# changelog

author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-78
changelog:
  - Allow glusterd domain read krb5_keytab_t files.
  Resolves: rhbz#1343929
  - Fix typo in files_setattr_non_security_dirs.
  Resolves: rhbz#1115987


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-80
changelog:
  - Allow conman to kill conman_unconfined_script.
  Resolves: rhbz#1297323
  - Make conman_unconfined_script_t as init_system_domain.
  Resolves:rhbz#1297323
  - Allow init dbus chat with apmd.
  Resolves:rhbz#995898
  - Patch /var/lib/rpm is symlink to /usr/share/rpm on Atomic, due to this change we need to label also /usr/share/rpm as rpm_var_lib_t.
  Resolves: rhbz#1233252
  - Dontaudit xguest_gkeyringd_t stream connect to system_dbusd_t
  Resolves: rhbz#1052880
  - Add mediawiki rules to proper scope
  Resolves: rhbz#1301186
  - Dontaudit xguest_gkeyringd_t stream connect to system_dbusd_t
  Resolves: rhbz#1052880
  - Allow mysqld_safe to inherit rlimit information from mysqld
  Resolves: rhbz#1323673
  - Allow collectd_t to stream connect to postgresql.
  Resolves: rhbz#1344056
  - Allow mediawiki-script to read /etc/passwd file.
  Resolves: rhbz#1301186
  - Add filetrans rule that NetworkManager_t can create net_conf_t files in /etc.
  Resolves: rhbz#1344505
  - Add labels for mediawiki123
  Resolves: rhbz#1293872
  - Fix label for all fence_scsi_check scripts
  - Allow ip netns to mounton root fs and unmount proc_t fs.
  Resolves: rhbz#1343776
  Resolves: rhbz#1286851
  - Allow sysadm_t to run newaliases command.
  Resolves: rhbz#1344828
  - Add interface sysnet_filetrans_named_net_conf()
  Resolves: rhbz#1344505


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-81
changelog:
  - Allow firewalld_t to create entries in net_conf_t dirs.
  Resolves: rhbz#1304723
  - Allow journalctl to read syslogd_var_run_t files. This allows to staff_t and sysadm_t to read journals
  Resolves: rhbz#1288255
  - Allow mongod log to syslog.
  Resolves: rhbz#1306995
  - Allow rhsmcertd connect to port tcp 9090
  Resolves: rhbz#1337319
  - Label for /bin/mail(x) was removed but /usr/bin/mail(x) not. This path is also needed to remove. 
  Resolves: rhbz#1262483
  Resolves: rhbz#1277506
  - Label /usr/libexec/mimedefang-wrapper as spamd_exec_t.
  Resolves: rhbz#1301516
  - Add new boolean spamd_update_can_network.
  Resolves: rhbz#1305469
  - Allow rhsmcertd connect to tcp netport_port_t
  Resolves: rhbz#1329475
  - Fix SELinux context for /usr/share/mirrormanager/server/mirrormanager to Label all binaries under dir as mirrormanager_exec_t.
  Resolves: rhbz#1328234
  - Allow prosody to bind to fac_restore tcp port.
  Resolves: rhbz#1321787
  - Allow ninfod to read raw packets
  Resolves: rhbz#1317964
  - Allow pegasus get attributes from qemu binary files.
  Resolves: rhbz#1260835
  - Allow pegasus get attributes from qemu binary files.
  Resolves: rhbz#1271159
  - Allow tuned to use policykit. This change is required by cockpit.
  Resolves: rhbz#1346464
  - Allow conman_t to read dir with conman_unconfined_script_t binary files.
  Resolves: rhbz#1297323
  - Allow pegasus to read /proc/sysinfo.
  Resolves: rhbz#1265883
  - Allow sysadm_role to run journalctl_t domain. This allows sysadm user to read journals.
  Resolves: rhbz#1288255
  - Label tcp ports:16379, 26379 as redis_port_t
  Resolves: rhbz#1348471
  - Allow systemd to relabel /var and /var/lib directories during boot.
  - Add files_relabel_var_dirs() and files_relabel_var_dirs() interfaces.
  - Add files_relabelto_var_lib_dirs() interface.
  - Label tcp port 2004 as mailbox_port_t.
  Resolves: rhbz#1332843
  - Label tcp and udp port 5582 as fac_restore_port_t
  Resolves: rhbz#1321787
  - Allow sysadm_t user to run postgresql-setup.
  Resolves: rhbz#1282543
  - Allow sysadm_t user to dbus chat with oddjob_t. This allows confined admin run oddjob mkhomedirfor script.
  Resolves: rhbz#1297480
  - Update netlink socket classes.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-82
changelog:
  - Label /var/lib/softhsm as named_cache_t. Allow named_t to manage named_cache_t dirs.
  Resolves:rhbz#1331315
  - Label named-pkcs11 binary as named_exec_t.
  Resolves: rhbz#1331315
  - Allow glusterd daemon to get systemd status
  Resolves: rhbz#1321785
  - Allow logrotate dbus-chat with system_logind daemon
  Resolves: rhbz#1283134
  - Allow pcp_pmlogger to read kernel network state Allow pcp_pmcd to read cron pid files
  Resolves: rhbz#1336211
  - Add interface cron_read_pid_files()
  Resolves: rhbz#1336211
  - Allow pcp_pmlogger to create unix dgram sockets
  Resolves: rhbz#1336211
  - Add hwloc-dump-hwdata SELinux policy
  Resolves: rhbz#1344054
  - Remove non-existing jabberd_spool_t() interface and add new jabbertd_var_spool_t.
  Resolves: rhbz#1121171
  - Remove non-existing interface salk_resetd_systemctl() and replace it with sanlock_systemctl_sanlk_resetd()
  Resolves: rhbz#1259764
  - Create label for openhpid log files. 
  esolves: rhbz#1259764
  - Label /var/lib/ganglia as httpd_var_lib_t
  Resolves: rhbz#1260536
  - Allow firewalld_t to create entries in net_conf_t dirs.
  Resolves: rhbz#1304723
  - Allow journalctl to read syslogd_var_run_t files. This allows to staff_t and sysadm_t to read journals
  Resolves: rhbz#1288255
  - Include patch from distgit repo: policy-RHEL-7.1-flask.patch.
  Resolves: rhbz#1329560
  - Update refpolicy to handle hwloc
  Resolves: rhbz#1344054
  - Label /etc/dhcp/scripts dir as bin_t
  - Allow sysadm_role to run journalctl_t domain. This allows sysadm user to read journals.
  Resolves: rhbz#1288255


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-83
changelog:
  - Allow krb5kdc_t to communicate with sssd
  Resolves: rhbz#1319933
  - Allow prosody to bind on prosody ports
  Resolves: rhbz#1304664
  - Add dac_override caps for fail2ban-client
  Resolves: rhbz#1316678
  - dontaudit read access for svirt_t on the file /var/db/nscd/group
  Resolves: rhbz#1301637
  - Allow inetd child process to communicate via dbus with systemd-logind
  Resolves: rhbz#1333726
  - Add label for brltty log file
  Resolves: rhbz#1328818
  - Allow dspam to read the passwd file
  Resolves: rhbz#1286020
  - Allow snort_t to communicate with sssd
  Resolves: rhbz#1284908
  - svirt_sandbox_domains need to be able to execmod for badly built libraries.
  Resolves: rhbz#1206339
  - Add policy for lttng-tools package.
  Resolves: rhbz#1256374
  - Make mirrormanager as application domain.
  Resolves: rhbz#1328234
  - Add support for the default lttng-sessiond port - tcp/5345.  This port is used by LTTng 2.x central tracing registry session daemon.
  - Add prosody ports
  Resolves: rhbz#1304664
  - Allow sssd read also sssd_conf_t dirs
  Resolves: rhbz#1350535


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-84
changelog:
  - Fix typo in brltty SELinux module
  - Add new SELinux module sbd
  Resolves: rhbz#1322725
  - Allow pcp dmcache metrics collection
  Resolves: rhbz#1309883
  - Allow pkcs_slotd_t to create dir in /var/lock Add label pkcs_slotd_log_t
  Resolves: rhbz#1350782
  - Allow openvpn to create sock files labeled as openvpn_var_run_t
  Resolves: rhbz#1328246
  - Allow hypervkvp daemon to getattr on  all filesystem types.
  Resolves: rhbz#1349356
  - Allow firewalld to create net_conf_t files
  Resolves: rhbz#1304723
  - Allow mock to use lvm
  Resolves: rhbz#1271209
  - Allow keepalived to create netlink generic sockets.
  Resolves: rhbz#1349809
  - Allow mirromanager creating log files in /tmp
  Resolves:rhbz#1328818
  - Rename few modules to make it consistent with source files
  Resolves: rhbz#1351445
  - Allow vmtools_t to transition to rpm_script domain
  Resolves: rhbz#1342119
  - Allow nsd daemon to manage nsd_conf_t dirs and files
  Resolves: rhbz#1349791
  - Allow cluster to create dirs in /var/run labeled as cluster_var_run_t
  Resolves: rhbz#1346900
  - Allow sssd read also sssd_conf_t dirs
  Resolves: rhbz#1350535
  - Dontaudit su_role_template interface to getattr /proc/kcore Dontaudit su_role_template interface to getattr /dev/initctl
  Resolves: rhbz#1086240
  - Add interface lvm_getattr_exec_files()
  Resolves: rhbz#1271209
  - Fix typo Compliling vs. Compiling
  Resolves: rhbz#1351445


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-85
changelog:
  - Allow virtual machines to rw infiniband devices.
  Resolves: rhbz#1210263
  - Allow opensm daemon to rw infiniband_mgmt_device_t
  Resolves: rhbz#1210263
  - Allow systemd_hwdb_t to relabel /etc/udev/hwdb.bin file.
  Resolves: rhbz#1350756
  - Make label for new infiniband_mgmt deivices
  Resolves: rhbz#1210263


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-86
changelog:
  - Allow udev to manage systemd-hwdb files
  - Add interface systemd_hwdb_manage_config()
  Resolves: rhbz#1350756
  - Fix paths to infiniband devices. This allows use more then two infiniband interfaces.
  Resolves: rhbz#1210263


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-87
changelog:
  - Allow lttng tools to block suspending
  Resolves: rhbz#1256374
  - Allow creation of vpnaas in openstack
  Resolves: rhbz#1352710
  - virt: add strict policy for virtlogd daemon
  Resolves:rhbz#1311606
  - Update makefile to support snapperd_contexts file
  Resolves: rhbz#1352681


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-88
changelog:
  - Allow rhsmcertd to copy certs into /etc/docker/cert.d
  - Add interface docker_rw_config()
  Resolves: rhbz#1344500
  - Fix logrotate fc file to label also /var/lib/logrotate/ dir as logrotate_var_lib_t
  Resolves: rhbz#1355632
  - Allow rhsmcertd to read network sysctls
  Resolves: rhbz#1329475
  - Label /var/log/graphite-web dir as httpd_log_t
  Resolves: rhbz#1310898
  - Allow mock to use generic ptys
  Resolves: rhbz#1271209
  - Allow adcli running as sssd_t to write krb5.keytab file.
  Resolves: rhbz#1356082
  - Allow openvswitch connect to openvswitch_port_t type.
  Resolves: rhbz#1335024
  - Add SELinux policy for opendnssec service.
  Resolves: rhbz#1350957
  - Create new SELinux type for /usr/libexec/ipa/ipa-dnskeysyncd
  Resolves: rhbz#1350957
  - label /dev/ndctl0 device as nvram_device_t
  Resolves: rhbz#1355809


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-89
changelog:
  - Allow firewalld to manage net_conf_t files.
  Resolves:rhbz#1304723
  - Allow logrotate read logs inside containers.
  Resolves: rhbz#1303514
  - Allow sssd to getattr on fs_t
  Resolves: rhbz#1356082
  - Allow opendnssec domain to manage bind chace files
  Resolves: rhbz#1350957
  - Fix typo in rhsmcertd  policy module
  Resolves: rhbz#1329475
  - Allow systemd to get status of systemd-logind daemon
  Resolves: rhbz#1356141
  - Label more ndctl devices not just ndctl0
  Resolves: rhbz#1355809


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-90
changelog:
  - Allow ipa-dnskey read system state.
  Reasolves: rhbz#1350957
  - Allow dogtag-ipa-ca-renew-agent-submit labeled as certmonger_t to create /var/log/ipa/renew.log file
  Resolves: rhbz#1350957


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-92
changelog:
  - Dontaudit mock_build_t can list all ptys.
  Resolves: rhbz#1271209
  - Allow ftpd_t to mamange userhome data without any boolean.
  Resolves: rhbz#1097775
  - Add logrotate permissions for creating netlink selinux sockets.
  Resolves: rhbz#1283134
  - Allow lsmd_plugin_t to exec ldconfig.
  Resolves: rhbz#1238066
  - Allow vnstatd domain to read /sys/class/net/ files
  Resolves: rhbz#1358243
  - Remove duplicate allow rules in spamassassin SELinux module
  Resolves:rhbz#1358175
  - Allow spamc_t and spamd_t domains create .spamassassin file in user homedirs
  Resolves:rhbz#1358175
  - Allow sshd setcap capability. This is needed due to latest changes in sshd
  Resolves: rhbz#1357857
  - Add new MLS attribute to allow relabeling objects higher than system low. This exception is needed for package managers when processing sensitive data.
  Resolves: rhbz#1330464
  - Allow gnome-keyring also manage user_tmp_t sockets.
  Resolves: rhbz#1257057
  - corecmd: Remove fcontext for /etc/sysconfig/libvirtd
  Resolves:rhbz#1351382


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-93
changelog:
  - Dontaudit mock to write to generic certs.
  Resolves: rhbz#1271209
  - Add labeling for corosync-qdevice and corosync-qnetd daemons, to run as cluster_t
  Resolves: rhbz#1347514
  - Revert "Label corosync-qnetd and corosync-qdevice as corosync_t domain"
  - Allow modemmanager to write to systemd inhibit pipes
  Resolves: rhbz#1365214
  - Label corosync-qnetd and corosync-qdevice as corosync_t domain
  Resolves: rhbz#1347514
  - Allow ipa_helper to read network state
  Resolves: rhbz#1361636
  - Label oddjob_reqiest as oddjob_exec_t
  Resolves: rhbz#1361636
  - Add interface oddjob_run()
  Resolves: rhbz#1361636
  - Allow modemmanager chat with systemd_logind via dbus
  Resolves: rhbz#1362273
  - Allow NetworkManager chat with puppetagent via dbus
  Resolves: rhbz#1363989
  - Allow NetworkManager chat with kdumpctl via dbus
  Resolves: rhbz#1363977
  - Allow sbd send msgs to syslog Allow sbd create dgram sockets. Allow sbd to communicate with kernel via dgram socket Allow sbd r/w kernel sysctls.
  Resolves: rhbz#1322725
  - Allow ipmievd_t domain to re-create ipmi devices Label /usr/libexec/openipmi-helper as ipmievd_exec_t
  Resolves: rhbz#1349058
  - Allow rasdaemon to use tracefs filesystem.
  Resolves: rhbz#1364380
  - Fix typo bug in dirsrv policy
  - Some logrotate scripts run su and then su runs unix_chkpwd. Allow logrotate_t domain to check passwd.
  Resolves: rhbz#1283134
  - Add ipc_lock capability to sssd domain. Allow sssd connect to http_cache_t
  Resolves: rhbz#1362688
  - Allow dirsrv to read dirsrv_share_t content
  Resolves: rhbz#1363662
  - Allow virtlogd_t to append svirt_image_t files.
  Resolves: rhbz#1358140
  - Allow hypervkvp domain to read hugetlbfs dir/files.
  Resolves: rhbz#1349356
  - Allow mdadm daemon to read nvme_device_t blk files
  Resolves: rhbz#1362564
  - Allow selinuxusers and unconfineduser to run oddjob_request
  Resolves: rhbz#1361636
  - Allow sshd server to acces to Crypto Express 4 (CEX4) devices.
  Resolves: rhbz#1362539
  - Fix labeling issue in init.fc file. Path /usr/lib/systemd/fedora-* changed to /usr/lib/systemd/rhel-*.
  Resolves: rhbz#1363769
  - Fix typo in device interfaces
  Resolves: rhbz#1349058
  - Add interfaces for managing ipmi devices
  Resolves: rhbz#1349058
  - Add interfaces to allow mounting/umounting tracefs filesystem
  Resolves: rhbz#1364380
  - Add interfaces to allow rw tracefs filesystem
  Resolves: rhbz#1364380
  - Add interface dev_read_nvme() to allow reading Non-Volatile Memory Host Controller devices.
  Resolves: rhbz#1362564
  - Label /sys/kernel/debug/tracing filesystem
  Resolves: rhbz#1364380
  - Allow sshd setcap capability. This is needed due to latest changes in sshd
  Resolves: rhbz#1357857


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-94
changelog:
  - Allow ipmievd domain to create lock files in /var/lock/subsys/
  Resolves:rhbz#1349058
  - Update policy for ipmievd daemon.
  Resolves:rhbz#1349058
  - Dontaudit hyperkvp to getattr on non security files.
  Resolves: rhbz#1349356
  - Label /run/corosync-qdevice and /run/corosync-qnetd as corosync_var_run_t
  Resolves: rhbz#1347514
  - Fixed lsm SELinux module
  - Add sys_admin capability to sbd domain
  Resolves: rhbz#1322725
  - Allow vdagent to comunnicate with systemd-logind via dbus
  Resolves: rhbz#1366731
  - Allow lsmd_plugin_t domain to create fixed_disk device.
  Resolves: rhbz#1238066
  - Allow opendnssec domain to create and manage own tmp dirs/files
  Resolves: rhbz#1366649
  - Allow opendnssec domain to read system state
  Resolves: rhbz#1366649
  - Update opendnssec_manage_config() interface to allow caller domain also manage opendnssec_conf_t dirs
  Resolves: rhbz#1366649
  - Allow rasdaemon to mount/unmount tracefs filesystem.
  Resolves: rhbz#1364380
  - Label /usr/libexec/iptables/iptables.init as iptables_exec_t Allow iptables creating lock file in /var/lock/subsys/
  Resolves: rhbz#1367520
  - Modify interface den_read_nvme() to allow also read nvme_device_t block files.
  Resolves: rhbz#1362564
  - Label /var/run/storaged as lvm_var_run_t.
  Resolves: rhbz#1264390
  - Allow unconfineduser to run ipa_helper_t.
  Resolves: rhbz#1361636


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-95
changelog:
  - Label /etc/pki/pki-tomcat/ca/ as pki_tomcat_cert_t
  Resolves:rhbz#1366915
  - Allow certmonger to manage all systemd unit files
  Resolves:rhbz#1366915
  - Grant certmonger "chown" capability
  Resolves:rhbz#1366915
  - Allow ipa_helper_t stream connect to dirsrv_t domain
  Resolves: rhbz#1368418
  - Update oracleasm SELinux module
  Resolves: rhbz#1331383
  - label /var/lib/kubelet as svirt_sandbox_file_t
  Resolves: rhbz#1369159
  - Add few interfaces to cloudform.if file
  Resolves: rhbz#1367834
  - Label /var/run/corosync-qnetd and /var/run/corosync-qdevice as cluster_var_run_t. Note: corosync policy is now par of rhcs module
  Resolves: rhbz#1347514
  - Allow krb5kdc_t to read krb4kdc_conf_t dirs.
  Resolves: rhbz#1368492
  - Update networkmanager_filetrans_named_content() interface to allow source domain to create also temad dir in /var/run.
  Resolves: rhbz#1365653
  - Allow teamd running as NetworkManager_t to access netlink_generic_socket to allow multiple network interfaces to be teamed together.
  Resolves: rhbz#1365653
  - Label /dev/oracleasmfs as oracleasmfs_t. Add few interfaces related to oracleasmfs_t type
  Resolves: rhbz#1331383
  - A new version of cloud-init that supports the effort to provision RHEL Atomic on Microsoft Azure requires some a new rules that allows dhclient/dhclient hooks to call cloud-init.
  Resolves: rhbz#1367834
  - Allow iptables to creating netlink generic sockets.
  Resolves: rhbz#1364359


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-96
changelog:
  - Allow arpwatch to create netlink netfilter sockets. Resolves: rhbz#1358261
  - Fix file context for /etc/pki/pki-tomcat/ca/
  - new interface oddjob_mkhomedir_entrypoint()
  - Move label for /var/lib/docker/vfs/ to proper SELinux module
  - Allow mdadm to get attributes from all devices.
  - Label /etc/puppetlabs as puppet_etc_t.
  - Allow systemd-machined to communicate to lxc container using dbus
  - Allow systemd_resolved to send dbus msgs to userdomains Resolves: rhbz#1236579
  - Allow systemd-resolved to read network sysctls Resolves: rhbz#1236579
  - Allow systemd_resolved to connect on system bus. Resolves: rhbz#1236579
  - Make entrypoint oddjob_mkhomedir_exec_t for unconfined_t
  - Label all files in /dev/oracleasmfs/ as oracleasmfs_t Resolves: rhbz#1331383


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-97
changelog:
  - Add oracleasm_conf_t type and allow oracleasm_t to create /dev/oracleasm
  Resolves: rhbz#1331383
  - Label /usr/share/pcp/lib/pmie as pmie_exec_t and /usr/share/pcp/lib/pmlogger as pmlogger_exec_t
  Resolves: rhbz#1206525
  - Allow mdadm_t to getattr all device nodes
  Resolves: rhbz#1365171
  - Add interface dbus_dontaudit_stream_connect_system_dbusd()
  Resolves:rhbz#1052880
  - Add virt_stub_* interfaces for docker policy which is no longer a part of our base policy.
  Resolves: rhbz#1372705
  - Allow guest-set-user-passwd to set users password.
  Resolves: rhbz#1369693
  - Allow samdbox domains to use msg class
  Resolves: rhbz#1372677
  - Allow domains using kerberos to read also kerberos config dirs
  Resolves: rhbz#1368492
  - Allow svirt_sandbox_domains to r/w onload sockets
  Resolves: rhbz#1342930
  - Add interface fs_manage_oracleasm()
  Resolves: rhbz#1331383
  - Label /dev/kfd as hsa_device_t
  Resolves: rhbz#1373488
  - Update seutil_manage_file_contexts() interface that caller domain can also manage file_context_t dirs
  Resolves: rhbz#1368097
  - Add interface to write to nsfs inodes
  Resolves: rhbz#1372705
  - Allow systemd services to use PrivateNetwork feature
  Resolves: rhbz#1372705
  - Add a type and genfscon for nsfs.
  Resolves: rhbz#1372705
  - Allow run sulogin_t in range mls_systemlow-mls_systemhigh.
  Resolves: rhbz#1290400


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-98
changelog:
  - Update oracleasm SELinux module that can manage oracleasmfs_t blk files. Add dac_override cap to oracleasm_t domain.
  Resolves: rhbz#1331383
  - Add few rules to pcp SELinux module to make ti able to start pcp_pmlogger service
  Resolves: rhbz#1206525


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-99
changelog:
  - Allow iscsid create netlink iscsid sockets.
  Resolves: rhbz#1358266
  - Improve regexp for power_unit_file_t files. To catch just systemd power unit files.
  Resolves: rhbz#1375462


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-100
changelog:
  - Allow ftp daemon to manage apache_user_content
  Resolves: rhbz#1097775
  - Label /etc/sysconfig/oracleasm as oracleasm_conf_t
  Resolves: rhbz#1331383
  - Allow oracleasm to rw inherited fixed disk device
  Resolves: rhbz#1331383
  - Allow collectd to connect on unix_stream_socket
  Resolves: rhbz#1377259


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-101
changelog:
  - Allow pcp_pmcd_t domain transition to lvm_t Add capability kill and sys_ptrace to pcp_pmlogger_t
  Resolves: rhbz#1309883


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-103
changelog:
  - Allow sssd_selinux_manager_t to manage also dir class.
  Resolves: rhbz#1368097
  - Add interface seutil_manage_default_contexts_dirs()
  Resolves: rhbz#1368097


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-104
changelog:
  - Use selinux-policy-migrate-local-changes.sh instead of migrateStore* macros
  - Add selinux-policy-migrate-local-changes service
  Resolves: rhbz#1381588


author: Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-105
changelog:
  - Allow GlusterFS with RDMA transport to be started correctly. It requires ipc_lock capability together with rw permission on rdma_cm device.
  Resolves: rhbz#1384488
  - Allow glusterd to get attributes on /sys/kernel/config directory.
  Resolves: rhbz#1384483


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-106
changelog:
  - Fix error message during update from RHEL-7.2 to RHEL-7.3, when /usr/sbin/semanage command is not installed and selinux-policy-migrate-local-changes.sh script is executed in %post install phase of selinux-policy package
  Resolves: rhbz#1392010


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-108
changelog:
  - Update systemd on RHEL-7.2 box to version from RHEL-7.3 and then as a separate yum command update the selinux policy systemd will start generating USER_AVC denials and will start returning "Access Denied" errors to DBus clients
  Resolves: rhbz#1393505


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-109
changelog:
  - Allow puppetagent_t to access timedated dbus. Use the systemd_dbus_chat_timedated interface to allow puppetagent_t the access.
  Resolves: rhbz#1399250


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-112
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Allow systemd to stop glusterd_t domains.
  Resolves: rhbz#1400493


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-113
changelog:
  - Fixes for containers Allow containers to attempt to write to unix_sysctls. Allow cotainers to use the FD's leaked to them from parent processes.
  Resolves: rhbz#1403254


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-115
changelog:
  - Allow glusterd_t to bind on med_tlp port.
  Resolves: rhbz#1404152
  - Update ctdbd_t policy to reflect all changes.
  Resolves: rhbz#1402451
  - Label tcp port 24009 as med_tlp_port_t
  Resolves: rhbz#1404152
  -  Issue appears during update directly from RHEL-7.0 to RHEL-7.3 or above. Modules pkcsslotd and vbetools missing in selinux-policy package for RHEL-7.3 which causing warnings during SELinux policy store migration process. Following patch fixes issue by skipping pkcsslotd and vbetools modules migration.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-116
changelog:
  - Allow glusterd_t to bind on glusterd_port_t udp ports.
  Resolves: rhbz#1404152
  - Revert: Allow glusterd_t to bind on med_tlp port.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-117
changelog:
  - Allow systemd container to read/write usermodehelperstate
  Resolves: rhbz#1403254
  - Label udp ports in range 24007-24027 as gluster_port_t
  Resolves: rhbz#1404152


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-118
changelog:
  - Allow firewalld to getattr open search read modules_object_t:dir
  Resolves: rhbz#1418391
  - Fix label for nagios plugins in nagios file conxtext file
  Resolves: rhbz#1277718
  - Add sys_ptrace capability to pegasus domain
  Resolves: rhbz#1381238
  - Allow sssd_t domain setpgid
  Resolves:rhbz#1416780
  - After the latest changes in nfsd. We should allow nfsd_t to read raw fixed disk.
  Resolves: rhbz#1350927
  - Allow kdumpgui domain to read nvme device
  Resolves: rhbz#1415084
  - su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization.
  Resolves: rhbz#1146987
  - Add user namespace capability object classes.
  Resolves: rhbz#1368057
  - Add module_load permission to class system
  Resolves:rhbz#1368057
  - Add the validate_trans access vector to the security class 
  Resolves: rhbz#1368057
  - Add "binder" security class and access vectors
  Resolves: rhbz#1368057
  - Allow ifconfig_t domain read nsfs_t
  Resolves: rhbz#1349814
  - Allow ping_t domain to load kernel modules.
  Resolves: rhbz#1388363


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-119
changelog:
  - Add interface init_stream_connectto()
  Resolves:rhbz#1365947
  - Allow rhsmcertd domain signull kernel.
  Resolves: rhbz#1379781
  - Allow kdumpgui domain to read nvme device
  - Allow insmod_t to load kernel modules
  Resolves: rhbz#1421598
  - Add interface files_load_kernel_modules()
  Resolves: rhbz#1421598
  - Add SELinux support for systemd-initctl daemon
  Resolves:rhbz#1365947
  - Add SELinux support for systemd-bootchart
  Resolves: rhbz#1365953


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-120
changelog:
  - Allow initrc_t domain to run rhel-autorelabel script properly during boot process
  Resolves: rhbz#1379722
  - Allow systemd_initctl_t to create and connect unix_dgram sockets
  Resolves: rhbz#1365947
  - Allow ifconfig_t to mount/unmount nsfs_t filesystem
  Resolves: rhbz#1349814
  - Add interfaces allowing mount/unmount nsfs_t filesystem
  Resolves: rhbz#1349814


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-122
changelog:
  - Allow nfsd_t domain rw sysctl_rpc_t dirs
  Resolves: rhbz#1405304
  - Allow cgdcbxd_t to manage cgroup files.
  Resolves: rhbz#1358493
  - Allow cmirrord_t domain to create netlink_connector sockets
  Resolves: rhbz#1412670
  - Allow fcoemon to create netlink scsitransport sockets
  Resolves: rhbz#1362496
  - Allow quota_nld_t create netlink_generic sockets
  Resolves: rhbz#1358679
  - Allow cgred_t create netlink_connector sockets
  Resolves: rhbz#1376357
  - Add dhcpd_t domain fowner capability
  Resolves: rhbz#1358485
  - Allow acpid to attempt to connect to the Linux kernel via generic netlink socket.
  Resolves: rhbz#1358478
  - Rename docker module to container module
  Resolves: rhbz#1386916
  - Allow setflies to mount tracefs
  Resolves: rhbz#1376357
  - Allow iptables to read nsfs files.
  Resolves: rhbz#1411316
  - Allow systemd_bootchart_t domain create dgram sockets.
  Resolves: rhbz#1365953
  - Rename docker interfaces to container
  Resolves: rhbz#1386916


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-123
changelog:
  - Allow nfsd_t domain to create sysctls_rpc_t files
  Resolves: rhbz#1405304
  - Allow openvswitch to create netlink generic sockets.
  Resolves: rhbz#1397974
  - Create kernel_create_rpc_sysctls() interface
  Resolves: rhbz#1405304


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-124
changelog:
  - Allow rhsmcertd_t dbus chat with system_cronjob_t
  Resolves: rhbz#1405341
  - Allow openvswitch exec hostname and readinitrc_t files
  Resolves: rhbz#1405479
  - Improve SELinux context for mysql_db_t objects.
  Resolves: rhbz#1391521
  - Allow postfix_postdrop to communicate with postfix_master via pipe.
  Resolves: rhbz#1379736
  - Add radius_use_jit boolean
  Resolves: rhbz#1426205
  - Label /var/lock/subsys/iptables as iptables_lock_t
  Resolves: rhbz#1405441
  - Label /usr/lib64/erlang/erts-5.10.4/bin/epmd as lib_t
  Resolves: rhbz#1332803
  - Allow can_load_kernmodule to load kernel modules.
  Resolves: rhbz#1423427
  Resolves: rhbz#1424621


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-125
changelog:
  - Update ganesha policy
  Resolves: rhbz#1426554
  Resolves: rhbz#1383784
  - Allow chronyd to read adjtime
  Resolves: rhbz#1416015
  - Fixes for chrony version 2.2
  Resolves: rhbz#1416015
  - Add interface virt_rw_stream_sockets_svirt()
  Resolves: rhbz#1415841
  - Label /dev/ss0 as gpfs_device_t
  Resolves: rhbz#1383784
  - Allow staff to rw svirt unix stream sockets.
  Resolves: rhbz#1415841
  - Label /rhev/data-center/mnt as mnt_t
  Resolves: rhbz#1408275
  - Associate sysctl_rpc_t with proc filesystems
  Resolves: rhbz#1350927
  - Add new boolean: domain_can_write_kmsg
  Resolves: rhbz#1415715


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-128
changelog:
  - Add handling booleans via selinux-policy macros in custom policy spec files.
  Resolves: rhbz#1380854


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-130
changelog:
  - Allow gssproxy to get attributes on all filesystem object types.
  Resolves: rhbz#1430295
  - Allow ganesha to chat with unconfined domains via dbus
  Resolves: rhbz#1426554
  - add the policy required for nextcloud
  Resolves: rhbz#1425530
  - Add nmbd_t capability2 block_suspend
  Resolves: rhbz#1425357
  - Label /var/run/chrony as chronyd_var_run_t
  Resolves: rhbz#1416015
  - Add domain transition from sosreport_t to iptables_t
  Resolves: rhbz#1359789
  - Fix path to /usr/lib64/erlang/erts-5.10.4/bin/epmd
  Resolves: rhbz:#1332803


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-131
changelog:
  - Remove tomcat_t domain from unconfined domains
  Resolves: rhbz#1432083
  - Create new boolean: sanlock_enable_home_dirs()
  Resolves: rhbz#1432783
  - Allow mdadm_t domain to read/write nvme_device_t
  Resolves: rhbz#1431617
  - Remove httpd_user_*_content_t domains from user_home_type attribute. This tighten httpd policy and acces to user data will be more strinct, and also fix mutual influente between httpd_enable_homedirs and httpd_read_user_content
  Resolves: rhbz#1383621
  - Dontaudit domain to create any file in /proc. This is kernel bug.
  Resolves: rhbz#1412679
  - Add interface dev_rw_nvme
  Resolves: rhbz#1431617


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-132
changelog:
  - Add haproxy_t domain fowner capability
  Resolves: rhbz#1386233
  - Allow domain transition from ntpd_t to hwclock_t domains
  Resolves: rhbz#1375624
  - Allow cockpit_session_t setrlimit and sys_resource
  Resolves: rhbz#1402316
  - Dontaudit svirt_t read state of libvirtd domain
  Resolves: rhbz#1426106
  - Update httpd and gssproxy modules to reflects latest changes in freeipa
  Resolves: rhbz#1432115
  - Allow iptables read modules_conf_t
  Resolves: rhbz#1367520


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-133
changelog:
  - Allow drbd load modules
  Resolves: rhbz#1134883
  - Revert "Add sys_module capability for drbd
  Resolves: rhbz#1134883"
  - Allow stapserver list kernel modules
  Resolves: rhbz#1325976
  - Update targetd policy
  Resolves: rhbz#1373860
  - Add sys_admin capability to amanda
  Resolves: rhbz#1371561
  - Allow hypervvssd_t to read all dirs.
  Resolves: rhbz#1331309
  - Label /run/haproxy.sock socket as haproxy_var_run_t
  Resolves: rhbz#1386233
  - Allow oddjob_mkhomedir_t to mamange autofs_t dirs.
  Resolves: rhbz#1408819
  - Allow tomcat to connect on http_cache_port_t
  Resolves: rhbz#1432083
  - Allow geoclue to send msgs to syslog.
  Resolves: rhbz#1434286
  - Allow condor_master_t domain capability chown.
  Resolves: rhbz#1277506
  - Update mta_filetrans_named_content() interface to allow calling domain create files labeled as etc_aliases_t in dir labeled as etc_mail_t.
  Resolves: rhbz#1167468
  - Allow nova domain search for httpd configuration.
  Resolves: rhbz#1190761
  - Add sys_module capability for drbd
  Resolves: rhbz#1134883
  - Allow user_u users stream connect to dirsrv, Allow sysadm_u and staff_u users to manage dirsrv files
  Resolves: rhbz#1286474
  - Allow systemd_networkd_t communicate with systemd_networkd_t via dbus
  Resolves: rhbz#1278010


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-134
changelog:
  - Allow named_t domain bind on several udp ports
  Resolves: rhbz#1312972
  - Update nscd_use() interface
  Resolves: rhbz#1281716
  - Allow radius_t domain ptrace
  Resolves: rhbz#1426641
  - Update nagios to allos exec systemctl
  Resolves: rhbz#1247635
  - Update pcp SELinux module to reflect all pcp changes
  Resolves: rhbz#1271998
  - Label /var/lib/ssl_db as squid_cache_t Label /etc/squid/ssl_db as squid_cache_t
  Resolves: rhbz#1325527
  - Allow pcp_pmcd_t domain search for network sysctl Allow pcp_pmcd_t domain sys_ptrace capability Resolves: rhbz#1336211


