitialized'
  - Resolves: rhbz#791153
  - s-c-lvm traceback on parsing "dmsetup ls" output 
  - Resolves: rhbz#815921


author: Marek Grac <mgrac@redhat.com> - 1.1.12-13
changelog:
  - s-c-lvm crash after startup on machine with many LV
  - Resolves: rhbz#840070
  - s-c-lvm crash when encounter RAID 1 created in LVM
  - Resolves: rhbz#852864
  - s-c-lvm crash on mirrored LV with mirrorlog
  - Resolves: rhbz#852864


author: Marek Grac <mgrac@redhat.com> - 1.1.12-14
changelog:
  - s-c-lv crash after startup on machine with many LV
    Resolves: rhbz#840070
  - s-c-lvm crash when encounter RAID1 created in LVM
    Resolves: rhbz#852864


author: Marek Grac <mgrac@redhat.com> - 1.1.12-17
changelog:
  - s-c-lvm crases with thin volumes
    Resolves: rhbz#878253
  - s-c-lvm GUI can not be opened from some OS
    Resolves: rhbz#953071
  - s-c-lvm does not allow online extend of ext3 fs
    Resolves: rhbz#1029755


author: Michael A. Peters <mpeters@mac.com> - 2005-0.1
changelog:
  - Initial attempt at something that resembles packaging.
  -- Red Hat / Fedora specific patches from tetex not carried over yet
  -- probably some regression


author: Michael A. Peters <mpeters@mac.com> - 2005-0.2
changelog:
  - apply Fedora/Red Hat patches (except fot japanese)
  - port patches as needed
  -- Some of the scripts not patched have same tmpdir issue as the
  -- badscript patch fixes - so a second badscript patch IS still needed
  - build shared libkpathsea


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.2
changelog:
  - update to TeXLive 2007 final
  - remove texlive-errata dependencies
  - don't use dates in upstream tarball names
  - fix invalid freetype libraries location
  - disable broken parallel build
  - move filelists back to the spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.5
changelog:
  - separate kpathsea from texlive-fonts
  - update filelists
  - incorporate fixes from David Walluck (Mandriva, Debian, SuSE patches, etc.)
  - link against system freetype2/t1lib
  - remove kpathsea library building hacks
  - disable ttf2pk, don't link against type1
  - fix perl requires


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.9
changelog:
  - update internal xpdf to 3.02 from upstream to fix CVE-2007-3387
  - don't link statically with libstdc++
  - put xdvi.xaw3d to texlive-xdvi instead of main package


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.10
changelog:
  - update License tag to licenses used in TeXLive sources
  - remove ps2eps, it's a separate package
  - don't remove updmap.cfg in post phase
  - fix provides/obsoletes
  - tetex.cron -> texlive.cron
  - review fixes thanks to Patrice Dumas:
  - remove .gz from installing info in scriptlets
  - remove useless comments, lesstif/lesstif-devel requires
  - remove X-Red-Hat-Extra category from xdvi.desktop
  - update texlive-texdoc.patch
  - require xdg-utils, htmlview, don't require bison, flex, ed


author: MATSUURA Takanori <t.matsuu at gmail.com> - 2007-0.10.1
changelog:
  - add Japanese pTeX
  - Polish platex and pdfplatex are moved to platex-pl and
    pdfplatex respectively


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.11
changelog:
  - BR gawk, ghostscript
  - incorporate path fixes by Patrice Dumas
  - change in the kpathsea default paths
  - don't BR the *-texmf
  - ship kpathsea defaults as documentation
  - disable build of ps2eps at configuration time


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.12
changelog:
  - update description
  - BR ruby, don't obsolete tetex-tex4ht
  - remove license problematic/useless stuff, based on email from Karl Berry
  - move vfont.sample to doc
  - preserve timestamps
  - shuffle binaries between texlive and texlive-fonts, update scriptlets


author: Patrice Dumas <pertusus@free.fr>
changelog:
  - subpackage packages that have a distinct upstream
  - remove non free parts from the archive
  - install xdvi icon in hicolor directory


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.13
changelog:
  - update ls-Rs to deal with the japanese support
  - update ptex to 3.1.10 and mendex to 2.6e
  - fix install-info in scriptlets


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.15
changelog:
  - fix t1lib flaw CVE-2007-4033 (#352271)
  - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws (#345121)
  - xdvi won't segfault if DVI file contains character which
    is not present in font (#243630)
  - fix dvips -z buffer overflow with long href (#368591)
  - fix insecure usage of temporary file in dviljk (#368611, #368641)
  - link against poppler, not internal xpdf
  - include arabtex


author: Jindrich Novy <jnovy@redhat.com> - 2007-4
changelog:
  - update japanese, chinese, korean paths to fonts in vfontmap (#418081, #392221)
  - create customized cid-x.map for dvipdfmx (#418091)


author: Jindrich Novy <jnovy@redhat.com> - 2007-6
changelog:
  - unify texlive and texlive-fonts packages and obsolete
    texlive-fonts (related: #426388)
  - move subpackages versions to the top of spec file
  - changes from Patruce Dumas:
    * remove BuildRequires on texmf packages
    * don't create .fmt files during the build
    * ship the ptex.pool file


author: Jindrich Novy <jnovy@redhat.com> - 2007-9
changelog:
  - unify texlive and texlive-fonts filelists
  - package texdoc and texdoctk to a separate subpackage
    texlive-doc, because of the Perl-Tk dependencies and logic


author: Jindrich Novy <jnovy@redhat.com> - 2007-10
changelog:
  - don't build/package xdvik/pxdvik, it's now separated
  - fix texlive-doc requires, description
  - use virtual provides with parentheses to avoid clashes
    with real packages (#410401)


author: Jindrich Novy <jnovy@redhat.com> - 2007-11
changelog:
  - temporary fix to pdflatex to not to warn verbosely because of
    ambiguous entries in pdflatex.map (#425804)
  - update post scriptlets, spec cleanup


author: Jindrich Novy <jnovy@redhat.com> - 2007-12
changelog:
  - remove all references to teTeX from the packaged man pages
    and update links to point correctly to upstream mailing
    list and web page
  - drop xpdf patch, we link against poppler now


author: Jindrich Novy <jnovy@redhat.com> - 2007-13
changelog:
  - don't copy original pdftex map files but regenerate them
    with the correct updmap.cfg file updated in texlive-texmf
    (Related: #425804)
  - install mendex via libtool (#428507)


author: Jindrich Novy <jnovy@redhat.com> - 2007-15
changelog:
  - dependency pruning: (#428489, #429753)
    - package XeTeX separately
    - move ghostscript utilities (a2ping, e2pall, epstopdf, gsftopk,
      pdfcrop, ps4pdf, thumbpdf) and metafont with X support
      to texlive-utils subpackage
    - move allcm, allec, allneeded to texlive-dvips
    - package xdvipdfmx in dvipdfmx subpackage
    - only texlive-doc now requires xdg-utils


author: Jindrich Novy <jnovy@redhat.com> - 2007-16
changelog:
  - package Japanese separately -> texlive-japanese
  - add missing BR: texlive-texmf-fonts (#430338)
  - temporarily disable BR: texlive in kpathsea


author: Jindrich Novy <jnovy@redhat.com> - 2007-18
changelog:
  - package ConTeXt separately to get rid of the ruby dependency
  - fix summary for texlive-japanese
  - remove man pages with no corresponding binaries


author: Jindrich Novy <jnovy@redhat.com> - 2007-20
changelog:
  - move mktexpk to texlive-utils (#435176)
  - rename texlive-japanese to texlive-east-asian
  - move ghostscript Requires to dvipdfmx
  - remove trailing spaces from spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-23
changelog:
  - move MetaPost back to the main package from texlive-context
  - don't package dvipdfmx, it is now packaged separately (#433225)


author: Jindrich Novy <jnovy@redhat.com> - 2007-24
changelog:
  - put back dvipdfmx requires for xelatex (#433225)
  - don't compile unpackaged stuff
  - enable parallel build


author: Jindrich Novy <jnovy@redhat.com> - 2007-25
changelog:
  - fix fmtutil to not to hang in infinite loop, thanks to
    Stepan Kasal (#437008)
  - fix search paths in texmf.cnf, thanks to Patrice Dumas (#436949)


author: Jindrich Novy <jnovy@redhat.com> - 2007-27
changelog:
  - remove dvipdfmx completely, also for F8 (related #437448)
  - kpathsea requires texlive again (#437458)


author: Jindrich Novy <jnovy@redhat.com> - 2007-29
changelog:
  - run restorecon on /var/lib/texmf to avoid access denials
    if SELinux is in enforcing mode (#443286, #442161)


author: Jindrich Novy <jnovy@redhat.com> - 2007-30
changelog:
  - fix SELinux contexts everywhere possible, don't allow restorecon
    to fail (#444922)
  - add missing post/postun scriptlets for subpackages


author: Jindrich Novy <jnovy@redhat.com> - 2007-31
changelog:
  - don't build/package dvipdfm, it's now packaged separately (#445983),
    thanks to Jonathan Underwood
  - remove F8 related chunks from spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-32
changelog:
  - texlive-xetex now provides tex(xetex) (#451774)
  - attempt to fix lacheck segfault (#451513)
  - avoid multiple ownership of texconfig stuff (#442135)


author: Jindrich Novy <jnovy@redhat.com> - 2007-35
changelog:
  - texlive-context requires texlive-texmf-context (#455163)
  - fix lacheck to not to segfault (#451513)
  - rediff some patchesto be applicable with zero fuzz


author: Jindrich Novy <jnovy@redhat.com> - 2007-41
changelog:
  - texlive-east-asian now requires texlive-texmf-east-asian (#487258)
  - do not attempt to remove old fonts via cron in /var/lib/texmf,
    fonts are stored in ~/.texlive2007/texmf-var per-user
    (#477833, #463975, #453468)
  - use correct paths in brp-* post install scriptlets (#468179)
  - fix build with gcc4.4


author: Jindrich Novy <jnovy@redhat.com> 2007-45
changelog:
  - make kpathsea not dependent on texlive
  - fix lacheck again (#451513)
  - fix dvips configuration (#467542)
  - update kpathsea description and summary (#519257)
  - use upstream patch to fix pool overflow CVE-2009-1284 (#492136)
  - don't complain if the pdvipsk hunks touching config.ps don't apply


author: Jindrich Novy <jnovy@redhat.com> 2007-48
changelog:
  - add missing defattr to filelists
  - do not own /var/lib/texmf/web2c/, it is owned by texlive-texmf
  - use official tarball for dvipsk-jpatch


author: Jindrich Novy <jnovy@redhat.com> 2007-57
changelog:
  - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
    CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773184)


author: Than Ngo <than@redhat.com> - 2007-58
changelog:
  - Resolves: bz#699575, running latex when the .aux file is non-writable can erase the input .tex file


author: Michael A. Peters <mpeters@mac.com> - 2005-0.5
changelog:
  - Fixed perl scripts in TEXMF/scripts that thought it would be cute
  - to not use a proper shell bang
  -
  - Install an rpm macro file for building the binary package


author: Michael A. Peters <mpeters@mac.com> - 2005-0.6
changelog:
  - Attempting to comply with FHS guidelines.
  -  install a rpm macro file so that texjive binary package always uses
  -  the same directories for texmf, texmf-config, texmf-var
  - Filter out requires for perl(only) and perl(path_tre)


author: Michael A. Peters <mpeters@mac.com> - 2005-0.9
changelog:
  - some cleanup work on directory ownership
  - added missing dstroke package
  - added texmf tree for vendor bolt-on packages
  -
  - commented out perl script fix noted in 2005-0.5 changelog
  -  until it can be investigated further (and fixed with patch instead)


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.1.20070212rc
changelog:
  - update to TeXLive 2007 release candidate as of 12th Feb
  - don't package cslatex in separate tarballs
  - fix backups for patches 0, 7
  - unzip files quietly
  - package cnf files in texmf/web2c correctly
  - package new files for conTeXt
  - forwardport TeXLive-2005 patches
  - rpmlint fixes


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.2
changelog:
  - update to official TeXLive release
  - don't use dates in upstream tarball names
  - remove texlive-errata dependencies


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.4
changelog:
  - reintroduce the texlive-errata scheme
  - remove old texjive lists and generate the texmf archive lists
    from scheme-tetex.tpm automatically
    (collection-xetex was added manually to scheme-tetex.tpm because
    the texmf tree is incomplete -> fmtutil --all complains)
  - fix all filelists to reflect the change above
  - fix empty document creation


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.5
changelog:
  - generate new complete style list based on styles in teTeX
    exclusively, regardless the upstream scheme-tetex
    (srpm size reduced from 280M -> 180M for texmf tree)
  - add new hyphenations that weren't present, add latex-fonts,
    latexconfig, etc. to regenerate all fmts successfully


