# changelog

author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-48
changelog:
  - Fix openshift_search_lib
  - Add support for abrt-uefioops-oops
  - Allow colord to getattr any file system
  - Allow chrome processes to look at each other
  - Allow sys_ptrace for abrt_t
  - Add new policy for gssproxy
  - Dontaudit leaked file descriptor writes from firewalld
  - openshift_net_type is interface not template
  - Dontaudit pppd to search gnome config
  - Update openshift_search_lib() interface
  - Add fs_list_pstorefs()
  - Fix label on libbcm_host.so since it is built incorrectly on raspberry pi, needs back port to F18
  - Better labels for raspberry pi devices
  - Allow init to create devpts_t directory
  - Temporarily label rasbery pi devices as memory_device_t, needs back port to f18
  - Allow sysadm_t to build kernels
  - Make sure mount creates /var/run/blkid with the correct label, needs back port to F18
  - Allow userdomains to stream connect to gssproxy
  - Dontaudit leaked file descriptor writes from firewalld
  - Allow xserver to read /dev/urandom
  - Add additional fixes for ipsec-mgmt
  - Make SSHing into an Openshift Enterprise Node working


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-49
changelog:
  - Fix courier_domain_template() interface
  - Allow blueman to write ip_forward
  - Allow mongodb to connect to mongodb port
  - Allow mongodb to connect to mongodb port
  - Allow java to bind jobss_debug port
  - Fixes for *_admin interfaces
  - Allow iscsid auto-load kernel modules needed for proper iSCSI functionality
  - Need to assign attribute for courier_domain to all courier_domains
  - Fail2ban reads /etc/passwd
  - postfix_virtual will create new files in postfix_spool_t
  - abrt triggers sys_ptrace by running pidof
  - Label ~/abc as mozilla_home_t, since java apps as plugin want to create it
  - Add passenger fixes needed by foreman
  - Remove dup interfaces
  - Add additional interfaces for quantum
  - Add new interfaces for dnsmasq
  - Allow  passenger to read localization and send signull to itself
  - Allow dnsmasq to stream connect to quantum
  - Add quantum_stream_connect()
  - Make sure that mcollective starts the service with the correct labeling
  - Add labels for ~/.manpath
  - Dontaudit attempts by svirt_t to getpw* calls
  - sandbox domains are trying to look at parent process data
  - Allow courior auth to create its pid file in /var/spool/courier subdir
  - Add fixes for beam to have it working with couchdb
  - Add labeling for /run/nm-xl2tpd.con
  - Allow apache to stream connect to thin
  - Add systemd support for amand
  - Make public types usable for fs mount points
  - Call correct mandb interface in domain.te
  - Allow iptables to r/w quantum inherited pipes and send sigchld
  - Allow ifconfig domtrans to iptables and execute ldconfig
  - Add labels for ~/.manpath
  - Allow systemd to read iscsi lib files
  - seunshare is trying to look at parent process data


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-50
changelog:
  - Allow wine to manage wine home content
  - Make amanda working with socket actiovation
  - Add labeling for /usr/sbin/iscsiadm
  - Add support for /var/run/gssproxy.sock
  - dnsmasq_t needs to read sysctl_net_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-51
changelog:
  - accountservice watches when accounts come and go in wtmp
  - /usr/java/jre1.7.0_21/bin/java needs to create netlink socket
  - Add httpd_use_sasl boolean
  - Allow net_admin for tuned_t
  - iscsid needs sys_module to auto-load kernel modules
  - Allow blueman to read bluetooth conf
  - Add nova_manage_lib_files() interface
  - Fix mplayer_filetrans_home_content()
  - Add mplayer_filetrans_home_content()
  - mozilla_plugin_config_roles need to be able to access mozilla_plugin_config_t
  - Revert "Allow thumb_t to append inherited xdm stream socket"
  - Add iscsi_filetrans_named_content() interface
  - Allow to create .mplayer with the correct labeling for unconfined
  - Allow iscsiadmin to create lock file with the correct labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-52
changelog:
  - Add labeling for /dev/tgt
  - Dontaudit leak fd from firewalld for modprobe
  - Allow runuser running as rpm_script_t to create netlink_audit socket
  - Allow mdadm to read BIOS non-volatile RAM


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-53
changelog:
  - Make vdagent able to request loading kernel module
  - Add support for cloud-init make it as unconfined domain
  - Allow snmpd to run smartctl in fsadm_t domain
  - remove duplicate openshift_search_lib() interface
  - Allow mysqld to search openshift lib files
  - Allow openshift cgroup to interact with passedin file descriptors
  - Allow colord to list directories inthe users homedir
  - aide executes prelink to check files
  - Make sure cupsd_t creates content in /etc/cups with the correct label
  - Lest dontaudit apache read all domains, so passenger will not cause this avc
  - Allow gssd to connect to gssproxy
  - systemd-tmpfiles needs to be able to raise the level to fix labeling on /run/setrans in MLS
  - Allow systemd-tmpfiles to relabel also lock files
  - Allow useradd to add homdir in /var/lib/openshift
  - Allow setfiles and semanage to write output to /run/files


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-54
changelog:
  - Don't audit access checks by sandbox xserver on xdb var_lib
  - Allow ntop to read usbmon devices
  - Add labeling for new polcykit authorizor
  - Dontaudit access checks from fail2ban_client
  - Don't audit access checks by sandbox xserver on xdb var_lib
  - Allow apps that connect to xdm stream to conenct to xdm_dbusd_t stream
  - Fix labeling for all /usr/bim/razor-lightdm-* binaries
  - Add filename trans for /dev/md126p1


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-55
changelog:
  - condor_collector uses tcp/9000
  - Label /usr/sbin/virtlockd as virtd_exec_t for now
  - Allow cobbler to execute ldconfig
  - Allow NM to execute ssh
  - Allow mdadm to read /dev/crash
  - Allow antivirus domains to connect to snmp port
  - Make amavisd-snmp working correctly
  - Allow nfsd_t to mounton nfsd_fs_t
  - Add initial snapper policy
  - We still need to have consolekit policy
  - Dontaudit firefox attempting to connect to the xserver_port_t if run within sandbox_web_t
  - Dontaudit sandbox apps attempting to open user_devpts_t
  - Allow dirsrv to read network state
  - Fix pki_read_tomcat_lib_files
  - Add labeling for /usr/libexec/nm-ssh-service
  - Add label cert_t for /var/lib/ipa/pki-ca/publish
  - Lets label /sys/fs/cgroup as cgroup_t for now, to keep labels consistant
  - Allow nfsd_t to mounton nfsd_fs_t
  - Dontaudit sandbox apps attempting to open user_devpts_t
  - Allow passwd_t to change role to system_r from unconfined_r


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-56
changelog:
  - Allow lvm_t to create default targets for filesystem handling
  - Fix labeling for razor-lightdm binaries
  - Allow insmod_t to read any file labeled var_lib_t
  - Add policy for pesign
  - Activate policy for cmpiLMI_Account-cimprovagt
  - Allow isnsd syscall=listen
  - /usr/libexec/pegasus/cimprovagt needs setsched caused by sched_setscheduler
  - Allow ctdbd to use udp/4379
  - gatherd wants sys_nice and setsched
  - Add support for texlive2012
  - Allow NM to read file_t (usb stick with no labels used to transfer keys for example)
  - Allow cobbler to execute apache with domain transition


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-57
changelog:
  - Make DSPAM to act as a LDA working
  - Allow ntop to create netlink socket
  - Allow policykit to send a signal to policykit-auth
  - Allow stapserver to dbus chat with avahi/systemd-logind
  - Fix labeling on haproxy unit file
  - Clean up haproxy policy
  - A new policy for haproxy and placed it to rhcs.te
  - Add support for ldirectord and treat it with cluster_t
  - Make sure anaconda log dir is created with var_log_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-58
changelog:
  - Shrink the size of policy by moving to attributes, also add dridomain so that mozilla_plugin can follow selinuxuse_dri boolean. 
  - Allow bootloader to manage generic log files 
  - Allow ftp to bind to port 989 
  - Fix label of new gear directory 
  - Add support for new directory /var/lib/openshift/gears/ 
  - Add openshift_manage_lib_dirs() 
  - allow virtd domains to manage setrans_var_run_t 
  - Allow useradd to manage all openshift content 
  - Add support so that mozilla_plugin_t can use dri devices 
  - Allow chronyd to change the scheduler 
  - Allow apmd to shut downthe system 
  - Devicekit_disk_t needs to manage /etc/fstab


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-59
changelog:
  - Add prosody policy written by Michael Scherer
  - Allow nagios plugins to read /sys info
  - ntpd needs to manage own log files
  - Add support for HOME_DIR/.IBMERS
  - Allow iptables commands to read firewalld config
  - Allow consolekit_t to read utmp
  - Fix filename transitions on .razor directory
  - Add additional fixes to make DSPAM with LDA working
  - Allow snort to read /etc/passwd
  - Allow fail2ban to communicate with firewalld over dbus
  - Dontaudit openshift_cgreoup_file_t read/write leaked dev
  - Allow nfsd to use mountd port
  - Call th proper interface
  - Allow openvswitch to read sys and execute plymouth
  - Allow tmpwatch to read /var/spool/cups/tmp
  - Add support for /usr/libexec/telepathy-rakia
  - Add systemd support for zoneminder
  - Allow mysql to create files/directories under /var/log/mysql
  - Allow zoneminder apache scripts to rw zoneminder tmpfs
  - Allow httpd to manage zoneminder lib files
  - Add zoneminder_run_sudo boolean to allow to start zoneminder
  - Allow zoneminder to send mails
  - gssproxy_t sock_file can be under /var/lib
  - Allow web domains to connect to whois port.
  - Allow sandbox_web_type to connect to the same ports as mozilla_plugin_t.
  - We really need to add an interface to corenet to define what a web_client_domain is and
  - then define chrome_sandbox_t, mozilla_plugin_t and sandbox_web_type to that domain.
  - Add labeling for cmpiLMI_LogicalFile-cimprovagt
  - Also make pegasus_openlmi_logicalfile_t as unconfined to have unconfined_domain attribute for filename trans rules
  - Update policy rules for pegasus_openlmi_logicalfile_t
  - Add initial types for logicalfile/unconfined OpenLMI providers
  - mailmanctl needs to read own log
  - Allow logwatch manage own lock files
  - Allow nrpe to read meminfo
  - Allow httpd to read certs located in pki-ca
  - Add pki_read_tomcat_cert() interface
  - Add support for nagios openshift plugins
  - Add port definition for redis port
  - fix selinuxuser_use_ssh_chroot boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-60
changelog:
  - Allow nsd_t to read /dev/urand
  - Allow mdadm_t to read framebuffer
  - Allow rabbitmq_beam_t to read process info on rabbitmq_epmd_t
  - Allow mozilla_plugin_config_t to create tmp files
  - Cleanup openvswitch policy
  - Allow mozilla plugin to getattr on all executables
  - Allow l2tpd_t to create fifo_files in /var/run
  - Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory
  - Allow mdadm to connecto its own unix_stream_socket
  - FIXME: nagios changed locations to /log/nagios which is wrong. But we need to have this workaround for now.
  - Allow apache to access smokeping pid files
  - Allow rabbitmq_beam_t to getattr on all filesystems
  - Add systemd support for iodined
  - Allow nup_upsdrvctl_t to execute its entrypoint
  - Allow fail2ban_client to write to fail2ban_var_run_t, Also allow it to use nsswitch
  - add labeling for ~/.cache/libvirt-sandbox
  - Add interface to allow domains transitioned to by confined users to send sigchld to screen program
  - Allow sysadm_t to check the system status of files labeled etc_t, /etc/fstab
  - Allow systemd_localed to start /usr/lib/systemd/system/systemd-vconsole-setup.service
  - Allow an domain that has an entrypoint from a type to be allowed to execute the entrypoint without a transition,  I can see no case where this is  a bad thing, and elminiates a whole class of AVCs.
  - Allow staff to getsched all domains, required to run htop
  - Add port definition for redis port
  - fix selinuxuser_use_ssh_chroot boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-61
changelog:
  - Allow mdamd to execute systemctl
  - Allow mdadm to read /dev/kvm
  - Allow ipsec_mgmt_t to read l2tpd pid content


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-64
changelog:
  - Add support for gluster ports
  - Make sure that all keys located in /etc/ssh/ are labeled correctly
  - Make sure apcuspd lock files get created with the correct label
  - Use getcap in gluster.te
  - Fix gluster policy
  - add additional fixes to allow beam.smp to interact with couchdb files
  - Additional fix for #974149
  - Allow gluster to user gluster ports
  - Allow glusterd to transition to rpcd_t and add additional fixes for #980683
  - Allow tgtd working when accessing to the passthrough device
  - Fix labeling for mdadm unit files


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-65
changelog:
  - Label /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t
  - Add labeling for /usr/libexec/kde4/polkit-kde-authentication-agent-1
  - Allow all domains that can domtrans to shutdown, to start the power services script to shutdown
  - consolekit needs to be able to shut down system
  - Move around interfaces
  - Remove nfsd_rw_t and nfsd_ro_t, they don't do anything
  - Add additional fixes for rabbitmq_beam to allow getattr on mountpoints
  - Allow gconf-defaults-m to read /etc/passwd
  - Fix pki_rw_tomcat_cert() interface to support lnk_files


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-66
changelog:
  - Allow systemd-tmpfile to handle tmp content in print spool dir
  - Allow systemd-sysctl to send system log messages
  - Add support for RTP media ports and fmpro-internal
  - Make auditd working if audit is configured to perform SINGLE action on disk error
  - Add interfaces to handle systemd units
  - Make systemd-notify working if pcsd is used
  - Add support for netlabel and label /usr/sbin/netlabelctl as iptables_exec_t
  - Instead of having all unconfined domains get all of the named transition rules,
  - Only allow unconfined_t, init_t, initrc_t and rpm_script_t by default.
  - Add definition for the salt ports
  - Allow xdm_t to create link files in xdm_var_run_t
  - Dontaudit reads of blk files or chr files leaked into ldconfig_t
  - Allow sys_chroot for useradd_t
  - Allow net_raw cap for ipsec_t
  - Allow sysadm_t to reload services
  - Add additional fixes to make strongswan working with a simple conf
  - Allow sysadm_t to enable/disable init_t services
  - Add additional glusterd perms
  - Allow apache to read lnk files in the /mnt directory
  - Allow glusterd to ask the kernel to load a module
  - Fix description of ftpd_use_fusefs boolean
  - Allow svirt_lxc_net_t to sys_chroot, modify policy to tighten up svirt_lxc_domain capabilties and process controls, but add them to svirt_lxc_net_t
  - Allow glusterds to request load a kernel module
  - Allow boinc to stream connect to xserver_t
  - Allow sblim domains to read /etc/passwd
  - Allow mdadm to read usb devices
  - Allow collectd to use ping plugin
  - Make foghorn working with SNMP
  - Allow sssd to read ldap certs
  - Allow haproxy to connect to RTP media ports
  - Add additional trans rules for aide_db
  - Add labeling for /usr/lib/pcsd/pcsd
  - Add labeling for /var/log/pcsd
  - Add support for pcs which is a corosync and pacemaker configuration tool


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-67
changelog:
  - Add support for cmpiLMI_Service-cimprovagt
  - Allow pegasus domtrans to rpm_t to make pycmpiLMI_Software-cimprovagt running as rpm_t
  - Label pycmpiLMI_Software-cimprovagt as rpm_exec_t
  - Add support for pycmpiLMI_Storage-cimprovagt
  - Add support for cmpiLMI_Networking-cimprovagt
  - Allow system_cronjob_t to create user_tmpfs_t to make pulseaudio working
  - Allow virtual machines and containers to run as user doains, needed for virt-sandbox
  - Allow buglist.cgi to read cpu info


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-68
changelog:
  - Allow xdm_t to act as a dbus client to itsel
  - Allow fetchmail to resolve host names
  - Allow gnupg apps to write to pcscd socket
  - Add labeling for cmpiLMI_Fan-cimprovagt
  - Allow net_admin for glusterd
  - Allow telepathy domain to create dconf with correct labeling in /home/userX/.cache/
  - Add pegasus_openlmi_system_t
  - Fix puppet_domtrans_master() to make all puppet calling working in passenger.te
  -httpd_t does access_check on certs


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-69
changelog:
  - Add more aliases in pegasus.te
  - Add more fixes for *_admin interfaces
  - Add interface fixes
  - Allow nscd to stream connect to nmbd
  - Allow gnupg apps to write to pcscd socket
  - Add more fixes for openlmi provides. Fix naming and support for additionals
  - Allow fetchmail to resolve host names
  - Allow firewalld to interact also with lnk files labeled as firewalld_etc_rw_t
  - Add labeling for cmpiLMI_Fan-cimprovagt
  - Allow net_admin for glusterd
  - Allow telepathy domain to create dconf with correct labeling in /home/userX/.cache/
  - Add pegasus_openlmi_system_t
  - Fix puppet_domtrans_master() to make all puppet calling working in passenger.te
  - Fix corecmd_exec_chroot()
  - Fix logging_relabel_syslog_pid_socket interface
  - Fix typo in unconfineduser.te
  - Allow system_r to access unconfined_dbusd_t to run hp_chec


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-70
changelog:
  - selinux_set_enforce_mode needs to be used with type
  - Add append to the dontaudit for unix_stream_socket of xdm_t leak
  - Allow xdm_t to create symlinks in log direcotries
  - Allow login programs to read afs config
  - Label 10933 as a pop port, for dovecot
  - New policy to allow selinux_server.py to run as semanage_t as a dbus service
  - Add fixes to make netlabelctl working on MLS
  - AVCs required for running sepolicy gui as staff_t
  - Dontaudit attempts to read symlinks, sepolicy gui is likely to cause this type of AVC
  - New dbus server to be used with new gui
  - After modifying some files in /etc/mail, I saw this needed on the next boot
  - Loading a vm from /usr/tmp with virt-manager
  - Clean up oracleasm policy for Fedora
  - Add oracleasm policy written by rlopez@redhat.com
  - Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
  - Add label for /var/crash
  - Allow fenced to domtrans to sanclok_t
  - Allow nagios to manage nagios spool files
  - Make tfptd as home_manager
  - Allow kdump to read kcore on MLS system
  - Allow mysqld-safe sys_nice/sys_resource caps
  - Allow apache to search automount tmp dirs if http_use_nfs is enabled
  - Allow crond to transition to named_t, for use with unbound
  - Allow crond to look at named_conf_t, for unbound
  - Allow mozilla_plugin_t to transition its home content
  - Allow dovecot_domain to read all system and network state
  - Allow httpd_user_script_t to call getpw
  - Allow semanage to read pid files
  - Dontaudit leaked file descriptors from user domain into thumb
  - Make PAM authentication working if it is enabled in ejabberd
  - Add fixes for rabbit to fix ##992920,#992931
  - Allow glusterd to mount filesystems
  - Loading a vm from /usr/tmp with virt-manager
  - Trying to load a VM I got an AVC from devicekit_disk for loopcontrol device
  - Add fix for pand service
  - shorewall touches own log
  - Allow nrpe to list /var
  - Mozilla_plugin_roles can not be passed into lpd_run_lpr
  - Allow afs domains to read afs_config files
  - Allow login programs to read afs config
  - Allow virt_domain to read virt_var_run_t symlinks
  - Allow smokeping to send its process signals
  - Allow fetchmail to setuid
  - Add kdump_manage_crash() interface
  - Allow abrt domain to write abrt.socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-71
changelog:
  - Allow boinc to connect to  @/tmp/.X11-unix/X0
  - Allow beam.smp to connect to tcp/5984
  - Allow named to manage own log files
  - Add label for /usr/libexec/dcc/start-dccifd  and domtrans to dccifd_t
  - Add virt_transition_userdomain boolean decl
  - Allow httpd_t to sendto unix_dgram sockets on its children
  - Allow nova domains to execute ifconfig
  - bluetooth wants to create fifo_files in /tmp
  - exim needs to be able to manage mailman data
  - Allow sysstat to getattr on all file systems
  - Looks like bluetoothd has moved
  - Allow collectd to send ping packets
  - Allow svirt_lxc domains to getpgid
  - Remove virt-sandbox-service labeling as virsh_exec_t, since it no longer does virsh_t stuff
  - Allow frpintd_t to read /dev/urandom
  - Allow asterisk_t to create sock_file in /var/run
  - Allow usbmuxd to use netlink_kobject
  - sosreport needs to getattr on lots of devices, and needs access to netlink_kobject_uevent_socket
  - More cleanup of svirt_lxc policy
  - virtd_lxc_t now talks to dbus
  - Dontaudit leaked ptmx_t
  - Allow processes to use inherited fifo files
  - Allow openvpn_t to connect to squid ports
  - Allow prelink_cron_system_t to ask systemd to reloaddd miscfiles_dontaudit_access_check_cert()
  - Allow ssh_t to use /dev/ptmx
  - Make sure /run/pluto dir is created with correct labeling
  - Allow syslog to run shell and bin_t commands
  - Allow ip to relabel tun_sockets
  - Allow mount to create directories in files under /run
  - Allow processes to use inherited fifo files
  - Allow user roles to connect to the journal socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-72
changelog:
  - Add policy for lsmd
  - Add support for /var/log/mariadb dir and allow mysqld_safe to list this directory
  - Update condor_master rules to allow read system state info and allow logging
  - Add labeling for /etc/condor and allow condor domain to write it (bug)
  - Allow condor domains to manage own logs
  - Allow glusterd to read domains state
  - Fix initial hypervkvp policy
  - Add policy for hypervkvpd
  - Fix redis.if summary


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-73
changelog:
  0 
  - Allow rhsmcertd to read init state
  - Allow fsetid for pkcsslotd
  - Fix labeling for /usr/lib/systemd/system/pkcsslotd.service
  - Allow fetchmail to create own pid with correct labeling
  - Fix rhcs_domain_template()
  - Allow roles which can run mock to read mock lib files to view results
  - Allow rpcbind to use nsswitch
  - Fix lsm.if summary
  - Fix collectd_t can read /etc/passwd file
  - Label systemd unit files under dracut correctly
  - Add support for pam_mount to mount user's encrypted home When a user logs in and logs out using ssh
  - Add support for .Xauthority-n
  - Label umount.crypt as lvm_exec_t
  - Allow syslogd to search psad lib files
  - Allow ssh_t to use /dev/ptmx
  - Make sure /run/pluto dir is created with correct labeling
  - Allow syslog to run shell and bin_t commands
  - Allow ip to relabel tun_sockets
  - Allow mount to create directories in files under /run
  - Allow processes to use inherited fifo files


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-75
changelog:
  - Also sock_file trans rule is needed in lsm
  - Fix labeling for fetchmail pid files/dirs
  - Add additional fixes for abrt-upload-watch
  - Fix polipo.te
  - Fix transition rules in asterisk policy
  - Add fowner capability to networkmanager policy
  - Allow polipo to connect to tor ports
  - Cleanup lsmd.if
  - Cleanup openhpid policy
  - Fix kdump_read_crash() interface
  - Make more domains as init domain
  - Fix cupsd.te
  - Fix requires in rpm_rw_script_inherited_pipes
  - Fix interfaces in lsm.if
  - Allow munin service plugins to manage own tmpfs files/dirs
  - Allow virtd_t also relabel unix stream sockets for virt_image_type
  - Make ktalk as init domain
  - Fix to define ktalkd_unit_file_t correctly
  - Fix ktalk.fc
  - Add systemd support for talk-server
  - Allow glusterd to create sock_file in /run
  - Allow xdm_t to delete gkeyringd_tmp_t files on logout
  - Add fixes for hypervkvp policy
  - Add logwatch_can_sendmail boolean
  - Allow mysqld_safe_t to handle also symlinks in /var/log/mariadb
  - Allow xdm_t to delete gkeyringd_tmp_t files on logout


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-76
changelog:
  - Cleanup related to init_domain()+inetd_domain fixes
  - Use just init_domain instead of init_daemon_domain in inetd_core_service_domain
  - svirt domains neeed to create kobject_uevint_sockets
  - Lots of new access required for sosreport
  - Allow tgtd_t to connect to isns ports
  - Allow init_t to transition to all inetd domains:
  - openct needs to be able to create netlink_object_uevent_sockets
  - Dontaudit leaks into ldconfig_t
  - Dontaudit su domains getattr on /dev devices, move su domains to attribute based calls
  - Move kernel_stream_connect into all Xwindow using users
  - Dontaudit inherited lock files in ifconfig o dhcpc_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-77
changelog:
  - Split out rlogin ports from inetd
  - Treat files labeld as usr_t like bin_t when it comes to transitions
  - Allow staff_t to read login config
  - Allow ipsec_t to read .google authenticator data
  - Allow systemd running as git_systemd to bind git port
  - Fix mozilla_plugin_rw_tmpfs_files()
  - Call the correct interface - corenet_udp_bind_ktalkd_port()
  - Allow all domains that can read gnome_config to read kde config
  - Allow sandbox domain to read/write mozilla_plugin_tmpfs_t so pulseaudio will work
  - Allow mdadm to getattr any file system
  - Allow a confined domain to executes mozilla_exec_t via dbus
  - Allow cupsd_lpd_t to bind to the printer port
  - Dontaudit attempts to bind to ports < 1024 when nis is turned on
  - Allow apache domain to connect to gssproxy socket
  - Allow rlogind to bind to the rlogin_port
  - Allow telnetd to bind to the telnetd_port
  - Allow ktalkd to bind to the ktalkd_port
  - Allow cvs to bind to the cvs_port


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-78
changelog:
  - Allow xdm_t to transition to itself
  - Call neutron interfaces instead of quantum
  - Allow init to change targed role to make uncofined services (xrdp which now has own systemd unit file) working. We want them to have in unconfined_t
  - Make sure directories in /run get created with the correct label
  - Make sure /root/.pki gets created with the right label
  - try to remove labeling for motion from zoneminder_exec_t to bin_t
  - Allow inetd_t to execute shell scripts
  - Allow cloud-init to read all domainstate
  - Fix to use quantum port
  - Add interface netowrkmanager_initrc_domtrans
  - Fix boinc_execmem
  - Allow t-mission-control to read gabble cache home
  - Add labeling for ~/.cache/telepathy/avatars/gabble
  - Allow memcache to read sysfs data
  - Cleanup antivirus policy and add additional fixes
  - Add boolean boinc_enable_execstack
  - Add support for couchdb in rabbitmq policy
  - Add interface couchdb_search_pid_dirs
  - Allow firewalld to read NM state
  - Allow systemd running as git_systemd to bind git port
  - Fix mozilla_plugin_rw_tmpfs_files()


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-79
changelog:
  - Allow block_suspend cap for samba-net
  - Allow t-mission-control to manage gabble cache files
  - Allow nslcd to read /sys/devices/system/cpu
  - Allow selinux_store to use symlinks


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-80
changelog:
  - Allow ldconfig to write to kdumpctl fifo files
  - allow neutron to connect to amqp ports
  - Allow kdump_manage_crash to list the kdump_crash_t directory
  - Allow glance-api to connect to amqp port
  - Allow virt_qemu_ga_t to read meminfo
  - Add antivirus_home_t type for antivirus date in HOMEDIRS
  - Allow mpd setcap which is needed by pulseaudio
  - Allow smbcontrol to create content in /var/lib/samba
  - Allow mozilla_exec_t to be used as a entrypoint to mozilla_domtrans_spec
  - Add additional labeling for qemu-ga/fsfreeze-hook.d scripts
  - amanda_exec_t needs to be executable file
  - Allow block_suspend cap for samba-net
  - Allow apps that read ipsec_mgmt_var_run_t to search ipsec_var_run_t
  - Allow init_t to run crash utility
  - Treat usr_t just like bin_t for transitions and executions
  - Add port definition of pka_ca to port 829 for openshift
  - Allow selinux_store to use symlinks


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-81
changelog:
  - Dontaudit attempts by sosreport to read shadow_t
  - Allow browser sandbox plugins to connect to cups to print
  - Add new label mpd_home_t
  - Label /srv/www/logs as httpd_log_t
  - Add support for /var/lib/php/wsdlcache
  - Add zarafa_setrlimit boolean
  - Allow fetchmail to send mails
  - Add labels for apache logs under miq package
  - Allow irc_t to use tcp sockets
  - fix labels in puppet.if
  - Allow tcsd to read utmp file
  - Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys
  - Define svirt_socket_t as a domain_type
  - Take away transition from init_t to initrc_t when executing bin_t, allow init_t to run chk_passwd_t
  - Fix label on pam_krb5 helper apps


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-82
changelog:
  - wine_tmp is no longer needed
  - Allow setroubleshoot to look at /proc
  - Allow telepathy domains to dbus with systemd logind
  - Fix handling of fifo files of rpm
  - Allow mozilla_plugin to transition to itself
  - Allow certwatch to write to cert_t directories
  - New abrt application
  - Allow NetworkManager to set the kernel scheduler
  - Make wine_domain shared by all wine domains
  - Allow mdadm_t to read images labeled svirt_image_t
  - Allow amanda to read /dev/urand
  - ALlow my_print_default to read /dev/urand
  - Allow mdadm to write to kdumpctl fifo files
  - Allow nslcd to send signull to itself
  - Allow yppasswd to read /dev/urandom
  - Fix zarafa_setrlimit
  - Add support for /var/lib/php/wsdlcache
  - Add zarafa_setrlimit boolean
  - Allow fetchmail to send mails
  - Add additional alias for user_tmp_t because wine_tmp_t is no longer used
  - More handling of ther kernel keyring required by kerberos
  - New privs needed for init_t when running without transition to initrc_t over bin_t, and without unconfined domain installed


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-84
changelog:
  - Fix labeling for /usr/libexec/kde4/kcmdatetimehelper
  - Allow tuned to search all file system directories
  - Allow alsa_t to sys_nice, to get top performance for sound management
  - Add support for MySQL/PostgreSQL for amavis
  - Allow openvpn_t to manage openvpn_var_log_t files.
  - Allow dirsrv_t to create tmpfs_t directories
  - Allow dirsrv to create dirs in /dev/shm with dirsrv_tmpfs label
  - Dontaudit leaked unix_stream_sockets into gnome keyring
  - Allow telepathy domains to inhibit pipes on telepathy domains
  - Allow cloud-init to domtrans to rpm
  - Allow abrt daemon to manage abrt-watch tmp files
  - Allow abrt-upload-watcher to search /var/spool directory
  - Allow nsswitch domains to manage own process key
  - Fix labeling for mgetty.* logs
  - Allow systemd to dbus chat with upower
  - Allow ipsec to send signull to itself
  - Allow setgid cap for ipsec_t
  - Match upstream labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-86
changelog:
  - Fix nscd_shm_use()
  - Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
  - Add hypervkvp_unit_file_t type
  - Add additional fixes forpegasus_openlmi_account_t
  - Allow mdadm to read /dev/urand
  - Allow pegasus_openlmi_storage_t to create mdadm.conf and write it
  - Add label/rules for /etc/mdadm.conf
  - Allow pegasus_openlmi_storage_t to transition to fsadm_t
  - Fixes for interface definition problems
  - Dontaudit dovecot-deliver to gettatr on all fs dirs
  - Allow domains to search data_home_t directories
  - Allow cobblerd to connect to mysql
  - Allow mdadm to r/w kdump lock files
  - Add support for kdump lock files
  - Label zarafa-search as zarafa-indexer
  - Openshift cgroup wants to read /etc/passwd
  - Add new sandbox domains for kvm
  - Allow mpd to interact with pulseaudio if mpd_enable_homedirs is turned on
  - Fix labeling for /usr/lib/systemd/system/lvm2.*
  - Add labeling for /usr/lib/systemd/system/lvm2.*
  - Fix typos to get a new build. We should not cover filename trans rules to prevent duplicate rules
  - Add sshd_keygen_t policy for sshd-keygen
  - Fix alsa_home_filetrans interface name and definition
  - Allow chown for ssh_keygen_t
  - Add fs_dontaudit_getattr_all_dirs()
  - Allow init_t to manage etc_aliases_t and read xserver_var_lib_t and chrony keys
  - Fix up patch to allow systemd to manage home content
  - Allow domains to send/recv unlabeled traffic if unlabelednet.pp is enabled
  - Allow getty to exec hostname to get info
  - Add systemd_home_t for ~/.local/share/systemd directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-87
changelog:
  - init reload  from systemd_localed_t
  - Allow domains that communicate with systemd_logind_sessions to use systemd_logind_t fd
  - Allow systemd_localed_t to ask systemd to reload the locale.
  - Add systemd_runtime_unit_file_t type for unit files that systemd creates in memory
  - Allow readahead to read /dev/urand
  - Fix lots of avcs about tuned
  - Any file names xenstored in /var/log should be treated as xenstored_var_log_t
  - Allow tuned to inderact with hugepages
  - Allow condor domains to list etc rw dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-88
changelog:
  - Add auth_exec_chkpwd interface
  - Fix port definition for ctdb ports
  - Allow systemd domains to read /dev/urand
  - Dontaudit attempts for mozilla_plugin to append to /dev/random
  - Add label for /var/run/charon.*
  - Add labeling for /usr/lib/systemd/system/lvm2.*dd policy for motion service
  - Fix for nagios_services plugins
  - Fix some bugs in zoneminder policy
  - add type defintion for ctdbd_var_t
  - Add support for /var/ctdb. Allow ctdb block_suspend and read /etc/passwd file
  - Allow net_admin/netlink_socket all hyperv_domain domains
  - Add labeling for zarafa-search.log and zarafa-search.pid
  - glusterd binds to random unreserved ports
  - Additional allow rules found by testing glusterfs
  - apcupsd needs to send a message to all users on the system so needs to look them up
  - Fix the label on ~/.juniper_networks
  - Dontaudit attempts for mozilla_plugin to append to /dev/random
  - Allow polipo_daemon to connect to flash ports
  - Allow gssproxy_t to create replay caches
  - Fix nscd_shm_use()
  - Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
  - Add hypervkvp_unit_file_t type


