--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9556
2010-06-07 20:38:41
--------------------------------------------------------------------------------
Name : rcssmonitor
Product : Fedora 12
Version : 14.1.0
Release : 1.fc12
URL : http://sourceforge.net/projects/sserver/
Summary : RoboCup 2D Soccer Simulator Monitor
Description :
The RoboCup Soccer Simulator Monitor is a viewer for moved 2d vector graphics.
You can use it to watch 2D soccer games running on rcssserver. However, The
architecture of The RoboCup Soccer Simulator Monitor was from the beginning
kept as general and modular as possible and not just hacked to fit the needs
of the robocup soccer server (rcssserver). So by now The RoboCup Soccer
Simulator Monitor is also used to visualize many other two dimensional system.
You can use UDP/IP communication sockets to send commands to The RoboCup Soccer
Simulator Monitor. A generic communication device is also included. It
understands a very easy description language to build and move 2d objects.
--------------------------------------------------------------------------------
Update Information:
New upstream release containing some new features: * Added new command line
options, "--auto-reconnect-mode" and "--auto-reconnect-wait". When auto-
reconnect-mode is on, rcssmonitor will try to reconnect to rcssserver if
rcssserver does not send information for auto-reconnect-
wait(default:5) seconds. Note that auto-reconnect-mode overwrites auto-
quit-mode. If auto-reconnect-mode is on, auto-quit-mode is always disabled.
* Some parameters are renamed in '~/.rcssmonitor.conf'. It is highly
recommended to delete the existing configuration file and regenerate new
one. * Changed the policy of configuration file. Now, 'MainWindow' and
'Monitor' sections in '~/.rcssmonitor.conf' are not updated by rcssmonitor.
Users have to edit these values manually or set by command line options
every time.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 4 2010 Hedayat Vatankhah <hedayat(a)grad.com> - 14.1.0-1
- Updated to version 14.1.0
- Fixed qt.m4 to avoid pulling private libs (Thanks to Mamoru Tasaka)
* Mon Jan 18 2010 Hedayat Vatankhah <hedayat(a)grad.com> - 14.0.1-1
- Updated to version 14.0.1
* Thu Nov 19 2009 Hedayat Vatankhah <hedayat(a)grad.com> - 14.0.0-1
- Updated to version 14.0.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rcssmonitor' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9551
2010-06-04 18:01:59
--------------------------------------------------------------------------------
Name : awn-extras-applets
Product : Fedora 13
Version : 0.4.0
Release : 12.fc13
URL : https://launchpad.net/awn-extras/
Summary : Extras applets for avant window navigator
Description :
awn-extras-applets includes extras applets of Avant Window Navigator (Awn).
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 4 2010 Leigh Scott <leigh123linux(a)googlemail.com> - 0.4.0-12
- apply upstream fix for weatherapplet (Bz 597791)
* Fri May 28 2010 Leigh Scott <leigh123linux(a)googlemail.com> - 0.4.0-11
- apply upstream fix for weatherapplet (Bz 592753)
* Thu May 27 2010 Leigh Scott <leigh123linux(a)googlemail.com> - 0.4.0-10
- apply upstream fix for slickswitcher (Bz 591110)
* Mon May 17 2010 Leigh Scott <leigh123linux(a)googlemail.com> - 0.4.0-9
- Add more requires python-vobject, python-gdata, python-dateutil,
python-feedparser and gnome-python2-gconf
* Mon May 17 2010 Leigh Scott <leigh123linux(a)googlemail.com> - 0.4.0-8
- Add requires python-inotify
* Mon May 17 2010 Leigh Scott <leigh123linux(a)googlemail.com> - 0.4.0-7
- apply upstream fix for thinkhdaps (Bz 592357)
* Fri May 14 2010 Leigh Scott <leigh123linux(a)googlemail.com> - 0.4.0-6
- apply upstream fix for awn-bwm (Bz 589724)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #597791 - [abrt] crash in awn-extras-applets-0.4.0-11.fc13: awnlib.py:209:unregister:RuntimeError: Dialog 'secondary' not registered
https://bugzilla.redhat.com/show_bug.cgi?id=597791
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update awn-extras-applets' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-8931
2010-05-24 18:24:47
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 12
Version : 3.6.32
Release : 116.fc12
URL : http://oss.tresys.com/repos/refpolicy/
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision 2.20090730
--------------------------------------------------------------------------------
Update Information:
* Fri May 21 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-116 - Allow
denyhosts to connect to tcp port 9911 - Fixes for munin * Tue May 11 2010
Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-115 - Allow avahi-autoipd to chat
with NetworkManager over dbus - Allow tgtd to read files on anon_inodefs file
systems - Add label for /var/lib/mpd directory
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 21 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-116
- Allow denyhosts to connect to tcp port 9911
- Fixes for munin
* Tue May 11 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-115
- Allow avahi-autoipd to chat with NetworkManager over dbus
- Allow tgtd to read files on anon_inodefs file systems
- Add label for /var/lib/mpd directory
* Wed May 5 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-114
- Allow denyhosts sys_tty_config capability
- Fixes for chrony policy
- Allow ksmtuned to use terminals
- Allow lircd to write to generic usb devices
* Thu Apr 22 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-113
- Allow pulseaudio to read udev process state.