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.8
changelog:
  - add bin-tex, bin-xetex, bin-omega, bin-aleph, bin-metafont
  - remove sources lists and tpms from the texmf tarball
  - install texmf tree in a less hackish way, update texmf macro definitions
  - update updmap default configuration, move updmap.cfg to sysconfdir


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.9
changelog:
  - obsolete tetex-eurofont, it's a part of TeXLive
  - properly obsolete teTeX
  - update license tag (some styles/fonts need yet to be removed,
    licenses discussed upstream)
  - sort the zip list


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.10
changelog:
  - add bin-dvipsk, bin-bibtex, bin-amstex, bin-cyrillic, bin-cslatex,
    bin-cweb, bin-dvipdfmx, bin-dvicopy, bin-pstools, bin-texware,
    bin-thumbpdf, bin-web, bin-ttfutils (these contain man pages and
    config files for packaged binaries)
  - legal cleanup: remove literat, latex-tipps-und-tricks, fancybox,
    URW fonts with bad licenses and pcatcode from amscls


author: MATSUURA Takanori <t.matsuu at gmail.com> - 2007-0.10.2
changelog:
  - add Japanese pTeX
  - move Polish platex and pdfplatex are moved to platex-pl and
    pdfplatex respectively.
  - add ghostscript dependency and symbolic links to the cmap
    files. required for dvipdfmx


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.11
changelog:
  - XDvi config file is owned only by one subpackage (thanks to S.Umar)
  - declare config files as config(noreplace)
  - BR ghostscript
  - ship separate ls-R when japanese is enabled


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.13
changelog:
  - move configuration files to the main texlive package
  - remove useless common subpackage and move its content to main package
  - increase default texmf.cnf limits so that xmlto works
  - don't call install-info in scriptlets if it doesn't exist
  - fix some multiple file ownerships
  - update ptex-texmf to 2.5
  - use xdg-utils and htmlview in tkdefaults


author: Jindrich Novy <jnovy@redhat.com> - 2007-2
changelog:
  - don't conflict with tetex-doc (#413141)
  - remove tex4ht from texlive, it's packaged separately (#411501)


author: Jindrich Novy <jnovy@redhat.com> - 2007-5
changelog:
  - remove preview, it is to be packaged separately (#425805)
  - add japanese ptex fmtutil configuration, thanks to Patrice Dumas
  - update texlive-texmf-fonts package description to reflect
    texlive and texlive-fonts merge (related: #426388)


author: Jindrich Novy <jnovy@redhat.com> - 2007-10
changelog:
  - BR: texinfo-tex
  - package Japanese separately -> texlive-texmf-japanese
  - prevent packaging patch backups
  - correct directory/file permissions in less wasteful way to
    increase build speed
  - run only brp-compress


author: Jindrich Novy <jnovy@redhat.com> - 2007-12
changelog:
  - package bigfoot, erroneously missing from the original
    TeX Live 2007 (#426507)
  - remove references to cm-super fonts from map files to make
    dvips work correctly (#431182)
  - package ConTeXt separately to texlive-texmf-context to get
    rid of the ruby dependency
  - move from bz2 to lzma to save space
  - move font stuff out of the dvips subpackage


author: Jindrich Novy <jnovy@redhat.com> - 2007-13
changelog:
  - ship config file for dvipdfm (#434165), thanks to Patrice Dumas
  - obsolete/provide tetex-lineno (#426929)


author: Jindrich Novy <jnovy@redhat.com> - 2007-14
changelog:
  - rename texlive-texmf-japanese to texlive-texmf-east-asian
  - use better approach in installation of cmap files for dvipdfmx
    (#418091), thanks to Patrice Dumas
  - drop useless ghostscript Requires from texlive-texmf-fonts,
    drop xdg-utils Requires from texlive-texmf (#428489)


author: Jindrich Novy <jnovy@redhat.com> - 2007-15
changelog:
  - require texlive-texmf in texlive-texmf-fonts (#431255)
  - add missing post/postun scriptlets for texlive-texmf-latex
  - require tex-preview


author: Jindrich Novy <jnovy@redhat.com> - 2007-16
changelog:
  - update texlive package list to ship complete upstream XeTeX
    TeXLive distribution
  - introduce new texlive-texmf-xetex subpackage
  - move context bits to its subpackage, add missing styles from
    upstream collection-context


author: Jindrich Novy <jnovy@redhat.com> - 2007-17
changelog:
  - add styles from upstream collection-latexextra to have more
    complete LaTeX distribution (#436180)
  - move tex-preview dependency to texlive-texmf-latex (#436699)
  - remove tex4ht completely from lists
  - regenerate ls-Rs


author: Jindrich Novy <jnovy@redhat.com> - 2007-18
changelog:
  - run restorecon in fonts subpackage to fix bad SELinux contexts
  - require coreutils for post (#437457)


author: Jindrich Novy <jnovy@redhat.com> - 2007-24
changelog:
  - fix rendering of beamer slides (#457836)
  - remove ubbold.fd (#458150), thanks to Jason Cross
  - fix broken Euro sign (#459332) and Romanian accent (#460266),
    thanks to Vasile Gaburici


author: Jindrich Novy <jnovy@redhat.com> - 2007-26
changelog:
  - increase limits in texmf.cnf so that PostgreSQL documentation build
    passes (#460982)
  - update to texlive-2008 version of envlab


author: Jindrich Novy <jnovy@redhat.com> - 2007-27
changelog:
  - remove binaries from splitindex (#476636)
  - add unowned dirs into the filelist (#474027)
  - fix patch to brp-compress script (#468179)
  - remove F8 related chunks from spec


author: Jindrich Novy <jnovy@redhat.com> 2007-31
changelog:
  - do not conflict with dvipdfm
  - update perl requires filter
  - update latin.ldf (#469948)
  - do not provide any perl dependencies (#516350)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2007-32
changelog:
  - resolve conflict between texlive-texmf (and -doc) and tetex-perltex
  - resolve conflict between texlive-texmf and tetex-prosper
  - resolve conflict between texlive-texmf and tetex-perltex


author: Jindrich Novy <jnovy@redhat.com> 2007-34
changelog:
  - fix permissions of /var/lib/texmf/web2c (#512459, #531894)
  - add IEEEconf (#495877)
  - update achemso (#521459)
  - update perltex to 2.0 from CTAN
  - obsolete tetex-perltex


author: Jindrich Novy <jnovy@redhat.com> 2007-36
changelog:
  - allow to make LaTeX format from source more than 5 years old
    (it gives a warning instead of an error)
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531569#56


author: David Hill <djh[at]ii.net>
changelog:
  - update to latest CVS (0.4a)
  - update Enigmail to 0.82.2
  - alter mozconfig for new build requirements
  - add missing BuildReq (#987)


author: Warren Togami <warren@togami.com> 0:0.4-0.fdr.3
changelog:
  - open-browser.sh release 3
  - patch broken /usr/bin/mozilla script during install
  - dir ownership
  - XXX: Source fails build on x86_64... fix later


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.1
changelog:
  - update Enigmail to 0.83.3
  - use official source tarball (after removing the CRLFs)
  - package renamed to thunderbird


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.4
changelog:
  - add Mozilla x86_64 patch (Oliver Sontag)
  - Enigmail source filenames now include the version
  - modify BuildRoot


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.6
changelog:
  - update open-browser script, modify BuildRequires (Warren)
  - add Blizzard's x-remote patch
  - initial attempt at x-remote-enabled startup script


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.8
changelog:
  - minor improvements to open-browser.sh and startup script
  - update to latest version of Blizzard's x-remote patch


author: David Hill <djh[at]ii.net> 0.6-0.fdr.0.20040415
changelog:
  - update to latest CVS, update mozconfig and %build accordingly
  - update to Enigmail 0.83.6
  - remove x-remote and x86_64 patches
  - build with -Os


author: David Hill <djh[at]ii.net> 0.6-0.fdr.3
changelog:
  - installation directory now versioned
  - allow root to run the program (for installing extensions)
  - remove unnecessary %pre and %post
  - remove separators, update mozconfig and launch script (M. Schwendt, #1460)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.0
changelog:
  - update to 0.7
  - temporarily disable Enigmail 0.84.1, make ftp links work (#1634)
  - specify libdir, change BR for apt (V. Skyttä, #1617)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.1
changelog:
  - re-enable Enigmail 0.84.1
  - add gcc-3.4 patch (Kaj Niemi)
  - use official branding (with permission)


author: David Hill <djh[at]ii.net> 0.7.2-0.fdr.0
changelog:
  - update to 0.7.2, just because it's there
  - update gcc-3.4 patch (Kaj Niemi)
  - add EM registration patch and remove instdir hack


author: David Hill <djh[at]ii.net> 0.7.3-0.fdr.1
changelog:
  - update to Thunderbird 0.7.3 and Enigmail 0.85.0
  - remove XUL.mfasl on startup, add Debian enigmail patches
  - add Xvfb hack for -install-global-extension


author: Warren Togami <wtogami@redhat.com> 0.7.3-3
changelog:
  - rawhide import
  - apply NetBSD's freetype 2.1.8 patch
  - apply psfonts patch
  - remove BR on /usr/bin/ex, breaks beehive


author: Christopher Aillon <caillon@redhat.com> 0.8.0-1
changelog:
  - Update to 0.8.0
  - Remove enigmail
  - Update BuildRequires
  - Remove gcc34 and extension manager patches -- they are upstreamed.
  - Fix for gnome-vfs2 error at component registration


author: Christopher Blizzard <blizzard@redhat.com> 0.8.0-8
changelog:
  - Pull over patches from firefox build:
    - disable default application dialog
    - don't include software update since it doesn't work
    - make external app support work


author: Christopher Aillon <caillon@redhat.com> 1.0.2-3
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications
  - Add patch to properly link against libgfxshared_s.a
  - Fix multilib conflicts


author: Kristian Høgsberg <krh@redhat.com> 1.0.2-7
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.3.rc1
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944

  - Use the system NSS libraries
  - Build on ppc64


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.6.rc1
changelog:
  - Fix crash when deleting highlighted text while composing mail within
    plaintext editor with spellcheck enabled.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.5-5
changelog:
  - Update nopangoxft.patch
  - Fix rendering of MathML thanks to Behdad Esfahbod.
  - Update start page text to reflect the MathML fixes.
  - Enable pango by default on all locales
  - Build using -rpath
  - Re-enable GCC visibility


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.7-2
changelog:
  - Fix crash when changing gtk key theme
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.
  - Patch to add support for printing via pango from Behdad.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-7
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 2.0.0.0-0.5.rc1
changelog:
  - Fix the desktop file
  - Clean up the files list
  - Remove the default client stuff from the pref window


author: Christopher Aillon <caillon@redhat.com> 2.0.0.6-4
changelog:
  - Fix crashes when using GTK+ themes containing a gtkrc which specify 
    GtkOptionMenu::indicator_size and GtkOptionMenu::indicator_spacing


author: Jan Horak <jhorak@redhat.com> - 3.0-2.beta2
changelog:
  - Fixed clicked link does not open in browser (#489120)
  - Fixed missing help in thunderbird (#488885)


author: Remi Collet <fedora@famillecollet.com> - 3.1.6-8
changelog:
  - fix cairo + nspr required version
  - lightning: fix thunderbird version required
  - lightning: fix release (b3pre)
  - lightning: clean install


author: Christopher Aillon <caillon@redhat.com> - 3.1.9-7
changelog:
  - Make gvfs-open launch a compose window (salimma)
  - Spec file cleanups (salimma, caillon)
  - Split out mozilla crashreporter symbols to its own debuginfo package (caillon)


author: Jan Horak <jhorak@redhat.com> - 8.0-2
changelog:
  - Enable Mozilla's crash reporter again for all archs
  - Temporary workaround for langpacks
  - Disabled addon check UI (#753551)


author: Martin Stransky <stransky@redhat.com> - 14.0-4
changelog:
  - Removed StartupWMClass (rhbz#844863)
  - Fixed -g parameter
  - Removed thunderbird-devel before packing to avoid debugsymbols duplicities (rhbz#823940)


author: Martin Stransky <stransky@redhat.com> - 24.2.0-4
changelog:
  - Fixed rhbz#1024232 - thunderbird: squiggly lines used 
    for spelling correction disappear randomly


author: Erik Troan <ewt@redhat.com>
changelog:
  - added man page to package
  - uses a buildroot and %attr
  - fixed error message generation for directories
  - fixed flag propagation


author: Preston Brown <pbrown@redhat.com>
changelog:
  - I am the new maintainer
  - fixed cleanup of directories
  - added --quiet flag
  - freshen manpage
  - nice patch from Kevin Vajk <kvajk@ricochet.net> integrated


author: Paul Gear <paulgear@bigfoot.com>
changelog:
  - HP-UX port (including doco update)
  - Tweaked Makefile to allow installation into different base directory
  - Got rid of GETOPT_... defines which didn't do anything, so that short
    equivalents for all long options could be defined.
  - Fixed bug in message() where 'where' file handle was set but unused
  - Changed most fprintf() calls to message()


author: Preston Brown <pbrown@redhat.com>
changelog:
  - support for CTIME from jik@kamens.brookline.ma.us
  - fixes for fuser checks from Ian Burrell <iburrell@digital-integrity.com>.
  - remove directories when empty without --all flag, to be consistent w/docs.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use execle() instead of system() to get the correct return code, fixes from
    Jeremy Katz <katzj@linuxpower.org>


author: Preston Brown <pbrown@redhat.com>
changelog:
  - Patch from enrico.scholz@informatik.tu-chemnitz.de allows concurrent 
    usage of mtime, ctime, and atime checking (#19550).


