# changelog

author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4
changelog:
  - create %{_prefix}/lib/perl5/vendor_perl/%{perl_version}/auto and own it
    in base perl (resolves bugzilla 214580)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5
changelog:
  - disable some futime tests in t/io/fs.t because they started failing on x86_64
    in the Fedora builders, and no one can figure out why. :/


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7
changelog:
  - Add perl-File-Temp provides/obsoletes/conflicts (#433836),
    reported by Bill McGonigle <bill@bfccomputing.com>
  - escape the macros in Jan 30 entry


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12
changelog:
  - conditionalize multilib patch report in patchlevel.h
  - Update Archive::Extract to 0.26
  - Update Module::Load::Conditional to 0.24


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19
changelog:
  - fix CPANPLUS-Dist-Build Provides/Obsoletes (bz 437615)
  - bump version on Module-CoreList subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20
changelog:
  - create the vendor_perl/%{perl_version}/%{perl_archname}/auto directory 
    in %{_libdir} so we own it properly


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21
changelog:
  - sparc64 fails two tests under mysterious circumstances. we need to get the
    rest of the tree moving, so we temporarily disable the tests on that arch.


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-26
changelog:
  - make config parameter list consistent for 32bit and 64bit platforms,
    add config option -Dinc_version_list=none (#448735)
  - use perl_archname consistently
  - cleanup of usage of *_lib macros in %install


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33
changelog:
  - 451078 update Test::Harness to 3.12 for more testing. Removed verbose 
  test, new Test::Harness has possibly verbose output, but updated package
  has a lot of features f.e. TAP::Harness. Carefully watched all new bugs 
  related to tests!


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38
changelog:
  - 455933 update to CGI-3.38
  - fix fuzz problems (patch6)
  - 217833 pos() function handle unicode characters correct


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10
changelog:
  - CGI.pm bug in exists() on tied param hash (#457085)
  - move the enc2xs templates (../Encode/*.e2x) to -devel, (#456534)


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10
changelog:
  - remove Tar.pm from Archive-Extract
  - fix version of Test::Simple in spec
  - update Test::Simple
  - update Archive::Tar to 1.38


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46
changelog:
  - also preserve the timestamp of AUTHORS; move the fix to the recode
    function, which is where the stamps go wrong


author: Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10
changelog:
  - rt#33242, rhbz#459918. Segfault after reblessing objects in Storable.
  - rhbz#465728 upgrade Simple::Pod to 3.07


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51
changelog:
  - to fix Fedora bz 473223, which is really perl bug #54186 (http://rt.perl.org/rt3//Public/Bug/Display.html?id=54186)
    we apply Changes 33640, 33881, 33896, 33897


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52
changelog:
  - 295021 CVE-2007-4829 perl-Archive-Tar directory traversal flaws
  - add another source for binary files, which test untaring links


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54
changelog:
  - 455410 http://rt.perl.org/rt3/Public/Bug/Display.html?id=54934
    Attempt to free unreferenced scalar fiddling with the symbol table
    Keep the refcount of the globs generated by PerlIO::via balanced.


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60
changelog:
  - remove compatibility obsolete sitelib directories
  - use a better BuildRoot
  - drop a redundant mkdir in %install
  - call patchlevel.h only once; rm patchlevel.bak
  - update modules Sys::Syslog, Module::Load::Conditional, Module::CoreList,
    Test::Harness, Test::Simple, CGI.pm (dropping the upstreamed patch),
    File::Path (that includes our perl-5.10.0-CVE-2008-2827.patch),
    constant, Pod::Simple, Archive::Tar, Archive::Extract, File::Fetch,
    File::Temp, IPC::Cmd, Time::HiRes, Module::Build, ExtUtils::CBuilder
  - standardize the patches for updating embedded modules
  - work around a bug in Module::Build tests bu setting TMPDIR to a directory
    inside the source tree


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61
changelog:
  - apply Change 34507: Fix memory leak in single-char character class optimization
  - Reorder @INC, based on b9ba2fadb18b54e35e5de54f945111a56cbcb249
  - fix Archive::Extract to fix test failure caused by tar >= 1.21
  - Merge useful Debian patches


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66
changelog:
  - fix CGI::escape for all strings (#472571)
  - perl-CGI-t-util-58.patch: Do not distort lib/CGI/t/util-58.t
    http://rt.perl.org/rt3/Ticket/Display.html?id=64502


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74
changelog:
  - fix generated .ph files so that they no longer cause warnings (#509676)
  - remove PREREQ_FATAL from Makefile.PL's processed by miniperl
  - update to latest Scalar-List-Utils (#507378)
  - perl-skip-prereq.patch: skip more prereq declarations in Makefile.PL files


author: Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.0-82
changelog:
  - update our Test-Simple update to 0.92 (patch by Iain Arnell), #519417
  - update Module-Pluggable to 3.9


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-87
changelog:
  - fix patch-update-Compress-Raw-Zlib.patch (did not patch Zlib.pm)
  - update Compress::Raw::Zlib to 2.023
  - update IO::Compress::Base, and IO::Compress::Zlib to 2.015 (#542645)


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.1-100
changelog:
  - new upstream version
  - release number must be high, because of stale version numbers of some
    of the subpackages
  - drop upstreamed patches
  - update the versions of bundled modules
  - shorten the paths in @INC
  - build without DEBUGGING
  - implement compatibility measures for the above two changes, for a short
    transition period
  - provide perl(:MODULE_COMPAT_5.10.0), for that transition period only