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-136
changelog:
  - geoclue wants to dbus chat with avahi
  Resolves: rhbz#1434286
  - Allow iptables get list of kernel modules
  Resolves: rhbz#1367520
  - Allow unconfined_domain_type to enable/disable transient unit
  Resolves: rhbz#1337041
  - Add interfaces init_enable_transient_unit() and init_disable_transient_unit
  - Revert "Allow sshd setcap capability. This is needed due to latest changes in sshd"
  Resolves: rhbz#1435264
  - Label sysroot dir under ostree as root_t
  Resolves: rhbz#1428112


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-137
changelog:
  - Dontaudit firewalld wants write to /root
  Resolves: rhbz#1438708
  - Dontaudit firewalld to create dirs in /root/
  Resolves: rhbz#1438708
  - Allow sendmail to search network sysctls
  Resolves: rhbz#1369376
  - Add interface gssd_noatsecure()
  Resolves: rhbz#1438036
  - Add interface gssproxy_noatsecure()
  Resolves: rhbz#1438036
  - Dontaudit pcp_pmlogger_t search for xserver logs. Allow pcp_pmlogger_t to send signals to unconfined doamins Allow pcp_pmlogger_t to send logs to journals
  Resolves: rhbz#1379371
  - Allow chronyd_t net_admin capability to allow support HW timestamping.
  Resolves: rhbz#1416015
  - Update tomcat policy
  Resolves: rhbz#1436689
  Resolves: rhbz#1436383
  - Allow certmonger to start haproxy service
  Resolves: rhbz#1349394
  - Allow init noatsecure for gssd and gssproxy
  Resolves: rhbz#1438036


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-139
changelog:
  - Fix all AVC denials during pkispawn of CA
  Resolves: rhbz#1436383
  - Update pki interfaces and tomcat module
  Resolves: rhbz#1436689


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-140
changelog:
  - Allow pcp_pmcd_t net_admin capability.
  - Allow pcp_pmcd_t read net sysctls
  - Allow system_cronjob_t create /var/run/pcp with pcp_var_run_t
  Resolves: rhbz#1336211


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-142
changelog:
  - Allow sbd_t to read/write fixed disk devices
  Resolves: rhbz#1440165
  - Add sys_ptrace capability to radiusd_t domain
  Resolves: rhbz#1426641
  - Allow cockpit_session_t domain connects to ssh tcp ports.
  Resolves: rhbz#1413509


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-143
changelog:
  - Hide broken symptoms when using kernel 3.10.0-514+ with network bonding. Postfix_picup_t domain requires NET_ADMIN capability which is not really needed.
  Resolves: rhbz#1431859
  - Fix policy to reflect all changes in new IPA release
  Resolves: rhbz#1432115
  Resolves: rhbz#1436689


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-145
changelog:
  - Update tomcat policy to adjust for removing unconfined_domain attr.
  Resolves: rhbz#1432083
  - Allow httpd_t domain read also httpd_user_content_type lnk_files.
  Resolves: rhbz#1383621
  - Allow httpd_t domain create /etc/httpd/alias/ipaseesion.key with label ipa_cert_t
  Resolves: rhbz#1436689
  - Dontaudit <user>_gkeyringd_t stream connect to system_dbusd_t
  Resolves: rhbz#1052880
  - Label /var/www/html/nextcloud/data as httpd_sys_rw_content_t
  Resolves: rhbz#1425530
  - Add interface ipa_filetrans_named_content()
  Resolves: rhbz#1432115
  - Allow tomcat use nsswitch
  Resolves: rhbz#1436689
  - Allow certmonger_t start/status generic services
  Resolves: rhbz#1436689
  - Allow dirsrv read cgroup files.
  Resolves: rhbz#1436689
  - Allow ganesha_t domain read/write infiniband devices.
  Resolves: rhbz#1383784
  - Allow sendmail_t domain sysctl_net_t files
  Resolves: rhbz#1369376
  - Allow targetd_t domain read network state and getattr on loop_control_device_t
  Resolves: rhbz#1373860
  - Allow condor_schedd_t domain send mails.
  Resolves: rhbz#1277506
  - Alow certmonger to create own systemd unit files.
  Resolves: rhbz#1436689
  - Allow staff to systemctl virt server when staff_use_svirt=1
  Resolves: rhbz#1415841
  - Allow unconfined_t create /tmp/ca.p12 file with ipa_tmp_t context
  Resolves: rhbz#1432115
  - Label /sysroot/ostree/deploy/rhel-atomic-host/* as root_t
  Resolves: rhbz#1428112


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-146
changelog:
  - Allow pki_tomcat_t domain read /etc/passwd.
  Resolves: rhbz#1436689
  - Allow tomcat_t domain read ipa_tmp_t files
  Resolves: rhbz#1436689
  - Label new path for ipa-otpd
  Resolves: rhbz#1446353
  - Allow radiusd_t domain stream connect to postgresql_t
  Resolves: rhbz#1446145
  - Allow rhsmcertd_t to execute hostname_exec_t binaries.
  Resolves: rhbz#1445494
  - Allow virtlogd to append nfs_t files when virt_use_nfs=1
  Resolves: rhbz#1402561


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-147
changelog:
  - Improve ipa_cert_filetrans_named_content() interface to also allow caller domain manage ipa_cert_t type.
  Resolves: rhbz#1436689


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-148
changelog:
  - Allow hypervkvp_t domain execute hostname
  Resolves: rhbz#1449064
  - Dontaudit sssd_selinux_manager_t use of net_admin capability
  Resolves: rhbz#1444955
  - Allow tomcat_t stream connect to pki_common_t
  Resolves: rhbz#1447436
  - Dontaudit xguest_t's attempts to listen to its tcp_socket
  - Allow sssd_selinux_manager_t to ioctl init_t sockets
  Resolves: rhbz#1436689
  - Allow <role>_su_t to create netlink_selinux_socket
  Resolves rhbz#1146987
  - Allow unconfined_t to module_load any file
  Resolves rhbz#1442994


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-149
changelog:
  - Update targetd policy to accommodate changes in the service
  Resolves: rhbz#1424621
  - Allow tomcat_domain connect to    * postgresql_port_t    * amqp_port_t Allow tomcat_domain read network sysctls
  Resolves: rhbz#1450819
  - Update virt_rw_stream_sockets_svirt() interface to allow confined users set socket options.
  Resolves: rhbz#1415841
  - Allow radius domain stream connec to postgresql
  Resolves: rhbz#1446145
  - Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
  Resolves: rhbz#1449977
  - Allow glusterd_t domain start ganesha service
  Resolves: rhbz#1448090
  - Made few cosmetic changes in sssd SELinux module
  Resolves: rhbz#1448060
  - sssd-kcm should not run as unconfined_service_t BZ(1447411)
  Resolves: rhbz#1448060
  - Add sssd_secrets labeling Also add named_filetrans interface to make sure all labels are correct
  Resolves: rhbz#1448056
  - Allow keepalived_t domain read usermodehelper_t
  Resolves: rhbz#1449769
  - Allow tomcat_t domain read pki_common_t files
  Resolves: rhbz#1447436
  - Add interface pki_read_common_files()
  Resolves: rhbz#1447436


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-150
changelog:
  - Allow tomcat domain read rpm_var_lib_t files Allow tomcat domain exec rpm_exec_t files Allow tomcat domain name connect on oracle_port_t Allow tomcat domain read cobbler_var_lib_t files.
  Resolves: rhbz#1451318
  - Allow sssd_t domain creating sock files labeled as sssd_var_run_t in /var/run/
  Resolves: rhbz#1448056 Resolves: rhbz#1448060
  - Allow tomcat_domain connect to    * postgresql_port_t    * amqp_port_t Allow tomcat_domain read network sysctls
  Resolves: rhbz#1450819
  - Make able deply overcloud via neutron_t to label nsfs as fs_t
  Resolves: rhbz#1373321
  - Allow netutils setpcap capability
  Resolves:1444438


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-151
changelog:
  - nmbd_t needs net_admin capability like smbd
  Resolves: rhbz#1431859
  - Dontaudit net_admin capability for domains postfix_master_t and postfix_qmgr_t
  Resolves: rhbz#1431859
  - Allow rngd domain read sysfs_t
  Resolves: rhbz#1451735
  - Add interface pki_manage_common_files()
  Resolves: rhbz#1447436
  - Allow tomcat_t domain to manage pki_common_t files and dirs
  Resolves: rhbz#1447436
  - Use stricter fc rules for sssd sockets in /var/run
  Resolves: rhbz#1448060
  - Allow certmonger reads httpd_config_t files
  Resolves: rhbz#1436689
  - Allow keepalived_t domain creating netlink_netfilter_socket.
  Resolves: rhbz#1451684
  - Allow tomcat domain read rpm_var_lib_t files Allow tomcat domain exec rpm_exec_t files Allow tomcat domain name connect on oracle_port_t Allow tomcat domain read cobbler_var_lib_t files.
  Resolves: rhbz#1451318
  - Make able deply overcloud via neutron_t to label nsfs as fs_t
  Resolves: rhbz#1373321


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-152
changelog:
  - Allow httpd_t reading kerberos kdc config files
  Resolves: rhbz#1452215
  - Allow tomcat_t domain connect to ibm_dt_2 tcp port.
  Resolves: rhbz#1447436
  - Allow stream connect to initrc_t domains
  Resolves: rhbz#1447436
  - Allow  dnsmasq_t domain to read systemd-resolved pid files.
  Resolves: rhbz#1453114
  - Allow tomcat domain name_bind on tcp bctp_port_t
  Resolves: rhbz#1451757
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1447669
  - Allow condor_master_t write to sysctl_net_t
  Resolves: rhbz#1277506
  - Allow nagios check disk plugin read /sys/kernel/config/
  Resolves: rhbz#1277718
  - Allow pcp_pmie_t domain execute systemctl binary
  Resolves: rhbz#1271998
  - Allow nagios to connect to stream sockets. Allow nagios start httpd via systemctl
  Resolves: rhbz#1247635
  - Label tcp/udp port 1792 as ibm_dt_2_port_t
  Resolves: rhbz#1447436
  - Add interface fs_read_configfs_dirs()
  - Add interface fs_read_configfs_files()
  - Fix systemd_resolved_read_pid interface
  - Add interface systemd_resolved_read_pid()
  Resolves: rhbz#1453114
  - Allow sshd_net_t domain read/write into crypto devices
  Resolves: rhbz#1452759
  - Label 8999 tcp/udp as bctp_port_t
  Resolves: rhbz#1451757


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-154
changelog:
  - Add few allow rules to ganesha module
  Resolves: rhbz#1448090
  - Allow condor_master_t to read sysctls.
  Resolves: rhbz#1277506
  - Add dac_override cap to ctdbd_t domain
  Resolves: rhbz#1435708
  - Label 8750 tcp/udp port as dey_keyneg_port_t
  Resolves: rhbz#1448090


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-155
changelog:
  - Create new interface: glusterd_read_lib_files()
  - Allow ganesha read glusterd lib files.
  - Allow ganesha read network sysctls
  Resolves: rhbz#1448090


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-156
changelog:
  - Add new boolean virt_use_glusterd
  Resolves: rhbz#1455994
  - Add capability sys_boot for sbd_t domain
  - Allow sbd_t domain to create rpc sysctls.
  Resolves: rhbz#1455631
  - Allow ganesha_t domain to manage glusterd_var_run_t pid files.
  Resolves: rhbz#1448090


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-157
changelog:
  - Allow tomcat to connect on all unreserved ports
  - Allow ganesha to connect to all rpc ports
  Resolves: rhbz#1448090
  - Update ganesha with another fixes.
  Resolves: rhbz#1448090
  - Update rpc_read_nfs_state_data() interface to allow read also lnk_files.
  Resolves: rhbz#1448090
  - virt_use_glusterd boolean should be in optional block Update ganesha module to allow create tmp files
  Resolves: rhbz#1448090
  - Hide broken symptoms when machine is configured with network bounding.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-158
changelog:
  - Allow iscsi domain load kernel module.
  Resolves: rhbz#1457874
  - Allow keepalived domain connect to squid tcp port
  Resolves: rhbz#1457455
  - Allow krb5kdc_t domain read realmd lib files.
  Resolves: rhbz#1436689
  - xdm_t should view kernel keys
  Resolves: rhbz#1432645


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-160
changelog:
  - Allow named_t to bind on udp 4321 port
  Resolves: rhbz#1312972
  - Allow systemd-sysctl cap. sys_ptrace
  Resolves: rhbz#1458999


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-163
changelog:
  - Allow sssd_t to read realmd lib files.
  Resolves: rhbz#1436689
  - Add permission open to files_read_inherited_tmp_files() interface
  Resolves: rhbz#1290633
  Resolves: rhbz#1457106


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-164
changelog:
  - Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
  Resolves: rhbz#1424621
  - Add interface lvm_manage_metadata
  Resolves: rhbz#1424621


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-166
changelog:
  - Add new boolean gluster_use_execmem
  Resolves: rhbz#1469027
  - Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
  Resolves: rhbz#1468581


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-170
changelog:
  - Add few rules to make working targetd daemon with SELinux
  Resolves: rhbz#1373860
  - Allow ipmievd_t domain to load kernel modules
  Resolves: rhbz#1441081
  - Allow logrotate to reload transient systemd unit
  Resolves: rhbz#1440515
  - Add certwatch_t domain dac_override and dac_read_search capabilities
  Resolves: rhbz#1422000
  - Allow postgrey to execute bin_t files and add postgrey into nsswitch_domain
  Resolves: rhbz#1412072
  - Allow nscd_t domain to search network sysctls
  Resolves: rhbz#1432361
  - Allow iscsid_t domain to read mount pid files
  Resolves: rhbz#1482097
  - Allow ksmtuned_t domain manage sysfs_t files/dirs
  Resolves: rhbz#1413865
  - Allow keepalived_t domain domtrans into iptables_t
  Resolves: rhbz#1477719
  - Allow rshd_t domain reads net sysctls
  Resolves: rhbz#1477908
  - Add interface seutil_dontaudit_read_module_store()
  - Update interface lvm_rw_pipes() by adding also open permission
  - Label /dev/clp device as vfio_device_t
  Resolves: rhbz#1477624
  - Allow ifconfig_t domain unmount fs_t
  Resolves: rhbz#1477445
  - Label /dev/gpiochip* devices as gpio_device_t
  Resolves: rhbz#1477618
  - Add interface  dev_manage_sysfs()
  Resolves: rhbz#1474989


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-171
changelog:
  - Allow targetd_t to create own tmp files.
  - Dontaudit targetd_t to exec rpm binary file.
  Resolves: rhbz#1373860
  Resolves: rhbz#1424621


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-173
changelog:
  - Allow tomcat to setsched 
  Resolves: rhbz#1492730
  - Fix rules blocking ipa-server upgrade process
  Resolves: rhbz#1478371
  - Add new boolean tomcat_read_rpm_db()
  Resolves: rhbz#1477887
  - Allow tomcat to connect on mysqld tcp ports
  - Add ctdbd_t domain sys_source capability and allow setrlimit
  Resolves: rhbz#1491235
  - Fix keepalived SELinux module
  - Allow automount domain to manage mount pid files
  Resolves: rhbz#1482381
  - Allow stunnel_t domain setsched
  Resolves: rhbz#1479383
  - Add keepalived domain setpgid capability
  Resolves: rhbz#1486638
  - Allow tomcat domain to connect to mssql port
  Resolves: rhbz#1484572
  - Remove snapperd_t from unconfined domaines
  Resolves: rhbz#1365555
  - Fix typo bug in apache module
  Resolves: rhbz#1397311
  - Dontaudit that system_mail_t is trying to read /root/ files
  Resolves: rhbz#1147945
  - Make working webadm_t userdomain
  Resolves: rhbz#1323792
  - Allow redis domain to execute shell scripts.
  Resolves: rhbz#1421326
  - Allow system_cronjob_t to create redhat-access-insights.log with var_log_t
  Resolves: rhbz#1473303
  - Add couple capabilities to keepalived domain and allow get attributes of all domains
  Resolves: rhbz#1429327
  - Allow dmidecode read rhsmcertd lock files
  Resolves: rhbz#1300799
  - Add new interface rhsmcertd_rw_lock_files()
  Resolves: rhbz#1300799
  - Label all plymouthd archives as plymouthd_var_log_t
  Resolves: rhbz#1478323
  - Allow cloud_init_t to dbus chat with systemd_timedated_t
  Resolves: rhbz#1440730
  - Allow logrotate_t to write to kmsg
  Resolves: rhbz#1397744
  - Add capability kill to rhsmcertd_t
  Resolves: rhbz#1398338
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464063
  - Allow winbind to manage smbd_tmp_t files
  Resolves: rhbz#1475566
  - Dontaudit that system_mail_t is trying to read /root/ files
  Resolves: rhbz#1147945
  - Make working webadm_t userdomain
  Resolves: rhbz#1323792
  - Allow redis domain to execute shell scripts.
  Resolves: rhbz#1421326
  - Allow system_cronjob_t to create redhat-access-insights.log with var_log_t
  Resolves: rhbz#1473303
  - Add couple capabilities to keepalived domain and allow get attributes of all domains
  Resolves: rhbz#1429327
  - Allow dmidecode read rhsmcertd lock files
  Resolves: rhbz#1300799
  - Add new interface rhsmcertd_rw_lock_files()
  Resolves: rhbz#1300799
  - Label all plymouthd archives as plymouthd_var_log_t
  Resolves: rhbz#1478323 
  - Allow cloud_init_t to dbus chat with systemd_timedated_t
  Resolves: rhbz#1440730
  - Allow logrotate_t to write to kmsg
  Resolves: rhbz#1397744
  - Add capability kill to rhsmcertd_t
  Resolves: rhbz#1398338
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464063
  - Allow winbind to manage smbd_tmp_t files
  Resolves: rhbz#1475566
  - Add interface systemd_tmpfiles_run
  - End of file cannot be in comment
  - Allow systemd-logind to use ypbind
  Resolves: rhbz#1479350
  - Add creating opasswd file with shadow_t SELinux label in auth_manage_shadow() interface
  Resolves: rhbz#1412838
  - Allow sysctl_irq_t assciate with proc_t
  Resolves: rhbz#1485909
  - Enable cgourp sec labeling
  Resolves: rhbz#1485947
  - Add cgroup_seclabel policycap.
  Resolves: rhbz#1485947
  - Allow sshd_t domain to send signull to xdm_t processes
  Resolves: rhbz#1448959
  - Allow updpwd_t domain auth file name trans
  Resolves: rhbz#1412838
  - Allow sysadm user to run systemd-tmpfiles
  Resolves: rbhz#1325364
  - Add support labeling for vmci and vsock device
  Resolves: rhbz#1451358
  - Add userdom_dontaudit_manage_admin_files() interface
  Resolves: rhbz#1323792
  - Allow iptables_t domain to read files with modules_conf_t label
  Resolves: rhbz#1373220
  - init: Add NoNewPerms support for systemd.
  Resolves: rhbz#1480518
  - Add nnp_nosuid_transition policycap and related class/perm definitions.
  Resolves: rhbz#1480518
  - refpolicy: Infiniband pkeys and endports
  Resolves: rhbz#1464484


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-174
changelog:
  - We should not ship selinux-policy with permissivedomains enabled.
  Resolves: rhbz#1494172
  - Fix order of installing selinux-policy-sandbox, because of depedencied in sandbox module, selinux-policy-targeted needs to be installed before selinux-policy-sandbox
  Resolves: rhbz#1492606


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-175
changelog:
  - Allow pegasus_openlmi_services_t to read generic certs
  Resolves: rhbz#1462292
  - Allow ganesha_t domain to read random device
  Resolves: rhbz#1494382
  - Allow zabbix_t domain to change its resource limits
  Resolves: rhbz:#1504074
  - Add new boolean nagios_use_nfs
  Resolves: rhbz#1504826
  - Allow system_mail_t to search network sysctls
  Resolves: rhbz#1505779
  - Add samba_manage_var_dirs() interface
  - Fix typo bug in virt filecontext file
  - Allow nagios_script_t to read nagios_spool_t files
  Resolves: rhbz#1426824
  - Allow samba to manage var dirs/files
  Resolves: rhbz#1415088
  - Allow sbd_t to create own sbd_tmpfs_t dirs/files
  Resolves: rhbz#1380795
  - Allow firewalld and networkmanager to chat with hypervkvp via dbus
  Resolves: rhbz#1377276
  - Allow dmidecode to read rhsmcert_log_t files
  Resolves: rhbz#1300799
  - Allow mail system to connect mariadb sockets.
  Resolves: rhbz#1368642
  - Allow logrotate_t to change passwd and reloead services
  Resolves: rhbz#1450789
  - Allow mail system to connect mariadb sockets.
  Resolves: rhbz#1368642
  - Allow logrotate_t to change passwd and reloead services
  Resolves: rhbz#1450789
  - Allow pegasus_openlmi_services_t to read generic certs
  Resolves: rhbz#1462292
  - Allow ganesha_t domain to read random device
  Resolves: rhbz#1494382
  - Allow zabbix_t domain to change its resource limits
  Resolves: rhbz:#1504074
  - Add new boolean nagios_use_nfs
  Resolves: rhbz#1504826
  - Allow system_mail_t to search network sysctls
  Resolves: rhbz#1505779
  - Add samba_manage_var_dirs() interface
  - Fix typo bug in virt filecontext file
  - Allow nagios_script_t to read nagios_spool_t files
  Resolves: rhbz#1426824
  - Allow samba to manage var dirs/files
  Resolves: rhbz#1415088
  - Allow sbd_t to create own sbd_tmpfs_t dirs/files
  Resolves: rhbz#1380795
  - Allow firewalld and networkmanager to chat with hypervkvp via dbus
  Resolves: rhbz#1377276
  - Allow dmidecode to read rhsmcert_log_t files
  Resolves: rhbz#1300799
  - Allow mail system to connect mariadb sockets.
  Resolves: rhbz#1368642
  - Allow logrotate_t to change passwd and reloead services
  Resolves: rhbz#1450789
  - Allow chronyd_t do request kernel module and block_suspend capability
  Resolves: rhbz#1350765
  - Allow system_cronjob_t to create /var/lib/letsencrypt dir with right label
  Resolves: rhbz#1447278
  - Allow httpd_t also read httpd_user_content_type dirs when httpd_enable_homedirs is enables
  Resolves: rhbz#1491994
  - Allow svnserve to use kerberos
  Resolves: rhbz#1475271
  - Allow conman to use ptmx. Add conman_use_nfs boolean
  Resolves: rhbz#1377915
  - Add nnp transition for services using: NoNewPrivileges systemd security feature
  Resolves: rhbz#1311430
  - Add SELinux support for chronyc
  Resolves: rhbz#1470150
  - Add dac_read_search capability to openvswitch_t domain
  Resolves: rhbz#1501336
  - Allow svnserve to manage own svnserve_log_t files/dirs
  Resolves: rhbz#1480741
  - Allow keepalived_t to search network sysctls
  Resolves: rhbz#1477542
  - Allow puppetagent_t domain dbus chat with rhsmcertd_t domain
  Resolves: rhbz#1446777
  - Add dccp_socket into socker_class_set subset
  Resolves: rhbz#1459941
  - Allow iptables_t to run setfiles to restore context on system
  Resolves: rhbz#1489118
  - Label 20514 tcp/udp ports as syslogd_port_t Label 10514 tcp/udp portas as syslog_tls_port_t
  Resolves: rhbz:#1411400
  - Make nnp transition Active
  Resolves: rhbz#1480518
  - Label tcp 51954 as isns_port_t
  Resolves: rhbz#1390208
  - Add dac_read_search capability chkpwd_t
  Resolves: rhbz#1376991
  - Add support for running certbot(letsencrypt) in crontab
  Resolves: rhbz#1447278
  - Add init_nnp_daemon_domain interface
  - Allow xdm_t to gettattr /dev/loop-control device
  Resolves: rhbz#1462925
  - Allow nnp trasintion for unconfined_service_t
  Resolves: rhbz#1311430
  - Allow unpriv user domains and unconfined_service_t to use chronyc
  Resolves: rhbz#1470150
  - Allow iptables to exec plymouth.
  Resolves: rhbz#1480374
  - Fix typo in fs_unmount_tracefs interface.
  Resolves: rhbz#1371057
  - Label postgresql-check-db-dir as postgresql_exec_t
  Resolves: rhbz#1490956


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-176
changelog:
  - Allow chronyc_t domain to use user_ptys
  Resolves: rhbz#1470150
  - allow ptp4l to read /proc/net/unix file
  - Allow conmand to use usb ttys.
  Resolves: rhbz#1505121
  - Label all files /var/log/opensm.* as opensm_log_t because opensm creating new log files with name opensm-subnet.lst
  Resolves: rhbz#1505845
  - Allow chronyd daemon to execute chronyc.
  Resolves: rhbz#1508486
  - Allow firewalld exec ldconfig.
  Resolves: rhbz#1375576
  - Allow mozilla_plugin_t domain to dbus chat with devicekit
  Resolves: rhbz#1460477
  - Dontaudit leaked logwatch pipes
  Resolves: rhbz#1450119
  - Label /usr/bin/VGAuthService as vmtools_exec_t to confine this daemon.
  Resolves: rhbz#1507048
  - Allow httpd_t domain to execute hugetlbfs_t files
  Resolves: rhbz#1507682
  - Allow nfsd_t domain to read configfs_t files/dirs
  Resolves: rhbz#1439442
  - Hide all allow rules with ptrace inside deny_ptrace boolean
  Resolves: rhbz#1421075
  - Allow tgtd_t domain to read generic certs
  Resolves: rhbz#1438532
  - Allow ptp4l to send msgs via dgram socket to unprivileged user domains
  Resolves: rhbz#1429853
  - Allow dirsrv_snmp_t to use inherited user ptys and read system state
  Resolves: rhbz#1428568
  - Allow glusterd_t domain to create own tmpfs dirs/files
  Resolves: rhbz#1411310
  - Allow keepalived stream connect to snmp
  Resolves: rhbz#1401556
  - After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy
  Resolves: rhbz#1507089


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-177
changelog:
  - Allow jabber domains to connect to postgresql ports
  Resolves: rhbz#1438489
  - Dontaudit accountsd domain creating dirs in /root
  Resolves: rhbz#1456760 
  - Dontaudit slapd_t to block suspend system
  Resolves: rhbz: #1479759 
  - Allow spamc_t to stream connect to cyrus.
  Resolves: rhbz#1382955 
  - allow imapd to read /proc/net/unix file
  Resolves: rhbz#1393030 
  - Allow passenger to connect to mysqld_port_t
  Resolves: rhbz#1433464


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-178
changelog:
  - Add dependency for policycoreutils-2.5.18 becuase of new cgroup_seclabel policy capability
  Resolves: rhbz#1510145


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-179
changelog:
  - Allow ldap_t domain to manage also slapd_tmp_t lnk files
  Resolves: rhbz#1510883
  - Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
  Resolves: rhbz:#1508360
  - Add dac_read_search and dac_override capabilities to ganesha
  Resolves: rhbz#1483451


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-181
changelog:
  - Allow tomcat_t to manage pki_tomcat pid files
  Resolves: rhbz#1478371
  - networkmanager: allow talking to openvswitch
  Resolves: rhbz#1517247
  - Allow networkmanager_t and opensm_t to manage subned endports for IPoIB VLANs
  Resolves: rhbz#1517895
  - Allow domains networkmanager_t and opensm_t to control IPoIB VLANs
  Resolves: rhbz#1517744
  - Fix typo in guest interface file
  Resolves: rhbz#1468254
  - Allow isnsd_t domain to accept tcp connections.
  Resolves: rhbz#1390208


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-182
changelog:
  - Label /dev/drm_dp_aux* as xserver_misc_device_t
  Resolves: rhbz#1520897
  - Allow sysadm_t to run puppet_exec_t binaries as puppet_t
  Resolves: rhbz#1255745


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-184
changelog:
  - Allow chronyc_t domain to manage chronyd_keys_t files.
  Resolves: rhbz#1530525
  - Make virtlog_t domain system dbus client
  Resolves: rhbz#1481109
  - Update openvswitch SELinux module
  Resolves: rhbz#1482682
  - Allow virtd_t to create also sock_files with label virt_var_run_t
  Resolves: rhbz#1484075


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-185
changelog:
  - Allow vmtools_t domain creating vmware_log_t files
  Resolves: rhbz#1507048
  - Allow openvswitch_t domain to acces infiniband devices
  Resolves: rhbz#1532705


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-186
changelog:
  - Allow virt_domains to acces infiniband pkeys.
  Resolves: rhbz#1533183
  - Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
  Resolves: rhbz#1535133
  - Allow audisp_remote_t domain write to files on all levels
  Resolves: rhbz#1534924


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-187
changelog:
  - Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
  Resolves: rhbz#1535196
  - Add new interface ppp_filetrans_named_content()
  Resolves: rhbz#1530601
  - Allow keepalived_t read sysctl_net_t files
  Resolves: rhbz#1477542
  - Allow puppetmaster_t domtran to puppetagent_t
  Resolves: rhbz#1376893
  - Allow kdump_t domain to read kernel ring buffer
  Resolves: rhbz#1540004
  - Allow ipsec_t domain to exec ifconfig_exec_t binaries.
  Resolves: rhbz#1539416
  - Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
  Resolves: rhbz#1530601
  - Allow updpwd_t domain to create files in /etc with shadow_t label
  Resolves: rhbz#1412838
  - Allow iptables sysctl load list support with SELinux enforced
  Resolves: rhbz#1535572


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-188
changelog:
  - Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
  Resolves: rhbz#1540702
  - Allow keepalived_t domain getattr proc filesystem
  Resolves: rhbz#1477542
  - Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
  Resolves: rhbz#1538544
  - Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
  Resolves: rhbz:#1539416
  - Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
  Resolves: rhbz#1479350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-189
changelog:
  - Allow dirsrv_t domain to create tmp link files
  Resolves: rhbz#1536011
  - Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
  Resolves: rhbz#1428568
  - Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
  - Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
  Resolves: rhbz#1539416


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-190
changelog:
  - Allow openvswitch domain to manage svirt_tmp_t sock files
  Resolves: rhbz#1540702
  - Fix broken systemd_tmpfiles_run() interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-192
changelog:
  - Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
  Resolves: rhbz#1546721


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in. #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - #205803 add sparc/sparc64 to -fPIE list
  - change sendmail.cf reference into sendmail-cf package name


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-1
changelog:
  - new version 8.14.1
  - spec file cleanup for merge review (rhbz#226407)
  - dropped update support for sendmail versions prior to 8.12.0
  - using pdf documentation


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-2
changelog:
  - readded chkconfig add for sendmail in post script
  - dropped mysql support (useless without further patching)
  - fixed executable permissions for /usr/sbin/makemap and /usr/sbin/smrsh
  - dropped FFR_UNSAFE_SASL, because it has no effect anymore


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-4
changelog:
  - do not remove /etc/aliases.db on package removal (rhbz#223637)
  - fixed remaining paths to certs directory in sendmail.mc file
  - added contrib scripts to the doc package (rhbz#183723)
  - added LSB header to init script (rhbz#247053)
  - added plain login information for cyrus-sasl to access file
  - fixed compile problem with glibc-2.6.90+
  - fixed reoccuring m4 include problem (now using sinclude)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-2
changelog:
  - add NM dispatcher script (#451575)
  - print warning on service start when sendmail-cf is required (#447148)
  - replace Makefile with shell script to avoid dependency on make (#467841)
  - fix multiarch conflicts (#343161)
  - preserve timestamps on config files
  - gzip RELEASE_NOTES
  - defuzz patches
  - drop gcc2690 patch


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-9
changelog:
  - fix milter file descriptors leaks (#485426)
  - skip colon separator when parsing service name in ServiceSwitchFile
  - return with non-zero exit code when free space is below MinFreeBlocks
  - fix service stop/restart when only smclient is running
  - fix submit.cf and helpfile permissions
  - more merge review fixes (#226407)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - drop exitpanic patch (fixed upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-4
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-6
changelog:
  - sasl2 config moved from {_libdir}/sasl2 to {_sysconfdir}/sasl2
  - added libdb5 patch for building with libdb-5
  - rebuilt with libdb-5


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-8
changelog:
  - all 'define' changed to 'global' in spec
  - perl interpreter path fixup moved from 'install' to 'prep'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-10
changelog:
  - added stub man pages for hoststat and purgestat
  - rmail man page added to alternatives
  - updated subpackages description
  - sendmail-cf/cf/README is not packaged - it is useless for end users
  - added comments about purpose of files and patches
  - removed redundant license tag from milter subpackage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-11
changelog:
  - README.libmilter moved to milter subpackage
  - updated description of doc subpackage
  - README.redhat removed (not needed any more)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-18
changelog:
  - add QoS support, patch from Philip Prindeville <philipp@fedoraproject.org>
    upstream reserved option ID 0xe7 for testing of this new feature (#576643)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-21
changelog:
  - fix negative ctx_id in milter debug output (#577558)
  - fix incomplete description of the -i option in man page (#676824)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-1
changelog:
  - New version 8.14.5
  - Removed m4-ldap-routing, milter-fix-negativeid, man-i-option-fix
    patches (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-4
changelog:
  - Removed dots from description (there are no dots in systemd packaging
    guidelines)
  - Changed service type to forking and explicitly specified PID files
  - Fixed creation of sm-client.pid
  - Added Wants to sm-client.service and sendmail.service
  - Replaced each occurrence of /var/run by /run in config files
  - More details are available in rhbz#697636


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-6
changelog:
  - Fixed systemctl disable command in preun section
  - Replaced reload by restart, dropped ExecReload from sendmail.service
    Resolves: rhbz#719931
  - Switched to systemctl in NetworkManager dispatcher script
  - Added ExecStartPre=-/etc/mail/make to sm-client.service
  - Hardcoded daemon option (-bd) to sendmail.service, dropped the DAEMON var
  - QUEUE var in /etc/sysconfig/sendmail replaced by SENDMAIL_OPTS var
  - Added default preset (-q1h) to SENDMAIL_OPTS var


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-7
changelog:
  - Hardened build with full relro
  - Provided SysV initscript in sysvinit subpackage for backward compatibility


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-9
changelog:
  - Enabled alternatives --initscript in post section
  - Improved sysvinit subpackage - switched to noarch, added scriptlets
  - Workarounded sm-client stop on SysV to systemd migration


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
  - Explicitly enabled sm-client statistics
    Resolves: rhbz#890585
  - Enable ECDHE support
    Resolves: rhbz#1124827
  - Properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    Resolves: rhbz#1210914
  - Added makemap and its manual page into alternatives
    Resolves: rhbz#1225891
  - Modified nm-dispatcher script to asynchronously restart sendmail and
    not block the connection activation
    Resolves: rhbz#1237070
  - Added config options allowing disablement of TLS 1.1/2
    Resolves: rhbz#1281476
  - Fixed problem with e-mails not sending from IPv6 enabled server
    to servers with MX record pointing to CNAME
    Resolves: rhbz#1294870
  - Added editmap
    Resolves: rhbz#1342393
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1395102
  - Fixed op.pdf
    Resolves: rhbz#1401070


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Update to latest code from tresys
  - Break into three separate packages for cmdline, devel and gui
  - Incorporate the tcl patch


author: Bill Nottingham <notting@redhat.com> 2.1.0-5
changelog:
  - put libraries in the right place (also puts debuginfo in the right
    package)
  - add %defattr for -devel too


author: Dan Walsh <dwalsh@redhat.com> 2.3-1
changelog:
  - Update from upstream
    * apol:
          added new MLS components tab for sensitivities, 
          levels, and categories.
          Changed users tab to support ranges and default 
          levels.
          added range transition tab for searching range
          Transition rules.
          added new tab for network context components.
          added new tab for file system context components.
    * libapol:
          added binpol support for MLS, network contexts, 
          and file system contexts.
    * seinfo:
          added command line options for MLS components.
          added command line options for network contexts
          and file system contexts.
    * sesearch:
          added command line option for searching for rules
          by conditional boolean name.
    * seaudit:
          added new column in the log view for the 'comm' 
          field found in auditd log files.
          added filters for the 'comm' field and 'message'
          field.
    * manpages:
          added manpages for all tools.