author: Preston Brown <pbrown@redhat.com> 2.8-1
changelog:
  - added a "nodirs" option which inhibits removal of empty directories.
  - Integrated race condition fixes from Martin Macok (#50148)
  - do not try to remove ext3 journal files (#50522)


author: Mike A. Harris <mharris@redhat.com> 2.8.3-1
changelog:
  - Added support for large files with 64bit offsets by adding to CFLAGS
    -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 bug (#56961)


author: Mike A. Harris <mharris@redhat.com> 2.9.0-1
changelog:
  - Added Solaris/HPUX support to tmpwatch via patch from Paul Gear (#71288)
  - Rebuild in rawhide as 2.9.0-1


author: Miloslav Trmac <mitr@redhat.com> - 2.9.1-1
changelog:
  - Add --exclude, use it to preserve X socket directories (#107069)
  - Allow multiple directory arguments with relative paths (#91097)
  - Don't manually strip the binary


author: Miloslav Trmac <mitr@redhat.com> - 2.9.3-1
changelog:
  - Silently ignore ENOENT if somebody removes files faster than us (#154960)
  - Handle failures to exec fuser
  - Fix check for negative grace periods


author: Miloslav Trmac <mitr@redhat.com> - 2.9.6-1
changelog:
  - Add --exclude-user (original patch by Brett Pemberton)
  - Fix too long line in /etc/cron.daily/tmpwatch


author: Miloslav Trmac <mitr@redhat.com> - 2.9.8-1
changelog:
  - Add optional unit suffix to the "hours" (now "time") parameter (original
    patch by Alan J Rosenthal <flaps@dgp.toronto.edu>)
  - Fix some format string vs. arguments mismatches
  - Fix some rpmlint warnings


author: Miloslav Trmac <mitr@redhat.com> - 2.9.9-1
changelog:
  - Exclude aquota.group and aquota.user files
    Resolves: 206258
  - Don't require the user-specified paths to be absolute


author: Miloslav Trmac <mitr@redhat.com> - 2.9.11-1
changelog:
  - Fix a misleading message in --test
    Resolves: 234596
  - Compress the tarball using bzip2
  - Move the cron.daily script to a separate source file


author: Miloslav Trmač <mitr@redhat.com> - 2.9.12-1
changelog:
  - Fix --nosymlinks description in the man page
  - Use the maximum of atime, mtime and ctime when checking whether a file is
    obsolete
    Resolves: #373301


author: Miloslav Trmač <mitr@redhat.com> - 2.9.13-1
changelog:
  - New home page at https://fedorahosted.org/tmpwatch/ .
  - tmpwatch is now licensed under GPLv2.
  - Address issues from reviews by Adel Gadllah and Jason Tibbitts:
    - Run (make) with %{?_smp_mflags}
    - Add a comment describing the origin of the tarball to the spec file
    - Use a better BuildRoot:


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.1-1
changelog:
  - Bump version
  - Added comment in empty __init__.py files
  - Fixed BuildRoot tag to use latest recommendation of FPG
  - Lots of whitespace changes
  - Some minor README changes
  - Added a changelog rule in Makefile
  - Fixed rpmlint error messages
  - Add init() methods to each plugin
  - Call plugin init() methods during tuned's init()
  - Add support for command line parameters
        o -c conffile|--config==conffile to specify the location of the config file
        o -d to start tuned as a daemon (instead of as normal app)
  - Readded the debug output in case tuned isn't started as as daemon
  - Fixed initialization of max transfer values for net tuning plugin
  - Added complete cleanup code in case of tuned exiting and/or
    getting a SIGTERM to restore default values
  - Made the disk tuning pluging less nosy if started as non-daemon
  - Fixed missing self. in the tuned.py config handling
  - Added a manpage
  - Fixed summary
  - Added missing GPL notic to tuned.py
  - Added explanation for Source entry in specfile
  - Added a distarchive target for the Makefile for proper tagging in git
  - Added a explanation how to create the tarball via git in the specfile
  - Fixed the defattr() lines in the specfile to conform FRG


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.2-1
changelog:
  - Added config file option to enable/disable plugins
  - Switched from ConfigParser to RawConfigParser
  - Renamed doc/README.txt to doc/DESIGN.txt
  - Added tuned.conf man page
  - Updated tuned man page
  - Updated package descriptions (#487312)
  - Added documentation for utils scripts (#487312)


author: Phil Knirsch <pknirsch@redhat.com> - 0.1.5-1
changelog:
  - Updated documentation, thanks to Marcela Maslanova!
  - Updated diskdevstat and netdevstat to have command line arguments
  - Added the possibility to output a histogram at the end of the
    run for detailed information about the collected data


author: Phil Knirsch <pknirsch@redhat.com> - 0.2.1-1
changelog:
  - Added first set of profiles
  - Added tuned-adm tool for profile switching
  - Fixed several issues with the tuned-adm tool


author: Phil Knirsch <pknirsch@redhat.com> 0.2.2-1
changelog:
  - Updates to the ktune scripts
  - Added support for start/stop of the ktune scripts and ktune initscript


author: Phil Knirsch <pknirsch@redhat.com> 0.2.5-1
changelog:
  - Moved from prerelease to normal
  - Added missing ethtool requires
  - Fixed 532209 - init priority wrong for ktune (Jan Vcelak)
  - Fixed 530457 - [abrt] crash detected in tuned-0.2.5-0.1.fc12 (Jan Vcelak)
  - Added detection of netcard supported speeds (Jan Vcelak)
  - Fix ktune.sh script for stopping in regard to ALPM and CDROM polling (Phil Knirsch)


author: Phil Knirsch <pknirsch@redhat.com> 0.2.6-1
changelog:
  - Included Jan Vcelak's patch for pyo and pyc files
  - Updated ktune.sh script for laptop-battery-powersave profile with latest
    ALPM mechanism
  - Fixed ktune.sh script for laptop-battery-powersave profile to stop printing
    errors when files in /sys are missing


author: Thomas Woerner <twoerner@redhat.com> 0.2.7-1
changelog:
  - Updated ktune to version 0.4-1
    - Supports start and stop options in profile scripts calls
    - Fixed CMDLINE_ELEVATOR test (rhbz#496940#c9)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.7-2
changelog:
  - Fixed 542305 - [abrt] crash detected in tuned-0.2.5-2.fc12
    Some ethernet cards are not supported by 'ethtool'.


author: Jan Vcelak <jvcelak@redhat.com> 0.2.8-2
changelog:
  - Included Thomas Woerner's patch checking user rights when executing
    ktune service commands.
  - Included Jan Vcelak's patch fixing logging module initialization.


author: Phil Knirsch <pknirsch@redhat.com> 0.2.11-1
changelog:
  - Added support for display of currently active profile
  - Fix missing help command
  - Large update to documentation and manpages
  - Updated several of the profiles
  - Updated ALPM powersave code in the various powersave profiles
  - Disabled USB autosuspend in laptop-battery-powersave for now


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-3
changelog:
  - Fixes #577971 - error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key (Thomas Woerner)
  - Fixes #588739 - tuned should not apply /etc/sysctl.ktune settings (Jan Vcelak)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-4
changelog:
  - Fixes #596817 - spindown-disk profile requires hciconfig
    problematic profile was completely removed


author: Jan Vcelak <jvcelak@redhat.com> 0.2.11-5
changelog:
  - Fixes #605217 - tuned-adm unsafe profiles loading
    tuned-adm tool updated to the newest upstream version


author: Jarod Wilson <jarod@redhat.com> 0.2.11-8
changelog:
  - Don't touch transparent hugepage or cpufreq settings if not supported (#621877)
  - Add new enterprise-storage profile based on throughput-performance:
    * Disables barriers for all non-root non-/boot file systems (#624736)
    * Increases the default readahead value from 128kb to 512kb (#624828)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-1
changelog:
  - reduced FSB support on Asus EEE netbooks with Intel Atom
  - consolidate ktune script functions in tuning profiles
  - disable tuned daemon on s390/s390x architectures
  - set readahead by multiplying previous setting
  - udev rules and script for CFQ and multipath devices scheduler tuning
  - fix hal-disable-polling if no CD drives present
  - added support for architecture-specific configuration files
  - special sysctl setting for s390x arch in 'throughtput-performance' profile
  - overall profiles update
  - 'tuned-adm active' shows status of tuned and ktune services as well
  - proper configuration files setup after fresh instalation
  - tuned-utils: added license text
  - bash completion support
  - tuned-adm: profile validity check
  - Fixed 577983 - AttributeError: Nettool instance has no attribute 'interface'


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-2
changelog:
  - add missing man pages (#625850)
  - update profiles description (#619812)
  - fix typos in laptop-battery-profile script
  - disable tuned powersaving in disk-spindown, *-performance and enterprise-storage


author: Thomas Wörner <twoerner@redhat.com> 0.2.19-5
changelog:
  - fixed handling of stdin/stdout/stderr during daemon creation (rhbz#695480)
  - fixed device type determination (rhbz#707079)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-7
changelog:
  - fix: apply scheduler settings to vd* devices (#725497)
  - enhancement: add virtual-host profile (#740976)
  - enhancement: add virtual-guest profile (#740977)
  - fix: diskdevstat and netdevstat command line error handling (#747210)


author: Jan Vcelak <jvcelak@redhat.com> 0.2.19-8
changelog:
  - fix: poor ping latency in 'latency-performance' profile (#714180)
  - fix: ktune breaks disks when pecifying just the device for ELEVATOR_TUNE_DEVS (#784308)
  - fix: should not disable barriers on devices with write back cache (#801561)
  - fix: /var/run/tuned/tuned.pid created with insecure permissions (#845336)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-10
changelog:
  - fix: virtual-guest profile should not deploy the nobarrier option
    resolves: rhbz#886956
  - fix: disable transparent hugepages in latency-performance profile
    resolves: rhbz#887355


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-12
changelog:
  - fix: tuned incorrectly sets readahead values when new device is inserted
    resolves: rhbz#905077
  - fix: there is a race when multiple devices are inserted
    resolves: rhbz#904062


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-13
changelog:
  - add support for upstream THP
    resolves: rhbz#912788
  - added sap profile, backported features it needs
    resolves: rhbz#910838
  - made elevator settings customizable
    resolves: rhbz#987547
  - fixed usb_autosuspend and bluetooth functions
    resolves: rhbz#982756
  - increased kernel.sched_migration_cost in virtual-host profile
    resolves: rhbz#969491
  - documented virtual-guest and virtual-host profiles
    resolves: rhbz#964187
  - fixed typo in tuned-adm help
    resolves: rhbz#963821
  - modified latency-performance profile to lock CPU to C1
    resolves: rhbz#961792
  - added support for /etc/sysctl.d
    resolves: rhbz#959732
  - fixed permissions of /var/run/tuned/pmqos-static.pid
    resolves: CVE-2013-1820
  - fixed diskdevstat labels
    resolves: rhbz#885080
  - quiet errors when remounting FS with nobarriers
    resolves: rhbz#838512


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.2.19-15
changelog:
  - dynamically changing symlinks excluded from the RPM verification
    resolves: rhbz#1017366
  - reversed reading of sysctl configuration in SYSCTL_POST to follow
    RHEL-6 behavior
    resolves: rhbz#1036049
  - fixed typo in latency-performance profile regarding SYSCTL_POST
    resolves: rhbz#1064062
  - added support for s390 block devices (/dev/dasd)
    resolves: rhbz#1129936
  - added support for Xen VS devices (/dev/xvd)
    resolves: rhbz#1159963
  - increased vm.max_map_count in sap-netweaver profile
    resolves: rhbz#1174253