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-109
changelog:
  - 547656 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters  
  - 549306 version::Internals should be packaged in perl-version subpackage
  - Parse-CPAN-Meta updated and separate package is dead


author: Paul Howarth <paul@city-fan.org> - 4:5.10.1-115
changelog:
  - restore missing version macros for Compress::Raw::Zlib, IO::Compress::Base
    and IO::Compress::Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - add noarch into correct sub-packages
  - move Provides/Obsoletes into correct modules from main perl


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-118
changelog:
  - 463773 remove useless txt files from installation
  - 575842 remove PERL_USE_SAFE_PUTENV, use perl putenv


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.1-123
changelog:
  - remove patch with debugging symbols, which should be now ok without it
  - update to 5.12.1
  - MODULE_COMPAT


author: Petr Pisar <ppisar@redhat.com> - 4:5.12.1-130
changelog:
  - Run tests in parallel
  - Add "-Wl,--enable-new-dtags" to linker to allow to override perl's rpath by
    LD_LIBRARY_PATH used in tests. Otherwise tested perl would link to old
    in-system libperl.so.
  - Normalize spec file indentation


author: Petr Sabata <psabata@redhat.com> - 4:5.12.2-1
changelog:
  - Update to 5.12.2
  - Removed one hardcoded occurence of perl version in build process
  - Added correct path to dtrace binary
  - BuildRequires: systemtap-sdt-devel


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.2-141
changelog:
  - 643447 fix redefinition of constant C in h2ph (visible in git send mail,
    XML::Twig test suite)
  - remove ifdef for s390


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-161
changelog:
  - test build of released 5.14.0
  - remove Class::ISA from sub-packages
  - patches 8+ are part of new release
  - remove vendorarch/auto/Compress/Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-169
changelog:
  - filter even Mac:: requires, polish filter again for correct installation
  - add sub-package Compress-Raw-Bzip2, solve Bzip2 conflicts after install
  - and add IO::Uncompress::Bunzip2 correctly into IO-Compress


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-170
changelog:
  - try to update to latest ExtUtils::MakeMaker, no luck -> rebuild with current 
    version, fix bug RT#67618 in modules


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-171
changelog:
  - update to 5.14.1 - no new modules, just serious bugfixes and doc
  - switch off fork test, which is failing only on koji


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-178
changelog:
  - update macros -> add %perl_bootstrap 1 and example for readability
  - add into Module::Build dependency on perl-devel (contains macros.perl)
  - create new sub-package macros, because we need macros in minimal buildroot


author: Iain Arnell <iarnell@gmail.com> 4:5.14.1-179
changelog:
  - Parse-CPAN-Meta explicitly requires CPAN::Meta::YAML and JSON::PP
  - Exclude CPAN::Meta* from CPAN sub-package
  - Don't try to normalize CPAN-Meta, JSON-PP, and Parse-CPAN-Meta versions;
    their dual-life packages aren't and have much higher numbers already


author: Paul Howarth <paul@city-fan.org> - 4:5.14.1-182
changelog:
  - Have perl-Module-Build explicitly require perl(CPAN::Meta) >= 2.110420,
    needed for creation of MYMETA files by Build.PL; the dual-life version of
    the package already has this dependency


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-188
changelog:
  - Make gdbm support optional to bootstrap with new gdbm
  - Split Carp into standalone sub-package to dual-live with newer versions
    (bug #736768)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-189
changelog:
  - Correct perl-CGI list of Provides
  - Make tests optional
  - Correct perl-ExtUtils-ParseXS Provides
  - Correct perl-Locale-Codes Provides
  - Correct perl-Module-CoreList version
  - Automate perl-Test-Simple-tests Requires version


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-193
changelog:
  - 5.14.2 bump (see
    https://metacpan.org/module/FLORA/perl-5.14.2/pod/perldelta.pod for release
    notes).
  - Fixes panics when processing regular expression with \b class and /aa
    modifier (bug #731062)
  - Fixes CVE-2011-2728 (File::Glob bsd_glob() crash with certain glob flags)
    (bug #742987)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-195
changelog:
  - Fix CVE-2011-3597 (code injection in Digest) (bug #743010)
  - Sub-package Digest and thus Digest::MD5 module (bug #743247)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-196
changelog:
  - Filter false perl(DynaLoader) provide from perl-ExtUtils-MakeMaker
    (bug #736714)
  - Change Perl_repeatcpy() prototype to allow repeat count above 2^31
    (bug #720610)
  - Do not own site directories located in /usr/local (bug #732799)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.2-197
changelog:
  - cleaned spec (thanks to Grigory Batalov)
  -  Module-Metadata sub-package contained perl_privlib instead of privlib
  -  %files parent section was repeated twice


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-205
changelog:
  - Sub-package ExtUtils::Install
  - Sub-package ExtUtils::Manifest
  - Do not provide private perl(ExtUtils::MakeMaker::_version)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-207
changelog:
  - Fix interrupted reading. Thanks to Šimon Lukašík for reporting this issue
    and thanks to Marcela Mašláňová for finding fix. (bug #767931)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-211
changelog:
  - Fix searching for Unicode::Collate::Locale data (bug #756118)
  - Run safe signal handlers before returning from sigsuspend() and pause()
    (bug #771228)
  - Correct perl-Scalar-List-Utils files list
  - Stop !$^V from leaking (bug #787613)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.16.0-RC2-217
changelog:
  - clean patches, not needed with new version
  - regen by podcheck list of failed pods. cn, jp, ko pods failed. I can't decide
    whether it's a real problem or false positives.