- Dontaudit hal leaks
* Fri Apr 16 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-112
- Fix label for /usr/share/system-config-services/gui.py
- Allow snort to read network state information
- Fix reserved port desination from Dan Walsh
* Tue Apr 13 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-111
- Allow shorewall to execute hostname
- Allow gpg-agent to read symbolic links in bin directories
- Allow vmware-host to read and write generic character device files
- Add munin plugin policy from F13
- Add denyhosts polict from F13
* Thu Apr 8 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-110
- Add label for /opt/google/chrome/chrome-sandbox
- Allow asterisk to bind and connect to sip tcp ports
* Fri Apr 2 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-109
- Allow hald to manage block device files
* Tue Mar 30 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-108
- Add label for libgpac library
- Fixes for openvpn
* Fri Mar 26 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-107
- Allow pppd to read and write to modem devices
* Tue Mar 23 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-106
- Allow mysqld_safe setsched, getsched
- Allow logrotate to transition to sssd
- Allow snort to read and write generic USB devices
- Add label for piranha log files
- Add qpidd policy from rawhide
* Fri Mar 19 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-105
- Fixes for nagios
* Thu Mar 18 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-104
- Allow logrotate to transition to asterisk
- Allow xdm to transition to shutdown
- Allow shutdown dac_override
- Allow samba sys_chroot
* Mon Mar 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-103
- Add sosreport policy
* Mon Mar 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-102
- Allow bluetooth sys_admin capability
- Fix label for libADM libraries
- Allow libvirt to set svrit_image_t label on sysfs
- Add shutdown policy from Dan Walsh
* Wed Mar 10 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-101
- Allow nsplugin to manage pulseaudio homedir content
* Tue Mar 9 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-100
- Allow pulseaudio sys_tty_config capability
- Add label for cman_tool
- Fixes for corosync policy
- Allow abrt to get the attributes of all domains
- Allow abrt to read symbolic links on a NFS filesystem
* Fri Mar 5 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-99
- Add back etcfile attribute
* Fri Mar 5 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-98
- Allow modcluster to call getpwnam
- Allow useradd sys_ptrace capability
- Fixes for pulseaudio from Dan Walsh
- Allow swat to signal winbind
- Add label for mssql and allow apache to connect to this database port if boolean set
* Wed Mar 3 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-97
- Fixes for xserver from Dan Walsh
* Mon Mar 1 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-96
- Add cachefilesfd policy
- Update cobbler policy from F13
- Allow hald connect to usbmuxd over a unix domain
- Allow staff_t to read semanage module store
* Fri Feb 26 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-95
- Add fixes from Dan Walsh
* Fri Feb 26 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-94
- Fixes for MLS booting from Dan Walsh
* Thu Feb 25 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-93
- Fix wine dontaudit mmap_zero
- Add vbetool_mmap_zero_ignore boolean
- dontaudit acct using console
* Tue Feb 23 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-92
- Fixes for cluster policy
- Fixes for rgmanager
- Add label for /etc/pki dir in bind-chroot
- Allow system-config-firewall to send system log messages
- Remove label for Directory Server
* Wed Feb 17 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-91
- Add label for /opt/zimbra/log directory
- Add label for /usr/local/centreon/log directory
- Add label for /var/spool/bacula/log directory
- Add nagios_mail_plugin type for nagios mail plugins
- Do not audit attempts to search the network state directory for locate
- Allow ping read and write the console, all ttys and all ptys
- Allow pppd to send audit messages
- Allow modemmanager net_admin capability
- Fixes for cluster policy
