SELinux userspace release 3.5
RELEASE 3.5
User-visible changes
-
Maintainer GPG fingerprints added to /SECURITY.md
-
semodule option --rebuild-if-modules-changed was renamed to --refresh
-
Remove dependency on the deprecated Python module distutils and install via pip
-
libsepol: Stricter policy validation
-
libsepol: do not write empty class definitions to allow simpler round-trip tests
-
libsepol: reject attributes in type av rules for kernel policies
-
libselinux: add getpidprevcon()
-
libselinux: restorecon hashtable and other misc fixes
-
libselinux: Add workaround to reduce pcre2 heap memory usage
-
sepolicy: Several python and GTK updates
-
sepolicy: Add missing booleans to man pages
-
sepolicy: Cache queries to speed up manpage generation
-
mcstrans: preserve runtime directory
-
fixfiles: Unmount temporary bind mounts on SIGINT
-
Large updates to translations and better handling for unsupported languages
-
Translation updated and better handling for unsupported languages
-
Translation updated for generated descriptions
-
A lot of static code analysis issues, fuzzer issues and compiler warnings fixed
-
Bug fixes
Development-relevant changes
- Install python modules via pip instead of setup.py
- ci: Run on Fedora36 instead of F34
- ci: Run on Python3.11 and drop py3.5, py3.6