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in %{_docdir};
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006p-1
changelog:
  - Upstream 2006p
    - Official version of Western Australia DST trial changes
    - Latitude/longitude changes for Europe/Jersey and Europe/Podgorica


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a
    - Updates to Bahamas, they will be in sync with 2007 US DST change
    - New zone Australia/Eucla
    - Africa/Asmera renamed to Africa/Asmara, link created
    - Atlantic/Faeroe renamed to Atlantic/Faroe, link created
  - Packaging
    - Adding BuildRequires: glibc-common >= 2.5.90-7 to build tzdata
      with extended 64-bit format necessary for dates beyond 2037


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007e-1
changelog:
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Fix licensing tag.
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, New South Wales and Lord Howe
      Island are changing their DST rules effective next year
    - Sync several Antarctic station's rules with the New Zealand
    - leapseconds contain changes from the most recent IERS bulletin


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1


author: Petr Machata <pmachata@redhat.com> - 2007i-1
changelog:
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00


author: Petr Machata <pmachata@redhat.com> - 2008b-1
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information


author: Petr Machata <pmachata@redhat.com> - 2008c-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Fix a typo in Java subpackage name


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Changes for Mauritius (extends DST to years to come)
    - Palestine changes clocks for the duration of Ramadan
    - Argentina will start DST on Sunday October 19, 2008
    - Brazil will start DST on 2008-10-19
  - Drop Pakistan and Morocco patches


author: Petr Machata <pmachata@redhat.com> - 2008h-1
changelog:
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue


author: Petr Machata <pmachata@redhat.com> - 2008i-1
changelog:
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).


author: Petr Machata <pmachata@redhat.com> - 2009a-1
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute


author: Petr Machata <pmachata@redhat.com> - 2009d-1
changelog:
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15


author: Petr Machata <pmachata@redhat.com> - 2009e-1
changelog:
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Egypt ends DST on 2009-09-24


author: Petr Machata <pmachata@redhat.com> - 2009f-1
changelog:
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Drop Pakistan patch


author: Petr Machata <pmachata@redhat.com> - 2009h-2
changelog:
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch


author: Petr Machata <pmachata@redhat.com> - 2009k-1
changelog:
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file


author: Petr Machata <pmachata@redhat.com> - 2009m-1
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch


author: Petr Machata <pmachata@redhat.com> - 2009m-2
changelog:
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1 (tzdata-2009m-karachi.patch)


author: Petr Machata <pmachata@redhat.com> - 2009o-1
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)


author: Petr Machata <pmachata@redhat.com> - 2010h-1
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
  - Upstream 2010a
    - Source code cleanups
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October
  - Upstream 2010d
    - The DST change in Bangladesh takes place a minute earlier
    - Fiji to end DST on 2010-03-28 at 03:00, about a month earlier
    - Samoa to observe DST this year; they didn't observe DST last year
    - DST in Chile extended to 3 April
  - Upstream 2010e:
    - Fix a typo in Bangladesh DST rule
  - Upstream 2010f:
    - Changes to Australian stations in Antarctica
    - Correct 2010 Samoa DST start date
    - New zone Antarctica/Macquarie
    - Change Syria DST start from last Friday in March to first Friday
      in April in 2010 and forward
  - Upstream 2010g:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates
  - Upstream 2010h:
    - No DST in Tunisia in 2010 and forward
    - No DST in Pakistan in 2010 and forward
  - Dropped tzdata-2009o-argentinas.patch
  - Resolves: #568668 (DST time change in Paraguay [Asuncion])


author: Petr Machata <pmachata@redhat.com> - 2010i-1
changelog:
  - Upstream 2010i:
    - Morocco will have DST from 2010-05-02 to 2010-08-08
    - San Luis, Argentina will keep permanent DST after April 11, 2010
    - Updates of historical stamps for Taiwan
  - Resolves: #585134 (Morocco starts DST on May 2, 2010)


author: Andreas Schwab <schwab@redhat.com> - 2010k-1
changelog:
  - Upadate to 2010k (#618600)
    - No DST in Egypt during Ramadan in 2010
    - Bahía de Banderas moved to UTC-6 on April 4, 2010, new time zone
      America/Bahia_Banderas
    - Rename Pacific/Truk to Pacific/Chuuk and Pacific/Ponape to Pacific/Pohnpei
    - Update historical data of Europe/Helsinki
    - Update tz-links page


author: Petr Machata <pmachata@redhat.com> - 2010l-1
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010
  - Resolves: #628645


author: Petr Machata <pmachata@redhat.com> - 2010o-1
changelog:
  - Upstream 2010m:
    - Hong Kong didn't observe DST in 1977
    - In zone.tab, remove obsolete association of Vostok Station with
      South Magnetic Pole; add association with Lake Vostok
  - Upstream 2010n:
    - Change end of DST in Samoa in 2011 from 2011-04-03 0:00 to
      2011-04-03 1:00
  - Upstream 2010o:
    - Fiji will end DST on March 6, 2011, not March 27, 2011
  - Resolves: #662781


author: Petr Machata <pmachata@redhat.com> - 2011b-1
changelog:
  - Upstream 2011a:
    - Updates of historical stamps for Hawaii
  - Upstream 2011b:
    - America/North_Dakota/Beulah: Mercer County, North Dakota, changed
      from the mountain time zone to the central time zone
  - Kemerovo oblast should use OMST/OMSST abbreviation (tzdata-2011b-kemerovo.patch)
  - Resolves: #596800
  - tzdata-2011b-c.patch
    - Update of historical stamps for Juneau, Sitka, and histcurrent
      stamps for Metlakatla.  Sitka and Metlakatla are new zones.
    - Delay end of DST in Chile in 2011 until first Sunday in April.
  - Resolves: #681907


author: Petr Machata <pmachata@redhat.com> - 2011d-1
changelog:
  - Upstream 2011d:
    - Change end of DST in Samoa in 2011.
    - Change start of DST in Cuba in 2011.
    - Move start of DST in Turkey by one day in 2011.
  - Dropped tzdata-2011b-c.patch
  - Resolves: #684213


author: Petr Machata <pmachata@redhat.com> - 2011d-3
changelog:
  - Morocco introduced DST for 2011 from April 2 to July 31. (tzdata-2011d-morocco.patch)
  - Resolves: #692031


author: Petr Machata <pmachata@redhat.com> - 2011g-1
changelog:
  - Upstream 2011e:
    - Morocco introduced DST for 2011 from April 2 to July 31.
    - Delay end of DST in Chile in 2011 until May 7.
  - Resolves: #694521
  - Upstream 2011f:
    - The Falkland Islands will not turn back clocks this winter, but
      stay on daylight saving time.
  - Upstream 2011g:
    - Egypt abandons DST in 2011 (and forward)
  - Resolves: #698613
  - Dropped tzdata-2011d-chile.patch
  - Dropped tzdata-2011d-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2011h-2
changelog:
  - Upstream 2011h:
    - Russia abandons DST in 2011.
    - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
  - Resolves: #716936


author: Petr Machata <pmachata@redhat.com> - 2011h-3
changelog:
  - Patch for upcoming change in Newfoundland.  The transition time
    changes from 12:01 AM to 2:00 AM.
  - Resolves: #729693


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011l-3
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #740000


author: Petr Machata <pmachata@redhat.com> - 2011n-1
changelog:
  - Rebase to 2011n
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Add a patch for the leap second that will occur this summer
  - Resolves: #773755


author: Petr Machata <pmachata@redhat.com> - 2011n-2
changelog:
  - The Chilean Government has decided to postpone the entrance into
    winter time (to leave DST) from March 11 2012 to April 28th 2012
  - Resolves: #796569


author: Petr Machata <pmachata@redhat.com> - 2012b-1
changelog:
  - Rebase to 2012b; changes vs. 2011n-2:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802460


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820732


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Patsy Franklin <pfrankli@redhat.com> - 2014c-1
changelog:
  - Rebase to 2014c
    - Egypt's government to re-apply daylight saving time.
    - zic now generates transitions for minimum time values
    - Port to Cygwin sans glibc.
    - Remove now-confusing comment about Jordan.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zone changes effective on 2014-10-26
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST 
      on 2014-11-02 at 02:00.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Patsy Franklin <pfrankli@redhat.com> - 2014i-1
changelog:
  - Rebase to 2014i
    - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
    - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
      that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2014j-1
changelog:
  - Rebase to 2014j
    - Turks & Caicos' switch from US eastern time to UTC-4 year-round
      did not occur on 2014-11-02 at 02:00.  It's currently scheduled
      for 2015-11-01 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2015a-1
changelog:
  - Rebase to 2015a
    - New leap second 2015-06-30 23:59:60 UTC as per IERS Bulletin C 49.
    - The Mexican state of Quintana Roo, represented by America/Cancun,
      will shift from Central Time with DST to Eastern Time without DST
      on 2015-02-01 at 02:00.
    - Chile will not change clocks in April or thereafter; its new
      standard time will be its old daylight saving time.  This affects
      America/Santiago, Pacific/Easter, and Antarctica/Palmer.


author: Patsy Franklin <pfrankli@redhat.com> - 2015b-1
changelog:
  - Rebase to 2015b
    - Mongolia will start observing DST again this year, from the last
      Saturday in March at 02:00 to the last Saturday in September at 00:00.
    - Palestine will start DST on March 28, not March 27.  Also,
      correct the fall 2014 transition from September 26 to October 24.
      Adjust future predictions accordingly.


author: Patsy Franklin <pfrankli@redhat.com> - 2015c-1
changelog:
  - Rebase to 2015c
    - Egypt's spring-forward transition is at 24:00 on April's last Thursday,
      not 00:00 on April's last Friday.  2015's transition will therefore be on
      Thursday, April 30 at 24:00, not Friday, April 24 at 00:00.  Similar fixes
      apply to 2026, 2037, 2043, etc.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-1
changelog:
  - Rebase to 2015d:
    - The Egyptian Cabinet announced that DST will be cancelled for 2015.
    - The abbreviations for Hawaii-Aleutian standard and daylight times
      have been changed from HAST/HADT to HST/HDT, as per US Government
      Printing Office style. This affects only America/Adak since 1983,
      as America/Honolulu was already using the new style.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-3
changelog:
  -  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
     not 06-13 and 07-18 as we had guessed.


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Rebase to 2015e:
    - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
      not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
    - Assume Cayman Islands will observe DST starting next year, using US rules.
      Although it isn't guaranteed, it is the most likely.


author: Patsy Franklin <pfrankli@redhat.com> - 2015f-1
changelog:
  - Rebase to 2015f
    - North Korea switches to +0830 on 2015-08-15.
      The abbreviation remains "KST".
    - Uruguay no longer observes DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-1
changelog:
  - Rebase to 2015g
    - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
    - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
    - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
    - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
      effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
      New zone America/Fort_Nelson.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-3
changelog:
  - Synchronize javazic tool for OpenJDK 6 & 7 with upstream. (#1212549)
  - Fix Africa/Casablanca transitions from 2027 forward. (#1217109)


author: Patsy Franklin <pfrankli@redhat.com> - 2016a-1
changelog:
  - Rebase to 2016a
    - America/Cayman will not observe daylight saving this year after all.
      Revert our guess that it would.
    - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
    - Asia/Tehran now has DST predictions for the year 2038 and later,
      to be March 21 00:00 to September 21 00:00.  This is likely better
      than predicting no DST, albeit off by a day every now and then.


author: Robert Love <rml@tech9.net>
changelog:
  - Make work without a build root
  - Correctly install the right files
  - Pass the RPM_OPT_FLAGS to gcc so we can build per the build policy
  - Put some prereqs in
  - Install the hotplug symlink to udev


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add udevsend, and udevd to the files
  - add ability to build udevd with glibc after the rest is build with klibc


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - fix up udevd build, as it's no longer needed to be build seperatly
  - add udevtest to list of files
  - more Red Hat sync ups.