* Fri Feb 12 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-90
- Allow dnsmasq to create log file
* Thu Feb 11 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-89
- Allow rpcd to read files with default file type
* Thu Feb 11 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-88
- Fixes for sandbox
- Allow quota to set priority of kernel threads
- Fixes for svirt
* Wed Feb 10 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-87
- Fixes for ipsec policy
- Allow pppd to get attributes of the modem devices
- Add label for /usr/share/e16/misc directory
* Tue Feb 9 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-86
- Allow mysql ipc_lock capability
- Allow passwd sys_nice capability
- Allow plymouth to read network config files
- Fixes for git
- Add label for /usr/sbin/ns-slapd
- Allow munin to list mail queue
- Add label for shorewall compiler
- Fixes for nagios plugin policy
- Allow auditctl to set priority of kernel threads
* Fri Feb 5 2010 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-85
- Cleanup spec file
* Thu Feb 4 2010 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-84
- Fix /var/lib labeling in post install
* Thu Feb 4 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-83
- Fixes for cluster policy
* Wed Feb 3 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-82
- Add label for /root/.Xdefaults
- Allow xauth to read symbolic links on a NFS filesystem
- Add label for /var/run/slim.lock
- Add mcelog policy
* Tue Feb 2 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-81
- Allow policykit-auth to set attributes on fonts cache directory
- Add label for RealPlayer plugins
- Add label for /usr/sbin/xrdp
- Allow chrome-sandbox to read gnome homedir content
- Allow rsyslogd to connect to MySQL using a unix domain stream socket
- Allow apache to list inotifyfs filesystem
- Add label for /dev/pps device
- Fixes for chronyd policy
* Mon Feb 1 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-80
- Allow xdm to execute octave
- Add label for var/run/lxdm.auth
- Allow pppd sys_admin capability
- Allow cups-pdf fowner capability
- Fix path for cluster binaries
- Fixes for pulseaudio
- Add label for /var/webmin directory
- Allow prelink execmod on files in home directory
- Allow cups-config to read process state of all user domains.
- Fixes for vmware policy
- Fixes for lirc policy
- Allow amavis to read utmp
* Fri Jan 29 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-79
- Fix rpm_dontaudit_leaks
- Fix typo in rgmanager.if
- Fixes for nis policy
* Wed Jan 27 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-78
- Allow to openvpn to read utmp
- Allow xdm to read the video4linux devices
- Add label for /etc/openldap/slapd.d directory
- Allow tgtd to manage fixed disk device nodes
- Allow chsh to execute nxserver
- Allow abrt_helper to send system log messages
- Add label for /etc/zabbix/web directory
- Add label for /sbin/mke4fs
* Mon Jan 25 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-77
- Allow xenstored to manage files on on a XENFS filesystem
- Allow cupsd to setattr on a fonts cache directory
- Allot smolt-client to send system log messages
* Fri Jan 22 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-76
- Add labeling for gitweb
- Allow plymouth to read and write the /dev/ptmx
- Fixes for sanbox
- Allow nagios_services_plugin_t to read snmpd libraries
* Thu Jan 21 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-75
- Allow sulogin to talk to console and tty_device_t
* Wed Jan 20 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-74
- Fixes for afs
- Remove transtion from system_cronjob to gpg domain
* Tue Jan 19 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-73
- Add labeling for /var/lib/avahi-autoipd directory
* Tue Jan 19 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-72
- Fixes for memcached from Dan Walsh
- Allow podsleuth to read user tmpfs files
- Allow tftpd to read system state information in proc
- Fixes for sssd from Dan Walsh
- Allow snmpd chown capability
* Fri Jan 15 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-71
- Allow hotplug to transition to brctl domain
- Fixes for sftpd
* Tue Jan 12 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-70
- Move users file to selection by spec file.
- Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t
* Mon Jan 11 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-69
- Fixes for iscsid
- Allow openvpn to bind to http port
- Add wine_mmap_zero_ignore boolean
* Fri Jan 8 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-68
- Fixes for xenconsoled
- Allow xauth to connectto xserver_t unix_stream_socket
- Add textrel_shlib_t fixes
- Add labeling for LXDM
- Allow cupsd_lpd_t to setattr fontconfig directory
- Allow abrt to getattr on all character file device nodes.
- Add labeling for the rest nagios plugins
* Wed Jan 6 2010 Miroslav Grepl <mgrepl(a)redhat.com> 3.6.32-67
- Allow snmbd to send itself signal
- Allow virt_domain to read /dev/random
- Allow apcupsd to send itself signull
- Allow swat to transition to nmbd
- Add textrel_shlib_t label for /usr/local/lib/codecs/
* Mon Jan 4 2010 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-66
- Allow lircd to use tcp_socket and connect/bind to port 8675
* Wed Dec 30 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-65
- Allow traceroute to use all terms
- Fix mgetty use for faxes
- Dontaudit xdm listing fusefs
- Allow xguest to resolve host names
- Allow abrt to read noxattr filesystems (cdrom)
- Allow abrt_helper to send itself signals
- Allow amavis to read certs
- Allow apache to bind to port 3000 (Ruby on rails)
- Asterist uses mysql and snmp
- Allow consolekit to write wtmp file for shutdown
- Allow cups ipc_lock
- Allow hal to transition to ppp
- Fix mailman labels for 64 bit systems
- dontaudit system_mail access to leaked terminals
- Allow mysqld_safe_t to unlink mysqld pid files
- nrpe_t uses getpw calls
- Allow NetworkManager to delete ppp pid files
- Allow pptp_t to sens userdomain signals
- Allow prelude to connect to mysql
- Allow swat to start winbind server
- Fixes for snort
- Allow telnetd to setattr user terminals
- Allow qemu to read fusefs
- Allow domains that have telinit to connectto upstart unix_stream_socket
- Dontaudit ipsec_mgmt sys_tty_config
- Fix labels for postgrestgres test suite
- Other textrel_shlib_t fixes
* Wed Dec 23 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-64
- Update to Rawhide filesystem.if file
- Allow abrt to read nfs
- Allow cups to search fusefs
- Allow dovecot_auth to search var_log
- Fix label on ksmtuned.pid
- Dontaudit policykit looking at mount points
- Allow xdm to manage /var/cache/fontconfig
- Allow xenstored to search xenfs
* Tue Dec 22 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-63
- Allow sendmail setpgid
- Allow dovecot to read nfs homedirs
* Mon Dec 21 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-62
- Add label for /var/ekpd
- Allow portreserve to look at bin files
- Allow gssd to ask the kernel to load modules
- If you can run mount you can run fusermount
* Mon Dec 21 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-61
- Fixes for sandbox_x_server
- Fix ntop policy
- Sandbox fixes
* Fri Dec 18 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-60
- Fixs for cluster policy
- mysql_safe fixes
- Fixes for sssd
- Cgroup access for virtd
- Dontaudit fail2ban leaks
* Tue Dec 15 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-59
- Dontaudit udp_socket leaks for xauth_t
- Dontaudit rules for iceauth_t
- Let locate read symlinks on noxattr file systems
- Remove wine from unconfined domain if unconfined pp removed
- Add labels for vhostmd
- Add port 546 as a dhcpc port
- Add labeled for /dev/dahdi
- Add certmonger policy
- Allow sysadm to communicate with racoon and zebra
- Allow dbus service dbus_chat with unconfined_t
- Fixes for xguest
- Add dontaudits for abrt
- file contexts for mythtv
- Lots of fixes for asterisk
- Fix file context for certmaster