author: Chris PeBenito <cpebenito@tresys.com> 3.3.4-1
changelog:
  - Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues.
  - Fix policy loading when policy on disk is higher version than the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 3.3.7-24
changelog:
  - Revert setools current patch

  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Use selinux_current_policy_path to read by default policy


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.


author: Rex Dieter <rdieter@fedoraproject.org> 3.0.45-2
changelog:
  - optimize/update scriptlets
  - don't own icons/hicolor
  - drop %config tag on applications/*.desktop

  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: Dan Walsh <dwalsh@redhat.com> - 3.1.1-1
changelog:
  - remove specific logging and move to syslog
  - Fix handling of AVC messages broken by fix for memory leaks


author: Dan Walsh <dwalsh@redhat.com> - 3.1.3-1
changelog:
  - Update to latest translations
  - Fix handling of avc messages, missing \n
  - Default to check for AVC's on login


author: Dan Walsh <dwalsh@redhat.com> - 3.1.16-1
changelog:
  - Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC
  - Update Translations
  - Fix hostname substitution to only effect hostnames


author: Dan Walsh <dwalsh@redhat.com> - 3.2.1-1
changelog:
  - Remove sesearch from package and start using sepolicy from policycoreutils-python
  - Fix retrieval of writable types to translate attributes into the group of types available, and not return non file types.


author: Dan Walsh <dwalsh@redhat.com> - 3.2.9-1
changelog:
  - On update cp instead of rename, since there could be a situation where
  someone has ~/.config on a different file sytem then ~.  It has happened.
  - Fix --password spelling error
  - Remove --quit option from sealert
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 3.2.24-1.1
changelog:
  - Stop sending syslog.LOG_DEBUG Messages unless loglevel is set to debug
  - Add the policy rpm string to the user comments of an already reported bug from jfilak@redhat.com
  - Remove at_console lines from policykit so cockpit can use dbus interfaces.
  - Fix handling of target paths that decode screws up
  - Provide the policy rpm in Bugzilla bug reports by jfilak@redhat.com
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  - translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.25-1
changelog:
  - Extended DBUS API, see DBUS.md
  - get_alert() DBUS API extended with more parameters
  - sedispatch uses a timeout when collecting audit events (#1322771)
  - setroubleshoot: Ensure that dbus string param isn't null
  - Translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.26-1
changelog:
  - get_alert() and get_all_alerts_since() DBUS APIs change to use
    number of microseconds instead of date string
  - level = debug can be set separately for sealert_log and setroubleshootd_log
  - added new directive to setroubleshootd_log - log_full_report = True|False
  - added new methods to DBUS API:
    set_filter(), get_all_alerts_ignored(), delete_alert()
  - suggest my-<command>.pp modules instead of mypol.pp
  - setroubleshoot.conf cleanup
  - bug fixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.28-1
changelog:
  - Fix sealert message for capability2
  - Spelling fixes
  - sealert - provide a better error message when SELinux is disabled (#1420084)
  - Fix report problem summary string (#1343397)
  - Update setroubleshootd.8 (#1348140)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.29-1
changelog:
  - Fix sealert message for process2 (#1507909)
  - Remove additional "If " string from plugin messages (#1177347)
  - Fix semi-translated messages (#1332126)
  - Make labels on GtkButtons translatable
  - Set translation domain for Gtk.Builder() object to have strings correctly translated (#1370100)
  - Do not split If sentences to framework and plugins (#1177347)
  - Don't stop when the plugin directory is empty
  - Change "check_for_man" return value upon failure
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin 
  - Fix sealert crash when setroubleshootd fails to start (#1405003)


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations from setroubleshoot-server
            package to this new independent package to allow easier updating
            of just the plugins


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - Resolve bug #332281: remove obsolete translation
  	- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug #416351: setroubleshoot does not escape regex chars in suggested cmds
  	- add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
  	  and is the full path name of $SOURCE


author: <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Execute catchall_boolean.py before allow_daemons_use_tty
  	- Fix chcon lines to match current policy


author: <dwalsh@redhat.com> - 2.1.1-1
changelog:
  - Add first plugins which will launch Red Star
  - Add Thomas Liu change to allow restorecon to execute fixit button  
    *   2009-06-19 Dan Walsh <dwalsh@redhat.com>
  	- Add setenforce.py from Thomas Liu
  	- Add sys_module.py, mmap_zero.py, kernel_modules.py, selinuxpolicy.py
  	- Allow restorecon to execute fixit command


author: <dwalsh@redhat.com> - 3.0.3-1
changelog:
  - Update translations
  - Fix catchall plugin to give better messages on capabilities and process avcs


author: <dwalsh@redhat.com> - 3.0.16-1
changelog:
  - Update translations
  - Change allow_execmod plugin to only fire if target_path is lib_t
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.47-1
changelog:
  - Update translations
  - Fix sys_resource.py to mention all types of resources
  - Fix unicode calls so catchall_booleans.py does not crash sealert


author: Dan Walsh <dwalsh@redhat.com> - 3.0.48-1
changelog:
  - Fix connect_ports and bind_ports to specify semanage command if only 1 port is available rather then to suggest user choices
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 3.0.52-1
changelog:
  - Update Translations
  - Only translate catchall_boolean descritpions if the are not unicode to start with.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.53-1
changelog:
  - Update Translations
  - Add sandbox_connect plugin to point out the use of alternate types with the sandbox -X command.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.57-1
changelog:
  - Add restorecon_source plugin, to check the source program is labeled correclty.
  - Fix restorecon.py to handle customized_files properly.
  - Update Translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.62-1
changelog:
  - Suggest my-<command>.pp modules instead of mypol.pp (#1329037)
  - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended
  - Suggest to use ausearch instead of grep


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.65-1
changelog:
  - Remove duplicated strings from sys_resource.py
  - Spelling fixes
  - Fix catchall plugin message for capability2
  - Stop executing restorecon plugin on specified path prefixes


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.66-1
changelog:
  - Fix catchall plugin message for process2 (#1507909)
  - Correct grammatical errors (#1331780)
  - Do not split If sentences to framework and plugins (#1177347)
  - Fix typo in "lt" translation header (#1468985)
  - catchall_boolean.py - 'None' man page is None man page
  - Fix restorecon "then" text (#1332097)


author: Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
changelog:
  - added %attr's
  - added sanity check for RPM_BUILD_ROOT
  - setserial is now installed into /bin, where util-linux puts it and all
    startup scripts expect it.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - pulled into distribution
  - used setserial-2.12_CTI.tgz instead of setserial-2.12.tar.gz (former is
    all that sunsite has) - not sure what the difference is.


author: Tim Waugh <twaugh@redhat.com> 2.17-5
changelog:
  - Fix init script (bug #52862).
  - Avoid temporary file vulnerability in init script.
  - Update README: it's --add, not -add.


author: Tim Waugh <twaugh@redhat.com> 2.17-20
changelog:
  - Fixed mandir in fhs patch (bug #226411).
  - Don't run strip (bug #226411).
  - Fixed readme patch to talk about Fedora not Red Hat Linux (bug #226411).
  - Fixed build root tag (bug #226411).
  - Use SMP make flags (bug #226411).
  - Avoid %makeinstall (bug #226411).
  - Fixed summary (bug #226411).


author: Erik Troan <ewt@redhat.com>
changelog:
  - removed /etc/inetd.conf, /etc/rpc
  - flagged /etc/securetty as missingok
  - fixed buildroot stuff in spec file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rename /etc/csh.cshrc to /etc/csh.login (#2931).
  - (note: modified /etc/csh.cshrc should end up in /etc/csh.cshrc.rpmsave)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - split csh.login into csh.login and csh.cshrc (#various)
  - fix pop service names (#6206)
  - fix ipv6 protocols entries (#6219)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add smtps (465/tcp) and submission (587/tcp) to /etc/services for TLS
    support (postfix >= 20001030-2)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Clean up /etc/services, separating registered numbers from unregistered
    ("squatted") numbers, and adding some.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - overhaul /etc/protocols (#18530)
  - add port 587 to /etc/services (#25001)
  - add corbaloc (#19581)
  - don't set /usr/X11R6/bin in $PATH if it's already set (#19968)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.10-1
changelog:
  - Fix bugs #24159 and #30634 again; whoever moved bashrc from bash
    to setup used an old version. :((


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.15-1
changelog:
  - reorder /etc/services to match comments again
  - protocol 118 is stp, not st
  - update URLs in /etc/protocols and /etc/services


author: Bill Nottingham <notting@redhat.com>
changelog:
  - lock only needs to be a gid
  - don't set dspmbyte=euc here; do it in lang.csh, and only if necessary (#50318)


author: Nalin Dahyabhai <nalin@redhat.com> 2.5.7-1
changelog:
  - add entries to services (ipp, wnn4, and so on)
  - try to remove duplicates in services (remove nameserver as alias for domain,
    and readnews as alias for netnews)


author: Bill Nottingham <notting@redhat.com> 2.5.8-1
changelog:
  - add nologin to /etc/shells (#53963)
  - fix some quoting issues (#59627)
  - fix screen status line (#60596)
  - fix path regexps (#59624)
  - move profile.d stuff to csh.cshrc (#59946)


author: Jens Petersen <petersen@redhat.com> 2.5.16-1
changelog:
  - dont special case screen in /etc/bashrc, since it overrides the user's
    screenrc title setting (#60596)


author: Jens Petersen <petersen@redhat.com> 2.5.18-1
changelog:
  - bring back the screen case in /etc/bashrc, since /etc/screenrc no
    longer sets defhstatus (#60596, #60597)


author: Bill Nottingham <notting@redhat.com> 2.5.34-1
changelog:
  - add dict (#107807)
  - add cyrus services (#118832)
  - move delete-char binding for csh (#113682)
  - do the same path munging for csh as for bash (#57708)
  - add postfix aliases (#117661)
  - fix bashrc login shell check (#104491)
  - add odmr to services (#101098)
  - add distcc to services (#91535)
  - add xterm forware/backward word bindings (#80860)


author: Bill Nottingham <notting@redhat.com> 2.5.46-1
changelog:
  - add buildrequires on bash, tcsh (#161016)
  - move core dump size setting from csh.login to csh.cshrc (#156914)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed bug with PROMPT_COMMAND being broken for wierd dirs (#142125)
  - Added hfsplus to know filesystems (#172820)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.48-1
changelog:
  - Switched to the new large /etc/services file which fixes #112298, #133683,
    - Fixed pathmunge problem with bashrc (#123621)
  - Removed /usr/X11R6/bin from default PATH (#173856)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.49-1
changelog:
  - Really switch to new /etc/services file
  - Added /etc/fstab and /etc/mtab to ownership of setup (#177061)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.5-1
changelog:
  - Fixed tcsh behaviour for non login shells (#191233)
  - Fixed umask setting for tcsh to behave identical to bash logins (#199817)
  - Added ipv6-crypt and ipv6-auth for backwards compatibility (#210546)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.6-1
changelog:
  - Added another set of proposed changes to /etc/csh.cshrc (#199817)
  - Added missing documentation in /etc/hosts.[allow|deny] (#157053)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.11-1
changelog:
  - Fixed problem with /etc/profile.d/* and non-interactive tcsh (#299221)
  - Fixed xterm -title problem (#387581)
  - Fixed problem with /etc/profile.d/*.csh not being executed for none loginshells anymore
    (#381631, #429838)
  - Corrected missing shell for news user in uidgid and passwd


author: Phil Knirsch <pknirsch@redhat.com> 2.7.4-1
changelog:
  - Include new serviceslint for speedup (#465642)
  - Cleaned up services due to newly discovered bugs in it with new serviceslint


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-2
changelog:
  - again process profile.d scripts in noninteractive shells,
    but do not display stderr/stdout messages(#457243)
  - fix wrong prompt for csh/tcsh (#443854)
  - don't show error message about missing hostname in profile
    (#301481)
  - reserve rquotad port 875 in /etc/services (#455859)
  - export PATH after processing profile.d scripts (#449286)
  - assign gid's for audio (:63) and video (:39) group(#458843),
    assign uidgid pair (52:52) for puppet (#471918)
  - fix /etc/services duplicities to pass serviceslint


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-3
changelog:
  - update protocols to latest IANA list (2008-04-18)
  - update services to latest IANA list (2008-11-17)
  - mark /etc/protocols and /etc/inputrc %config(noreplace)
  - added URL, fixed few rpmlint warnings
  - do own audio and video group (#458843), create it in default
    /etc/group


author: Ondrej Vasik <ovasik@redhat.com> 2.7.5-2
changelog:
  - do not export PATH twice(#449286 NOTABUG revert)
  - do not export INPUTRC(to respect just created ~/.inputrc)
    (#443717)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.6-1
changelog:
  - make uidgid file better parsable (synchronize tabs)
  - reserve gid 11 for group cdrom (udev,MAKEDEV)
  - reserve gid 33 for group tape (udev,MAKEDEV)
  - reserve gid 87 for group dialout (udev,MAKEDEV)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-1
changelog:
  - synchronize /etc/services with latest IANA, do not use
    tabs in that file to have consistent output
  - fix indentation in /etc/profile and /etc/bashrc
    (#481074)
  - assign uid 36 for vdsm, gid 36 for kvm
    (#346151,#481021)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-2
changelog:
  - reserve 87 gid for polkituser (just uid was reserved),
    reserve 18 gid for dialout(to prevent conflicts with
    polkituser gid)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-4
changelog:
  - drop <lua> scriptlet completely(audio/video group
    temporarily created by packages which use it for
    updates(#477769))


author: Ondrej Vasik <ovasik@redhat.com> 2.8.1-1
changelog:
  - do ship/generate /etc/{shadow,gshadow} files(#483251)
  - do ship default /etc/hosts with setup (#483244)
  - activate multi on (required for IPv6 only localhost
    recognition out-of-the-box) (#486461)
  - added postun section for cleaning of dangerous .rpmnew
    files after updates
  - make profile and bashrc more portable (ksh, #487419)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.3-1
changelog:
  - do not disable coredumps in profile/csh.cshrc scripts,
    coredumps already disabled in rawhide's RLIMIT_CORE(#495035)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.4-1
changelog:
  - add oprofile (16:16) to uidgid
  - use os.remove instead of os.execute in lua post
    - no dependency on /bin/sh (thanks Panu Matilainen)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.5-1
changelog:
  - use history-search-backward/forward for pageup/pagedown
    mapping in inputrc (#500989)
  - add HISTCONTROL="ignoreboth" to /etc/profile to not include
    duplicities and lines starting with space into the history
    (#500819)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.7-1
changelog:
  - increase threshold for uidgid reservations to 200
  - reserve uidgid pair 107:107 for qemu (libvirt,#511957)
  - reflect threshold in profile and bashrc, do inform about
    uidgid file existence there
  - remove old remnants about portmap from hosts.deny(#509919)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.8-1
changelog:
  - change permissions on /etc/shadow and /etc/gshadow to 0000 and
    use capabilities for them(#517577)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.9-1
changelog:
  - reserve uidgid pair 108:108 for ovirt from libvirt (#513261)
  - reserve uidgid pair 111:111 for saned from sane-backends
    (#520634)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.11-1
changelog:
  - don't have HISTCONTROL ignorespace by default (#520632),
    but do not override it when it is already set
  - add csync alias for port 2005 / tcp, udp


author: Ondrej Vasik <ovasik@redhat.com> 2.8.15-1
changelog:
  - reserve uidgid pair 155:155 for stap-server(#555813)
  - reserve uidgid pair 113:113 for usbmuxd(#556525)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.16-1
changelog:
  - drop X11R6 hierarchy dir from tcsh path (#576940)
  - update services to latest IANA
  - update protocols to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.17-1
changelog:
  - verify md5sum/size/mtime in the case of /etc/hosts.allow
    and /etc/hosts.deny (#578263)
  - do the same for /etc/services and /etc/protocols, we
    provide (almost) complete IANA set, so no reason to modify
    it in most cases outside of setup package


author: Ondrej Vasik <ovasik@redhat.com> 2.8.18-1
changelog:
  - reserve uidgid pair 140:140 for ricci daemon(#585957)
  - reserve uidgid pair 141:141 for luci daemon(#585958)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.22-1
changelog:
  - reserve uidgid pair 170:170 for avahi-autoipd
  - reserve uidgid pair 171:171 for pulse (pulseaudio)
  - update reserved homedir for avahi


author: Ondrej Vasik <ovasik@redhat.com> 2.8.24-1
changelog:
  - do show messages from profile.d scripts in interactive
    login ksh shell(#616418)
  - respect umask settings even with login shell


author: Ondrej Vasik <ovasik@redhat.com> 2.8.28-1
changelog:
  - update services and protocols to latest IANA reservations
  - reserve uidgid pair 109:109 for rhevm(#652287)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.29-1
changelog:
  - run newaliases in the post to prevent sendmail messages
    about old alias database in the log(#658921)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.32-1
changelog:
  - do not override already set PROMPT_COMMAND envvar(#691425)
  - do not quit uidgidlint after first error, show all
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.33-1
changelog:
  - reflect the reserved username change of amanda
    to amandabackup (#700807)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703049)
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.38-1
changelog:
  - reserve 160:160 for swift (openstack-swift) - #732442
  - reserve 161:161 for glance (openstack-glance) - #732442
  - reserve 162:162 for nova (openstack-nova) - #732442
  - comment out 0/tcp spr-itunes /etc/services entry (#710185)
  - add hvc[01], xvc0, hvsi[012] to /etc/securetty (#728030)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.43-1
changelog:
  - gopher home dir in uidgid should be /var/gopher - #752885
  - reserve 163:163 for keystone (openstack-keystone) - #752842
  - reserve 164:164 for quantum (openstack-quantum) - #752842
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.45-1
changelog:
  - reserve :156 groupid for stapusr - #756807
  - reserve :157 groupid for stapsys - #756807
  - reserve :158 groupid for stapdev - #756807


author: Ondrej Vasik <ovasik@redhat.com> 2.8.48-1
changelog:
  - remove /bin and /sbin from /etc/profile(#789616)
  - require usrmove
  - add sbin paths in csh.login consistently with bash(#773268)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.51-1
changelog:
  - do not throw away the stderr output of profile.d scripts
    in noninteractive bash/ksh sessions(#805507)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.66-1
changelog:
  - assign :190 gid for systemd-journal (#918120)
  - assign 191:191 uidgid pair for systemd-journal-gateway (#918120)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.67-1
changelog:
  - assign 166:166 uidgid pair for ceilometer (#923891)
  - change 187:187 reservation from openstack-heat
    to just heat(#923858)
  - longer shell names support caused by UsrMove to
    the /etc/shells (#922527)
  - drop gopher (uid 13, gid 30) from groups created by default
    -> dropped completely - no gopher server in Fedora (#918206)
  - drop dip (gid 40) from groups created by default
    -> moved to ppp (#918206)
  - drop uucp (uidgid 14) from groups created by default
    -> moved to uucp (#918206)
  - create cdrom, tape, dialout, floppy groups in setup(#919285)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Nalin Dahyabhai <nalin@redhat.com> 1.14-1
changelog:
  - use control files to find things so that the source needn't be
    revised so often
  - determine available translations at build-time (#102082)


author: Nalin Dahyabhai <nalin@redhat.com> 1.15-1
changelog:
  - prefer system-config-keyboard to kbdconfig (#122575)
  - handle tools which require command-line arguments correctly


author: Nalin Dahyabhai <nalin@redhat.com> 1.17.2-1
changelog:
  - clean up a compiler warning
  - add a new config file so that the system-config-authentication-tui
    shows up in the menu now that it's been moved


author: Nalin Dahyabhai <nalin@redhat.com> 1.17.3-1
changelog:
  - update PAM configuration to use "include" directive (#170265)
  - conflict with versions of the pam package (< 0.78) which don't
    support the "include" directive


author: Nalin Dahyabhai <nalin@redhat.com> 1.18-1
changelog:
  - fix sorting of multiple options so that precedence is determined
    correctly (#178022)
  - prefer authconfig-tui to authconfig, because if we have both, then
    authconfig is just a command-line app  (#178022)
  - actually include the README


author: Nalin Dahyabhai <nalin@redhat.com> 1.19-1
changelog:
  - fix crashers in cases when we find no configuration files (or malformed or
    useless ones) under %{_sysconfdir}/setuptool.d (#211084)


author: Nalin Dahyabhai <nalin@redhat.com> 1.19.4-1
changelog:
  - drop system-config-printer-tui from the list of things we search for as
    an option for printer configuration (#377401)


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: Richard W.M. Jones <rjones@redhat.com> - 0-1.1.20110622svn
changelog:
  - Fix date in release string.
    NB: To make this version > than the previous, I had to use 1.1.20110622
    instead of 0.1.20110622, since the old second field was 20110623.
  - Unset MAKEFLAGS, since parallel make breaks the build.
  - Bring the spec file up to modern standards.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Install by hand (man/en/...).  Use %{_mandir}.
  - Use %{_tmppath}.
  - Make install-catalog fail silently if given the old syntax.
  - Add CHANGES file.
  - Change Copyright: to License:.
  - Remove Packager: line.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-1
changelog:
  - 0.6.3.  Incorporates oldsyntax and quiet patches.
  - Make /etc/sgml/sgml.conf noreplace.
  - Own /etc/sgml, various other directories (bug #47485, bug #54180).


author: Tim Waugh <twaugh@redhat.com> 0.6.3-6
changelog:
  - Don't create a useless empty catalog.
  - Don't try to put install things outside the build root.
  - Build requires a libxml2 that actually works.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-8
changelog:
  - Back to /usr/share/sgml.  Now install docbook-dtds.
  - Use a real install-sh, not the symlink shipped in the tarball.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-15
changelog:
  - Patch from Ville Skyttä <ville.skytta@iki.fi> (bug #111625):
    - Include /usr/share/xml in xml-common.
    - Own /usr/share/sgml and /usr/share/xml.


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-22
changelog:
  - Merge Review(226415)
  - changed: License Tag, using RPM macros instead of hardcoded
    dirs, summary ended with dot, added URL, removed CHANGES
    file as obsolete, preserved timestamps and some other cosmetic
    changes
  - no longer shipping old automake tarball, fixed issue with man8_DATA,
    BuildRequire:Automake,Autoconf again(see MergeReview discussion)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-23
changelog:
  - Another MergeReview improvements(provided by Patrice Dumas)
  - copy Automake-1.4 files instead of rerunning autotools,
  - better preserving timestamps, better handling of documentation
  - improved XML-common description


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Erik Troan <ewt@redhat.com>
changelog:
  - added patch for XOPEN oddities in glibc headers
  - check for ut_user before checking for ut_name -- this works around some
    confusion on glibc 2.1 due to the utmpx header not defining the ut_name
    compatibility stuff. I used a gross sed hack here because I couldn't make
    automake work properly on the sparc (this could be a glibc 2.0.99 problem
    though). The utuser patch works fine, but I don't apply it.
  - sleep after running autoconf


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the spec file
  - updated the patch so that new accounts created on shadowed system won't
    confuse pam_pwdb anymore ('!!' default password instead on '!')
  - fixed a bug that made useradd -G segfault
  - the check for the ut_user is now patched into configure


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Note that /usr/sbin/mkpasswd conflicts with /usr/bin/mkpasswd;
    one of these (I think /usr/sbin/mkpasswd but other opinions are valid)
    should probably be renamed.  In any case, mkpasswd.8 from this package
    needs to be installed. (problem #823)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - have userdel remove user private groups when it is safe to do so
  - allow -f to force user removal even when user appears busy in utmp


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - Serial: 1 because now we are using 19990827 (why the heck can't they have
    a normal version just like everybody else?!)
  - ported all patches to the new code base


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix usermod patch to check for shadow before doing any shadow-specific stuff
    and merge it into the pwlock patch


author: Matt Wilson <msw@redhat.com>
changelog:
  - use mandir for FHS
  - added patches in src/ and po/ to honor DESTDIR
  - use make install DESTDIR=$RPM_BUILD_ROOT


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change symlinked man pages to includers
  - require /usr/bin/newgrp (util-linux) so that /usr/bin/sg isn't left dangling


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove a fixed-size buffer that caused problems when adding a huge number
    of users to a group (>8192 bytes) (Bugs #3809, #11930)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - take LOG_CONS out of the openlog() call so that we don't litter the
    screen during text-mode upgrades


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't overwrite user dot files in useradd (#19982)
  - truncate new files when moving overwriting files with the contents of other
    files while moving directories (keeps files from looking weird later on)
  - configure using %{_prefix} as the prefix


author: Bernhard Rosenkraenzer <bero@redhat.com> 20000902-1
changelog:
  - Create an empty mailspool when creating a user so non-setuid/non-setgid
    MDAs (postfix+procmail) can deliver mail (#41811)
  - 20000902
  - adapt patches


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-4
changelog:
  - use -O0 instead of -O on ia64
  - build in source directory
  - don't leave lock files on the filesystem when useradd creates a group for
    the user (#50269)
  - fix the -o option to check for duplicate UIDs instead of login names (#52187)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-12
changelog:
  - force .mo files to be regenerated with current gettext to flush out possible
    problems
  - fixup non-portable encodings in translations
  - make sv translation header non-fuzzy so that it will be included (#71281)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-13
changelog:
  - prevent libshadow from being built more than once, to keep automake happy
  - change how md5 and md5crypt are enabled, to keep autoconf happy
  - remove unpackaged files after %install


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-6
changelog:
  - adjust mailspool patch to complain if no group named "mail" exists, even
    though that should never happen


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-14
changelog:
  - lastlog: don't pass a possibly-smaller field to localtime (#109648)
  - configure: call AC_SYS_LARGEFILE to get large file support


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-15
changelog:
  - don't convert man pages to UTF-8 for RHEL 3, conditionalized using macro
  - fixup dangling man page references


author: Dan Walsh <dwalsh@redhat.com> 4.0.3-23
changelog:
  - Add get_enforce checks
  - Clean up patch for potential upstream submission
  - Add removemalloc patch to get it to build on 3.4


author: Adrian Havill <havill@redhat.com> 2:4.0.3-31
changelog:
  - check for non-standard legacy place for ncsd HUP (/var/run/nscd.pid) and
    then the std FHS place (/var/run/nscd.pid) (#125421)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-33
changelog:
  - allow for mixed case and dots in usernames (#135401)
  - all man pages to UTF-8, not just Japanese (#133883)
  - add Polish blurb for useradd -n man page option (#82177)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-35
changelog:
  - make the limit for the group name the same as the username (determined
    by the header files, rather than a constant) (#56850)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-4
changelog:
  - use newgrp binary
  - newgrp don't ask for password if user's default GID = group ID,
    ask for password if there is some in /etc/gshadow
    and in /etc/group is 'x' (#149997)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-5
changelog:
  - fix memory leak, and CPU spinning when grp_update() and
    duplicate group entries in /etc/group (#151484)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-6
changelog:
  - fix regression. Permissions on user* group* binaries
    should be 0750, because of CAPP/LSPP certification
  - fix groupdel man page


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-2
changelog:
  - improve audit logging (#211659)
  - improve "-l" option. Do not reset faillog if it's used (#213450).


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-8
changelog:
  - groupmems: check username for valid character (#455603)
  - groupmems: don't segfault on nonexistent group (#456088)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-11
changelog:
  - fix license tag (#226416)
  - get rid of tabs in spec file (#226416)
  - convert HOWTO to UTF8 (#226416)


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-9
changelog:
  - fix gshadow functions from shadow utils
  - make shadow utils use gshadow functions from glibc
    Resolves: #665780


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - do not use  gshadow functions from glibc, there is a bug
    in glibc sgetsgent(#674361)
    Resolves: #674234


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-11
changelog:
  - useradd man page (-m option)
  - create home directory on fs with noacl
  - remove faillog app (pam_tally.so is no longer shipped)
    Resolves: #523265, #622320


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-5
changelog:
  - userdel option to remove Linux login <-> SELinux login mapping (#639900)
  - useradd special exit value if SELinux user mapping is invalid (#639975)
  - usermod special exit value if SELinux user mapping is invalid (#639976)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-6
changelog:
  - report error to stdout when SELinux context for home directory
    cannot be determined (#973647)
  - audit the changing home directory owner (#885797)
  - do not set the default SELinux MLS range (#852676)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-8
changelog:
  - slightly more meaningful error messages if crypt() returns NULL (#988184)
  - explicit suid permissions


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: David Zeuthen <davidz@redhat.com> - 0.16-2
changelog:
  - Make Evince the default for application/pdf and application/postscript
  - Remove remaining references to gnome-ggv (application/x-gzpostscript and
    image/x-eps) as this is no longer in the distribution


author: Dan Williams <dcbw@redhat.com> - 0.16-3
changelog:
  - Update OpenOffice.org desktop file names. #155353
  - WordPerfect default now OOo Writer, since Abiword is in Extras


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-2
changelog:
  - Don't say that webcal files are handled by evolution-2.0, it can't
  - Disable vCard mapping as well, as evolution doesn't handle it
    (See http://bugzilla.gnome.org/show_bug.cgi?id=309073)


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-5
changelog:
  - Remove Totem as the default music/movie player, it will be the
    default for movies, as only it handles them, and Rhythmbox can
    handle missing plugins now


author: - Bastien Nocera <bnocera@redhat.com> - 0.23-5
changelog:
  - Make Totem the default for the mime-types it handles (#366101)
  - And make sure Rhythmbox is the second default only for the mime-types
    it handles


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Colin Walters <walters@verbum.org> - 0.71-3
changelog:
  - Requires(pre) on glib, since update-mime-database uses it
  - Remove /dev/null redirection, we should see future errors
    And really, RPM is dumb here - this stuff needs to go to
    log files.


author: Colin Walters <walters@verbum.org> - 0.71-4
changelog:
  - Fix previous change to be Requires(post); spotted by
    Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Bastien Nocera <bnocera@redhat.com> 0.90-2
changelog:
  - Update list of defaults, adding new mime-types for Totem,
    as well as scheme handlers, and install defaults for
    Evolution and Firefox


author: Bastien Nocera <bnocera@redhat.com> 0.90-4
changelog:
  - Update defaults.list and update for newer desktop names,
    with help from Edward Sheldrake (#659457)


author: Bastien Nocera <bnocera@redhat.com> 0.91-3
changelog:
  - Make shotwell the default for camera roll handling
  - Make shotwell-viewer the default image viewer (for the
    image types it handles)
  - Prefer Rhythmbox to Totem for music files


author: Matthias Clasen <mclasen@redhat.com> - 1.0-2
changelog:
  - Own/%ghost files generated by update-mime-database from
    freedesktop.org.xml (patch by Ville Skyttä, #716451))


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 1.0-4
  - defaults.list: s/mozilla-firefox/firefox/ (see #736558)
  - defaults.list: s/gpk-install-file/gpk-install-local-file/
  - defaults.list: application/x-catalog=gpk-install-catalog.desktop (#770019)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Donnie Barnes <djb@redhat.com>
changelog:
  - ALRIGHT!  Woo-hoo!  Erik already did the install-info stuff!
  - added BuildRoot
  - spec file cleanups


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
  - Fix decoding from positional argument while overriding output file
    (bug #901895)
  - Fix decoding to standard output when output file is - or /dev/stdout
    (bug #901895)


author: Peter Jones <pjones@redhat.com> - 0.3-2
changelog:
  - Require gnu-efi-3.0q for now.
  - Don't allow mmx or sse during compilation.
  - Re-organize this so all real signing happens in shim-signed instead.
  - Split out mokutil


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build -8 for arm as well.
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Fix a couple more minor bugs aavmf has found in fallback.
    Related: rhbz#1190191
  - Build lib/ with the right CFLAGS
    Related: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Adam Williamson <awilliam@redhat.com> 0.12.0-1.20111110git163bf4a114
changelog:
  - bump to current git to get vala 0.14 support for rawhide, GTK+ 3 port
  - adjust dependencies for vala, gtk, gsettings
  - adjust for gsettings port


author: Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> 0.12.0-1.20111117gitcf087489ea
changelog:
  - Bump to current git to fix build against LibRaw
  - LibRaw now has a dynamic library and shotwell is using it


author: Jindrich Novy <jnovy@redhat.com> - 0.12.3-5
changelog:
  - add patch to fix build against libgphoto2-2.5.0, thanks to Clinton Rogers
    (http://redmine.yorba.org/issues/5553)


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.13.0-1
changelog:
  - Update to 0.13.0.
  - Remove patches applied upstream.
  - Add BR on json-glib.
  - Add runtime dependency on dconf.