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add some more files to the documentation directory
  - add ability to build scsi_id and make it the default


author: Harald Hoyer <harald@redhat.com> - 026-2
changelog:
  - udev-026
  - preserve ownership of device nodes, which already exist
  - do not remove device nodes if UDEV_REMOVE="no"
  - added volume_id
  - build with klibc


author: Harald Hoyer <harald@redhat.com> - 029-3
changelog:
  - put /etc/sysconfig/udev in /etc/udev/udev.conf and removed it
  - made only udev.static static
  - make our defaults the default values
  - removed /udev


author: Harald Hoyer <harald@redhat.com> - 030-7
changelog:
  - removed usage of /usr/bin/seq in start_udev
  - set correct permissions in start_udev
  - extended the cloexec patch
  - removed udev-persistent package (define with_persistent==0)
  - check for /var/run/console/console.lock before calling /sbin/pam_console_setowner
  - linked pam_console_setowner statically against libglib-2.0.a


author: Harald Hoyer <harald@redhat.com> - 030-8
changelog:
  - changed defaults not to remove device nodes
  - added rule for net/tun
  - extended start_udev to create devices, which can trigger module autoloading
  - refined cloexec patch, to redirect stdin,out,err of /dev.d execed apps to /dev/null


author: Jeremy Katz <katzj@redhat.com> - 030-11
changelog:
  - use tmpfs instead of ramfs (it has xattr support now)
  - change variables appropriately to TMPFS intead of RAMFS in udev.conf
  - create loopN, not just loop in start_udev


author: Harald Hoyer <harald@redhat.com> - 030-15
changelog:
  - added nvidia devices to start_udev
  - added UDEV_RAMFS for backwards compat to udev.conf
  - changed Group (bug 131488)
  - added libselinux-devel to build requirements


author: Harald Hoyer <harald@redhat.com> - 030-16
changelog:
  - moved %{_sysconfdir}/hotplug.d/default/udev.hotplug to %{_sysconfdir}/hotplug.d/default/10-udev.hotplug


author: Harald Hoyer <harald@redhat.com> - 030-21
changelog:
  - applied enumeration patch from David Zeuthen for cdrom symlinks (bug 131532)
  - create /dev/ppp in start_udev (bug 131114)
  - removed nvidia devices from start_udev
  - check for restorecon presence in start_udev (bug 131904)


author: Jeremy Katz <katzj@redhat.com> - 030-26
changelog:
  - require a 2.6 kernel
  - prereq instead of requires MAKEDEV
  - obsolete and provide dev
  - add a trigger for the removal of /dev so that we set things up


author: Harald Hoyer <harald@redhat.com> - 030-27
changelog:
  - simplified udev.conf
  - refined close_on_exec patch
  - added pam_console supply for symlinks, now gives correct permissions,
    for e.g. later plugged in cdroms
  - renamed sr? to scd? (see devices.txt; k3b likes that :)


author: Harald Hoyer <harald@redhat.com> - 032-3
changelog:
  - corrected permissions for /dev/rtc (bug 133636)
  - renamed device-mapper to mapper/control (bug 133688)


author: Harald Hoyer <harald@redhat.com> - 032-4
changelog:
  - made /etc/udev/devices/ for manual device nodes
  - refined SELINUX check, if /dev is not yet mounted in start_dev


author: Harald Hoyer <harald@redhat.com> - 032-8
changelog:
  - added patches from Féliciano Matias for multiple symlinks (bug 134477 and 134478)
  - corrected some permissions with a missing leading 0
  - added z90crypt to the permissions file (bug 134448)
  - corrected requires and conflicts tags
  - removed /dev/log from MAKEDEV creation


author: Harald Hoyer <harald@redhat.com> - 032-9
changelog:
  - obsoleted $UDEV_LOG, use udev_log
  - correct SYMLINK handling in pam_console.dev
  - specfile cleanup
  - added check-cdrom.sh for nice cdrom symlinks


author: Harald Hoyer <harald@redhat.com> - 032-10
changelog:
  - added floppy madness (bug 134830)
  - replay scsi events in start_udev for the devices on the adapter (bug 130746)


author: Harald Hoyer <harald@redhat.com> - 034-1
changelog:
  - new version udev-034
  - removed patches, which went upstream
  - pam_console.dev link renamed to 05-pam_console.dev
  - MAKEDEV.dev links renamed to 10-MAKEDEV.dev


author: Harald Hoyer <harald@redhat.com> - 034-3
changelog:
  - removed scary error messages from wait_for_sysfs
  - symlink from nst? -> tape?
  - kill udevd on update


author: Harald Hoyer <harald@redhat.com> - 035-1
changelog:
  - version 035, which only improves wait_for_sysfs
  - load ide modules in start_udev, until a hotplug script is available
    (bug 135260)


author: Harald Hoyer <harald@redhat.com> - 038-2
changelog:
  - par[0-9] is now a symlink to lp
  - MAKEDEV the parport devices
  - now conflicts with older initscripts


author: Harald Hoyer <harald@redhat.com> - 039-1
changelog:
  - version 039, fixes also manpage bug 135996 
  - fixed glibc issue for static version (getgrnam, getpwnam) (bug 136005)
  - close the syslog in every app


author: Harald Hoyer <harald@redhat.com> - 039-2
changelog:
  - improved wait_for_sysfs for virtual consoles with Kay Siever's patch
  - wait for ppp class
  - wait for LVM dm- devices
  - integrate wait_for_sys in udev.static for the initrd


author: Harald Hoyer <harald@redhat.com> - 039-4
changelog:
  - do not call dev.d scripts, if network interface hasn't changed 
    the name
  - correct wait for dummy network devices
  - removed NONBLOCK from volume-id
  - do not log in udev.static, which should fix bug 136005


author: Harald Hoyer <harald@redhat.com> - 039-5
changelog:
  - added udev-039-norm.patch, which prevents removal of hd* devices,
    because the kernel sends remove/add events, if an IDE removable device
    is close(2)ed. mke2fs, e.g. would fail in this case.


author: Harald Hoyer <harald@redhat.com> - 039-6.FC3.1
changelog:
  - speed up pam_console.dev
  - mount pts and shm, in case of the dev trigger
  - increased timeout for udevstart
  - removed syslog() from signal handler (caused vmware locks)
  - turned off logging, which speeds up the boot process


author: Harald Hoyer <harald@redhat.com> - 048-2
changelog:
  - fixed a case where reading /proc/ide/hd?/media returns EIO
    (bug rh#142713)
  - changed all device node permissions of group "disk" to 0640 
    (bug rh#110197)
  - remove $udev_db with -fr in case of a directory (bug rh#142962)


author: Harald Hoyer <harald@redhat.com> - 050-6
changelog:
  - introducing /etc/udev/makedev.d/50-udev.nodes
  - glibcstatic patch modified to let gcc4 compile udev


author: Harald Hoyer <harald@redhat.com> - 056-1
changelog:
  - updated to version 056
  - merged permissions in the rules file
  - added udevpermconv.sh to convert old permission files


author: Bill Nottingham <notting@redhat.com> - 062-2
changelog:
  - update to 062
  - use included ata_id, build usb_id
  - load modules for pci, usb, pcmcia
  - ship RELEASE-NOTES in %doc


author: Harald Hoyer <harald@redhat.com> - 075-2
changelog:
  - moved /etc/udev/scripts to /lib/udev
  - moved /etc/udev/devices to /lib/udev/devices
  - added new event replay for kernel >= 2.6.15
  - added usb devices
  - renamed cpu device to cpuid (bug #161538)
  - changed vendor string "Onstream" to "On[sS]tream" (bug #173043)
  - compiled all *_id programs statically


author: Harald Hoyer <harald@redhat.com> - 077-2
changelog:
  - switched back to udevstart and use active /dev/.udev/queue waiting 
    in start_udev
  - removed support for old kernels
  - refined some udev.rules


author: Harald Hoyer <harald@redhat.com> - 078-4
changelog:
  - removed group "video" from the rules
  - fixed specfile
  - load nvram, floppy, parport and lp modules in
    /etc/sysconfig/modules/udev-stw.modules until there 
    is a better solution
  - fixed more floppy module loading


author: Harald Hoyer <harald@redhat.com> - 084-4
changelog:
  - fixed group issue with vol_id (bz #181432)
  - fixed dvb permissions (bz #179993)
  - added support for scsi media changer (bz #181911)
  - fixed pktcdvd device creation (bz #161268)


author: Peter Jones <pjones@redhat.com> - 084-7
changelog:
  - Don't start udevd in %post unless it's already running
  - Stop udevd before chkconfig --del in %preun


author: Harald Hoyer <harald@redhat.com> - 084-8
changelog:
  - fixed ZIP drive thrashing (bz #181041 #182601)
  - fixed enumeration (%e does not work anymore) (bz #183288)


author: Harald Hoyer <harald@redhat.com> - 084-9
changelog:
  - create non-enum device (cdrom, floppy, scanner, changer)
    for compatibility (random device wins)
    e.g. /dev/cdrom -> hdd /dev/cdrom-hdc -> hdc /dev/cdrom-hdd -> hdd


author: Harald Hoyer <harald@redhat.com> - 089-1
changelog:
  - version 089
  - do not force loading of parport_pc (bug #186850)
  - manually load snd-powermac (bug #176761)
  - added usb floppy symlink (bug #185171)
  - start_udev uses udevtrigger now instead of udevstart


author: Harald Hoyer <harald@redhat.com> - 095-7
changelog:
  - added udevtimeout=<timeout in seconds>
    kernel command line parameters for start_udev 
    (default is to wait forever)


author: Harald Hoyer <harald@redhat.com> - 095-9
changelog:
  - improved error msg for firmware_helper (bug #206944)
  - added xpram symlink to slram device nodes (bug #205563)
  - removed infiniband rules (bug #206224)
  - use newest path_id script (bug #207139)


author: Harald Hoyer <harald@redhat.com> - 104-2
changelog:
  - moved uinput to input subdirectory (rhbz#213854)
  - added USB floppy symlinks (rhbz#185171)
  - fixed ZIP drive handling (rhbz#223016)
  - Resolves: rhbz#213854,rhbz#185171,rhbz#223016


author: Harald Hoyer <harald@redhat.com> - 106-1
changelog:
  - version 106
  - specfile cleanup
  - removed pilot rule
  - removed dasd_id and dasd_id rule
  - provide static versions in a subpackage


author: Harald Hoyer <harald@redhat.com> - 106-3
changelog:
  - modprobe only on modalias (bug #238140)
  - make startup messages visible again
  - speedup boot process by not executing pam_console_apply while booting
  - Resolves: rhbz#238140


author: Harald Hoyer <harald@redhat.com> - 113-7
changelog:
  - major rule cleanup
  - removed persistent rules from 50 and included upstream rules
  - removed skip_wait from modprobe


author: Harald Hoyer <harald@redhat.com> - 114-1
changelog:
  - version 114
  - big rule unification and cleanup
  - added persistent names for network and cdrom devices over reboot


author: Harald Hoyer <harald@redhat.com> - 113-10
changelog:
  - do not run vol_id on non-partition block devices (bug #251401)
  - read all multiline pnp modaliases again


author: Harald Hoyer <harald@redhat.com> - 114-4
changelog:
  - added patch to prevent persistent net rules for virtual network interfaces,
    like vmware and vlans


author: Harald Hoyer <harald@redhat.com> - 115-2
changelog:
  - some upstream fixes from git
  - last_rule for loop rules (speedup for live-cds/qemu with 128 loop devices)


author: Harald Hoyer <harald@redhat.com> - 115-3
changelog:
  - some upstream fixes from git
  - removed last_rule for loop rules
  - added "udevinfo udevtrace" kernel command line options for better debugging


author: Harald Hoyer <harald@redhat.com> 115-5.20071012git
changelog:
  - added upstream patch for rhbz#328691
  - moved floppy module loading to pnp-alias in /etc/modprobe.d/floppy-pnp


author: Harald Hoyer <harald@redhat.com> 116-3
changelog:
  - fixed preun chkconfig
  - added /sbin path to chkconfig in post section 
  - patch: do not generate net rules for type > 256
  - fixes glitches appearing in bz#323991


author: Harald Hoyer <harald@redhat.com> 118-4
changelog:
  - made symlinks relative (rhbz#432878)
  - removed the backgrounding of node creation (rhbz#381461)
  - do not change sg group ownership to disk for scanners (rhbz#432602)
  - attempt to fix selinux symlink bug (rhbz#345071)
  - fixed URL
  - made rpmlint mostly happy
  - disabled static version (no static selinux lib)


author: Harald Hoyer <harald@redhat.com> 118-6
changelog:
  - moved all generated files to /var/lib/udev 
    (also 70-persistent-cd.rules 70-persistent-net.rules)
  - added a caching mechanism for MAKEDEV (saves some seconds on startup)
  - added trigger for selinux-policy and MAKEDEV to remove the udev cache files


author: Harald Hoyer <harald@redhat.com> 118-7
changelog:
  - files from /var/lib/udev/rules.d are copied to /dev/.udev/rules.d 
    at startup and back at shutdown
  - persistent cd and net rules generate the files in 
    /dev/.udev/rules.d now
  - added post section to symlink 70-persistent-cd.rules 70-persistent-net.rules
    from /etc/udev/rules.d to /dev/.udev/rules.d


author: Harald Hoyer <harald@redhat.com> 118-8
changelog:
  - added /etc/sysconfig/udev to configure some speedups
  - added "udevnopersist" as a kernel command line, to disable
    persistent storage symlink generation