- Add log dir for dovecot
- Policy for ksmtuned
- File labeling and fixes for mysql and mysql_safe
- New plugin infrstructure for nagios
- Allow nut_upsd_t dac_override
- File context fixes for nx
- Allow oddjob_mkhomedir to create homedir
- Add pcscd_pub interfaces to be used by xdm
- Add stream connect from fenced to corosync
- Fixes for swat
- Allow fsdaemon to manage scsi devices
- Policy for tgtd
- Policy for vhostmd
- Allow ipsec to create tmp files
- Change label on fusermount
* Thu Dec 10 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-58
- Dontaudit udp_socket leaks for xauth_t
* Wed Dec 9 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-57
- Allow unconfined_t to send dbus messages to setroubleshoot
- Allow confined screen app to setattr on user ttys
- remove wine_t from unconfined domain when unconfined.pp disabled
- Allow sysadm_t to communicate with racoon
- Allow xauth to be run from all unconfined user types
- Fix labeling on all /var/cache/mod_* apps
- Allow asterisk to communicate with postgresql
- Fix labeling for /var/lib/certmaster
- Add policy for ksmtuned and tgtd
- Fixes fro vhostmd
* Mon Dec 7 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-56
- Dontaudit exec of fusermount from xguest
- Allow licrd to use mouse_device
- Allow sysadm_t to connect to zebra stream socket
- Dontaudit policykit_auth trying to config terminal
- Allow logrotate and asterisk to execute asterisk
- Allow logrotate to read var_lib files (zope) and connect to fail2ban stream
- Allow firewallgui to communicate with unconfined_t
- Allow podsleuth to ask the kernel to load modules
- Fix labeling on vhostmd scripts
- Remove transition from unconfined_t to windbind_helper_t
- Allow abrt_helper to look at inotify
- Fix labels for mythtv
- Allow apache to signal sendmail
- allow asterisk to send mail
- Allow rpcd to get and setcap
- Add tor_bind_all_unreserved_ports boolean
- Add policy for vhostmd
- MOre textrel_shlib_t files
- Add rw_herited_term_perms
* Thu Dec 3 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-55
- Add fprintd_chat(unconfined_t) to fix su timeout problem
- Make xguest follow allow_execstack boolean
- Dontaudit dbus looking at nfs
* Thu Dec 3 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-54
- Require selinux-policy from selinux-policy-TYPE
- Add labeling to /usr/lib/win32 textrel_shlib_t
- dontaudit all leaks for abrt_helper
- Fix labeling for mythtv
- Dontaudit setroubleshoot_fix leaks
- Allow xauth_t to read usr_t
- Allow iptables to use fifo files
- Fix labeling on /var/lib/wifiroamd
* Tue Dec 1 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-53
- Remove transition from dhcpc_t to consoletype_t, just allow exec
- Fixes for prelink cron job
- Fix label on yumex backend
- Allow unconfined_java_t to communicate with iptables
- Allow abrt to read /tmp files
- Fix nut/ups policy
* Tue Dec 1 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-52
- Major fixup of ntop policy
- Fix label on /usr/lib/xorg/modules/extensions/libglx.so.195.22
- Allow xdm to signal session bus
- Allow modemmanager to use generic ptys, and sys_tty_config capability
- Allow abrt_helper chown access, dontaudit leaks
- Allow logwatch to list cifs and nfs file systems
- Allow kismet to read network state
- Allow cupsd_config_t to connecto unconfined unix_stream
- Fix avahi labeling and allow avahi to manage /etc/resolv.conf
- Allow sshd to read usr_t files
- Allow login programs to manage pcscd_var_run_t files
- Allow tor to read usr_t files
* Wed Nov 25 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-51
- Mark google shared libraries as requiring textrel_shlib
- Allow svirt to bind/connect to network ports
- Add label for .libvirt directory.