author: Paul Howarth <paul@city-fan.org> 4:5.16.0-226
changelog:
  - Move the rest of ExtUtils-ParseXS into its sub-package, so that the main
    perl package doesn't need to pull in perl-devel (bug #839953)


author: Jitka Plesnikova <jplesnik@redhat.com> 4:5.16.1-228
changelog:
  - 5.16.1 bump (see
    http://search.cpan.org/dist/perl-5.16.1/pod/perldelta.pod for release
    notes)
  - Fixed reopening by scalar handle (bug #834221)
  - Fixed tr/// multiple transliteration (bug #831679)
  - Fixed heap-overflow in gv_stashpv (bug #826516)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-233
changelog:
  - Do not access freed memory when cloning thread (bug #825749)
  - Match non-breakable space with /[\h]/ in ASCII mode (bug #844919)
  - Clear $@ before `do' I/O error (bug #834226)
  - Do not truncate syscall() return value to 32 bits (bug #838551)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-238
changelog:
  - Do not leak with attribute on my variable (bug #858966)
  - Allow operator after numeric keyword argument (bug #859328)
  - Extend stack in File::Glob::glob (bug #859332)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-249
changelog:
  - Run-require POD convertors by Module-Build and ExtUtils-MakeMaker to
    generate documentation when building other packages


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-250
changelog:
  - Sub-package Text-Soundex (bug #905889)
  - Fix conflict declaration at perl-Pod-LaTeX (bug #904085)
  - Remove bundled Module-Pluggable (bug #903624)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-254
changelog:
  - Correct perl-podlators dependencies
  - Obsolete perl-ExtUtils-Typemaps by perl-ExtUtils-ParseXS (bug #891952)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-256
changelog:
  - Sub-package File-CheckTree (bug #909144)
  - Sub-package Text-ParseWords
  - Sub-package Encode (bug #859149)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-261
changelog:
  - 5.16.3 bump (see <http://search.cpan.org/dist/perl-5.16.3/pod/perldelta.pod>
    for release notes)
  - Remove bundled autodie, B-Lint, CPANPLUS, Encode, File-CheckTree, IPC-Cmd,
    Params-Check, Text-Soundex, Thread-Queue


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-263
changelog:
  - Correct perl-Digest-MD5 dependencies
  - Remove bundled Archive-Extract, File-Fetch, HTTP-Tiny,
    Module-Load-Conditional, Time-Local


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-265
changelog:
  - Conflict perl-autodie with older perl (bug #911226)
  - Sub-package Env (bug #924619)
  - Sub-package Exporter (bug #924645)
  - Sub-package File-Path (bug #924782)
  - Sub-package File-Temp (bug #924822)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-267
changelog:
  - Remove bundled constant, DB_File, Digest-MD5, Env, Exporter, File-Path,
    File-Temp, Module-Load, Log-Message-Simple, Pod-Simple, Test-Harness,
    Text-ParseWords


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-270
changelog:
  - Fix leaking tied hashes (bug #859910)
  - Fix dead lock in PerlIO after fork from thread (bug #947444)
  - Add proper conflicts to perl-Getopt-Long, perl-Locale-Maketext, and
    perl-Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-271
changelog:
  - Sub-package Time-HiRes (bug #957048)
  - Remove bundled Getopt-Long, Locale-Maketext, and Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-272
changelog:
  - Make regular expression engine safe in a signal handler (bug #849703)
  - Remove bundled ExtUtils-ParseXS, and Time-HiRes


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-277
changelog:
  - Move CPANPLUS-Dist-Build files from perl-CPANPLUS
  - Move CPAN-Meta-Requirements files from CPAN-Meta
  - Add perl-Scalar-List-Utils to perl-core dependencies


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-278
changelog:
  - Update SystemTap scripts to recognize new phase__change marker and new probe
    arguments (bug #971094)
  - Update h2ph(1) documentation (bug #948538)
  - Update pod2html(1) documentation (bug #948538)
  - Do not double-own archlib directory (bug #894195)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-279
changelog:
  - Do not distribute File::Spec::VMS (bug #973713)
  - Remove bundled CPANPLUS-Dist-Build (bug #973041)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-284
changelog:
  - Use a macro to cover all 64-bit PowerPC architectures (bug #1061792)
  - Declare dependencies for cpan tool (bug #1122368)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1084796)
  - Make *DBM_File desctructors thread-safe (bug #1107542)


author: Peter Jones <pjones@redhat.com> - 0.8-1
changelog:
  - Update to 0.8
  - Don't open the db read-write
  - Fix permissions on keystore (everybody can sign with test keys)


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9
  - Bug fix from Gary Ching-Pang Lin
  - Support NSS Token selection for use with smart cards.


author: Peter Jones <pjones@redhat.com> - 0.99-1
changelog:
  - Update to 0.99
  - Add documentation for client/server mode.
  - Add --pinfd and --pinfile to server mode.


author: Peter Jones <pjones@redhat.com> - 0.99-4
changelog:
  - Fix some more bugs found by valgrind and coverity.
  - Don't build utils/ ; we're not using them and they're not ready anyway.


author: Peter Jones <pjones@redhat.com> - 0.99-7
changelog:
  - setfacl u:kojibuilder:rw /var/run/pesign/socket
  - Fix command line checking in client
  - Add client stdin pin reading.


author: Peter Jones <pjones@redhat.com> - 0.104-1
changelog:
  - Make sure alignment is correct on signature list entries
    Resolves: rhbz#963361
  - Make sure section alignment is correct if we have to extend the file


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Added component versioning comments
  -   Updated JSS from "4.2.6-10" to "4.2.6-12"
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-3
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Removed empty "pre" from "pki-ca"
  -   Consolidated directory ownership
  -   Corrected file ownership within subpackages
  -   Removed all versioning from NSS and NSPR packages