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-89
changelog:
  - Fix gnome_read_generic_data_home_files()
  - allow openshift_cgroup_t to read/write inherited openshift file types
  - Remove httpd_cobbler_content * from cobbler_admin interface
  - Allow svirt sandbox domains to setattr on chr_file and blk_file svirt_sandbox_file_t, so sshd will work within a container
  - Allow httpd_t to read also git sys content symlinks
  - Allow init_t to read gnome home data
  - Dontaudit setroubleshoot_fixit_t execmem, since it does not seem to really need it.
  - Allow virsh to execute systemctl
  - Fix for nagios_services plugins
  - add type defintion for ctdbd_var_t
  - Add support for /var/ctdb. Allow ctdb block_suspend and read /etc/passwd file
  - Allow net_admin/netlink_socket all hyperv_domain domains
  - Add labeling for zarafa-search.log and zarafa-search.pid
  - Fix hypervkvp.te
  - Fix nscd_shm_use()
  - Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
  - Add hypervkvp_unit_file_t type
  - Fix logging policy
  - Allow syslog to bind to tls ports
  - Update labeling for /dev/cdc-wdm
  - Allow to su_domain to read init states
  - Allow init_t to read gnome home data
  - Make sure if systemd_logind creates nologin file with the correct label
  - Clean up ipsec.te


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-91
changelog:
  - Allow mailserver_domains to manage and transition to mailman data
  - Dontaudit attempts by mozilla plugin to relabel content, caused by using mv and cp commands
  - Allow mailserver_domains to manage and transition to mailman data
  - Allow svirt_domains to read sysctl_net_t
  - Allow thumb_t to use tmpfs inherited from the user
  - Allow mozilla_plugin to bind to the vnc port if running with spice
  - Add new attribute to discover confined_admins and assign confined admin to it
  - Fix zabbix to handle attributes in interfaces
  - Fix zabbix to read system states for all zabbix domains
  - Fix piranha_domain_template()
  - Allow ctdbd to create udp_socket. Allow ndmbd to access ctdbd var files.
  - Allow lldpad sys_rouserce cap due to #986870
  - Allow dovecot-auth to read nologin
  - Allow openlmi-networking to read /proc/net/dev
  - Allow smsd_t to execute scripts created on the fly labeled as smsd_spool_t
  - Add zabbix_domain attribute for zabbix domains to treat them together
  - Add labels for zabbix-poxy-* (#1018221)
  - Update openlmi-storage policy to reflect #1015067
  - Back port piranha tmpfs fixes from RHEL6
  - Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
  - Add postfix_rw_spool_maildrop_files interface
  - Call new userdom_admin_user_templat() also for sysadm_secadm.pp
  - Fix typo in userdom_admin_user_template()
  - Allow SELinux users to create coolkeypk11sE-Gate in /var/cache/coolkey
  - Add new attribute to discover confined_admins
  - Fix labeling for /etc/strongswan/ipsec.d
  - systemd_logind seems to pass fd to anyone who dbus communicates with it
  - Dontaudit leaked write descriptor to dmesg


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-93
changelog:
  - Allow sshd_t to read openshift content, needs backport to RHEL6.5
  - Label /usr/lib64/sasl2/libsasldb.so.3.0.0 as textrel_shlib_t
  - Make sur kdump lock is created with correct label if kdumpctl is executed
  - gnome interface calls should always be made within an optional_block
  - Allow syslogd_t to connect to the syslog_tls port
  - Add labeling for /var/run/charon.ctl socket
  - Add kdump_filetrans_named_content()
  - Allo setpgid for fenced_t
  - Allow setpgid and r/w cluster tmpfs for fenced_t
  - gnome calls should always be within optional blocks
  - wicd.pid should be labeled as networkmanager_var_run_t
  - Allow sys_resource for lldpad


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-94
changelog:
  - Allow sysadm_t to read login information
  - Allow systemd_tmpfiles to setattr on var_log_t directories
  - Udpdate Makefile to include systemd_contexts
  - Add systemd_contexts
  - Add fs_exec_hugetlbfs_files() interface
  - Add daemons_enable_cluster_mode boolean
  - Fix rsync_filetrans_named_content()
  - Add rhcs_read_cluster_pid_files() interface
  - Update rhcs.if with additional interfaces from RHEL6
  - Fix rhcs_domain_template() to not create run dirs with cluster_var_run_t
  - Allow glusterd_t to mounton glusterd_tmp_t
  - Allow glusterd to unmout al filesystems
  - Allow xenstored to read virt config
  - Add label for swift_server.lock and make add filetrans_named_content to make sure content gets created with the correct label
  - Allow mozilla_plugin_t to mmap hugepages as an executable


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-95
changelog:
  - Fix alias decl in corenetwork.te.in
  - Add support for fuse.glusterfs
  - Add file transition rules for content created by f5link
  - Rename quantum_port information to neutron
  - Allow all antivirus domains to manage also own log dirs
  - Rename quantum_port information to neutron
  - Allow pegasus_openlmi_services_t to stream connect to sssd_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-97
changelog:
  - Add label only for redhat.repo instead of /etc/yum.repos.d. But probably we will need to switch for the directory.
  - Label /etc/yum.repos.d as system_conf_t
  - Use sysnet_filetrans_named_content in udev.te instead of generic transition for net_conf_t
  - Allow dac_override for sysadm_screen_t
  - Allow init_t to read ipsec_conf_t as we had it for initrc_t. Needed by ipsec unit file.
  - Allow netlabel-config to read meminfo
  - Add interface to allow docker to mounton file_t
  - Add new interface to exec unlabeled files
  - Allow lvm to use docker semaphores
  - Setup transitons for .xsessions-errors.old
  - Change labels of files in /var/lib/*/.ssh to transition properly
  - Allow staff_t and user_t to look at logs using journalctl
  - pluto wants to manage own log file
  - Allow pluto running as ipsec_t to create pluto.log
  - Fix alias decl in corenetwork.te.in
  - Add support for fuse.glusterfs
  - Allow dmidecode to read/write /run/lock/subsys/rhsmcertd
  - Allow rhsmcertd to manage redhat.repo which is now labeled as system.conf. Allow rhsmcertd to manage all log files.
  - Additional access for docker
  - Added more rules to sblim policy
  - Fix kdumpgui_run_bootloader boolean
  - Allow dspam to connect to lmtp port
  - Included sfcbd service into sblim policy
  - rhsmcertd wants to manaage /etc/pki/consumer dir
  - Add kdumpgui_run_bootloader boolean
  - Add support for /var/cache/watchdog
  - Remove virt_domain attribute for virt_qemu_ga_unconfined_t
  - Fixes for handling libvirt containes
  - Dontaudit attempts by mysql_safe to write content into /
  - Dontaudit attempts by system_mail to modify network config
  - Allow dspam to bind to lmtp ports
  - Add new policy to allow staff_t and user_t to look at logs using journalctl
  - Allow apache cgi scripts to list sysfs
  - Dontaudit attempts to write/delete user_tmp_t files
  - Allow all antivirus domains to manage also own log dirs
  - Allow pegasus_openlmi_services_t to stream connect to sssd_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-98
changelog:
  - Add files_relabel_base_file_types() interface
  - Allow netlabel-config to read passwd
  - update gluster_export_all_rw boolean to allow relabel all base file types caused by lsetxattr()
  - Allow x86_energy_perf  tool to modify the MSR
  - Fix /var/lib/dspam/data labeling
  - Allow pegasus to domtrans to mount_t
  - Add labeling for unconfined scripts in /usr/libexec/watchdog/scripts
  - Add support for unconfined watchdog scripts
  - Allow watchdog to manage own log files


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-99
changelog:
  - Add support for yubikey in homedir
  - Add support for upd/3052 port
  - Allow apcupsd to use PowerChute Network Shutdown
  - Allow lsmd to execute various lsmplugins
  - Add labeling also for /etc/watchdog\.d where are watchdog scripts located too
  - Update gluster_export_all_rw boolean to allow relabel all base file types
  - Allow x86_energy_perf  tool to modify the MSR
  - Fix /var/lib/dspam/data labeling


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-100
changelog:
  - Fix passenger_stream_connect interface
  - setroubleshoot_fixit wants to read network state
  - Allow procmail_t to connect to dovecot stream sockets
  - Allow cimprovagt service providers to read network states
  - Add labeling for /var/run/mariadb
  - pwauth uses lastlog() to update system's lastlog
  - Allow account provider to read login records
  - Add support for texlive2013
  - More fixes for user config files to make crond_t running in userdomain
  - Add back disable/reload/enable permissions for system class
  - Fix manage_service_perms macro
  - Allow passwd_t to connect to gnome keyring to change password
  - Update mls config files to have cronjobs in the user domains
  - Remove access checks that systemd does not actually do


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-102
changelog:
  - Fix files_dontaudit_unmount_all_mountpoints()
  - Add support for 2608-2609 tcp/udp ports
  - Should allow domains to lock the terminal device
  - More fixes for user config files to make crond_t running in userdomain
  - Add back disable/reload/enable permissions for system class
  - Fix manage_service_perms macro
  - We need to require passwd rootok
  - Fix zebra.fc
  - Fix dnsmasq_filetrans_named_content() interface
  - Allow all sandbox domains create content in svirt_home_t
  - Allow zebra domains also create zebra_tmp_t files in /tmp
  - Add support for new zebra services:isisd,babeld. Add systemd support for zebra services.
  - Fix labeling on neutron and remove transition to iconfig_t
  - abrt needs to read mcelog log file
  - Fix labeling on dnsmasq content
  - Fix labeling on /etc/dnsmasq.d
  - Allow glusterd to relabel own lib files
  - Allow sandbox domains to use pam_rootok, and dontaudit attempts to unmount file systems, this is caused by a bug in systemd
  - Allow ipc_lock for abrt to run journalctl


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-104
changelog:
  - Allow watchdog to read /etc/passwd
  - Allow browser plugins to connect to bumblebee
  - New policy for bumblebee and freqset
  - Add new policy for mip6d daemon
  - Add new policy for opensm daemon
  - Allow condor domains to read/write condor_master udp_socket
  - Allow openshift_cron_t to append to openshift log files, label /var/log/openshift
  - Add back file_pid_filetrans for /var/run/dlm_controld
  - Allow smbd_t to use inherited tmpfs content
  - Allow mcelog to use the /dev/cpu device
  - sosreport runs rpcinfo
  - sosreport runs subscription-manager
  - Allow staff_t to run frequency command
  - Allow systemd_tmpfiles to relabel log directories
  - Allow staff_t to read xserver_log file
  - Label hsperfdata_root as tmp_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-105
changelog:
  - Dontaudit openshift domains trying to use rawip_sockets, this is caused by a bad check in the kernel.
  - Allow git_system_t to read git_user_content if the git_system_enable_homedirs boolean is turned on
  - Add lsmd_plugin_t for lsm plugins
  - Allow dovecot-deliver to search mountpoints
  - Add labeling for /etc/mdadm.conf
  - Allow opelmi admin providers to dbus chat with init_t
  - Allow sblim domain to read /dev/urandom and /dev/random
  - Allow apmd to request the kernel load modules
  - Add glusterd_brick_t type
  - label mate-keyring-daemon with gkeyringd_exec_t
  - Add plymouthd_create_log()
  - Dontaudit leaks from openshift domains into mail domains, needs back port to RHEL6
  - Allow sssd to request the kernel loads modules
  - Allow gpg_agent to use ssh-add
  - Allow gpg_agent to use ssh-add
  - Dontaudit access check on /root for myslqd_safe_t
  - Allow ctdb to getattr on al filesystems
  - Allow abrt to stream connect to syslog
  - Allow dnsmasq to list dnsmasq.d directory
  - Watchdog opens the raw socket
  - Allow watchdog to read network state info
  - Dontaudit access check on lvm lock dir
  - Allow sosreport to send signull to setroubleshootd
  - Add setroubleshoot_signull() interface
  - Fix ldap_read_certs() interface
  - Allow sosreport all signal perms
  - Allow sosreport to run systemctl
  - Allow sosreport to dbus chat with rpm
  - Add glusterd_brick_t files type
  - Allow zabbix_agentd to read all domain state
  - Clean up rtas.if
  - Allow smoltclient to execute ldconfig
  - Allow sosreport to request the kernel to load a module
  - Fix userdom_confined_admin_template()
  - Add back exec_content boolean for secadm, logadm, auditadm
  - Fix files_filetrans_system_db_named_files() interface
  - Allow sulogin to getattr on /proc/kcore
  - Add filename transition also for servicelog.db-journal
  - Add files_dontaudit_access_check_root()
  - Add lvm_dontaudit_access_check_lock() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-108
changelog:
  - Allow sosreport to send a signal to ABRT
  - Add proper aliases for pegasus_openlmi_service_exec_t and pegasus_openlmi_service_t
  - Label /usr/sbin/htcacheclean as httpd_exec_t
  Resolves:#1037529
  - Added support for rdisc unit file
  - Add antivirus_db_t labeling for /var/lib/clamav-unofficial-sigs
  - Allow runuser running as logrotate connections to system DBUS
  - Label bcache devices as fixed_disk_device_t
  - Allow systemctl running in ipsec_mgmt_t to access /usr/lib/systemd/system/ipsec.service
  - Label /usr/lib/systemd/system/ipsec.service as ipsec_mgmt_unit_file_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-109
changelog:
  - Change labeling for /usr/libexec/nm-dispatcher.action to NetworkManager_exec_t
  Resolves:#1039879
  - Add labeling for /usr/lib/systemd/system/mariadb.service
  - Allow hyperv_domain to read sysfs
  - Fix ldap_read_certs() interface to allow acess also link files
  - Add support for /usr/libexec/pegasus/cmpiLMI_Journald-cimprovagt
  - Allow tuned to run modprobe
  - Allow portreserve to search /var/lib/sss dir
  - Add SELinux support for the teamd package contains team network device control daemon.
  - Dontaudit access check on /proc for bumblebee
  - Bumblebee wants to load nvidia modules
  - Fix rpm_named_filetrans_log_files and wine.te
  - Add conman policy for rawhide
  - DRM master and input event devices are used by  the TakeDevice API
  - Clean up bumblebee policy
  - Update pegasus_openlmi_storage_t policy
  - Add freeipmi_stream_connect() interface
  - Allow logwatch read madm.conf to support RAID setup
  - Add raid_read_conf_files() interface
  - Allow up2date running as rpm_t create up2date log file with rpm_log_t labeling
  - add rpm_named_filetrans_log_files() interface
  - Allow dkim-milter to create files/dirs in /tmp
  - update freeipmi policy
  - Add policy for freeipmi services
  - Added rdisc_admin and rdisc_systemctl interfaces
  - opensm policy clean up
  - openwsman policy clean up
  - ninfod policy clean up
  - Added new policy for ninfod
  - Added new policy for openwsman
  - Added rdisc_admin and rdisc_systemctl interfaces
  - Fix kernel_dontaudit_access_check_proc()
  - Add support for /dev/uhid
  - Allow sulogin to get the attributes of initctl and sys_admin cap
  - Add kernel_dontaudit_access_check_proc()
  - Fix dev_rw_ipmi_dev()
  - Fix new interface in devices.if
  - DRM master and input event devices are used by  the TakeDevice API
  - add dev_rw_inherited_dri() and dev_rw_inherited_input_dev()
  - Added support for default conman port
  - Add interfaces for ipmi devices


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-110
changelog:
  - Allow freeipmi_ipmidetectd_t to use freeipmi port
  - Update freeipmi_domain_template()
  - Allow journalctl running as ABRT to read /run/log/journal
  - Allow NM to read dispatcher.d directory
  - Update freeipmi policy
  - Type transitions with a filename not allowed inside conditionals
  - Allow tor to bind to hplip port
  - Make new type to texlive files in homedir
  - Allow zabbix_agent to transition to dmidecode
  - Add rules for docker
  - Allow sosreport to send signull to unconfined_t
  - Add virt_noatsecure and virt_rlimitinh interfaces
  - Fix labeling in thumb.fc to add support for /usr/lib64/tumbler-1/tumblerddd support for freeipmi port
  - Add sysadm_u_default_contexts
  - Add logging_read_syslog_pid()
  - Fix userdom_manage_home_texlive() interface
  - Make new type to texlive files in homedir
  - Add filename transitions for /run and /lock links
  - Allow virtd to inherit rlimit information
  Resolves:#975358


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-111
changelog:
  - Add labeling for /var/lib/servicelog/servicelog.db-journal
  - Add support for freeipmi port
  - Add sysadm_u_default_contexts
  - Make new type to texlive files in homedir
  - Allow subscription-manager running as sosreport_t to manage rhsmcertd
  - Additional fixes for docker.te
  - Remove ability to do mount/sys_admin by default in virt_sandbox domains
  - New rules required to run docker images within libivrt
  - Add label for ~/.cvsignore
  - Change mirrormanager to be run by cron
  - Add mirrormanager policy
  - Fixed bumblebee_admin() and mip6d_admin()
  - Add log support for sensord
  - Fix typo in docker.te
  - Allow amanda to do backups over UDP
  - Allow bumblebee to read /etc/group and clean up bumblebee.te
  - type transitions with a filename not allowed inside conditionals
  - Don't allow virt-sandbox tools to use netlink out of the box, needs back port to RHEL7
  - Make new type to texlive files in homedir


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-112
changelog:
  - Allow sshd to write to all process levels in order to change passwd when running at a level
  - Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range
  - Allow apcuspd_t to status and start the power unit file
  - Allow udev to manage kdump unit file
  - Added new interface modutils_dontaudit_exec_insmod
  - Allow cobbler to search dhcp_etc_t directory
  - systemd_systemctl needs sys_admin capability
  - Allow sytemd_tmpfiles_t to delete all directories
  - passwd to create gnome-keyring passwd socket
  - Add missing zabbix_var_lib_t type
  - Fix filename trans for zabbixsrv in zabbix.te
  - Allow fprintd_t to send syslog messages
  - Add  zabbix_var_lib_t for /var/lib/zabbixsrv, also allow zabix to connect to smtp port
  - Allow mozilla plugin to chat with policykit, needed for spice
  - Allow gssprozy to change user and gid, as well as read user keyrings
  - Label upgrades directory under /var/www as httpd_sys_rw_content_t, add other filetrans rules to label content correctly
  - Allow polipo to connect to http_cache_ports
  - Allow cron jobs to manage apache var lib content
  - Allow yppassword to manage the passwd_file_t
  - Allow showall_t to send itself signals
  - Allow cobbler to restart dhcpc, dnsmasq and bind services
  - Allow certmonger to manage home cert files
  - Add userdom filename trans for user mail domains
  - Allow apcuspd_t to status and start the power unit file
  - Allow cgroupdrulesengd to create content in cgoups directories
  - Allow smbd_t to signull cluster
  - Allow gluster daemon to create fifo files in glusterd_brick_t and sock_file in glusterd_var_lib_t
  - Add label for /var/spool/cron.aquota.user
  - Allow sandbox_x domains to use work with the mozilla plugin semaphore
  - Added new policy for speech-dispatcher
  - Added dontaudit rule for insmod_exec_t  in rasdaemon policy
  - Updated rasdaemon policy
  - Allow system_mail_t to transition to postfix_postdrop_t
  - Clean up mirrormanager policy
  - Allow virt_domains to read cert files, needs backport to RHEL7
  - Allow sssd to read systemd_login_var_run_t
  - Allow irc_t to execute shell and bin-t files:
  - Add new access for mythtv
  - Allow rsync_t to manage all non auth files
  - allow modemmanger to read /dev/urand
  - Allow sandbox apps to attempt to set and get capabilties


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-114
changelog:
  - Add default lvm_var_run_t label for /var/run/multipathd
  Resolves:#1051430
  - Fix log labeling to have correct default label for them after logrotate
  - Add files_write_root_dirs
  - Add new openflow port label for 6653/tcp and 6633/tcp
  - Add xserver_manage_xkb_libs()
  - Label tcp/8891 as milter por
  - Allow gnome_manage_generic_cache_files also create cache_home_t files
  - Fix aide.log labeling
  - Fix log labeling to have correct default label for them after logrotate
  - Allow mysqld-safe write access on /root to make mysqld working
  - Allow sosreport domtrans to prelikn
  - Allow OpenvSwitch to connec to openflow ports
  - Allow NM send dgram to lldpad
  - Allow hyperv domains to execute shell
  - Allow lsmd plugins stream connect to lsmd/init
  - Allow sblim domains to create /run/gather with correct labeling
  - Allow httpd to read ldap certs
  - Allow cupsd to send dbus msgs to process with different MLS level
  - Allow bumblebee to stream connect to apmd
  - Allow bumblebee to run xkbcomp
  - Additional allow rules to get libvirt-lxc containers working with docker
  - Additional allow rules to get libvirt-lxc containers working with docker
  - Allow docker to getattr on itself
  - Additional rules needed for sandbox apps
  - Allow mozilla_plugin to set attributes on usb device if use_spice boolean enabled
  - httpd should be able to send signal/signull to httpd_suexec_t
  - Add more fixes for neturon. Domtrans to dnsmasq, iptables. Make neutron as filenamtrans domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-116
changelog:
  - Add missing files_create_var_lib_dirs()
  - Fix typo in ipsec.te
  - Allow passwd to create directory in /var/lib
  - Add filename trans also for event21
  - Allow iptables command to read /dev/rand
  - Add sigkill capabilityfor ipsec_t
  - Add filename transitions for bcache devices
  - Add additional rules to create /var/log/cron by syslogd_t with correct labeling
  - Add give everyone full access to all key rings
  - Add default lvm_var_run_t label for /var/run/multipathd
  - Fix log labeling to have correct default label for them after logrotate
  - Labeled ~/.nv/GLCache as being gstreamer output
  - Allow nagios_system_plugin to read mrtg lib files
  - Add mrtg_read_lib_files()
  - Call rhcs_rw_cluster_tmpfs for dlm_controld
  - Make authconfing as named_filetrans domain
  - Allow virsh to connect to user process using stream socket
  - Allow rtas_errd to read rand/urand devices and add chown capability
  - Fix labeling from /var/run/net-snmpd to correct /var/run/net-snmp
  Resolves:#1051497
  - Add also chown cap for abrt_upload_watch_t. It already has dac_override
  - Allow sosreport to manage rhsmcertd pid files
  - Add rhsmcertd_manage_pid_files()
  - Allow also setgid cap for rpc.gssd
  - Dontaudit access check for abrt on cert_t
  - Allow pegasus_openlmi_system providers to dbus chat with systemd-logind


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-118
changelog:
  - Allow init_t to work on transitient and snapshot unit files
  - Add logging_manage_syslog_config()
  - Update sysnet_dns_name_resolve() to allow connect to dnssec por
  - Allow pegasus_openlmi_storage_t to read hwdata
  Resolves:#1031721
  - Fix rhcs_rw_cluster_tmpfs()
  - Allow fenced_t to bind on zented udp port
  - Added policy for vmtools
  - Fix mirrormanager_read_lib_files()
  - Allow mirromanager scripts running as httpd_t to manage mirrormanager pid files
  - Allow ctdb to create sock files in /var/run/ctdb
  - Add sblim_filetrans_named_content() interface
  - Allow rpm scritplets to create /run/gather with correct labeling
  - Allow gnome keyring domains to create gnome config dirs
  - Dontaudit read/write to init stream socket for lsmd_plugin_t
  - Allow automount to read nfs link files
  - Allow lsm plugins to read/write lsmd stream socket
  - Allow certmonger to connect ldap port to make IPA CA certificate renewal working.
  - Add also labeling for /var/run/ctdb
  - Add missing labeling for /var/lib/ctdb
  - ALlow tuned to manage syslog.conf. Should be fixed in tuned. #1030446
  - Dontaudit hypervkvp to search homedirs
  - Dontaudit hypervkvp to search admin homedirs
  - Allow hypervkvp to execute bin_t and ifconfig in the caller domain
  - Dontaudit xguest_t to read ABRT conf files
  - Add abrt_dontaudit_read_config()
  - Allow namespace-init to getattr on fs
  - Add thumb_role() also for xguest
  - Add filename transitions to create .spamassassin with correct labeling
  - Allow apache domain to read mirrormanager pid files
  - Allow domains to read/write shm and sem owned by mozilla_plugin_t
  - Allow alsactl to send a generic signal to kernel_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-119
changelog:
  - Add cron unconfined role support for uncofined SELinux user
  - Call corenet_udp_bind_all_ports() in milter.te
  - Allow fence_virtd to connect to zented port
  - Fix header for mirrormanager_admin()
  - Allow dkim-milter to bind udp ports
  - Allow milter domains to send signull itself
  - Allow block_suspend for yum running as mock_t
  - Allow beam.smp to manage couchdb files
  - Add couchdb_manage_files()
  - Add labeling for /var/log/php_errors.log
  - Allow bumblebee to stream connect to xserver
  - Allow bumblebee to send a signal to xserver
  - gnome-thumbnail to stream connect to bumblebee
  - Allow xkbcomp running as bumblebee_t to execute  bin_t
  - Allow logrotate to read squid.conf
  - Additional rules to get docker and lxc to play well with SELinux
  - Allow bumbleed to connect to xserver port
  - Allow pegasus_openlmi_storage_t to read hwdata


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-120
changelog:
  - Allow apache to write to the owncloud data directory in /var/www/html...
  - Allow consolekit to create log dir
  - Add support for icinga CGI scripts
  - Add support for icinga
  - Allow kdumpctl_t to create kdump lock file
  Resolves:#1055634
  - Allow kdump to create lnk lock file
  - Allow nscd_t block_suspen capability
  - Allow unconfined domain types to manage own transient unit file
  - Allow systemd domains to handle transient init unit files
  - Add interfaces to handle transient


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-121
changelog:
  - Allow gdm to create /var/gdm with correct labeling
  - Allow domains to append rkhunterl lib files. #1057982
  - Allow systemd_tmpfiles_t net_admin to communicate with journald
  - Add interface to getattr on an isid_type for any type of file
  - Update libs_filetrans_named_content() to have support for /usr/lib/debug directory
  - Allow initrc_t domtrans to authconfig if unconfined is enabled
  - Allow docker and mount on devpts chr_file
  - Allow docker to transition to unconfined_t if boolean set
  - init calling needs to be optional in domain.te
  - Allow uncofined domain types to handle transient unit files
  - Fix labeling for vfio devices
  - Allow net_admin capability and send system log msgs
  - Allow lldpad send dgram to NM
  - Add networkmanager_dgram_send()
  - rkhunter_var_lib_t is correct type
  - Back port pcp policy from rawhide
  - Allow openlmi-storage to read removable devices
  - Allow system cron jobs to manage rkhunter lib files
  - Add rkhunter_manage_lib_files()
  - Fix ftpd_use_fusefs boolean to allow manage also symlinks
  - Allow smbcontrob block_suspend cap2
  - Allow slpd to read network and system state info
  - Allow NM domtrans to iscsid_t if iscsiadm is executed
  - Allow slapd to send a signal itself
  - Allow sslget running as pki_ra_t to contact port 8443, the secure port of the CA.
  - Fix plymouthd_create_log() interface
  - Add rkhunter policy with files type definition for /var/lib/rkhunter until it is fixed in rkhunter package
  - Add mozilla_plugin_exec_t for /usr/lib/firefox/plugin-container
  - Allow postfix and cyrus-imapd to work out of box
  - Allow fcoemon to talk with unpriv user domain using unix_stream_socket
  - Dontaudit domains that are calling into journald to net_admin
  - Add rules to allow vmtools to do what it does
  - snapperd is D-Bus service
  - Allow OpenLMI PowerManagement to call 'systemctl --force reboot'
  - Add haproxy_connect_any boolean
  - Allow haproxy also to use http cache port by default
  Resolves:#1058248


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-122
changelog:
  - Update snapper policy
  - Allow domains to append rkhunter lib files
  - Allow snapperd to getattr on all fs
  - Allow xdm to create /var/gdm with correct labeling
  - Add label for snapper.log
  - Allow fail2ban-client to read apache log files
  - Allow thumb_t to execute dbus-daemon in thumb_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-123
changelog:
  - Turn on bacula, rhnsd policy
  - Add support for rhnsd unit file
  - Add dbus_chat_session_bus() interface
  - Add dbus_stream_connect_session_bus() interface
  - Fix logrotate_use_nfs boolean
  - Add lot of pcp fixes found in RHEL7
  - fix labeling for pmie for pcp pkg
  - Change thumb_t to be allowed to chat/connect with session bus type
  - Allow call renice in mlocate
  - Add logrotate_use_nfs boolean
  - Allow setroubleshootd to read rpc sysctl
  - Fixes for *_admin interfaces
  - Add pegasus_openlmi_storage_var_run_t type def
  - Add support for /var/run/openlmi-storage
  - Allow tuned to create syslog.conf with correct labeling
  - Add httpd_dontaudit_search_dirs boolean
  - Add support for winbind.service
  - ALlow also fail2ban-client to read apache logs
  - Allow vmtools to getattr on all fs
  - Add support for dey_sapi port
  - Add logging_filetrans_named_conf()
  - Allow passwd_t to use ipc_lock, so that it can change the password in gnome-keyring


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-124
changelog:
  - Added osad policy
  - Allow postfix to deliver to procmail
  - Allow bumblebee to seng kill signal to xserver
  - Allow vmtools to execute /usr/bin/lsb_release
  - Allow docker to write system net ctrls
  - Add support for rhnsd unit file
  - Add dbus_chat_session_bus() interface
  - Add dbus_stream_connect_session_bus() interface
  - Fix pcp.te
  - Fix logrotate_use_nfs boolean
  - Add lot of pcp fixes found in RHEL7
  - fix labeling for pmie for pcp pkg
  - Change thumb_t to be allowed to chat/connect with session bus type
  - Allow call renice in mlocate
  - Add logrotate_use_nfs boolean
  - Allow setroubleshootd to read rpc sysctl


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-125
changelog:
  - Addopt corenet rules for unbound-anchor to rpm_script_t
  - Allow runuser to send send audit messages.
  - Allow postfix-local to search .forward in munin lib dirs
  - Allow udisks to connect to D-Bus
  - Allow spamd to connect to spamd port
  - Fix syntax error in snapper.te
  - Dontaudit osad to search gconf home files
  - Allow rhsmcertd to manage /etc/sysconf/rhn director
  - Fix pcp labeling to accept /usr/bin for all daemon binaries
  - Fix mcelog_read_log() interface
  - Allow iscsid to manage iscsi lib files
  - Allow snapper domtrans to lvm_t. Add support for /etc/snapper and allow snapperd to manage it.
  - Make tuned_t as unconfined domain for RHEL7.0
  - Allow ABRT to read puppet certs
  - Add sys_time capability for virt-ga
  - Allow gemu-ga to domtrans to hwclock_t
  - Allow additional access for virt_qemu_ga_t processes to read system clock and send audit messages
  - Fix some AVCs in pcp policy
  - Add to bacula capability setgid and setuid and allow to bind to bacula ports
  - Changed label from rhnsd_rw_conf_t to rhnsd_conf_t
  - Add access rhnsd and osad to /etc/sysconfig/rhn
  - drbdadm executes drbdmeta
  - Fixes needed for docker
  - Allow epmd to manage /var/log/rabbitmq/startup_err file
  - Allow beam.smp connect to amqp port
  - Modify xdm_write_home to allow create also links as xdm_home_t if the boolean is on true
  - Allow init_t to manage pluto.ctl because of init_t instead of initrc_t
  - Allow systemd_tmpfiles_t to manage all non security files on the system
  - Added labels for bacula ports
  - Fix label on /dev/vfio/vfio
  - Add kernel_mounton_messages() interface
  - init wants to manage lock files for iscsi