* Tue Nov 24 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-50
- Allow modemmanager sys_admin
* Mon Nov 23 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-49
- Allow sssd to read all processes domain
* Mon Nov 23 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-48
- Abrt connect to any port
- Dontaudit chrome-sandbox trying to getattr on all processes
- Allow passwd to execute gnome-keyring
- Allow chrome_sandbox_t to read home content inherited from the parent
- Fix eclipse labeling
- Allow mozilla to connect to flash port
- Allow pulseaudio to connect to unix_streams
- Allow sambagui to read secrets file
- Allow mount to mount unlabeled files
- ALlow abrt to use ypbind, send kill signals
- Allow arpwatch to create socket class
- Allow asterisk to read urand
- Allow corosync to communicate with user tmpfs
- Allow devicedisk to read virt images block devices
- Allow gpsd to sys_tty_config
- Fix nagios interfaces
- Policy for nagios plugins
- Fixes for nx
- Allow rtkit_daemon to read locale file
- Allow snort to create socket
- Additional perms for xauth
- lots of textrel_lib_t file context
* Tue Nov 17 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-47
- Make mozilla call in execmem.if optional to fix build of minimum install
- Allow uucpd to execute shells and send mail
- Fix label on libtfmessbsp.so
* Mon Nov 16 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-46
- abrt needs more access to rpm pid files
- Abrt wants to execute its own tmp files
- abrt needs to write sysfs
- abrt needs to search all file system dirs
- logrotate and tmpreaper need to be able to manage abrt cache
- rtkit_daemon needs to be able to setsched on lots of user apps
- networkmanager creates dirs in /var/lib
- plymouth executes lvm tools
* Fri Nov 13 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-45
- Allow mount on dos file systems
- fixes for upsmon and upsd to be able to retrieve pwnam and resolve addresses
* Thu Nov 12 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-44
- Add lighttpd file context to apache.fc
- Allow tmpreaper to read /var/cache/yum
- Allow kdump_t sys_rawio
- Add execmem_exec_t context for /usr/bin/aticonfig
- Allow dovecot-deliver to signull dovecot
- Add textrel_shlib_t to /usr/lib/libADM5avcodec.so
* Tue Nov 10 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-43
- Fix transition so unconfined_exemem_t creates user_tmp_t
- Allow chrome_sandbox_t to write to user_tmp_t when printing
- Allow corosync to connect to port 5404 and to interact with user_tmpfs_t files
- Allow execmem_t to execmod files in mozilla_home_t
- Allow firewallgui to communicate with nscd
* Mon Nov 9 2009 Dan Walsh <dwalsh(a)redhat.com> 3.6.32-42
- Allow kdump to read the kernel core interface
- Dontaudit abrt read all files in home dir
- Allow kismet client to write to .kismet dir in homedir
- Turn on asterisk policy and allow logrotate to communicate with it
- Allow abrt to manage rpm cache files
- Rules to allow sysadm_t to install a kernel
- Allow local_login to read console_device_t to Z series logins
- Allow automount and devicekit_disk to search all filesystem dirs
- Allow corosync to setrlimit
- Allow hal to read modules.dep
- Fix xdm using pcscd
- Dontaudit gssd trying to write user_tmp_t, kerberos libary problem.
- Eliminate transition from unconifned_t to loadkeys_t
- Dontaudit several leaks to xauth_t
- Allow xdm_t to search for man pages
- Allow xdm_dbus to append to xdm log
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #575814 - SELinux is preventing /usr/libexec/nm-openconnect-service "relabelfrom" access .
https://bugzilla.redhat.com/show_bug.cgi?id=575814
[ 2 ] Bug #584710 - SELinux is preventing /usr/bin/pulseaudio "setattr" access on /var/lib/mpd/.pulse.
https://bugzilla.redhat.com/show_bug.cgi?id=584710
[ 3 ] Bug #589395 - SELinux is preventing /usr/sbin/tgtd (deleted) "read" access on file.
https://bugzilla.redhat.com/show_bug.cgi?id=589395
[ 4 ] Bug #589742 - SELinux is preventing /usr/sbin/sendmail.sendmail access to a leaked /tmp/.NSPR-AFM-1761-26861e0.0 (deleted) file descriptor.
https://bugzilla.redhat.com/show_bug.cgi?id=589742
[ 5 ] Bug #591587 - crond fails to run jobs under selinux-enabled systems
https://bugzilla.redhat.com/show_bug.cgi?id=591587
[ 6 ] Bug #591928 - SELinux is preventing /bin/hostname "name_bind" access .
https://bugzilla.redhat.com/show_bug.cgi?id=591928
[ 7 ] Bug #592032 - SELinux is preventing /usr/sbin/clamav-milter "sys_tty_config" access .
https://bugzilla.redhat.com/show_bug.cgi?id=592032
[ 8 ] Bug #593473 - SELinux is preventing /usr/bin/who "read" access on /etc/nsswitch.conf.
https://bugzilla.redhat.com/show_bug.cgi?id=593473
[ 9 ] Bug #593476 - SELinux is preventing /usr/bin/who "getattr" access on /dev/pts/0.