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Allow 'pki-native-tools' to be installed independently of 'pki-setup'
  - Removed explicit 'pki-setup' requirement from 'pki-ca'
    (since it already requires 'pki-common')
  - 'pki-setup'
  -     Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group
  -     Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP
        and TKS.
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*,
        pkicreate fails Fedora 14 and above
  -     Bugzilla Bug #23346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-symkey'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-native-tools'
  -     template change
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-util'
  -     Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical
        cannot be set to true
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and
        CS interface
  -     Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse
        ASN.1 encoding/decoding is broken
  -     Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #223319 - Certificate Status inconsistency between token
        db and CA
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-java-tools'
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to
        5000 bytes
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-common'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable
        started before configuration completed
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5
        policy mappings (seem hardcoded)
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #548699 - subCA's admin certificate should be generated by
        itself
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile
        caAgentServerCert (null cert_request)
  -     Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited
        number of times
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #629677 - TPS: token enrollment fails.
  -     Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN
        in a SCEP request
  -     Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection
        pools not reliable - improve connections or discovery
  -     Bugzilla Bug #629769 - password decryption logs plain text password
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #607380 - CC: Make sure Java Console can configure all
        security relevant config items
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #489342 -
        com.netscape.cms.servlet.common.CMCOutputTemplate.java
        doesn't support EC
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated
        for SCEP signing and encryption.
  -     Bugzilla Bug #223336 - ECC: unable to clone a ECC CA
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #223313 - should do random generated IV param
        for symmetric keys
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #648757 - expose and use updated cert verification
        function in JSS
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing
        e.c. support
  -     Bugzilla Bug #651040 - cloning shoud not include sslserver
  -     Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to
        CS.cfg files imcomplete when the cert is stored on a hsm
  -     Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . .
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #642359 - CC Feature - need to verify certificate when it
        is added
  -     Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires
        auditing
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an
        error to TPS even if certificate in question is already revoked.
  -     Bugzilla Bug #663546 - Disable the functionalities that are not exposed
        in the console
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #642741 - CS build uses deprecated functions
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  - 'pki-selinux'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer -
        selinux changes
  - 'pki-ca'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of
        CC interface doc review
  -     Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with
        admin privilege throws error "You are not authorized to perform this
        operation".
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws
        'Internal Server Error'.
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA
        release -- DRM and TKS do not seem to have CRL checking enabled
  -     Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help
        correctly set up CC environment
  -     Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in
        certificates (RFC 4262)
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object
        signing support in RHCS
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke
        certs in TPS
  -     Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature 
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #223346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key
        usage
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-silent'
  -     Bugzilla Bug #627309 - pkisilent subca configuration fails.
  -     Bugzilla Bug #640091 - pkisilent panels need to match with changed java
        subsystems
  -     Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM
        Clone.
  -     Bugzilla Bug #643053 - pkisilent DRM configuration fails
  -     Bugzilla Bug #583754 - pki-silent needs an option to configure signing
        algorithm for CA certificates
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module
        Panel up to before Security Domain Panel
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #588323 - Failed to enable cipher 0xc001
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves,
        signing algorithm
  -     Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords
        with special characters
  -     Bugzilla Bug #642741 - CS build uses deprecated functions


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-2
changelog:
  - 'pki-symkey'
  -     Bugzilla Bug #671265 - pki-symkey jar version incorrect
  - 'pki-common'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-3
changelog:
  - Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files
    in /var/run and /var/lock