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-126
changelog:
  - Add lvm_read_metadata()
  - Allow auditadm to search /var/log/audit dir
  - Add lvm_read_metadata() interface
  - Allow confined users to run vmtools helpers
  - Fix userdom_common_user_template()
  - Generic systemd unit scripts do write check on /
  - Allow init_t to create init_tmp_t in /tmp.This is for temporary content created by generic unit files
  - Add additional fixes needed for init_t and setup script running in generic unit files
  - Allow general users to create packet_sockets
  - added connlcli port
  - Add init_manage_transient_unit() interface
  - Allow init_t (generic unit files) to manage rpc state date as we had it for initrc_t
  - Fix userdomain.te to require passwd class
  - devicekit_power sends out a signal to all processes on the message bus when power is going down
  - Dontaudit rendom domains listing /proc and hittping system_map_t
  - Dontauit leaks of var_t into ifconfig_t
  - Allow domains that transition to ssh_t to manipulate its keyring
  - Define oracleasm_t as a device node
  - Change to handle /root as a symbolic link for os-tree
  - Allow sysadm_t to create packet_socket, also move some rules to attributes
  - Add label for openvswitch port
  - Remove general transition for files/dirs created in /etc/mail which got etc_aliases_t label.
  - Allow postfix_local to read .forward in pcp lib files
  - Allow pegasus_openlmi_storage_t to read lvm metadata
  - Add additional fixes for pegasus_openlmi_storage_t
  - Allow bumblebee to manage debugfs
  - Make bumblebee as unconfined domain
  - Allow snmp to read etc_aliases_t
  - Allow lscpu running in pegasus_openlmi_storage_t to read /dev/mem
  - Allow pegasus_openlmi_storage_t to read /proc/1/environ
  - Dontaudit read gconf files for cupsd_config_t
  - make vmtools as unconfined domain
  - Add vmtools_helper_t for helper scripts. Allow vmtools shutdonw a host and run ifconfig.
  - Allow collectd_t to use a mysql database
  - Allow ipa-otpd to perform DNS name resolution
  - Added new policy for keepalived
  - Allow openlmi-service provider to manage transitient units and allow stream connect to sssd
  - Add additional fixes new pscs-lite+polkit support
  - Add labeling for /run/krb5kdc
  - Change w3c_validator_tmp_t to httpd_w3c_validator_tmp_t in F20
  - Allow pcscd to read users proc info
  - Dontaudit smbd_t sending out random signuls
  - Add boolean to allow openshift domains to use nfs
  - Allow w3c_validator to create content in /tmp
  - zabbix_agent uses nsswitch
  - Allow procmail and dovecot to work together to deliver mail
  - Allow spamd to execute files in homedir if boolean turned on
  - Allow openvswitch to listen on port 6634
  - Add net_admin capability in collectd policy
  - Fixed snapperd policy
  - Fixed bugsfor pcp policy
  - Allow dbus_system_domains to be started by init
  - Fixed some interfaces
  - Add kerberos_keytab_domain attribute
  - Fix snapperd_conf_t def


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-127
changelog:
  - Add snapperd_home_t for HOME_DIR/.snapshots directory
  - Make sosreport as unconfined domain
  - Allow sosreport to execute grub2-probe
  - Allow NM to manage hostname config file
  - Allow systemd_timedated_t to dbus chat with rpm_script_t
  - Allow lsmd plugins to connect to http/ssh/http_cache ports by default
  - Add lsmd_plugin_connect_any boolean
  - Allow mozilla_plugin to attempt to set capabilities
  - Allow lsdm_plugins to use tcp_socket
  - Dontaudit mozilla plugin from getattr on /proc or /sys
  - Dontaudit use of the keyring by the services in a sandbox
  - Dontaudit attempts to sys_ptrace caused by running ps for mysqld_safe_t
  - Allow rabbitmq_beam to connect to jabber_interserver_port
  - Allow logwatch_mail_t to transition to qmail_inject and queueu
  - Added new rules to pcp policy
  - Allow vmtools_helper_t to change role to system_r
  - Allow NM to dbus chat with vmtools
  - Fix couchdb_manage_files() to allow manage couchdb conf files
  - Add support for /var/run/redis.sock
  - dontaudit gpg trying to use audit
  - Allow consolekit to create log directories and files
  - Fix vmtools policy to allow user roles to access vmtools_helper_t
  - Allow block_suspend cap2 for ipa-otpd
  - Allow pkcsslotd to read users state
  - Add ioctl to init_dontaudit_rw_stream_socket
  - Add systemd_hostnamed_manage_config() interface
  - Remove transition for temp dirs created by init_t
  - gdm-simple-slave uses use setsockopt
  - sddm-greater is a xdm type program


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-128
changelog:
  - Make snapperd as unconfined domain and add additional fixes for it
  - Remove nsplugin.pp module on upgrade


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-129
changelog:
  - Allow block_suspend cap2 for systemd-logind and rw dri device
  - Add labeling for /usr/libexec/nm-libreswan-service
  - Allow locallogin to rw xdm key to make Virtual Terminal login providing smartcard pin working
  - Add xserver_rw_xdm_keys()
  - Allow rpm_script_t to dbus chat also with systemd-located
  - Fix ipa_stream_connect_otpd()
  - update lpd_manage_spool() interface
  - Allow krb5kdc to stream connect to ipa-otpd
  - Add ipa_stream_connect_otpd() interface
  - Allow vpnc to unlink NM pids
  - Add networkmanager_delete_pid_files()
  - Allow munin plugins to access unconfined plugins
  - update abrt_filetrans_named_content to cover /var/spool/debug
  - Label /var/spool/debug as abrt_var_cache_t
  - Allow rhsmcertd to connect to squid port
  - Make docker_transition_unconfined as optional boolean
  - Allow certmonger to list home dirs


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-130
changelog:
  - Change userdom_use_user_inherited_ttys to userdom_use_user_ttys for systemd-tty-ask
  - Add sysnet_filetrans_named_content_ifconfig() interface
  - Allow ctdbd to connect own ports
  - Fix samba_export_all_rw booleanto cover also non security dirs
  - Allow swift to exec rpm in swift_t and allow to create tmp files/dirs
  - Allow neutron to create /run/netns with correct labeling
  - Allow kerberos keytab domains to manage sssd/userdomain keys"
  - Allow to run ip cmd in neutron_t domain


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-131
changelog:
  - Added pcp rules
  - dontaudit openshift_cron_t searching random directories, should be back ported to RHEL6
  - clean up ctdb.te
  - Allow ctdbd to connect own ports
  - Fix samba_export_all_rw booleanto cover also non security dirs
  - Allow swift to exec rpm in swift_t and allow to create tmp files/dirs
  - Allow neutron to create /run/netns with correct labeling
  - Allow certmonger to list home dirs


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-132
changelog:
  - Modify xdm_write_home to allow create files/links in /root with xdm_home_
  - Allow virt domains to read network state
  Resolves:#1072019


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-133
changelog:
  - Allow numad to write scan_sleep_millisecs
  - Turn on entropyd_use_audio boolean by default
  - Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf.
  - Allow lscpu running as rhsmcertd_t to read /proc/sysinfo
  - Fix label on irclogs in the homedir
  - Allow kerberos_keytab_domain domains to manage keys until we get sssd fix
  - Allow postgresql to use ldap
  - Add missing syslog-conn port
  - Add support for /dev/vmcp and /dev/sclp
  Resolves:#1069310


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-134
changelog:
  - Allow unpriv SELinux users to dbus chat with firewalld
  - Add lvm_write_metadata()
  - Label /etc/yum.reposd dir as system_conf_t. Should be safe because system_conf_t is base_ro_file_type
  - Allow pegasus_openlmi_storage_t to write lvm metadata
  - Add hide_broken_symptoms for kdumpgui because of systemd bug
  - Make kdumpgui_t as unconfined domain
  Resolves:#1044299
  - Allow docker to connect to tcp/5000


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-137
changelog:
  - Allow vmtools_helper_t to execute bin_t
  - Add support for /usr/share/joomla
  - /var/lib/containers should be labeled as openshift content for now
  - Allow docker domains to talk to the login programs, to allow a process to login into the container
  - Allow install_t do dbus chat with NM
  - Fix interface names in anaconda.if
  - Add install_t for anaconda. A new type is a part of anaconda policy
  - sshd to read network sysctls


author: Lukas Vrabec <lvrabec@redhat.com> 3.12.1-138
changelog:
  - Make rtas_errd_t as unconfined domain for F20.It needs additional fixes. It runs rpm at least.
  - Allow net_admin cap for fence_virtd running as fenced_t
  - Make  abrt-java-connector working
  - Make cimtest script 03_defineVS.py of ComputerSystem group working
  - Fix git_system_enable_homedirs boolean
  - Allow munin mail plugins to read network systcl


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-139
changelog:
  - Allow collectd to talk to libvirt
  - Allow chrome_sandbox to use leaked unix_stream_sockets
  - Dontaudit leaks of sockets into chrome_sandbox_t
  - If you create a cups directory in /var/cache then it should be labeled cups_rw_etc_t
  - Run vmtools as unconfined domains
  - Allow snort to manage its log files
  - Allow systemd_cronjob_t to be entered via bin_t
  - Allow procman to list doveconf_etc_t
  - allow keyring daemon to create content in tmpfs directories
  - Add proper labelling for icedtea-web
  - vpnc is creating content in networkmanager var run directory
  - Label sddm as xdm_exec_t to make KDE working again
  - Allow postgresql to read network state
  - Allow java running as pki_tomcat to read network sysctls
  - Fix cgroup.te to allow cgred to read cgconfig_etc_t
  - Allow beam.smp to use ephemeral ports
  - Allow winbind to use the nis to authenticate passwords


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-140
changelog:
  - Allow docker to read tmpfs_t symlinks
  - Allow sandbox svirt_lxc_net_t to talk to syslog and to sssd over stream sockets


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-142
changelog:
  - Add support for /var/spool/rhsm/debug
  - Make virt_sandbox_use_audit as True by default
  - Allow svirt_sandbox_domains to ptrace themselves


author: Lukas Vrabec <lvrabec@redhat.com> 3.12.1-143
changelog:
  - Add additional fixes for rtas_errd
  - Fix transitions for tmp/tmpfs in rtas.te
  - Allow rtas_errd to readl all sysctls


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-144
changelog:
  - allow anaconda to dbus chat with systemd-localed
  - Add fixes for haproxy based on bperkins@redhat.com
  - Allow cmirrord to make dmsetup working
  - Allow NM to execute arping
  - Allow users to send messages through talk
  - Add userdom_tmp_role for secadm_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-145
changelog:
  - Allow also unpriv user to run vmtools
  - Allow secadm to read /dev/urandom and meminfo
  Resolves:#1079250
  - Add booleans to allow docker processes to use nfs and samba
  - Add mdadm_tmpfs support
  - Dontaudit net_amdin for /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51-2.4.5.1.el7.x86_64/jre-abrt/bin/java running as pki_tomcat_t
  - Allow vmware-user-sui to use user ttys
  - Allow talk 2 users logged via console too
  - Allow ftp services to manage xferlog_t
  - Make all pcp domanis as unconfined for RHEL7.0 beucause of new policies
  - allow anaconda to dbus chat with systemd-localed


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-146
changelog:
  - add gnome_append_home_config()
  - Allow thumb to append GNOME config home files
  - Allow rasdaemon to rw /dev/cpu//msr
  - fix /var/log/pki file spec
  - make bacula_t as auth_nsswitch domain
  - Identify pki_tomcat_cert_t as a cert_type
  - Define speech-dispater_exec_t as an application executable
  - Add a new file context for /var/named/chroot/run directory
  - update storage_filetrans_all_named_dev for sg* devices
  - Allow auditctl_t  to getattr on all removeable devices
  - Allow nsswitch_domains to stream connect to nmbd
  - Allow unprivusers to connect to memcached
  - label /var/lib/dirsrv/scripts-INSTANCE as bin_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-147
changelog:
  - Back port fixes for pegasus_openlmi_admin_t from rawhide
  Resolves:#1080973
  - Add labels for ostree
  - Add SELinux awareness for NM
  - Label /usr/sbin/pwhistory_helper as updpwd_exec_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-148
changelog:
  - Allow kdm to send signull to remote_login_t process
  - Add gear policy
  - Turn on gear_port_t
  - Allow cgit to read gitosis lib files by default
  - Allow vdagent to read xdm state
  - Allow NM and fcoeadm to talk together over unix_dgram_socket


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-149
changelog:
  - Allow xauth_t to read user_home_dir_t lnk_file
  - Add labeling for lightdm-data
  - Allow certmonger to manage ipa lib files
  - Add support for /var/lib/ipa
  - Allow pegasus to getattr virt_content
  - Added some new rules to pcp policy
  - Allow chrome_sandbox to execute config_home_t
  - Add support for ABRT FAF


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-151
changelog:
  - varnishd wants chown capability
  - update ntp_filetrans_named_content() interface
  - Add additional fixes for neutron_t. #1083335
  - Dontaudit getattr on proc_kcore_t
  - Allow pki_tomcat_t to read ipa lib files
  - Allow named_filetrans_domain to create /var/cache/ibus with correct labelign
  - Allow init_t run /sbin/augenrules
  - Add dev_unmount_sysfs_fs and sysnet_manage_ifconfig_run interfaces
  - Allow unpriv SELinux user to use sandbox
  - Add default label for /tmp/hsperfdata_root


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-152
changelog:
  - Fix Multiple same specifications for /var/named/chroot/dev/zero
  - Add labels for /var/named/chroot_sdb/dev devices
  - Add support for strongimcv
  - Use kerberos_keytab_domains in auth_use_nsswitch
  - Update auth_use_nsswitch to make all these types as kerberos_keytab_domain to
  - Allow net_raw cap for neutron_t and send sigkill to dnsmasq
  - Fix ntp_filetrans_named_content for sntp-kod file
  - Add httpd_dbus_sssd boolean
  - Dontaudit exec insmod in boinc policy
  - Rename kerberos_keytab_domain to kerberos_keytab_domains
  - Add kerberos_keytab_domain()
  - Fix kerberos_keytab_template()
  - Make all domains which use kerberos as kerberos_keytab_domain
  Resolves:#1083670
  - Allow kill capability to winbind_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-153.el7_0.1
changelog:
  - Allow mongod to create sock files
  Resolves:#1092405
  - Add additional fixes related to docker and upgrade issues


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-153.el7_0.6
changelog:
  - Back port openstack fixes
  - svirt sandbox domains to read gear content in /run
  - Allow gear_t to manage openshift files


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-153.el7_0.7
changelog:
  - Add more fixes for OpenStack
  - Add fixes for geard
  - Make openwsman as unconfined_domain in RHEL7.0


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-153.el7_0.8
changelog:
  - Allow rsync to create  swift_server.lock with swift.log labeling
  - Add labeling for swift lock files
  - Make neutron_t as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-153.el7_0.9
changelog:
  - Allow neutron to bind xserver port
  - Allow neutron to execute kmod in insmod_t
  - Allow neutron to execute udevadm in udev_t
  - Allow keepalived to execute bin_t/shell_exec_t
  - Allow neutron to create sock files
  - Label swift-proxy-server as swift_exec_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-153.el7_0.10
changelog:
  - Allow swift to execute bin_t
  - Allow swift to bind http_cache
  - Label /var/log/horizon as an apache log


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-153.el7_0.11
changelog:
  - Back port OpenStack fixes
  - Allow mdadm to connect to own socket created by mdadm running as kernel_t
  Resolves:#1132828


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1
changelog:
  - Update to latest upstream version 3.3.8
  - Fixed: active ftp crashing
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-2
changelog:
  - Apply several important fixes from upstream 1.10 branch
  - Related: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-3
changelog:
  - Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names'
                        setting


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-4
changelog:
  - Resolves: #983587 - sss_debuglevel did not increase verbosity in
                        sssd_pac.log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-5
changelog:
  - Resolves: #906427 - Do not use lib64 in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
changelog:
  - New upstream release 1.11 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
  - Related: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
changelog:
  - New upstream release 1.11.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
changelog:
  - New upstream release 1.11.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
  - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
changelog:
  - Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with
                             sssd_be crash
  - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is
                             from different domain than group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-2
changelog:
  - Skip netgroups that don't provide well-formed triplets
  - Related: rhbz#991549 -  sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-3
changelog:
  - Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-4
changelog:
  - Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad
                             manpage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-5
changelog:
  - Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved
                             using ad_matching_rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-6
changelog:
  - Resolves: rhbz#1028057 - Improve detection of the right domain when
                             processing group with members from several domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-7
changelog:
  - Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the
                             "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-9
changelog:
  - Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when
                             using id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-10
changelog:
  - Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext
                             password to ldap_default_authtok


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-11
changelog:
  - Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is
                             never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-13
changelog:
  - Resolves: rhbz#1023409 - Valgrind sssd "Syscall param
                             socketcall.sendto(msg) points to uninitialised
                             byte(s)"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-14
changelog:
  - Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups
                             are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-15
changelog:
  - Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global
                             Catalog
  - Resolves: rhbz#1030483 - Individual group search returned multiple
                             results in GC lookups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-16
changelog:
  - The AD provider is able to resolve group memberships for groups with
    Global and Universal scope
  - Related: rhbz#1033096 - tokenGroups do not work reliable with Global
                            Catalog


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-17
changelog:
  - Re-initialize subdomains after provider startup
  - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is
                            never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-21
changelog:
  - Resolves: rhbz#1048184 - Group lookup does not return member with multiple
                             names after user lookup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-22
changelog:
  - Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses
                             FOREST keyword.
  - Fix two memory leaks in the PAC responder (Related: rhbz#991065)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-23
changelog:
  - Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter
                              is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-25
changelog:
  - Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit
                             fallbacks and overrides settings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-26
changelog:
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-28
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain
  - Fix return value when searching for AD domain flat names
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-29
changelog:
  - Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when
                             ldap_search_base cannot be parsed.
  - Fix a typo in the man page
  - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-30
changelog:
  - Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude
                             uidNumber in filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-31
changelog:
  - Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud
                             DEBUG message in case Kerberos authentication
                             times out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-32
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-34
changelog:
  - Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd
                            sudoers plugin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-35
changelog:
  - Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while
                             regular lookups connect to GC


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-36
changelog:
  - Resolves: rhbz#1059253 - Man page states default_shell option supersedes
                             other shell options but in fact override_shell does.
  - Use the right domain for AD site resolution
  - Related: rhbz#743503 -  [RFE] sssd should support DNS sites


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-38
changelog:
  - Resolves: rhbz#1059753 - Warn with a user-friendly error message when
                             permissions on sssd.conf are incorrect


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-39
changelog:
  - Resolves: rhbz#872177 - [RFE] subdomain homedir template should be
                            configurable/use flatname by default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-40
changelog:
  - Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes
                             have been replicated to the Global Catalog or not


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-41
changelog:
  - Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE
                             attribute when expiring users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-43
changelog:
  - Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send'
                             should be added to RHEL7


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-44
changelog:
  - Resolves: rhbz#1033069 - Configuring two different provider types might
                             start two parallel enumeration tasks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-45
changelog:
  - Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading
                             spaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-48
changelog:
  - Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from
                             ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-49
changelog:
  - Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                             manually, if ID mapping configuration changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-50
changelog:
  - Pull some follow up man page fixes from upstream
  - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                            manually, if ID mapping configuration changes
  - Related: rhbz#1064908 - MAN: Remove misleading memberof example from
                            ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-51
changelog:
  - Fix idmap documentation
  - Bump idmap version info
  - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-52
changelog:
  - Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together
                             with the AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-53
changelog:
  - Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name
                             component in home dir path


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-54
changelog:
  - Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA
                             correctly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-55
changelog:
  - Resolves: rhbz#1073631 - sssd fails to handle expired passwords
                             when OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-56
changelog:
  - Related: rhbz#1072995 -  AD group inconsistency when using AD provider
                             in sssd-1.11-40


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-57
changelog:
  - Related: rhbz#1066096 - not retrieving homedirs of AD users with
                            posix attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-58
changelog:
  - Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong
                            sysdb subdir when a trusted user logs in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-59
changelog:
  - Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA
                            password migration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-60
changelog:
  - Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file
                             with format expected by pam_selinux


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1097323 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1097323 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.1
changelog:
  - Resolves: rhbz#1098608 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.2
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.3
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.4
changelog:
  - Rebuild for a proper dist tag
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.5
changelog:
  - Rebuild for a proper dist tag, yet again, now using the correct build
    options
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.6
changelog:
  - Resolves: rhbz#1152200 - Error processing universal groups with
                             cross-domain membership in SSSD server mode