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-7
changelog:
  - Use new archive from upstream at same location (which is lowercase now)
  - Remove dubious Provides: (RHBZ#563395)


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-8
changelog:
  - Fix Obsolete: that was wrong when renaming the package.
  - The font base folder was listed twice (one was hidden in the font macro)


author: Minto Joseph <mvaliyav at redhat.com> - 2.4-4
changelog:
  - Cleaned up the spec file as per new font packaging guidelines
  - Replaced padauk-src.ttf and padaukbold-src.ttf with Padauk.ttf and Padauk-Bold.ttf [490583]
  - Renamed the package to sil-padauk-fonts


author: David Malcolm <dmalcolm@redhat.com> - 4.10.2-2
changelog:
  - enable "with_python3" in the build
  - use py3dir throughout, as provided by python3-devel
  - name the python 3 sip binary "python3-sip"
  - fix a typo in the name of the data dir: python-3sip -> python3-sip
  - split out macros.sip into a new subpackage


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.3-1
changelog:
  - Update to latest upstream 2.2.3 (#683795)
  - Add forge-parent to Requires
  - Rework spec to be more simple, update patches


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.3.0-6
changelog:
  - Add ASM dependency only to a single module, not all of them
  - Disable animal-sniffer plugin
  - Don't generate auto-requires for optional dependencies


author: Michal Srb <msrb@redhat.com> - 2.3.0-7
changelog:
  - sisu-inject-bean: add dependency on asm
  - Fix dependencies on javax.inject and javax.enterprise.inject
  - Remove bundled JARs and .class files from tarball


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-8
changelog:
  - Remove unneeded animal-sniffer BuildRequires
  - Add forge-parent to BuildRequires to ensure it's present


author: Jens Petersen <petersen@redhat.com> 20020220-1
changelog:
  - update to latest dictionaries
  - put source in one bzip2ed tar file
  - tidy spec file
  - make unannotated
  - include SKK-JISYO.pubdic+


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.7-2
changelog:
  - ignore background color of trailing spaces if terminal has bce (#217276)
  - move static library to -static subpackage
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-5
changelog:
  - backport correction to the default settings for hosts.byname and
    hosts.byaddr NIS maps, so that their data items start with the host's
    address rather than a name (#1090948)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for IDM's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-2
changelog:
  - Complete ID views support to BIND operation
  - Ignore ID views outside schema-compat subtrees
  - Use 389-ds API compatible with RHEL 7.0
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-6
changelog:
  - delay sending responses from compat tree after map cache search
  - Resolves: #1273587
  - fix processing of ID views
  - Resolves: #1277576, #1265465


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-1
changelog:
  - New upstream release:
    - support updating passwords for the users from the primary tree
    - populate map cache in a separate thread to avoid blocking the DS
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
changelog:
  - Fix reported coverity issues
  - Make sure slapi-nis continue to work with SSSD 1.14 when default domain is defined
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-4
changelog:
  - Fixed: UPN-based search for AD users does not match an entry in slapi-nis map cache
  - Resolves: #1361123
  - Fixed: slapi-nis plugin modifies DS data
  - Resolves: #1360245


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-5
changelog:
  - Resolves: #1473572
  - Fixed: Make changes in overrides available in the compat tree at runtime
  - Resolves: #1473577
  - Fixed: slapi-nis should use requests to SSSD with ability to cancel them with a timeout


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-8
changelog:
  - Fixed: #1473572
  - Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
  - Related: #1473577
  - Synchronize timeout-enabled code with ipa-extdom-extop


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.5.11-2
changelog:
  - Skip installing tests jar that is no longer produced.
  - Use javadoc aggregate.
  - Use mavenpomdir macro.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.6.1-4
changelog:
  - Specify explicit source encoding to fix build with Java 1.7.
  - Remove no longer needed javadoc dir upgrade hack.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.7.2-2
changelog:
  - Fix license to ASL 2.0 and MIT
  - Update to add_maven_depmap macro
  - Use generated .mfiles list
  - Small packaging cleanups


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-2
changelog:
  - Spec file cleanup by Robert Scheck <redhat@linuxnetz.de> (#170959)
  - manual release numbering
  - remove bogus patch of non-installed file
  - only non-removable drives should be added to smartd.conf
  - smartd.conf should be owned (#171498)


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-3
changelog:
  - add libata disks with -d ata if the libata version
    is new enough otherwise do not add them (#145859, #174095)


author: Tomas Mraz <tmraz@redhat.com> - 1:5.33-5
changelog:
  - add default /etc/sysconfig/smartmontools file
  - ignore errors on startup (#186130)
  - test drive for SMART support before adding it to smartd.conf


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-2
changelog:
  - kudzu is deprecated, replace it with HAL (#195752)
  - moved later in the boot process so haldaemon is already running
    when drives are being detected


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-5
changelog:
  - set cloexec on device descriptor so it doesn't leak to sendmail (#214182)
  - fixed minor bug in initscript (#213683)
  - backported SATA disk detection from upstream


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-3
changelog:
  - fix #241385 - smartmontools missing dependency on mailx
  - fix #241388 - unneeded smartd-conf.py[co] installed in /usr/sbin


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-4
changelog:
  - fix #241389 - smartd-conf.py pulls in a big dependency chain, so
    build a separate config package


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-5
changelog:
  - add support for 24 disks on 3ware RAID controllers (related #252055)
  - fix #245442 - add %{arm} to smartmontools's set of build archs
  - update license tag


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-6
changelog:
  - fix #271741 - smartd-conf.py should allow customization of parameters
  - fix #253753 - service starting by default, perhaps shouldn't
  - update initscript (related #247058 - initscript review)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:6.5-1
changelog:
  - smartmontools updated to 6.5
  - adds support for NVMe devices (#1369731)
  - minor spec cleanup (#1463148)


author: Pravin Satpute <psatpute@redhat.com> 04-2
changelog:
  - done changes in spec file as suggested in review request
  - changed variable name from xfontdir to fontdir


author: Pravin Satpute <psatpute@redhat.com> 04-3
changelog:
  - defattr now comes after files
  - s/malayalam/Malayalam in description
  - removed '-fonts' from fontdir variable value


author: Pravin Satpute <psatpute@redhat.com> 04-4
changelog:
  - added comment about sharing directory in spec file
  - fontdir will be 'smc' only instead of 'smc-fonts' earlier


author: Pravin Satpute <psatpute@redhat.com> 04.1-1
changelog:
  - new upstream release
  - fontconfig rule for size adjustment of Meera is added
  - two new fonts kalyani and anjalioldlipi
  - bugfix 448078


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 04.1-4
changelog:
  - change descriptions
  - fix bug in kalyani font's obsoleting version number
  - move _font_pkg macros next to corresponding packages


author: Naveen Kumar <nkumar@redhat.com> - 04.2.9
changelog:
  - oops! forgot to rename 66-smc-meera.conf to 65-0-smc-meera.conf in INSTALL in spec file
  - oops! forgot to remove 66-smc-meera.conf
  - resolves Bug #586288


author: Naveen Kumar <nkumar@redhat.com> - 4.4.1
changelog:
  - new release from upstream
  - changes in spec file to incorporate new build from sfd source
  - remove patch bug-523454.patch
  - reolves bug #586283
  - reolves bug #586286


author: Naveen Kumar <nkumar@redhat.com> - 4.4.2
changelog:
  - apply patch smc-fonts_616324.patch created from Pravin S' src Modification 
  - resolves bug #616324


author: Naveen Kumar <nkumar@redhat.com> - 4.4.4
changelog:
  - rectify error to directly install fonts in fontdir instead of subdir in fontdir
  - Resolves bug #653608


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Pravin Satpute <psatpute@redhat.com> 6.0-1
changelog:
  - Resolves: rh#1023847 - Upstream new release with fix against Harfbuzz NG
  - New release 6.0 with many new features and bug fixes
  - v2 opentype spec support for Malayalam (mlm2) for Meera, Rachana, Raghumalayalam
  - Full support to Harfbuzz, Adobe and Uniscribe shaping engines
  - Cleaned up and updated lookup tables
  - Meaningful names to glyphs to help with Lookup tables reusability
  - Old Figures and other Typographical glyphs to Rachana
  - Dotreph positioning using GPOS 'abvm' lookup
  - Unicode 6.1 Malayalam glyphset for many fonts


author: Mo Morsi <mmorsi@redhat.com> - 1.9-1
changelog:
  - Update to latest upstream release
  - patch2, patch3 no longer needed
  - update to latest fedora java guidelines


author: Michal Srb <msrb@redhat.com> - 1.11-5
changelog:
  - Replace bundled base64 implementation
  - Replace bundled gdata-java-client classes with apache-commons-codec


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.0-2
changelog:
  - replaced $CXXFLAGS with %{optflags} in %build section
  - removed empty %doc entry from %files devel


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.95.0-1
changelog:
  - update to 1.95.0 (Soprano 2 beta 2)
  - new BRs clucene-core-devel, raptor-devel >= 1.4.15
  - now need redland-devel >= 1.0.6
  - add patch to find CLucene (clucene-config.h is moved in the Fedora package)
  - new Requires: pkg-config for -devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 2.0.3-2
changelog:
  - build apidocs and put them into an -apidocs subpackage (can be turned off)
  - BR doxygen and qt4-doc when building apidocs


author: Rex Dieter <rdieter@fedoraproject.org> - 2.2.3-2
changelog:
  - %files: drop ownership of %_datadir/dbus-1.0/interfaces (#334681)
  - %files: track shlib sonames
  - make -apidocs noarch


author: Rex Dieter <rdieter@fedoraproject.org> - 2.4.0-1
changelog:
  - soprano-2.4.0
  - %build: explictly %{_cmake_skip_rpath}, need to poke on cmake to see why 
    %{_libdir} is getting rpath'd here


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
  - Add sssd plugin to collect configuration and logs
  - Collect /etc/anacrontab in system plugin
  - Correct handling of redhat-release for el6


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
  - Add support for collecting entitlement certificates in rhn.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
  - Collect /etc/dhcp in dhcp.py plugin
  - Collect dmsetup ls --tree output in devicemapper.py
  - Collect lsblk output in filesys.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
  - Add basic Infiniband plugin
  - Add plugin for scsi-target-utils iSCSI target
  - Fix autofs plugin LC_ALL usage
  - Fix collection of lsusb and add collection of -t and -v outputs
  - Extend data collection by qpidd plugin
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
  - Add /proc/vmmemctl collection to vmware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
  - Add support for collecting Red Hat Subscrition Manager configuration
  - Collect /etc/init on systems using upstart
  - Don't strip whitespace from output of external programs
  - Collect ipv6 neighbour table in network module
  - Collect basic cgroups configuration data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
  - Fix up2dateclient path in hardware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
  - Fix hardware plugin to support new lsusb path


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18
changelog:
  - Collect fence_virt.conf in cluster module
  - Fix collection of /proc/net directory tree
  - Gather output of cpufreq-info when present
  - Fix brctl showstp output when bridges contain multiple interfaces
  - Add /etc/modprobe.d to kernel module
  - Ensure relative symlink targets are correctly handled when copying
  - Fix satellite and proxy package detection in rhn plugin
  - Collect stderr output from external commands
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
  - Fix installed-rpms formatting for long package names
  - Add symbolic links for truncated log files
  - Collect non-standard syslog and rsyslog log files
  - Use correct paths for tomcat6 in RHN module
  - Obscure root password if present in anacond-ks.cfg
  - Do not accept embedded forward slashes in RHN usernames
  - Add new sunrpc module to collect rpcinfo for gluster systems


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19
changelog:
  - Collect additional diagnostic information for realtime systems
  - Improve sanitization of RHN user and case number in report name
  - Fix verbose output and debug logging
  - Add basic support for CloudForms data collection
  - Add support for Subscription Asset Manager diagnostics


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22
changelog:
  - Correct aeolus debug invocation in CloudForms module
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29
changelog:
  - Collect the swift configuration directory in gluster module
  - Update IPA module and related plug-ins


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31
changelog:
  - Avoid calling volume status when collecting gluster statedumps
  - Use a default report name if --name is empty
  - Quote tilde characters passed to shell in RPM module
  - Collect KDC and named configuration in ipa module
  - Sanitize hostname characters before using as report path
  - Collect /etc/multipath in device-mapper module
  - New plug-in for PostgreSQL
  - Add OpenStack module
  - Avoid deprecated sysctls in /proc/sys/net
  - Fix error logging when calling external programs
  - Use ip instead of ifconfig to generate network interface lists


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32
changelog:
  - Collect /proc/pagetypeinfo in memory module
  - Strip trailing newline from command output
  - Add sanlock module
  - Do not collect archived accounting files in psacct module
  - Call spacewalk-debug from rhn module to collect satellite data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33
changelog:
  - Add Red Hat Update Infrastructure module
  - Collect /proc/iomem in hardware module
  - Collect subscription-manager output in general module
  - Collect rhsm log files in general module
  - Fix exception in gluster module on non-gluster systems
  - Fix exception in psql module when dbname is not given


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35
changelog:
  - Report --name and --ticket values as defaults
  - Fix device-mapper command execution logging
  - Fix data collection and rename PostreSQL module to pgsql


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-3
changelog:
  - Add crm_report support to cluster plug-in
    Resolves: bz839342
  - Fix rhel_version() usage in cluster and s390 plug-ins
    Resolves: bz916705
  - Strip trailing newline from command output
    Resolves: bz971420


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-4
changelog:
  - Do not attempt to read RPC pseudo files in networking plug-in
    Resolves: bz996992, bz996994
  - Restrict wbinfo collection to the current domain
    Resolves: bz997101
  - Add obfuscation of luci secrets to cluster plug-in
    Resolves: bz997090
  - Add XFS plug-in
    Resolves: bz997094
  - Fix policy class handling of --tmp-dir
    Resolves: bz997083
  - Do not set batch mode if stdin is not a TTY
    Resolves: bz1002943
  - Attempt to continue when reading bad input in interactive mode
    Resolves: bz1002943


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-5
changelog:
  - Include /etc/yaboot.conf in boot plug-in
    Resolves: bz1001966
  - Fix collection of brctl output in networking plug-in
    Resolves: bz1019235
  - Verify limited set of RPM packages by default
    Resolves: bz1019863
  - Do not strip newlines from command output
    Resolves: bz1019338
  - Limit default sar data collection
    Resolves: bz1001599


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-6
changelog:
  - Remove version checks in gluster plug-in
    Resolves: bz1015606
  - Check for usable temporary directory
    Resolves: bz1019517
  - Fix --alloptions command line option
    Resolves: bz1019356
  - Fix configuration fail regression
    Resolves: bz1019516


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-7
changelog:
  - Add domainname output to NIS plug-in
    Resolves: bz1026906
  - Collect /var/log/squid in squid plug-in
    Resolves: bz1026829
  - Collect mountstats and mountinfo in filesys plug-in
    Resolves: bz1026869
  - Add PowerPC plug-in from upstream
    Resolves: bz1025236


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-9
changelog:
  - Restore --build command line option
    Resolves: bz1015599
  - Collect saved vmcore-dmesg.txt files
    Resolves: bz1026959
  - Normalize temporary directory paths
    Resolves: bz829069


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-10
changelog:
  - Add nfs client plug-in
    Resolves: bz1028072
  - Fix traceback when sar module force-enabled
    Resolves: bz1028125


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-12
changelog:
  - Fix typo in yum plug-in add_forbidden_paths
    Resolves: bz829297
  - Add krb5 plug-in and drop collection of krb5.keytab
    Resolves: bz1028150


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-15
changelog:
  - Remove debug statements from logs plugin
    Resolves: bz1030042
  - Make ethernet interface detection more robust
    Resolves: bz1030824
  - Fix specifying multiple plugin options on the command line
    Resolves: bz1031124
  - Make log and message levels match previous versions
    Resolves: bz1031126
  - Log a warning message when external commands time out
    Resolves: bz1034956
  - Remove --upload command line option
    Resolves: bz1028484
  - Update sos UI text to match upstream
    Resolves: bz1034970


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-16
changelog:
  - Add new plugin to collect OpenHPI configuration
    Resolves: bz1028121
  - Fix cluster plugin crm_report support
    Resolves: bz1030553
  - Fix file postprocessing in ldap plugin
    Resolves: bz1030602
  - Remove collection of anaconda-ks.cfg from general plugin
    Resolves: bz1034865


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-17
changelog:
  - Fix get_option use in cluster plugin
    Resolves: bz1030553
  - Fix debug logging to file when given '-v'
    Resolves: bz1031126
  - Always treat rhevm plugin's vdsmlogs option as a string
    Resolves: bz1030617
  - Run the rhsm-debug script from yum plugin
    Resolves: bz1039036


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-18
changelog:
  - Prevent file descriptor leaks when using Popen
    Resolves: bz1051009
  - Disable zip archive creation when running rhsm-debug
    Resolves: bz1039036
  - Include volume geo-replication status in gluster plugin
    Resolves: bz1036752


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-19
changelog:
  - Fix generation of volume names in gluster plugin
    Resolves: bz1036752
  - Add distupgrade plugin
    Resolves: bz1059760


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
    Resolves: bz1127631
  - [postgresql] obtain db password from the environment
    Resolves: bz1126001
  - [pcp] add Performance Co-Pilot plugin
    Resolves: bz1119833
  - [nfsserver] collect /etc/exports.d
    Resolves: bz1118921
  - [sosreport] handle --compression-type correctly
    Resolves: bz1118152
  - [anaconda] redact passwords in kickstart configurations
    Resolves: bz1112175
  - [haproxy] add new plugin
    Resolves: bz1107865
  - [keepalived] add new plugin
    Resolves: bz1105247
  - [lvm2] set locking_type=0 when calling lvm commands
    Resolves: bz1102285
  - [tuned] add new plugin
    Resolves: bz1095447
  - [cgroups] collect /etc/sysconfig/cgred
    Resolves: bz1083677
  - [plugins] ensure doc text is always displayed for plugins
    Resolves: bz1065473
  - [sosreport] fix the distribution version API call
    Resolves: bz1028111
  - [docker] add new plugin
    Resolves: bz1084990
  - [openstack_*] include broken-out openstack plugins
    Resolves: bz1140756
  - [mysql] support MariaDB
    Resolves: bz1106600
  - [openstack] do not collect /var/lib/nova
    Resolves: bz1106423
  - [grub2] collect grub.cfg on UEFI systems
    Resolves: bz1086648
  - [sosreport] handle out-of-space errors gracefully
    Resolves: bz1087977
  - [firewalld] new plugin
    Resolves: bz1100505
  - [networking] collect NetworkManager status
    Resolves: bz1100505
  - [kpatch] new plugin
    Resolves: bz1110918
  - [global] update to upstream 3.2 release
    Resolves: bz1026962


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
    Resolves: bz1116349
  - [powerpc] allow PowerPC plugin to run on ppc64le
    Resolves: bz1140427
  - [package] add Obsoletes for sos-plugins-openstack
    Resolves: bz1140756


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
    Resolves: bz1087515
  - [ovirt_hosted_engine] fix exception when force-enabled
    Resolves: bz1148551


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
    Resolves: bz1148375
  - [mysql] obtain database password from the environment
    Resolves: bz1126001


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
    Resolves: bz1110918
  - [archive] drop support for Zip archives
    Resolves: bz1118152


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
    Resolves: bz1166039
  - [docs] update man page for new options
    Resolves: bz1171658
  - [sosreport] make all utf-8 handling user errors=ignore
    Resolves: bz1164267


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
    Resolves: bz1087977
  - [sosreport] catch OSError exceptions in SoSReport.execute()
    Resolves: bz1087977
  - [anaconda] make useradd password regex tolerant of whitespace
    Resolves: bz1112175


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
    Resolves: bz1026962
  - [squid] collect files from /var/log/squid
    Resolves: bz1026962
  - [sosreport] log plugin exceptions to a file
    Resolves: bz1026962
  - [ctdb] fix collection of /etc/sysconfig/ctdb
    Resolves: bz1026962
  - [sosreport] fix silent exception handling
    Resolves: bz1026962


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-17
changelog:
  - [openstack_neutron] neutron configuration and logs files not captured
    Resolves: bz1213315
  - [ovirt] remove ovirt-engine setup answer file password leak
    Resolves: bz1162788
  - [networking] network plugin fails if NetworkManager is disabled
    Resolves: bz1206633


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-20
changelog:
  - [cluster] crm_report fails to run because dir already exists
    Resolves: bz1200526
  - [foreman] Skip collection of generic resources
    Resolves: bz1135317
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
    Resolves: bz1183265
  - [pcp] collect /etc/pcp.conf
    Resolves: bz1183297
  - [puppet] adding new plugin for puppet
    Resolves: bz1183768
  - [block] Don't use parted human readable output
    Resolves: bz1183770
  - [general] Better handling --name and --ticket-number in
    Resolves: bz1185093
  - [networking] additional ip, firewall and traffic shaping
    Resolves: bz1194554
  - [infiniband] add opensm and infiniband-diags support
    Resolves: bz1194556
  - [plugins/rabbitmq] Added cluster_status command output
    Resolves: bz1197006
  - [networking] re-add 'ip addr' with a root symlink
    Resolves: bz1209454
  - [kimchi] add new plugin
    Resolves: bz1209840
  - [iprconfig] add plugin for IBM Power RAID adapters
    Resolves: bz1221932
  - [ovirt] Collect engine tunables and domain information.
    Resolves: bz1236101
  - [activemq] Honour all_logs and get config on RHEL
    Resolves: bz1236111
  - [cluster] Add luci to packages for standalone luci servers
    Resolves: bz1236124
  - [hpasm] hpasmcli commands hang under timeout
    Resolves: bz1214209
  - [mysql] Collect log file
    Resolves: bz1210906
  - [chrony] add chrony plugin
    Resolves: bz1165418


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-21
changelog:
  - [cluster] enable crm_report password scrubbing
    Resolves: bz1164864
  - [sosreport] fix command-line report defaults
    Resolves: bz1219720
  - [virsh] add new plugin, add listing of qemu
    Resolves: bz1195086
  - [sap*,vhostmd] new plugins for SAP
    Resolves: bz1195608


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-22
changelog:
  - [general] verify --profile contains valid plugins only
    Resolves: bz1184602
  - [kernel,mpt,memory] additional kernel-related diagnostics
    Resolves: bz1194159


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-23
changelog:
  - [ceph] add calamari and ragos logs and configs
    Resolves: bz1210527
  - [iprconfig] enable plugin for ppc64* architectures
    Resolves: bz1238726


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-25
changelog:
  - [openstack] New Openstack Trove (DBaaS) plugin
    Resolves: bz1238349
  - [services] Add more diagnostics to applications
    Resolves: bz1195087
  - [openstack_neutron] Obscure passwords and secrets
    Resolves: bz1240666


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-27
changelog:
  - [plugin] pass stderr through _collect_cmd_output
  - split dependencies of bz1185990 fix from bz1185990 patch
    Resolves: bz1185990


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-29
changelog:
  - [openvswitch] capture the logs, db and OVS bridges details
    Resolves: bz1242507
  - [logs] fix reference to missing 'rsyslog_conf' variable
    Resolves: bz1249705
  - [sapnw] Add check if saphostctrl is not present, dont use Set
    Resolves: bz1195608
  - [Plugin] fix handling of symlinks in non-sysroot environments
    Resolves: bz1248672


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-36
changelog:
  - [ceph] collect /var/lib/ceph and /var/run/ceph
    Resolves: bz1260607
  - [sosreport] prepare report in a private subdirectory
    Resolves: bz1290955


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-2
changelog:
  - [grub2] grub2-mkconfig loads ext4 and brctl kernel
    Resolves: bz1116670
  - [ceph] skip collecting of all keyring and bindpass files
    Resolves: bz1260607
  - [omsa] add omreport storage controller
    Resolves: bz1299603
  - [atomichost] fix collection of 'docker info' output
    Resolves: bz1302146
  - [monit] fix add_copy_spec() arguments
    Resolves: bz1356945
  - [virtwho] add new plugin for virt-who agent
    Resolves: bz1353552


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-3
changelog:
  - [nodejs][nms]: new plugins
    Resolves: bz1368393
  - [docker]: Gather more data and expand plugin options
    Resolves: bz1351647


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-3
changelog:
  - [ceph] fix list formatting
    Resolves: bz1438269
  - [virsh] Handle properly cases when virsh commands fail
    Resolves: bz1444641
  - [openstack_*] fix issue with --verify option, extend pkglist for instack
    Resolves: bz1250346
  - [policies/redhat] accept 'oci' as a valid container type
    Resolves: bz1442078
  - [pacemaker] Collect user-defined logfile
    Resolves: bz1416535


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-4
changelog:
  - [libvirt] fix per-process cgroup collection
    Resolves: bz1148381
  - [ceph] exclude temporary mount locations from collection
    Resolves: bz1449904
  - [policies/redhat] make missing 'filesystem' package non-fatal
    Resolves: bz1393961


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-7
changelog:
  - [openstack plugins] Tripleo specific containerized services
    Resolves: bz1463635
  - [jars] Scan only /usr/{share,lib}/java by default
    Resolves: bz1482574
  - [gluster_block] Added new plugin gluster_block
    Resolves: bz1491964


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-2
changelog:
  - [vdo] revise collected files
    Resolves: bz1509079
  - further updates to OSP plugins in containerized environment
    Resolves: bz1506908
  - [opendaylight] new plugin
    Resolves: bz1483414
  - collect all keystone domains
    Resolves: bz1491042
  - haproxy, etcd and docker tracebacks
    Resolves: bz1519267
  - [origin] fix typo in oc adm diagnostics
    Resolves: bz1463509
  - [postgresql] Call SCL pg_dump with proper path
    Resolves: bz1494420


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-4
changelog:
  - [pcp] really apply sizelimit to logs collected
    Resolves: bz1353873
  - [opendaylight] collect more logs and puppet config
    Resolves: bz1483414
  - [plugins] allow add_cmd_output to collect binary output
    Resolves: bz1494420
  - [openstack_ironic] collect drivers, ports and much more
    Resolves: bz1517767
  - [openstack_cinder] check for api service running
    Resolves: bz1506908


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-5
changelog:
  - [rabbitmq] Log collection when run in containerized OSP
    Resolves: bz1525620
  - [ipa] add KRA logs and correct PKI directories
    Resolves: bz1535390
  - [opendaylight] Enable plugin by puppet-opendaylight package
    Resolves: bz1483414
  - [etcd] Do not collect private etcd keys
    Resolves: bz1539038


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-1
changelog:
  - New upstream version 1.3.1
  - Minor specfile cleanups for livna submission.
  - Give the .so a proper version instead of 0.0.0
  - Don't use rpath in soundstretch binary


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-2
changelog:
  - Add BR: automake, because upstream uses symlinks to instead of copies of some
    needed automake files.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-4
changelog:
  - Add Requires: pkgconfig to -devel subpackage
  - Replace installed autoheader generated header file with our own version
    which contains only the nescesarry soundtouch specific defines, thus avoiding
    possible conflicts with other autoheader generated headers.


author: Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.8-1mdk
changelog:
  - 1.8
  - drop Prefix tag
  - clean out redundant buildrequires
  - rm -rf $RPM_BUILD_ROOT at the beginning of %install, not %prep
  - use %makeinstall_std macro
  - cosmetics


author: Adrian Reber <adrian@lisas.de> - 2.3-2
changelog:
  - using a new url.lang to fix #195720
    (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=131352)


author: Leigh Scott <leigh123linux@googlemail.com> - 3.1.3-1
changelog:
  - updated to 3.1.3
  - change configure command so it finds boost_regex
  - fix source url's
  - add devel package
  - fix directory ownership
  - fix rpath on binary


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix rec manpage link - now that man pages are compressed, it should point to
    play.1.gz, not play.1


author: Bill Nottingham <notting@redhat.com> 12.17.4-1
changelog:
  - update to 12.17.4
  - ship soxmix (#102499)
  - fix soxplay to handle files with spaces (#91144)
  - use LFS (#79151)


author: Thomas Woerner <twoerner@redhat.com> 12.17.7-3
changelog:
  - fixed bad link for man/man1/rec.1.gz (#154089)
  - using /usr/include instead of kernel-devel includes


author: Jiri Moskovcak <jmoskovc@redhat.com> 13.0.0-2
changelog:
  - uses external libgsm instead of local copy
  - spec file update: added BuildRequires: gsm-devel
  - Resolves: #239955


author: Jiri Moskovcak <jmoskovc@redhat.com> - 14.0.0-1
changelog:
  - New version 14.0.0
  - Thanks to Chris Bagwell <chris at cnpbagwell dot com> for initial changes to spec file


author: Tom "spot" Callaway <tcallawa@redhat.com> 14.1.0-1
changelog:
  - fix license tag
  - update to 14.1.0
  - disabled static libs (if something really needs them, re-enable them
    in a -static subpackage)


author: Tom "spot" Callaway <tcallawa@redhat.com> 14.1.0-4.20081105cvs
changelog:
  - update to 20081105 cvs checkout (fixes many bugs, no longer creates _fmt_*.so.*)
  - move _fmt_*.so to main package so support for file formats no longer requires devel


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
  - removed liblpc10 from source tarball due to licensing uncertainity
  - added license file to libgsm
  - fixed bogus dates in changelog


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updates for 2.01 release
  - Fixed rc file
  - RPM now buildable as non-root
  - fixed post_service errors
  - fixed provides to include perl modules
  - use file find instead of manually specifying files


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updated for 2.20 release
  - made /etc/mail/spamassassin a config directory so local.cf doesn't get wiped out
  - added a patch to remove findbin stuff


author: Chip Turner <cturner@redhat.com>
changelog:
  - better control of service level, improvement in %post script.
  - (contribs from schirmer@taytron.net)


author: Tim Powers <timp@redhat.com> 2.43-6
changelog:
  - don't use rpms internal dep generator
  - buildrequire perl-Time-HiRes instead of perl(Time:HiRes) so we can satisfy build deps in the build system


author: Warren Togami <wtogami@redhat.com> 2.62-2
changelog:
  - upgrade to 2.62
  - Prereq -> Requires, former is deprecated
  - Require current version of perl
  - Remove urban myth clean test
  - TODO: Get rid of prefix


author: Warren Togami <wtogami@redhat.com> 2.62-3
changelog:
  - Ville Skyttä's fixes from #113596 including:
  - Fix buildroot traces
  - enable openssl
  - Trailing slash to DESTDIR (bug 90202 comment 14).
  - export optflags so they're honored, affects spamc only.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.63-8
changelog:
  - #122233
  - Require perl(:MODULE_COMPAT_*).
  - Use %{_mandir} and %{_initrddir}.
  - Fix License tag and include License in docs.
  - Backslashify multiline init script description.


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040524
changelog:
  - #123432 do not start service by default
  - #122488 remove CRLF's
  - #123706 correct license
  - svn snapshot 20040524
  - svn snapshot 20040518


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040530
changelog:
  - svn snapshot 20040530
  - #124870 prevent service startup failure due to old -a option
  - #124871 more docs
  - #124872 unowned directories


author: Warren Togami <wtogami@redhat.com> - 3.0.2-9
changelog:
  - SA#4191 uri_to_domain() is broken for urls with empty port
    SA#4232 multipart message with 0 parts -> uninitialized in m//
    SA#4121 Score for user defined rules become ignored
    SA#3944 get_envelope_from not handling received header


author: Warren Togami <wtogami@redhat.com>
changelog:
  - Options for RHEL4
      * spamc/spamd cannot connect over IPv6 or SSL
      * sa-update is disabled
    The above functionality requires perl modules not included in RHEL4.
    You may still use them if you get those perl modules from elsewhere.
    RHEL5 ships these perl modules.


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.2.alpha1
changelog:
  - Include default rules to prevent mass confusion and complaints.
    You should really use sa-update though.  Really.
    Edit /etc/cron.d/sa-update to automate it.


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.14.svn816416
changelog:
  - 3.3.0 svn816416 snapshot, pre-alpha3
    Upstream just fixed important bug SA#6206.  Many other bugs fixed since alpha2.


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.18.svn816416
changelog:
  - Enable SOUGHT ruleset in nightly sa-update http://wiki.apache.org/spamassassin/SoughtRules
    You must enable the sa-update cron job manually in /etc/cron.d/sa-update
  - Custom channels may be specified in these config files:
        /etc/mail/spamassassin/sa-update-channels.txt
        /etc/mail/spamassassin/sa-update-keys.txt


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Nick Bebout <nb@fedoraproject.org> - 3.3.2-0.4.svn1071394
changelog:
  - replace @@VERSION@@ with current saversion
  - restart spampd after sa-update cronjob runs
  - update to svn1071394


author: Kevin Fenzi <kevin@scrye.com> - 3.3.2-12
changelog:
  - Fix sa-update not detecting spamd running. Fixes bug #755644
  - Add restart=always to systemd file to work around upstream bug. Bug #812359


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
  - document rawbody's split into chunks (#892350)
  - avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
  - update to 3.4.0
  - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-2
changelog:
  - Removed .la files
  - Removed doc-cs packages and merged it into doc package
  - Removed packaging of static files, and tested -without static_libs option for configure script
  - Moved symlink .so files from devel package to main package
  - Commented /sbin/ldconfig for devel package.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-3
changelog:
  - added macro to prevent error from stopping build for not including *.la files
  - added epoch to the SPEC
  - conditional build seems to be working correctly the old way only??
  - unified changelogs


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-1
changelog:
  - using newest version of speech-dispatcher
  - updated %{_libdir}/libspeechd.so.2.0.4 to %{_libdir}/libspeechd.so.2.0.5
  - python packages are being generated correctly now
  - must force prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.i386/%{_prefix} to enable python packages to get installed correctly.
  - finding and deleting .*la files in /builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.i386 to avoid unpackaged files error.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-3
changelog:
  - Added Requires(post), Requires(preun) for -doc package
  - Changed scriptlet from postun to preun for -doc package
  - Removed Epoch
  - Moved %{_libdir}/lib*.so back to devel pacakge
  - Require dependecny on base pacakge is now set to %{version}-%{release} instead of %{version}
  - removed --prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.i386/%{_prefix}  against configure macro.
    -- -python subpackage does not build anymore.
  - removed python subpackag rules from SPEC file.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-4
changelog:
  - Manually specyfying make install for each src directory to be installed
  - Installing python package seprately by by-passing make install


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-6
changelog:
  - changed BR to pulseaudio-lib-devel
  - removed dotconf BR
  - gave ownership of /%{python_sitelib}/speechd-0.3-py2.5.egg-info to python package if package is built for Fedora 9 or above


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-7
changelog:
  - changed license of base package to GPLv2+ and GPL
  - changed license of all other packages to GPLv2+
  - fixed install sequence using cleaner for loop and pushd and popd commands
  - added init script for speech-dispatcher daemon
  - added COPYING to doc in base package
  - removed comment after /sbin/ldconfig
  - resolved rpmlint errors for base package [except UTF-8 encoding error for (cs) documentation file]
  - renamed long_message to spd_long_message and run_test to spd_run_test
  - reset mode of _test.py to 0755


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-8
changelog:
  - converted speech-dispatcher-cs.info to UTF-8 encoding
  - removed multiple file listings of /usr/lib/python2.5/site-packages/speechd/_test.py
    and fixed its mode
  - added init script as a SOURCE instead as a patch
  - duplicate Requires have now been removed
  - Timestamping of files has now been added
  - Install script fixed
  - init script fixed


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-10
changelog:
  - removed Requires(preun) duplicates
  - applied -p option correctly to install command
  - fixed macros in changelog to prevent them from exapnding
  - fixed the init script
  - added patch to change log directory of speech-dispatcher and start only espeak


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-12
changelog:
  - added BuildRequires: texinfo (for makeinfo)
  - changed permissions of Sourcex to 0644
  - incorporated modified init script by mtasaka
  - fixed a few more macros in changelog
  - modified location of Source1 and Patch0 to point to online locations


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-17
changelog:
  - changing permissions of speech-dispatcher to 6711 (setuid and setguid)
  - relocating configuration files in case of OLPC branch.
  - excluding init script in case of OLPC branch.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-1
changelog:
  - using newest version of speech-dispatcher
  - updated %{_libdir}/libspeechd.so.2.0.4 to %{_libdir}/libspeechd.so.2.0.5
  - python packages are being generated correctly now
  - must force prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.x86_64/%{_prefix} to enable python packages to get installed correctly.
  - finding and deleting .*la files in /builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.x86_64 to avoid unpackaged files error.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-3
changelog:
  - Added Requires(post), Requires(preun) for -doc package
  - Changed scriptlet from postun to preun for -doc package
  - Removed Epoch
  - Moved %{_libdir}/lib*.so back to devel pacakge
  - Require dependecny on base pacakge is now set to %{version}-%{release} instead of %{version}
  - removed --prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.x86_64/%{_prefix}  against configure macro.
    -- -python subpackage does not build anymore.
  - removed python subpackag rules from SPEC file.


author: Tomas Hoger <thoger@redhat.com> - 1.2-0.7.beta3
changelog:
  - Security update: Add mode checks to speex_packet_to_header() to protect
    applications using speex library and not having proper checks
    (CVE-2008-1686, #441239, https://trac.xiph.org/changeset/14701)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Adam Jackson <ajax@redhat.com> 0.7.39-2
changelog:
  - Rebuild to break bogus libpng dependency
  - Fix summaries for gtk3 subpackages to not talk about gtk2


author: Hans de Goede <hdegoede@redhat.com> - 0.11-4
changelog:
  - Add missing BuildRequires: usbutils, so that we get proper USB device
    descriptions in the USB device selection menu


author: Christophe Fergeau <cfergeau@redhat.com> - 0.11-5
changelog:
  - Fix build on PPC
  - Remove ExclusiveArch. While spice-gtk will build on ARM and PPC, it
    hasn't been tested on these arch, so there may be some bugs.