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes
  - 'pki-setup'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  - 'pki-common'
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment"
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection
        error.
  -     Bugzilla Bug #504056 - Completed SCEP requests are assigned to the
        "begin" state instead of "complete".
  -     Bugzilla Bug #504055 - SCEP requests are not properly populated
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment" -
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  -     Bugzilla Bug #672920 - CA console: adding policy to a profile throws
        'Duplicate policy' error in some cases.
  -     Bugzilla Bug #673199 - init script returns control before web apps have
        started
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #504013 - sscep request is rejected due to authentication
        error if submitted through one time pin router certificate enrollment.
  -     Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing
        information
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-silent'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.4-1
changelog:
  - Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha)
  - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
    instance
  - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found
  - 'pki-setup'
  -     Bugzilla Bug #678157 - uninitialized variable warnings from Perl
  -     Bugzilla Bug #679574 - Velocity fails to load all dependent classes
  -     Bugzilla Bug #680420 - xml-commons-apis.jar dependency
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath
  -     Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library
        name for SafeNet LunaSA
  - 'pki-common'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #678715 - netstat loop fixes needed
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  - 'pki-selinux'
  -     Bugzilla Bug #674195: SELinux error message thrown during token
        enrollment
  - 'pki-ca'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  -     Bugzilla Bug #676330 - init script cannot start service
  - 'pki-silent'
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.5-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Require "jss >= 4.2.6-15" as a build and runtime requirement
  - Require "tomcatjss >= 2.1.1" as a build and runtime requirement
    for Fedora 15 and later platforms
  - 'pki-setup'
  -     Bugzilla Bug #688287 - Add "deprecation" notice regarding using
        "shared ports" in pkicreate -help . . .
  -     Bugzilla Bug #688251 - Dogtag installation under IPA takes
        too much time - SELinux policy compilation
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple
        extensions
  - 'pki-common'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled
        on the EE port
  - 'pki-selinux'
  -     Bugzilla Bug #684871 - ldaps selinux link change
  - 'pki-ca'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.(profile and CS.cfg only)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.6-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Bugzilla Bug #693327 - Missing requires: tomcatjss
  - 'pki-setup'
  -     Bugzilla Bug #690626 - pkiremove removes the registry entry for
        all instances on a machine
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.
  - 'pki-common'
  -     Bugzilla Bug #692990 - Audit log messages needed to match CC doc:
        DRM Recovery audit log messages
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.7-1
changelog:
  - 'pki-setup'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -     Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs
        throws 'Invalid protocol' for OCSP subsystems
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #694143 - CA Agent not returning specified request
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #698885 - Race conditions during IPA installation
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #699837 - service command is not fully backwards compatible
        with Dogtag pki subsystems
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #532548 - Tool to do DRM re-key
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-2
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Added 'DRMTool.cfg' configuration file to inventory
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.9-1
changelog:
  - Updated release of 'jss'
  - Updated release of 'tomcatjss' for Fedora 15
  - 'pki-setup'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-symkey'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-native-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #717765 - TPS configuration: logging into security domain
         from tps does not work with clientauth=want. (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-util'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-java-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record
         processing) (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #695403 - Editing signedaudit or transaction, system
         logs throws 'Invalid protocol' for OCSP subsystems (alee)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (alee)
  -      Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (jmagne)
  -      Bugzilla Bug #698885 - Race conditions during IPA installation (alee)
  -      Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface:
         SubjectID=$Unidentified$ fails audit evaluation (jmagne)
  -      Bugzilla Bug #705914 - SCEP mishandles nicknames when processing
         subsequent SCEP requests. (awnuk)
  -      Bugzilla Bug #661142 - Verification should fail when a revoked
         certificate is added. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #707416 - additional audit messages for GetCookie (alee)
  -      Bugzilla Bug #707607 - Published certificate summary has list of
         non-published certificates with succeeded status (jmagne)
  -      Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated
         for tps and ca on server shutdown (jmagne)
  -      Bugzilla Bug #697939 - DRM signed audit log message - operation should
         be read instead of modify (jmagne)
  -      Bugzilla Bug #718427 - When audit log is full, server continue to
         function. (alee)
  -      Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in
         CA's signedaudit log when a directory based user enrollment is
         performed (jmagne)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-selinux'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #720503 - RA and TPS require additional SELinux
         permissions to run in "Enforcing" mode (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-ca'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #699837 - service command is not fully backwards
         compatible with Dogtag pki subsystems (mharmsen)
  -      Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
         administrator group. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee
         pages (alee)
  -      Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs
         for a revocation invoked by EE user (awnuk)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-silent'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.10-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #720510 - Console: Adding a certificate into nethsm
         throws Token not found error. (jmagne)
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  -      Bugzilla Bug #722989 - Registering an agent when a subsystem is
         created - does not log AUTHZ_SUCCESS event. (alee)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert
         (awnuk)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.11-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -      Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by
         renumbering "cn=<value>" (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like
         (jmagne, awnuk)
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  -      Bugzilla Bug #708075 - Clone installation does not work over NAT
         (alee)
  -      Bugzilla Bug #726785 - If replication fails while setting up a clone
         it will wait forever (alee)
  -      Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk)
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-ca'
  -      Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs
         in IPA profile (awnuk)
  - 'pki-silent'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.12-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  -      Bugzilla Bug #717643 - Fopen without NULL check and other Coverity
         issues (awnuk)
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #700522 - pki tomcat6 instances currently running
         unconfined, allow server to come up when selinux disabled (alee)
  -      Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated
         correctly when subsystem cloned (using hsm) (alee)
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-silent'


author: Ade Lee <alee@redhat.com> 9.0.13-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-ca'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-common'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.14-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-symkey'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-java-tools'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-common'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-silent'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.15-1
changelog:
  - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen)
  - Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-setup'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee)
  - 'pki-symkey'
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-native-tools'
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-util'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737218 - Incorrect request attribute name matching
         ignores request attributes during request parsing. (awnuk)
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-selinux'
  -      Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-silent'
  -      Bugzilla Bug #739201 - pkisilent does not take arch into account
         as Java packages migrated to arch-dependent directories (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.16-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after
         the in-place upgrade( CS 8.0->8.1) (cfu)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #746367 - Typo in the profile name. (jmagne)
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  -      Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17
         (rawhide) . . . (mharmsen)
  -      Bugzilla Bug #749945 - Installation error reported during CA, DRM,
         OCSP, and TKS package installation . . . (mharmsen)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.2.a1
changelog:
  - Integrated 'pki-kra' into 'pki-core'
  - Integrated 'pki-ocsp' into 'pki-core'
  - Integrated 'pki-tks' into 'pki-core'
  - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.3.a1
changelog:
  - Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes
    in fundamental path structure in Fedora 17
  - 'pki-setup'
  -      Hard-code Perl dependencies to protect against bugs such as
         Bugzilla Bug #772699 - Adapt perl and python fileattrs to
         changed file 5.10 magics
  - 'pki-selinux'
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess


author: Ade Lee <alee@redhat.com> 10.0.0-0.5.a1
changelog:
  - 'pki-selinux'
  -      Added platform-dependent patches for SELinux component
  -      Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16)
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.7.a1
changelog:
  - For 'mock' purposes, removed platform-specific logic from around
    the 'patch' files so that ALL 'patch' files will be included in
    the SRPM.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.9.a1
changelog:
  - Initial attempt at PKI deployment framework described in
    'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.


author: Ade Lee <alee@redhat.com> 10.0.0-0.11.a1
changelog:
  - BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes
  - Corrected patch selected for selinux f17 rules


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.16.a1
changelog:
  - Integration of Tomcat 7
  - Addition of centralized 'pki-tomcatd' systemd functionality to the
    PKI Deployment strategy
  - Removal of 'pki_flavor' attribute


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.23.a1
changelog:
  - Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17
  - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy'
  - Altered PKI Package Dependency Chain (top-to-bottom):
    pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.24.a1
changelog:
  - Split pki-common into pki-base and pki-server.
  - Merged pki-util into pki-base.
  - Merged pki-deploy into pki-server.