author: William Poteat <wpoteat@redhat.com> 0.98.4-1
changelog:
  - 740788: Getting error with quantity subscribe using subscription-assitance
    page. (wpoteat@redhat.com)
  - 755130: add extra whitespace to classic warning (cduryee@redhat.com)
  - 759199: rhsmcertd is logging the wrong value for certFrequency
    (cduryee@redhat.com)
  - 758471: install-num-migrate-to-rhsm threw traceback when no instnum was
    found. (awood@redhat.com)
  - 752572: add interval logging statements back in on rhsmcertd startup
    (cduryee@redhat.com)
  - 756507: do not use output from "getlocale" as input for "setlocale"
    (cduryee@redhat.com)
  - 746259: Don't allow the user to pass in an empty string as an activation key
    (awood@redhat.com)
  - 705883: Fix error dialog modal issues. (dgoodwin@redhat.com)
  - 756173: Unexpected behavoir change in subscription-manager unregister
    (wpoteat@redhat.com)
  - 746732: Only use fallback locales for dates we need to parse
    (alikins@redhat.com)
  - 753093: The available subscriptions count does not show correctly in
    Subscription Manager GUI (wpoteat@redhat.com)
  - 749636: Client should not support users entering activation keys and existing
    consumer ids (bkearney@redhat.com)
  - 719743: Improved text output for successful pool subscription
    (bkearney@redhat.com)
  - 755541: Enhanced the message in the katello plugin to debug when the backend
    system does not support environments. (bkearney@redhat.com)
  - 755035: Migration script should work on RHEL 5.7 and up. (awood@redhat.com)
  - 749332: Normalize the error messages for not being registered
    (bkearney@redhat.com)
  - 754821: Default org of "Unknown" was not marked for gettext
    (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.6-1
changelog:
  - 755031: Update to Subscription Assistant quantity check in unlimited pool
    case. (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.8-1
changelog:
  - 755861: Fixed quantity selection issue due to older version of pygtk on 5.8.
    (mstead@redhat.com)
  - 765905: add man pages for subscription-manager-migration (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.99.2-1
changelog:
  - Initial Fedora build. (dgoodwin@redhat.com)
  - 754425: Remove grace period logic (jbowes@redhat.com)
  - 766577: Fix error on "redeem" with multibyte lang (alikins@redhat.com)
  - Add README.Fedora to Fedora builds (cduryee@redhat.com)
  - 757697: report xen dom0 as host, not guest (cduryee@redhat.com)
  - 747014: Help icon was not working in RHEL 5. (awood@redhat.com)
  - 767754: Invalid certificate status when stacked entitlements have overlapping
    dates (wpoteat@redhat.com)
  - 745995: Ensure default quantity calc does not include future entitlements.
    (mstead@redhat.com)
  - 760017: Display a friendly message when an invalid installation number is
    encountered. (awood@redhat.com)
  - 758162: allow --force to override missing mappings (cduryee@redhat.com)
  - 759069: catch exception when enabling invalid repositories
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.3-1
changelog:
  - 768983: don't purge future dated entitlements (jbowes@redhat.com)
  - 769642: confusing output from rhn-migrate-to-rhsm when autosubscribe fails
    (cduryee@redhat.com)
  - 769433: make rhel5 firstboot modules use bound gettext (alikins@redhat.com)
  - Custom facts should be loaded after hardware facts. (awood@redhat.com)
  - 745973: Fixed missing product icons for partially stacked future entitlement.
    (mstead@redhat.com)
  - 769433: Tag the module names as gettext (alikins@redhat.com)
  - 761478: Facts viewed in the GUI were getting out of date when system
    entitlement status changed. (awood@redhat.com)
  - 761133: Support fixing yellow state in compliance assistant.
    (dgoodwin@redhat.com)
  - 766577: use unicode strings for possible server errors (alikins@redhat.com)
  - 768415: remove hardcoded reference to x86_64 for extra channel enablement
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.4-1
changelog:
  - 766778: Improvements on quantity spinner max value entry. (mstead@redhat.com)
  - 736465: "Product's Subscription Details" in the gui is neglecting stack
    subscriptions (wpoteat@redhat.com)
  - 772209: install-num-migrate-to-rhsm does not work on x86 arch
    (cduryee@redhat.com)
  - 761140: enable the help button in firstboot (jbowes@redhat.com)
  - 771726: Rename man manpage for rhsm-compliance-icon to rhsm-icon.
    (bkearney@redhat.com)
  - 758038: Guest's system facts displays "virt.uuid: Unknown"
    (wpoteat@redhat.com)
  - 767265: Always send up the list of packages on registration.
    (awood@redhat.com)
  - 768983: show future subs in list --consumed (jbowes@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.5-1
changelog:
  - Updated releasers.conf for rhel-6.3 (mstead@redhat.com)
  - Making return code from subscribe --pool consistent with subscribe --auto
    (awood@redhat.com)
  - 785018: Corrected help text for --no-auto. (awood@redhat.com)
  - 656944: List IPv6 information in facts. (awood@redhat.com)
  - 689608: Subscription failure should result in a return code of 1.
    (awood@redhat.com)
  - 772921: Do not show message dialog when multiple sub-man launches detected.
    (mstead@redhat.com)
  - 772921: Clicking notification icon shuts down subscription manager.
    (mstead@redhat.com)
  - 734533: Failure to import should result in a return code of 1.
    (awood@redhat.com)
  - 782549: Subscription manager throws exception when an expired cert exists.
    (mstead@redhat.com)
  - 772338: Subscription-manager-gui help documentation review
    (wpoteat@redhat.com)
  - 772338: subscription-manager-gui Help documentation needs a review
    (wpoteat@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 781510: 'subscription-manager clean' should delete redhat.repo
    (awood@redhat.com)
  - 771726: Man page for rhsm-compliance-icon should be re-authored to rhsm-icon
    (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.6-1
changelog:
  - 783542: Return code for bad input to install-num-migrate-to-rhsm should be 1.
    (awood@redhat.com)
  - 773707: remove hard coded reference to /etc/pki/product (cduryee@redhat.com)
  - 783278: do not alter system facts on dry run (cduryee@redhat.com)
  - IPv4 and IPv6 facts that are undefined should return 'Unknown' instead of
    'None'. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.7-1
changelog:
  - Improve relevancy of details on my installed products tab.
    (dgoodwin@redhat.com)
  - 719743: Added better punctuation to one status message (bkearney@redhat.com)
  - Have client check sockets on non-stacked entitlements as well.
    (dgoodwin@redhat.com)
  - New date compare implemetation for determining start/end dates
    (mstead@redhat.com)
  - Add "zanata-pull" and "zanata-push" makefile targets (alikins@redhat.com)
  - as_IN seems busted on RHEL6, so skip it (alikins@redhat.com)
  - pep8/make stylish cleanups (alikins@redhat.com)
  - 741155: Fixed start/end date calculations for My Installed Software tab
    (mstead@redhat.com)
  - fixes for po files from zanata (alikins@redhat.com)
  - new po files from zanata (alikins@redhat.com)
  - 767620: Add manage_repos config option. (dgoodwin@redhat.com)
  - 784031: remove katello plugin (cduryee@redhat.com)
  - Make return code from import consistent with subscribe. (awood@redhat.com)
  - Add Fedora release target. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.8-1
changelog:
  - 790205: do not lay down install-num-migrate-to-rhsm on rhel6 systems
    (cduryee@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 795541: Change the environment filtering which is being done on the client
    side (bkearney@redhat.com)
  - Add consumer deleted on server detection. (jbowes@redhat.com)
  - Fix spec for both Fedora 15+ and RHEL 7+. (dgoodwin@redhat.com)
  - Fix Makefile for both Fedora 15+ and RHEL 7+. (dgoodwin@redhat.com)
  - Add service level to register and subscribe CLI commands.
    (dgoodwin@redhat.com)
  - Add service-level CLI command. (dgoodwin@redhat.com)
  - delete consumer on rhsmcertd checkin (jbowes@redhat.com)
  - pull out rhsmcertd python worker to its own file (jbowes@redhat.com)
  - clean up some compiler warnings in rhsmcertd (jbowes@redhat.com)
  - String cleanups (alikins@redhat.com)
  - 790217: install-num-migrate-to-rhsm shouldn't copy both Desktop and
    Workstation product certs. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.9-1
changelog:
  - Updating required version of python-rhsm (mstead@redhat.com)
  - fixes for po files (alikins@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 799394: Do not attempt to remove redhat.repo if it does not exist.
    (awood@redhat.com)
  - 800121: do not attempt to call UEP when system is unregistered
    (cduryee@redhat.com)
  - 799271: The usage string for service-levels contained the incorrect command
    name (bkearney@redhat.com)
  - 799271: The usage string for service-levels contained the incorrect command
    name (bkearney@redhat.com)
  - 704408: date field patch fixes per jbowes (cduryee@redhat.com)
  - 797243: make unregister finish updating repos (alikins@redhat.com)
  - 704408: allow users to clear the date box for contract searches
    (cduryee@redhat.com)
  - 799316: Re-add librsvg2 dependency (dgoodwin@redhat.com)
  - 797996: Add manage_repos setting to default rhsm.conf (dgoodwin@redhat.com)
  - 795564: Add a newline at the end of the options error (bkearney@redhat.com)
  - 752756: Cache the facts, and refresh the validity facts whenever they change.
    (bkearney@redhat.com)
  - Return a consistent scope for public IPv6 addresses across EL5 and EL6.
    (awood@redhat.com)
  - 737773: Do not show the forgotten password url as a link.
    (bkearney@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Explicitly define el5 macro in spec file. (dgoodwin@redhat.com)
  - 796730: Improve the clarity of the usage statement (bkearney@redhat.com)
  - 767790: Improve the messaging when a system is not registered.
    (bkearney@redhat.com)
  - 797294: Typo in commit caused execution error. (bkearney@redhat.com)
  - 796756: use only the basename for the usage string (bkearney@redhat.com)
  - 796756: The usage string should be less verbose to be more consistent with
    the other executable files (bkearney@redhat.com)
  - CLI service-levels touchups. (dgoodwin@redhat.com)
  - 656896: remove attribute 'swapped' (msuchy@redhat.com)
  - Release to Fedora 17 branch as well. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.10-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 801434: Add at-spi accessibility name to calendar selection widget.
    (awood@redhat.com)
  - 800917: Display service level and type in All Subs tab (dgoodwin@redhat.com)
  - Add support for "release" command (alikins@redhat.com)
  - 801517: Missed translating a label during the registration process
    (bkearney@redhat.com)
  - 801513: One translation had a copy/paste error (bkearney@redhat.com)
  - The migration script should write default proxy auth settings.
    (awood@redhat.com)
  - Revert "801513: A replacement variable was used in a translation file where
    it was not needed" (dgoodwin@redhat.com)
  - 801545: Break apart the string to make them easier for the translators
    (bkearney@redhat.com)
  - 801513: A replacement variable was used in a translation file where it was
    not needed (bkearney@redhat.com)
  - 798015: Migration script should play nicely with proxies. (awood@redhat.com)
  - 742033: Unsubscribe button is not greyed out when nothing is selected
    (wpoteat@redhat.com)
  - 783990: Handle network errors when migrating. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.11-1
changelog:
  - 805906: fix missing imports for firstboot (jbowes@redhat.com)
  - Fix RHEL6 firstboot attribute error (dgoodwin@redhat.com)
  - 772218: throw an error if unparsed command line options exist
    (cduryee@redhat.com)
  - Add missing imports to rhsm_login for error dialogs (jbowes@redhat.com)
  - 803386: Display product ID in GUI and CLI. (awood@redhat.com)
  - Fix specfile for el5 firstboot (jbowes@redhat.com)
  - 804227,804076,804228: Handle 404's from old candlepin servers without
    /release (alikins@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for subscribe
    command (mstead@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for register
    command (mstead@redhat.com)
  - 803756,803762: Updated error message for service-level command
    (mstead@redhat.com)
  - fixups for strings from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 789007: Migration should fail early when attempted with non org admin user.
    (awood@redhat.com)
  - 805024: Hide extra separator along with redeem button. (awood@redhat.com)
  - 800999: Added --servicelevel arg to CLI list command (mstead@redhat.com)
  - 804227: Fix issues with repos --list (alikins@redhat.com)
  - Add proper back/forward logic for firstboot sla subscribe (jbowes@redhat.com)
  - 800933: Display service level and type in CLI list commands.
    (dgoodwin@redhat.com)
  - 789008: Print a more specific error message when Candlepin calls fail.
    (awood@redhat.com)
  - hook up sla firstboot to more registration cases (jbowes@redhat.com)
  - Define globals at module scope. (awood@redhat.com)
  - Remove firstboot subscriptions module (jbowes@redhat.com)
  - Fix broken tests for DST. Stop using time.time() (alikins@redhat.com)
  - Add error cases for firstboot autobind (jbowes@redhat.com)
  - Perform the actual entitlement bind on confirm subs screen
    (jbowes@redhat.com)
  - Set up shared state for AutobindController in firstboot (jbowes@redhat.com)
  - Extract a controller class for sla select logic (jbowes@redhat.com)
  - Break apart autobind first boot module (jbowes@redhat.com)
  - Add some autobind wizard button spacing. (dgoodwin@redhat.com)
  - Always update the icon and notification details on status change.
    (mstead@redhat.com)
  - Only add icon click listeners once. (mstead@redhat.com)
  - Adding notification nag icon support for Registration Required
    (mstead@redhat.com)
  - add firstboot rhsm_autobind to spec file (jbowes@redhat.com)
  - Autobind cancel during registration will now unregister you.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Move back/forward/cancel buttons in sla selection to parent
    (jbowes@redhat.com)
  - Revert "Update CLI to handle server that doesn't support service levels."
    (dgoodwin@redhat.com)
  - Update GUI to handle server that does not support service levels.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Add autobind screen to firstboot (jbowes@redhat.com)
  - Fix firstboot unregister import error. (dgoodwin@redhat.com)
  - Add missing spacers to main window toolbar. (dgoodwin@redhat.com)
  - Fix an error handling bug. (dgoodwin@redhat.com)
  - Get register screen working in el6 firstboot (jbowes@redhat.com)
  - Center wizard's error dialog on main window (mstead@redhat.com)
  - Removing commented out code in register dialog (mstead@redhat.com)
  - Add skip option instead of autobind in register dialog. (mstead@redhat.com)
  - Fix preferences dialog error when not registered. (dgoodwin@redhat.com)
  - Improved error handling for autobind wizard. (dgoodwin@rm-rf.ca)
  - Fix message window warnings. (dgoodwin@rm-rf.ca)
  - Fix alignment on select SLA screen. (dgoodwin@redhat.com)
  - Display the service level selected when confirming autobind subs (dgoodwin
    @rm-rf.ca)
  - Implement Cancel button on autobind wizard screens. (dgoodwin@redhat.com)
  - Allow setting service level from preferences dialog. (dgoodwin@redhat.com)
  - First cut at a preferences dialog. (dgoodwin@redhat.com)
  - Pack SLA's into a scrolled window. (dgoodwin@rm-rf.ca)
  - Handle any exception that happens when the autobind wizard is loaded.
    (mstead@redhat.com)
  - Setting parent window on AutobindDialog and add titles to screens.
    (mstead@redhat.com)
  - Integrating autobind wizard with register gui. (mstead@redhat.com)
  - Fix autobind wizard disappearing on window switch. (dgoodwin@redhat.com)
  - Do not set SLA until user hit's subscribe button. (dgoodwin@redhat.com)
  - Polish autobind glade UI (dgoodwin@redhat.com)
  - Set and use the system's service level. (dgoodwin@redhat.com)
  - Cleaning up Select SLA screen (mstead@redhat.com)
  - Added framework for back button support (mstead@redhat.com)
  - Handle no SLAs cover all installed products. (dgoodwin@rm-rf.ca)
  - Handle launching autobind when no entitlements needed. (dgoodwin@rm-rf.ca)
  - Set detected prod list in Select SLA screen (mstead@redhat.com)
  - Close autobind wizard once complete. (dgoodwin@redhat.com)
  - Hookup actual bind in autobind wizard. (dgoodwin@redhat.com)
  - SelectSLA now keeps track of selected SLA and pass to confirm dialog.
    (mstead@redhat.com)
  - Load the autobind glade file on wizard creation. (mstead@redhat.com)
  - Switch to more explicit screen switching. (dgoodwin@redhat.com)
  - Set screen title when screen is changed. (mstead@redhat.com)
  - Allow screens to pass custum data during wizard screen change.
    (mstead@redhat.com)
  - Hooking up button signals for selectsla (mstead@redhat.com)
  - Add callback to allow screen change in wizard (mstead@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Attempt to keep button bar right aligned. (mstead@redhat.com)
  - Removed the button bar form the wizard. (mstead@redhat.com)
  - Created AutobindWizardScreen to provide contract for AutobindWizard
    (mstead@redhat.com)
  - Display appropriate screen in SLA wizard. (mstead@redhat.com)
  - Fixed GtkWarning: IA__gtk_widget_reparent error when launchig dialog
    (mstead@redhat.com)
  - First cut at adding the Select SLA screen. (mstead@redhat.com)
  - Check if dry-run results cover required products. (dgoodwin@redhat.com)
  - Check dry run autobind results for each service level. (dgoodwin@redhat.com)
  - Sketch out an autobind wizard class. (dgoodwin@redhat.com)
  - Start sketching out the confirm subscriptions screen. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.12-1
changelog:
  - Don't skip past firstboot login page on invalid user/pass (jbowes@redhat.com)
  - 805690: Turn repo gpgcheck off if no gpgkey specified. (dgoodwin@redhat.com)
  - 795552: Put safe int conversions around certain fact checks.
    (bkearney@redhat.com)
  - 804100: display an error when candlepin doesn't support release
    (jbowes@redhat.com)
  - 804227: expect a Release object instead of a bare string (alikins@redhat.com)
  - Latest string files from zanata (bkearney@redhat.com)
  - 805450: display better error message when autosubscribing
    (cduryee@redhat.com)
  - 805594: Give each "Subscribe" button in the GUI a unique at-spi name.
    (awood@redhat.com)
  - 803374: Provide unambiguous at-spi names for widgets. (awood@redhat.com)
  - 805353: subscription-manager list --help should use consistent wording for
    servicelevel option. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.13-1
changelog:
  - latest strings into keys.pot and updated from zanata (alikins@redhat.com)
  - 809611: Fix undefined variable in installedtab for expired
    (alikins@redhat.com)
  - pep8/pyflakes cleanups (alikins@redhat.com)
  - Repolib now requires a UEP connection. (awood@redhat.com)
  - Use numeric index to access portion of URL. (awood@redhat.com)
  - 807785: use a better title on the autobind wizard (jbowes@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Add release selection to preferences dialog (alikins@redhat.com)
  - 805415: handle entitlements for socket count of 0 (alikins@redhat.com)
  - 804201: Fix sla select in firstboot after back button (jbowes@redhat.com)
  - 807477: Delay attempt to connect to RHN until after basic error checks.
    (awood@redhat.com)
  - 803374: Change the 'Subscribe' button to read 'Auto-subscribe.'
    (awood@redhat.com)
  - 808217: Add a header to the release list (bkearney@redhat.com)
  - 807153: Provide a more informative error message when encountering repodata
    errors. (awood@redhat.com)
  - 807822: Allow setting release to '' (mstead@redhat.com)
  - 807036: Instruct users to go to All Subscriptions for all SLA failures
    (bkearney@redhat.com)
  - 807407: Subscripton Manager substitutes "" for $releasever when releaseVer
    not set on consumer (wpoteat@redhat.com)
  - 803756: Trap RemoteServerException as well as RestLibException (404) for
    service-level command (mstead@redhat.com)
  - 806941: Removed unknown swapped attribute from autobind.glade.
    (mstead@redhat.com)
  - 807360: Allow the repos command to work without being registered
    (bkearney@redhat.com)
  - 806457: Fix deletion of productids with yum localinstall (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.0.1-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - add test cases for autobind.py (alikins@redhat.com)
  - pep8 and pyflakes cleanups (jbowes@redhat.com)
  - 815563: Remove incorrect at-spi locators. (awood@redhat.com)
  - 795541: Environment command should omit the Library from katello
    (bkearney@redhat.com)
  - 806993: Tolerate the provision of a scheme with the proxy string.
    (awood@redhat.com)
  - remove remnants of subscription_assistant.py (alikins@redhat.com)
  - 811952: Don't try to unsubscribe old ents if we register (alikins@redhat.com)
  - 811952: Handle errors on unsubscribing ent certs (alikins@redhat.com)
  - 812929: Fix issue with selected sla not being in suitable_slas
    (mstead@redhat.com)
  - 812897: Use consistent casing for the word "Error" (awood@redhat.com)
  - Improve preferences dialog error message. (dgoodwin@redhat.com)
  - 811863: Handle unforseen errors in preferences dialog. (dgoodwin@redhat.com)
  - 811340: Select the first product in My Installed Software table by default.
    (awood@redhat.com)
  - 811594: The config, repos, and facts commands should default to --list if no
    options are provided. (awood@redhat.com)
  - 812104: add "release" and "service-level" to completion (alikins@redhat.com)
  - 801434: Add at-spi accessibility name to calendar widget. (awood@redhat.com)
  - updates to man pages (deon@deonlackey.com)
  - 811591: Use consistent messages for not being registered
    (bkearney@redhat.com)
  - Updated the --servicelevel option description (deon@deonlackey.com)
  - Use numeric index to access value returned by urlparse. (awood@redhat.com)
  - 790579: Show translations for errors thrown by installation number parsing.
    (awood@redhat.com)
  - adding --servicelevel option to list command (deon@deonlackey.com)
  - 810306: Improved messaging in firstboot (mstead@redhat.com)
  - 811337: unregister any time we return to rhsm_login (jbowes@redhat.com)
  - 807153: Allow more aggressive deletion of product certs. (awood@redhat.com)
  - 810399: require the latest rhn-setup-gnome for firstboot (alikins@redhat.com)
  - 810290: use correct calculation for "Next update" time in sm-gui
    (cduryee@redhat.com)
  - 810363: handle socket errors for bad proxy host in firstboot
    (alikins@redhat.com)
  - Latest man page and documentation (dlackey@redhat.com)
  - 809989: Add the shortened password url to the strings files.
    (bkearney@redhat.com)
  - 809989: Add a shorter URL to the registration screen (bkearney@redhat.com)
  - rev the zanata version to 1.0.X (alikins@redhat.com)
  - Incrementing version number after 6.3 branch. (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.0.2-1
changelog:
  - Updating strings from zanata (mstead@redhat.com)
  - Add new server setup GUI screen. (dgoodwin@redhat.com)
  - Add new server setup CLI options. (alikins@redhat.com)
  - 813296: Remove check for candlepin_version (jbowes@redhat.com)
  - Allow importing multiple subscriptions at once (jbowes@redhat.com)
  - 820170: Subscription Manager release --list should display "not supported"
    message for older candlepin. (wpoteat@redhat.com)
  - 817938: Make columns in subscription-manager tables sortable.
    (awood@redhat.com)
  - 812153: Release command should have a --show command which is the default.
    (wpoteat@redhat.com)
  - 820080: Fix "Configuration" spelling on firstboot page (alikins@redhat.com)
  - Set the parent window for the about dialog (mstead@redhat.com)
  - removing a sentence from the manpage about working on RHEL 5.8 and later,
    bz820765 (deon@deonlackey.com)
  - 821024: Properly handle ESC on preferences dialog (mstead@redhat.com)
  - Replaced toolbar with menubar. (mstead@redhat.com)
  - 820040,820037,820030: don't break multibyte help blurbs (alikins@redhat.com)
  - 817036: Add a version command to subscription-manager. (awood@redhat.com)
  - The unbindAll command now returns JSON. (awood@redhat.com)
  - Explain the conditional imports more accurately. (alikins@redhat.com)
  - Print different message when subscribing to no service level.
    (awood@redhat.com)
  - remove deprecated use of "md5" module (alikins@redhat.com)
  - Enable and disable available repos on client machine from Subscription
    Manager CLI (wpoteat@redhat.com)
  - 790939: Add SLA to rhn-migrate-classic-to-rhsm. (awood@redhat.com)
  - 812388: Show the number of entitlements unsubscribed from. (awood@redhat.com)
  - 818298: release --list should not display rhel-5 when only rhel-6 product is
    installed (wpoteat@redhat.com)
  - 810236: Update facts after registering with --consumerid.
    (dgoodwin@redhat.com)
  - 818461: invalid date format error when using or_IN.UTF-8 (cduryee@redhat.com)
  - Store date of migration in migration facts for rhn-migrate-classic-to-rhsm.
    (awood@redhat.com)
  - Unify our el5 and el6 firstboot modules (jbowes@redhat.com)
  - add a gconf setting for users who do not want to use the icon
    (cduryee@redhat.com)
  - do not use the gui by default when migrating (cduryee@redhat.com)
  - Allow service level change for consumer via CLI independent of other calls.
    (wpoteat@redhat.com)
  - 815479: Incorrect owner should be relayed on service level list call.
    (wpoteat@redhat.com)
  - 817390: add completion support for servicelevel (alikins@redhat.com)
  - 817117: fix completion of environment command (alikins@redhat.com)
  - 816377: handle cert migration data being missing (alikins@redhat.com)
  - Store date of migration and installation number in migration facts.
    (awood@redhat.com)
  - Fixing registration error when loading SlaWizard (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.3-1
changelog:
  - 817938: Add sorting to the contract selection table. (awood@redhat.com)
  - 822706: gtk widget visibility toggle compat for el5 (jbowes@repl.ca)
  - 822706: Display Register button on Installed Product tab if not registered.
    (mstead@redhat.com)
  - 825286: Handle unset service levels in a manner similar to unset release
    versions. (awood@redhat.com)
  - 826735: Merge start/end date sub details into one row. (dgoodwin@redhat.com)
  - fix make stylish (jbowes@repl.ca)
  - 811593: Feedback when not providing command options is not consistent.
    (wpoteat@redhat.com)
  - 806986: Subscription-Manager should refer to subscription name and product
    name. (wpoteat@redhat.com)
  - 825737: Service-level --set should configure proper value for GUI
    (wpoteat@redhat.com)
  - 817901: Disable the match installed products filter. (dgoodwin@redhat.com)
  - Remove unecessary use of lambda. (dgoodwin@redhat.com)
  - 818282: Sort virtual subscriptions to the top of contract selector.
    (dgoodwin@redhat.com)
  - 818383: display better messages for yum plugin usage (cduryee@redhat.com)
  - Fix logging of deleted expired certs (jbowes@repl.ca)
  - Remove the constants module (jbowes@repl.ca)
  - Remove useless format specifier (jbowes@repl.ca)
  - 801187: condense list --consumed output (jbowes@repl.ca)
  - Don't use kwargs for cli subclasses; it makes things shorter (jbowes@repl.ca)
  - Remove desc cli argument, no module used it (jbowes@repl.ca)
  - Use super for cli module init (jbowes@repl.ca)
  - Clean up rpmlint messages (jbowes@repl.ca)
  - Autogenerate the cli usage message (jbowes@repl.ca)
  - Remove obsolete nose tests (jbowes@repl.ca)
  - 812410: Show product name on CLI subscribe to pool. (dgoodwin@redhat.com)
  - 824680: make init script status return proper exit code (alikins@redhat.com)
  - fix nosetests for progress gui (jbowes@repl.ca)
  - Rework urlparse calls to work with RHEL 5. (awood@redhat.com)
  - 818238: Set a better progress title for sub search (jbowes@repl.ca)
  - 771756: Drop "rhsm icon" from the rhsm-icon usage message (jbowes@repl.ca)
  - 820294: Let candlepin handle org/env/key validation (jbowes@repl.ca)
  - 818397: Rename subscription-manager-gnome to -gui (jbowes@repl.ca)
  - Reduce wordiness of version command. (awood@redhat.com)
  - 824333: use rhel5-friendly urlparse options (cduryee@redhat.com)
  - Log the program versions when starting the GUI or making a CLI call.
    (awood@redhat.com)
  - Fix the About dialog to work in RHEL 5.8 (awood@redhat.com)
  - 821544: Remove the stacking id attribute from my susbcriptions since it is
    not being used currently. (bkearney@redhat.com)
  - add checkcommits exception for 824100 (alikins@redhat.com)
  - 824100: update zanata.xml to grab latest pt_BR.po (alikins@redhat.com)
  - 822057: do not hard-code cdn to port 443 (cduryee@redhat.com)
  - Display sane error on CLI if missing CA certificate. (dgoodwin@redhat.com)
  - Display sane error in GUI if missing CA certificate. (dgoodwin@redhat.com)
  - 812373: Terminology change for list --installed and --consumed
    (wpoteat@redhat.com)
  - zanata client will push any po/*.pot files it finds. Stop.
    (alikins@redhat.com)
  - 789182: Fix UnicodeEncodeError when logging. (awood@redhat.com)
  - README for github and people who like to read (alikins@redhat.com)
  - checkcommits exception for xgettext patch fixed in master
    (alikins@redhat.com)
  - 820743: Fix these strings so xgettext finds extracts them
    (alikins@redhat.com)
  - refine the regex for "make gettext_lint" (alikins@redhat.com)
  - Upload el6 yum packages to another dir for compatability.
    (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.4-1
changelog:
  - 818978: Use systemd instead of sysv when installing on F17+ and RHEL7+.
    (mstead@redhat.com)
  - 827035: update identity certificate (jmrodri@gmail.com)
  - registergui: make screens without guis more generic (jbowes@redhat.com)
  - Incorrect field value removed on previous change (wpoteat@redhat.com)
  - 829812: Add an unset command for the release command (bkearney@redhat.com)
  - 823659: Update SLA text in Settings to Service Level (wpoteat@redhat.com)
  - Use a temp file for finding used widgets (jbowes@redhat.com)
  - clean up some unused import warnings (jbowes@redhat.com)
  - default to running style checks on tests (jbowes@redhat.com)
  - Make test cases stylish as well... (alikins@redhat.com)
  - Fix "make stylish" (alikins@redhat.com)
  - 829803: Added an unset command to service level. (bkearney@redhat.com)
  - Remove reference to InstalledProductsTab.product_id_text (alikins@redhat.com)
  - Add a "find-missing-widgets" target to makefile (alikins@redhat.com)
  - 830949: add accessibility locators for registration widgets
    (alikins@redhat.com)
  - 824979: No message for subscription-manager release --list with no
    subscriptions. (wpoteat@redhat.com)
  - Added UnRegisterCommand and UnSubscribeCommand nosetests (wpoteat@redhat.com)
  - registergui: get firstboot working with new new code (jbowes@repl.ca)
  - registergui: Create a PreformRegisterScreen class (jbowes@repl.ca)
  - registergui: add a post method for setting data on the parent
    (jbowes@repl.ca)
  - registergui: create a 'pre' hook for screens (jbowes@repl.ca)
    (cduryee@redhat.com)
  - 819665: print msg if user is registered to RHN Classic on "identity" command
    (cduryee@redhat.com)
    (wpoteat@redhat.com)
  - Add F17 yum repo release target. (dgoodwin@redhat.com)
  - fix make stylish (jbowes@redhat.com)
  - 810352: Disable the expansion of the system name selection in the register
    dialog (bkearney@redhat.com)
  - 824530: add test case for setting proxy cli for release (alikins@redhat.com)
  - rhsm-icon codestyle cleanups (jbowes@repl.ca)
  - 829900: Use the term 'Subscription Management Service' to refer to SAM, CFSE,
    etc (root@bkearney.(none))
  - 829898: Make the no service level option a bit clearer as to its meaning
    (bkearney@redhat.com)
  - Improve the logging so that the user only sees the approved output by default
    (bkearney@redhat.com)
  - 830193: Modify the output of the yum plugin to be consistent with RHN
    (bkearney@redhat.com)
  - 824530: "release" command ignoring cli proxy options (alikins@redhat.com)
  - 828042,828068: Make ja_JP's Confirm Subscription unique for firstboot.
    (mstead@redhat.com)
  - Updating strings from zanata (mstead@redhat.com)
  - 825309: Remove the archiecture field from the table. (bkearney@redhat.com)
  - 823608: Rename the software pane to product (bkearney@redhat.com)
  - 810369: Prefer the term Subscription to Entitlement (bkearney@redhat.com)
  - Add a warning comment about firstboot module titles (alikins@redhat.com)
  - Clean up an option (bkearney@redhat.com)
  - 827208: Fix the xmltag bugs in the or po file (bkearney@redhat.com)
  - 827214: Clean up the XML tags in ta po file. (bkearney@redhat.com)
  - Slight change in the path for the ta po file (bkearney@redhat.com)
  - Slight change in the path for the ta po file (bkearney@redhat.com)
  - Slight change in the path for the ml po file (bkearney@redhat.com)
  - 828583: Add some spacing at the end of the file paths in the ko.po file
    (bkearney@redhat.com)
  - 828816: the %prog variable should not be translated (bkearney@redhat.com)
  - 828821: Fix the addition of a new variable in the hi po file
    (bkearney@redhat.com)
  - 828903: Fix translation of options in the bn po file. (bkearney@redhat.com)
  - Fix part of the mis translated options (bkearney@redhat.com)
  - 828965: Fix a translated option which should not have been translated
    (bkearney@redhat.com)
  - 828954: fix the --pool option in the translated string (bkearney@redhat.com)
  - 828958: --available should not be translated (bkearney@redhat.com)
  - Add --password as an option, not a string. This cause several strings to be
    retranslated (bkearney@redhat.com)
  - 828969: Fix the options in the translated string (bkearney@redhat.com)
  - 828985: Fix the url in the translated string (bkearney@redhat.com)
  - 828989: Fix the access url (bkearney@redhat.com)
  - 818205: Release --set command should only accept values from --list.
    (awood@redhat.com)
  - registergui: extract out a screen superclass (jbowes@repl.ca)
  - registergui: get button label from screen class (jbowes@repl.ca)
  - registergui: keep screens in a list (jbowes@repl.ca)
  - registergui: pull out environment screen into its own class (jbowes@repl.ca)
  - registergui: sensitivity refactor and method move (jbowes@repl.ca)
  - registergui: extract out credentials_entered method (jbowes@repl.ca)
  - registergui: move organization screen to its own class (jbowes@repl.ca)
  - registergui: move credentials screen to its own class (jbowes@repl.ca)
  - registergui: move choose server screen to its own class (jbowes@repl.ca)
  - registergui: switch from GladeWrapper to GladeWidget (jbowes@repl.ca)
  - registergui: Remove some unused globals (jbowes@repl.ca)