author: Harald Hoyer <harald@redhat.com> 118-9
changelog:
  - added more support for the "modprobedebug" kernel command 
    line option, to debug hanging kernel modules


author: Harald Hoyer <harald@redhat.com> 120-2
changelog:
  - removed warning about deprecated /lib/udev/devices (rhbz#440961)
  - replaced /usr/bin/find with shell find function (rhbz#440961)


author: Harald Hoyer <harald@redhat.com> 120-3
changelog:
  - fixed pre/preun scriptlets (bug #441941)
  - removed fedora specific patch for selinux symlink handling


author: Harald Hoyer <harald@redhat.com> 120-4.20080421git
changelog:
  - added patches from git:
  - persistent device naming: also read unpartitioned media
  - scsi_id: initialize serial strings
  - logging: add trailing newline to all strings
  - path_id: remove subsystem whitelist
  - allow setting of MODE="0000"
  - selinux: more context settings
  - rules_generator: net rules - always add KERNEL== match to generated rules
  - cdrom_id: replace with version which also exports media properties
  - vol_id: add --offset option
  - udevinfo: do not replace chars when printing ATTR== matches
  - Resolves: rhbz#440568


author: Harald Hoyer <harald@redhat.com> 126-1
changelog:
  - version 126
  - fixed udevadm syntax in start_udev (credits B.J.W. Polman)
  - removed some manually created devices from makedev (bug #457125)


author: Harald Hoyer <harald@redhat.com> 135-2
changelog:
  - changed udevsettle -> udevadm settle
  - added doc to libudev-devel
  - added more attr and defattr
  - various rpmlint fixes


author: Harald Hoyer <harald@redhat.com> 136-1
changelog:
  - test for restorecon in start_udev before it is used (bug #480608)
  - added groups video audio cdrom tape dialout in post
    (might be moved to MAKEDEV)
  - version 136


author: Harald Hoyer <harald@redhat.com> 139-3
changelog:
  - renamed modprobe /etc/modprobe.d/floppy-pnp to
    /etc/modprobe.d/floppy-pnp.conf (bug #492732 #488768)
  - Resolves: rhbz#492732


author: Harald Hoyer <harald@redhat.com> 142-4
changelog:
  - git fix: udevadm: settle - fix timeout
  - git fix: OWNER/GROUP: fix if logic
  - git fix: rule-generator: cd - skip by-path links if we create by-id links
  - git fix: fix possible endless loop for GOTO to non-existent LABEL
  - git fix: cdrom_id: suppress ID_CDROM_MEDIA_STATE=blank for plain non-writable 
  		CDROM media


author: Harald Hoyer <harald@redhat.com> 143-2
changelog:
  - add acpi floppy modalias
  - add retrigger of failed events in udev-post.init
  - killall pids of udev in %pre


author: Harald Hoyer <harald@redhat.com> 145-1
changelog:
  - version 145
  - add "udevlog" kernel command line option to redirect the
    output of udevd to /dev/.udev/udev.log


author: Harald Hoyer <harald@redhat.com> 145-2
changelog:
  - fix file permissions
  - remove rpath
  - chkconfig --add for udev-post
  - fix summaries
  - add "Required-Stop" to udev-post


author: Harald Hoyer <harald@redhat.com> 147-1
changelog:
  - version 147
  - Fix upgrade from Fedora 11 with bluez installed (#533925)
  - obsolete DeviceKit and DeviceKit-devel (#532961)
  - fixed udev-post exit codes (#523976)
  - own directory /lib/udev/keymaps (#521801)
  - no more floppy modaliases (#514329)
  - added one more modems to modem-modeswitch.rules (#515349)
  - add NEWS file to the doc section
  - automatically turn on hotplugged CPUs (rhbz#523127)
  - recognize a devtmpfs on /dev (bug #528488)


author: Harald Hoyer <harald@redhat.com> 147-2.2
changelog:
  - only require s390utils-base, rather than s390utils (#553156)
  - removed non-working softlinks (partly fixes also #528883)
  - Resolves: rhbz#553156


author: Harald Hoyer <harald@redhat.com> 147-2.4
changelog:
  - add symlink rule for virtio ports (rhbz#559180)
  - fixed initscript
  - create /dev/net/tun with 0666 in start_udev
  - Export ID_WWN_VENDOR_EXTENSION and ID_WWN_WITH_EXTENSION
  - Related: rhbz#543948 rhbz#515413
  - Resolves: rhbz#559180


author: Harald Hoyer <harald@redhat.com> 147-2.7
changelog:
  - fixed udev-post initscript retriggering (rhbz#566568)
  - attempt to fix network interface renaming (rhbz#565724)
  - Resolves: rhbz#565724, rhbz#566568


author: Harald Hoyer <harald@redhat.com> 147-2.9
changelog:
  - rename non-handled network interfaces, so that the handled
    can be renamed to their destination name (rhbz#565724)
  - Resolves: rhbz#565724


author: Harald Hoyer <harald@redhat.com> 147-2.10
changelog:
  - add one more letter to renamed interfaces to avoid name 
    clashing (rhbz#565724)
  - Resolves: rhbz#565724


author: Harald Hoyer <harald@redhat.com> 147-2.11
changelog:
  - add SCSI SAS handling to path_id (rhbz#537185)
  - fixed handling of boxes with lots of disks and huge
    volume groups (rhbz#570016)
  - fixed virtio-ports rule (rhbz#569699)
  - Resolves: rhbz#537185, rhbz#569699, rhbz#570016


author: Harald Hoyer <harald@redhat.com> 147-2.12
changelog:
  - fixed virtio-ports rule patch (rhbz#569699)
  - removed IFINDEX from renamed interfaces (rhbz#572681)
  - do not reset selinux labels (rhbz#575128)
  - Resolves: rhbz#572681, rhbz#569699, rhbz#575128


author: Harald Hoyer <harald@redhat.com> 147-2.13
changelog:
  - supress error message in pre/post while killing old udevd
    (rhbz#576819)
  - fixed a lot of cdrom related problems (rhbz#582557, rhbz#582559)
  - Resolves: rhbz#576819, rhbz#582557, rhbz#582559


author: Harald Hoyer <harald@redhat.com> 147-2.14
changelog:
  - do not mark xvd* devices as cdrom by default (rhbz#584163)
  - Do not rename network interfaces.
    This causes more problems, than solving the original one.
    (rhbz#565724)
  - Resolves: rhbz#584163, rhbz#572681


author: Harald Hoyer <harald@redhat.com> 147-2.15
changelog:
  - fix "do not mark xvd* devices as cdrom by default (rhbz#584163)"
    included patch but did not apply
  - Resolves: rhbz#584163


author: Harald Hoyer <harald@redhat.com> 147-2.18
changelog:
  - removed obsolete arguments to configure
  Resolves: rhbz#601882
  - add IMPORT{db} IMPORT{cmdline} and set rd_NO_MDIMSM for noiswmd kernel cmdline option
  Resolves: rhbz#589775
  - add port for sas in path_id 
  Resolves: rhbz#537185
  - add modprobe hack to serialize modprobes
  Resolves: rhbz#515413
  - revert path check from 147-2.16
  Resolves: rhbz#591970


author: Harald Hoyer <harald@redhat.com> 147-2.19
changelog:
  - do not blkid blank or audio CDROMs 
  Resolves: rhbz#606293
  - fixed scsi changer symlink
  Resolves: rhbz#603051
  - suppress warnings from usb_id
  Resolves: rhbz#585648
  - add path_id for virtio-blk devices
  Resolves: rhbz#601248
  - fixed reference leak in path_id sas patch
  Resolves: rhbz#537185


author: Harald Hoyer <harald@redhat.com> 147-2.22
changelog:
  - fixed random MAC address handling 
  - honor ifcfg HWADDR settings for 70-persistent-net.rules
  Resolves: rhbz#596464


author: Harald Hoyer <harald@redhat.com> 147-2.26
changelog:
  - more quirk for virtual machines, which do not report correct
    CDROM information
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.27
changelog:
  - added ID_SERIAL_RAW to scsi_id export output, which is not
    whitespace stripped
  Resolves: rhbz#612173


author: Harald Hoyer <harald@redhat.com> 147-2.28
changelog:
  - quirk for cisco virtual cdrom was not complete, reports
    blank media, rhbz#628962
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.29
changelog:
  - set the selinux context for "add" events, regression
    the fix for rhbz#575128 caused a lot of selinux errors like
    rhbz#603729
  Resolves: rhbz#575128


author: Harald Hoyer <harald@redhat.com> 147-2.30
changelog:
  - fixed udevadm segfault, if log is set to debug
  Resolves: rhbz#657360
  - fixed keyboard handling for extra keys, especially volume
    control
  Resolves: rhbz#617572
  - quote output of 'udevadm info --query=shenv' or
                    'udevadm info --query=shproperty'
  Resolves: rhbz#644330


author: Harald Hoyer <harald@redhat.com> 147-2.31
changelog:
  - fixed zero macs in 70-persistent-net.rules
  Resolves: rhbz#656059
  - add 42-qemu-usb.rules
  Resolves: rhbz#663064
  - create /dev/hugepages directory
  Resolves: rhbz#667750


author: Harald Hoyer <harald@redhat.com> 147-2.32
changelog:
  - added new page codes for scsi_id, to export ID_SERIAL_80 and ID_SERIAL_83.
  Resolves: rhbz#644902
  - correctly handle ENV{ACL_MANAGE}==0
  Resolves: rhbz#674168


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Harald Hoyer <harald@redhat.com> 147-2.36
changelog:
  - handle Vodafone K3565-Z 3G modem
  Resolves: rhbz#632646
  - update path_id to upstream version, which can handle SAS devices that 
    have no enclosure and handles iSCSI devices.
  Resolves: rhbz#698540 rhbz#714951
  - use IFINDEX for temporary network interface renaming
  Resolves: rhbz#701265
  - udev now changes the IO scheduler for all disks except sata disks to the 
    "deadline" scheduler.
  Resolves: rhbz#711254


author: Harald Hoyer <harald@redhat.com> 147-2.37
changelog:
  - add requires for libgudev1 on libudev with version and release
  Resolves: rhbz#727500
  - change import property buffer to 16384 bytes
  Resolves: rhbz#726566


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Harald Hoyer <harald@redhat.com> 147-2.43
changelog:
  - add cciss handling to path_id
  Resolves: rhbz#784697
  - add kmsg alias logger
  Resolves: rhbz#826396
  - extend udev(7) man page about character encoding in symlinks
  Resolves: rhbz#790321
  - fix cdrom_id to honor feature profiles, if no medium is present
  Resolves: rhbz#847925


author: Harald Hoyer <harald@redhat.com> 147-2.46
changelog:
  - make symlink/rename failure info() only
    this can happen for multipath devices
  Resolves: rhbz#838451


author: Harald Hoyer <harald@redhat.com> 147-2.47
changelog:
  - add OPTIONS="log_priority=<loglevel>" for debugging purposes
  Resolves: rhbz#947067
  - limit default udevd maximum childs
  Resolves: rhbz#833172 rhbz#885978
  - add scm path_id support
  Resolves: rhbz#888647
  - header fix for C++
  Resolves: rhbz#909792
  - scsi_id: retry on EBUSY
  Resolves: rhbz#920961


author: Harald Hoyer <harald@redhat.com> 147-2.53
changelog:
  - add rule for idrac interface renaming
  Resolves: rhbz#1054482
  - for every modprobe locked worker, increase max_childs
  Resolves: rhbz#1028174
  - increase firmware timeout to 600 seconds
  Resolves: rhbz#1077186
  - add nvme pcie ssd scsi_id ENV
  Resolves: rhbz#1020856
  - scsi_id: add short option "-b" parsing
  Resolves: rhbz#910168
  - add  by-id (hardware serial number) for Micron PCIe SSDs
  Resolves: rhbz#839172
  - 80-iosched.rules: check for attributes
  Resolves: rhbz#1008341


author: Harald Hoyer <harald@redhat.com> 147-2.58
changelog:
  - do not print error, if /sys/class/firmware/timeout does
    not exist (yet)
  Resolves: rhbz#1140336
  - always call modprobe, even when a driver is bound to the device
  Resolves: rhbz#1084513
  - fixed for every modprobe locked worker, increase max_childs
    use ncnt instead of zcnt
  Resolves: rhbz#1164960
  - print warning in start_udev, if udevlog is used
  Resolves: rhbz#876535


author: Harald Hoyer <harald@redhat.com> 147-2.60
changelog:
  - ata_id - fixup all 8 not only 6 bytes of the fw_rev string
  Resolves: rhbz#794561
  - udev: properly handle symlink removal by 'change' event
  Resolves: rhbz#1018171


author: Michal Sekletar <msekleta@redhat.com> - 147-2.63.1
changelog:
  - also limit the additional modprobe locked workers (#1281469)
  - 80-drivers.rules: only make an exception for ipmi for modprobe with DRIVER set (#1281467)


author: Daniel Berrange <berrange@redhat.com> - 0.2.0-1
changelog:
  - Added wizard for creating virtual machines
  - Added embedded serial console
  - Added ability to take screenshots