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-1
changelog:
  - Rebase to 0.22
    Resolves: rhbz#1109397
  - Fix screenshot of secondary displays
    Resolves: rhbz#1029761
  - Fix potential crash when freeing primary surface.
    Resolves: rhbz#1082555
  - Add RHEL-only SPICE_NOSCALE to disable display scaling.
    Resolves: rhbz#1067346
  - Fix connection to RHEL5 Spice server
    Resolves: rhbz#1017862
  - Fix coroutine leak
    Resolves: rhbz#1007841
  - Fix clipboard hang on clipboard loop
    Resolves: rhbz#1073364


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.22-2
changelog:
  - Additional display pop out when restarting service spice-vdagentd in guest
    Resolves: rhbz#1043782
  - Coverity scan fixes
    Resolves: rhbz#885719
  - Send data message for file copy of 0 size
    Resolves: rhbz#1135104
  - add spice_channel_get_error()
    Resolves: rhbz#1116048
  - Prefix proxy lookup errors
    Resolves: rhbz#1116048


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.26-1
changelog:
  - Rebase to 0.26
    Resolves: rhbz#1214101
  - Allow to transfer multiple files at once
    Resolves: rhbz#1167829
  - Fix smartcard cannot work after restart guest
    Resolves: rhbz#1205548


author: Fabiano Fidêncio <fidencio@redhat.com> - 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242602
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247907
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1244878
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1235442
  - Print file transfer summary to the log
    Resolves: rhbz#1140512
  - Enable proxy when requested
    Related: rhbz#1182252


author: Victor Toso <victortoso@redhat.com> - 0.26-6
changelog:
  - Implements volume-sync from guest to client
    Resolves: rhbz#1264105
  - Avoid crash in virt-manager
    Resolves: rhbz#1301863
  - Fix focus in fullscreen mode
    Resolves: rhbz#1275231
  - Add Client capability for Windows monitor_config message
    Resolves: rhbz#1248189
  - Fix error message for file transfer
    Resolves: rhbz#1265562


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-7
changelog:
  - Improve message for number of usb channels in usb device widget
    Resolves: rhbz#1299931
  - Fix usbredir leak when redirecting a webcam
    Resolves: rhbz#1270363


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-8
changelog:
  - Check runtime usbredir version
    Resolves: rhbz#1320827
  - Allow connection to password protected guests
    Resolves: rhbz#1320806
  - Fix runtime warnings related to shared folders and usb redirection
    Resolves: rhbz#1319405
  - Change runtime warning for empty monitor config to debug message
    Resolves: rhbz#1319405
  - Fix 16 bpp LZ image decompression
    Resolves: rhbz#1285469


author: Victor Toso <victortoso@redhat.com> - 0.31-3
changelog:
  - Fix client's crash when agent is killed
    Resolves: rhbz#1336321
  - Parse ipv6 address
    Resolves: rhbz#1335239
  - Improving parsing of Smartcard messages
    Resolves: rhbz#1338727
  - Fix hangs with "Connected to graphic server"
    Resolves: rhbz#1323092


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-4
changelog:
  - Fix SASL GSSAPI (kerberos authentication)
    Resolves: rhbz#1343361
  - Allow to connect to ipv6 behind proxy
    Resolves: rhbz#1331777


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-5
changelog:
  - Allow to connect to ipv6 without proxy
    Resolves: rhbz#1361478
  - Silence a critical when migrating
    Resolves: rhbz#1356162
  - Disable EPOXY / EGL usage
    Resolves: rhbz#1362460


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-1
changelog:
  - Rebase to 0.33
    Resolves: rhbz#1402474
  - Rebuilt with correct hardening flags due to bug 1387475
    Resolves: rhbz#1420778
  - Fix copy paste issues
    Resolve: rhbz#1409854


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-2
changelog:
  - Add missing patch for rebase
    Resolves: rhbz#1402474
  - Add obsoletes to the spec file to ease updates
    Resolves: rhbz#1432776
  - Fix black screen in virt-manager
    Resolves: rhbz#1433242
  - Make connection error message more clear
    Resolves: rhbz#1365736


author: Victor Toso <victortoso@redhat.com> - 0.33-3
changelog:
  - Avoid CRITICALs on copy-paste
    Resolves: rhbz#1440096
  - Avoid assertions on file-xfer while agent disconnects
    Related: rhbz#1440096


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-4
changelog:
  - Make connection error message more clear
    Resolves: rhbz#1365736
  - Improve audio debug
    Resolves: rhbz#1436249
  - Fix wrong encoding of transferred files
    Resolves: rhbz#1440206


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 15-7
changelog:
  - Fix build requires and requires (#884632)
  - Cleanup specfile for latest guidelines 
  - Add ASL license text


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: It is BSD, not GPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-3
changelog:
  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-4
changelog:
  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)


author: Alon Levy <alevy@redhat.com>
changelog:
  - Fix mjpeg memory leak and bad behavior.
  - Add usbredir to list of channels for security purposes. (#819484)


author: Soren Sandmann <ssp@redhat.com> - 0.11.3-1
changelog:
  - Add capability patches
  - Add capability patches to the included copy of spice-protocol

      Please see the comment above Patch6 and Patch7
      regarding this situation.


author: Yonit Halperin <yhalperi@redhat.com> 0.12.4-1
changelog:
  - New upstream release 0.12.4
  - Require libjpeg-turbo-devel instead of libjpeg-devel
  - Remove "BuildRequires: spice-protocol" from spice-server
  - Add "Requires: spice-protocol" to spice-server-devel.


author: Hans de Goede <hdegoede@redhat.com> - 0.12.4-1
changelog:
  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Fix qemu crash during migration with reboot
    Resolves: rhbz#1016795
  - Monitor whether the client is alive
    Resolves: rhbz#1016790


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-7
changelog:
  - Fix assert in mjpeg_encoder_adjust_params_to_bit_rate()
    Resolves: rhbz#1086823
  - Fix "Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion
    `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed" assertion
    Resolves: rhbz#1058625
  - Lower a monitor-config warning to debug level
    Resolves: rhbz#1119220
  - mjpeg: Don't warn on unsupported image formats
    Resolves: rhbz#1070028


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix defects reported by Coverity
    Resolves: rhbz#885717
  - Validate surface bounding box sent from QXL driver
    Resolves: rhbz#1052856
  - Fix assertion sometimes happening during migration while a client is
    connected
    Resolves: rhbz#1035184
  - Fix crash when restarting VM with old client
    Resolves: rhbz#1145919


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-10
changelog:
  - Fix qemu segmentation fault (core dumped) when boot KVM guest with
    spice in FIPS enabled mode.
    Resolves: rhbz#1071176


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11
changelog:
  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16
changelog:
  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17
changelog:
  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18
changelog:
  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-1
changelog:
  - Rebase to spice-server 0.12.8
    Resolves: rhbz#1388947
    Resolves: rhbz#1377551
    Resolves: rhbz#1283202


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Hans de Goede <hdegoede@redhat.com> 0.8.0-2
changelog:
  - Make the per session agent process automatically reconnect to the system
    spice-vdagentd when the system daemon gets restarted


author: Hans de Goede <hdegoede@redhat.com> - 0.10.0-1
changelog:
  - New upstream release 0.10.0
  - This supports using systemd-logind instead of console-kit (rhbz#756398)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
  - This moves the tmpfiles.d to /usr/lib/tmpfiles.d (rhbz#840194)
  - This adds a systemd .service file (rhbz#848102)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-2
changelog:
  - Fix setting of mode on non arbitrary resolution capable X driver
  - Fix wrong mouse coordinates on vms with multiple qxl devices


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.1.20100607
changelog:
  - Rebase to 4.1 prerelease with xz wrapper
  - Provides lzma compression as an option.
  - squashfs-fix-unsquashing-v3.patch is part of the 4.1 prerelease


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.3.20100803
changelog:
  - Rebase to latest upstream
  - Prevent warning message for xattr for virtual directory
  - Fix issue with large inodes - BZ 619020


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.4.20100827
changelog:
  - Rebase to latest upstream.
  - The main reason is to pick up a fix for large xattr similar to the large inode fix. This doesn't need to get backported as 4.0 doesn't have xattr support.
  - An option was added to build without xattr support.
  - Various source cleanups have been done as well.


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.1.20101223
changelog:
  - Switch to 4.2 development snapshot to get new XZ support
  - LZMA and XZ (LZMA2) support are now different


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.2.20101231
changelog:
  - Pull latest upstream snapshot
  - Includes check for matching compression type when adding to an existing image
  - Sample cvs command now includes timezone and specifies when on the date to use for the snapshot


author: Bruno Wolff III <bruno@wolff.to> - 4.2-1
changelog:
  - 4.2 is released.
  - Bugfix for bad data causing crash.
  - Include doc files added for release.
  - Big endian patch is now upstream.
  - Buildroot tag isn't needed any more.
  - We can now specify CFLAGS on the make call.
  - Compressor options are now passed with the make call.


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.1.git0be606be
changelog:
  - Pre-release of 4.3 to get early testing
  - This update includes a bit of internal code infrastructure changes
  - There are lots of fixes to better handle bad data
  - The final release is expected sometime in December
  - Until the release only the README doc file is available


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.8.gitca6a1c90
changelog:
  - Latest pre 4.3 snapshot
  - New option to display compression options used
  - Some error message improvements


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1
changelog:
  - Update to latest upstream version 3.3.8
  - Fixed: active ftp crashing
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-22
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to service file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-23
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to tmpfiles.d conf file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-24
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of /var/run/squid was also needed to be in SPEC file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-25
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Squid needs write access to /var/run/squid.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-28
changelog:
  - Related: #1330577 - CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple
    issues in ESI processing


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-30
changelog:
  - Related: #1334509 - CVE-2016-4553 squid: Cache poisoning issue in
    HTTP Request handling
  - Related: #1334492 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-1
changelog:
  - Resolves: #1273942 - Rebase squid to latest mature 3.5 version (3.5.10)
  - Resolves: #1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572
    CVE-2016-3948 squid: various flaws
  - Resolves: #1254016 - IPv4 fallback is not working when connecting
    to a dualstack host with non-functional IPv6
  - Resolves: #1254018 - should BuildRequire: g++
  - Resolves: #1262456 - Squid delays on FQDNs that don't contains AAAA record
  - Resolves: #1336940 - Disable squid systemd unit start/stop timeouts
  - Resolves: #1344197 - /usr/lib/firewalld/services/squid.xml conflicts between
    attempted installs of squid-7:3.3.8-31.el7.x86_64 and
    firewalld-0.4.2-1.el7.noarch
  - Resolves: #1299972 - squid file descriptor limit hardcoded to 16384 via 
    compile option in spec file


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-4
changelog:
  - Resolves: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-5
changelog:
  - Related: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Ray Strode <rstrode@redhat.com> 0.8-3
changelog:
  - change to new modular X dependencies
  - move configure to build instead of prep
  - use make install DESTDIR=$RPM_BUILD_ROOT instead of
    makeinstall macro


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.1.0-1
  — Update to new stable release
  — Major refactoring now that some sanity prevailed upstream in font naming
    Be careful if you used the old font family names


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: DJ Delorie <dj@redhat.com> - 4.12-1
changelog:
  - Rebase to strace 4.12, which fixes...
    + Support BLKPG_RESIZE_PARTITION (#1329673)
    + Support getrandom() (#1374268)
    + Fix endless loop in io_submit (#1165548)
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Show mode with O_TMPFILE (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-2
changelog:
  - Adjust O_TMPFILE patch to include support even if the
    build-time headers don't have it. (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-5
changelog:
  - Handle unexpected CLONE_PTRACE events. (#1466535)
  - Skip tests for s390/ppc64le as well as s390x/ppc64.


author: Deji Akingunola <dakingun@gmail.com> - 0.5.1-2
changelog:
  - Updates from reviews:
  -	Have the -devel subpackage require pkgconfig
  -	Add a versioned dependency on cmake and remove dbus-qt buildrequire


author: Deji Akingunola <dakingun@gmail.com> - 0.5.1-5
changelog:
  - Split out a strigi-libs subpackage as suggested in BZ#223586
  _ Include a strigidaemon autostart desktop file


author: Lorenzo Villani <lvillani@binaryhelix.net> - 0.5.11.1-1
changelog:
  - drop _default_patch_fuzz
  - rebase strigi-multilib patch
  - No official 0.5.11.1 tarballs were released but we need 0.5.11.1, apply a
    diff between 0.5.11 and 0.5.11.1 svn tags


author: Rex Dieter <rdieter@fedoraproject.org> - 0.6.4-1
changelog:
  - strigi-0.6.4
  - Summary: s/for KDE//
  - *.desktop: validate, remove OnlyShowIn=KDE
  - -devel: move *.cmake here


author: Rex Dieter <rdieter@fedoraproject.org> 0.7-0.1.RC1
changelog:
  - strigi-0.7-RC1
  - use %_isa where appropriate
  - %files: track lib sonames
  - strigi-daemon.desktop: +Hidden=true (ie, disable autostart by default)


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.0-2
changelog:
  - Fixed initialization crash of IMV and IMC particularly
    attestation imv/imc as libstrongswas was not getting initialized.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-1
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - Modified spec file significantly to reflect the current state of
    the package, as this rebase enables several major modules: TNC
    client and server (IF-TNCCS), IMC-IMV (IF-M), PT-TLS (RFC 6876),
    SWID IMC/IMV, charon daemon and it related libs and modules,
    tnc-pdp, tnc-ifmap plugins.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-2
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - A typo caused a patch not being applied, so fixed that and
    bumping the number number.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-4
changelog:
  Resolves:#1067119
  - Fixed full hardening for strongswan (full relro and PIE).
    The previous macros had a typo and did not work
    (see bz#1067119).
  - Fixed files permissions for executables and config files to
    correctly reflect their intent.
  - Fixed tnc package description to eliminate rpmlint errors.
  - Fixed pki binary and moved it to /usr/libexece/strongswan as
    others binaries are there too to eliminate rpmlint errors.
  - Fixed systemd service name to "strongimv TNC".
  - Removed the dependency on gmp-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 5.2.0-1
changelog:
  Resolves: #1120371
  - Rebase to new upstream release 5.2.0
  - IMA/TPM based remote attestation
  - Aikgen tool to generate an Attestation Identity Key bound
    to a TPM
  - PT-EAP transport protocol (RFC 7171) for TNC
  - Enabled support for acert for checking X509 attribute certificate
  - Updates local patches
  - Spec file update
  - openac tool replaced with pki --acert


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move to Applications/Internet group
  - clean up %post script
  - make stunnel.pem %ghost %config(noreplace)
  - provide a sample file for use with xinetd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.11
  - chuck the SIGHUP patch (went upstream)
  - chuck parts of the 64-bit clean patch (went upstream)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove explicit requirement on openssl (specific version isn't enough,
    we have to depend on shared library version anyway)


author: Nalin Dahyabhai <nalin@redhat.com> 3.19-1
changelog:
  - update to 3.19 to avoid problems with stunnel being multithreaded, but
    tcp wrappers not being thrad-safe


author: Nalin Dahyabhai <nalin@redhat.com> 3.20-1
changelog:
  - log using LOG_AUTHPRIV facility by default (#47289)
  - make permissions on stunnel binary 0755
  - implicitly trust certificates in %{_datadir}/ssl/trusted (#24034)


author: Miloslav Trmac <mitr@redhat.com> - 4.11-1
changelog:
  - Update to stunnel-4.11
  - Fix int/size_t mismatches in stack_info ()
  - Update Certificate-Creation for /etc/pki


author: Miloslav Trmac <mitr@redhat.com> - 4.14-1
changelog:
  - Update to stunnel-4.14
  - Override changed default pid file location, keep it in %{_localstatedir}/run


author: Miloslav Trmač <mitr@redhat.com> - 4.20-4
changelog:
  - Revert the port to NSS, wait for NSS-based stunnel 5.x instead
    Resolves: #301971
  - Mark localized man pages with %lang (patch by Ville Skyttä)
    Resolves: #322281


author: Avesh Agarwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Avesh Agarwal <avagarwa@redhat.com> - 4.33-1
changelog:
  - New upstream realease 4.33
  - Updated authpriv and sample patches to match the new release
  - Addresses bz 580117 (inted mode support issue)


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
  - New upstream realease 4.55
  - Updated local patches
  - enabled fips mode
  - Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
  - New upstream realease 4.56.
  - Updated local patches.
  - Fixed upstream URL in spec file.
  - Sourced URL of sha256 hash file in spec file.


author: Tomáš Mráz <tmraz@redhat.com> - 4.56-5
changelog:
  - Allow TLS 1.1 and TLS 1.2 in FIPS mode
  - Documentation fixes of curve and accept/connect options (#1197340)
  - Add negotiated protocol version to the logs (#1275613)


author: William Poteat <wpoteat@redhat.com> 0.98.4-1
changelog:
  - 740788: Getting error with quantity subscribe using subscription-assitance
    page. (wpoteat@redhat.com)
  - 755130: add extra whitespace to classic warning (cduryee@redhat.com)
  - 759199: rhsmcertd is logging the wrong value for certFrequency
    (cduryee@redhat.com)
  - 758471: install-num-migrate-to-rhsm threw traceback when no instnum was
    found. (awood@redhat.com)
  - 752572: add interval logging statements back in on rhsmcertd startup
    (cduryee@redhat.com)
  - 756507: do not use output from "getlocale" as input for "setlocale"
    (cduryee@redhat.com)
  - 746259: Don't allow the user to pass in an empty string as an activation key
    (awood@redhat.com)
  - 705883: Fix error dialog modal issues. (dgoodwin@redhat.com)
  - 756173: Unexpected behavoir change in subscription-manager unregister
    (wpoteat@redhat.com)
  - 746732: Only use fallback locales for dates we need to parse
    (alikins@redhat.com)
  - 753093: The available subscriptions count does not show correctly in
    Subscription Manager GUI (wpoteat@redhat.com)
  - 749636: Client should not support users entering activation keys and existing
    consumer ids (bkearney@redhat.com)
  - 719743: Improved text output for successful pool subscription
    (bkearney@redhat.com)
  - 755541: Enhanced the message in the katello plugin to debug when the backend
    system does not support environments. (bkearney@redhat.com)
  - 755035: Migration script should work on RHEL 5.7 and up. (awood@redhat.com)
  - 749332: Normalize the error messages for not being registered
    (bkearney@redhat.com)
  - 754821: Default org of "Unknown" was not marked for gettext
    (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.6-1
changelog:
  - 755031: Update to Subscription Assistant quantity check in unlimited pool
    case. (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.8-1
changelog:
  - 755861: Fixed quantity selection issue due to older version of pygtk on 5.8.
    (mstead@redhat.com)
  - 765905: add man pages for subscription-manager-migration (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.99.2-1
changelog:
  - Initial Fedora build. (dgoodwin@redhat.com)
  - 754425: Remove grace period logic (jbowes@redhat.com)
  - 766577: Fix error on "redeem" with multibyte lang (alikins@redhat.com)
  - Add README.Fedora to Fedora builds (cduryee@redhat.com)
  - 757697: report xen dom0 as host, not guest (cduryee@redhat.com)
  - 747014: Help icon was not working in RHEL 5. (awood@redhat.com)
  - 767754: Invalid certificate status when stacked entitlements have overlapping
    dates (wpoteat@redhat.com)
  - 745995: Ensure default quantity calc does not include future entitlements.
    (mstead@redhat.com)
  - 760017: Display a friendly message when an invalid installation number is
    encountered. (awood@redhat.com)
  - 758162: allow --force to override missing mappings (cduryee@redhat.com)
  - 759069: catch exception when enabling invalid repositories
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.3-1
changelog:
  - 768983: don't purge future dated entitlements (jbowes@redhat.com)
  - 769642: confusing output from rhn-migrate-to-rhsm when autosubscribe fails
    (cduryee@redhat.com)
  - 769433: make rhel5 firstboot modules use bound gettext (alikins@redhat.com)
  - Custom facts should be loaded after hardware facts. (awood@redhat.com)
  - 745973: Fixed missing product icons for partially stacked future entitlement.
    (mstead@redhat.com)
  - 769433: Tag the module names as gettext (alikins@redhat.com)
  - 761478: Facts viewed in the GUI were getting out of date when system
    entitlement status changed. (awood@redhat.com)
  - 761133: Support fixing yellow state in compliance assistant.
    (dgoodwin@redhat.com)
  - 766577: use unicode strings for possible server errors (alikins@redhat.com)
  - 768415: remove hardcoded reference to x86_64 for extra channel enablement
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.4-1
changelog:
  - 766778: Improvements on quantity spinner max value entry. (mstead@redhat.com)
  - 736465: "Product's Subscription Details" in the gui is neglecting stack
    subscriptions (wpoteat@redhat.com)
  - 772209: install-num-migrate-to-rhsm does not work on x86 arch
    (cduryee@redhat.com)
  - 761140: enable the help button in firstboot (jbowes@redhat.com)
  - 771726: Rename man manpage for rhsm-compliance-icon to rhsm-icon.
    (bkearney@redhat.com)
  - 758038: Guest's system facts displays "virt.uuid: Unknown"
    (wpoteat@redhat.com)
  - 767265: Always send up the list of packages on registration.
    (awood@redhat.com)
  - 768983: show future subs in list --consumed (jbowes@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.5-1
changelog:
  - Updated releasers.conf for rhel-6.3 (mstead@redhat.com)
  - Making return code from subscribe --pool consistent with subscribe --auto
    (awood@redhat.com)
  - 785018: Corrected help text for --no-auto. (awood@redhat.com)
  - 656944: List IPv6 information in facts. (awood@redhat.com)
  - 689608: Subscription failure should result in a return code of 1.
    (awood@redhat.com)
  - 772921: Do not show message dialog when multiple sub-man launches detected.
    (mstead@redhat.com)
  - 772921: Clicking notification icon shuts down subscription manager.
    (mstead@redhat.com)
  - 734533: Failure to import should result in a return code of 1.
    (awood@redhat.com)
  - 782549: Subscription manager throws exception when an expired cert exists.
    (mstead@redhat.com)
  - 772338: Subscription-manager-gui help documentation review
    (wpoteat@redhat.com)
  - 772338: subscription-manager-gui Help documentation needs a review
    (wpoteat@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 781510: 'subscription-manager clean' should delete redhat.repo
    (awood@redhat.com)
  - 771726: Man page for rhsm-compliance-icon should be re-authored to rhsm-icon
    (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.6-1
changelog:
  - 783542: Return code for bad input to install-num-migrate-to-rhsm should be 1.
    (awood@redhat.com)
  - 773707: remove hard coded reference to /etc/pki/product (cduryee@redhat.com)
  - 783278: do not alter system facts on dry run (cduryee@redhat.com)
  - IPv4 and IPv6 facts that are undefined should return 'Unknown' instead of
    'None'. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.7-1
changelog:
  - Improve relevancy of details on my installed products tab.
    (dgoodwin@redhat.com)
  - 719743: Added better punctuation to one status message (bkearney@redhat.com)
  - Have client check sockets on non-stacked entitlements as well.
    (dgoodwin@redhat.com)
  - New date compare implemetation for determining start/end dates
    (mstead@redhat.com)
  - Add "zanata-pull" and "zanata-push" makefile targets (alikins@redhat.com)
  - as_IN seems busted on RHEL6, so skip it (alikins@redhat.com)
  - pep8/make stylish cleanups (alikins@redhat.com)
  - 741155: Fixed start/end date calculations for My Installed Software tab
    (mstead@redhat.com)
  - fixes for po files from zanata (alikins@redhat.com)
  - new po files from zanata (alikins@redhat.com)
  - 767620: Add manage_repos config option. (dgoodwin@redhat.com)
  - 784031: remove katello plugin (cduryee@redhat.com)
  - Make return code from import consistent with subscribe. (awood@redhat.com)
  - Add Fedora release target. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.8-1
changelog:
  - 790205: do not lay down install-num-migrate-to-rhsm on rhel6 systems
    (cduryee@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 795541: Change the environment filtering which is being done on the client
    side (bkearney@redhat.com)
  - Add consumer deleted on server detection. (jbowes@redhat.com)
  - Fix spec for both Fedora 15+ and RHEL 7+. (dgoodwin@redhat.com)
  - Fix Makefile for both Fedora 15+ and RHEL 7+. (dgoodwin@redhat.com)
  - Add service level to register and subscribe CLI commands.
    (dgoodwin@redhat.com)
  - Add service-level CLI command. (dgoodwin@redhat.com)
  - delete consumer on rhsmcertd checkin (jbowes@redhat.com)
  - pull out rhsmcertd python worker to its own file (jbowes@redhat.com)
  - clean up some compiler warnings in rhsmcertd (jbowes@redhat.com)
  - String cleanups (alikins@redhat.com)
  - 790217: install-num-migrate-to-rhsm shouldn't copy both Desktop and
    Workstation product certs. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.9-1
changelog:
  - Updating required version of python-rhsm (mstead@redhat.com)
  - fixes for po files (alikins@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 799394: Do not attempt to remove redhat.repo if it does not exist.
    (awood@redhat.com)
  - 800121: do not attempt to call UEP when system is unregistered
    (cduryee@redhat.com)
  - 799271: The usage string for service-levels contained the incorrect command
    name (bkearney@redhat.com)
  - 799271: The usage string for service-levels contained the incorrect command
    name (bkearney@redhat.com)
  - 704408: date field patch fixes per jbowes (cduryee@redhat.com)
  - 797243: make unregister finish updating repos (alikins@redhat.com)
  - 704408: allow users to clear the date box for contract searches
    (cduryee@redhat.com)
  - 799316: Re-add librsvg2 dependency (dgoodwin@redhat.com)
  - 797996: Add manage_repos setting to default rhsm.conf (dgoodwin@redhat.com)
  - 795564: Add a newline at the end of the options error (bkearney@redhat.com)
  - 752756: Cache the facts, and refresh the validity facts whenever they change.
    (bkearney@redhat.com)
  - Return a consistent scope for public IPv6 addresses across EL5 and EL6.
    (awood@redhat.com)
  - 737773: Do not show the forgotten password url as a link.
    (bkearney@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Explicitly define el5 macro in spec file. (dgoodwin@redhat.com)
  - 796730: Improve the clarity of the usage statement (bkearney@redhat.com)
  - 767790: Improve the messaging when a system is not registered.
    (bkearney@redhat.com)
  - 797294: Typo in commit caused execution error. (bkearney@redhat.com)
  - 796756: use only the basename for the usage string (bkearney@redhat.com)
  - 796756: The usage string should be less verbose to be more consistent with
    the other executable files (bkearney@redhat.com)
  - CLI service-levels touchups. (dgoodwin@redhat.com)
  - 656896: remove attribute 'swapped' (msuchy@redhat.com)
  - Release to Fedora 17 branch as well. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.10-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 801434: Add at-spi accessibility name to calendar selection widget.
    (awood@redhat.com)
  - 800917: Display service level and type in All Subs tab (dgoodwin@redhat.com)
  - Add support for "release" command (alikins@redhat.com)
  - 801517: Missed translating a label during the registration process
    (bkearney@redhat.com)
  - 801513: One translation had a copy/paste error (bkearney@redhat.com)
  - The migration script should write default proxy auth settings.
    (awood@redhat.com)
  - Revert "801513: A replacement variable was used in a translation file where
    it was not needed" (dgoodwin@redhat.com)
  - 801545: Break apart the string to make them easier for the translators
    (bkearney@redhat.com)
  - 801513: A replacement variable was used in a translation file where it was
    not needed (bkearney@redhat.com)
  - 798015: Migration script should play nicely with proxies. (awood@redhat.com)
  - 742033: Unsubscribe button is not greyed out when nothing is selected
    (wpoteat@redhat.com)
  - 783990: Handle network errors when migrating. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.11-1
changelog:
  - 805906: fix missing imports for firstboot (jbowes@redhat.com)
  - Fix RHEL6 firstboot attribute error (dgoodwin@redhat.com)
  - 772218: throw an error if unparsed command line options exist
    (cduryee@redhat.com)
  - Add missing imports to rhsm_login for error dialogs (jbowes@redhat.com)
  - 803386: Display product ID in GUI and CLI. (awood@redhat.com)
  - Fix specfile for el5 firstboot (jbowes@redhat.com)
  - 804227,804076,804228: Handle 404's from old candlepin servers without
    /release (alikins@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for subscribe
    command (mstead@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for register
    command (mstead@redhat.com)
  - 803756,803762: Updated error message for service-level command
    (mstead@redhat.com)
  - fixups for strings from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 789007: Migration should fail early when attempted with non org admin user.
    (awood@redhat.com)
  - 805024: Hide extra separator along with redeem button. (awood@redhat.com)
  - 800999: Added --servicelevel arg to CLI list command (mstead@redhat.com)
  - 804227: Fix issues with repos --list (alikins@redhat.com)
  - Add proper back/forward logic for firstboot sla subscribe (jbowes@redhat.com)
  - 800933: Display service level and type in CLI list commands.
    (dgoodwin@redhat.com)
  - 789008: Print a more specific error message when Candlepin calls fail.
    (awood@redhat.com)
  - hook up sla firstboot to more registration cases (jbowes@redhat.com)
  - Define globals at module scope. (awood@redhat.com)
  - Remove firstboot subscriptions module (jbowes@redhat.com)
  - Fix broken tests for DST. Stop using time.time() (alikins@redhat.com)
  - Add error cases for firstboot autobind (jbowes@redhat.com)
  - Perform the actual entitlement bind on confirm subs screen
    (jbowes@redhat.com)
  - Set up shared state for AutobindController in firstboot (jbowes@redhat.com)
  - Extract a controller class for sla select logic (jbowes@redhat.com)
  - Break apart autobind first boot module (jbowes@redhat.com)
  - Add some autobind wizard button spacing. (dgoodwin@redhat.com)
  - Always update the icon and notification details on status change.
    (mstead@redhat.com)
  - Only add icon click listeners once. (mstead@redhat.com)
  - Adding notification nag icon support for Registration Required
    (mstead@redhat.com)
  - add firstboot rhsm_autobind to spec file (jbowes@redhat.com)
  - Autobind cancel during registration will now unregister you.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Move back/forward/cancel buttons in sla selection to parent
    (jbowes@redhat.com)
  - Revert "Update CLI to handle server that doesn't support service levels."
    (dgoodwin@redhat.com)
  - Update GUI to handle server that does not support service levels.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Add autobind screen to firstboot (jbowes@redhat.com)
  - Fix firstboot unregister import error. (dgoodwin@redhat.com)
  - Add missing spacers to main window toolbar. (dgoodwin@redhat.com)
  - Fix an error handling bug. (dgoodwin@redhat.com)
  - Get register screen working in el6 firstboot (jbowes@redhat.com)
  - Center wizard's error dialog on main window (mstead@redhat.com)
  - Removing commented out code in register dialog (mstead@redhat.com)
  - Add skip option instead of autobind in register dialog. (mstead@redhat.com)
  - Fix preferences dialog error when not registered. (dgoodwin@redhat.com)
  - Improved error handling for autobind wizard. (dgoodwin@rm-rf.ca)
  - Fix message window warnings. (dgoodwin@rm-rf.ca)
  - Fix alignment on select SLA screen. (dgoodwin@redhat.com)
  - Display the service level selected when confirming autobind subs (dgoodwin
    @rm-rf.ca)
  - Implement Cancel button on autobind wizard screens. (dgoodwin@redhat.com)
  - Allow setting service level from preferences dialog. (dgoodwin@redhat.com)
  - First cut at a preferences dialog. (dgoodwin@redhat.com)
  - Pack SLA's into a scrolled window. (dgoodwin@rm-rf.ca)
  - Handle any exception that happens when the autobind wizard is loaded.
    (mstead@redhat.com)
  - Setting parent window on AutobindDialog and add titles to screens.
    (mstead@redhat.com)
  - Integrating autobind wizard with register gui. (mstead@redhat.com)
  - Fix autobind wizard disappearing on window switch. (dgoodwin@redhat.com)
  - Do not set SLA until user hit's subscribe button. (dgoodwin@redhat.com)
  - Polish autobind glade UI (dgoodwin@redhat.com)
  - Set and use the system's service level. (dgoodwin@redhat.com)
  - Cleaning up Select SLA screen (mstead@redhat.com)
  - Added framework for back button support (mstead@redhat.com)
  - Handle no SLAs cover all installed products. (dgoodwin@rm-rf.ca)
  - Handle launching autobind when no entitlements needed. (dgoodwin@rm-rf.ca)
  - Set detected prod list in Select SLA screen (mstead@redhat.com)
  - Close autobind wizard once complete. (dgoodwin@redhat.com)
  - Hookup actual bind in autobind wizard. (dgoodwin@redhat.com)
  - SelectSLA now keeps track of selected SLA and pass to confirm dialog.
    (mstead@redhat.com)
  - Load the autobind glade file on wizard creation. (mstead@redhat.com)
  - Switch to more explicit screen switching. (dgoodwin@redhat.com)
  - Set screen title when screen is changed. (mstead@redhat.com)
  - Allow screens to pass custum data during wizard screen change.
    (mstead@redhat.com)
  - Hooking up button signals for selectsla (mstead@redhat.com)
  - Add callback to allow screen change in wizard (mstead@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Attempt to keep button bar right aligned. (mstead@redhat.com)
  - Removed the button bar form the wizard. (mstead@redhat.com)
  - Created AutobindWizardScreen to provide contract for AutobindWizard
    (mstead@redhat.com)
  - Display appropriate screen in SLA wizard. (mstead@redhat.com)
  - Fixed GtkWarning: IA__gtk_widget_reparent error when launchig dialog
    (mstead@redhat.com)
  - First cut at adding the Select SLA screen. (mstead@redhat.com)
  - Check if dry-run results cover required products. (dgoodwin@redhat.com)
  - Check dry run autobind results for each service level. (dgoodwin@redhat.com)
  - Sketch out an autobind wizard class. (dgoodwin@redhat.com)
  - Start sketching out the confirm subscriptions screen. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.12-1
changelog:
  - Don't skip past firstboot login page on invalid user/pass (jbowes@redhat.com)
  - 805690: Turn repo gpgcheck off if no gpgkey specified. (dgoodwin@redhat.com)
  - 795552: Put safe int conversions around certain fact checks.
    (bkearney@redhat.com)
  - 804100: display an error when candlepin doesn't support release
    (jbowes@redhat.com)
  - 804227: expect a Release object instead of a bare string (alikins@redhat.com)
  - Latest string files from zanata (bkearney@redhat.com)
  - 805450: display better error message when autosubscribing
    (cduryee@redhat.com)
  - 805594: Give each "Subscribe" button in the GUI a unique at-spi name.
    (awood@redhat.com)
  - 803374: Provide unambiguous at-spi names for widgets. (awood@redhat.com)
  - 805353: subscription-manager list --help should use consistent wording for
    servicelevel option. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.13-1
changelog:
  - latest strings into keys.pot and updated from zanata (alikins@redhat.com)
  - 809611: Fix undefined variable in installedtab for expired
    (alikins@redhat.com)
  - pep8/pyflakes cleanups (alikins@redhat.com)
  - Repolib now requires a UEP connection. (awood@redhat.com)
  - Use numeric index to access portion of URL. (awood@redhat.com)
  - 807785: use a better title on the autobind wizard (jbowes@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Add release selection to preferences dialog (alikins@redhat.com)
  - 805415: handle entitlements for socket count of 0 (alikins@redhat.com)
  - 804201: Fix sla select in firstboot after back button (jbowes@redhat.com)
  - 807477: Delay attempt to connect to RHN until after basic error checks.
    (awood@redhat.com)
  - 803374: Change the 'Subscribe' button to read 'Auto-subscribe.'
    (awood@redhat.com)
  - 808217: Add a header to the release list (bkearney@redhat.com)
  - 807153: Provide a more informative error message when encountering repodata
    errors. (awood@redhat.com)
  - 807822: Allow setting release to '' (mstead@redhat.com)
  - 807036: Instruct users to go to All Subscriptions for all SLA failures
    (bkearney@redhat.com)
  - 807407: Subscripton Manager substitutes "" for $releasever when releaseVer
    not set on consumer (wpoteat@redhat.com)
  - 803756: Trap RemoteServerException as well as RestLibException (404) for
    service-level command (mstead@redhat.com)
  - 806941: Removed unknown swapped attribute from autobind.glade.
    (mstead@redhat.com)
  - 807360: Allow the repos command to work without being registered
    (bkearney@redhat.com)
  - 806457: Fix deletion of productids with yum localinstall (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.0.1-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - add test cases for autobind.py (alikins@redhat.com)
  - pep8 and pyflakes cleanups (jbowes@redhat.com)
  - 815563: Remove incorrect at-spi locators. (awood@redhat.com)
  - 795541: Environment command should omit the Library from katello
    (bkearney@redhat.com)
  - 806993: Tolerate the provision of a scheme with the proxy string.
    (awood@redhat.com)
  - remove remnants of subscription_assistant.py (alikins@redhat.com)
  - 811952: Don't try to unsubscribe old ents if we register (alikins@redhat.com)
  - 811952: Handle errors on unsubscribing ent certs (alikins@redhat.com)
  - 812929: Fix issue with selected sla not being in suitable_slas
    (mstead@redhat.com)
  - 812897: Use consistent casing for the word "Error" (awood@redhat.com)
  - Improve preferences dialog error message. (dgoodwin@redhat.com)
  - 811863: Handle unforseen errors in preferences dialog. (dgoodwin@redhat.com)
  - 811340: Select the first product in My Installed Software table by default.
    (awood@redhat.com)
  - 811594: The config, repos, and facts commands should default to --list if no
    options are provided. (awood@redhat.com)
  - 812104: add "release" and "service-level" to completion (alikins@redhat.com)
  - 801434: Add at-spi accessibility name to calendar widget. (awood@redhat.com)
  - updates to man pages (deon@deonlackey.com)
  - 811591: Use consistent messages for not being registered
    (bkearney@redhat.com)
  - Updated the --servicelevel option description (deon@deonlackey.com)
  - Use numeric index to access value returned by urlparse. (awood@redhat.com)
  - 790579: Show translations for errors thrown by installation number parsing.
    (awood@redhat.com)
  - adding --servicelevel option to list command (deon@deonlackey.com)
  - 810306: Improved messaging in firstboot (mstead@redhat.com)
  - 811337: unregister any time we return to rhsm_login (jbowes@redhat.com)
  - 807153: Allow more aggressive deletion of product certs. (awood@redhat.com)
  - 810399: require the latest rhn-setup-gnome for firstboot (alikins@redhat.com)
  - 810290: use correct calculation for "Next update" time in sm-gui
    (cduryee@redhat.com)
  - 810363: handle socket errors for bad proxy host in firstboot
    (alikins@redhat.com)
  - Latest man page and documentation (dlackey@redhat.com)
  - 809989: Add the shortened password url to the strings files.
    (bkearney@redhat.com)
  - 809989: Add a shorter URL to the registration screen (bkearney@redhat.com)
  - rev the zanata version to 1.0.X (alikins@redhat.com)
  - Incrementing version number after 6.3 branch. (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.0.2-1
changelog:
  - Updating strings from zanata (mstead@redhat.com)
  - Add new server setup GUI screen. (dgoodwin@redhat.com)
  - Add new server setup CLI options. (alikins@redhat.com)
  - 813296: Remove check for candlepin_version (jbowes@redhat.com)
  - Allow importing multiple subscriptions at once (jbowes@redhat.com)
  - 820170: Subscription Manager release --list should display "not supported"
    message for older candlepin. (wpoteat@redhat.com)
  - 817938: Make columns in subscription-manager tables sortable.
    (awood@redhat.com)
  - 812153: Release command should have a --show command which is the default.
    (wpoteat@redhat.com)
  - 820080: Fix "Configuration" spelling on firstboot page (alikins@redhat.com)
  - Set the parent window for the about dialog (mstead@redhat.com)
  - removing a sentence from the manpage about working on RHEL 5.8 and later,
    bz820765 (deon@deonlackey.com)
  - 821024: Properly handle ESC on preferences dialog (mstead@redhat.com)
  - Replaced toolbar with menubar. (mstead@redhat.com)
  - 820040,820037,820030: don't break multibyte help blurbs (alikins@redhat.com)
  - 817036: Add a version command to subscription-manager. (awood@redhat.com)
  - The unbindAll command now returns JSON. (awood@redhat.com)
  - Explain the conditional imports more accurately. (alikins@redhat.com)
  - Print different message when subscribing to no service level.
    (awood@redhat.com)
  - remove deprecated use of "md5" module (alikins@redhat.com)
  - Enable and disable available repos on client machine from Subscription
    Manager CLI (wpoteat@redhat.com)
  - 790939: Add SLA to rhn-migrate-classic-to-rhsm. (awood@redhat.com)
  - 812388: Show the number of entitlements unsubscribed from. (awood@redhat.com)
  - 818298: release --list should not display rhel-5 when only rhel-6 product is
    installed (wpoteat@redhat.com)
  - 810236: Update facts after registering with --consumerid.
    (dgoodwin@redhat.com)
  - 818461: invalid date format error when using or_IN.UTF-8 (cduryee@redhat.com)
  - Store date of migration in migration facts for rhn-migrate-classic-to-rhsm.
    (awood@redhat.com)
  - Unify our el5 and el6 firstboot modules (jbowes@redhat.com)
  - add a gconf setting for users who do not want to use the icon
    (cduryee@redhat.com)
  - do not use the gui by default when migrating (cduryee@redhat.com)
  - Allow service level change for consumer via CLI independent of other calls.
    (wpoteat@redhat.com)
  - 815479: Incorrect owner should be relayed on service level list call.
    (wpoteat@redhat.com)
  - 817390: add completion support for servicelevel (alikins@redhat.com)
  - 817117: fix completion of environment command (alikins@redhat.com)
  - 816377: handle cert migration data being missing (alikins@redhat.com)
  - Store date of migration and installation number in migration facts.
    (awood@redhat.com)
  - Fixing registration error when loading SlaWizard (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.3-1
changelog:
  - 817938: Add sorting to the contract selection table. (awood@redhat.com)
  - 822706: gtk widget visibility toggle compat for el5 (jbowes@repl.ca)
  - 822706: Display Register button on Installed Product tab if not registered.
    (mstead@redhat.com)
  - 825286: Handle unset service levels in a manner similar to unset release
    versions. (awood@redhat.com)
  - 826735: Merge start/end date sub details into one row. (dgoodwin@redhat.com)
  - fix make stylish (jbowes@repl.ca)
  - 811593: Feedback when not providing command options is not consistent.
    (wpoteat@redhat.com)
  - 806986: Subscription-Manager should refer to subscription name and product
    name. (wpoteat@redhat.com)
  - 825737: Service-level --set should configure proper value for GUI
    (wpoteat@redhat.com)
  - 817901: Disable the match installed products filter. (dgoodwin@redhat.com)
  - Remove unecessary use of lambda. (dgoodwin@redhat.com)
  - 818282: Sort virtual subscriptions to the top of contract selector.
    (dgoodwin@redhat.com)
  - 818383: display better messages for yum plugin usage (cduryee@redhat.com)
  - Fix logging of deleted expired certs (jbowes@repl.ca)
  - Remove the constants module (jbowes@repl.ca)
  - Remove useless format specifier (jbowes@repl.ca)
  - 801187: condense list --consumed output (jbowes@repl.ca)
  - Don't use kwargs for cli subclasses; it makes things shorter (jbowes@repl.ca)
  - Remove desc cli argument, no module used it (jbowes@repl.ca)
  - Use super for cli module init (jbowes@repl.ca)
  - Clean up rpmlint messages (jbowes@repl.ca)
  - Autogenerate the cli usage message (jbowes@repl.ca)
  - Remove obsolete nose tests (jbowes@repl.ca)
  - 812410: Show product name on CLI subscribe to pool. (dgoodwin@redhat.com)
  - 824680: make init script status return proper exit code (alikins@redhat.com)
  - fix nosetests for progress gui (jbowes@repl.ca)
  - Rework urlparse calls to work with RHEL 5. (awood@redhat.com)
  - 818238: Set a better progress title for sub search (jbowes@repl.ca)
  - 771756: Drop "rhsm icon" from the rhsm-icon usage message (jbowes@repl.ca)
  - 820294: Let candlepin handle org/env/key validation (jbowes@repl.ca)
  - 818397: Rename subscription-manager-gnome to -gui (jbowes@repl.ca)
  - Reduce wordiness of version command. (awood@redhat.com)
  - 824333: use rhel5-friendly urlparse options (cduryee@redhat.com)
  - Log the program versions when starting the GUI or making a CLI call.
    (awood@redhat.com)
  - Fix the About dialog to work in RHEL 5.8 (awood@redhat.com)
  - 821544: Remove the stacking id attribute from my susbcriptions since it is
    not being used currently. (bkearney@redhat.com)
  - add checkcommits exception for 824100 (alikins@redhat.com)
  - 824100: update zanata.xml to grab latest pt_BR.po (alikins@redhat.com)
  - 822057: do not hard-code cdn to port 443 (cduryee@redhat.com)
  - Display sane error on CLI if missing CA certificate. (dgoodwin@redhat.com)
  - Display sane error in GUI if missing CA certificate. (dgoodwin@redhat.com)
  - 812373: Terminology change for list --installed and --consumed
    (wpoteat@redhat.com)
  - zanata client will push any po/*.pot files it finds. Stop.
    (alikins@redhat.com)
  - 789182: Fix UnicodeEncodeError when logging. (awood@redhat.com)
  - README for github and people who like to read (alikins@redhat.com)
  - checkcommits exception for xgettext patch fixed in master
    (alikins@redhat.com)
  - 820743: Fix these strings so xgettext finds extracts them
    (alikins@redhat.com)
  - refine the regex for "make gettext_lint" (alikins@redhat.com)
  - Upload el6 yum packages to another dir for compatability.
    (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.4-1
changelog:
  - 818978: Use systemd instead of sysv when installing on F17+ and RHEL7+.
    (mstead@redhat.com)
  - 827035: update identity certificate (jmrodri@gmail.com)
  - registergui: make screens without guis more generic (jbowes@redhat.com)
  - Incorrect field value removed on previous change (wpoteat@redhat.com)
  - 829812: Add an unset command for the release command (bkearney@redhat.com)
  - 823659: Update SLA text in Settings to Service Level (wpoteat@redhat.com)
  - Use a temp file for finding used widgets (jbowes@redhat.com)
  - clean up some unused import warnings (jbowes@redhat.com)
  - default to running style checks on tests (jbowes@redhat.com)
  - Make test cases stylish as well... (alikins@redhat.com)
  - Fix "make stylish" (alikins@redhat.com)
  - 829803: Added an unset command to service level. (bkearney@redhat.com)
  - Remove reference to InstalledProductsTab.product_id_text (alikins@redhat.com)
  - Add a "find-missing-widgets" target to makefile (alikins@redhat.com)
  - 830949: add accessibility locators for registration widgets
    (alikins@redhat.com)
  - 824979: No message for subscription-manager release --list with no
    subscriptions. (wpoteat@redhat.com)
  - Added UnRegisterCommand and UnSubscribeCommand nosetests (wpoteat@redhat.com)
  - registergui: get firstboot working with new new code (jbowes@repl.ca)
  - registergui: Create a PreformRegisterScreen class (jbowes@repl.ca)
  - registergui: add a post method for setting data on the parent
    (jbowes@repl.ca)
  - registergui: create a 'pre' hook for screens (jbowes@repl.ca)
    (cduryee@redhat.com)
  - 819665: print msg if user is registered to RHN Classic on "identity" command
    (cduryee@redhat.com)
    (wpoteat@redhat.com)
  - Add F17 yum repo release target. (dgoodwin@redhat.com)
  - fix make stylish (jbowes@redhat.com)
  - 810352: Disable the expansion of the system name selection in the register
    dialog (bkearney@redhat.com)
  - 824530: add test case for setting proxy cli for release (alikins@redhat.com)
  - rhsm-icon codestyle cleanups (jbowes@repl.ca)
  - 829900: Use the term 'Subscription Management Service' to refer to SAM, CFSE,
    etc (root@bkearney.(none))
  - 829898: Make the no service level option a bit clearer as to its meaning
    (bkearney@redhat.com)
  - Improve the logging so that the user only sees the approved output by default
    (bkearney@redhat.com)
  - 830193: Modify the output of the yum plugin to be consistent with RHN
    (bkearney@redhat.com)
  - 824530: "release" command ignoring cli proxy options (alikins@redhat.com)
  - 828042,828068: Make ja_JP's Confirm Subscription unique for firstboot.
    (mstead@redhat.com)
  - Updating strings from zanata (mstead@redhat.com)
  - 825309: Remove the archiecture field from the table. (bkearney@redhat.com)
  - 823608: Rename the software pane to product (bkearney@redhat.com)
  - 810369: Prefer the term Subscription to Entitlement (bkearney@redhat.com)
  - Add a warning comment about firstboot module titles (alikins@redhat.com)
  - Clean up an option (bkearney@redhat.com)
  - 827208: Fix the xmltag bugs in the or po file (bkearney@redhat.com)
  - 827214: Clean up the XML tags in ta po file. (bkearney@redhat.com)
  - Slight change in the path for the ta po file (bkearney@redhat.com)
  - Slight change in the path for the ta po file (bkearney@redhat.com)
  - Slight change in the path for the ml po file (bkearney@redhat.com)
  - 828583: Add some spacing at the end of the file paths in the ko.po file
    (bkearney@redhat.com)
  - 828816: the %prog variable should not be translated (bkearney@redhat.com)
  - 828821: Fix the addition of a new variable in the hi po file
    (bkearney@redhat.com)
  - 828903: Fix translation of options in the bn po file. (bkearney@redhat.com)
  - Fix part of the mis translated options (bkearney@redhat.com)
  - 828965: Fix a translated option which should not have been translated
    (bkearney@redhat.com)
  - 828954: fix the --pool option in the translated string (bkearney@redhat.com)
  - 828958: --available should not be translated (bkearney@redhat.com)
  - Add --password as an option, not a string. This cause several strings to be
    retranslated (bkearney@redhat.com)
  - 828969: Fix the options in the translated string (bkearney@redhat.com)
  - 828985: Fix the url in the translated string (bkearney@redhat.com)
  - 828989: Fix the access url (bkearney@redhat.com)
  - 818205: Release --set command should only accept values from --list.
    (awood@redhat.com)
  - registergui: extract out a screen superclass (jbowes@repl.ca)
  - registergui: get button label from screen class (jbowes@repl.ca)
  - registergui: keep screens in a list (jbowes@repl.ca)
  - registergui: pull out environment screen into its own class (jbowes@repl.ca)
  - registergui: sensitivity refactor and method move (jbowes@repl.ca)
  - registergui: extract out credentials_entered method (jbowes@repl.ca)
  - registergui: move organization screen to its own class (jbowes@repl.ca)
  - registergui: move credentials screen to its own class (jbowes@repl.ca)
  - registergui: move choose server screen to its own class (jbowes@repl.ca)
  - registergui: switch from GladeWrapper to GladeWidget (jbowes@repl.ca)
  - registergui: Remove some unused globals (jbowes@repl.ca)