author: Alex Wood <awood@redhat.com> 1.0.5-1
changelog:
  - 804109: Give a specific message when providing invalid credentials.
    (awood@redhat.com)
  - 810360: update wording in gnome help file (cduryee@redhat.com)
  - use new bin location of files for $STYLEFILES (alikins@redhat.com)
  - add 'debuglint' for checking for leftover debugger imports
    (alikins@redhat.com)
  - Update make clean target (jbowes@redhat.com)
  - Move py executables to bin/ (jbowes@redhat.com)
  - Put no results text inside the scrolled window (jbowes@redhat.com)
  - 817901: Show text when there are no subscriptions to show.
    (dgoodwin@redhat.com)
  - Move initd file to etc-conf (jbowes@redhat.com)
  - Move plugins to their own src dir (jbowes@repl.ca)
  - More test cases for utils.parse_url (alikins@redhat.com)
  - 829482: Delete unstranslated strings in order force a retranslation
    (bkearney@redhat.com)
  - 811602: Fix the help output based on UXD feedback (bkearney@redhat.com)
  - 828867: Removed the extra %s string from the te translation
    (bkearney@redhat.com)
  - 829479: Remove unstranslated strings to force a re-translation
    (bkearney@redhat.com)
  - Delete the unused pt.po file (bkearney@redhat.com)
  - 829476: Remove untranslated strings. (bkearney@redhat.com)
  - 811553: Improve the text for auto subscribe during registration
    (bkearney@redhat.com)
  - 829471: Fix the translation for usage, and remove a translation for %org id
    to force a retranslation (bkearney@redhat.com)
  - Remove an outdated ta.po file (bkearney@redhat.com)
  - 828810: Remove extra %s in translation (bkearney@redhat.com)
  - Test to ensure that pool id is in the output for list --available
    (wpoteat@redhat.com)
  - Close registration window even if it failed. (dgoodwin@redhat.com)
  - 825923: Subscription-manager service-level set should say "Service level set
    to:" (wpoteat@redhat.com)
  - 811594: Default behavior for ReposCommand is --list (wpoteat@redhat.com)
  - 832400: service-level --unset should display proper message for unregistered
    client. (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.6-1
changelog:
  - rhsmcertd no longer exits when not registered. (mstead@redhat.com)
  - po file cleanups (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Free config resources in one place (mstead@redhat.com)
  - rhsmcertd: free GKeyFile when done (jbowes@redhat.com)
  - rhsmcertd: remove studlyCaps (jbowes@redhat.com)
  - "make stylish" should failed on "swapped" in glade files (alikins@redhat.com)
  - Remove 'swapped=on' from glade signal markup. (alikins@redhat.com)
  - add 'fix-glade-swapped' target to de-'swapped' glade files
    (alikins@redhat.com)
  - make stylish fixups (alikins@redhat.com)
  - Fix at-spi label for "offline_radio" widget (alikins@redhat.com)
  - shorter messages for cases where registered to RHN Classic
    (alikins@redhat.com)
  - Tighten up the gettext_lint regex (alikins@redhat.com)
  - Fix string that was breaking xgettext (alikins@redhat.com)
  - 810998: Add a button to test a proxy connection. (awood@redhat.com)
  - new messages, and remove checking of rhn serverURL (alikins@redhat.com)
  - remove unused es.po file (bkearney@redhat.com)
  - 829486: Removed untranslated words to force a re-translation
    (bkearney@redhat.com)
  - Remove unused bn.po file (bkearney@redhat.com)
  - 826856: Add check for service-level command that --org can only be used with
    --list option (bkearney@redhat.com)
  - 829483: Remove english to english translation to force a re-translations
    (bkearney@redhat.com)
  - Remove unused de po file (bkearney@redhat.com)
  - 819665: on 'version' display if we are registered to RHN Classic
    (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.0.8-1
changelog:
  - Add rpmlint config for tmpfiles.d (jbowes@redhat.com)
  - Use the i18n_optparse.OptionParser instead of optparse (alikins@redhat.com)
  - Use our i18n_optparse for the migration scripts (alikins@redhat.com)
  - Look for rhn-migrate* in bin for generating string catalogs
    (alikins@redhat.com)
  - 826874: add gladelint support for 'orientation' prop (alikins@redhat.com)
  - 826874: Remove unneeded property 'orientation' from glade
    (alikins@redhat.com)
  - 796782: add systemd tmpfiles configuration (jbowes@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.9-1
changelog:
  - On invalid credentials in register, return to the login screen
    (jbowes@redhat.com)
  - 821065: Make SLA/subscription asyncronous (jbowes@redhat.com)
  - 838942: make gui and cli use the same releaseVer check (jbowes@redhat.com)
  - fixes for translations from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Remove check for date parsing not failing when we expect it to
    (alikins@redhat.com)
  - Remove glade orientation properties. (awood@redhat.com)
  - Moving the filter counting mechanism into the Filters class.
    (awood@redhat.com)
  - Adjust expand and fill properties for the filter dialog. (awood@redhat.com)
  - add za_CN.utf to list of known busted locales (alikins@redhat.com)
  - 824424: Fixing AttributeError thrown when accessing online help in RHEL 5.
    (awood@redhat.com)
  - Add icon to update progress window. (awood@redhat.com)
  - 806986: Display SKU for available and consumed subscriptions
    (jbowes@redhat.com)
  - Increase the default size of the subscriptions viewport. (awood@redhat.com)
  - Add no overlapping to the default filters. (awood@redhat.com)
  - Tweaks to filter options dialog. (awood@redhat.com)
  - 801187: print Provides: for all subs, even with no provides
    (jbowes@redhat.com)
  - The filter dialog now updates results in real time. (awood@redhat.com)
  - 837106: Add a11y property for register button (jbowes@redhat.com)
  - 813336: Break filter options out into a separate dialog box.
    (awood@redhat.com)
  - 837036: Do not refer to options as commands (bkearney@redhat.com)
  - 829495: Delete a mis-translated string to force re-translation
    (bkearney@redhat.com)
  - 828966: Delete a mis-translated string to force trasnlations
    (bkearney@redhat.com)
  - 767133: Remove english to english translations from bn_IN to force a new
    translation (bkearney@redhat.com)
  - 829491: Remove english trnaslations for italian translations
    (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.10-1
changelog:
  - 828903: Pull in the latest translation for error messages with no options
    translated (bkearney@redhat.com)
  - 841011: Fix double words in the korean translations (bkearney@redhat.com)
  - 828958: Untranslate the word password when it it used as an option in the
    pt_BR translations (bkearney@redhat.com)
  - Fixes for translations from zanata (alikins@redhat.com)
  - Latest translations from zanata (alikins@redhat.com)
  - 839887: Make error message text more clear when network is disconnected
    (bkearney@redhat.com)
  - 839760: Fix the screen text for preferences based on UXD feedback
    (bkearney@redhat.com)
  - 818355: Rename the use of 'Contract Number' to contract in the gui
    (bkearney@redhat.com)
  - 840169: The service level was incorrectly being set after auto-subscription.
    (awood@redhat.com)
  - 840637: Fixed missing reference to parent window. (mstead@redhat.com)
  - Import and translate error strings for 'envirovment' cmd (alikins@redhat.com)
  - Removed --wait arg, delay 2 min in rhsmcertd (mstead@redhat.com)
  - Interval CLI args for rhsmcertd now specified as minutes. (mstead@redhat.com)
  - Update rhsmcertd.init.d to use new CLI args (mstead@redhat.com)
  - Bad url format test and a refactor of parse_url (alikins@redhat.com)
  - Print message when rhsmcertd is shutting down (mstead@redhat.com)
  - Fixed spelling and newline issues in rhsmcertd (mstead@redhat.com)
  - Handle a few new bad url formats (http//foo or http:sdf) (alikins@redhat.com)
  - Add wait and now args to rhsmcertd (mstead@redhat.com)
  - 839683: Add some strings from older optparse to our i18n version
    (alikins@redhat.com)
  - 838146: Subscription-manager cli does not allow unsubscribe when consumer not
    registered. (wpoteat@redhat.com)
  - rhsmcertd: add format specifier checking to r_log (jbowes@redhat.com)
  - Improve rhsmcertd logging (jbowes@redhat.com)
  - Fix bug where filter options were not persisted when the dialog was reopened.
    (awood@redhat.com)
  - 838242: proxy password from the cli wasn't getting used (alikins@redhat.com)
  - Adding options parsing support (work-in-progress). (mstead@redhat.com)
  - Added initial check delay to rhsmcertd (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.11-1
changelog:
  - Remove deprecated use of hasDate. (dgoodwin@redhat.com)
  - Fix missed use of renamed method. (dgoodwin@redhat.com)
  - make stylish clean (alikins@redhat.com)
  - use isoformat() here instead of strftime format string (alikins@redhat.com)
  - create warn and expire colors once, fix test failure (alikins@redhat.com)
  - make stylish cleanups (alikins@redhat.com)
  - Additional tests for date logic. (awood@redhat.com)
  - Update for some minor changes in python-rhsm. (dgoodwin@redhat.com)
  - add rhsm_display module (alikins@redhat.com)
  - Add module to set DISPLAY if RHSM_DISPLAY is set (alikins@redhat.com)
  - 837132: fix typo (alikins@redhat.com)
  - Add "ctrl-X" as accelerator for proxy config (alikins@redhat.com)
  - Make "Usage" consistent across rhel5/6 (alikins@redhat.com)
  - Add __str__ for our fake exception. (alikins@redhat.com)
  - class ClassName(): is not legal syntax on python2.4 (alikins@redhat.com)
  - Exception by default doesn't pass 'args' (alikins@redhat.com)
  - Linkify() doesn't work on rhel5, so disble the tests there
    (alikins@redhat.com)
  - hashlib doesn't exist on 2.4, md5 is deprecated on 2.6 (alikins@redhat.com)
  - use simplejson since 'json' isnt part of python 2.4 (alikins@redhat.com)
  - Use ISO8601 date format in allsubs tab (alikins@redhat.com)
  - Fix syntax for RHEL5. (dgoodwin@redhat.com)
  - Fix awkward stretching in Subscription column. (awood@redhat.com)
  - 804144: Fix awkward stretching of Product column. (awood@redhat.com)
  - 814731: Change the name of the menu item to Preferences from Settings, and
    change the accelerator keys (bkearney@redhat.com)
  - 837132: Clean up the error message in the yum plugin (bkearney@redhat.com)
  - 837038: Fix a grammatical error in the yum plugin (bkearney@redhat.com)
  - Fix certificate parsing error reporting. (dgoodwin@redhat.com)
  - Removing unnecessary assignments. (awood@redhat.com)
  - F15 builds can't be submitted in Fedora anymore. (dgoodwin@redhat.com)
  - updating options for rhn-migrate-classic-to-rhsm per bz840152; rewriting
    rhsmcertd for different options and usage examples (dlackey@redhat.com.com)
  - Account/contract number field rename. (dgoodwin@redhat.com)
  - Stylish fixes. (dgoodwin@redhat.com)
  - Fix a certv2 error. (dgoodwin@redhat.com)
  - 829825: Alter highlighting used in My Subscriptions tab (awood@redhat.com)
  - 772040: Have no overlap filter properly handles subscription dates.
    (mstead@redhat.com)
  - Update order support level/type to service. (dgoodwin@redhat.com)
  - Remove explicit use of certificate2 module. (dgoodwin@redhat.com)
  - Fix issues introduced in certv2 refactor. (dgoodwin@redhat.com)
  - Change entitlement_version fact to certificate_version. (dgoodwin@redhat.com)
  - Update to use new certificate2 module and classes. (dgoodwin@redhat.com)
  - Send entitlement version fact. (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.12-1
changelog:
  - remove test cases that use si_LK locale (alikins@redhat.com)
  - 842845: Show better error if serverurl port is non numeric
    (alikins@redhat.com)
  - 838113: 'unregister' was not cleaning up repos (alikins@redhat.com)
  - 842170: replace None service level/type with "" not None (alikins@redhat.com)
  - 844069: Allow register --force even if ID cert is totally invalid.
    (dgoodwin@redhat.com)
  - 826874: Remove use of deprecated Gtk.Notebook.set_page (alikins@redhat.com)
  - 818355: Terminology Change: Contract Number -> Contract (wpoteat@redhat.com)
  - 844368: productid plugin was failing on ProductCert.product
    (alikins@redhat.com)
  - Ignore warning about use of dbus.dbus_bindings (alikins@redhat.com)
  - 844178: Fix error message when importing a non-entitlement cert bundle.
    (dgoodwin@redhat.com)
  - remove deprecated use of DateRange.hasNow() (jbowes@redhat.com)
  - remove use of DateRange.hasDate() (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.13-1
changelog:
  - Fix "Project-Id-Version" for ta_IN.po (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Remove the 'repos' unittests until they are more mockable
    (alikins@redhat.com)
  - Created CLI tool for viewing certificate data. (mstead@redhat.com)
  - add versionlint to "make stylish" (alikins@redhat.com)
  - add versionlint, requires pyqver (alikins@redhat.com)
  - Remove unused mock return values (alikins@redhat.com)
  - Remove enable_grid_lines from contract details glade file
    (alikins@redhat.com)
  - more test cases for ConfigCommand (alikins@redhat.com)
  - 837897: Terminology Change: Service Level Agreement -> Service Level
    (wpoteat@redhat.com)
  - add test cases for ConfigCommand (alikins@redhat.com)
  - Better error when rm'ing config item from missing section
    (alikins@redhat.com)
  - unittest coverage for managercli.CLI (alikins@redhat.com)
  - Adding unit tests for migration script regexes. (awood@redhat.com)
  - 812903: Autosubscribe not working for newly added product cert after Register
    (wpoteat@redhat.com)
  - 845827: Update command that do not require a candlepin connection
    (alikins@redhat.com)
  - 845827: Split server version checkout out to avoid errors
    (alikins@redhat.com)
  - Hack to address double mapping for 180.pem and 17{6|8}.pem (awood@redhat.com)
  - fix pep8 (jesusr@redhat.com)
  - don't show access.redhat.com url after registering to Katello
    (jesusr@redhat.com)
  - remove the explicit url search from error handling. (jesusr@redhat.com)
  - Make gettext_lint also check for _(foo) usage (alikins@redhat.com)
  - Remove unneeded _(somevar) (alikins@redhat.com)
  - Fix NameError in migration script. (awood@redhat.com)
  - bogus newline in glade file (alikins@redhat.com)
  - 826874: Reenable grid lines on newer gtk (alikins@redhat.com)
  - 826874: Remove enable_grid_lines from treeviews in glade (alikins@redhat.com)
  - 826874: Removing more properties that don't exist on gtk2.10
    (alikins@redhat.com)
  - 826874: Change gtk target version to gtk 2.10 for all glade files
    (alikins@redhat.com)
  - 826874: Clean of gtk properties not in gtk2.10 in our glade files
    (alikins@redhat.com)
  - Add support for migrating to Katello. (jesusr@redhat.com)
  - 843191: 'version' command showed wrong info with no network
    (alikins@redhat.com)
  - 843915: Multiple-specifications of --enable and --disable repos
    (wpoteat@redhat.com)
  - fix Package-Id-Version in ta_IN.po (alikins@redhat.com)
  - Fix es_ES.po (missing newline) (alikins@redhat.com)
  - 842898: fix missing --password in it.po (alikins@redhat.com)
  - 843113: latest strings from zanata (alikins@redhat.com)
  - 837280: Show users that we strip out any scheme given with a proxy.
    (awood@redhat.com)
  - new strings (alikins@redhat.com)
  - Refactor of SubDetailsWidget and GladeWidget (alikins@redhat.com)
  - 826729: Move Cert Status up to top of Product's Subscription Details
    (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.14-1
changelog:
  - 849171: Remove an extraneous print statement (bkearney@redhat.com)
  - 849105: Fixed a typo in the error message (bkearney@redhat.com)
  - 772161: Notifiy virt who, if running, when the identity changes
    (bkearney@redhat.com)
  - Reduce reads/parses of certificates (jbowes@redhat.com)
  - remove unused function 'getInstalledProductHashMap' (jbowes@redhat.com)
  - 843191: handle network errors better for 'version' command
    (alikins@redhat.com)
  - 826739, 827553: Combine Service Level and Service Type and move up in display
    order. (awood@redhat.com)
  - 847316: Remove the menu path for Subscription Manager from the manual
    registration screen. (bkearney@redhat.com)
  - 848409,848195,848190,848184: Do not print the exception when attempting to do
    the server version check (bkearney@redhat.com)
  - 847795: String and terminology clean up (bkearney@redhat.com)
  - 847380: Update the verbiage to prefer the term Subscription Management
    (bkearney@redhat.com)
  - 846834: Updated verbiage to focus on subsriptions and not on entitlements
    (bkearney@redhat.com)
  - 846105: Verbiage changes to empasize subscriptions over entitlements
    (bkearney@redhat.com)
  - 836933: Handle empty spaces for servce levels (bkearney@redhat.com)
  - 836932,835050: Fix the service level lifecycle (bkearney@redhat.com)
  - 836932: Reduce extra loggging when setting the service level
    (bkearney@redhat.com)
  - About dialog was not working due to key errors from python
    (bkearney@redhat.com)
  - 833319: Updated the help text for registration and service levels
    (bkearney@redhat.com)
  - 847060: Add missing requires on pygobject2 (bkearney@redhat.com)
  - 828954: Fix ta_IN.po file error with options (bkearney@redhat.com)
  - 842898: re-implement string fix for it.po (bkearney@redhat.com)
  - 828958: Fix the accidental translation of an option (bkearney@redhat.com)
  - fix up make stylish (jbowes@redhat.com)
  - No longer require root to run rct (mstead@redhat.com)
  - Remove manually_subscribe.py, it's class moved to rhsm_login.py
    (alikins@redhat.com)
  - Bumping the required python-rhsm version (mstead@redhat.com)
  - Renamed rt command to rct. (mstead@redhat.com)
  - Fix test case failure on 5.9 (Exception.message) (alikins@redhat.com)
  - Refactor ManuallySubscribeScreen to use new Screen api (alikins@redhat.com)
  - Check passed args as None to allow empty args (mstead@redhat.com)
  - Exception.message is deprecated, just let _str_ do it (alikins@redhat.com)
  - use MockStdout intead of nosetests sys.stdout.getvalue() (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.15-1
changelog:
  - Replace 16x16 icon with a new version that has no background
    (bkearney@redhat.com)
  - 852107: Update verbiage in migration script. (awood@redhat.com)
  - 847060: Push dependency higher up in the chain (bkearney@redhat.com)
  - 848534: Change the about dialog icon to be a PNG to ensure accurate
    representation. (bkearney@redhat.com)
  - 841396: Select first item in My Subscriptions table by default.
    (awood@redhat.com)
  - 849483: Prompt user for org name if necessary. (awood@redhat.com)
  - 849644: Calls made with --no-auto were not actually registering the system.
    (awood@redhat.com)
  - 849494: Fix variable name collision. (awood@redhat.com)
  - 846834: Use Subscription instead of entitlement certificate
    (bkearney@redhat.com)
  - 847859: Expiration highlighting was being set incorrectly. (awood@redhat.com)
  - 847750: Handle bad proxy values in migration script. (awood@redhat.com)
  - 841961: Ignore case when specifying the service level in migration
    (bkearney@redhat.com)
  - 842020: Remove an extraneous option group for rhsmcertd (bkearney@redhat.com)
  - Refactored some of the shared CLI code in 'rct' (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.16-1
changelog:
  - 853187: Verbiage change in install-num-migrate-to-rhsm. (awood@redhat.com)
  - 852894: Abort migration if multiple JBEAP channels are detected.
    (awood@redhat.com)
  - 850715: Fix malloc for Config (jbowes@redhat.com)
  - 852001: output the orgs key as part of the identity command.
    (bkearney@redhat.com)
  - fix "make gettext", wrong var name for the find root (alikins@redhat.com)
  - 850715: Fixes based on coverity scans (bkearney@redhat.com)
  - 846316: Use the full name of Subscrition Manager during first boot
    (bkearney@redhat.com)
  - 851346: Remove special case channel certs before subscribing.
    (awood@redhat.com)
  - 847354: When printing, translate None type into an empty string
    (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.17-1
changelog:
  - Fix gettext_lint issue with concat string in rhn-migrate (alikins@redhat.com)
  - 851124: Fix GUI unsubscribe. (dgoodwin@redhat.com)
  - fix po version for ta_IN.po (alikins@redhat.com)
  - latest strings (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.1.1-1
changelog:
  - updates to stat-cert for cert v3 (jbowes@redhat.com)
  - rct: Check for and handle files that aren't x509 certs (jbowes@redhat.com)
  - rct: remove content set count from cat-cert. use stat-cert instead.
    (jbowes@redhat.com)
  - implement aliases for cli commands (jbowes@redhat.com)
  - rct: add a stat-cert command (jbowes@redhat.com)
  - Switch certv2 related code to certv3 (jbowes@redhat.com)
  - 852107: Make banner headings equal in length (bkearney@redhat.com)
  - 842768: Remove --serverurl option from redeem command. (awood@redhat.com)
  - Set correct parent for these error dialogs. (awood@redhat.com)
  - set_parent_window() on RegisterScreen has been removed. (awood@redhat.com)
  - make regex better (jesusr@redhat.com)
  - 855762: Set correct parent for error dialog boxes raised by Autobind wizard.
    (awood@redhat.com)
  - 856349: rct cat-cert now printing content for all content types
    (mstead@redhat.com)
  - 842768: Limit --serverurl and --baseurl to specific commands.
    (awood@redhat.com)
  - 854467: Use of activation keys requires an org. (awood@redhat.com)
    (dgoodwin@rm-rf.ca)
  - 854879: Fixes for Anaconda desktop/workstation product cert installation.
    (dgoodwin@redhat.com)
  - 840415: Handle copyfile errors gracefully. (awood@redhat.com)
  - Adding new line b/w products when printed by rct (mstead@redhat.com)
  - 850920: --servicelevel and --no-auto are mutually exclusive.
    (awood@redhat.com)
  - Explicitly set GMT when doing entitlement date math (cduryee@redhat.com)
  - adding --unset option to service-level and release cmds
    (dlackey@redhat.com.com)
  - updated images for bz840599; changed rhsmcertd intervals, bz853571
    (dlackey@redhat.com.com)
  - 853233: Do not allow 68.pem and 71.pem to coexist after migration.
    (awood@redhat.com)
  - 852706: Fix server side certs not being deleted client side
    (alikins@redhat.com)
  - editing manpages and gnome help per UXD feedback; updating manpages for new
    command arguments; bz852323, bz850881, bz854357 (dlackey@redhat.com.com)
    rf.ca)
  - 845349: Support setting unknown values in the yum repo file
    (jbowes@redhat.com)
  - Add a count of content sets to entitlement certificates (bkearney@redhat.com)
  - 830988: Stacking is showing an odd parent in the My Subscriptions Tab
    (wpoteat@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.2-1
changelog:
  - 829825: Adding tests. (awood@redhat.com)
  - 853876: No need to check for GoneException when getting status
    (mstead@redhat.com)
  - 829825: Disable unsubscribe button when nothing is selected.
    (awood@redhat.com)
  - Remove unused import. (awood@redhat.com)
  - 859197: Fix product cert cleanup. (dgoodwin@redhat.com)
  - 781280: Add I18N comments for some string length issues.
    (dgoodwin@redhat.com)
  - 830193: Ensure logging is not diabled by RHN Classic Registration
    (bkearney@redhat.com)
  - remove unused RepoFile import (alikins@redhat.com)
  - 855081: Translate Arch as Arq. (bkearney@redhat.com)
  - Check identity cert permissions when running CLI commands (mstead@redhat.com)
  - mock all of RepoFile for the cli tests (alikins@redhat.com)
  - 845349: Don't clutter the repo file with empty keys (jbowes@redhat.com)
  - 845349: remove 'return' left in for debugging (jbowes@redhat.com)
  - Stylish errors for mr.po (bkearney@redhat.com)
  - 855085: Fixed the translation for [OPTIONS] (bkearney@redhat.com)
  - 855087: Fix a mis translated [OPTIONS] in the mr.po file.
    (bkearney@redhat.com)
  - Strings with the same value are not always the same instance.
    (awood@redhat.com)
  - updates from sefler for bz850881 (dlackey@redhat.com.com)
  - mock out utils.is_valid_server_info for tests (alikins@redhat.com)
  - 846207: Print error message for each invalid repo. (awood@redhat.com)
  - change test async to check for a number of thread callbacks
    (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.3-1
changelog:
  - 863961: Expect id cert Version to be populated in tests (alikins@redhat.com)
  - 863565: Give focus to the login field during subscription registration.
    (awood@redhat.com)
  - 838123: remove python2.5ism (alikins@redhat.com)
  - 844072: remove use and dep of PyXML (alikins@redhat.com)
  - 838123: Omit mac addresses from facts for lot and sit ipaddress types
    (bkearney@redhat.com)
  - 856236: Do not allow environmenets to be specified during registration if an
    activation key is used (bkearney@redhat.com)
  - 858289: Rename the desktop file to subscription-manager-gui.deskstop
    (bkearney@redhat.com)
  - 808217: Add a text banner to the output of release --list
    (bkearney@redhat.com)
  - 863428: Add environment support to the migration script. (awood@redhat.com)
  - 862099: Fix several dialog closing issues. (dgoodwin@redhat.com)
  - 854374: Removed extra spacing around help, and improved he rct text output a
    bit. (bkearney@redhat.com)
  - 853572: Fix a typoin the help messages (bkearney@redhat.com)
  - 859090: Remove the word technology from the branding string
    (bkearney@redhat.com)
  - 862308: Subscription Manager version reports registered to value when system
    not registered (wpoteat@redhat.com)
  - 861443: Re-raise GoneException in rhsmcertd-worker (mstead@redhat.com)
  - 861151: make stylish cleanup (alikins@redhat.com)
  - 852911: Add padding around firstboot tooltips icon. (dgoodwin@redhat.com)
  - 854312: Do not install a certificate that has expired. (mstead@redhat.com)
  - Make rhsm-icon work on gnome 3 (jbowes@redhat.com)
  - 853885: Fix icon notification popup only displaying once.
    (dgoodwin@redhat.com)
  - 853006: Wrap label in the manually subscribe firstboot screen.
    (dgoodwin@redhat.com)
  - 861151: release should not list for incompatible variants
    (alikins@redhat.com)
  - 861170: re.escape() values provided to the apply_hightlight() function.
    (awood@redhat.com)
  - 852630: Suscription manager unsubscribe --all shows error on expired
    subscriptions (wpoteat@redhat.com)
  - Freeze obsoletes version for -gnome to -gui rename (jbowes@redhat.com)
  - 860084: remove unused _x from ja_JP translation (alikins@redhat.com)
  - 860088: remove trailing dot from url in de_DE.po (alikins@redhat.com)
  - Don't reparse entitlement certs on every search filter change
    (jbowes@redhat.com)
  - 855257: fix issues with default contract quantity being wrong
    (alikins@redhat.com)
  - 860088: some translations were splitting urls into two lines
    (alikins@redhat.com)
  - Add to nosetest to ensure that Cert V3 check for validity passes.
    (wpoteat@redhat.com)
  - 860344: Subscription-manager import --certificate fails to recognize a new
    version 3.0 certificate (wpoteat@redhat.com)
  - New icon set. (awood@redhat.com)
  - 853035: Fix firstboot "back" issues. (dgoodwin@redhat.com)
  - Check the full version info of the yum api in productid (alikins@redhat.com)
  - 847319: Left align manually subscribe firstboot message (jbowes@redhat.com)
  - 860030: make server_version_check use a non authenticated call
    (alikins@redhat.com)
  - 847387: Display tooltip for info icon in RHEL 5.9. (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.4-1
changelog:
  - 864177: Add the count for the first word in calculating where to break the
    line (bkearney@redhat.com)
  - 785666: For bonded interfaces, find mac address of members
    (alikins@redhat.com)
  - 839779: Add more context around how to cover the machine with a given SLA
    (bkearney@redhat.com)
  - 864177: Attempt to detect the size of the terminal to influence how product
    names are split up. (bkearney@redhat.com)
  - 864569: Make the date picker widget 10 characters wide (bkearney@redhat.com)
  - 855050: Set the icon-name property on all dialogs and windows
    (bkearney@redhat.com)
  - 848095: Reduce the indentation on the help text to improve the layout on
    smaller terminals. (bkearney@redhat.com)
    (wpoteat@redhat.com)
  - 862848: Change the name of the button to Cancel instead of Close
    (bkearney@redhat.com)
  - 867766: Unsubscribe from multiple entitlement certificates using serial
    numbers (wpoteat@redhat.com)
  - Clear any cached environments when registering with activation keys.
    (awood@redhat.com)
    (bryan.kearney@gmail.com)
  - Clear any cached activation key values. (awood@redhat.com)
  - 869729: --autosubscribe and --activationkey should be mutually exclusive
    (wpoteat@redhat.com)
  - 857191: Stacking shows a useless parent in All Available Subscriptions tab
    (wpoteat@redhat.com)
  - 863133: Subscription-Manager version command should have server type listed
    first (wpoteat@redhat.com)
  - updates for failed-qa issues in bz857195 (dlackey@redhat.com.com)
  - Increment the hardcoded page number due to added activation key screen.
    (awood@redhat.com)
  - 864555: add "menu" window hint to filters.glade (alikins@redhat.com)
  - 850870: Update on-line documentation link. (awood@redhat.com)
  - 817671: Add support for Activation Keys in the GUI. (awood@redhat.com)
  - 840415: Print an error message if the destination directory does not exist.
    (awood@redhat.com)
  - Fail fast if the user enters a bad org. (awood@redhat.com)
  - Marking a string for translation. (awood@redhat.com)
  - 866579: Fail fast if the user enters a bad environment. (awood@redhat.com)
  - Enable logging in firstboot (alikins@redhat.com)
  - 865954: Return to creds screen if consumer name is invalid
    (alikins@redhat.com)
  - 852107: Make the banners the same width (bkearney@redhat.com)
  - 748912: Make the error message a bit more friendly when there is no cert file
    to import (bkearney@redhat.com)
  - 865590: Fix broken offline unsubscribe. (dgoodwin@redhat.com)
  - 852328: Report Classic and Subscription Management consistently in the
    version and identity commands (bkearney@redhat.com)
  - 864159: Add a new message in the gui when no subscriptions are available on a
    specific date. (bkearney@redhat.com)
  - 850531: Change the label 'Certificate Status' to 'Status'
    (bkearney@redhat.com)
  - 850533: Change the label from 'Next Update' to 'Next System Check-in'
    (bkearney@redhat.com)
  - 855365: Display a singular sentence if only one subscription is removed
    (bkearney@redhat.com)
  - 862885: Change the text for unlimited to Unlimited (bkearney@redhat.com)
  - 864184: Make the machine type uppercase to be consistent with other output
    (bkearney@redhat.com)
  - 865545: Added report log when cert has no products. (mstead@redhat.com)
  - update releases.conf (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.6-1
changelog:
  - 872847: Change unsubscribe feedback when consumer has been deleted
    (wpoteat@redhat.com)
  - 869934: make "release" related cdn usage use proper urlparse
    (alikins@redhat.com)
  - 852328: Improve the server version checking (bkearney@redhat.com)
  - 871146: Fix proxy errors on first yum operation after registration.
    (dgoodwin@redhat.com)
  - 850430: Pressing Enter in the password entry now activates registration.
    (awood@redhat.com)
  - Attach subscriptions after registration with an activation key.
    (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.7-1
changelog:
  - 873631: Migrate correctly when there is only one org. (awood@redhat.com)
  - 874147: Handle changes in python-ethool api (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.8-1
changelog:
  - 862909: install rct man page (alikins@redhat.com)
  - Fix to LocalTz DST determination (cduryee@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.9-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 864207: mark these strings for translation (alikins@redhat.com)
  - 854388: use ngettext to specify contract/contracts (alikins@redhat.com)
  - 876753: change rhsmcertd --heal-interval to --auto-attach-interval
    (alikins@redhat.com)
  - We require python-rhsm-1.1.5 now (ram) (alikins@redhat.com)
  - 876340: Move the last of the commands and help string to --auto-attach
    (bkearney@redhat.com)
  - 876294: Use attach instead of subscirbe in the rhn migration tooling
    (bkearney@redhat.com)
  - 856735: Move the Next Update notification to the About dialog.
    (awood@redhat.com)
  - Removed stacking from RAM (mstead@redhat.com)
  - Improved comments/logging/tests for RAM (mstead@redhat.com)
  - Updated the entitlement_version of client (mstead@redhat.com)
  - Added RAM limit to rct cat-cert output (mstead@redhat.com)
  - Removing dead code (mstead@redhat.com)
  - Check RAM when determining status (mstead@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.10-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 874623: Tell users running the version command if they are not registered.
    (awood@redhat.com)
  - 873418: Add at-spi locators to the activation key window. (awood@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.1-1
changelog:
  - Add two manifest commands to rct. (bkearney@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 895447: The count of subscriptions removed is zero for certs that have been
    imported. (wpoteat@redhat.com)
  - 895462: Message for subscription-manager repos --list for disabled repo needs
    to be modified (wpoteat@redhat.com)
  - 885964: After registration, recreate the UEP connection using the identity
    cert. (awood@redhat.com)
  - 869306: Add org ID to facts dialog. (awood@redhat.com)
  - 888853: Put output into proper columns regardless of the output language.
    (awood@redhat.com)
  - Update python-rhsm requires version (wpoteat@redhat.com)
  - 888052: Add all binaries to the makefile path for gettext string extraction
    (bkearney@redhat.com)
  - 851303: additional term updates (dlackey@redhat.com.com)
  - 844411: Add an --insecure option to subscription-manager. (awood@redhat.com)
  - 891621: Users can incorrectly enter activation keys when registering to
    hosted. (awood@redhat.com)
  - 889573: Only persist serverurl and baseurl when registering.
    (awood@redhat.com)
  - 889204: Encode the unicode string to utf-8 to avoid syslog errors
    (bkearney@redhat.com)
  - 889621: String substitution inside gettext causes message translations to
    never be found (bkearney@redhat.com)
  - 890296: Unicode characters with a - are causing printing issues for rct
    printing (bkearney@redhat.com)
  - 878269 (dlackey@redhat.com.com)
  - 784056: Raise a running instance of the GUI to the forefront.
    (awood@redhat.com)
  - 888968: Improve the gui message formatting for SLA selection
    (bkearney@redhat.com)
  - 873601: Return a non zero code if subscription manager is run with an
    incorrect command name (bkearney@redhat.com)
  - 839779: Improve messaging when autosubscribe does not work because of SLA
    (bkearney@redhat.com)
  - 867603: Add quantity to confirm subscriptions dialog. (awood@redhat.com)
  - 888790: Rebuild UEP connection after registering with activation keys.
    (awood@redhat.com)
  - 886280; 878257; 878264; 878269 (dlackey@redhat.com.com)
  - 814378: disable linkify if we are running as firstboot (alikins@redhat.com)
  - 886887: Take the user back to the activation key page if he enters an invalid
    key. (awood@redhat.com)
  - 863572: Make forward/back insensitive when registering (alikins@redhat.com)
  - 825950: updating SAM registration procedure; other term edits and updated
    screenshot (dlackey@redhat.com.com)
  - 885964: Do not make a getOwner call when not necessary. (awood@redhat.com)
  - Ask for the org in environments and service-level modules. (awood@redhat.com)
  - 886992: Fix for bad fix for 886604, wrong path for yum repos
    (alikins@redhat.com)
  - matt reid's edits to rct; bz886280; bz878257; bz878269; bz878264
    (dlackey@redhat.com.com)
  - 841496: Do not use hyphens in bash completion files as these are invalid for
    identifiers in the sh shell. (bkearney@redhat.com)
  - Improve logging for rhsmcertd scenarios (wpoteat@redhat.com)
  - 878609: Do not use public url redirectors, instead use a redhat.com address
    (bkearney@redhat.com)
  - 886604: Fix incorrect path in repos.d check (alikins@redhat.com)
  - 727092: Read in the org key during registration if none is given.
    (awood@redhat.com)
  - 845622: If an identity certificate has expired, there should be a friendly
    error message (wpoteat@redhat.com)
  - 883123: Have the migration code use the name and the label for org and
    environment lookup. (bkearney@redhat.com)
  - 886110: help blurb for --auto-attach formatted poorly (alikins@redhat.com)
  - 880070: require latest python-rhsm to handle unicode issues
    (alikins@redhat.com)
  - 798788: Results from subscription-manager facts --update after a server-side
    consumer was deleted. (wpoteat@redhat.com)
  - 878634: Improve the consistency of capitalization of URL, ID, HTTP, and CPU
    (bkearney@redhat.com)
  - 878657: Make consistent use of the term unregister instead of un-register
    (bkearney@redhat.com)
  - 883735: load branding module slightly differently (jesusr@redhat.com)
  - Stylish fix. (dgoodwin@redhat.com)
  - 878664: Add bash completion script for rct (bkearney@redhat.com)
  - 880764: Command line options which can be specified more than once should use
    the same help text (bkearney@redhat.com)
  - 867070: Adjust default sizing of subscriptions pane in Installed Products
    tab. (awood@redhat.com)
  - 873791: Expected exit codes from unsubscribe with multiple serial numbers
    (wpoteat@redhat.com)
  - 800323: Set default output stream encoding to UTF-8. (awood@redhat.com)
  - 862852: Fix double separator in redeem dialog. (dgoodwin@redhat.com)
  - Display "None" if environments value is empty on consumer. (awood@redhat.com)
  - 872351: Display environment in GUI facts dialog and CLI identity command.
    (awood@redhat.com)
  - 881091: Remove punctuation in the help message (bkearney@redhat.com)
  - Revert "878986: refactor to use curses/textwrap for format"
    (alikins@redhat.com)
  - 877579: Fix -1 quantity to consume for unlimited pools. (dgoodwin@redhat.com)
  - 881117: Add at-spi locator to redemption dialog. (awood@redhat.com)
  - 881952: Warn and continue if encountering a failure during system deletion.
    (awood@redhat.com)
  - 878820: Fix console error when yum.repos.d does not exist.
    (dgoodwin@redhat.com)
  - 839772: Display "Not Set" instead of "" in SLA and release preferences.
    (awood@redhat.com)
  - rev zanata branch version to 1.8.X (alikins@redhat.com)
  - 878986: refactor to use curses/textwrap for format (alikins@redhat.com)
  - 878986: Default to no line breaking if no stty is available
    (bkearney@redhat.com)
  - 878588: Move the requires on usermode from subscription-manager-gui to
    subscription-manager (bkearney@redhat.com)
  - 878648: Make the help usage formatting consistent for the rct and
    subscription manager commands (bkearney@redhat.com)
  - 869046: Remove stray 'print' (jbowes@redhat.com)
  - 864207: Autosubscribe should not run when all products are already
    subscribed. (wpoteat@redhat.com)
  - 854702: Place the asterisk indicating editability into the quantity cell.
    (awood@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 1.8.2-1
changelog:
  - Update tito for RHEL 7.0 (bkearney@redhat.com)
  - Small cleanups for test_migrate (alikins@redhat.com)
  - Write repofile once instead of during every iteration. (awood@redhat.com)
  - Add unit test for migration script. (awood@redhat.com)
  - Adding more tests for the migration script. (awood@redhat.com)
  - Bump the required version of python-rhsm to pick up the new config file
    defaults (bkearney@redhat.com)
  - Modify migration script tests to run on Fedora. (awood@redhat.com)
  - Give users the ability to disable package reporting (bkearney@redhat.com)
  - 891377: Note in deprecated string that auto-attach-interval is a command
    option (bkearney@redhat.com)
  - 901612: Yum plugin warnings should go to stderr, not stdout
    (bkearney@redhat.com)
  - 903298: Replace use of 'Register to' with 'Register with'
    (bkearney@redhat.com)
  - Rewrite of the migration script featuring unit tests. (awood@redhat.com)
  - Remove F16 and old cvs releasers, add F18. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.3-1
changelog:
  - string and string catalog update from zanata (alikins@redhat.com)
  - 908954: Ensure that 'Not Set' is shown in the preferences dialog if it is not
    set (bkearney@redhat.com)
  - 906214: rct --help should return 0. (bkearney@redhat.com)
  - 909294: Add accessibility names to the preferences combo boxes
    (bkearney@redhat.com)
  - 878097: Clarify that the --org option is ORG_KEY and not ORG_NAME
    (bkearney@redhat.com)
  - Just use 0 as error for reading int keys (alikins@redhat.com)
  - Old version of config entries considered to make changes backwards compatible
    (wpoteat@redhat.com)
  - 882459: aftermath of bug 876753 - Change --heal-interval to --attach-interval
    in rhsmcertd (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.4-1
changelog:
  - Pull latest strings from zanata. (dgoodwin@redhat.com)
  - Use PyXML for iso8601 date on RHEL5 and dateutil after (alikins@redhat.com)
  - Major switchover to server for compliance checking logic. (dgoodwin@redhat.com)
  - Introduce dependency injection framework. (dgoodwin@redhat.com)
  - 916369: Do not persist config changes until the action completes
    (bkearney@redhat.com)
  - Fix a bug with changing installed products during healing.
    (dgoodwin@redhat.com)
  - 912776: fix migration test scripts to expect get_int usage
    (alikins@redhat.com)
  - 912776: cast port numbers from cli to int immediately (alikins@redhat.com)
  - 912776: use config.get_int for server port as well (alikins@redhat.com)
  - 905649: subscription-manager does not work with dbus-python-1.1.1-1
    (wpoteat@redhat.com)
  - use ngettext for plural messages in certlib/managercli (alikins@redhat.com)
  - 912776: use cfg.get_int for proxy port (alikins@redhat.com)
  - 878097: update service-level org key help text (alikins@redhat.com)
  - Handle manifests with no subscriptions in the archive (alikins@redhat.com)
  - 878664: Add filename support to the bash completion for the rct tool.
    (bkearney@redhat.com)
  - 877590: Changes to the branding messages when the user attempts to register
    twice (bkearney@redhat.com)
  - New plugin framework. (alikins@redhat.com / awood@redhat.com)
  - 886115: Remove line continuations within strings. (bkearney@redhat.com)
  - 913302: Support Level and Support Type should be shown as Service Level and
    Service Type (bkearney@redhat.com)
  - Add unknown product status state. (dgoodwin@redhat.com)
  - 913703: Prefer the use of SKU over Product ID (bkearney@redhat.com)
  - 913720: Use the term order number instead of subscription id
    (bkearney@redhat.com)
  - 878634: Use correct capitalization for ID in the rct tool
    (bkearney@redhat.com)
  - 878097: Help text for service-level command should be consistent with other
    help texts (bkearney@redhat.com)
  - 906554: Add ui_repoid_vars line to yum based on the variables which are in
    the baseurl (bkearney@redhat.com)
  - 912707: Remove a use of the deprecated hasNow() function.
    (bkearney@redhat.com)
  - 913187: Allow older manifests to print out correctly. (bkearney@redhat.com)
  - 912776: Cast proxy port to an integer. (awood@redhat.com)
  - 882459: Deprecated message in help for cert-interval (wpoteat@redhat.com)
  - 895447: Changed messages to distinguish between local and server-side
    removal. (wpoteat@redhat.com)
  - 908671: Display the pool ID when available. (awood@redhat.com)
  - 911386: Displaying combined Service Level and Type should handle empty values
    for both items (jmolet@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.5-1
changelog:
  - 927875: Fix GUI bug if there is an expired certificate. (dgoodwin@redhat.com)
  - 922806: Use dependency injection with firstboot module. (awood@redhat.com)
  - 919512: Remove proxy options from config command. (awood@redhat.com)
  - 921126: latest string updates from zanata (alikins@redhat.com)
  - 919255: Remove extraneous print statement. (awood@redhat.com)
  - 919584: Fix unicode error in RHEL 5. (awood@redhat.com)
  - Implement entitlement/product status caching. (dgoodwin@redhat.com)
  - 921245: Update installed products tab after registration. (awood@redhat.com)
  - 893993: some refactoring, show_autosubscribe_output returns 0 or 1
    (ckozak@redhat.com)
  - 859197: add special case for products that provide 'rhel-' tags
    (alikins@redhat.com)
  - productid db now supports multiple repos per product id (alikins@redhat.com)
  - let ProductData support multiple repos per product (alikins@redhat.com)
  - 893993: attach --auto now prints the proper text when no products are
    installed (ckozak@redhat.com)
  - 918746: Switched or ordering for disabling repos.  Will now print all
    repository validation errors (ckozak@redhat.com)
  - 914717: rct cat-manifest fails to report Contract from the embedded
    entitlement cert (wpoteat@redhat.com)
  - More convenient dep injection. (dgoodwin@redhat.com)
  - Try to handle the really old dbus-python on rhel5 (alikins@redhat.com)
  - add missing conf file for all_slots plugin (alikins@redhat.com)
  - 919700: Reload consumer identity after force subscribing.
    (dgoodwin@redhat.com)
  - utils.parseDate is now isodate.parse_date (alikins@redhat.com)
  - Remove  ent/prod dir arguments to CLI commands. (dgoodwin@redhat.com)
  - PluginsCommand does not need network cli options (alikins@redhat.com)
  - Fix pluginDir config value in default config file (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.6-1
changelog:
  - Latest translations. (dgoodwin@redhat.com)
  - 903298: Fix a few more examples of Register to (bkearney@redhat.com)
  - 878634: Fix the final three uses of id instead of ID (bkearney@redhat.com)
  - Fix string formatting done outside of gettext _() (alikins@redhat.com)
  - 950892: entity typo (dlackey@redhat.com.com)
  - when no parameters are given, dump manifest uses current directory
    (ckozak@redhat.com)
  - fixed zipfile creation in python 2.4 (ckozak@redhat.com)
  - 919561: moving cat manifest into memory (ckozak@redhat.com)
  - 914717: Fields taken from pool data. (wpoteat@redhat.com)
  - 924919: stop log to stderr in isodata module (alikins@redhat.com)
  - 919561: refactored some code into additional methods, fixed naming
    conventions, and added test cases (ckozak@redhat.com)
  - Dont log exception if a repo doesn't have productid (alikins@redhat.com)
  - 919561: checking manifest zip for files outside of scope (ckozak@redhat.com)
  - 919561: moved new extractall into a class that extends ZipFile
    (ckozak@redhat.com)
  - 919561: fixed variable naming in new extractall method (ckozak@redhat.com)
  - 919561: replaced reference to zipfile.extractall (aded in python2.6)
    (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.7-1
changelog:
  - 959563, 956298: for rhel 5.10 (dlackey@redhat.com.com)
  - 905922: use get_int instead of get in order to consume the value as a
    booolean (bkearney@redhat.com)
  - enhancements to tests (alikins@redhat.com)
  - Update expected rct output for content arch info (alikins@redhat.com)
  - let 'rct cat-cert' show arches info on content sets (alikins@redhat.com)
  - Use the unknown icon when it is appropriate. (bkearney@redhat.com)
  - Do not allow manual entry of numbers that aren't multiples of spinner
    increment. (awood@redhat.com)
  - 959570: Subscription names were being mangled in the installed products page.
    (bkearney@redhat.com)
  - 959124: Consistant system status between CLI and GUI (ckozak@redhat.com)
  - re-added compatibility for old candlepin servers. (ckozak@redhat.com)
  - 885130: Switch from using xmlrpclib to rhnlib's rpclib. (awood@redhat.com)
  - 958827: fixed duplicate reasons from bundled subs, removed messages for valid
    products, refactoreed client-side reasons code (ckozak@redhat.com)
  - 958775: correct info for future subscriptions (ckozak@redhat.com)
  - Removing messages from compliant installed products caused by bad overconsumption (ckozak@redhat.com)
  - Use server provided value to determine quantity increment. (awood@redhat.com)
  - 957218: Bump system.certificate_version for cores support (mstead@redhat.com)
  - 956285, 913635, 913628. still need to finalize output for 913628.  (dlackey@redhat.com.com)
  - 955142: Display core limit in rct cat-cert tool (mstead@redhat.com)
  - Warn when we detect we need a newer version of 'mock' (alikins@redhat.com)
  - 924919: remove loging about isodate implementation (alikins@redhat.com)
  - 957195: Pull in the latest or fix from zanata. (bkearney@redhat.com)
  - Add the unkown icon (bkearney@redhat.com)
  - Add reasons to list --installed and list --consumed.  Added list --status
    (ckozak@redhat.com)
  - 908037: remove all ¶ characters from the ml.po file. Zanata was also updated
    (bkearney@redhat.com)
  - 906552: Fixed mis translation of subscription-manager in pa.po and zh_CN.po.
    Zanata was also updated (bkearney@redhat.com)
  - 908059: Fix a pt_BR translation which did not include the http portion of a
    url. Zanata is fixed as well (bkearney@redhat.com)
  - Add F19, 5.10, 6.4 releasers. (dgoodwin@redhat.com)
  - use "assert_string_equal" for multiline str asserts (alikins@redhat.com)
  - add "assert_string_equals" that diffs multiline strings (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.8-1
changelog:
  - Fix echo'ing of exit status or exception on exit (alikins@redhat.com)
  - 962905: Fixing errors with quantity spinner. (awood@redhat.com)
  - 961124: Allow rct dump-manifest to be called more than once (bkearney@redhat.com)
  - 921249: Fix Unknown virt status being reported to server.  (dgoodwin@redhat.com)
  - 905136: Make the accessability value unique (bkearney@redhat.com)
  - 913635: typo (dlackey@redhat.com.com)
  - 889582 (dlackey@redhat.com.com)
  - 962520: require python-rhsm 1.8.11 for arches (alikins@redhat.com)
  - 919706: Relax rhn-setup-gnome dependency. (dgoodwin@redhat.com)
  - Add new expiring icon (bkearney@redhat.com)
  - use os.linesep as imported (alikins@redhat.com)
  - cleanup camelCase usage in various files (alikins@redhat.com)
  - adding architecture data (ckozak@redhat.com)
  - Default option is status (ckozak@redhat.com)
  - changed list --status to status (ckozak@redhat.com)
  - adding data to installed prods (ckozak@redhat.com)
  - SORT ALL THE IMPORTS! (alikins@redhat.com)
  - stylish cleanup (alikins@redhat.com)
  - mock.patch ConsumerIdentity instead of monkey patch (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.9-1
changelog:
  - 905136: added accessibily name for owner_label (jmolet@redhat.com)
  - 928175: fixed status command after user deletion (ckozak@redhat.com)
  - 950672: Added data for yellow. Added list view. (ckozak@redhat.com)
  - 963796: Unified descriptions (cschevia@redhat.com)
  - 966745: Correct typo in name of configuration value. (awood@redhat.com)
  - 967863: Suggest package to install when mapping file is missing. (awood@redhat.com)
  - 968364: show the issuer for certs in rct. (bkearney@redhat.com)
  - 966262 for rct.8; 959563 for subscription-manager.8 (dlackey@redhat.com.com)
  - Extract latest strings from code. (dgoodwin@redhat.com)
  - close file objects deliberately (alikins@redhat.com)
  - Use fnmatch to add wildcard support (bkearney@redhat.com)
  - One more miss from my issuer/errata debacle (bkearney@redhat.com)
  - Extend use of compliance status from cp (ckozak@redhat.com)
  - Add s390 lpar specific socket counting (alikins@redhat.com)
  - be extra paranoid and strip nul from /sys reads (alikins@redhat.com)
  - use new cpu info method by default (alikins@redhat.com)
  - Add a new method for calculating cpu sockets (alikins@redhat.com)
  - Added reasons to Subscription Details (ckozak@redhat.com)
  - Support enable and disable of all repos. (bkearney@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.10-1
changelog:
  - 922825: pre_subscribe conduit now contains more data (mstead@redhat.com)
  - 921222: Fixed subman auto-complete scripts (cschevia@redhat.com)
  - 922806: Fix RHEL 5 firstboot issue with backButton. (dgoodwin@redhat.com)
  - 960465: Subman disconnected when consumer cert is invalid (ckozak@redhat.com)
  - 966747: handle a custom facts file being empty (alikins@redhat.com)
  - 969280: Fix traceback on disconnected sub detach (ckozak@redhat.com)
  - handle s390x's without vm info in sysinfo (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.11-1
changelog:
  - 844532: xen dom0 cpu topology lies, work around it (alikins@redhat.com)
  - 854380: fix overlap filter (ckozak@redhat.com)
  - 915847: Provide option to skip using proxy when connecting to RHSM.
  - 921222: Fixed tab completion (cschevia@redhat.com)
  - 922871: Call pre_product_id_install hook on product install (mstead@redhat.com)
  - 924766: Show machine type when attaching 'virt only' subscriptions (wpoteat@redhat.com)
  - 927340: added empty warning, block auth unless proxy enabled (ckozak@redhat.com)
  - 928401: Fixed translation issue in redeem dialog (cschevia@redhat.com)
  - 947485: System 'disconnected' if no cache and disconnected (ckozak@redhat.com)
  - 947788: facts plugin can handle no 'facter' (alikins@redhat.com)
  - 966137: stat-cert handles ent cert with no content (alikins@redhat.com)
  - 972883: Add entries to productid.js during migration. (awood@redhat.com)
  - 973938: Flush std out and catch errors to work around the broken pipe from the more command (bkearney@redhat.com)
  - 974123: default behavior is help, no longer status (ckozak@redhat.com)
  - 974587: Allow list --consumed to handle certificates with empty order sections (bkearney@redhat.com) (awood@redhat.com)
  - 975164: 975186: fix certlib exception handling (ckozak@redhat.com)
  - Pull PluginManager from dependency injection framework (mstead@redhat.com)
  - Performance enhancements (ckozak@redhat.com)
  - added cp_provider doc strings, modified test fixture (ckozak@redhat.com)
  - Fix expand options so there is no border txt view (alikins@redhat.com)
  - Make PluginManager lazy loading (mstead@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.12-1
changelog:
  - 877331: Add --org and --environment options to migration script.  (awood@redhat.com)
  - 915847: Clear old proxy settings if the --no-proxy option is used. (awood@redhat.com)
  - 928401: Fixed translation issue in redeem dialog (cschevia@redhat.com)
  - 974123: default behavior is help, no longer status (ckozak@redhat.com)
  - 976689: Handle no xorg server, allow help (ckozak@redhat.com)
  - 976848: 976851: thread cache write, limit disk reads, singleton
  - 976865: dbus iface singleton for gui (ckozak@redhat.com)
  - 976866: single instance of ProdDir and EntDir (ckozak@redhat.com)
  - 976868: improve rhsmd logging (alikins@redhat.com)
  - 976868: enable logging from /usr/libexec/rhsmd (alikins@redhat.com)
  - 976924: empty service level and type (ckozak@redhat.com)
  - 977481: added proxy options to status (ckozak@redhat.com)
  - 977535: cli uses utf8 too (ckozak@redhat.com)
  - 977851: 977321: Centralize CertSorter, drive updates, refresh properly
  - 978322: fixed client deleting certs (ckozak@redhat.com)
  - 979492: register auto-attach force recreates cert dirs (ckozak@redhat.com)
  - 980209: removed injection calls from migration script (ckozak@redhat.com)
  - 980640: include stacked ents in provided (ckozak@redhat.com)
  - 981689: fix attach command (ckozak@redhat.com)
  - 982286: Fixed empty dialog message (cschevia@redhat.com)
  - latests strings from zanata and new keys.pot (alikins@redhat.com)
  - Fixed Preferences dialog to be non-threaded (cschevia@redhat.com)
  - updated spec to require python-rhsm v1.8.13-1 or greater (cschevia@redhat.com)
  - Added auto-attach property in the preferences dialog (cschevia@redhat.com)
  - Added autoheal command to subman CLI (cschevia@redhat.com)
  - Add support for SUBMAN_DEBUG to log to stdout (alikins@redhat.com)
  - remove logging of plugin args (alikins@redhat.com)
  - Fixed auto-complete script for auto-attach command (cschevia@redhat.com)