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-1
changelog:
  - Updated to 0.2.1 tar.gz
  - Added rules to install/uninstall gconf schemas in preun,post,pre
    scriptlets
  - Updated URL for source to reflect new upstream download URL


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-3.fc6
changelog:
  - Added requires on pygtk2-libglade & librsvg2 (bz 205941 & 205942)
  - Re-arrange to use console-helper to launch app
  - Added 'dist' component to release number


author: Daniel Berrange <berrange@redhat.com> - 0.2.2-1.fc6
changelog:
  - Fix event handling in create VM wizard (bz 206660 & 206186)
  - Fix close button in about dialog (bz 205943)
  - Refresh .pot files
  - Turn on VNC scrollbars fulltime to avoid GTK window sizing issue
    which consistently resize too small.


author: Daniel Berrange <berrange@redhat.com> - 0.2.3-1.fc6
changelog:
  - Require xeninst >= 0.93.0 to fix block backed devices
  - Skip para/fully-virt step when going back in wizard if not HVM host (bz 207409)
  - Fix handling of modifier keys in VNC console so Alt key doesn't get stuck (bz 207949)
  - Allow sticky modifier keys by pressing same key 3 times in row (enables Ctrl-Alt-F1
    by doing Ctrl Ctrl Ctrl  Alt-F1)
  - Improved error handling during guest creation
  - Log errors with python logging, instead of to stdout
  - Remove unused buttons from main domain list window
  - Switch out of full screen & release key grab when closing console
  - Trim sparkline CPU history graph to 40 samples max
  - Constraint VCPU adjuster to only allow upto guest's max VCPU count
  - Show guest's max & current VCPU count in details page
  - Fix rounding of disk sizes to avoid a 1.9 GB disk being rounded down to 1 GB
  - Use raw block device path to CDROM not mount point for HVM guest (bz 206965)
  - Fix visibility of file size spin box (bz 206186 part 2)
  - Check for GTK failing to open X11 display (bz 205938)


author: Daniel P. Berrange <berrange@redhat.com> 0.2.3-2.fc6
changelog:
  - Fix segv in sparkline code when no data points are defined (bz  208185)
  - Clamp CPU utilization between 0 & 100% just in case (bz 208185)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.5-1.fc7
changelog:
  - Switch to use python-virtinst instead of python-xeninst due to 
    renaming of original package
  - Disable keyboard accelerators when grabbing mouse to avoid things like
    Ctrl-W closing the local window, instead of remote window bz 210364
  - Fix host memory reporting bz 211281
  - Remove duplicate application menu entry bz 211230
  - Fix duplicated mnemonics (bz 208408)
  - Use blktap backed disks if available
  - Use a drop down list to remember past URLs (bz 209479)
  - Remove unused help button from preferences dialog (bz 209251)
  - Fix exception when no VNC graphics is defined
  - Force immediate refresh of VMs after creating a new one
  - Improve error reporting if run on a kernel without Xen (bz 209122)
  - More fixes to avoid stuck modifier keys on focus-out (bz 207949)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-1.fc7
changelog:
  - Imported translations from Fedora i18n repository
  - Make (most) scrollbar policies automatic
  - Set busy cursor while creating new VMs
  - Preference for controlling keygrab policy
  - Preference for when to automatically open console (bz 211385)
  - Re-try VNC connection attempt periodically in case VNC daemon
    hasn't finished starting up
  - Added activation of URLs for about dialog (bz 210782)
  - Improved error reporting when connecting to HV (bz 211229)
  - Add command line args to open specific windows
  - Don't skip para/full virt wizard step - instead gray out full
    virt option & tell user why
  - Change 'physical' to 'logical' when refering to host CPUs
  - Include hostname in titlebar
  - Disable wizard sensitivity while creating VM


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-3.fc7
changelog:
  - Imported latest translations from Fedora i18n repository (bz 203783)
  - Use 127.0.0.1 address for connecting to VNC console instead of
    localhost to avoid some issue with messed up /etc/hosts.
  - Add selector for sparse or non-sparse file, defaulting to non-sparse.
    Add appropriate warnings and progress-bar text. (bz 218996)
  - Disable memory ballooning & CPU hotplug for HVM guests (bz 214432)
  - Updated memory-setting UI to include a hard upper limit for physical
    host RAM
  - Added documentation on the page warning that setting virtual host RAM
    too high can exhaust the memory of the machine
  - Handle errors when hostname resolution fails to avoid app exiting (bz 216975)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.0-1.fc7
changelog:
  - Added support for managing inactive domains
  - Require virt-inst >= 0.100.0 and libvirt >= 0.1.11 for ianctive
    domain management capabilities
  - Add progress bars during VM creation stage
  - Improved reliability of VNC console
  - Updated translations again
  - Added destroy option to menu bar to forceably kill a guest
  - Visually differentiate allocated memory, from actual used memory on host
  - Validate file magic when restoring a guest from a savd file
  - Performance work on domain listing
  - Allow creation of non-sparse files
  - Fix backspace key in serial console


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.1-1.fc7
changelog:
  - Added support for managing QEMU domains
  - Automatically grab mouse pointer to workaround dual-cursor crazyness


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-1.fc7
changelog:
  - Added online help to all windows
  - Bug fixes to virtual console popup, key grab & accelerator override


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-1.fc7
changelog:
  - Support for managing virtual networks
  - Ability to attach guest to virtual networks
  - Automatically set VNC keymap based on local keymap
  - Support for disk & network device addition/removal


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-2.fc7
changelog:
  - Refresh po file translations (bz 238369)
  - Fixed removal of disk/network devices
  - Fixed toolbar menu option state
  - Fixed file dialogs & default widget states


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.0-1.fc8
changelog:
  - Updated to 0.5.0 release
  - Support for managing remote hosts
  - Switch to use GTK-VNC for the guest console


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.1-1.fc8
changelog:
  - Updated to 0.5.1 release
  - Open connections in background
  - Make VNC connection retries more robust
  - Allow changing of CDROM media on the fly
  - Add PXE boot installation of HVM guests
  - Allow tunnelling VNC over SSH


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-1.fc8
changelog:
  - Update to 0.5.2 release
  - No scrollbars for high res guest in low res host (rhbz 273181)
  - Unable to remove network device (rhbz 242900)
  - Fixed broken menu items (rhbz 307551)
  - Require libvirt 0.3.3 to get CDROM change capability for Xen


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-1.fc10
changelog:
  - Update to 0.6.0 release
  - Add libvirt storage management support
  - Basic support for remote guest installation
  - Merge VM console and details windows
  - Poll avahi for libvirtd advertisement
  - Hypervisor autoconnect option
  - Add sound emulation when creating new guests


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-2.fc10
changelog:
  - Add gnome-python2-gnome requirement.
  - Allow seeing connection details if disconnected.
  - Updated catalan translation.
  - Update dutch translation.
  - Update german translation. (bug 438136)
  - Fix showing domain console when connecting to hypervisor.
  - Update POTFILES to reflect reality (bug 466835)


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-3.fc10
changelog:
  - Add dbus-x11 to Requires (bug 467886)
  - Fedora translation updates (bug 467808)
  - Don't add multiple sound devices if install fails
  - Only popup volume path copy option on right click
  - Fix a variable typo


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-5.fc10
changelog:
  - Fix spec for building on F9
  - Update 'New VM' virt descriptions to be less black and white (bz 470563)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-1
changelog:
  - Update to 0.6.1 release
  - Disk and Network VM stats reporting
  - VM Migration support
  - Support adding sound devices to existing VMs
  - Allow specifying device model when adding a network device to an existing VM


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-4.fc11
changelog:
  - Update polish translation (bz 263301)
  - Fix sending ctrl-alt-del to guest
  - Fix cpu + mem stats options to remember preference.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-1.fc11
changelog:
  - Update to release 0.7.0
  - Redesigned 'New Virtual Machine' wizard
  - Option to remove storage when deleting a virtual machine.
  - File browser for libvirt storage pools and volumes
  - Physical device assignment (PCI, USB) for existing virtual machines.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-2.fc11
changelog:
  - Back compat fixes for connecting to older xen installations (bz 489885)
  - Don't show harmless NoneType error when launching new VM details window


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-3.fc11
changelog:
  - Fix incorrect max vcpu setting in New VM wizard (bz 490466)
  - Fix some OK/Cancel button ordering issues (bz 490207)
  - Use openAuth when duplicating a connection when deleting a VM
  - Updated translations (bz 493795)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5.fc12
changelog:
  - Fix 'opertaing' typo in 'New VM' dialog (#495128)
  - Allow details window to resize again (#491683)
  - Handle collecting username for vnc authentication (#499589)
  - Actually handle arch config when creating a VM (#499145)
  - Log libvirt capabilities at startup to aid debugging (#500337)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-1.fc12
changelog:
  - Update to release 0.8.0
  - New 'Clone VM' Wizard
  - Improved UI, including an overhaul of the main 'manager' view
  - System tray icon for easy VM access (start, stop, view console/details)
  - Wizard for adding serial, parallel, and video devices to existing VMs.


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-3.fc12
changelog:
  - Fix disk XML mangling via connect/eject cdrom (bz 516116)
  - Fix delete button sensitivity (bz 518536)
  - Fix populating text box from storage browser in 'New VM' (bz 517263)
  - Fix a traceback in an 'Add Hardware' error path (bz 517286)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-4.fc12
changelog:
  - Don't close libvirt connection for non-fatal errors (bz 522168)
  - Manager UI tweaks
  - Generate better errors if disk/net stats polling fails


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-5.fc12
changelog:
  - Refresh host disk space in create wizard (bz 502777)
  - Offer to fix disk permission issues (bz 517379)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-6.fc12
changelog:
  - Fix VCPU hotplug
  - Remove access to outdated docs (bz 522823, bz 524805)
  - Update VM state text in manager view (bz 526182)
  - Update translations (bz 493795)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-7.fc12
changelog:
  - More translations (bz 493795)
  - Don't allow creating a volume without a name (bz 526111)
  - Don't allow volume allocation > capacity (bz 526077)
  - Add tooltips for toolbar buttons (bz 524083)


author: Cole Robinson <crobinso@redhat.com> - 0.8.1-1.fc12
changelog:
  - Update to release 0.8.1
  - VM Migration wizard, exposing various migration options
  - Enumerate CDROM and bridge devices on remote connections
  - Support storage pool source enumeration for LVM, NFS, and SCSI


author: Cole Robinson <crobinso@redhat.com> - 0.8.2-1.fc12
changelog:
  - Update to 0.8.2 release
  - Fix first virt-manager run on a new install
  - Enable floppy media eject/connect


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-1
changelog:
  - Rebase to 0.8.4
  - 'Import' install option, to create a VM around an existing OS image
  - Support multiple boot devices and boot order
  - Watchdog device support
  - Enable setting a human readable VM description.
  - Option to manually specifying a bridge name, if bridge isn't detected


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-2.el6
changelog:
  - Fix broken icon in UI (bz 577249)
  - Only close connection on 'remote' error (bz 580613)
  - Add pool refresh button (bz 580567)
  - Managed save/restore support (bz 591625)
  - Fix first run hypervisor detection (bz 591584)
  - Don't allow shutdown or unpause while cloning (bz 577252)
  - Offer to start default storage pool (bz 584672)
  - Skip post-install restart if user destroys VM (bz 587703)
  - Don't install outdated help docs (bz 588577)
  - Warn about unsupported VCPU overcommit (bz 588655)
  - Hide unsupported sound models (bz 588695)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-3.el6
changelog:
  - Fix VNC reconnect error (bz 593326)
  - Fix remote VNC connection with zsh (bz 593328)
  - Fix VNC auto keymap detection (bz 593333)
  - Fix New VM customize option with no storage (bz 593336)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-5.el6
changelog:
  - Allow setting cpuset automatically from NUMA config (bz 604205)
  - Update translations (bz 575681)
  - Fix pool building for LVM/disk pools (bz 597519)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-1.el6
changelog:
  - Rebase to 0.8.6 (bz 658959)
  - SPICE support (requires spice-gtk) (Marc-André Lureau)
  - Option to configure CPU model
  - Option to configure CPU topology
  - Save and migration cancellation (Wen Congyang)
  - Save and migration progress reporting
  - Option to enable bios boot menu
  - Option to configure direct kernel/initrd boot