author: Alex Wood <awood@redhat.com> 1.0.5-1
changelog:
  - 804109: Give a specific message when providing invalid credentials.
    (awood@redhat.com)
  - 810360: update wording in gnome help file (cduryee@redhat.com)
  - use new bin location of files for $STYLEFILES (alikins@redhat.com)
  - add 'debuglint' for checking for leftover debugger imports
    (alikins@redhat.com)
  - Update make clean target (jbowes@redhat.com)
  - Move py executables to bin/ (jbowes@redhat.com)
  - Put no results text inside the scrolled window (jbowes@redhat.com)
  - 817901: Show text when there are no subscriptions to show.
    (dgoodwin@redhat.com)
  - Move initd file to etc-conf (jbowes@redhat.com)
  - Move plugins to their own src dir (jbowes@repl.ca)
  - More test cases for utils.parse_url (alikins@redhat.com)
  - 829482: Delete unstranslated strings in order force a retranslation
    (bkearney@redhat.com)
  - 811602: Fix the help output based on UXD feedback (bkearney@redhat.com)
  - 828867: Removed the extra %s string from the te translation
    (bkearney@redhat.com)
  - 829479: Remove unstranslated strings to force a re-translation
    (bkearney@redhat.com)
  - Delete the unused pt.po file (bkearney@redhat.com)
  - 829476: Remove untranslated strings. (bkearney@redhat.com)
  - 811553: Improve the text for auto subscribe during registration
    (bkearney@redhat.com)
  - 829471: Fix the translation for usage, and remove a translation for %org id
    to force a retranslation (bkearney@redhat.com)
  - Remove an outdated ta.po file (bkearney@redhat.com)
  - 828810: Remove extra %s in translation (bkearney@redhat.com)
  - Test to ensure that pool id is in the output for list --available
    (wpoteat@redhat.com)
  - Close registration window even if it failed. (dgoodwin@redhat.com)
  - 825923: Subscription-manager service-level set should say "Service level set
    to:" (wpoteat@redhat.com)
  - 811594: Default behavior for ReposCommand is --list (wpoteat@redhat.com)
  - 832400: service-level --unset should display proper message for unregistered
    client. (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.6-1
changelog:
  - rhsmcertd no longer exits when not registered. (mstead@redhat.com)
  - po file cleanups (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Free config resources in one place (mstead@redhat.com)
  - rhsmcertd: free GKeyFile when done (jbowes@redhat.com)
  - rhsmcertd: remove studlyCaps (jbowes@redhat.com)
  - "make stylish" should failed on "swapped" in glade files (alikins@redhat.com)
  - Remove 'swapped=on' from glade signal markup. (alikins@redhat.com)
  - add 'fix-glade-swapped' target to de-'swapped' glade files
    (alikins@redhat.com)
  - make stylish fixups (alikins@redhat.com)
  - Fix at-spi label for "offline_radio" widget (alikins@redhat.com)
  - shorter messages for cases where registered to RHN Classic
    (alikins@redhat.com)
  - Tighten up the gettext_lint regex (alikins@redhat.com)
  - Fix string that was breaking xgettext (alikins@redhat.com)
  - 810998: Add a button to test a proxy connection. (awood@redhat.com)
  - new messages, and remove checking of rhn serverURL (alikins@redhat.com)
  - remove unused es.po file (bkearney@redhat.com)
  - 829486: Removed untranslated words to force a re-translation
    (bkearney@redhat.com)
  - Remove unused bn.po file (bkearney@redhat.com)
  - 826856: Add check for service-level command that --org can only be used with
    --list option (bkearney@redhat.com)
  - 829483: Remove english to english translation to force a re-translations
    (bkearney@redhat.com)
  - Remove unused de po file (bkearney@redhat.com)
  - 819665: on 'version' display if we are registered to RHN Classic
    (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.0.8-1
changelog:
  - Add rpmlint config for tmpfiles.d (jbowes@redhat.com)
  - Use the i18n_optparse.OptionParser instead of optparse (alikins@redhat.com)
  - Use our i18n_optparse for the migration scripts (alikins@redhat.com)
  - Look for rhn-migrate* in bin for generating string catalogs
    (alikins@redhat.com)
  - 826874: add gladelint support for 'orientation' prop (alikins@redhat.com)
  - 826874: Remove unneeded property 'orientation' from glade
    (alikins@redhat.com)
  - 796782: add systemd tmpfiles configuration (jbowes@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.9-1
changelog:
  - On invalid credentials in register, return to the login screen
    (jbowes@redhat.com)
  - 821065: Make SLA/subscription asyncronous (jbowes@redhat.com)
  - 838942: make gui and cli use the same releaseVer check (jbowes@redhat.com)
  - fixes for translations from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Remove check for date parsing not failing when we expect it to
    (alikins@redhat.com)
  - Remove glade orientation properties. (awood@redhat.com)
  - Moving the filter counting mechanism into the Filters class.
    (awood@redhat.com)
  - Adjust expand and fill properties for the filter dialog. (awood@redhat.com)
  - add za_CN.utf to list of known busted locales (alikins@redhat.com)
  - 824424: Fixing AttributeError thrown when accessing online help in RHEL 5.
    (awood@redhat.com)
  - Add icon to update progress window. (awood@redhat.com)
  - 806986: Display SKU for available and consumed subscriptions
    (jbowes@redhat.com)
  - Increase the default size of the subscriptions viewport. (awood@redhat.com)
  - Add no overlapping to the default filters. (awood@redhat.com)
  - Tweaks to filter options dialog. (awood@redhat.com)
  - 801187: print Provides: for all subs, even with no provides
    (jbowes@redhat.com)
  - The filter dialog now updates results in real time. (awood@redhat.com)
  - 837106: Add a11y property for register button (jbowes@redhat.com)
  - 813336: Break filter options out into a separate dialog box.
    (awood@redhat.com)
  - 837036: Do not refer to options as commands (bkearney@redhat.com)
  - 829495: Delete a mis-translated string to force re-translation
    (bkearney@redhat.com)
  - 828966: Delete a mis-translated string to force trasnlations
    (bkearney@redhat.com)
  - 767133: Remove english to english translations from bn_IN to force a new
    translation (bkearney@redhat.com)
  - 829491: Remove english trnaslations for italian translations
    (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.10-1
changelog:
  - 828903: Pull in the latest translation for error messages with no options
    translated (bkearney@redhat.com)
  - 841011: Fix double words in the korean translations (bkearney@redhat.com)
  - 828958: Untranslate the word password when it it used as an option in the
    pt_BR translations (bkearney@redhat.com)
  - Fixes for translations from zanata (alikins@redhat.com)
  - Latest translations from zanata (alikins@redhat.com)
  - 839887: Make error message text more clear when network is disconnected
    (bkearney@redhat.com)
  - 839760: Fix the screen text for preferences based on UXD feedback
    (bkearney@redhat.com)
  - 818355: Rename the use of 'Contract Number' to contract in the gui
    (bkearney@redhat.com)
  - 840169: The service level was incorrectly being set after auto-subscription.
    (awood@redhat.com)
  - 840637: Fixed missing reference to parent window. (mstead@redhat.com)
  - Import and translate error strings for 'envirovment' cmd (alikins@redhat.com)
  - Removed --wait arg, delay 2 min in rhsmcertd (mstead@redhat.com)
  - Interval CLI args for rhsmcertd now specified as minutes. (mstead@redhat.com)
  - Update rhsmcertd.init.d to use new CLI args (mstead@redhat.com)
  - Bad url format test and a refactor of parse_url (alikins@redhat.com)
  - Print message when rhsmcertd is shutting down (mstead@redhat.com)
  - Fixed spelling and newline issues in rhsmcertd (mstead@redhat.com)
  - Handle a few new bad url formats (http//foo or http:sdf) (alikins@redhat.com)
  - Add wait and now args to rhsmcertd (mstead@redhat.com)
  - 839683: Add some strings from older optparse to our i18n version
    (alikins@redhat.com)
  - 838146: Subscription-manager cli does not allow unsubscribe when consumer not
    registered. (wpoteat@redhat.com)
  - rhsmcertd: add format specifier checking to r_log (jbowes@redhat.com)
  - Improve rhsmcertd logging (jbowes@redhat.com)
  - Fix bug where filter options were not persisted when the dialog was reopened.
    (awood@redhat.com)
  - 838242: proxy password from the cli wasn't getting used (alikins@redhat.com)
  - Adding options parsing support (work-in-progress). (mstead@redhat.com)
  - Added initial check delay to rhsmcertd (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.11-1
changelog:
  - Remove deprecated use of hasDate. (dgoodwin@redhat.com)
  - Fix missed use of renamed method. (dgoodwin@redhat.com)
  - make stylish clean (alikins@redhat.com)
  - use isoformat() here instead of strftime format string (alikins@redhat.com)
  - create warn and expire colors once, fix test failure (alikins@redhat.com)
  - make stylish cleanups (alikins@redhat.com)
  - Additional tests for date logic. (awood@redhat.com)
  - Update for some minor changes in python-rhsm. (dgoodwin@redhat.com)
  - add rhsm_display module (alikins@redhat.com)
  - Add module to set DISPLAY if RHSM_DISPLAY is set (alikins@redhat.com)
  - 837132: fix typo (alikins@redhat.com)
  - Add "ctrl-X" as accelerator for proxy config (alikins@redhat.com)
  - Make "Usage" consistent across rhel5/6 (alikins@redhat.com)
  - Add __str__ for our fake exception. (alikins@redhat.com)
  - class ClassName(): is not legal syntax on python2.4 (alikins@redhat.com)
  - Exception by default doesn't pass 'args' (alikins@redhat.com)
  - Linkify() doesn't work on rhel5, so disble the tests there
    (alikins@redhat.com)
  - hashlib doesn't exist on 2.4, md5 is deprecated on 2.6 (alikins@redhat.com)
  - use simplejson since 'json' isnt part of python 2.4 (alikins@redhat.com)
  - Use ISO8601 date format in allsubs tab (alikins@redhat.com)
  - Fix syntax for RHEL5. (dgoodwin@redhat.com)
  - Fix awkward stretching in Subscription column. (awood@redhat.com)
  - 804144: Fix awkward stretching of Product column. (awood@redhat.com)
  - 814731: Change the name of the menu item to Preferences from Settings, and
    change the accelerator keys (bkearney@redhat.com)
  - 837132: Clean up the error message in the yum plugin (bkearney@redhat.com)
  - 837038: Fix a grammatical error in the yum plugin (bkearney@redhat.com)
  - Fix certificate parsing error reporting. (dgoodwin@redhat.com)
  - Removing unnecessary assignments. (awood@redhat.com)
  - F15 builds can't be submitted in Fedora anymore. (dgoodwin@redhat.com)
  - updating options for rhn-migrate-classic-to-rhsm per bz840152; rewriting
    rhsmcertd for different options and usage examples (dlackey@redhat.com.com)
  - Account/contract number field rename. (dgoodwin@redhat.com)
  - Stylish fixes. (dgoodwin@redhat.com)
  - Fix a certv2 error. (dgoodwin@redhat.com)
  - 829825: Alter highlighting used in My Subscriptions tab (awood@redhat.com)
  - 772040: Have no overlap filter properly handles subscription dates.
    (mstead@redhat.com)
  - Update order support level/type to service. (dgoodwin@redhat.com)
  - Remove explicit use of certificate2 module. (dgoodwin@redhat.com)
  - Fix issues introduced in certv2 refactor. (dgoodwin@redhat.com)
  - Change entitlement_version fact to certificate_version. (dgoodwin@redhat.com)
  - Update to use new certificate2 module and classes. (dgoodwin@redhat.com)
  - Send entitlement version fact. (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.12-1
changelog:
  - remove test cases that use si_LK locale (alikins@redhat.com)
  - 842845: Show better error if serverurl port is non numeric
    (alikins@redhat.com)
  - 838113: 'unregister' was not cleaning up repos (alikins@redhat.com)
  - 842170: replace None service level/type with "" not None (alikins@redhat.com)
  - 844069: Allow register --force even if ID cert is totally invalid.
    (dgoodwin@redhat.com)
  - 826874: Remove use of deprecated Gtk.Notebook.set_page (alikins@redhat.com)
  - 818355: Terminology Change: Contract Number -> Contract (wpoteat@redhat.com)
  - 844368: productid plugin was failing on ProductCert.product
    (alikins@redhat.com)
  - Ignore warning about use of dbus.dbus_bindings (alikins@redhat.com)
  - 844178: Fix error message when importing a non-entitlement cert bundle.
    (dgoodwin@redhat.com)
  - remove deprecated use of DateRange.hasNow() (jbowes@redhat.com)
  - remove use of DateRange.hasDate() (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.13-1
changelog:
  - Fix "Project-Id-Version" for ta_IN.po (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Remove the 'repos' unittests until they are more mockable
    (alikins@redhat.com)
  - Created CLI tool for viewing certificate data. (mstead@redhat.com)
  - add versionlint to "make stylish" (alikins@redhat.com)
  - add versionlint, requires pyqver (alikins@redhat.com)
  - Remove unused mock return values (alikins@redhat.com)
  - Remove enable_grid_lines from contract details glade file
    (alikins@redhat.com)
  - more test cases for ConfigCommand (alikins@redhat.com)
  - 837897: Terminology Change: Service Level Agreement -> Service Level
    (wpoteat@redhat.com)
  - add test cases for ConfigCommand (alikins@redhat.com)
  - Better error when rm'ing config item from missing section
    (alikins@redhat.com)
  - unittest coverage for managercli.CLI (alikins@redhat.com)
  - Adding unit tests for migration script regexes. (awood@redhat.com)
  - 812903: Autosubscribe not working for newly added product cert after Register
    (wpoteat@redhat.com)
  - 845827: Update command that do not require a candlepin connection
    (alikins@redhat.com)
  - 845827: Split server version checkout out to avoid errors
    (alikins@redhat.com)
  - Hack to address double mapping for 180.pem and 17{6|8}.pem (awood@redhat.com)
  - fix pep8 (jesusr@redhat.com)
  - don't show access.redhat.com url after registering to Katello
    (jesusr@redhat.com)
  - remove the explicit url search from error handling. (jesusr@redhat.com)
  - Make gettext_lint also check for _(foo) usage (alikins@redhat.com)
  - Remove unneeded _(somevar) (alikins@redhat.com)
  - Fix NameError in migration script. (awood@redhat.com)
  - bogus newline in glade file (alikins@redhat.com)
  - 826874: Reenable grid lines on newer gtk (alikins@redhat.com)
  - 826874: Remove enable_grid_lines from treeviews in glade (alikins@redhat.com)
  - 826874: Removing more properties that don't exist on gtk2.10
    (alikins@redhat.com)
  - 826874: Change gtk target version to gtk 2.10 for all glade files
    (alikins@redhat.com)
  - 826874: Clean of gtk properties not in gtk2.10 in our glade files
    (alikins@redhat.com)
  - Add support for migrating to Katello. (jesusr@redhat.com)
  - 843191: 'version' command showed wrong info with no network
    (alikins@redhat.com)
  - 843915: Multiple-specifications of --enable and --disable repos
    (wpoteat@redhat.com)
  - fix Package-Id-Version in ta_IN.po (alikins@redhat.com)
  - Fix es_ES.po (missing newline) (alikins@redhat.com)
  - 842898: fix missing --password in it.po (alikins@redhat.com)
  - 843113: latest strings from zanata (alikins@redhat.com)
  - 837280: Show users that we strip out any scheme given with a proxy.
    (awood@redhat.com)
  - new strings (alikins@redhat.com)
  - Refactor of SubDetailsWidget and GladeWidget (alikins@redhat.com)
  - 826729: Move Cert Status up to top of Product's Subscription Details
    (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.14-1
changelog:
  - 849171: Remove an extraneous print statement (bkearney@redhat.com)
  - 849105: Fixed a typo in the error message (bkearney@redhat.com)
  - 772161: Notifiy virt who, if running, when the identity changes
    (bkearney@redhat.com)
  - Reduce reads/parses of certificates (jbowes@redhat.com)
  - remove unused function 'getInstalledProductHashMap' (jbowes@redhat.com)
  - 843191: handle network errors better for 'version' command
    (alikins@redhat.com)
  - 826739, 827553: Combine Service Level and Service Type and move up in display
    order. (awood@redhat.com)
  - 847316: Remove the menu path for Subscription Manager from the manual
    registration screen. (bkearney@redhat.com)
  - 848409,848195,848190,848184: Do not print the exception when attempting to do
    the server version check (bkearney@redhat.com)
  - 847795: String and terminology clean up (bkearney@redhat.com)
  - 847380: Update the verbiage to prefer the term Subscription Management
    (bkearney@redhat.com)
  - 846834: Updated verbiage to focus on subsriptions and not on entitlements
    (bkearney@redhat.com)
  - 846105: Verbiage changes to empasize subscriptions over entitlements
    (bkearney@redhat.com)
  - 836933: Handle empty spaces for servce levels (bkearney@redhat.com)
  - 836932,835050: Fix the service level lifecycle (bkearney@redhat.com)
  - 836932: Reduce extra loggging when setting the service level
    (bkearney@redhat.com)
  - About dialog was not working due to key errors from python
    (bkearney@redhat.com)
  - 833319: Updated the help text for registration and service levels
    (bkearney@redhat.com)
  - 847060: Add missing requires on pygobject2 (bkearney@redhat.com)
  - 828954: Fix ta_IN.po file error with options (bkearney@redhat.com)
  - 842898: re-implement string fix for it.po (bkearney@redhat.com)
  - 828958: Fix the accidental translation of an option (bkearney@redhat.com)
  - fix up make stylish (jbowes@redhat.com)
  - No longer require root to run rct (mstead@redhat.com)
  - Remove manually_subscribe.py, it's class moved to rhsm_login.py
    (alikins@redhat.com)
  - Bumping the required python-rhsm version (mstead@redhat.com)
  - Renamed rt command to rct. (mstead@redhat.com)
  - Fix test case failure on 5.9 (Exception.message) (alikins@redhat.com)
  - Refactor ManuallySubscribeScreen to use new Screen api (alikins@redhat.com)
  - Check passed args as None to allow empty args (mstead@redhat.com)
  - Exception.message is deprecated, just let _str_ do it (alikins@redhat.com)
  - use MockStdout intead of nosetests sys.stdout.getvalue() (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.15-1
changelog:
  - Replace 16x16 icon with a new version that has no background
    (bkearney@redhat.com)
  - 852107: Update verbiage in migration script. (awood@redhat.com)
  - 847060: Push dependency higher up in the chain (bkearney@redhat.com)
  - 848534: Change the about dialog icon to be a PNG to ensure accurate
    representation. (bkearney@redhat.com)
  - 841396: Select first item in My Subscriptions table by default.
    (awood@redhat.com)
  - 849483: Prompt user for org name if necessary. (awood@redhat.com)
  - 849644: Calls made with --no-auto were not actually registering the system.
    (awood@redhat.com)
  - 849494: Fix variable name collision. (awood@redhat.com)
  - 846834: Use Subscription instead of entitlement certificate
    (bkearney@redhat.com)
  - 847859: Expiration highlighting was being set incorrectly. (awood@redhat.com)
  - 847750: Handle bad proxy values in migration script. (awood@redhat.com)
  - 841961: Ignore case when specifying the service level in migration
    (bkearney@redhat.com)
  - 842020: Remove an extraneous option group for rhsmcertd (bkearney@redhat.com)
  - Refactored some of the shared CLI code in 'rct' (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.16-1
changelog:
  - 853187: Verbiage change in install-num-migrate-to-rhsm. (awood@redhat.com)
  - 852894: Abort migration if multiple JBEAP channels are detected.
    (awood@redhat.com)
  - 850715: Fix malloc for Config (jbowes@redhat.com)
  - 852001: output the orgs key as part of the identity command.
    (bkearney@redhat.com)
  - fix "make gettext", wrong var name for the find root (alikins@redhat.com)
  - 850715: Fixes based on coverity scans (bkearney@redhat.com)
  - 846316: Use the full name of Subscrition Manager during first boot
    (bkearney@redhat.com)
  - 851346: Remove special case channel certs before subscribing.
    (awood@redhat.com)
  - 847354: When printing, translate None type into an empty string
    (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.17-1
changelog:
  - Fix gettext_lint issue with concat string in rhn-migrate (alikins@redhat.com)
  - 851124: Fix GUI unsubscribe. (dgoodwin@redhat.com)
  - fix po version for ta_IN.po (alikins@redhat.com)
  - latest strings (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.1.1-1
changelog:
  - updates to stat-cert for cert v3 (jbowes@redhat.com)
  - rct: Check for and handle files that aren't x509 certs (jbowes@redhat.com)
  - rct: remove content set count from cat-cert. use stat-cert instead.
    (jbowes@redhat.com)
  - implement aliases for cli commands (jbowes@redhat.com)
  - rct: add a stat-cert command (jbowes@redhat.com)
  - Switch certv2 related code to certv3 (jbowes@redhat.com)
  - 852107: Make banner headings equal in length (bkearney@redhat.com)
  - 842768: Remove --serverurl option from redeem command. (awood@redhat.com)
  - Set correct parent for these error dialogs. (awood@redhat.com)
  - set_parent_window() on RegisterScreen has been removed. (awood@redhat.com)
  - make regex better (jesusr@redhat.com)
  - 855762: Set correct parent for error dialog boxes raised by Autobind wizard.
    (awood@redhat.com)
  - 856349: rct cat-cert now printing content for all content types
    (mstead@redhat.com)
  - 842768: Limit --serverurl and --baseurl to specific commands.
    (awood@redhat.com)
  - 854467: Use of activation keys requires an org. (awood@redhat.com)
    (dgoodwin@rm-rf.ca)
  - 854879: Fixes for Anaconda desktop/workstation product cert installation.
    (dgoodwin@redhat.com)
  - 840415: Handle copyfile errors gracefully. (awood@redhat.com)
  - Adding new line b/w products when printed by rct (mstead@redhat.com)
  - 850920: --servicelevel and --no-auto are mutually exclusive.
    (awood@redhat.com)
  - Explicitly set GMT when doing entitlement date math (cduryee@redhat.com)
  - adding --unset option to service-level and release cmds
    (dlackey@redhat.com.com)
  - updated images for bz840599; changed rhsmcertd intervals, bz853571
    (dlackey@redhat.com.com)
  - 853233: Do not allow 68.pem and 71.pem to coexist after migration.
    (awood@redhat.com)
  - 852706: Fix server side certs not being deleted client side
    (alikins@redhat.com)
  - editing manpages and gnome help per UXD feedback; updating manpages for new
    command arguments; bz852323, bz850881, bz854357 (dlackey@redhat.com.com)
    rf.ca)
  - 845349: Support setting unknown values in the yum repo file
    (jbowes@redhat.com)
  - Add a count of content sets to entitlement certificates (bkearney@redhat.com)
  - 830988: Stacking is showing an odd parent in the My Subscriptions Tab
    (wpoteat@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.2-1
changelog:
  - 829825: Adding tests. (awood@redhat.com)
  - 853876: No need to check for GoneException when getting status
    (mstead@redhat.com)
  - 829825: Disable unsubscribe button when nothing is selected.
    (awood@redhat.com)
  - Remove unused import. (awood@redhat.com)
  - 859197: Fix product cert cleanup. (dgoodwin@redhat.com)
  - 781280: Add I18N comments for some string length issues.
    (dgoodwin@redhat.com)
  - 830193: Ensure logging is not diabled by RHN Classic Registration
    (bkearney@redhat.com)
  - remove unused RepoFile import (alikins@redhat.com)
  - 855081: Translate Arch as Arq. (bkearney@redhat.com)
  - Check identity cert permissions when running CLI commands (mstead@redhat.com)
  - mock all of RepoFile for the cli tests (alikins@redhat.com)
  - 845349: Don't clutter the repo file with empty keys (jbowes@redhat.com)
  - 845349: remove 'return' left in for debugging (jbowes@redhat.com)
  - Stylish errors for mr.po (bkearney@redhat.com)
  - 855085: Fixed the translation for [OPTIONS] (bkearney@redhat.com)
  - 855087: Fix a mis translated [OPTIONS] in the mr.po file.
    (bkearney@redhat.com)
  - Strings with the same value are not always the same instance.
    (awood@redhat.com)
  - updates from sefler for bz850881 (dlackey@redhat.com.com)
  - mock out utils.is_valid_server_info for tests (alikins@redhat.com)
  - 846207: Print error message for each invalid repo. (awood@redhat.com)
  - change test async to check for a number of thread callbacks
    (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.3-1
changelog:
  - 863961: Expect id cert Version to be populated in tests (alikins@redhat.com)
  - 863565: Give focus to the login field during subscription registration.
    (awood@redhat.com)
  - 838123: remove python2.5ism (alikins@redhat.com)
  - 844072: remove use and dep of PyXML (alikins@redhat.com)
  - 838123: Omit mac addresses from facts for lot and sit ipaddress types
    (bkearney@redhat.com)
  - 856236: Do not allow environmenets to be specified during registration if an
    activation key is used (bkearney@redhat.com)
  - 858289: Rename the desktop file to subscription-manager-gui.deskstop
    (bkearney@redhat.com)
  - 808217: Add a text banner to the output of release --list
    (bkearney@redhat.com)
  - 863428: Add environment support to the migration script. (awood@redhat.com)
  - 862099: Fix several dialog closing issues. (dgoodwin@redhat.com)
  - 854374: Removed extra spacing around help, and improved he rct text output a
    bit. (bkearney@redhat.com)
  - 853572: Fix a typoin the help messages (bkearney@redhat.com)
  - 859090: Remove the word technology from the branding string
    (bkearney@redhat.com)
  - 862308: Subscription Manager version reports registered to value when system
    not registered (wpoteat@redhat.com)
  - 861443: Re-raise GoneException in rhsmcertd-worker (mstead@redhat.com)
  - 861151: make stylish cleanup (alikins@redhat.com)
  - 852911: Add padding around firstboot tooltips icon. (dgoodwin@redhat.com)
  - 854312: Do not install a certificate that has expired. (mstead@redhat.com)
  - Make rhsm-icon work on gnome 3 (jbowes@redhat.com)
  - 853885: Fix icon notification popup only displaying once.
    (dgoodwin@redhat.com)
  - 853006: Wrap label in the manually subscribe firstboot screen.
    (dgoodwin@redhat.com)
  - 861151: release should not list for incompatible variants
    (alikins@redhat.com)
  - 861170: re.escape() values provided to the apply_hightlight() function.
    (awood@redhat.com)
  - 852630: Suscription manager unsubscribe --all shows error on expired
    subscriptions (wpoteat@redhat.com)
  - Freeze obsoletes version for -gnome to -gui rename (jbowes@redhat.com)
  - 860084: remove unused _x from ja_JP translation (alikins@redhat.com)
  - 860088: remove trailing dot from url in de_DE.po (alikins@redhat.com)
  - Don't reparse entitlement certs on every search filter change
    (jbowes@redhat.com)
  - 855257: fix issues with default contract quantity being wrong
    (alikins@redhat.com)
  - 860088: some translations were splitting urls into two lines
    (alikins@redhat.com)
  - Add to nosetest to ensure that Cert V3 check for validity passes.
    (wpoteat@redhat.com)
  - 860344: Subscription-manager import --certificate fails to recognize a new
    version 3.0 certificate (wpoteat@redhat.com)
  - New icon set. (awood@redhat.com)
  - 853035: Fix firstboot "back" issues. (dgoodwin@redhat.com)
  - Check the full version info of the yum api in productid (alikins@redhat.com)
  - 847319: Left align manually subscribe firstboot message (jbowes@redhat.com)
  - 860030: make server_version_check use a non authenticated call
    (alikins@redhat.com)
  - 847387: Display tooltip for info icon in RHEL 5.9. (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.4-1
changelog:
  - 864177: Add the count for the first word in calculating where to break the
    line (bkearney@redhat.com)
  - 785666: For bonded interfaces, find mac address of members
    (alikins@redhat.com)
  - 839779: Add more context around how to cover the machine with a given SLA
    (bkearney@redhat.com)
  - 864177: Attempt to detect the size of the terminal to influence how product
    names are split up. (bkearney@redhat.com)
  - 864569: Make the date picker widget 10 characters wide (bkearney@redhat.com)
  - 855050: Set the icon-name property on all dialogs and windows
    (bkearney@redhat.com)
  - 848095: Reduce the indentation on the help text to improve the layout on