author: Alex Wood <awood@redhat.com> 1.9.1-1
changelog:
  - latest translations from zanata (alikins@redhat.com)
  - Preserve traceback when an exception is thrown from background thread.
    (awood@redhat.com)
  - Remove logging of injection setup (alikins@redhat.com)
  - 988411: more at-spi changes for QA (ckozak@redhat.com)
  - 908521: Pull in the latest mr strings (bkearney@redhat.com)
  - 928469: Pull in latest ml strings from zanata (bkearney@redhat.com)
  - 927990: Pull in latest ta_IN strings from zanata (bkearney@redhat.com)
  - 987579: Make clicking autoheal label work (cschevia@redhat.com)
  - 988430, 988861: remove logging from write_cache to avoid segfault
    (ckozak@redhat.com)
  - 966422: Do not hang firstboot if there is an exception during registration.
    (awood@redhat.com)
  - 978329: catch IdentityCertException gracefully (ckozak@redhat.com)
  - 988482: fix gtk warnings on gtk-2.10 (alikins@redhat.com)
  - 988411: fixed at-spi locator name (ckozak@redhat.com)
  - fixed dbus on rhel5 (ckozak@redhat.com)
  - 987071: specify arch of librsvg dep (alikins@redhat.com)
  - 987626: Remove PUTS while opening preferences dialog, fix related test
    (cschevia@redhat.com)
  - 987551: correctly reconnect to rhsmd daemon (ckozak@redhat.com)
  - 981611, 981565: fixed icon and text truncation (ckozak@redhat.com)
  - rev zanata branch to 1.9.X (alikins@redhat.com)
  - Rev master to 1.9.x (alikins@redhat.com)
  - 968820: raise timeout exceptions for cli calls (alikins@redhat.com)
  - 950892: add ents-nag-warning.png to docs install (alikins@redhat.com)
  - add new file to spec (ckozak@redhat.com)
  - 978466: fix missing socket info s390x/ppc64 (alikins@redhat.com)
  - 985515: moved DbusIface to fix anaconda productId (ckozak@redhat.com)
  - 983193: remove unused 'Virt Limit' cat-cert field (alikins@redhat.com)
  - Correcting whitespace error. (awood@redhat.com)
  - 986971: String Update: Quantity > Available (cschevia@redhat.com)
  - 980724: allsubstab cleared on identity change, check redeem on register
    (ckozak@redhat.com)
  - 921222: add 'status' to bash completion (alikins@redhat.com)
  - 977580: Preferences dialog hide and show (cschevia@redhat.com)
  - 977481: make proxy cli check require_connection (alikins@redhat.com)
  - 977896: Fixes for Workstation/Desktop certs (alikins@redhat.com)
  - Added comma to satisfy grammar rules (cschevia@redhat.com)
  - added at-spi locator for autoheal checkbox (jmolet@redhat.com)
  - 984203: Fix german translations (bkearney@redhat.com)
  - 974587: Add more checks for no order portion being present
    (bkearney@redhat.com)
  - 984206: Removed Spaces from String (cschevia@redhat.com)
  - Remove releasers due to branching. (dgoodwin@redhat.com)
  - 983670: Improved auto-attach description (cschevia@redhat.com)
  - 982286: Adjusted markup removal (cschevia@redhat.com)
  - 983250: 983281: certs check warning period (ckozak@redhat.com)
  - Adding Fedora 19 Yum releasers. (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.9.2-1
changelog:
  - 851321: Refresh/redraw tables after removing subscriptions (cschevia@redhat.com)
  - 974587: allow certs with no content (ckozak@redhat.com)
  - 977920, 983660: manpage updates (dlackey@redhat.com.com)
  - 987579: Re-arranged preferences dialog (cschevia@redhat.com)
  - 990195: remove subscribe options (ckozak@redhat.com)
  - 991214: refresh ent dir, catch exception gracefully (ckozak@redhat.com)
  - 991548: Display correct error message for registration failures.  (awood@redhat.com)
  - 991580: add rhsmd debug to stdout (ckozak@redhat.com)
  - 993202: fix default config, take advantage of rhsmconfig options (ckozak@redhat.com)
  - 994266: list consumed shows expired bugs (ckozak@redhat.com)
  - 994997: Fix Unknown is_guest during firstboot. (dgoodwin@redhat.com)
  - Changed 'It is' to possessive 'Its' (cschevia@redhat.com)
  - Remove unused WARNING_DAYS variable (ckozak@redhat.com)
  - Bump python-rhsm requires to 1.9.1 for config changes. (dgoodwin@redhat.com)
  - add ondate to status (ckozak@redhat.com)
  - Fedora 17 is at end of life. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.1-1
changelog:
  - Adding Fedora 20 branch to releaser. (awood@redhat.com)
  - Subscribe/unsubscribe mirror attach/remove tests (alikins@redhat.com)
  - Revert "990195: remove subscribe options" (alikins@redhat.com)
  - 994620: reword tooltip message (ckozak@redhat.com)
  - 997935: stop making requests after unregister (ckozak@redhat.com)
  - 997740: allow autoheal call more often (ckozak@redhat.com)
  - Prevent name collision over the parent variable in RHEL 5 Firstboot.
    (awood@redhat.com)
  - 997189: error is now a sys.exc_info() tuple. (awood@redhat.com)
  - self._parent is not defined here. (awood@redhat.com)
  - bump version and remove rhel-6.5 releaser (jesusr@redhat.com)
  - Convert contract selection window to use a MappedListStore.
    (awood@redhat.com)
  - Stripe rows whenever the My Subs or All Available tabs are shown.
    (awood@redhat.com)
  - 991165: Refresh row striping after the TreeView is resorted.
    (awood@redhat.com)
  - Remove unused background attribute in Installed Products tab.
    (awood@redhat.com)
  - Set background color on progress bar renderer. (awood@redhat.com)
  - No need to set a hint to true in glade then false in code. (awood@redhat.com)
  - Remove duplicate import. (awood@redhat.com)
  - Add a very simple "smoke" test script (alikins@redhat.com)
  - 842402: Re-aligning Subscription Manager Gui (cschevia@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.2-1
changelog:
  - update translations from zanata (alikins@redhat.com)
  - 1004893: update prods before compliance (ckozak@redhat.com)
  - 1004908: Remove the rhn-setup-gnome dep even more. (alikins@redhat.com)
  - 1004908: move rhn-setup-gnome requires to -gui subpackage
    (pbabinca@redhat.com)
  - 1004385: rhsm icon completion fix (ckozak@redhat.com)
  - 1004341: add gui completion (ckozak@redhat.com)
  - 1001820: fix autocompletion (ckozak@redhat.com)
  - rev min python version for "make stylish" to 2.6 (alikins@redhat.com)
  - 994344: messaging for bad filetypes (ckozak@redhat.com)
  - 995597: continue attaching if a pool cannot be found (ckozak@redhat.com)
  - 1001169: fix pythonic empty string identity problems (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.3-1
changelog:
  - Latest strings from zanata. (alikins@redhat.com)
  - Latest string catalog. (alikins@redhat.com)
  - point at the zanata 1.10.x version/branch (alikins@redhat.com)
  - Run 'make update-po' on translations. (awood@redhat.com)
  - Latest translations from Zanata. (awood@redhat.com)
  - Merge pull request #782 from candlepin/ckozak/environment_completion
    (alikins@redhat.com)
  - Merge pull request #776 from candlepin/alikins/1008462_log_virt_what
    (c4kofony@gmail.com)
  - 1011712: add missing environments completion (ckozak@redhat.com)
  - Merge pull request #773 from candlepin/ckozak/match_gui_filters
    (alikins@redhat.com)
  - Merge pull request #787 from candlepin/awood/1006985-abort-migration
    (alikins@redhat.com)
  - Use all keywords args for call to get_avail_ents (alikins@redhat.com)
  - Add 'providedProducts' to test pool (alikins@redhat.com)
  - stylish cleanups (alikins@redhat.com)
  - removed subscribed filter, added testing (ckozak@redhat.com)
  - Add some tests cases for managerlib.get_avail_ents (alikins@redhat.com)
  - fix wrong index in get_filtered_pools_list (ckozak@redhat.com)
  - remove unused args, remove unnecessary idcert read (ckozak@redhat.com)
  - add completion for new CLI filters (ckozak@redhat.com)
  - 654501: add some filtering to list available (ckozak@redhat.com)
  - Merge pull request #765 from candlepin/alikins/redhataccount
    (awood@redhat.com)
  - Move capture() context manager to fixtures.py (awood@redhat.com)
  - Merge pull request #786 from candlepin/ckozak/cli_list_provided
    (alikins@redhat.com)
  - 1006985: Abort migration when we detect different certs with the same ID.
    (awood@redhat.com)
  - Merge pull request #781 from candlepin/ckozak/cat_cert_unlimited
    (alikins@redhat.com)
  - 996993: add provided to list available (ckozak@redhat.com)
  - Merge pull request #784 from candlepin/ckozak/gui_unentitled_string
    (alikins@redhat.com)
  - 1012501: Correct number of entitled products with expired ents
    (ckozak@redhat.com)
  - 1012566: rhsmd cron job 700 (ckozak@redhat.com)
  - 1011703: Do not allow selection on listview (mstead@redhat.com)
  - Merge pull request #779 from candlepin/alikins/flex_branding3
    (c4kofony@gmail.com)
  - 1011961: -1 quantity is printed as unlimited (ckozak@redhat.com)
  - Merge pull request #774 from candlepin/ckozak/fix_gui_completion
    (alikins@redhat.com)
  - Make certlib repo and brand updating similar. (alikins@redhat.com)
  - 1004385: remove some gtk help options (ckozak@redhat.com)
  - Make BrandingInstaller run every cert install/rm (alikins@redhat.com)
  - Merge pull request #778 from candlepin/ckozak/update_repolib_attach
    (alikins@redhat.com)
  - keep repolib in certmgr (ckozak@redhat.com)
  - 1011234: no service level displays empty string (ckozak@redhat.com)
  - 1008016: update repos on certlib change (ckozak@redhat.com)
  - fix traceback when poolstash is empty (ckozak@redhat.com)
  - 1008462: log more virt-what output (alikins@redhat.com)
  - 1008462: Log detected virt info as we detect it. (alikins@redhat.com)
  - 1004341: gui completion no longer resets (ckozak@redhat.com)
  - Merge pull request #761 from candlepin/ckozak/overlap_filter_ondate
    (alikins@redhat.com)
  - Refactor credentials gathering. (awood@redhat.com)
  - Merge pull request #771 from candlepin/alikins/cmd_name_logging
    (jmrodri@nc.rr.com)
  - Merge pull request #769 from
    candlepin/ckozak/catch_exception_updating_installed (jmrodri@nc.rr.com)
  - Merge remote branch 'origin/master' into alikins/redhataccount
    (awood@redhat.com)
  - Merge pull request #768 from candlepin/ckozak/status_ondate_completion
    (jmrodri@nc.rr.com)
  - Merge pull request #766 from candlepin/alikins/make_zanata
    (jmrodri@nc.rr.com)
  - 973838: refresh redhat.repo after register (alikins@redhat.com)
  - make default logger include sys.argv[0] (alikins@redhat.com)
  - Merge pull request #770 from candlepin/mstead/add-virt-type-info
    (c4kofony@gmail.com)
  - Add System Type to output of list --consumed (mstead@redhat.com)
  - Add Type column to Confirm Subscription screen (mstead@redhat.com)
  - 1008603: Catch and log connection error while updating installed products
    (ckozak@redhat.com)
  - Merge pull request #767 from candlepin/ckozak/attach_suggested_quantity
    (wpoteat@redhat.com)
  - 1004385: Add missing rhsm-icon debug options (ckozak@redhat.com)
  - suggested quantity in list available (ckozak@redhat.com)
  - Merge pull request #754 from candlepin/alikins/flex_branding2
    (c4kofony@gmail.com)
  - 1001820: added ondate to completion (ckozak@redhat.com)
  - cleanup comments (alikins@redhat.com)
  - remove call on filter change, use None instead of now (ckozak@redhat.com)
  - Adding autocomplete stuff for new migration script options.
    (awood@redhat.com)
  - 767754: overlap filter ondate (ckozak@redhat.com)
  - Add a 'make zanata' target that syncs zanata (alikins@redhat.com)
  - Adding unit tests for new migration script options. (awood@redhat.com)
  - Correct failing unit tests and add convenience method. (awood@redhat.com)
  - Change brand attribute from 'os' to 'brand_type' (alikins@redhat.com)
  - Make rct show branding info (alikins@redhat.com)
  - Move to RHELBrandsInstaller by default. (alikins@redhat.com)
  - Split RHEL specific brand install bits (alikins@redhat.com)
  - Add a BrandsInstaller that handles multiple brands (alikins@redhat.com)
  - Invert dependencies, and add RHEL specific impls. (alikins@redhat.com)
  - Stylish cleanups. (alikins@redhat.com)
  - Added new parameters to the script (tazimkolhar@gmail.com)
  - clean up comments (alikins@redhat.com)
  - More entbranding logging and testing. (alikins@redhat.com)
  - Allow multi ents that provide identical branding (alikins@redhat.com)
  - More entbranding test cases. (alikins@redhat.com)
  - Add BrandPicker and Brand base class. (alikins@redhat.com)
  - Add branding support to ent cert importer. (alikins@redhat.com)
  - Update branding on cert sorter dir moniter event (alikins@redhat.com)
  - Move all branded product logic to entbranding (alikins@redhat.com)
  - make it more clear this is for RHEL branded ents (alikins@redhat.com)
  - Add support for populating product branding info. (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.4-1
changelog:
  - 1017351: ignore dbus failures on show_window (alikins@redhat.com)
  - 1016643: Fix firstboot issues with new firstboot. (alikins@redhat.com)
  - 1005420: adding --ondate to manpage (dlackey@redhat.com.com)
  - 1007580: Add contract number to the output of list --available
    (bkearney@redhat.com)
  - 1017299: handle dmidecode module not installed (alikins@redhat.com)
  - 846331: Add tooltips to the filters page (bkearney@redhat.com)
  - 1015553: fix help message for no-overlap. display usage requirement
    (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.5-1
changelog:
  - 1021581: account/contract display nothing when no data exists
    (ckozak@redhat.com)
  - Swap heading of selectsla/confirmsubs widgets. (alikins@redhat.com)
  - 1006748: replace simplejson with 'ourjson' (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.6-1
changelog:
  - 985502: Use yum.i18n utf8_width function for string length in CLI
    (ckozak@redhat.com)
  - 916666: Displayed 'Next System Check-In' is inaccuarate (wpoteat@redhat.com)
  - Change wording for identity in CLI command. (dgoodwin@redhat.com)
  - 1019753: Stop including a fake consumer UUID fact. (dgoodwin@redhat.com)
  - 1022198: Display highest suggested quantity in contract selection
    (ckozak@redhat.com)
  - Hook up the 'why register' dialog from old rhn-client-tools.
    (dgoodwin@redhat.com)
  - Add screen to describe and skip registration in Fedora/EL7 firstboot.
    (dgoodwin@redhat.com)
  - Fix firstboot on Fedora 19. (dgoodwin@redhat.com)
  - Report distribution.version.modifier fact. ex 'beta' (ckozak@redhat.com)
  - Center filter dialog on parent window when opened (mstead@redhat.com)
  - Sort owner list in org selection screen (mstead@redhat.com)
  - 1004318: Bash completion for rct was not handing options and file lists
    correctly. (bkearney@redhat.com)
  - 1023166: Strip leading and trailing whitespaces from all usernames and
    passwords provided on the cli (bkearney@redhat.com)
  - 963579: Stop hiding the Library environment. (dgoodwin@redhat.com)
  - Fix layout issues with select sla screen in firstboot. (alikins@redhat.com)
  - Fix the layout for "Confirm Subscriptions" screen. (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.7-1
changelog:
  - 998033: Handle Unauthorized/Forbidden exceptions in CLI/GUI
    (mstead@redhat.com)
  - Remove unnecessary network calls after clean command (ckozak@redhat.com)
  - Bumping the python-rhsm required version (mstead@redhat.com)
  - Latest translations. (awood@redhat.com)
  - Introduced an Override model object to OverrideLib (mstead@redhat.com)
  - Use injected Identity instead of ConsumerIdentity in repolib
    (mstead@redhat.com)
  - Catch ValueError when determining boolean value (mstead@redhat.com)
  - Use a simplier method to compare two lists of dictionaries.
    (awood@redhat.com)
  - Hide item when server does not support overrides. (mstead@redhat.com)
  - Show message instead of repo table when no repos exist. (mstead@redhat.com)
  - Made Repository Details resemble Subscription Details (mstead@redhat.com)
  - Created an overrides module (mstead@redhat.com)
  - Created Repository Management Dialog (mstead@redhat.com)
  - Add 'repo-override' command to alter content repositories server-side.
    (awood@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.8-1
changelog:
  - 1030604: Handle 400 code for add override (mstead@redhat.com)
  - Use backed to ensure a refreshed Overrides object (mstead@redhat.com)
  - 1034574: Alternate message based on why no repos exist in GUI
    (mstead@redhat.com)
  - 1034396: No longer require entitlements to run repo-override command
    (mstead@redhat.com)
  - 1033741: Refresh Overrides CP connection when dialog is shown
    (mstead@redhat.com)
  - 1033690: Updated repo-overrides not supported message (mstead@redhat.com)
  - 1034649: Only allow repolib to update override cache if supported by the
    server (mstead@redhat.com)
  - 1032673: Warn on add override if repo doesn't exist (mstead@redhat.com)
  - 1030996: Fixed usage text for repo-override add/remove options
    (mstead@redhat.com)
  - 1032243: Updated the redhat.repo warning (mstead@redhat.com)
  - Use local ent certs to list attached pools (ckozak@redhat.com)
  - 1021013: Change wording on firstboot address screen (alikins@redhat.com)
  - 1020539: Show proxy info if no RHN in firstboot (alikins@redhat.com)
  - Make zip file of consumer information for debugging (wpoteat@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.9-1
changelog:
  - Check for RHSM_DISPLAY before loading any modules. (alikins@redhat.com)
  - 1034429: Fix stacktrace in logs on unregister. (dgoodwin@redhat.com)
  - add ServerUrlParseException strings to mapper (jesusr@redhat.com)
  - 1040167: Update installed products properly (ckozak@redhat.com)
  - Added atspi locator for overall status (ckozak@redhat.com)
  - ExceptionMapper will now traverse object graph looking for message
    (mstead@redhat.com)
  - Convert tests on stderr to use Capture context manager. (awood@redhat.com)
  - Have Capture grab both stdout and stderr. (awood@redhat.com)
  - Updated for readability (ckozak@redhat.com)
  - replace file monitors with a single monitor (ckozak@redhat.com)
  - Rename capture context manager and use new-style classes. (awood@redhat.com)
  - Correct Makefile for RHEL 5. (awood@redhat.com)
  - 1030604: print to stdout instead of stderr for consistency
    (mstead@redhat.com)
  - display pool type in cli and gui (ckozak@redhat.com)
  - 1031008: Properly handle exceptions when checking compliance
    (mstead@redhat.com)
  - Change the capture() context manager to tee output. (awood@redhat.com)
  - Remove mock stdout. Nosetest captures stdout by default. (awood@redhat.com)
  - respect http(s)_proxy env variable for proxy information (jesusr@redhat.com)
  - Created ExceptionMapper to allow sharing exception messages
    (mstead@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.10-1
changelog:
  - 1039736: Modify the remote server string to reference Satellite instead of
    CloudForms (bkearney@redhat.com)
  - 916666: Change method of service detection (wpoteat@redhat.com)
  - Correct at-spi name for subscription type text (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.11-1
changelog:
  - 1018807: Ensure virt facts are a single line (bkearney@redhat.com)
  - 1007580: Print blank spaces if there is no contract number on the list
    command (bkearney@redhat.com)
  - Fedora 18 is at end of life. (awood@redhat.com)
  - Updated translations. (dgoodwin@redhat.com)
  - 104338: add default dest dir to rhsm-debug help (alikins@redhat.com)
  - 1042897: add proxy info to rhsm-debug completion (alikins@redhat.com)
  - 914833: rct cat-cert output reports an Order: Subscription: field.
    (wpoteat@redhat.com)
  - 1052297: delay import of site module (ckozak@redhat.com)
  - set default encoding to utf-8 in rhsm-debug and migrate scripts
    (ckozak@redhat.com)
  - 1048325: Set default encoding to utf-8 when running the rct script
    (ckozak@redhat.com)
  - 1050850: re-evaluate system facts when checking for updates
    (ckozak@redhat.com)
  - Some refactoring of rhsm-debug (alikins@redhat.com)
  - Additional improvements to rhsm-debug (wpoteat@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.12-1
changelog:
  - added testing for the pooltype cache (ckozak@redhat.com)
  - 961003: Stricter matches for rhel product tags (alikins@redhat.com)
  - 1059809: Cache pool types to avoid unnecessary api calls (ckozak@redhat.com)
  - 1059809 Improve attach and remove performance add progress bar
    (ckozak@redhat.com)
  - 908869: Fix the mis-transated options in pt-BR (bkearney@redhat.com)
  - 1044596: handle http,socket,ssl fetching release (alikins@redhat.com)
  - dont always print exception message (ckozak@redhat.com)
  - 1044596: Make release listing handle empty data (alikins@redhat.com)
  - 1020423: update help messages (jesusr@redhat.com)
  - Fix incorrect patching. (awood@redhat.com)
  - Mock ProductDatabase so tests can run without a productid.js file
    (awood@redhat.com)
  - 825388: Properly wrap text when reaching dialog limit (mstead@redhat.com)
  - 1021443: display Consumer deleted message (jesusr@redhat.com)
  - Altering titles per mreid conversation. (wpoteat@redhat.com)
  - 1039736: Fix missed reference to CloudForms in tooltip. (dgoodwin@redhat.com)
  - Fix ta_IN translation problem. (dgoodwin@redhat.com)
  - Lock timezone to EST5EDT in timezone tests. (awood@redhat.com)
  - 1005329: add at-spi locator to the SLA selection table (ckozak@redhat.com)
  - 1039914: Update the rhsm-debug man page (bkearney@redhat.com)
  - 874169: Fix label alignment in progress UI (mstead@redhat.com)
  - 1020361: Replace the use of the term Valid with Current in the status command
    (bkearney@redhat.com)
  - 1028596: Add the repo-override command to the subscription-manager man page
    (bkearney@redhat.com)
  - 1020522: Update the man page for subscription-manager with new list options
    (bkearney@redhat.com)
  - Pull in the latest strings from zanata. (bkearney@redhat.com)
  - 1057719: adding a small section on deprecated commands (dlackey@redhat.com)
  - 1017354: remove msg printed to stderr via yum (alikins@redhat.com)
  - 857147: Auto-subscribe window has a confusing name (wpoteat@redhat.com)
  - Use dateutil.tz instead of pytz. (awood@redhat.com)
  - 883486: The local time's start/end dates rendered in the list
    --available/--consumed incorrect (wpoteat@redhat.com)
  - 1049037: Add conditional requires on migration data package.
    (awood@redhat.com)
  - 973938: correctly handle SIGPIPE in rct (ckozak@redhat.com)
  - 878089: Add line wrapping when listing subscription-manager modules
    (ckozak@redhat.com)
  - 1017354: Ensure all message go to stdout, not stderr (bkearney@redhat.com)
  - 851325: Anchor choose server "default" button beside the text box.
    (dgoodwin@redhat.com)
  - 1039739: Add 96x96 and 256x256 icons (bkearney@redhat.com)
  - 873967: Move choose server tooltips closer to the elements they assist with.
    (dgoodwin@redhat.com)
  - 1044686: Make serverurl parse error detailed again (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.13-1
changelog:
  - 1060917: catch exception thrown in firstboot (ckozak@redhat.com)
  - Extract the latest strings (bkearney@redhat.com)
  - 995121: require gnome-icon-theme for calendar icon (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-1
changelog:
  - Use glob for finding entitlement certs to remove. (dgoodwin@redhat.com)
  - Make sure entitlement cert directory exists before we clean it out.
    (dgoodwin@redhat.com)
  - safer default args in AsyncWidgetUpdater (ckozak@redhat.com)
  - use enumerate instead of confusing myself (ckozak@redhat.com)
  - Pull in latest strings from zanata (bkearney@redhat.com)
  - make sure entitlement has a pool before reading it (ckozak@redhat.com)
  - quickly load preferences (ckozak@redhat.com)
  - 1061937: preference changes occur in the background (ckozak@redhat.com)
  - use existing signals (ckozak@redhat.com)
  - simplify preferences window (ckozak@redhat.com)
  - Fix test failure if run on system that is registered. (dgoodwin@redhat.com)
  - 1061393: Don't allow subscription-manager string to be translated
    (ckozak@redhat.com)
  - 1016427: On string was missed from the extraction (bkearney@redhat.com)
  - 1058495: productid yum errors on yum remove (alikins@redhat.com)
  - 1026501: Preserve PKI directories and have rpm own them.
    (dgoodwin@redhat.com)
  - 1058374: Fix crash on exception in managergui._show_buttons
    (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-2
changelog:
  - updated tito.props to rev release (ckozak@redhat.com)
  - 958016: use rpm %{optflags} and _hardended_build (alikins@redhat.com)
  - 851325: Tweak activation key checkbox to left (alikins@redhat.com)
  - 1044596: Don't match beta product tags for release (alikins@redhat.com)
  - 1060727: Changes to rhsm-debug for sos report (wpoteat@redhat.com)
  - removed other releasers (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-3
changelog:
  - 906567: Fix translations of "Red Hat" (alikins@redhat.com)
  - 1039914: rhsm-debug updates and fixes (alikins@redhat.com)
  - 1038242: add anaconda.pid check before chroot (alikins@redhat.com)
  - 1030378,1020474: Latest translations from zanata (alikins@redhat.com)
  - 1055664: rhsm-debug now follows more config paths (alikins@redhat.com)
  - 1021069: Add reference to network usage info. (alikins@redhat.com)
  - 1035115: Update product id certs (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-4
changelog:
  - 1030378: Latest strings from zanata. (alikins@redhat.com)
  - 1070737: correct config section for ca_cert_dir (ckozak@redhat.com)
  - Use systemd RPM macros to make life easier. (awood@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-5
changelog:
  - 1070908: Don't count cpus without topo for lpar (alikins@redhat.com)
  - 865702: Dont render exc messages with bogus markup (alikins@redhat.com)
  - 1074568: Use our translations in optparser (ckozak@redhat.com)
  - 1075167: Avoid using injected values in migrate-classic-to-rhsm
    (ckozak@redhat.com)
  - 1020474: Strings are 100% translated again. (alikins@redhat.com)