https://bugzilla.redhat.com/show_bug.cgi?id=593476
[ 10 ] Bug #594075 - SELinux is preventing /usr/sbin/httpd from loading /usr/local/zend/lib/apache2/libphp5.so which requires text relocation.
https://bugzilla.redhat.com/show_bug.cgi?id=594075
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9544
2010-06-04 18:01:39
--------------------------------------------------------------------------------
Name : qutim
Product : Fedora 12
Version : 0.2.0
Release : 8.fc12
URL : http://www.qutim.org/
Summary : Multiprotocol (ICQ, Jabber, IRC etc) instant messenger with modern Qt4 interface
Description :
qutIM - free open-source multiprotocol ( ICQ, Jabber/GTalk/
/Ya.Online/LiveJournal.com, Mail.Ru, IRC ) instant messenger for
Windows and Linux systems.
--------------------------------------------------------------------------------
Update Information:
- plugin vkontakte from git 20100530: BZ#582476 - Add "git checkout
origin/sdk02; git pull origin sdk02; git submodule update --init" in git
checkout process. - Add conditional BR qt-webkit-devel to build under rawhide
(F14)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #582476 - vkontakte plugin doesn't work.
https://bugzilla.redhat.com/show_bug.cgi?id=582476
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update qutim' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-8745
2010-05-19 18:34:09
--------------------------------------------------------------------------------
Name : grantlee
Product : Fedora 13
Version : 0.1.1
Release : 3.fc13
URL : http://www.gitorious.org/grantlee/pages/Home
Summary : Qt string template engine based on the Django template system
Description :
Grantlee is a plug-in based String Template system written
using the Qt framework. The goals of the project are to make it easier for
application developers to separate the structure of documents from the
data they contain, opening the door for theming.
The syntax is intended to follow the syntax of the Django template system,
and the design of Django is reused in Grantlee.
Django is covered by a BSD style license.
Part of the design of both is that application developers can extend
the syntax by implementing their own tags and filters. For details of
how to do that, see the API documentation.
For template authors, different applications using Grantlee will present
the same interface and core syntax for creating new themes. For details of
how to write templates, see the documentation.
--------------------------------------------------------------------------------
Update Information:
Grantlee is a plug-in based String Template system written using the Qt
framework. The goals of the project are to make it easier for application
developers to separate the structure of documents from the data they contain,
opening the door for theming. The syntax is intended to follow the syntax of
the Django template system, and the design of Django is reused in Grantlee.
Django is covered by a BSD style license. Part of the design of both is that
application developers can extend the syntax by implementing their own tags
and filters. For details of how to do that, see the API documentation. For
template authors, different applications using Grantlee will present the same
interface and core syntax for creating new themes. For details of how to write
templates, see the documentation.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #583058 - Review Request: grantlee - Qt string template engine based on the Django template system
https://bugzilla.redhat.com/show_bug.cgi?id=583058
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update grantlee' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-8769
2010-05-19 18:34:55
--------------------------------------------------------------------------------
Name : newsbeuter
Product : Fedora 13
Version : 2.2
Release : 1.fc13
URL : http://newsbeuter.org/
Summary : Configurable text-based feed reader
Description :
Newsbeuter is a feed reader for text terminals. Newsbeuter's great
configurability and vast number of features make it a perfect choice for people
that need a slick and fast feed reader that can be completely controlled via
keyboard.
--------------------------------------------------------------------------------
Update Information:
* Added Google Reader support. * Fixed issues #90, #160, #161, #168, #169,
#171, #179, #180, #184. * Implemented article highlighting in article list
based on the article content (fixes issue #174). * Extended "ignore article"
functionality with different ignore modes (download/display; fixes issue #52).
* Added "hard quit" key to immediately quit from newsbeuter (patch by Jim Pryor)
* Added "download status" format specifier for feedlist-format (fixes issue
#181). * Added HTML table renderer (patch by Stefan Erben) * Fixed issues
#183, #188 (patch by Stefan Erben) * Added "open-in-browser-and-mark-read" key
(patch by Isaac Good)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2010 Thomas Janssen <thomasj(a)fedoraproject.org> 2.2-1
- bugfix release
- added google reader support
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update newsbeuter' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9539
2010-06-04 18:01:29
--------------------------------------------------------------------------------
Name : tzclock
Product : Fedora 13
Version : 2.7.7
Release : 1.fc13
URL : http://www.tzclock.org/
Summary : GTK+ graphical Clock displaying the time around the world
Description :
TzClock is an X Window GTK+ graphical Clock that can display
the time around the world. It supports multiple faces showing
different time zones.
