Fedora 16 Update: libselinux-2.1.5-5.fc16

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-12537
2011-09-13 00:04:59
--------------------------------------------------------------------------------

Name        : libselinux
Product     : Fedora 16
Version     : 2.1.5
Release     : 5.fc16
URL         : http://oss.tresys.com/git/selinux.git
Summary     : SELinux library and simple utilities
Description :
Security-enhanced Linux is a feature of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux.  The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.

libselinux provides an API for SELinux applications to get and set
process and file security contexts and to obtain security policy
decisions.  Required for any applications that use the SELinux API.

--------------------------------------------------------------------------------
Update Information:

Change to use ":" for prefix separator rather then ";", requested by systemd.

During boot systemd/udev is trying to label certain content and matchpathcon is giving back bogus data,  this update will fix the data and eliminate a lot of AVC messages from early boot.

* Thu Sep  8 2011 Ville Skyttä <ville.skytta at iki.fi> - 2.1.5-4
- Avoid unnecessary shell invocation in %%post.

* Tue Sep 6 2011 Dan Walsh <dwalsh at redhat.com> - 2.1.5-3
- Fix handling of subset labeling that is causing segfault in restorecon

* Fri Sep 2 2011 Dan Walsh <dwalsh at redhat.com> - 2.1.5-2
- Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
prefixes.  Now you can specify a ";" separated list of prefixes and the 
labeling system will only load regular expressions that match these prefixes.

* Tue Aug 30 2011 Dan Walsh <dwalsh at redhat.com> - 2.1.5-1
- Change matchpatcon to use proper myprintf
- Fix symlink_realpath to always include "/"
- Update to upstream
	* selinux_file_context_verify function returns wrong value.
	* move realpath helper to matchpathcon library
	* python wrapper makefile changes

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #733086 - avcs on boot - rtc and /dev/live and systemd-tmpfiles
        https://bugzilla.redhat.com/show_bug.cgi?id=733086
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update libselinux' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------