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.25.a1
changelog:
  - Merged pki-native-tools and pki-java-tools into pki-tools.
  - Modified pki-server to depend on pki-tools.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.32.a1
changelog:
  - TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances
    upon RPM "update" . . .
  - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy"
    from /usr/bin to /usr/sbin . . .


author: Ade Lee <alee@redhat.com> 10.0.0-0.53.b3
changelog:
  - Cleaned up spec file to provide only support rhel 7+, f17+
  - Added resteasy-base dependency for rhel 7
  - Update cmake version


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.56.b3
changelog:
  - TRAC Ticket #315 - Man pages for pkispawn/pkidestroy.
  - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-4
changelog:
  - TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and
    dogtag-pki.spec . . .
  - TRAC Ticket #468 - pkispawn throws exception


author: Ade Lee <alee@redhat.com> 10.0.1-1
changelog:
  - TRAC Ticket 214 - Missing error description for duplicate user
  - TRAC Ticket 213 - Add nonces for cert revocation
  - TRAC Ticket 367 - pkidestroy does not remove connector
  - TRAC Ticket #430 - License for 3rd party code
  - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP
  - Fix spec file to allow f17 to work with latest tomcatjss
  - TRAC Ticket 466 - Increase root CA validity to 20 years
  - TRAC Ticket 469 - Fix tomcatjss issue in spec files
  - TRAC Ticket 468 - pkispawn throws exception
  - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes
  - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . .
  - TRAC Ticket 437 - Make admin cert p12 file location configurable
  - TRAC Ticket 393 - pkispawn fails when selinux is disabled
  - Punctuation and formatting changes in man pages
  - Revert to using default config file for pkidestroy
  - Hardcode setting of resteasy-lib for instance
  - TRAC Ticket 436 - Interpolation for pki_subsystem
  - TRAC Ticket 433 - Interpolation for paths
  - TRAC Ticket 435 - Identical instance id and instance name
  - TRAC Ticket 406 - Replace file dependencies with package dependencies


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-2
changelog:
  - Removed runtime dependency on 'pki-server-theme' to resolve
    Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-3
changelog:
  - TRAC Ticket #517 - Clean up theme dependencies
  - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .


author: Endi S. Dewata <edewata@redhat.com> 10.0.1-9
changelog:
  - Renamed base/deploy to base/server.
  - Moved pki.conf into pki-base.
  - Removed redundant pki/server folder declaration.


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-0.7
changelog:
  - Added pki-server-upgrade script and pki.server module.
  - Call upgrade scripts in %post for pki-base and pki-server.


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-2
changelog:
  - Added default pki.conf in /usr/share/pki/etc
  - Create upgrade tracker on install and remove it on uninstall


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.0-0.2
changelog:
  - TRAC Ticket 606 - add restart / start at boot info to pkispawn man page
  - TRAC Ticket 610 - Document limitation in using GUI install
  - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory


author: Abhishek Koneru <akoneru@redhat.com> 10.1.0.0.9
changelog:
  - Listed new packages required during build, due to issues reported
    by pylint.
  - Packages added: python-requests, python-ldap, libselinux-python,
                    policycoreutils-python


author: Ade Lee <alee@redhat.com> 10.1.0-1
changelog:
  - Trac Ticket 788 - Clean up spec files
  - Update release number for release build
  - Updated requirements for resteasy


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.0-2
changelog:
  - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python
  - TRAC Ticket #840 - pkispawn requires policycoreutils-python


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.1-1
changelog:
  - PKI TRAC Ticket #840 - pkispawn requires policycoreutils-python (mharmsen)
  - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python (mharmsen)
  - PKI TRAC Ticket #868 - REST API get certs links missing segment
                           (alee, mharmsen)
  - PKI TRAC Ticket #869 - f19 ipa-server-install fails at step 6/22 of cert sys
                           install - systemctl start pki-tomcatd.target fails
                           (mharmsen)
  - PKI TRAC Ticket #816 - pki-tomcat cannot be started after installation of
                           ipa replica with ca
                           (alee, cfu, edewata, mharmsen)
  - Updated version number.


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.1-2
changelog:
  - Add missing 'jakarta-commons-httpclient' build and runtime requirement
  - Exclude the 'ppcle' and 'ppc64le' platforms from being built on RHEL platforms
  - Update 'resteasy-base' requirements on RHEL platforms
  - Suppress pylint on RHEL platforms


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.2-2
changelog:
  - Bugzilla Bug #1108303 - Rebase pki-core to 10.1 (RHEL)
  - Bugzilla Bug #1117073 - pki-core ppc64le is missing from ExcludeArch line
    of spec file (RHEL)
  - Bumped required runtime version of tomcat >= 7.0.54 (RHEL)
  - Changed buildtime requirement from 'resteasy-base-jackson-provider >= 3.0.6-1'
    to 'resteasy-base-jettison-provider >= 3.0.6-1' (RHEL)
  - Added version number of '>= 3.0.6-1' to runtime requirements for all
    'resteasy-base' packages (RHEL)


author: Christina Fu <cfu@redhat.com> 10.1.2-3
changelog:
  - Bugzilla Bug #790924 - pkispawn (configuration) does not provide CA
    extensions in subordinate certificate signing requests (CSR)


author: Christina Fu <cfu@redhat.com> 10.1.2-4
changelog:
  - Bugzilla Bug #1151147 -  External CA install does not work
    with CA certificates signed by Microsoft Certificate Services


author: Christina Fu <cfu@redhat.com> 10.1.2-5
changelog:
  - Bugzilla Bug #1155654 - Check for null values in GetConfigEntries (alee)
  - Bugzilla Bug #1158410 - Add TLS Range in server.xml (cfu)
  - Bugzilla Bug #871171 - Provide Tomcat support for TLS v1.1 and TLS v1.2
    (client-side code) (cfu)
  - Updated JSS from "4.2.6-28" to "4.2.6-35" (TLS)
  - Require tomcatjss "7.1.0-5" (TLS)