There is a stopwatch funtion that is accurate to a tenth of a second,
plus there are many other nice features for you to discover.
--------------------------------------------------------------------------------
Update Information:
New version 2.7.7 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 3 2010 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 2.7.7-1
- 2.7.7
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update tzclock' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-8735
2010-05-19 18:33:51
--------------------------------------------------------------------------------
Name : sentinella
Product : Fedora 13
Version : 0.6.1
Release : 1.fc13
URL : http://sentinella.sourceforge.net/
Summary : Monitors your system activity and takes chosen action
Description :
Application that monitors your system activity and, when a condition is met,
takes the action that you've chosen.
While monitoring your CPU, memory, hard drive and network usage, Sentinella
can be programmed to take specific actions when set-points for utilization
or time are met. It can power off, reboot or hibernate your system,
kill an active process, throw an alarm or execute any command.
Sentinella integrates perfectly with KDE4 and will work on many *nix systems.
--------------------------------------------------------------------------------
Update Information:
Application that monitors your system activity and, when a condition is met,
takes the action that you've chosen. While monitoring your CPU, memory, hard
drive and network usage, Sentinella can be programmed to take specific actions
when set-points for utilization or time are met. It can power off, reboot or
hibernate your system, kill an active process, throw an alarm or execute any
command. Sentinella integrates perfectly with KDE4 and will work on many *nix
systems.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #582352 - Review Request: sentinella - Monitors your system activity and takes chosen action
https://bugzilla.redhat.com/show_bug.cgi?id=582352
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update sentinella' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-8775
2010-05-19 18:35:07
--------------------------------------------------------------------------------
Name : kde-partitionmanager
Product : Fedora 13
Version : 1.0.2
Release : 1.fc13
URL : http://www.kde-apps.org/content/show.php/KDE+Partition+Manager?content=89595
Summary : KDE Partition Manager
Description :
KDE Partition Manager is a utility program to help you manage the disk devices,
partitions and file systems on your computer. It allows you to easily create,
copy, move, delete, resize without losing data, backup and restore partitions.
KDE Partition Manager supports a large number of file systems,
including ext2/3/4, reiserfs, NTFS, FAT16/32, jfs, xfs and more.
It makes use of external programs to get its job done, so you might have to
install additional software (preferably packages from your distribution)
to make use of all features and get full support for all file systems.
--------------------------------------------------------------------------------
Update Information:
* Copy a file system's UUID to the copied file system when creating a file
system from another one. * Implement a workaround for a libparted bug that
makes it sometimes fail to commit changes to the OS in versions earlier than
2.2. * Update the partition's file system and re-check for constraints if the
partition's role is changed in the "Create New Partition" dialog. This fixes a
bug where the user was not able to grow an extended partition if he'd previously
selected a file system that cannot grow beyond a certain size. * Always use
the correct icons in modified ok/cancel buttons in dialogs and message boxes
* Fix a crash when operations to create, resize and delete an extended
partitions where incorrectly merged into one (bug 232092)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2010 Thomas Janssen <thomasj(a)fedoraproject.org> 1.0.2-1
- bugfix release
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kde-partitionmanager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-8429
2010-05-12 11:54:39
--------------------------------------------------------------------------------
Name : paktype-ajrak-fonts
Product : Fedora 13
Version : 2.0
Release : 4.fc13
URL : https://sourceforge.net/projects/paktype/
Summary : Fonts for Arabic from PakType
Description :
The paktype-ajrak-fonts package contains fonts for the display of \
Arabic from the PakType by Lateef Sagar.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 11 2010 Pravin Satpute <psatpute(a)redhat.com> - 2.0-4
- improved .conf file, bug 586784
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #586784 - Improve fontconfig config file
https://bugzilla.redhat.com/show_bug.cgi?id=586784
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update paktype-ajrak-fonts' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------