    smaller terminals. (bkearney@redhat.com)
    (wpoteat@redhat.com)
  - 862848: Change the name of the button to Cancel instead of Close
    (bkearney@redhat.com)
  - 867766: Unsubscribe from multiple entitlement certificates using serial
    numbers (wpoteat@redhat.com)
  - Clear any cached environments when registering with activation keys.
    (awood@redhat.com)
    (bryan.kearney@gmail.com)
  - Clear any cached activation key values. (awood@redhat.com)
  - 869729: --autosubscribe and --activationkey should be mutually exclusive
    (wpoteat@redhat.com)
  - 857191: Stacking shows a useless parent in All Available Subscriptions tab
    (wpoteat@redhat.com)
  - 863133: Subscription-Manager version command should have server type listed
    first (wpoteat@redhat.com)
  - updates for failed-qa issues in bz857195 (dlackey@redhat.com.com)
  - Increment the hardcoded page number due to added activation key screen.
    (awood@redhat.com)
  - 864555: add "menu" window hint to filters.glade (alikins@redhat.com)
  - 850870: Update on-line documentation link. (awood@redhat.com)
  - 817671: Add support for Activation Keys in the GUI. (awood@redhat.com)
  - 840415: Print an error message if the destination directory does not exist.
    (awood@redhat.com)
  - Fail fast if the user enters a bad org. (awood@redhat.com)
  - Marking a string for translation. (awood@redhat.com)
  - 866579: Fail fast if the user enters a bad environment. (awood@redhat.com)
  - Enable logging in firstboot (alikins@redhat.com)
  - 865954: Return to creds screen if consumer name is invalid
    (alikins@redhat.com)
  - 852107: Make the banners the same width (bkearney@redhat.com)
  - 748912: Make the error message a bit more friendly when there is no cert file
    to import (bkearney@redhat.com)
  - 865590: Fix broken offline unsubscribe. (dgoodwin@redhat.com)
  - 852328: Report Classic and Subscription Management consistently in the
    version and identity commands (bkearney@redhat.com)
  - 864159: Add a new message in the gui when no subscriptions are available on a
    specific date. (bkearney@redhat.com)
  - 850531: Change the label 'Certificate Status' to 'Status'
    (bkearney@redhat.com)
  - 850533: Change the label from 'Next Update' to 'Next System Check-in'
    (bkearney@redhat.com)
  - 855365: Display a singular sentence if only one subscription is removed
    (bkearney@redhat.com)
  - 862885: Change the text for unlimited to Unlimited (bkearney@redhat.com)
  - 864184: Make the machine type uppercase to be consistent with other output
    (bkearney@redhat.com)
  - 865545: Added report log when cert has no products. (mstead@redhat.com)
  - update releases.conf (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.6-1
changelog:
  - 872847: Change unsubscribe feedback when consumer has been deleted
    (wpoteat@redhat.com)
  - 869934: make "release" related cdn usage use proper urlparse
    (alikins@redhat.com)
  - 852328: Improve the server version checking (bkearney@redhat.com)
  - 871146: Fix proxy errors on first yum operation after registration.
    (dgoodwin@redhat.com)
  - 850430: Pressing Enter in the password entry now activates registration.
    (awood@redhat.com)
  - Attach subscriptions after registration with an activation key.
    (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.7-1
changelog:
  - 873631: Migrate correctly when there is only one org. (awood@redhat.com)
  - 874147: Handle changes in python-ethool api (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.8-1
changelog:
  - 862909: install rct man page (alikins@redhat.com)
  - Fix to LocalTz DST determination (cduryee@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.9-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 864207: mark these strings for translation (alikins@redhat.com)
  - 854388: use ngettext to specify contract/contracts (alikins@redhat.com)
  - 876753: change rhsmcertd --heal-interval to --auto-attach-interval
    (alikins@redhat.com)
  - We require python-rhsm-1.1.5 now (ram) (alikins@redhat.com)
  - 876340: Move the last of the commands and help string to --auto-attach
    (bkearney@redhat.com)
  - 876294: Use attach instead of subscirbe in the rhn migration tooling
    (bkearney@redhat.com)
  - 856735: Move the Next Update notification to the About dialog.
    (awood@redhat.com)
  - Removed stacking from RAM (mstead@redhat.com)
  - Improved comments/logging/tests for RAM (mstead@redhat.com)
  - Updated the entitlement_version of client (mstead@redhat.com)
  - Added RAM limit to rct cat-cert output (mstead@redhat.com)
  - Removing dead code (mstead@redhat.com)
  - Check RAM when determining status (mstead@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.10-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 874623: Tell users running the version command if they are not registered.
    (awood@redhat.com)
  - 873418: Add at-spi locators to the activation key window. (awood@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.1-1
changelog:
  - Add two manifest commands to rct. (bkearney@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 895447: The count of subscriptions removed is zero for certs that have been
    imported. (wpoteat@redhat.com)
  - 895462: Message for subscription-manager repos --list for disabled repo needs
    to be modified (wpoteat@redhat.com)
  - 885964: After registration, recreate the UEP connection using the identity
    cert. (awood@redhat.com)
  - 869306: Add org ID to facts dialog. (awood@redhat.com)
  - 888853: Put output into proper columns regardless of the output language.
    (awood@redhat.com)
  - Update python-rhsm requires version (wpoteat@redhat.com)
  - 888052: Add all binaries to the makefile path for gettext string extraction
    (bkearney@redhat.com)
  - 851303: additional term updates (dlackey@redhat.com.com)
  - 844411: Add an --insecure option to subscription-manager. (awood@redhat.com)
  - 891621: Users can incorrectly enter activation keys when registering to
    hosted. (awood@redhat.com)
  - 889573: Only persist serverurl and baseurl when registering.
    (awood@redhat.com)
  - 889204: Encode the unicode string to utf-8 to avoid syslog errors
    (bkearney@redhat.com)
  - 889621: String substitution inside gettext causes message translations to
    never be found (bkearney@redhat.com)
  - 890296: Unicode characters with a - are causing printing issues for rct
    printing (bkearney@redhat.com)
  - 878269 (dlackey@redhat.com.com)
  - 784056: Raise a running instance of the GUI to the forefront.
    (awood@redhat.com)
  - 888968: Improve the gui message formatting for SLA selection
    (bkearney@redhat.com)
  - 873601: Return a non zero code if subscription manager is run with an
    incorrect command name (bkearney@redhat.com)
  - 839779: Improve messaging when autosubscribe does not work because of SLA
    (bkearney@redhat.com)
  - 867603: Add quantity to confirm subscriptions dialog. (awood@redhat.com)
  - 888790: Rebuild UEP connection after registering with activation keys.
    (awood@redhat.com)
  - 886280; 878257; 878264; 878269 (dlackey@redhat.com.com)
  - 814378: disable linkify if we are running as firstboot (alikins@redhat.com)
  - 886887: Take the user back to the activation key page if he enters an invalid
    key. (awood@redhat.com)
  - 863572: Make forward/back insensitive when registering (alikins@redhat.com)
  - 825950: updating SAM registration procedure; other term edits and updated
    screenshot (dlackey@redhat.com.com)
  - 885964: Do not make a getOwner call when not necessary. (awood@redhat.com)
  - Ask for the org in environments and service-level modules. (awood@redhat.com)
  - 886992: Fix for bad fix for 886604, wrong path for yum repos
    (alikins@redhat.com)
  - matt reid's edits to rct; bz886280; bz878257; bz878269; bz878264
    (dlackey@redhat.com.com)
  - 841496: Do not use hyphens in bash completion files as these are invalid for
    identifiers in the sh shell. (bkearney@redhat.com)
  - Improve logging for rhsmcertd scenarios (wpoteat@redhat.com)
  - 878609: Do not use public url redirectors, instead use a redhat.com address
    (bkearney@redhat.com)
  - 886604: Fix incorrect path in repos.d check (alikins@redhat.com)
  - 727092: Read in the org key during registration if none is given.
    (awood@redhat.com)
  - 845622: If an identity certificate has expired, there should be a friendly
    error message (wpoteat@redhat.com)
  - 883123: Have the migration code use the name and the label for org and
    environment lookup. (bkearney@redhat.com)
  - 886110: help blurb for --auto-attach formatted poorly (alikins@redhat.com)
  - 880070: require latest python-rhsm to handle unicode issues
    (alikins@redhat.com)
  - 798788: Results from subscription-manager facts --update after a server-side
    consumer was deleted. (wpoteat@redhat.com)
  - 878634: Improve the consistency of capitalization of URL, ID, HTTP, and CPU
    (bkearney@redhat.com)
  - 878657: Make consistent use of the term unregister instead of un-register
    (bkearney@redhat.com)
  - 883735: load branding module slightly differently (jesusr@redhat.com)
  - Stylish fix. (dgoodwin@redhat.com)
  - 878664: Add bash completion script for rct (bkearney@redhat.com)
  - 880764: Command line options which can be specified more than once should use
    the same help text (bkearney@redhat.com)
  - 867070: Adjust default sizing of subscriptions pane in Installed Products
    tab. (awood@redhat.com)
  - 873791: Expected exit codes from unsubscribe with multiple serial numbers
    (wpoteat@redhat.com)
  - 800323: Set default output stream encoding to UTF-8. (awood@redhat.com)
  - 862852: Fix double separator in redeem dialog. (dgoodwin@redhat.com)
  - Display "None" if environments value is empty on consumer. (awood@redhat.com)
  - 872351: Display environment in GUI facts dialog and CLI identity command.
    (awood@redhat.com)
  - 881091: Remove punctuation in the help message (bkearney@redhat.com)
  - Revert "878986: refactor to use curses/textwrap for format"
    (alikins@redhat.com)
  - 877579: Fix -1 quantity to consume for unlimited pools. (dgoodwin@redhat.com)
  - 881117: Add at-spi locator to redemption dialog. (awood@redhat.com)
  - 881952: Warn and continue if encountering a failure during system deletion.
    (awood@redhat.com)
  - 878820: Fix console error when yum.repos.d does not exist.
    (dgoodwin@redhat.com)
  - 839772: Display "Not Set" instead of "" in SLA and release preferences.
    (awood@redhat.com)
  - rev zanata branch version to 1.8.X (alikins@redhat.com)
  - 878986: refactor to use curses/textwrap for format (alikins@redhat.com)
  - 878986: Default to no line breaking if no stty is available
    (bkearney@redhat.com)
  - 878588: Move the requires on usermode from subscription-manager-gui to
    subscription-manager (bkearney@redhat.com)
  - 878648: Make the help usage formatting consistent for the rct and
    subscription manager commands (bkearney@redhat.com)
  - 869046: Remove stray 'print' (jbowes@redhat.com)
  - 864207: Autosubscribe should not run when all products are already
    subscribed. (wpoteat@redhat.com)
  - 854702: Place the asterisk indicating editability into the quantity cell.
    (awood@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 1.8.2-1
changelog:
  - Update tito for RHEL 7.0 (bkearney@redhat.com)
  - Small cleanups for test_migrate (alikins@redhat.com)
  - Write repofile once instead of during every iteration. (awood@redhat.com)
  - Add unit test for migration script. (awood@redhat.com)
  - Adding more tests for the migration script. (awood@redhat.com)
  - Bump the required version of python-rhsm to pick up the new config file
    defaults (bkearney@redhat.com)
  - Modify migration script tests to run on Fedora. (awood@redhat.com)
  - Give users the ability to disable package reporting (bkearney@redhat.com)
  - 891377: Note in deprecated string that auto-attach-interval is a command
    option (bkearney@redhat.com)
  - 901612: Yum plugin warnings should go to stderr, not stdout
    (bkearney@redhat.com)
  - 903298: Replace use of 'Register to' with 'Register with'
    (bkearney@redhat.com)
  - Rewrite of the migration script featuring unit tests. (awood@redhat.com)
  - Remove F16 and old cvs releasers, add F18. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.3-1
changelog:
  - string and string catalog update from zanata (alikins@redhat.com)
  - 908954: Ensure that 'Not Set' is shown in the preferences dialog if it is not
    set (bkearney@redhat.com)
  - 906214: rct --help should return 0. (bkearney@redhat.com)
  - 909294: Add accessibility names to the preferences combo boxes
    (bkearney@redhat.com)
  - 878097: Clarify that the --org option is ORG_KEY and not ORG_NAME
    (bkearney@redhat.com)
  - Just use 0 as error for reading int keys (alikins@redhat.com)
  - Old version of config entries considered to make changes backwards compatible
    (wpoteat@redhat.com)
  - 882459: aftermath of bug 876753 - Change --heal-interval to --attach-interval
    in rhsmcertd (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.4-1
changelog:
  - Pull latest strings from zanata. (dgoodwin@redhat.com)
  - Use PyXML for iso8601 date on RHEL5 and dateutil after (alikins@redhat.com)
  - Major switchover to server for compliance checking logic. (dgoodwin@redhat.com)
  - Introduce dependency injection framework. (dgoodwin@redhat.com)
  - 916369: Do not persist config changes until the action completes
    (bkearney@redhat.com)
  - Fix a bug with changing installed products during healing.
    (dgoodwin@redhat.com)
  - 912776: fix migration test scripts to expect get_int usage
    (alikins@redhat.com)
  - 912776: cast port numbers from cli to int immediately (alikins@redhat.com)
  - 912776: use config.get_int for server port as well (alikins@redhat.com)
  - 905649: subscription-manager does not work with dbus-python-1.1.1-1
    (wpoteat@redhat.com)
  - use ngettext for plural messages in certlib/managercli (alikins@redhat.com)
  - 912776: use cfg.get_int for proxy port (alikins@redhat.com)
  - 878097: update service-level org key help text (alikins@redhat.com)
  - Handle manifests with no subscriptions in the archive (alikins@redhat.com)
  - 878664: Add filename support to the bash completion for the rct tool.
    (bkearney@redhat.com)
  - 877590: Changes to the branding messages when the user attempts to register
    twice (bkearney@redhat.com)
  - New plugin framework. (alikins@redhat.com / awood@redhat.com)
  - 886115: Remove line continuations within strings. (bkearney@redhat.com)
  - 913302: Support Level and Support Type should be shown as Service Level and
    Service Type (bkearney@redhat.com)
  - Add unknown product status state. (dgoodwin@redhat.com)
  - 913703: Prefer the use of SKU over Product ID (bkearney@redhat.com)
  - 913720: Use the term order number instead of subscription id
    (bkearney@redhat.com)
  - 878634: Use correct capitalization for ID in the rct tool
    (bkearney@redhat.com)
  - 878097: Help text for service-level command should be consistent with other
    help texts (bkearney@redhat.com)
  - 906554: Add ui_repoid_vars line to yum based on the variables which are in
    the baseurl (bkearney@redhat.com)
  - 912707: Remove a use of the deprecated hasNow() function.
    (bkearney@redhat.com)
  - 913187: Allow older manifests to print out correctly. (bkearney@redhat.com)
  - 912776: Cast proxy port to an integer. (awood@redhat.com)
  - 882459: Deprecated message in help for cert-interval (wpoteat@redhat.com)
  - 895447: Changed messages to distinguish between local and server-side
    removal. (wpoteat@redhat.com)
  - 908671: Display the pool ID when available. (awood@redhat.com)
  - 911386: Displaying combined Service Level and Type should handle empty values
    for both items (jmolet@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.5-1
changelog:
  - 927875: Fix GUI bug if there is an expired certificate. (dgoodwin@redhat.com)
  - 922806: Use dependency injection with firstboot module. (awood@redhat.com)
  - 919512: Remove proxy options from config command. (awood@redhat.com)
  - 921126: latest string updates from zanata (alikins@redhat.com)
  - 919255: Remove extraneous print statement. (awood@redhat.com)
  - 919584: Fix unicode error in RHEL 5. (awood@redhat.com)
  - Implement entitlement/product status caching. (dgoodwin@redhat.com)
  - 921245: Update installed products tab after registration. (awood@redhat.com)
  - 893993: some refactoring, show_autosubscribe_output returns 0 or 1
    (ckozak@redhat.com)
  - 859197: add special case for products that provide 'rhel-' tags
    (alikins@redhat.com)
  - productid db now supports multiple repos per product id (alikins@redhat.com)
  - let ProductData support multiple repos per product (alikins@redhat.com)
  - 893993: attach --auto now prints the proper text when no products are
    installed (ckozak@redhat.com)
  - 918746: Switched or ordering for disabling repos.  Will now print all
    repository validation errors (ckozak@redhat.com)
  - 914717: rct cat-manifest fails to report Contract from the embedded
    entitlement cert (wpoteat@redhat.com)
  - More convenient dep injection. (dgoodwin@redhat.com)
  - Try to handle the really old dbus-python on rhel5 (alikins@redhat.com)
  - add missing conf file for all_slots plugin (alikins@redhat.com)
  - 919700: Reload consumer identity after force subscribing.
    (dgoodwin@redhat.com)
  - utils.parseDate is now isodate.parse_date (alikins@redhat.com)
  - Remove  ent/prod dir arguments to CLI commands. (dgoodwin@redhat.com)
  - PluginsCommand does not need network cli options (alikins@redhat.com)
  - Fix pluginDir config value in default config file (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.6-1
changelog:
  - Latest translations. (dgoodwin@redhat.com)
  - 903298: Fix a few more examples of Register to (bkearney@redhat.com)
  - 878634: Fix the final three uses of id instead of ID (bkearney@redhat.com)
  - Fix string formatting done outside of gettext _() (alikins@redhat.com)
  - 950892: entity typo (dlackey@redhat.com.com)
  - when no parameters are given, dump manifest uses current directory
    (ckozak@redhat.com)
  - fixed zipfile creation in python 2.4 (ckozak@redhat.com)
  - 919561: moving cat manifest into memory (ckozak@redhat.com)
  - 914717: Fields taken from pool data. (wpoteat@redhat.com)
  - 924919: stop log to stderr in isodata module (alikins@redhat.com)
  - 919561: refactored some code into additional methods, fixed naming
    conventions, and added test cases (ckozak@redhat.com)
  - Dont log exception if a repo doesn't have productid (alikins@redhat.com)
  - 919561: checking manifest zip for files outside of scope (ckozak@redhat.com)
  - 919561: moved new extractall into a class that extends ZipFile
    (ckozak@redhat.com)
  - 919561: fixed variable naming in new extractall method (ckozak@redhat.com)
  - 919561: replaced reference to zipfile.extractall (aded in python2.6)
    (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.7-1
changelog:
  - 959563, 956298: for rhel 5.10 (dlackey@redhat.com.com)
  - 905922: use get_int instead of get in order to consume the value as a
    booolean (bkearney@redhat.com)
  - enhancements to tests (alikins@redhat.com)
  - Update expected rct output for content arch info (alikins@redhat.com)
  - let 'rct cat-cert' show arches info on content sets (alikins@redhat.com)
  - Use the unknown icon when it is appropriate. (bkearney@redhat.com)
  - Do not allow manual entry of numbers that aren't multiples of spinner
    increment. (awood@redhat.com)
  - 959570: Subscription names were being mangled in the installed products page.
    (bkearney@redhat.com)
  - 959124: Consistant system status between CLI and GUI (ckozak@redhat.com)
  - re-added compatibility for old candlepin servers. (ckozak@redhat.com)
  - 885130: Switch from using xmlrpclib to rhnlib's rpclib. (awood@redhat.com)
  - 958827: fixed duplicate reasons from bundled subs, removed messages for valid
    products, refactoreed client-side reasons code (ckozak@redhat.com)
  - 958775: correct info for future subscriptions (ckozak@redhat.com)
  - Removing messages from compliant installed products caused by bad overconsumption (ckozak@redhat.com)
  - Use server provided value to determine quantity increment. (awood@redhat.com)
  - 957218: Bump system.certificate_version for cores support (mstead@redhat.com)
  - 956285, 913635, 913628. still need to finalize output for 913628.  (dlackey@redhat.com.com)
  - 955142: Display core limit in rct cat-cert tool (mstead@redhat.com)
  - Warn when we detect we need a newer version of 'mock' (alikins@redhat.com)
  - 924919: remove loging about isodate implementation (alikins@redhat.com)
  - 957195: Pull in the latest or fix from zanata. (bkearney@redhat.com)
  - Add the unkown icon (bkearney@redhat.com)
  - Add reasons to list --installed and list --consumed.  Added list --status
    (ckozak@redhat.com)
  - 908037: remove all ¶ characters from the ml.po file. Zanata was also updated
    (bkearney@redhat.com)
  - 906552: Fixed mis translation of subscription-manager in pa.po and zh_CN.po.
    Zanata was also updated (bkearney@redhat.com)
  - 908059: Fix a pt_BR translation which did not include the http portion of a
    url. Zanata is fixed as well (bkearney@redhat.com)
  - Add F19, 5.10, 6.4 releasers. (dgoodwin@redhat.com)
  - use "assert_string_equal" for multiline str asserts (alikins@redhat.com)
  - add "assert_string_equals" that diffs multiline strings (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.8-1
changelog:
  - Fix echo'ing of exit status or exception on exit (alikins@redhat.com)
  - 962905: Fixing errors with quantity spinner. (awood@redhat.com)
  - 961124: Allow rct dump-manifest to be called more than once (bkearney@redhat.com)
  - 921249: Fix Unknown virt status being reported to server.  (dgoodwin@redhat.com)
  - 905136: Make the accessability value unique (bkearney@redhat.com)
  - 913635: typo (dlackey@redhat.com.com)
  - 889582 (dlackey@redhat.com.com)
  - 962520: require python-rhsm 1.8.11 for arches (alikins@redhat.com)
  - 919706: Relax rhn-setup-gnome dependency. (dgoodwin@redhat.com)
  - Add new expiring icon (bkearney@redhat.com)
  - use os.linesep as imported (alikins@redhat.com)
  - cleanup camelCase usage in various files (alikins@redhat.com)
  - adding architecture data (ckozak@redhat.com)
  - Default option is status (ckozak@redhat.com)
  - changed list --status to status (ckozak@redhat.com)
  - adding data to installed prods (ckozak@redhat.com)
  - SORT ALL THE IMPORTS! (alikins@redhat.com)
  - stylish cleanup (alikins@redhat.com)
  - mock.patch ConsumerIdentity instead of monkey patch (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.9-1
changelog:
  - 905136: added accessibily name for owner_label (jmolet@redhat.com)
  - 928175: fixed status command after user deletion (ckozak@redhat.com)
  - 950672: Added data for yellow. Added list view. (ckozak@redhat.com)
  - 963796: Unified descriptions (cschevia@redhat.com)
  - 966745: Correct typo in name of configuration value. (awood@redhat.com)
  - 967863: Suggest package to install when mapping file is missing. (awood@redhat.com)
  - 968364: show the issuer for certs in rct. (bkearney@redhat.com)
  - 966262 for rct.8; 959563 for subscription-manager.8 (dlackey@redhat.com.com)
  - Extract latest strings from code. (dgoodwin@redhat.com)
  - close file objects deliberately (alikins@redhat.com)
  - Use fnmatch to add wildcard support (bkearney@redhat.com)
  - One more miss from my issuer/errata debacle (bkearney@redhat.com)
  - Extend use of compliance status from cp (ckozak@redhat.com)
  - Add s390 lpar specific socket counting (alikins@redhat.com)
  - be extra paranoid and strip nul from /sys reads (alikins@redhat.com)
  - use new cpu info method by default (alikins@redhat.com)
  - Add a new method for calculating cpu sockets (alikins@redhat.com)
  - Added reasons to Subscription Details (ckozak@redhat.com)
  - Support enable and disable of all repos. (bkearney@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.10-1
changelog:
  - 922825: pre_subscribe conduit now contains more data (mstead@redhat.com)
  - 921222: Fixed subman auto-complete scripts (cschevia@redhat.com)
  - 922806: Fix RHEL 5 firstboot issue with backButton. (dgoodwin@redhat.com)
  - 960465: Subman disconnected when consumer cert is invalid (ckozak@redhat.com)
  - 966747: handle a custom facts file being empty (alikins@redhat.com)
  - 969280: Fix traceback on disconnected sub detach (ckozak@redhat.com)
  - handle s390x's without vm info in sysinfo (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.11-1
changelog:
  - 844532: xen dom0 cpu topology lies, work around it (alikins@redhat.com)
  - 854380: fix overlap filter (ckozak@redhat.com)
  - 915847: Provide option to skip using proxy when connecting to RHSM.
  - 921222: Fixed tab completion (cschevia@redhat.com)
  - 922871: Call pre_product_id_install hook on product install (mstead@redhat.com)
  - 924766: Show machine type when attaching 'virt only' subscriptions (wpoteat@redhat.com)
  - 927340: added empty warning, block auth unless proxy enabled (ckozak@redhat.com)
  - 928401: Fixed translation issue in redeem dialog (cschevia@redhat.com)
  - 947485: System 'disconnected' if no cache and disconnected (ckozak@redhat.com)
  - 947788: facts plugin can handle no 'facter' (alikins@redhat.com)
  - 966137: stat-cert handles ent cert with no content (alikins@redhat.com)
  - 972883: Add entries to productid.js during migration. (awood@redhat.com)
  - 973938: Flush std out and catch errors to work around the broken pipe from the more command (bkearney@redhat.com)
  - 974123: default behavior is help, no longer status (ckozak@redhat.com)
  - 974587: Allow list --consumed to handle certificates with empty order sections (bkearney@redhat.com) (awood@redhat.com)
  - 975164: 975186: fix certlib exception handling (ckozak@redhat.com)
  - Pull PluginManager from dependency injection framework (mstead@redhat.com)
  - Performance enhancements (ckozak@redhat.com)
  - added cp_provider doc strings, modified test fixture (ckozak@redhat.com)
  - Fix expand options so there is no border txt view (alikins@redhat.com)
  - Make PluginManager lazy loading (mstead@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.12-1
changelog:
  - 877331: Add --org and --environment options to migration script.  (awood@redhat.com)
  - 915847: Clear old proxy settings if the --no-proxy option is used. (awood@redhat.com)
  - 928401: Fixed translation issue in redeem dialog (cschevia@redhat.com)
  - 974123: default behavior is help, no longer status (ckozak@redhat.com)
  - 976689: Handle no xorg server, allow help (ckozak@redhat.com)
  - 976848: 976851: thread cache write, limit disk reads, singleton
  - 976865: dbus iface singleton for gui (ckozak@redhat.com)
  - 976866: single instance of ProdDir and EntDir (ckozak@redhat.com)
  - 976868: improve rhsmd logging (alikins@redhat.com)
  - 976868: enable logging from /usr/libexec/rhsmd (alikins@redhat.com)
  - 976924: empty service level and type (ckozak@redhat.com)
  - 977481: added proxy options to status (ckozak@redhat.com)
  - 977535: cli uses utf8 too (ckozak@redhat.com)
  - 977851: 977321: Centralize CertSorter, drive updates, refresh properly
  - 978322: fixed client deleting certs (ckozak@redhat.com)
  - 979492: register auto-attach force recreates cert dirs (ckozak@redhat.com)
  - 980209: removed injection calls from migration script (ckozak@redhat.com)
  - 980640: include stacked ents in provided (ckozak@redhat.com)
  - 981689: fix attach command (ckozak@redhat.com)
  - 982286: Fixed empty dialog message (cschevia@redhat.com)
  - latests strings from zanata and new keys.pot (alikins@redhat.com)
  - Fixed Preferences dialog to be non-threaded (cschevia@redhat.com)
  - updated spec to require python-rhsm v1.8.13-1 or greater (cschevia@redhat.com)
  - Added auto-attach property in the preferences dialog (cschevia@redhat.com)
  - Added autoheal command to subman CLI (cschevia@redhat.com)
  - Add support for SUBMAN_DEBUG to log to stdout (alikins@redhat.com)
  - remove logging of plugin args (alikins@redhat.com)
  - Fixed auto-complete script for auto-attach command (cschevia@redhat.com)


