Fedora 8: FEDORA-2008-2100 Critical: Setroubleshoot Upgrade Details

This package provides a set of analysis plugins for use with

setroubleshoot. Each plugin has the capacity to analyze SELinux AVC

data and system data to provide user friendly reports describing how

to interpret SELinux AVC denials.

This is a major upgrade of setroubleshoot. The primary difference is how audit

data is captured, analyzed, and stored. Security vulnerabilities, performance,

usability, and robustness have been addressed in addition to general bug fixes.

Important Installation Notes: The format of the persistent data store has

changed, after installation the alert database will be newly initialized and

previous alerts will be lost. For most users this will not be an issue since

alerts are ephemeral and if the alerting issue persists a new alert will be

generated in the new format the next time it occurs. Also, some users may

experience an error dialog from sealert during installation due to the order in

which files are installed, this may safely be ignored and is a known issue.

After installation the sealert desktop component should be restarted, this can

be achieved by logging out of your desktop sesson or by issuing the following

commands from within the desktop session. % sealert -q % sealert -s

* Fri Feb 22 2008 - 2.0.4-3

- bump rev for build

* Mon Feb 18 2008 John Dennis - 2.0.4-2

- Fix policycoreutils dependency, should only be F-9

* Thu Jan 31 2008 - 2.0.4-1

- Resolve bug #416351: setroubleshoot does not escape regex chars in suggested cmds

- add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists

and is the full path name of $SOURCE

* Tue Jan 15 2008 - 2.0.2-1

- Add catchall_boolean.py plugin

* Fri Jan 11 2008 - 2.0.1-1

- Resolve bug #332281: remove obsolete translation

- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin

* Fri Dec 28 2007 - 2.0.0-1

- prepare for v2 test release

* Tue Nov 13 2007 Dan Walsh - 1.10.4-1

- Add allow_postfix_local_write_mail_spool plugin

- Fix execute typo

* Wed Oct 10 2007 John Dennis - 1.10.3-1

- rewrite all plugins to use new v2 audit data

[ 1 ] Bug #416351 - setroubleshoot does not escape regex chars in suggested cmds

https://bugzilla.redhat.com/show_bug.cgi?id=416351

[ 2 ] Bug #430421 - setroubleshoot - audit_listener_database.xml:3029: parser error in xmlParseDoc()

https://bugzilla.redhat.com/show_bug.cgi?id=430421

[ 3 ] Bug #430845 - obsolete URL in setroubleshoot package description

https://bugzilla.redhat.com/show_bug.cgi?id=430845

[ 4 ] Bug #428960 - Message makes no sense.

https://bugzilla.redhat.com/show_bug.cgi?id=428960

[ 5 ] Bug #320881 - Somebody just didn't get it!

https://bugzilla.redhat.com/show_bug.cgi?id=320881

[ 6 ] Bug #428252 - Problem with update/remove old version

https://bugzilla.redhat.com/show_bug.cgi?id=428252

[ 7 ] Bug #247302 - setroubleshoot's autostart .desktop file fails to start under a KDE session

https://bugzilla.redhat.com/show_bug.cgi?id=247302

[ 8 ] Bug #376041 - Cannot check setroubleshoot service status as non-root

https://bugzilla.redhat.com/show_bug.cgi?id=376041

[ 9 ] Bug #332281 - remove obsolete translation

https://bugzilla.redhat.com/show_bug.cgi?id=332281

[ 10 ] Bug #344331 - No description in gnome-session-properties

https://bugzilla.redhat.com/show_bug.cgi?id=344331

[ 11 ] Bug #358581 - missing libuser-python dependency

https://bugzilla.redhat.com/show_bug.cgi?id=358581

[ 12 ] Bug #426586 - Renaming translation po file from sr@Latn to sr@latin

https://bugzilla.redhat.com/show_bug.cgi?id=426586

[ 13 ] Bug #427260 - German Translation

https://bugzilla.redhat.com/show_bug.cgi?id=427260

[ 14 ] Bug #427418 - Menu layout is not GNOME HIG compliant

https://bugzilla.redhat.com/show_bug.cgi?id=427418

[ 15 ] Bug #427421 - Need a way to permanently ignore specific AVC logs

https://bugzilla.redhat.com/show_bug.cgi?id=427421

[ 16 ] Bug #231334

https://bugzilla.redhat.com/show_bug.cgi?id=231334

[ 17 ] Bug #244345 - missing filename in setroubleshoot (AVC.get_path() returns incomplete path)

https://bugzilla.redhat.com/show_bug.cgi?id=244345

[ 18 ] Bug #288261

https://bugzilla.redhat.com/show_bug.cgi?id=288261

[ 19 ] Bug #321171 - sealert's dialog after update is higly confusing

https://bugzilla.redhat.com/show_bug.cgi?id=321171

su -c 'yum update setroubleshoot-plugins' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/