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.2-7
changelog:
  - Bugzilla Bug #1165351 - Errata TPS test fails due to dependent
    packages not found - fixed shell tests


author: Ray Strode <rstrode@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - Integrate more tightly with nash (pending nash changes)
  - ship libs for out of tree splash plugins
  - gradient support
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
  - Better plugin handling
  - Better integration with mkinitrd (pending mkinitrd changes)
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
  - show gradient in spinfinity plugin
  - Drop fade out in spinfinity plugin
  - fix throbber placement
  - rename graphical.so to default.so


author: Ray Strode <rstrode@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - Only run if rhgb is on kernel command line
  - Make text plugin more animated


author: Ray Strode <rstrode@redhat.com> - 0.5.0-1
changelog:
  - Add new client "ask-for-password" command which feeds
    the user input to a program instead of standard output,
    and loops when the program returns non-zero exit status.


author: Ray Strode <rstrode@redhat.com> - 0.5.0-2
changelog:
  - Pull in spinfinity by default.  This whole "figure out
    which plugin to use" set of scripts and scriptlets
    needs work.  We need to separate distro default from
    user choice.


author: Peter Jones <pjones@redhat.com> - 0.5.0-7
changelog:
  - Make it a mkinitrd requires instead of a nash requires (that will
    still pull in nash, but we need mkinitrd for newer plymouth-populate-initrd)


author: Ray Strode <rstrode@redhat.com> - 0.5.0-8.2008.07.31
changelog:
  - Update to snapshot to get new plymouth-populate-initrd features
  - Make removing rhgb use details plugin instead of exiting


author: Ray Strode <rstrode@redhat.com> - 0.5.0-13.2008.08.07
changelog:
  - Update to new snapshot which when combined with a new mkinitrd should
    make unlocking encrypted root partitions work again


author: Adam Jackson <ajax@redhat.com> 0.5.0-15.2008.08.08
changelog:
  - plymouth-0.5.0-textbar-hotness.patch: Change the text plugin to a slightly
    more traditional progress bar, to maintain the illusion of progress better
    than the eternally oscillating cylon. Note: still incomplete.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27
changelog:
  - Update to latest snapshot
  - Add the ability to show text prompts in graphical plugin
  - Fix crasher for users with encrypted disks


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27.1
changelog:
  - Fix another crasher for users with encrypted disks (this time in
    the text plugin, not the client)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.09.25.1
changelog:
  - Add new snapshot to fold in Will Woods progress bar, and
    move ajax's splash upstream, putting the old text splash
    in a "pulser" subpackage


author: Jeremy Katz <katzj@redhat.com> 0.6.0-0.2008.09.25.2
changelog:
  - Remove mkinitrd requires to break the dep loop and ensure things
    get installed in the right order


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.06.1
changelog:
  - Add "Solar" plugin from Charles Brej
  - Move things around so computers with separate /usr boot
    (hopefully this won't break things, but it probably will)
  - Make GDM show up on vt1 for all plugins


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.2
changelog:
  - Move plymouth-set-default-plugin to -libs (might help with bug 467356)
  - Fix up requires, provides and postun scripts


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.3
changelog:
  - Move plymouth-set-default-plugin, plymouth-update-initrd, and
    plymouth-populate-initrd to plymouth-scripts subpackage
    (the last fix didn't actually help with bug 467356)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.17.1
changelog:
  - Clear screen in details plugin when it's done
  - Make plymouth-update-initrd a small wrapper around mkinitrd instead
    of the broken monstrosity it was before.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.1
changelog:
  - Minor event loop changes
  - drop upstream patches
  - Charlie Brej fix for progress bar resetting when escape gets pressed


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.2
changelog:
  - add text-and-details-only subpackage so davej can uninstall
    spinfinity, pango, cairo etc from his router.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.1
changelog:
  - Add patch from Charlie to align progress bar to milestones during boot up
  - force tty to be sane on exit (bug 467207)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.2
changelog:
  - Bump so name of libply to hopefully force plymouth to get installed
    before kernel (or at least make plymouth-libs and plymouth get installed
    on the same side of kernel in the transaction).