author: Alex Wood <awood@redhat.com> 1.9.1-1
changelog:
  - latest translations from zanata (alikins@redhat.com)
  - Preserve traceback when an exception is thrown from background thread.
    (awood@redhat.com)
  - Remove logging of injection setup (alikins@redhat.com)
  - 988411: more at-spi changes for QA (ckozak@redhat.com)
  - 908521: Pull in the latest mr strings (bkearney@redhat.com)
  - 928469: Pull in latest ml strings from zanata (bkearney@redhat.com)
  - 927990: Pull in latest ta_IN strings from zanata (bkearney@redhat.com)
  - 987579: Make clicking autoheal label work (cschevia@redhat.com)
  - 988430, 988861: remove logging from write_cache to avoid segfault
    (ckozak@redhat.com)
  - 966422: Do not hang firstboot if there is an exception during registration.
    (awood@redhat.com)
  - 978329: catch IdentityCertException gracefully (ckozak@redhat.com)
  - 988482: fix gtk warnings on gtk-2.10 (alikins@redhat.com)
  - 988411: fixed at-spi locator name (ckozak@redhat.com)
  - fixed dbus on rhel5 (ckozak@redhat.com)
  - 987071: specify arch of librsvg dep (alikins@redhat.com)
  - 987626: Remove PUTS while opening preferences dialog, fix related test
    (cschevia@redhat.com)
  - 987551: correctly reconnect to rhsmd daemon (ckozak@redhat.com)
  - 981611, 981565: fixed icon and text truncation (ckozak@redhat.com)
  - rev zanata branch to 1.9.X (alikins@redhat.com)
  - Rev master to 1.9.x (alikins@redhat.com)
  - 968820: raise timeout exceptions for cli calls (alikins@redhat.com)
  - 950892: add ents-nag-warning.png to docs install (alikins@redhat.com)
  - add new file to spec (ckozak@redhat.com)
  - 978466: fix missing socket info s390x/ppc64 (alikins@redhat.com)
  - 985515: moved DbusIface to fix anaconda productId (ckozak@redhat.com)
  - 983193: remove unused 'Virt Limit' cat-cert field (alikins@redhat.com)
  - Correcting whitespace error. (awood@redhat.com)
  - 986971: String Update: Quantity > Available (cschevia@redhat.com)
  - 980724: allsubstab cleared on identity change, check redeem on register
    (ckozak@redhat.com)
  - 921222: add 'status' to bash completion (alikins@redhat.com)
  - 977580: Preferences dialog hide and show (cschevia@redhat.com)
  - 977481: make proxy cli check require_connection (alikins@redhat.com)
  - 977896: Fixes for Workstation/Desktop certs (alikins@redhat.com)
  - Added comma to satisfy grammar rules (cschevia@redhat.com)
  - added at-spi locator for autoheal checkbox (jmolet@redhat.com)
  - 984203: Fix german translations (bkearney@redhat.com)
  - 974587: Add more checks for no order portion being present
    (bkearney@redhat.com)
  - 984206: Removed Spaces from String (cschevia@redhat.com)
  - Remove releasers due to branching. (dgoodwin@redhat.com)
  - 983670: Improved auto-attach description (cschevia@redhat.com)
  - 982286: Adjusted markup removal (cschevia@redhat.com)
  - 983250: 983281: certs check warning period (ckozak@redhat.com)
  - Adding Fedora 19 Yum releasers. (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.9.2-1
changelog:
  - 851321: Refresh/redraw tables after removing subscriptions (cschevia@redhat.com)
  - 974587: allow certs with no content (ckozak@redhat.com)
  - 977920, 983660: manpage updates (dlackey@redhat.com.com)
  - 987579: Re-arranged preferences dialog (cschevia@redhat.com)
  - 990195: remove subscribe options (ckozak@redhat.com)
  - 991214: refresh ent dir, catch exception gracefully (ckozak@redhat.com)
  - 991548: Display correct error message for registration failures.  (awood@redhat.com)
  - 991580: add rhsmd debug to stdout (ckozak@redhat.com)
  - 993202: fix default config, take advantage of rhsmconfig options (ckozak@redhat.com)
  - 994266: list consumed shows expired bugs (ckozak@redhat.com)
  - 994997: Fix Unknown is_guest during firstboot. (dgoodwin@redhat.com)
  - Changed 'It is' to possessive 'Its' (cschevia@redhat.com)
  - Remove unused WARNING_DAYS variable (ckozak@redhat.com)
  - Bump python-rhsm requires to 1.9.1 for config changes. (dgoodwin@redhat.com)
  - add ondate to status (ckozak@redhat.com)
  - Fedora 17 is at end of life. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.1-1
changelog:
  - Adding Fedora 20 branch to releaser. (awood@redhat.com)
  - Subscribe/unsubscribe mirror attach/remove tests (alikins@redhat.com)
  - Revert "990195: remove subscribe options" (alikins@redhat.com)
  - 994620: reword tooltip message (ckozak@redhat.com)
  - 997935: stop making requests after unregister (ckozak@redhat.com)
  - 997740: allow autoheal call more often (ckozak@redhat.com)
  - Prevent name collision over the parent variable in RHEL 5 Firstboot.
    (awood@redhat.com)
  - 997189: error is now a sys.exc_info() tuple. (awood@redhat.com)
  - self._parent is not defined here. (awood@redhat.com)
  - bump version and remove rhel-6.5 releaser (jesusr@redhat.com)
  - Convert contract selection window to use a MappedListStore.
    (awood@redhat.com)
  - Stripe rows whenever the My Subs or All Available tabs are shown.
    (awood@redhat.com)
  - 991165: Refresh row striping after the TreeView is resorted.
    (awood@redhat.com)
  - Remove unused background attribute in Installed Products tab.
    (awood@redhat.com)
  - Set background color on progress bar renderer. (awood@redhat.com)
  - No need to set a hint to true in glade then false in code. (awood@redhat.com)
  - Remove duplicate import. (awood@redhat.com)
  - Add a very simple "smoke" test script (alikins@redhat.com)
  - 842402: Re-aligning Subscription Manager Gui (cschevia@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.2-1
changelog:
  - update translations from zanata (alikins@redhat.com)
  - 1004893: update prods before compliance (ckozak@redhat.com)
  - 1004908: Remove the rhn-setup-gnome dep even more. (alikins@redhat.com)
  - 1004908: move rhn-setup-gnome requires to -gui subpackage
    (pbabinca@redhat.com)
  - 1004385: rhsm icon completion fix (ckozak@redhat.com)
  - 1004341: add gui completion (ckozak@redhat.com)
  - 1001820: fix autocompletion (ckozak@redhat.com)
  - rev min python version for "make stylish" to 2.6 (alikins@redhat.com)
  - 994344: messaging for bad filetypes (ckozak@redhat.com)
  - 995597: continue attaching if a pool cannot be found (ckozak@redhat.com)
  - 1001169: fix pythonic empty string identity problems (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.3-1
changelog:
  - Latest strings from zanata. (alikins@redhat.com)
  - Latest string catalog. (alikins@redhat.com)
  - point at the zanata 1.10.x version/branch (alikins@redhat.com)
  - Run 'make update-po' on translations. (awood@redhat.com)
  - Latest translations from Zanata. (awood@redhat.com)
  - Merge pull request #782 from candlepin/ckozak/environment_completion
    (alikins@redhat.com)
  - Merge pull request #776 from candlepin/alikins/1008462_log_virt_what
    (c4kofony@gmail.com)
  - 1011712: add missing environments completion (ckozak@redhat.com)
  - Merge pull request #773 from candlepin/ckozak/match_gui_filters
    (alikins@redhat.com)
  - Merge pull request #787 from candlepin/awood/1006985-abort-migration
    (alikins@redhat.com)
  - Use all keywords args for call to get_avail_ents (alikins@redhat.com)
  - Add 'providedProducts' to test pool (alikins@redhat.com)
  - stylish cleanups (alikins@redhat.com)
  - removed subscribed filter, added testing (ckozak@redhat.com)
  - Add some tests cases for managerlib.get_avail_ents (alikins@redhat.com)
  - fix wrong index in get_filtered_pools_list (ckozak@redhat.com)
  - remove unused args, remove unnecessary idcert read (ckozak@redhat.com)
  - add completion for new CLI filters (ckozak@redhat.com)
  - 654501: add some filtering to list available (ckozak@redhat.com)
  - Merge pull request #765 from candlepin/alikins/redhataccount
    (awood@redhat.com)
  - Move capture() context manager to fixtures.py (awood@redhat.com)
  - Merge pull request #786 from candlepin/ckozak/cli_list_provided
    (alikins@redhat.com)
  - 1006985: Abort migration when we detect different certs with the same ID.
    (awood@redhat.com)
  - Merge pull request #781 from candlepin/ckozak/cat_cert_unlimited
    (alikins@redhat.com)
  - 996993: add provided to list available (ckozak@redhat.com)
  - Merge pull request #784 from candlepin/ckozak/gui_unentitled_string
    (alikins@redhat.com)
  - 1012501: Correct number of entitled products with expired ents
    (ckozak@redhat.com)
  - 1012566: rhsmd cron job 700 (ckozak@redhat.com)
  - 1011703: Do not allow selection on listview (mstead@redhat.com)
  - Merge pull request #779 from candlepin/alikins/flex_branding3
    (c4kofony@gmail.com)
  - 1011961: -1 quantity is printed as unlimited (ckozak@redhat.com)
  - Merge pull request #774 from candlepin/ckozak/fix_gui_completion
    (alikins@redhat.com)
  - Make certlib repo and brand updating similar. (alikins@redhat.com)
  - 1004385: remove some gtk help options (ckozak@redhat.com)
  - Make BrandingInstaller run every cert install/rm (alikins@redhat.com)
  - Merge pull request #778 from candlepin/ckozak/update_repolib_attach
    (alikins@redhat.com)
  - keep repolib in certmgr (ckozak@redhat.com)
  - 1011234: no service level displays empty string (ckozak@redhat.com)
  - 1008016: update repos on certlib change (ckozak@redhat.com)
  - fix traceback when poolstash is empty (ckozak@redhat.com)
  - 1008462: log more virt-what output (alikins@redhat.com)
  - 1008462: Log detected virt info as we detect it. (alikins@redhat.com)
  - 1004341: gui completion no longer resets (ckozak@redhat.com)
  - Merge pull request #761 from candlepin/ckozak/overlap_filter_ondate
    (alikins@redhat.com)
  - Refactor credentials gathering. (awood@redhat.com)
  - Merge pull request #771 from candlepin/alikins/cmd_name_logging
    (jmrodri@nc.rr.com)
  - Merge pull request #769 from
    candlepin/ckozak/catch_exception_updating_installed (jmrodri@nc.rr.com)
  - Merge remote branch 'origin/master' into alikins/redhataccount
    (awood@redhat.com)
  - Merge pull request #768 from candlepin/ckozak/status_ondate_completion
    (jmrodri@nc.rr.com)
  - Merge pull request #766 from candlepin/alikins/make_zanata
    (jmrodri@nc.rr.com)
  - 973838: refresh redhat.repo after register (alikins@redhat.com)
  - make default logger include sys.argv[0] (alikins@redhat.com)
  - Merge pull request #770 from candlepin/mstead/add-virt-type-info
    (c4kofony@gmail.com)
  - Add System Type to output of list --consumed (mstead@redhat.com)
  - Add Type column to Confirm Subscription screen (mstead@redhat.com)
  - 1008603: Catch and log connection error while updating installed products
    (ckozak@redhat.com)
  - Merge pull request #767 from candlepin/ckozak/attach_suggested_quantity
    (wpoteat@redhat.com)
  - 1004385: Add missing rhsm-icon debug options (ckozak@redhat.com)
  - suggested quantity in list available (ckozak@redhat.com)
  - Merge pull request #754 from candlepin/alikins/flex_branding2
    (c4kofony@gmail.com)
  - 1001820: added ondate to completion (ckozak@redhat.com)
  - cleanup comments (alikins@redhat.com)
  - remove call on filter change, use None instead of now (ckozak@redhat.com)
  - Adding autocomplete stuff for new migration script options.
    (awood@redhat.com)
  - 767754: overlap filter ondate (ckozak@redhat.com)
  - Add a 'make zanata' target that syncs zanata (alikins@redhat.com)
  - Adding unit tests for new migration script options. (awood@redhat.com)
  - Correct failing unit tests and add convenience method. (awood@redhat.com)
  - Change brand attribute from 'os' to 'brand_type' (alikins@redhat.com)
  - Make rct show branding info (alikins@redhat.com)
  - Move to RHELBrandsInstaller by default. (alikins@redhat.com)
  - Split RHEL specific brand install bits (alikins@redhat.com)
  - Add a BrandsInstaller that handles multiple brands (alikins@redhat.com)
  - Invert dependencies, and add RHEL specific impls. (alikins@redhat.com)
  - Stylish cleanups. (alikins@redhat.com)
  - Added new parameters to the script (tazimkolhar@gmail.com)
  - clean up comments (alikins@redhat.com)
  - More entbranding logging and testing. (alikins@redhat.com)
  - Allow multi ents that provide identical branding (alikins@redhat.com)
  - More entbranding test cases. (alikins@redhat.com)
  - Add BrandPicker and Brand base class. (alikins@redhat.com)
  - Add branding support to ent cert importer. (alikins@redhat.com)
  - Update branding on cert sorter dir moniter event (alikins@redhat.com)
  - Move all branded product logic to entbranding (alikins@redhat.com)
  - make it more clear this is for RHEL branded ents (alikins@redhat.com)
  - Add support for populating product branding info. (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.4-1
changelog:
  - 1017351: ignore dbus failures on show_window (alikins@redhat.com)
  - 1016643: Fix firstboot issues with new firstboot. (alikins@redhat.com)
  - 1005420: adding --ondate to manpage (dlackey@redhat.com.com)
  - 1007580: Add contract number to the output of list --available
    (bkearney@redhat.com)
  - 1017299: handle dmidecode module not installed (alikins@redhat.com)
  - 846331: Add tooltips to the filters page (bkearney@redhat.com)
  - 1015553: fix help message for no-overlap. display usage requirement
    (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.5-1
changelog:
  - 1021581: account/contract display nothing when no data exists
    (ckozak@redhat.com)
  - Swap heading of selectsla/confirmsubs widgets. (alikins@redhat.com)
  - 1006748: replace simplejson with 'ourjson' (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.6-1
changelog:
  - 985502: Use yum.i18n utf8_width function for string length in CLI
    (ckozak@redhat.com)
  - 916666: Displayed 'Next System Check-In' is inaccuarate (wpoteat@redhat.com)
  - Change wording for identity in CLI command. (dgoodwin@redhat.com)
  - 1019753: Stop including a fake consumer UUID fact. (dgoodwin@redhat.com)
  - 1022198: Display highest suggested quantity in contract selection
    (ckozak@redhat.com)
  - Hook up the 'why register' dialog from old rhn-client-tools.
    (dgoodwin@redhat.com)
  - Add screen to describe and skip registration in Fedora/EL7 firstboot.
    (dgoodwin@redhat.com)
  - Fix firstboot on Fedora 19. (dgoodwin@redhat.com)
  - Report distribution.version.modifier fact. ex 'beta' (ckozak@redhat.com)
  - Center filter dialog on parent window when opened (mstead@redhat.com)
  - Sort owner list in org selection screen (mstead@redhat.com)
  - 1004318: Bash completion for rct was not handing options and file lists
    correctly. (bkearney@redhat.com)
  - 1023166: Strip leading and trailing whitespaces from all usernames and
    passwords provided on the cli (bkearney@redhat.com)
  - 963579: Stop hiding the Library environment. (dgoodwin@redhat.com)
  - Fix layout issues with select sla screen in firstboot. (alikins@redhat.com)
  - Fix the layout for "Confirm Subscriptions" screen. (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.7-1
changelog:
  - 998033: Handle Unauthorized/Forbidden exceptions in CLI/GUI
    (mstead@redhat.com)
  - Remove unnecessary network calls after clean command (ckozak@redhat.com)
  - Bumping the python-rhsm required version (mstead@redhat.com)
  - Latest translations. (awood@redhat.com)
  - Introduced an Override model object to OverrideLib (mstead@redhat.com)
  - Use injected Identity instead of ConsumerIdentity in repolib
    (mstead@redhat.com)
  - Catch ValueError when determining boolean value (mstead@redhat.com)
  - Use a simplier method to compare two lists of dictionaries.
    (awood@redhat.com)
  - Hide item when server does not support overrides. (mstead@redhat.com)
  - Show message instead of repo table when no repos exist. (mstead@redhat.com)
  - Made Repository Details resemble Subscription Details (mstead@redhat.com)
  - Created an overrides module (mstead@redhat.com)
  - Created Repository Management Dialog (mstead@redhat.com)
  - Add 'repo-override' command to alter content repositories server-side.
    (awood@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.8-1
changelog:
  - 1030604: Handle 400 code for add override (mstead@redhat.com)
  - Use backed to ensure a refreshed Overrides object (mstead@redhat.com)
  - 1034574: Alternate message based on why no repos exist in GUI
    (mstead@redhat.com)
  - 1034396: No longer require entitlements to run repo-override command
    (mstead@redhat.com)
  - 1033741: Refresh Overrides CP connection when dialog is shown
    (mstead@redhat.com)
  - 1033690: Updated repo-overrides not supported message (mstead@redhat.com)
  - 1034649: Only allow repolib to update override cache if supported by the
    server (mstead@redhat.com)
  - 1032673: Warn on add override if repo doesn't exist (mstead@redhat.com)
  - 1030996: Fixed usage text for repo-override add/remove options
    (mstead@redhat.com)
  - 1032243: Updated the redhat.repo warning (mstead@redhat.com)
  - Use local ent certs to list attached pools (ckozak@redhat.com)
  - 1021013: Change wording on firstboot address screen (alikins@redhat.com)
  - 1020539: Show proxy info if no RHN in firstboot (alikins@redhat.com)
  - Make zip file of consumer information for debugging (wpoteat@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.9-1
changelog:
  - Check for RHSM_DISPLAY before loading any modules. (alikins@redhat.com)
  - 1034429: Fix stacktrace in logs on unregister. (dgoodwin@redhat.com)
  - add ServerUrlParseException strings to mapper (jesusr@redhat.com)
  - 1040167: Update installed products properly (ckozak@redhat.com)
  - Added atspi locator for overall status (ckozak@redhat.com)
  - ExceptionMapper will now traverse object graph looking for message
    (mstead@redhat.com)
  - Convert tests on stderr to use Capture context manager. (awood@redhat.com)
  - Have Capture grab both stdout and stderr. (awood@redhat.com)
  - Updated for readability (ckozak@redhat.com)
  - replace file monitors with a single monitor (ckozak@redhat.com)
  - Rename capture context manager and use new-style classes. (awood@redhat.com)
  - Correct Makefile for RHEL 5. (awood@redhat.com)
  - 1030604: print to stdout instead of stderr for consistency
    (mstead@redhat.com)
  - display pool type in cli and gui (ckozak@redhat.com)
  - 1031008: Properly handle exceptions when checking compliance
    (mstead@redhat.com)
  - Change the capture() context manager to tee output. (awood@redhat.com)
  - Remove mock stdout. Nosetest captures stdout by default. (awood@redhat.com)
  - respect http(s)_proxy env variable for proxy information (jesusr@redhat.com)
  - Created ExceptionMapper to allow sharing exception messages
    (mstead@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.10-1
changelog:
  - 1039736: Modify the remote server string to reference Satellite instead of
    CloudForms (bkearney@redhat.com)
  - 916666: Change method of service detection (wpoteat@redhat.com)
  - Correct at-spi name for subscription type text (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.11-1
changelog:
  - 1018807: Ensure virt facts are a single line (bkearney@redhat.com)
  - 1007580: Print blank spaces if there is no contract number on the list
    command (bkearney@redhat.com)
  - Fedora 18 is at end of life. (awood@redhat.com)
  - Updated translations. (dgoodwin@redhat.com)
  - 104338: add default dest dir to rhsm-debug help (alikins@redhat.com)
  - 1042897: add proxy info to rhsm-debug completion (alikins@redhat.com)
  - 914833: rct cat-cert output reports an Order: Subscription: field.
    (wpoteat@redhat.com)
  - 1052297: delay import of site module (ckozak@redhat.com)
  - set default encoding to utf-8 in rhsm-debug and migrate scripts
    (ckozak@redhat.com)
  - 1048325: Set default encoding to utf-8 when running the rct script
    (ckozak@redhat.com)
  - 1050850: re-evaluate system facts when checking for updates
    (ckozak@redhat.com)
  - Some refactoring of rhsm-debug (alikins@redhat.com)
  - Additional improvements to rhsm-debug (wpoteat@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.12-1
changelog:
  - added testing for the pooltype cache (ckozak@redhat.com)
  - 961003: Stricter matches for rhel product tags (alikins@redhat.com)
  - 1059809: Cache pool types to avoid unnecessary api calls (ckozak@redhat.com)
  - 1059809 Improve attach and remove performance add progress bar
    (ckozak@redhat.com)
  - 908869: Fix the mis-transated options in pt-BR (bkearney@redhat.com)
  - 1044596: handle http,socket,ssl fetching release (alikins@redhat.com)
  - dont always print exception message (ckozak@redhat.com)
  - 1044596: Make release listing handle empty data (alikins@redhat.com)
  - 1020423: update help messages (jesusr@redhat.com)
  - Fix incorrect patching. (awood@redhat.com)
  - Mock ProductDatabase so tests can run without a productid.js file
    (awood@redhat.com)
  - 825388: Properly wrap text when reaching dialog limit (mstead@redhat.com)
  - 1021443: display Consumer deleted message (jesusr@redhat.com)
  - Altering titles per mreid conversation. (wpoteat@redhat.com)
  - 1039736: Fix missed reference to CloudForms in tooltip. (dgoodwin@redhat.com)
  - Fix ta_IN translation problem. (dgoodwin@redhat.com)
  - Lock timezone to EST5EDT in timezone tests. (awood@redhat.com)
  - 1005329: add at-spi locator to the SLA selection table (ckozak@redhat.com)
  - 1039914: Update the rhsm-debug man page (bkearney@redhat.com)
  - 874169: Fix label alignment in progress UI (mstead@redhat.com)
  - 1020361: Replace the use of the term Valid with Current in the status command
    (bkearney@redhat.com)
  - 1028596: Add the repo-override command to the subscription-manager man page
    (bkearney@redhat.com)
  - 1020522: Update the man page for subscription-manager with new list options
    (bkearney@redhat.com)
  - Pull in the latest strings from zanata. (bkearney@redhat.com)
  - 1057719: adding a small section on deprecated commands (dlackey@redhat.com)
  - 1017354: remove msg printed to stderr via yum (alikins@redhat.com)
  - 857147: Auto-subscribe window has a confusing name (wpoteat@redhat.com)
  - Use dateutil.tz instead of pytz. (awood@redhat.com)
  - 883486: The local time's start/end dates rendered in the list
    --available/--consumed incorrect (wpoteat@redhat.com)
  - 1049037: Add conditional requires on migration data package.
    (awood@redhat.com)
  - 973938: correctly handle SIGPIPE in rct (ckozak@redhat.com)
  - 878089: Add line wrapping when listing subscription-manager modules
    (ckozak@redhat.com)
  - 1017354: Ensure all message go to stdout, not stderr (bkearney@redhat.com)
  - 851325: Anchor choose server "default" button beside the text box.
    (dgoodwin@redhat.com)
  - 1039739: Add 96x96 and 256x256 icons (bkearney@redhat.com)
  - 873967: Move choose server tooltips closer to the elements they assist with.
    (dgoodwin@redhat.com)
  - 1044686: Make serverurl parse error detailed again (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.13-1
changelog:
  - 1060917: catch exception thrown in firstboot (ckozak@redhat.com)
  - Extract the latest strings (bkearney@redhat.com)
  - 995121: require gnome-icon-theme for calendar icon (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-1
changelog:
  - Use glob for finding entitlement certs to remove. (dgoodwin@redhat.com)
  - Make sure entitlement cert directory exists before we clean it out.
    (dgoodwin@redhat.com)
  - safer default args in AsyncWidgetUpdater (ckozak@redhat.com)
  - use enumerate instead of confusing myself (ckozak@redhat.com)
  - Pull in latest strings from zanata (bkearney@redhat.com)
  - make sure entitlement has a pool before reading it (ckozak@redhat.com)
  - quickly load preferences (ckozak@redhat.com)
  - 1061937: preference changes occur in the background (ckozak@redhat.com)
  - use existing signals (ckozak@redhat.com)
  - simplify preferences window (ckozak@redhat.com)
  - Fix test failure if run on system that is registered. (dgoodwin@redhat.com)
  - 1061393: Don't allow subscription-manager string to be translated
    (ckozak@redhat.com)
  - 1016427: On string was missed from the extraction (bkearney@redhat.com)
  - 1058495: productid yum errors on yum remove (alikins@redhat.com)
  - 1026501: Preserve PKI directories and have rpm own them.
    (dgoodwin@redhat.com)
  - 1058374: Fix crash on exception in managergui._show_buttons
    (ckozak@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.1-1
changelog:
  - 1021069: Add reference to network usage info. (alikins@redhat.com)
  - latest strings from zanata 1.11.X branch (alikins@redhat.com)
  - 1061923: Remove trailing period from privacy URL (wpoteat@redhat.com)
  - 1039913: rhsm-debug updates and fixes (alikins@redhat.com)
  - 1061407: don't allow some translations (ckozak@redhat.com)
  - 1055664: rhsm-debug now follows more config paths (alikins@redhat.com)
  - 1038242: add anaconda.pid check before chroot (alikins@redhat.com)
  - 1035115: Update product id certs (alikins@redhat.com)
  - 864195: New output line for subscribe --auto if it can't cover all products
    (wpoteat@redhat.com)
  - 1060727: Changes to rhsm-debug for sos report (wpoteat@redhat.com)
  - 1044596: Don't match beta product tags for release (alikins@redhat.com)
  - 851325: Tweak activation key checkbox to left (alikins@redhat.com)
  - Use systemd RPM macros to make life easier. (awood@redhat.com)
  - 958016: use rpm %{optflags} and _hardended_build (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.2-1
changelog:
  - Use the new Product.brand_name for brand_name (alikins@redhat.com)
  - 865702: Dont render exc messages with bogus markup (alikins@redhat.com)
  - 1070908: Don't count cpus without topo for lpar (alikins@redhat.com)
  - 1075167: Avoid using injected values in migrate-classic-to-rhsm
    (ckozak@redhat.com)
  - 1074568: Use our translations in optparser (ckozak@redhat.com)
  - Man page spelling corrections (wpoteat@redhat.com)
  - 1070737: correct config section for ca_cert_dir (ckozak@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.3-1
changelog:
  - Cleanup entbranding tests names. (alikins@redhat.com)
  - Test cases for empty,none,not set brand type/name (alikins@redhat.com)
  - Use a real certificate2.Product in tests cases. (alikins@redhat.com)
  - Latest strings from zanata (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.11.4-1
changelog:
  - Move atspi locator to correct element (ckozak@redhat.com)
  - 1090560: readd locator to the all subs view (ckozak@redhat.com)
  - test_cert_sorter could fail based on test order (alikins@redhat.com)
  - 1058383: widgets are added and removed dynamically (ckozak@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.5-1
changelog:
  - Removing CVS properties since CVS is dead. (awood@redhat.com)
  - CertSorter syncs installed prods before super init. (alikins@redhat.com)
  - Add more entcertlib class and method docs. (alikins@redhat.com)
  - Reorder methods in roughly exec order (alikins@redhat.com)
  - entcertlib docstring cleanup (alikins@redhat.com)
  - TestDataLib -> TestBaseActionInvoker (alikins@redhat.com)
  - repolib.RepoUpdateAction ->RepoUpdateActionCommand (alikins@redhat.com)
  - repolib.RepoLib -> RepoActionInvoker (alikins@redhat.com)
  - InstalledProductsLib -> InstalledProductsActionInvoker (alikins@redhat.com)
  - IdentityCertLib -> IdentityCertActionInvoker (alikins@redhat.com)
  - healiblib.HealingLib -> HealingActionInvoker (alikins@redhat.com)
  - FactAction -> FactsActionCommand (alikins@redhat.com)
  - FactActionReport -> FactsActionReport (alikins@redhat.com)
  - FactLib -> FactsActionInvoker (alikins@redhat.com)
  - entcertlib.EntCertLib -> EntCertActionInvoker (alikins@redhat.com)
  - certlib.DataLib -> certlib.BaseActionInvoker (alikins@redhat.com)
  - rename certmgr.py to action_client (alikins@redhat.com)
  - Rename CertManager to ActionClient (alikins@redhat.com)
  - Rename CertManager to CertActionClient (alikins@redhat.com)
  - Update docstrings. (alikins@redhat.com)
  - Remove no longer used old_install. (alikins@redhat.com)
  - Add entcertlib docs (alikins@redhat.com)
  - update copyright info (alikins@redhat.com)
  - s/entdir/ent_dir since we use that slightly more (alikins@redhat.com)
  - factsgui identity now injected at the last minute (alikins@redhat.com)
  - SubManFixture's mock identity now NonCallable (alikins@redhat.com)
  - test_async does not need to mock Facts (alikins@redhat.com)
  - Store default inject stub Facts on SubManFixture (alikins@redhat.com)
  - Remove unneeded Facts() init. (alikins@redhat.com)
  - Replace Facts() with injected facts in managercli (alikins@redhat.com)
  - Start replacing use of Facts() with inj'ed facts (alikins@redhat.com)
  - Stop passing facts to ReleaseBackend. (alikins@redhat.com)
  - Make repolib use inject ent_dir/prod_dir (alikins@redhat.com)
  - Make cp_provider manage ContentConnection (alikins@redhat.com)
  - Make ReleaseBackend use inj'ed ent/prod dirs (alikins@redhat.com)
  - split migrates basic/consumer connection methods (alikins@redhat.com)
  - migrate.py now uses inj'ed CP_PROVIDER (alikins@redhat.com)
  - ReleaseBackend doesn't need a uep, remove it. (alikins@redhat.com)
  - Stop passing a uep into CertManager and friends. (alikins@redhat.com)
  - Don't pass cp to RepoLib from cli, use inj (alikins@redhat.com)
  - update Overrides to use inject uep (alikins@redhat.com)
  - Split IdentityCertLib into Lib+Action (alikins@redhat.com)
  - Use the mock cp_provider inject with the fixture (alikins@redhat.com)
  - certlib.DataLib doesn't need a uep now (alikins@redhat.com)
  - Fix testcase to use injected uep (alikins@redhat.com)
  - Use inj'ed UEP in healinglib (alikins@redhat.com)
  - Use inj'ed UEP in repolib (alikins@redhat.com)
  - Use inj'ed UEP in packageprofilelib (alikins@redhat.com)
  - Use inject uep in installedproductslib (alikins@redhat.com)
  - Remove unneeded mock Facts in test_certmgr (alikins@redhat.com)
  - Make certmgr let FactLib use inj uep (alikins@redhat.com)
  - Make FactActionReport use inj'ed UEP (alikins@redhat.com)
  - Start letting EntCertLib use injected UEP (alikins@redhat.com)
  - Move entcertlib to use inj'ed cp_proivder (alikins@redhat.com)
  - Remove now wrong comment (alikins@redhat.com)
  - Remove late import of repolib (alikins@redhat.com)
  - Remove incorrect docstrings (alikins@redhat.com)
  - Remove initial entcertlib invocation (alikins@redhat.com)
  - Don't pass in a facts object, inject it (alikins@redhat.com)
  - We don't use the passed in entdir, don't pass it (alikins@redhat.com)
  - Handle ActionReport lists having None (alikins@redhat.com)
  - Remove commented out code (alikins@redhat.com)
  - Fix up for now, but need to remove these tests (alikins@redhat.com)
  - certdata merge cleanups (alikins@redhat.com)
  - merge cleanups (alikins@redhat.com)
  - Add new files to spec (alikins@redhat.com)
  - stylish cleanups (alikins@redhat.com)
  - Use injected identity instead of consumer object (alikins@redhat.com)
  - Update to use Caputure() instead of MockStdout (alikins@redhat.com)
  - Fix v1 cert exp cert output for catcert tests (alikins@redhat.com)
  - self.installed is a property now, fix references (alikins@redhat.com)
  - merge cleanups (alikins@redhat.com)
  - make stylish cleanups (alikins@redhat.com)
  - Update repolib tests for certlib refactor (alikins@redhat.com)
  - Repo/override cli tests use injected identity (alikins@redhat.com)
  - Update Repos and overrides for injected identity (alikins@redhat.com)
  - Update RepoLib to use new DataLib init (alikins@redhat.com)
  - Fix mismerge and merge cleanups (alikins@redhat.com)
  - Stylish cleanups, mostly no longer used imports (alikins@redhat.com)
  - Remove unused ProductCertRepo bits (alikins@redhat.com)
  - Keep certmgr update_reports as a instance variable (alikins@redhat.com)
  - Remove certlib.ConsumerIdentity. (alikins@redhat.com)
  - Move firstboot to use injected identity. (alikins@redhat.com)
  - Move 'subscription-manager' yum plugin to inj (alikins@redhat.com)
  - Remove unused ConsumerIdentity from test_unreg (alikins@redhat.com)
  - Using injection in migration for prod_dir/identity (alikins@redhat.com)
  - Remove _get_consumer_id from EntUpdateAction (alikins@redhat.com)
  - Move old test_certlib to test_entcertlib (alikins@redhat.com)
  - Fix fetch_certificates for entcert Report (alikins@redhat.com)
  - Add some comments about id error logging (alikins@redhat.com)
  - Add a certmgr.UnregisterCertMgr class (alikins@redhat.com)
  - Add a RepoActionReport formatter (alikins@redhat.com)
  - Add a RepoActionReport (alikins@redhat.com)
  - More injected id, clean check_registration use (alikins@redhat.com)
  - Test fixes and merge/rebase cleanup (alikins@redhat.com)
  - Make string equals show expected/actual (alikins@redhat.com)
  - identitycertlib now uses injected identity (alikins@redhat.com)
  - certmgr tests were hitting real rpmdb (alikins@redhat.com)
  - PackageProfileManager/InstalledProductsManager inj (alikins@redhat.com)
  - Move PackageProfileLib and InstalledProductsLib (alikins@redhat.com)
  - Make rhsm_d use injection consumer identity (alikins@redhat.com)
  - Convert test_async to use SubManFixture (alikins@redhat.com)
  - test_certmgr calls uep.getRelease, so mock it (alikins@redhat.com)
  - Use injected consumer identity in firstboot (alikins@redhat.com)
  - Use injected consume identity in factlib (alikins@redhat.com)
  - Use ConsumerIdentity from identity not certlib (alikins@redhat.com)
  - Fix self.exceptions reference (alikins@redhat.com)
  - _valid_consumer to _inject_mock_valid_consumer (alikins@redhat.com)
  - Move _[in]valid_consumer to test/fixture.py (alikins@redhat.com)
  - Use injected Identity in repolib (alikins@redhat.com)
  - Remove  certlib.ConsumerIdentity from managerlib (alikins@redhat.com)
  - Inject identity in utils for version check (alikins@redhat.com)
  - Give a name to Mock()s created in test/fixture (alikins@redhat.com)
  - Re add the new slimmer fitter certlib.py (alikins@redhat.com)
  - Make entcertlib uses injected identity (alikins@redhat.com)
  - Split certlib into entcertlib and certlib (alikins@redhat.com)
  - Make IdentityCertLib use inj IDENTITY (alikins@redhat.com)
  - Move IdentityCertLib to identitycertlib.py (alikins@redhat.com)
  - Split Healing* into healinglib.py (alikins@redhat.com)
  - repolib.UpdateAction is now RepoUpdateAction (alikins@redhat.com)
  - Checkout idcertlib._status from it's report (alikins@redhat.com)
  - Inject an ActionLock, and a Facts class. (alikins@redhat.com)
  - Add ActionReports, certlib cleanup, lock cleanup (alikins@redhat.com)
  - The Action subclass is unneeded now. (alikins@redhat.com)
  - CertManager split CertManager/HealingCertManager (alikins@redhat.com)
  - HealingAction just uses an EntCertUpdateReport atm (alikins@redhat.com)
  - reAction()'ify repolib, add RepoReport (alikins@redhat.com)
  - reAction()'ify Factlib, add FactUpdateReport (alikins@redhat.com)
  - certmgr expects a ActionReport from Action.perform (alikins@redhat.com)
  - Rename CertLib->EntCertLib (alikins@redhat.com)
  - Split UpdateReport into base class and sub classes (alikins@redhat.com)
  - Create UpdateReport in Certlib.CertLib and pass it (alikins@redhat.com)
  - Start refactoring certlib (alikins@redhat.com)
  - Add product certs with os_name in certdata (alikins@redhat.com)
  - Add ProductIdRepoMap as core of ProductDatabase (alikins@redhat.com)
  - Add a DefaultDict (defaultdict with pretty print) (alikins@redhat.com)