author: Lennart Poettering <lpoetter@redhat.com> - 0-0.7.20100629git4176e5
changelog:
  - New snapshot
  - Split off -units package where other packages can depend on without pulling in the whole of systemd


author: Lennart Poettering <lpoetter@redhat.com> - 8-3
changelog:
  - Reexecute after installation, take ownership of /var/run/user
  - https://bugzilla.redhat.com/show_bug.cgi?id=627457
  - https://bugzilla.redhat.com/show_bug.cgi?id=627634


author: Lennart Poettering <lpoetter@redhat.com> - 10-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=630401
  - https://bugzilla.redhat.com/show_bug.cgi?id=630225
  - https://bugzilla.redhat.com/show_bug.cgi?id=626966
  - https://bugzilla.redhat.com/show_bug.cgi?id=623456


author: Lennart Poettering <lpoetter@redhat.com> - 14-1
changelog:
  - Upstream update
  - Enable hwclock-load by default
  - Obsolete readahead
  - Enable /var/run and /var/lock on tmpfs


author: Lennart Poettering <lpoetter@redhat.com> - 24-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694079
  - https://bugzilla.redhat.com/show_bug.cgi?id=693289
  - https://bugzilla.redhat.com/show_bug.cgi?id=693274
  - https://bugzilla.redhat.com/show_bug.cgi?id=693161


author: Lennart Poettering <lpoetter@redhat.com> - 25-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=694788
  - https://bugzilla.redhat.com/show_bug.cgi?id=694321
  - https://bugzilla.redhat.com/show_bug.cgi?id=690253
  - https://bugzilla.redhat.com/show_bug.cgi?id=688661
  - https://bugzilla.redhat.com/show_bug.cgi?id=682662
  - https://bugzilla.redhat.com/show_bug.cgi?id=678555
  - https://bugzilla.redhat.com/show_bug.cgi?id=628004


author: Lennart Poettering <lpoetter@redhat.com> - 26-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=699394
  - https://bugzilla.redhat.com/show_bug.cgi?id=698198
  - https://bugzilla.redhat.com/show_bug.cgi?id=698674
  - https://bugzilla.redhat.com/show_bug.cgi?id=699114
  - https://bugzilla.redhat.com/show_bug.cgi?id=699128


author: Lennart Poettering <lpoetter@redhat.com> - 26-2
changelog:
  - Bugfix release
  - https://bugzilla.redhat.com/show_bug.cgi?id=707507
  - https://bugzilla.redhat.com/show_bug.cgi?id=707483
  - https://bugzilla.redhat.com/show_bug.cgi?id=705427
  - https://bugzilla.redhat.com/show_bug.cgi?id=707577


author: Michal Schmidt <mschmidt@redhat.com> - 28-3
changelog:
  - Apply patches from current upstream
  - https://bugzilla.redhat.com/show_bug.cgi?id=709909
  - https://bugzilla.redhat.com/show_bug.cgi?id=710839
  - https://bugzilla.redhat.com/show_bug.cgi?id=711015


author: Michal Schmidt <mschmidt@redhat.com> - 28-4
changelog:
  - Apply patches from current upstream.
  - Fixes memory size detection on 32-bit with >4GB RAM (BZ712341)


author: Lennart Poettering <lpoetter@redhat.com> - 35-1
changelog:
  - New upstream release
  - Update post scripts
  - Resolves: #726683, #713384, #698198, #722803, #727315, #729997, #733706, #734611


author: Michal Schmidt <mschmidt@redhat.com> - 37-2
changelog:
  - A couple of fixes from upstream:
  - Fix a regression in bash-completion reported in Bodhi.
  - Fix a crash in isolating.
  - Resolves: #717325


author: Michal Schmidt <mschmidt@redhat.com> - 38-5
changelog:
  - Build against libgee06. Reenable gtk tools.
  - Delete unused patches.
  - Add easy building of git snapshots.
  - Remove legacy spec file elements.
  - Don't mention implicit BuildRequires.
  - Configure with --disable-static.
  - Merge -units into the main package.
  - Move section 3 manpages to -devel.
  - Fix unowned directory.
  - Run ldconfig in scriptlets.
  - Split systemd-analyze to a subpackage.


author: Lennart Poettering <lpoetter@redhat.com> - 42-1
changelog:
  - New upstream release
  - Save a bit of entropy during system installation (#789407)
  - Don't own /etc/os-release anymore, leave that to fedora-release


author: Dennis Gilmore <dennis@ausil.us> - 43-2
changelog:
  - don't conflict with fedora-release systemd never actually provided
  - /etc/os-release so there is no actual conflict


author: Dennis Gilmore <dennis@ausil.us> - 44-3
changelog:
  - apply patch from upstream so we can build systemd on arm and ppc
  - and likely the rest of the secondary arches


author: Michal Schmidt <mschmidt@redhat.com> - 44-4
changelog:
  - Add triggers from Bill Nottingham to correct the damage done by
    the obsoleted systemd-units's preun scriptlet (#807457).


author: Kay Sievers - 185-1
changelog:
  - New upstream release
    - udev selinux labeling fixes
    - new man pages
    - systemctl help <unit name>


author: Michal Schmidt <mschmidt@redhat.com> - 185-4.gita2368a3
changelog:
  - Update to current git snapshot
    - Add systemd-readahead-analyze
    - Drop upstream patch
  - Split systemd-libs
  - Drop duplicate doc files
  - Fixed License headers of subpackages


author: Lennart Poettering <lpoetter@redhat.com> - 188-1
changelog:
  - New upstream release
  - Enable gdm and avahi by default via the preset file
  - Convert /etc/sysconfig/desktop to display-manager.service symlink
  - Enable hardened build


author: Lennart Poettering <lpoetter@redhat.com> - 188-3
changelog:
  - Remount file systems MS_PRIVATE before switching roots
  - https://bugzilla.redhat.com/show_bug.cgi?id=847418


author: Ray Strode <rstrode@redhat.com> 188-4
changelog:
  - more scriptlet fixes
    (move dm migration logic to %posttrans so the service
     files it's looking for are available at the time
     the logic is run)


author: Lennart Poettering <lpoetter@redhat.com> - 189-3
changelog:
  - Update preset policy
  - Rename preset policy file from 99-default.preset to 90-default.preset so that people can order their own stuff after the Fedora default policy if they wish


author: Lennart Poettering <lpoetter@redhat.com> - 190-1
changelog:
  - New upstream release
  - Take possession of /etc/localtime, and remove /etc/sysconfig/clock
  - https://bugzilla.redhat.com/show_bug.cgi?id=858780
  - https://bugzilla.redhat.com/show_bug.cgi?id=858787
  - https://bugzilla.redhat.com/show_bug.cgi?id=858771
  - https://bugzilla.redhat.com/show_bug.cgi?id=858754
  - https://bugzilla.redhat.com/show_bug.cgi?id=858746
  - https://bugzilla.redhat.com/show_bug.cgi?id=858266
  - https://bugzilla.redhat.com/show_bug.cgi?id=858224
  - https://bugzilla.redhat.com/show_bug.cgi?id=857670
  - https://bugzilla.redhat.com/show_bug.cgi?id=856975
  - https://bugzilla.redhat.com/show_bug.cgi?id=855863
  - https://bugzilla.redhat.com/show_bug.cgi?id=851970
  - https://bugzilla.redhat.com/show_bug.cgi?id=851275
  - https://bugzilla.redhat.com/show_bug.cgi?id=851131
  - https://bugzilla.redhat.com/show_bug.cgi?id=847472
  - https://bugzilla.redhat.com/show_bug.cgi?id=847207
  - https://bugzilla.redhat.com/show_bug.cgi?id=846483
  - https://bugzilla.redhat.com/show_bug.cgi?id=846085
  - https://bugzilla.redhat.com/show_bug.cgi?id=845973
  - https://bugzilla.redhat.com/show_bug.cgi?id=845194
  - https://bugzilla.redhat.com/show_bug.cgi?id=845028
  - https://bugzilla.redhat.com/show_bug.cgi?id=844630
  - https://bugzilla.redhat.com/show_bug.cgi?id=839736
  - https://bugzilla.redhat.com/show_bug.cgi?id=835848
  - https://bugzilla.redhat.com/show_bug.cgi?id=831740
  - https://bugzilla.redhat.com/show_bug.cgi?id=823485
  - https://bugzilla.redhat.com/show_bug.cgi?id=821813
  - https://bugzilla.redhat.com/show_bug.cgi?id=807886
  - https://bugzilla.redhat.com/show_bug.cgi?id=802198
  - https://bugzilla.redhat.com/show_bug.cgi?id=767795
  - https://bugzilla.redhat.com/show_bug.cgi?id=767561
  - https://bugzilla.redhat.com/show_bug.cgi?id=752774
  - https://bugzilla.redhat.com/show_bug.cgi?id=732874
  - https://bugzilla.redhat.com/show_bug.cgi?id=858735


author: Lennart Poettering <lpoetter@redhat.com> - 194-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=859614
  - https://bugzilla.redhat.com/show_bug.cgi?id=859655


author: Lennart Poettering <lpoetter@redhat.com> - 195-1
changelog:
  - New upstream release
  - https://bugzilla.redhat.com/show_bug.cgi?id=831665
  - https://bugzilla.redhat.com/show_bug.cgi?id=847720
  - https://bugzilla.redhat.com/show_bug.cgi?id=858693
  - https://bugzilla.redhat.com/show_bug.cgi?id=863481
  - https://bugzilla.redhat.com/show_bug.cgi?id=864629
  - https://bugzilla.redhat.com/show_bug.cgi?id=864672
  - https://bugzilla.redhat.com/show_bug.cgi?id=864674
  - https://bugzilla.redhat.com/show_bug.cgi?id=865128
  - https://bugzilla.redhat.com/show_bug.cgi?id=866346
  - https://bugzilla.redhat.com/show_bug.cgi?id=867407
  - https://bugzilla.redhat.com/show_bug.cgi?id=868603


author: Michal Schmidt <mschmidt@redhat.com> - 195-4
changelog:
  - add dmraid-activation.service to the default preset
  - add yum protected.d fragment
  - https://bugzilla.redhat.com/show_bug.cgi?id=869619
  - https://bugzilla.redhat.com/show_bug.cgi?id=869717


author: Michal Schmidt <mschmidt@redhat.com> - 195-6
changelog:
  - Fix cyclical dep between systemd and systemd-libs.
  - Avoid broken build of test-journal-syslog.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873387
  - https://bugzilla.redhat.com/show_bug.cgi?id=872638


author: Michal Schmidt <mschmidt@redhat.com> - 195-7
changelog:
  - Revert udev killing cgroup patch for F18 Beta.
  - https://bugzilla.redhat.com/show_bug.cgi?id=873576


author: Lennart Poettering <lpoetter@redhat.com> - 195-8
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=873459
  - https://bugzilla.redhat.com/show_bug.cgi?id=878093


author: Michal Schmidt <mschmidt@redhat.com> - 196-2
changelog:
  - added spice-vdagentd.service to presets (Lennart, #876237)
  - BR cryptsetup-devel instead of the legacy cryptsetup-luks-devel provide name
    (requested by Milan Brož).
  - verbose make to see the actual build flags


author: Michal Schmidt <mschmidt@redhat.com> - 196-3
changelog:
  - Disable hardening on s390(x) because PIE is broken there and produces
    text relocations with __thread (#868839).


author: Michal Schmidt <mschmidt@redhat.com> - 197-2
changelog:
  - Added qemu-guest-agent.service to presets (Lennart, #885406).
  - Add missing pygobject3-base to systemd-analyze deps (Lennart).
  - Do not require hwdata, it is all in the hwdb now (Kay).
  - Drop dependency on dbus-python.


author: Michal Schmidt <mschmidt@redhat.com> - 201-2
changelog:
  - Automatically discover whether to run autoreconf and add autotools and git
    BuildRequires based on the presence of patches to be applied.
  - Use find -delete.


author: Harald Hoyer <harald@redhat.com> 202-2
changelog:
  - nspawn create empty /etc/resolv.conf if necessary
  - python wrapper: add sd_journal_add_conjunction()
  - fix s390 booting
  - Resolves: rhbz#953217


author: Harald Hoyer <harald@redhat.com> 202-3
changelog:
  - fix ENOENT for getaddrinfo
  - Resolves: rhbz#954012 rhbz#956035
  - crypt-setup-generator: correctly check return of strdup
  - logind-dbus: initialize result variable
  - prevent library underlinking


author: Lennart Poettering <lpoetter@redhat.com> - 204-5
changelog:
  - Rename 90-display-manager.preset to 85-display-manager.preset so that it actually takes precedence over 90-default.preset's "disable *" line (#903690)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 206-3
changelog:
  - add dependency on kmod >= 14
  - remove /var/log/journal to make journal non-persistant (#989750)
  - add hypervkvpd.service to presets (#924321)


author: Harald Hoyer <harald@redhat.com> 206-4
changelog:
  - journal: handle multiline syslog messages
  - man: Fix copy&paste error
  - core: synchronously block when logging
  - journal: immediately sync to disk as soon as we receieve an EMERG/ALERT/CRIT message
  - initctl: use irreversible jobs when switching runlevels
  - udev: log error if chmod/chown of static dev nodes fails
  - udev: static_node - don't touch permissions uneccessarily
  - tmpfiles: support passing --prefix multiple times
  - tmpfiles: introduce --exclude-prefix
  - tmpfiles-setup: exclude /dev prefixes files
  - logind: update state file after generating the session fifo, not before
  - journalctl: use _COMM= match for scripts
  - man: systemd.unit: fix volatile path
  - man: link up scope+slice units from systemd.unit(5)
  - man: there is no session mode, only user mode
  - journal: fix hashmap leak in mmap-cache
  - systemd-delta: Only print colors when on a tty
  - systemd: fix segv in snapshot creation
  - udev: hwdb - try reading modalias for usb before falling back to the composed one
  - udevd: respect the log-level set in /etc/udev/udev.conf
  - fstab-generator: respect noauto/nofail when adding sysroot mount


author: Harald Hoyer <harald@redhat.com> 206-5
changelog:
  - obsolete upstart
  Resolves: rhbz#978014
  - obsolete hal
  Resolves: rhbz#975589
  - service: always unwatch PIDs before forgetting old ones
  Resolves: rhbz#995197
  - units: disable kmod-static-nodes.service in containers
  - use CAP_MKNOD ConditionCapability
  - fstab-generator: read rd.fstab=on/off switch correctly
  - backlight: add minimal tool to save/restore screen brightness
  - backlight: instead of syspath use sysname for identifying
  - sysctl: allow overwriting of values specified in "later"
  - systemd-python: fix initialization of _Reader objects
  - udevd: simplify sigterm check
  - libudev: fix hwdb validation to look for the *new* file
  - units: make fsck units remain after exit
  - udev: replace CAP_MKNOD by writable /sys condition
  - libudev-enumerate.c:udev_enumerate_get_list_entry() fixed
  - journal: fix parsing of facility in syslog messages


author: Harald Hoyer <harald@redhat.com> 206-8
changelog:
  - support "debug" kernel command line parameter
  - journald: fix fd leak in journal_file_empty
  - journald: fix vacuuming of archived journals
  - libudev: enumerate - do not try to match against an empty subsystem
  - cgtop: fixup the online help
  - libudev: fix memleak when enumerating childs


author: Lukas Nykryn <lnykryn@redhat.com> - 207-2
changelog:
  - Advertise hibernation only if there's enough free swap
  - swap: create .wants symlink to 'auto' swap devices
  - Verify validity of session name when received from outside
  - polkit: Avoid race condition in scraping /proc
  Resolves: rhbz#1005142


author: Lukas Nykryn <lnykryn@redhat.com> - 207-5
changelog:
  - create /etc/rc.d/rc.local (#968401)
  - cgroup: always enable memory.use_hierarchy= for all cgroups (#1011575)
  - remove user@.service (#1019738)
  - drop some out-of-date references to cgroup settings (#1000004)
  - explain NAME in systemctl man page (#978954)


author: Harald Hoyer <harald@redhat.com> 207-6
changelog:
  - changed systemd-journal-gateway login shell to /sbin/nologin
  - backported a lot of bugfixes
  - udev: path_id - fix by-path link generation for scm devices
  Resolves: rhbz#888707


author: Lukas Nykryn <lnykryn@redhat.com> - 207-9
changelog:
  - treat reload failure as failure (#1036848)
  - improve journal performance (#1029604)
  - backport bugfixes (#1043525)
  - fix handling of trailing whitespace in split_quoted (#984832)
  - localed: match converted keymaps before legacy (#903776)
  - improve the description of parameter X in tmpfiles.d page (#1029604)
  - obsolete ConsoleKit (#1039761)
  - make rc.local more backward comaptible (#1039465)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 207-12
changelog:
  - shell-completion: remove load and dump from systemctl (#1048066)
  - delta: ensure that d_type will be set on every fs (#1050795)
  - tmpfiles: don't allow label_fix to print ENOENT when we want to ignore it (#1044871)
  - udev/net_id: Introduce predictable network names for Linux on System z (#870859)
  - coredumpctl: in case of error free pattern after print (#1052786)


author: Michal Sekletar <msekleta@redhat.com> - 208-1
changelog:
  - rebase to systemd-208 (#1063332)
  - do not create symlink /etc/systemd/system/syslog.service (#1055421)


author: Michal Sekletar <msekleta@redhat.com> - 208-2
changelog:
  - require redhat-release package
  - call systemd-tmpfiles after package installation (#1059345)
  - move preset policy out of systemd package (#903690)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-7
changelog:
  - setup tty permissions and group for /dev/sclp_line0 (#1070310)
  - cdrom_id: use the old MMC fallback (#1038015)
  - mount: don't send out PropertiesChanged message if actually nothing got changed (#1069718)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-8
changelog:
  - rules: mark loop device as SYSTEMD_READY=0 if no file is attached (#1067422)
  - utmp: make sure we don't write the utmp reboot record twice on each boot (#1053600)
  - rework session shutdown logic (#1047614)
  - introduce new stop protocol for unit scopes (#1064976)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-9
changelog:
  - fixes crashes in logind and systemd (#1073994)
  - run fsck before mouting root in initramfs (#1056661)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-11
changelog:
  - logind-session: save stopping flag (#1082692)
  - unit: add waiting jobs to run queue in unit_coldplug (#1083159)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-11.4
changelog:
  - util: reset signals when we fork off agents
  - util: fix minimal race where we might miss SIGTERMs when forking off an agent


author: Martin Hunt <hunt@redhat.com>
changelog:
  - Set Version to use version from autoconf.
  - Fix up some of the path names.
  - Add Requires and BuildRequires.


author: Roland McGrath <roland@redhat.com> - 0.4.1-1
changelog:
  - Many fixes and improvements since 0.2.2; relevant PRs include:
    1122, 1134, 1155, 1172, 1174, 1175, 1180, 1186, 1187, 1191, 1193, 1195,
    1197, 1205, 1206, 1209, 1213, 1244, 1257, 1258, 1260, 1265, 1268, 1270,
    1289, 1292, 1306, 1335, 1257


author: Roland McGrath <roland@redhat.com> - 0.4.2-1
changelog:
  - Many fixes and improvements: PRs 1344, 1260, 1330, 1295, 1311, 1368,
    1182, 1131, 1332, 1366, 1456, 1271, 1338, 1482, 1477, 1194.


author: Frank Ch. Eigler <fche@redhat.com> - 0.5-1
changelog:
  - Many fixes and improvements: 1425, 1536, 1505, 1380, 1329, 1828, 1271,
    1339, 1340, 1345, 1837, 1917, 1903, 1336, 1868, 1594, 1564, 1276, 1295


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.7-1
changelog:
  - PRs 2511 2453 2307 1813 1944 2497 2538 2476 2568 1341 2058 2220 2437
    1326 2014 2599 2427 2438 2465 1930 2149 2610 2293 2634 2506 2433


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.14-1
changelog:
  - Many robustness improvements: 1117, 1134, 1305, 1307, 1570, 1806,
    2033, 2116, 2224, 2339, 2341, 2406, 2426, 2438, 2583, 3037,
    3261, 3282, 3331, 3428 3519, 3545, 3625, 3648, 3880, 3888, 3911,
    3952, 3965, 4066, 4071, 4075, 4078, 4081, 4096, 4119, 4122, 4127,
    4146, 4171, 4179, 4183, 4221, 4224, 4254, 4281, 4319, 4323, 4326,
    4329, 4332, 4337, 4415, 4432, 4444, 4445, 4458, 4467, 4470, 4471,
    4518, 4567, 4570, 4579, 4589, 4609, 4664


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-1
changelog:
  - Add crash-devel buildreq to build staplog.so crash(8) module.
  - Many robustness & functionality improvements:


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-3
changelog:
  - Add zlib-devel to buildreq; missing from crash-devel
  - Process testsuite .stp files for #!stap->#!/usr/bin/stap


author: Jonathan Lebon <jlebon@redhat.com> - 2.4-3
changelog:
  - Backport fixes for: 1054962, 1054956, 1054954, 1044429
  - Backport boot-time probing feature (1051649)


author: Jonathan Lebon <jlebon@redhat.com> - 2.4-10
changelog:
  - Apply spec file patches to this one, not the tarred one
  - Add missing autoreconf patch for backport feature (1051649)


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.12-2
changelog:
  - Package now named just tomcat instead of tomcat7
  - Removed Provides:  tomcat-log4j
  - Switched to apache-commons-* names instead of jakarta-commons-* .
  - Remove the old changelog
  - BR/R java >= 1:1.6.0 , same for java-devel
  - Removed old tomcat6 crap


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.14-2
changelog:
  - Fixed http source link
  - Securify some permissions
  - Added licenses for el-api and servlet-api
  - Added dependency on jpackage-utils for the javadoc subpackage


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.22-2
changelog:
  - Move tomcat-juli.jar to lib package
  - Drop %update_maven_depmap as in tomcat6
  - Provide native systemd unit file ported from tomcat6


author: Joseph D. Wagner <joe@josephdwagner.info> 0:7.0.23-3
changelog:
  - Added support to /usr/sbin/tomcat-sysd and /usr/sbin/tomcat for
    starting tomcat with jsvc, which allows tomcat to perform some
    privileged operations (e.g. bind to a port < 1024) and then switch
    identity to a non-privileged user. Must add USE_JSVC="true" to
    /etc/tomcat/tomcat.conf or /etc/sysconfig/tomcat.


author: Krzysztof Daniel <kdaniel@redhat.com> 0:7.0.23-5
changelog:
  - Exported javax.servlet.* packages in version 3.0 as 2.6 to make
    servlet-api compatible with Eclipse.