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-2
changelog:
  - Don't launch consoles on app startup (bz 670735)
  - Fix connecting to VNC over unix socket (bz 651606)
  - Fix changing 'Overview' settings (bz 673463)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-3.el6
changelog:
  - Add ICH6 sound model (bz 680827)
  - Don't error if shutting down a transient domain (bz 681113)
  - Don't offer to create readonly file formats (673028)
  - Improve wording if offering to reuse existing storage (bz 669741)
  - Disallow changing format in 'customize' screen for new storage (bz 677255)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-1.el6
changelog:
  - Rebased to version 0.9.0
  - Use a hiding toolbar for fullscreen mode
  - Use libguestfs to show guest packagelist and more (Richard W.M. Jones)
  - Basic 'New VM' wizard support for LXC guests
  - Remote serial console access (with latest libvirt)
  - Remote URL guest installs (with latest libvirt)
  - Add Hardware: Support <filesystem> devices
  - Add Hardware: Support <smartcard> devices (Marc-André Lureau)
  - Enable direct interface selection for qemu/kvm (Gerhard Stenzel)
  - Allow viewing and changing disk serial number


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-3
changelog:
  - Fix typo that broke net stats reporting (bz 726447)
  - Add BuildRequires: GConf2 to fix package install (bz 726325)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-5
changelog:
  - Fix autodrawer on RHEL6, unbreaks opening console window (bz 727414)
  - Update icon cache after RPM install


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-6
changelog:
  - Fix 'Resize to VM' graphical option (bz 728541)
  - More explicit python binary references (bz 708181)
  - Fix launching 'create pool' dialog (bz 729226)
  - More SCSI option hiding (bz 727766)
  - Fix showing XML chars in VM name (bz 732371)
  - Fix confusion when removing device with unapplied changes (bz 728845)
  - Fix deleting guest with managed save data (bz 728155)
  - Fix error when adding default storage (bz 728497)
  - Disable unsupported RHEL6 options (bz 727766, bz 710337, bz 729590, bz
    717373)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-7
changelog:
  - Detect that RHEL6 qemu supports spice (bz 734693)
  - Properly fix crash when deleting a vm device (bz 728845)
  - Try harder to generate remote URI for localhost for p2p migration (bz
    699953)
  - Fix vm lookup race after vm creation (bz 731771)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-8
changelog:
  - Fix changing disk bus from virtio->ide (bz 769192, bz 741937)
  - Fix serial console stalls when showing lots of text (bz 747490)
  - Fix connection drop if VM gets an error while shutting down (bz
    742055)
  - Make 'browse local' chooser allow entering a new path (bz 734529)
  - Escape XML chars in vm description tooltip (bz 741158)
  - Fix keyboard shortcuts when spice isn't focused (bz 733210)
  - Hide unsupported serial types (bz 740775)
  - Warn about unapplied changes in customize dialog (bz 736270)
  - Hide unsupported storage formats (bz 735766)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-9
changelog:
  - Fix scaling for spice (bz 750225)
  - Don't allow a busted iface to break other iface details page (bz
    786694)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-11
changelog:
  - Don't switch page every time lxc guest is updated (bz 796570)
  - Don't blacklist disk device if we grab stats for shutdown guest (bz
    796092)
  - Add QED to disk format list (bz 795323)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-12
changelog:
  - Fix reopening a remote graphical console (bz 811316)
  - Fix app crash when deleting multiple storage volumes (bz 803600)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.0-15
changelog:
  - Only reboot VM if it had an install phase (rhbz#824275)
  - Match usb device with vendorID, productID, bus, device (rhbz#820303)
  - Change Mbps to MB/s in migration dialog (rhbz#802639)


author: Martin Kletzander <mkletzan@redhat.com> - 0.9.0-19
changelog:
  - Fix changing cirrus->QXL for active VM (rhbz#985184)
  - Top level windows shouldn't be visible by default (rhbz#990507)
  - The bus, device values of USB device is decimal rather than hex (rhbz#820303)
  - Don't fail on selecting network without IP (rhbz#869474)
  - Differentiate duplicate usb devices by bus/addr (rhbz#820303)
  - Remove address when changing watchdog models (rhbz#869206)
  - Add 'pre-startup' signal and do nodedevs checking (rhbz#820303)
  - Create: s/Gb/GB/ for storage units (rhbz#873142)
  - Add support for security relabeling (rhbz#907399)
  - Always show toolbar in customize dialog (rhbz#981628)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-20
changelog:
  - virt-manager shows the right guest status when guest is pmsuspended (rhbz#1091292)
  - Make consistent virt-manager's option "--profile=File" between manual page and help page. (rhbz#1069090)
  - Virt-manager: Add Virtio SCSI disk option. (rhbz#1049781)
  - Allow changing the default new VM CPU model. (rhbz#1046583)
  - virt-manager supports native gluster fs (rhbz#1040172)
  - virt-manager doesn't cause a python trace-back when it cannot open display (rhbz#1025706)
  - AttributeError: 'NoneType' object has no attribute 'storagePoolLookupByName' (rhbz#927257)
  - virt-manager doesn't set up TCP net console mode properly (rhbz#918451)
  - virt-manager cannot open console through IPV6. (rhbz#870383)
  - Support SPICE auto-redir in virt-manager (rhbz#807277)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-21
changelog:
  - Fix error reporting (rhbz#1093980)
  - Fix parser error when install virt-manager (rhbz#1093979)
  - Fix Preferences/Feedback UI alignment (rhbz#1094083)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-22
changelog:
  - Fix alignment of Preferences/VM Details (rhbz#1094083)
  - Fix description of "Source Name" in create-pool (rhbz#1094005)
  - Handle ipv6 addresses (rhbz#870383)
  - virt-manager: escape host string (rhbz#1094600)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.9.0-29
changelog:
  - Use correct signal and callback names to catch cpu-threads property changes (rhbz#1190641)
  - Fix crash caused by closing an unowned fd (rhbz#1174464)


author: Lon Hohberger <lhh@redhat.com> 2.3-24
changelog:
  - Extend max file/archive size to 2^32-8193 (4294959103) bytes
  - Include better debugging output for configure script


author: Ivana Varekova <varekova@redhat.com> - 2.31-4
changelog:
  - fix "zip does not honor umask setting when creating archives"
  - fix "zip segfaults by attempt to archive big file"
  - spec file cleanup


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version 
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - auto rebuild in the new build environment (release 10)
  - fix the texi source
  - patch to detect & link against nsl


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix postun script so that we don't remove ourselves on every update
    doh...
  - add a trigger to fix old versions of the package


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.0.8
  - use %configure and %makeinstall
  - updated URL
  - disable old patches
  - add better patch for texi source
  - use %{_mandir} and %{_infodir}
  - use %{_tmppath}


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the post script, so we only have only line for zsh
    and can remove the trigger
  - get rid of some instances of "/usr/local/bin/zsh"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Remove contents from /etc/zshenv file - no reason to duplicate things
    from /etc/profile, which is sourced from /etc/zprofile (#32478)


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.4-5
changelog:
  - Source /etc/profile from /etc/zshenv instead of /etc/zprofile, 
    to run things the same way bash do (#62788)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - 4.0.6
  - add url
  - add --without check build option
  - don't autoconf
  - make "make test" failure not go ignored
  - move sourcing of profile from zshenv to new .zshrc file for now (#65509)
  - preserve dates when installing rc files


author: Florian La Roche <Florian.LaRoche@redhat.de> 4.0.6-2
changelog:
  - make sure /bin/zsh is owned by root and not bhcompile
  - do not package zsh-%{version} into binary rpm


author: Jens Petersen <petersen@redhat.com> - 4.0.6-7
changelog:
  - don't set stty erase in a dumb terminal with tput kbs in /etc/zshrc (#89856)
    [reported by Ben Liblit]
  - make default prompt more informative, like bash


author: Jens Petersen <petersen@redhat.com> - 4.0.7-2
changelog:
  - quote % in file glob'ing completion code (#110852)
    [reported with patch by Keith T. Garner]
  - add zsh-4.0.7-bckgrnd-bld-102042.patch from Philippe Troin to allow
    configure to run in the background (#102042) [reported by Michael Redinger]
  - above patch requires autoconf to be run
  - include html manual in separate -html subpackage
  - changed url to master site
  - skip completion tests on ppc and ppc64 for now, since they hang


author: Jens Petersen <petersen@redhat.com> - 4.0.9-1
changelog:
  - update to 4.0.9 release
  - zsh-4.0.7-completion-_files-110852.patch no longer needed
  - update zsh-4.0.7-bckgrnd-bld-102042.patch to better one with --with-tcsetpgrp
    configure option by Philippe Troin
  - configure --with-tcsetpgrp
  - buildrequire texinfo for makeinfo
  - fix ownership of html manual (Florian La Roche, #112749)


author: Jens Petersen <petersen@redhat.com> - 4.2.0-1
changelog:
  - update to 4.2.0 stable release
  - zsh-4.0.7-bckgrnd-bld-102042.patch no longer needed
  - add compinit and various commented config improvements to .zshrc
    (Eric Hattemer,#114887)
  - include zshprompt.pl in doc dir (Eric Hattemer)
  - drop setenv function from zshrc


author: Jens Petersen <petersen@redhat.com> - 4.2.0-3
changelog:
  - source profile in zprofile rather than .zshrc (Péter Kelemen,
    Magnus Gustavsson, 102187,126539)
  - add zsh-4.2.0-jobtable-125452.patch to fix job table bug
    (Henrique Martins, 125452)
  - buildrequire tetex for texi2html (Maxim Dzumanenko, 124182)


author: Colin Walters <walters@redhat.com> - 4.2.1-1
changelog:
  - New upstream version 4.2.1
  - FEATURES, MACHINES, and NEWS moved to toplevel dir
  - Update zsh-4.0.6-make-test-fail.patch, but do not apply it for now
  - Remove upstreamed zsh-4.2.0-jobtable-125452.patch


author: James Antill <james@and.org> - 4.2.6-4
changelog:
  - Fix buildroot to new Fedora default.
  - Remove /etc/skel from ownership.
  - Remove explicit libcap dep.
  - Tweak postun script.
  - Move checking to generic rpm infrastructure.
  Resolves: rhbz#226813


author: James Antill <james@and.org> - 4.2.6-5
changelog:
  - Fix sed typo.
  - Fix skel expansion problem.
  - Add Requires for mktemp/info/etc.
  - Use cp again due to SELinux context
  Resolves: rhbz#226813


author: James Antill <james@and.org> - 4.2.6-6
changelog:
  - Move requires to be scriptlet specific
  - chmod functions, to shut rpmlint up (false positive warning)
  - sed only the requied functions (again, shuts rpmlint up)
  - Remove zsh-4.0.6-make-test-fail.patch
  - Remove RPM_SOURCE_DIR var, using %{SOURCEx} and basename
  Resolves: rhbz#226813


author: James Antill <james@fedoraproject.org> - 4.3.4-7
changelog:
  - Tweak /etc/zshrc to source /etc/profile.d/*.sh in ksh compat. mode
  - Tweak /etc/zprofile to source /etc/profile in ksh compat. mode
  - Resolves: rhbz#430665


author: James Antill <james@fedoraproject.org> - 4.3.6-5
changelog:
  - Import new upstream 4.3.6
  - Rebase 8bit prompt patch
  - Add patch fuzz=2
  - Add BuildReq on /bin/hostname directly
  - FIXME: These should all be unpatched, at some point.
  - Don't test /dev/fd as mock doesn't like it
  - Don't test the modload module, as mock doesn't like loading them all
  - Don't test the select test in A01grammar, stdin/stderr racy?


author: James Antill <james.antill@redhat.com> - 4.3.10-5
changelog:
  - Change invocation as "zsh foo" to search the path by default.
  - Add new option PATH_SCRIPT for old behaviour.
  - Resolves: rhbz#612685
  - Solve defect in emulation of ksh with math substituion.
  - Resolves: rhbz#657300


author: James Antill <james.antill@redhat.com> - 4.3.10-7
changelog:
  - Change {NAME:OFFSET:LENGTH} substitution feature to ignore KSH_ARRAYS option.
  - Fixup tests.
  - Resolves: rhbz#820530


author: Kamil Dudka <kdudka@redhat.com> - 4.3.10-12
changelog:
  - avoid using uninitialised memory after lexer realloc (#1146119)
  - replace an incorrect comment in /etc/zshenv (#1103697)
  - optimize matching of multiple * in wildcards (#1131172)
  - use heap rather than stack allocation for variable length arrays (#567215)
  - prevent jobs -Z from destroying environment variables (#878324)
  - shell emulation doc addition (#1104021)