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.25-1
changelog:
  - Updated to 7.0.25
  - Removed EntityResolver patch (changes already in upstream sources)
  - Place poms and depmaps in the same package as jars
  - Added javax.servlet.descriptor to export-package of servlet-api
  - Move several chkconfig actions and reqs to systemv subpackage
  - New maven depmaps generation method
  - Add patch to support java7. (patch sent upstream).
  - Require java >= 1:1.6.0


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.28-1
changelog:
  - Updated to 7.0.28
  - Resolves: rhbz 820119 Remove bundled apache-commons-dbcp
  - Resolves: rhbz 814900 Added tomcat-coyote POM
  - Resolves: rhbz 810775 Remove systemv stuff from %post scriptlet
  - Remove redhat-lsb R


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.29-1
changelog:
  - Updated to 7.0.29
  - Add pidfile as tmpfile
  - Use systemd for running as unprivileged user
  - Resolves: rhbz 847751 upgrade path was broken
  - Resolves: rhbz 850343 use new systemd-rpm macros


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.34-1
changelog:
  - Updated to 7.0.34
  - ecj >= 4.2.1 now required
  - Resolves: rhbz 889395 concat classpath correctly; chdir to $CATALINA_HOME


author: David Knox <dknox@redhat.com> - 0:7.0.42-2
changelog:
  - Resolves: rhbz#1056673 Invocation of useradd with shell
  - other than sbin nologin
  - Resolves: rhbz#1056677 preun systemv scriptlet unconditionally
  - stops service
  - Resolves: rhbz#1056696 init.d tomcat does not conform to RHEL7
  - systemd rules. systemv subpackage is removed.
  - Resolves: CVE-2013-4286
  - Resolves: CVE-2013-4322
  - Resolves: CVE-2014-0050
  - Built for rhel-7 RC


author: David Knox <dknox@redhat.com> - 0:7.0.42-3
changelog:
  - Related: CVE-2013-4286. increment build number. missed doing
  - it. 
  - Resolves: rhbz#1038183 remove BR for ant-nodeps. it's
  - no long used.


author: David Knox <dknox@redhat.com> - 0:7.0.42-5
changelog:
  - Related: CVE-2013-4286
  - Related: CVE-2013-4322
  - Related: CVE-2014-0050
  - revisit patches for above.


author: David Knox <dknox@redhat.com> - 0:7.0.42-6
changelog:
  - Resolves: CVE-2014-0099 Fix possible overflow when parsing
  - long values from byte array
  - Resolves: CVE-2014-0096 Information discloser process XSLT
  - files not subject to same constraint running under
  - java security manager
  - Resolves: CVE-2014-0075 Avoid overflow in ChunkedInputFilter.


author: David Knox <dknox@redhat.com> - 0:7.0.42-7
changelog:
  - Related: CVE-2014-0099 incrementing release so rpmdiff doesn't complain about
  - no new entries in the changelog


author: Jan Vcelak <jvcelak@redhat.com> 2.1.0-1
changelog:
  - new release:
    - daemon: allow running without selected profile
    - daemon: fix profile merging, allow only safe characters in profile names
    - daemon: implement missing methods in DBus interface
    - daemon: implement profile recommendation
    - daemon: improve daemonization, PID file handling
    - daemon: improved device matching in profiles, negation possible
    - daemon: various internal improvements
    - executables: check for EUID instead of UID
    - executables: run python with -Es to increase security
    - plugins: cpu - fix cpupower execution
    - plugins: disk - fix option setting
    - plugins: mounts - new, currently supports only barriers control
    - plugins: sysctl - fix a bug preventing settings application
    - powertop2tuned: speedup, fix crashes with non-C locales
    - powertop2tuned: support for powertop 2.2 output
    - profiles: progress on replacing scripts with plugins
    - tuned-adm: bash completion - suggest profiles from all supported locations
    - tuned-adm: complete switch to D-bus
    - tuned-adm: full control to users with physical access


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.1.2-1
changelog:
  - new release:
    - systemtap {disk,net}devstat: fix typo in usage
    - switched to configobj parser
    - latency-performance: disabled THP
    - fixed fd leaks on subprocesses


author: Jan Vcelak <jvcelak@redhat.com> 2.2.0-1
changelog:
  - new release:
    - remove nobarrier from virtual-guest (data loss prevention)
    - devices enumeration via udev, instead of manual retrieval
    - support for dynamically inserted devices (currently disk plugin)
    - dropped rfkill plugins (bluetooth and wifi), the code didn't work


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.1-1
changelog:
  - new release:
    - audio plugin: fixed error handling in _get_timeout
    - removed cpupower dependency, added sysfs fallback
    - powertop2tuned: fixed parser crash on binary garbage
      resolves: rhbz#914933
    - cpu plugin: dropped multicore_powersave as kernel upstream already did
    - plugins: options manipulated by dynamic tuning are now correctly saved and restored
    - powertop2tuned: added alias -e for --enable option
    - powertop2tuned: new option -m, --merge-profile to select profile to merge
    - prefer transparent_hugepage over redhat_transparent_hugepage
    - recommend: use recommend.conf not autodetect.conf
    - tuned.service: switched to dbus type service
      resolves: rhbz#911445
    - tuned: new option --pid, -P to write PID file
    - tuned, tuned-adm: added new option --version, -v to show version
    - disk plugin: use APM value 254 for cleanup / APM disable instead of 255
      resolves: rhbz#905195
    - tuned: new option --log, -l to select log file
    - powertop2tuned: avoid circular deps in include (one level check only)
    - powertop2tuned: do not crash if powertop is not installed
    - net plugin: added support for wake_on_lan static tuning
      resolves: rhbz#885504
    - loader: fixed error handling
    - spec: used systemd-rpm macros
      resolves: rhbz#850347


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.2-1
changelog:
  - new-release:
    - cpu plugin: fixed cpupower workaround
    - cpu plugin: fixed crash if cpupower is installed


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.2-4
changelog:
  - lock CPU to C1 instead of C0 in latency-performance profile
    resolves: rhbz#1013085
  - readahed multiply set to 4 in throughput-performance profile
    resolves: rhbz#987570
  - packaged pmqos-static script for debugging purposes
    resolves: rhbz#1015676
  - added global configuration file with the possibility to globally
    disable the dynamic tuning and it is by default disabled on RHEL
    resolves: rhbz#1006427


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-1
changelog:
  - new-release
    resolves: rhbz#1020743
    - audio plugin: fixed audio settings in standard profiles
    - video plugin: fixed tunings
    - daemon: fixed crash if preset profile is not available
    - man: various updates and corrections
    - functions: fixed usb and bluetooth handling
    - tuned: switched to lightweighted pygobject3-base
    - daemon: added global config for dynamic_tuning
    - utils: added pmqos-static script for debug purposes
    - throughput-performance: various fixes
    - tuned: added global option update_interval
    - plugin_cpu: added support for x86_energy_perf_policy
      resolves: rhbz#1015675
    - dbus: fixed KeyboardInterrupt handling
    - plugin_cpu: added support for intel_pstate
      resolves: rhbz#996722
    - profiles: various fixes
    - profiles: added desktop profile
      resolves: rhbz#996723
    - tuned-adm: implemented non DBus fallback control
    - profiles: added sap profile
    - tuned: lowered CPU usage due to python bug


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-2
changelog:
  - fixed race condition in the start/stop code
    resolves: rhbz#1028119
  - improved tuned responsiveness
    resolves: rhbz#1028122


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-7
changelog:
  - throughput-performance is default for the server
    resolves: rhbz#1063481
  - THP not disabled in the latency-performance profile
    resolves: rhbz#1064510
  - added network-latency profile
    resolves: rhbz#1052418
  - added network-throughput profile
    resolves: rhbz#1052421


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-10
changelog:
  - added requirement to kernel-tools
    resolves: rhbz#1073008
  - made cpupower.service conflicting
    resolves: rhbz#1073392


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in %{_docdir};
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006p-1
changelog:
  - Upstream 2006p
    - Official version of Western Australia DST trial changes
    - Latitude/longitude changes for Europe/Jersey and Europe/Podgorica


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a
    - Updates to Bahamas, they will be in sync with 2007 US DST change
    - New zone Australia/Eucla
    - Africa/Asmera renamed to Africa/Asmara, link created
    - Atlantic/Faeroe renamed to Atlantic/Faroe, link created
  - Packaging
    - Adding BuildRequires: glibc-common >= 2.5.90-7 to build tzdata
      with extended 64-bit format necessary for dates beyond 2037


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007e-1
changelog:
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Fix licensing tag.
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, New South Wales and Lord Howe
      Island are changing their DST rules effective next year
    - Sync several Antarctic station's rules with the New Zealand
    - leapseconds contain changes from the most recent IERS bulletin


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1


author: Petr Machata <pmachata@redhat.com> - 2007i-1
changelog:
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00


author: Petr Machata <pmachata@redhat.com> - 2008b-1
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information


author: Petr Machata <pmachata@redhat.com> - 2008c-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Fix a typo in Java subpackage name


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Changes for Mauritius (extends DST to years to come)
    - Palestine changes clocks for the duration of Ramadan
    - Argentina will start DST on Sunday October 19, 2008
    - Brazil will start DST on 2008-10-19
  - Drop Pakistan and Morocco patches


author: Petr Machata <pmachata@redhat.com> - 2008h-1
changelog:
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue


author: Petr Machata <pmachata@redhat.com> - 2008i-1
changelog:
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).


author: Petr Machata <pmachata@redhat.com> - 2009a-1
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute


author: Petr Machata <pmachata@redhat.com> - 2009d-1
changelog:
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15


author: Petr Machata <pmachata@redhat.com> - 2009e-1
changelog:
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Egypt ends DST on 2009-09-24


author: Petr Machata <pmachata@redhat.com> - 2009f-1
changelog:
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Drop Pakistan patch


author: Petr Machata <pmachata@redhat.com> - 2009h-2
changelog:
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch


author: Petr Machata <pmachata@redhat.com> - 2009k-1
changelog:
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file


author: Petr Machata <pmachata@redhat.com> - 2009m-1
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch


author: Petr Machata <pmachata@redhat.com> - 2009m-2
changelog:
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1 (tzdata-2009m-karachi.patch)


author: Petr Machata <pmachata@redhat.com> - 2009o-1
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)


author: Petr Machata <pmachata@redhat.com> - 2009u-1
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
  - Dropped tzdata-2009o-argentinas.patch


author: Petr Machata <pmachata@redhat.com> - 2010c-1
changelog:
  - Upstream 2010a
    - Source code cleanups
    - Historical timestamps for Bangladesh
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October


author: Petr Machata <pmachata@redhat.com> - 2010e-1
changelog:
  - Upstream 2010d
    - The DST change in Bangladesh takes place a minute earlier
    - Fiji to end DST on 2010-03-28 at 03:00, about a month earlier
    - Samoa to observe DST this year; they didn't observe DST last year
    - DST in Chile extended to 3 April
  - Upstream 2010e:
    - Fix a typo in Bangladesh DST rule


author: Petr Machata <pmachata@redhat.com> - 2010f-1
changelog:
  - Upstream 2010f:
    - Changes to Australian stations in Antarctica
    - Correct 2010 Samoa DST start date
    - New zone Antarctica/Macquarie
    - Change Syria DST start from last Friday in March to first Friday
      in April in 2010 and forward
  - Upstream 2010g proposal (tzdata-2010f-g.patch):
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates


author: Petr Machata <pmachata@redhat.com> - 2010f-3
changelog:
  - Tunisia not to observe DST in 2010 (tzdata-2010g-tunis.patch)
  - Pakistan not to observe DST in 2010 (tzdata-2010g-karachi.patch)


author: Petr Machata <pmachata@redhat.com> - 2010h-2
changelog:
  - Upstream 2010g:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates
  - Upstream 2010h:
    - No DST in Tunisia in 2010 and forward
    - No DST in Pakistan in 2010 and forward
  - Dropped tzdata-2010g-tunis.patch
  - Dropped tzdata-2010f-g.patch
  - Dropped tzdata-2010g-karachi.patch


author: Petr Machata <pmachata@redhat.com> - 2010i-1
changelog:
  - Upstream 2010i:
    - Morocco will have DST from 2010-05-02 to 2010-08-08
    - San Luis, Argentina will keep permanent DST after April 11, 2010
    - Updates of historical stamps for Taiwan


author: Petr Machata <pmachata@redhat.com> - 2010j-1
changelog:
  - Upstream 2010j:
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2010k-1
changelog:
  - Upstream 2010k:
   - Egypt has announced that DST will be off during Ramadan, but
     DST will resume afterwards (August 10, 2010 - September 9, 2010)


author: Petr Machata <pmachata@redhat.com> - 2010l-2
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010


author: Petr Machata <pmachata@redhat.com> - 2010n-1
changelog:
  - Upstream 2010m:
    - Hong Kong didn't observe DST in 1977
    - In zone.tab, remove obsolete association of Vostok Station with
      South Magnetic Pole; add association with Lake Vostok
  - Upstream 2010n:
    - Change end of DST in Samoa in 2011 from 2011-04-03 0:00 to
      2011-04-03 1:00


author: Petr Machata <pmachata@redhat.com> - 2011b-1
changelog:
  - Upstream 2011b:
    - America/North_Dakota/Beulah: Mercer County, North Dakota, changed
      from the mountain time zone to the central time zone


author: Petr Machata <pmachata@redhat.com> - 2011b-2
changelog:
  - Update of historical stamps for Juneau, Sitka, and histcurrent stamps
    for Metlakatla.  Sitka and Metlakatla are new zones.
  - Delay end of DST in Chile in 2011 until first Sunday in April. (tzdata-2011b-c.patch)


author: Petr Machata <pmachata@redhat.com> - 2011d-1
changelog:
  - Upstream 2011d:
    - Change end of DST in Samoa in 2011.
    - Change start of DST in Cuba in 2011.
    - Move start of DST in Turkey by one day in 2011.
  - Dropped tzdata-2011b-c.patch


author: Petr Machata <pmachata@redhat.com> - 2011g-1
changelog:
  - Upstream 2011e:
    - Morocco introduced DST for 2011 from April 2 to July 31.
    - Delay end of DST in Chile in 2011 until May 7.
  - Upstream 2011f:
    - The Falkland Islands will not turn back clocks this winter, but
      stay on daylight saving time.
  - Upstream 2011g:
    - Egypt abandons DST in 2011 (and forward)
  - Dropped tzdata-2011d-chile.patch
  - Dropped tzdata-2011d-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2011h-1
changelog:
  - Upstream 2011h:
    - Russia abandons DST in 2011.
    - *.tab: change AN (Netherlands Antilles) to CW (Curacao)


author: Petr Machata <pmachata@redhat.com> - 2011h-2
changelog:
  - Patch for upcoming change in Newfoundland.  The transition time
    changes from 12:01 AM to 2:00 AM.


author: Petr Machata <pmachata@redhat.com> - 2011h-1
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Resolved: #734063


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #737896


author: Petr Machata <pmachata@redhat.com> - 2011l-1
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #746183


author: Petr Machata <pmachata@redhat.com> - 2011l-1
changelog:
  - Rebase to 2011n
    - Drop all patches, including the Kemerovo patch, which is not in
      upstream
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Resolved: #748778


author: Petr Machata <pmachata@redhat.com> - 2012b-1
changelog:
  - Rebase to 2012b; changes vs. 2011n-5:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March


author: Petr Machata <pmachata@redhat.com> - 2012d-1
changelog:
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
    and end at 3 am on Sunday 20th January 2013.  Guess it will be like
    that in following years as well.
  - Resolves: #857231


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Patsy Franklin <pfrankli@redhat.com> 2013h-1
changelog:
  - Rebase to 2013h
    - Libya switched to using UTC+2 without DST
    - Western Sahara (Africa/ElAaiun) uses Morocco's DST rules
    - Acres and Amazon swithc to UTC-4 and UTC-5 on 2013-11-10
    - Add entries for DST transition in Morocco in the year 2038


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zones changes effective on 2014-10-26 
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST
      on 2014-11-02 at 02:00.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Patsy Franklin <pfrankli@redhat.com> - 2014i-1
changelog:
  - Rebase to 2014i
    - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
    - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
      that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.


author: Dan Horák <dan[at]danny.cz> - 1.3.3-4
changelog:
  - Do not generate debug information to prevent linker memory exhaustion on s390 with its 2 GB address space


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.8.0-3
changelog:
  - Add upstream patch to fix crash when SSE2 isn't present
  - Add upstream patch to flickering when some widgets are drawn


author: Kalev Lember <kalevlember@gmail.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Dropped the backported patches
  - Remove lib64 rpaths with chrpath
  - Update gsettings rpm scriptlets


author: Daniel Drake <dsd@laptop.org> - 1.9.5-2
changelog:
  - Add upstream patch to fix build without JIT (#843428)
  - Add upstream patch to fix build with latest gcc/bison


author: Kalev Lember <kalevlember@gmail.com> - 1.11.4-1
changelog:
  - Update to 1.11.4
  - Remove conditional pango deps; the build now uses harfbuzz directly
  - BR libwebp-devel
  - Drop upstreamed librt linking patch


author: Matthias Clasen <mclasen@redhat.com> - 2.0.1-2
changelog:
  - Split libwebkit2gtk off into a subpackage to avoid
    pulling this 35M behemoth of a library onto the livecd
    needlessly


author: Kalev Lember <kalevlember@gmail.com> - 2.0.2-2
changelog:
  - Remove glib-compile-schemas scriptlets: the schemas are no longer installed
  - Add ldconfig calls to the libwebkit2gtk subpackage
  - Remove rpath from MiniBrowser
  - Re-enable full debuginfo (#861452)


author: Tomas Popela <tpopela@redhat.com> - 2.0.4-6
changelog:
  - Enable higher compression for output rpms
  - Resolves: rhbz#1039590
  - Avoid video player to set system volume to 100%
  - Resolves: rhbz#1029783


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 1.5.0
  - they removed the man page from the distribution (Duh!) and I added it back
    from 1.4.5. Hey, removing the man page is DUMB!


author: Bill Nottingham <notting@redhat.com>
changelog:
  - setlocale for LC_CTYPE too, or else all the translations think their
    characters are unprintable.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.7
  - Require perl for building (to get man pages)
  - Don't include the Japanese po file, it's now included
  - Use %{_tmppath}
  - no patches necessary
  - Make /etc/wgetrc noreplace
  - More docs


author: Karsten Hopp <karsten@redhat.de> 1.9.1-7
changelog:
  - clean up manpage (#117519)
  - buildrequire texinfo (#123780)
  - LFS patch, based on wget-LFS-20040630.patch from Leonid Petrov
    (#123524, #124628, #115348)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-18
changelog:
  - add support for --protocol-directories option as documented
    in the man page (Ville Skyttä, #145571)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-19
changelog:
  - Don't set actime to access time of the remote file or tmpwatch might 
    remove the file again (#146440).  Set it to the current time instead.
    timestamping checks only modtime, so this should be ok.


author: Karsten Hopp <karsten@redhat.de> 1.9.1-20
changelog:
  - texi2pod doesn't handle texinfo xref's. rewrite some lines so that
    the man page doesn't have incomplete sentences anymore (#140470)


author: Karsten Hopp <karsten@redhat.de> 1.10-2
changelog:
  - update to wget-1.10
    - drop passive-ftp patch, already in 1.10
    - drop CVS patch
    - drop LFS patch, similar fix in 1.10
    - drop protdir patch, similar fix in 1.10
    - drop actime patch, already in 1.10


author: Karsten Hopp <karsten@redhat.com> 1.10.2-13
changelog:
  - merge review changes (#226538)
    - use version/release/... in buildroot tag
    - remove BR perl
    - use SMP flags
    - use make install instead of %makeinstall
    - include copy of license
    - use Requires(post)/Requires(preun)
    - use optflags
    - remove trailing dot from summary
    - change tabs to spaces


author: Karsten Hopp <karsten@redhat.com> 1.10.2-15
changelog:
  - fix discarding of expired cookies
  - escape non-printable characters
  - drop to11 patch for now (#223754, #227853, #227498)


author: Karsten Hopp <karsten@redhat.com> 1.11.3-1
changelog:
  - wget-1.11.3, downgrades the combination of the -N and -O options
    to a warning instead of an error


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Jon Ciesla <limburgher@gmail.com> - 1.13.4-1
changelog:
  - New upstream, BZ 730286.
  - Modified path patch.
  - subjectAltNames patch upstreamed.
  - Specified openssl at config time.


author: Tomas Hozza <thozza@redhat.com> 1.14-3
changelog:
  - Added libuuid-devel to BuildRequires to use libuuid functions
    in "src/warc.c" functions (#865421)


author: Tomas Hozza <thozza@redhat.com> - 1.14-5
changelog:
  - Added BuildRequires: perl-podlators for pod2man
  - Patched manpage to silent new Tex errors
  - Resolves: (#914571)


author: Tomas Hozza <thozza@redhat.com> - 1.14-6
changelog:
  - add missing options accept-regex and reject-regex to man page
  - fix errors in texi2pod introduced in Perl-5.18


author: Tomas Hozza <thozza@redhat.com> - 1.14-8
changelog:
  - Fix deadcode and possible use of NULL in vprintf (#913153)
  - Add documentation for --regex-type and --preserve-permissions
  - Fix --preserve-permissions to work as documented (and expected)
  - Fix bug when authenticating using user:password@url syntax (#912358)
  - Document and fix --backups option


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#227140)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokal <rvokal@redhat.com> 0.99.7-0.pre2
changelog:
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - 0.99.7 prerelease 2


author: Radek Vokál <rvokal@redhat.com> 1.0.3-1
changelog:
  - upgrade to 1.0.3
  - Security-related bugs in the NCP dissector, zlib compression code, and Tektronix .rf5 file parser have been fixed. 
  - WPA group key decryption is now supported. 
  - A bug that could cause packets to be wrongly dissected as "Redback Lawful Intercept" has been fixed.


author: Radek Vokal <rvokal@redhat.com> - 1.2.5-1
changelog:
  - upgrade to 1.2.5
  - fixes security vulnaribilities, see http://www.wireshark.org/security/wnpa-sec-2009-09.html


author: Jeff Layton <jlayton@redhat.com> - 1.2.6-2
changelog:
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Jan Safranek <jsafrane@redhat.com> - 1.4.1-1
changelog:
  - upgrade to 1.4.1
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.4.1.html
  - Own the %{_libdir}/wireshark dir (#644508)
  - associate *.pcap files with wireshark (#641163)


author: Jan Safranek <jsafrane@redhat.com> - 1.4.1-2
changelog:
  - temporarily disable zlib until
    https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4955 is resolved (#643461)


author: Jan Safranek <jsafrane@redhat.com> - 1.4.2-2
changelog:
  - rework the Wireshark security (#657490). Remove the console helper and
    allow only members of new 'wireshark' group to capture the packets.


author: Jan Safranek <jsafrane@redhat.com> - 1.4.3-2
changelog:
  - create the 'wireshark' group as system, not user
  - add few additional header files to -devel subpackage (#671997)


author: Jan Safranek <jsafrane@redhat.com> - 1.6.0-2
changelog:
  - added wspy_dissectors directory to the package
    - other packages can add Python plugins there
    - as side effect, removed following message:
      [Errno 2] No such file or directory: '/usr/lib64/wireshark/python/1.6.0/wspy_dissectors'
  - enabled zlib support


author: Jan Safranek <jsafrane@redhat.com> - 1.6.0-3
changelog:
  - fixed Fedora-specific message when user is not part of 'wireshark' group
    - now it does not contain '<' and '>' characters (#713545)


author: Steve Dickson <steved@redhat.com> - 1.6.2-3
changelog:
  - Fixed a regression introduce by upstream patch r38306
      which caused v4.1 traffic not to be displayed.
  - Added v4 error status to packet detail window.


author: Jan Safranek <jsafrane@redhat.com> - 1.6.2-4
changelog:
  - updated autoconf macros and pkgconfig file in wireshark-devel to reflect
    current config.h (#746655)


author: Jan Safranek <jsafrane@redhat.com> - 1.6.4-1
changelog:
  - upgrade to 1.6.4
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.6.4.html
  - build with c-ares and libpcap (#759305)
  - fixed display of error message boxes on startup in gnome3 (#752559)


author: Jan Safranek <jsafrane@redhat.com> - 1.6.5-2
changelog:
  - fixed wireshark crashing when using combo box in import dialog (#773290)
  - added AES support into netlogon dissector


author: Jan Safranek <jsafrane@redhat.com> - 1.8.2-3
changelog:
  - added back compatibility with RHEL6
  - GeoIP build dependency made also conditional on with_GeoIP variable


author: Peter Hatina <phatina@redhat.com> 1.10.0-9
changelog:
  - security patches
  - Resolves: CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-4936
              CVE-2013-4083
              CVE-2013-3557


author: Peter Hatina <phatina@redhat.com> 1.10.3-1
changelog:
  - upgrade to 1.10.3
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.10.3.html
  - Resolves: #1026649
              CVE-2013-6336
              CVE-2013-6337
              CVE-2013-6338
              CVE-2013-6339
              CVE-2013-6340


author: Peter Hatina <phatina@redhat.com> - 1.10.3-8
changelog:
  - remove last data source due to HTTP dissector, which was
    spewing too much output
  - Related: #1011339


author: Peter Hatina <phatina@redhat.com> - 1.10.3-9
changelog:
  - security patches
  - Resolves: CVE-2014-2281
              CVE-2014-2282
              CVE-2014-2283
              CVE-2014-2299


author: Peter Hatina <phatina@redhat.com> - 1.10.3-11
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6424
              CVE-2014-6425
              CVE-2014-6426
              CVE-2014-6427
              CVE-2014-6428
              CVE-2014-6429


author: Vivek Lakshmanan <vivekl@redhat.com> 0:2.6.2-2jpp_2rh
changelog:
  - Added new Source1 URL and added new %setup to expand it under the
    expanded result of Source0.
  - Updated Patch0 to fix version discrepancies.
  - Added build requirement for xml-commons-apis


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:2.6.2-3jpp
changelog:
  - Updated Patch #0 to fix breakage using BEA 1.4.2 SDK, new patch
    from <mwringe@redhat.com> and <vivekl@redhat.com>.


author: Gary Benson <gbenson@redhat.com> 0:2.6.2-4jpp_3fc
changelog:
  - Revert xjavac classpath workaround, and patch to use libgcj's
    classes instead of those in xml-commons (#152255).


author: Gary Benson <gbenson@redhat.com> 0:2.6.2-4jpp_8fc
changelog:
  - Remove the tools tarball, and build xjavac from source.
  - Replace classpath workaround to xjavac task and use
    xml-commons classes again (#152255).


author: Gary Benson <gbenson at redhat.com> 0:2.6.2-5jpp
changelog:
  - Remove the tools tarball, and build xjavac from source.
  - Patch xjavac to fix the classpath under libgcj too.


author: Ralph Apel <r.apel at r-apel.de> 0:2.7.1-2jpp
changelog:
  - First JPP-1.7 release
  - use tools subdir and give it as java.endorsed.dirs (for java-1.4.2-bea e.g.)


author: Matt Wringe <mwringe at redhat.com> 0:2.7.1-7jpp
changelog:
  - Add conditional native compiling
  - Add missing requires for javadocs
  - Add missing requires for post and preun
  - Update version to 7jpp at Fedora's request


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.0-1
changelog:
  - Update to 2.9.0: This is the version Eclipse expects, previously the OSGi
    manifest was lying about its version :-o
  - Enable manual sub-package now xml-stylebook is in Fedora.
  - Drop GCJ support.
  - Minor changes to spec to make it more conforming to the guidelines.
  - Drop the libgcj patch, we don't seem to need it anymore.
  - Add the OSGi manifest as part of the build instead of the install.
  - Fix packaging bug RHBZ #472646.


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.0-2
changelog:
  - Add a build dep on a font package because the JDK is missing a dependency
    to function correctly in headless mode. See RHBZ #478480 and #521523.
  - Fix groups.


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.0-4
changelog:
  - Fix broken links in manual and fix javadoc requires.
  - Build 1.5 bytecode instead of 1.6, for compatibility.


author: Mat Booth <fedora@matbooth.co.uk> - 2.11.0-1
changelog:
  - Update to latest upstream version.
  - Provide JAXP 1.4.
  - Fix some minor rpmlint warnings.
  - Add dep on xalan-j2.
  - Fix javadoc taglets.


author: Marek Goldmann <mgoldman@redhat.com> - 2.11.0-5
changelog:
  - Use non-versioned jar name, RHBZ#800463
  - Cleanup in spec file to follow new guidelines
  - Consolidated javadocs packages
  - Removed manual subpackage because of stylebook issues, see comment on obsolete


author: Paul Nasrat <pauln@truemesh.com> - 0:0.12.3-0.fdr.1
changelog:
  - Revert to imakefile and XFree86-sdk
  - Include missing sdk headers - push upstream
  - don't build synclient and syndaemon for now


author: Jarod Wilson <jwilson@redhat.com> 0.14.6-1
changelog:
  - Update to 0.14.6 w/permission from krh
  - Adds two-finger scrolling capability on supported hardware


author: Adam Jackson <ajax@redhat.com> 0.14.6-4
changelog:
  - 10-synaptics.fdi: Get hal to report the X driver as synaptics for
    touchpads we support.
  - synaptics-0.14.6-tap-to-click.patch: Disable tap to click by default in
    the name of accessibility.


author: Matt Domsch <Matt_Domsch@dell.com> 0.14.6-5
changelog:
  - synaptics-0.14.6-poll-delay.patch: make poll interval user configurable
    http://www.bughost.org/pipermail/power/2008-January/001234.html
  - synaptics-0.14.6-poll-200ms.patch: reduce default poll from 20ms to 200ms


author: Peter Hutterer <peter.hutterer@redhat.com> 0.15.0-1
changelog:
  - Initial RPM release - this is the relicensed version of the old synaptics
    package.
  - Includes Changelog from synaptics package.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.15.0-4
changelog:
  - xf86-input-synaptics-0.15.0-dont-lose-buttonup.patch: force a click if
    middle button emulation times out during ReadInput cycle. RH #233717.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.15.0-6
changelog:
  - xf86-input-synaptics-0.15.0-edges.patch: updated to improve edge calculation
    and acceleration factors.
  - xf86-input-synaptics-0.15.0-preprobe patch: pre-probe eventcomm devices for
    axis ranges if specifed with Device option.
  - update fdi file to support "bcm5974" devices.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.15.1-1
changelog:
  - update to 0.15.1
  - remove xf86-input-synaptics-0.15.0-tap.patch: merged in upstream.
  - update patches to apply against 0.15.1.
  - xf86-input-synaptics-0.15.1-dont-crash-without-Device.patch: don't crash if
    neither Device nor Path is given.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.15.2-1
changelog:
  - update to 0.15.2
  - remove patches merged upstream.
  - xf86-input-synaptics-0.15.2-maxtapmove.patch: scale MaxTapMove parameter
    depending on touchpad height #462211


author: Peter Hutterer <peter.hutterer@redhat.com> 0.15.99-0.1
changelog:
  - Today's git snapshot.
  - Add devel subpackage.
  - remove xf86-input-synaptics-0.15.2-maxtapmove.patch: driver autoscales now.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.99.1-2
changelog:
  - 10-synaptics.fdi: if something has capabilities input.touchpad match it.
    Don't bother about product names.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.99.3-3
changelog:
  - Require xorg-x11-server-devel 1.6 to build
  - Update fdi file with comments on how to merge your own keys.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.0-3
changelog:
  - Revert last commit, this is against Fedora policy.
    https://fedoraproject.org/wiki/Packaging:Guidelines#Configuration_files


author: Adam Jackson <ajax@redhat.com> 1.2.0-3
changelog:
  - synaptics-1.2.0-timer-fix.patch: Don't free the timer in DeviceClose, since
    that gets called on VT switch. (#540248)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-2
changelog:
  - 10-synaptics.conf: new xorg.conf.d config file, replacing the fdi.
  - 10-synaptics.fdi: drop, X server doesn't use HAL anymore.
  - Drop HAL require


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.2-3
changelog:
  - Install config snippet in $datadir/X11/xorg.conf.d.
  - Rename to 50-synaptics.conf to match upstream better.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.2-4
changelog:
  - 70-touchpad-rules.conf: label Dell Mini touchpads as broken in udev,
    requiring special config.
  - 50-synaptics.conf: add dell mini quirk for bottom edge. This is only
    partially useful for now, a real patch is coming soon.
    One half of the fix for #573463.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.2-5
changelog:
  - Change ClickFinger defaults to 0 if there's more than one.
  - Add ClickPad support, this requires a kernel patch as well (#590835)
  - pop the udev rule into /lib/udev/rules.d instead of $sysconfigdir


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.99.1-4.20100819
changelog:
  - today's git snapshot
  - synaptics-1.2.99.1-increase-accel-factor.patch: increase default accel
    factor to something more useful (#621591)
  - drop unused patches


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.2-6
changelog:
  - Fix memory corruption on resume. Triggered if fingers are still on the
    touchpad when the device is disabled.


author: Martin Stransky <stransky@redhat.com> - 17.0.4-1
changelog:
  - Update to 17.0.4 ESR
  - Added fix for mozbz#239254 - [Linux] Support disk cache on a local path
  - Use an official firefox tarball


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Shawn Starr <shawn.starr@rogers.com>
changelog:
  - Add yum-utils.1 manual page
  - Rename yum-complete-transaction manual page to 8
  - Move yum-complete-transaction to /usr/sbin


author: Tim Lauridsen <timlau@fedoraproject.org>
changelog:
  - Remove yum-kernel-module & yum-fedorakmod plugins (no obsoleting yet)
  - Remove yum-skip-broken plugin leftovers


author: Tim Lauridsen <timlau@fedoraproject.org>
changelog:
  - set yum require to 3.2.21 (the 3.2.21 in rawhide is patched to yum head, so it matches the need yum 3.2.22 code)
  - Added versioned Provides: yum-<pluginname> to make rpm/yum happy.
  - yum-updateonboot is not renamed and dont need Obsoletes/Conflicts/Provides


author: Seth Vidal <skvidal at fedoraproject.org>
changelog:
  - add python compileall to all plugins so we get .pyc/.pyo files in them
  - fixes https://bugzilla.redhat.com/show_bug.cgi?id=493174


author: Tim Lauridsen <timlau@fedoraproject.org>
changelog:
  - remove basearchonly since all versions of yum for quite some time obsolete it
  - truncate changelog to last 2 years


author: Tim Lauridsen <timlau@fedoraproject.org>
changelog:
  - mark as 1.1.25
  - add touch /etc/yum.repos.d/_local.repo to install section
  - this need for for the ghost in files section of yum-plugin-local


author: Zdenek Pavlas <zpavlas@redhat.com> - 1.1.31-9
changelog:
  - Update to latest HEAD.
  - Added pluginhome define to get rid of hardcoded paths
  - Fix yum-NetworkManager-dispatcher description, BZ 894729
  - reposync should lock. BZ 880722
  - Initialize exit_code correctly.  BZ 882536


author: James Antill <james@fedoraproject.org> - 1.1.31-11
changelog:
  - Update to latest HEAD.
  - FS snapshot fixes, and thin provisioning support.
  - search-quiet for yumdb.


author: Zdenek Pavlas <zpavlas@redhat.com> - 1.1.31-13
changelog:
  - Update to latest HEAD
  - versionlock add: Skip packages already locked.
  - versionlock delete: Match all names, not just envra.
  - Allow --old=/foo urls for repodiff.
  - Don't check timestamps for repofrompath repos. BZ 880944
  - Output couldn't find a pkg. for 'foo'. BZ 838158


author: Zdenek Pavlas <zpavlas@redhat.com> - 1.1.31-15
changelog:
  - Update to latest HEAD
  - debuginfo-install: handle YumBaseError
  - fs-snapshot: "dmsetup -o" workaround.  BZ 954358, BZ 949569
  - tmprepo: avoid spaces in repoid. BZ 965806
  - repoquery: add cachedir locking. BZ 969776
  - Fix a bug in Modified/Upgraded/Downgraded output. BZ 819502


author: Zdenek Pavlas <zpavlas@redhat.com> - 1.1.31-16
changelog:
  - Update to latest HEAD
  - Fix pacakge => package typos
  - docs: Add missing man page short descriptions
  - docs: Escape dashes in command-line options
  - docs: Add missing man pages for all yum-utils
  - Add --show-duplicates to repoquery manpage. BZ 975565
  - yum-complete-transaction: unlock yum.pid. BZ 984119
  - sanitize repoquery --repofrompath. BZ 988140
  - yum changelog: implicit since=all. BZ 961782
  - repoquery: retry doLock() BZ 988223
  - repoquery: add --installroot option. BZ 988429


author: James Antill <james.antill@redhat.com> - 1.1.31-18
changelog:
  - Disable puppetverify plugin for el7. BZ 1002876.
  - reposync: fix a copy-paste error. BZ 994514
  - repo-rss: non-ASCII fix, sorting.
  - Add --nogroups and --noplugins options to verifytree.