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.24.1
changelog:
  - Add updated progress bar for solar plugin from Charlie
  - Log plymouth:debug output to boot log
  - Ignore sigpipe signals in daemon


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.27.6
changelog:
  - Force raw mode for keyboard input with solar and fade-in
    (bug 468880)
  - make sure windows get closed on exit


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.30.1
changelog:
  - Drop upstreamed patches
  - Patch from Charlie to update artwork
  - Patch from Charlie to make password screen match animation better
    (bug 468899)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.06.1
changelog:
  - Don't exit on plymouth --show-splash after sulogin
  - Properly retake console after that --show-splash


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.11.2
changelog:
  - Improve solar flares (Charlie)
  - redirect tty again on --show-splash
  - ignore subsequent --hide-splash calls after the first one
  - turn off kernel printks during boot up


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.12.4
changelog:
  - Move Obsoletes: plymouth-text-and-details-only to base package
    so people who had it installed don't end up solar on upgrade


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.14.1
changelog:
  - Generate solar background dynamically to reduce ondisk size, and
    look better at various resolutions (Charlie, bug 471227)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.17.3
changelog:
  - don't give error about missing default.so
  - rework packaging of boot-duration to prevent .rpmnew droppings
    (bug 469752)


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.06
changelog:
  - Updated to development snapshot
  - Guess progress better on second boot of persistent live images
  - Drop upstream patches
  - swap "solar" and "spinfinity" scriptlet behavior


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.10.1
changelog:
  - Address one more issue with password handling.  It wasn't working
    well for secondary devices when using the "details" plugin.


author: Jesse Keating <jkeating@redhat.com> - 0.7.0-0.2009.03.10.3
changelog:
  - Drop the version on system-logos requires for now, causing hell with
    other -logos providers not having the same version.


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110419.1
changelog:
  - unlock tty when reopening in case it spontaenously goes bonkers
    and we need to fix it up
    Resolves: #655538


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110822.1
changelog:
  - Update to latest git snapshot
  - Reintroduce accidentally dropped spinner theme and systemd integration


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110809.3
changelog:
  - Change spec based on suggestion from Nicolas Chauvet <kwizart@gmail.com>
    to fix scriptlet error during livecd creation
    Resolves: #666419


author: Ray Strode <rstrode@redhat.com> 0.8.6-1
changelog:
  - Update to 0.8.6
  - Fixes encrypted fs bug
    Resolves: #830482
  - Adds support for offline package updates


author: Tom Callaway <spot@fedoraproject.org> - 0.8.6.1-3
changelog:
  - fix bz704658 (thanks to Ian Pilcher for the patch), resolves issue where spinfinity theme
    never goes idle and thus, never exits to gdm


author: Dave Airlie <airlied@redhat.com> 0.8.6.2-1.2012.07.23
changelog:
  - fix plymouth race at bootup breaking efi/vesa handoff.
  - fix version number - its against fedora package policy to have 0.year


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2013.12.10.1
changelog:
  - Update to latest snapshot, but revert text splash back to tribar
  - Fixes systemd unit files and lets us drop our upstreamed patches
    Resolves: #1040015
  - Uses udev for device enumeration
    Resolves: #1026571
  - Correct "charge" theme description


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2014.01.10.1
changelog:
  - Update to latest snapshot
  - Fixes ask-for-password feature
    Resolves: #1043689
  - Drops bogus delay when hitting escape
    Resolves: #1049379


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.3.20140113
changelog:
  - Read OS string from REDHAT_BUGZILLA_PRODUCT instead of PRETTY_NAME
    in /etc/os-release to work around a lorax bug.
    Resolves: #911553
  - Fix text splash when explicitly configured by user
    Related: #911553
    Related: #1026571


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.9.20140113
changelog:
  - Ignore early fb devices
    Resolves: #1063758
    Resolves: #1064235
    Resolves: #1066641
  - Ignore udev if using lone serial console
    Resolves: #1058049
  - Fix password at start up race
    Resolves: #1070707
    Resolves: #1073145


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local;
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
  	* Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol.
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
  	semodule utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  		* audit2allow: process MAC_POLICY_LOAD events
  		* newrole: run shell with - prefix to start a login shell
  		* po: po file updates
  		* restorecond: bail if SELinux not enabled
  		* fixfiles: omit -q
  		* genhomedircon:  fix exit code if non-root
  		* semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan.
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy.
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk>
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
  	and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
  	* Add semanage dontaudit to turn off dontaudits from Dan Walsh.
  	* Fix semanage to set correct mode for setrans file from Dan Walsh.
  	* Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additional capability checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session.
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
  	* run_init: clarification of the usage in the
  	* semanage: fix usage header around booleans
  	* semanage: remove useless empty lines
  	* semanage: update man page with new examples
  	* semanage: update usage text
  	* semanage: introduce file context equivalencies
  	* semanage: enable and disable modules
  	* semanage: output all local modifications
  	* semanage: introduce extraction of local configuration
  	* semanage: cleanup error on invalid operation
  	* semanage: handle being called with no arguments
  	* semanage: return sooner to save CPU time
  	* semanage: surround getopt with try/except
  	* semanage: use define/raise instead of lots of
  	* semanage: some options are only valid for
  	* semanage: introduce better deleteall support
  	* semanage: do not allow spaces in file
  	* semanage: distinguish between builtin and local permissive
  	* semanage: centralized ip node handling
  	* setfiles: make the restore function exclude() non-static
  	* setfiles: use glob to handle ~ and
  	* fixfiles: do not hard code types
  	* fixfiles: stop trying to be smart about
  	* fixfiles: use new kernel seclabel option
  	* fixfiles: pipe everything to cat before sending
  	* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
  	* semodule: support for alternative root paths

  2.1.3 2011-08-03
  	* semanage: fix indention
  	* semodule_package: fix man page typo
  	* semodule_expand: update man page with -a
  	* semanage: handle os errors
  	* semanage: fix traceback with bad options
  	* semanage: show usage on -h or --help
  	* semanage: introduce more deleteall options
  	* semanage: verify ports < 65536
  	* transaction into semanageRecords
  	* make get_handle a method of semanageRecords
  	* remove a needless blank line
  	* make process_one error if not initialized correctly
  	* fixfiles: correct usage for r_opts.rootpath
  	* put -p in help for restorecon and
  	* fixfiles: do not try to only label
  	* fixfiles clean up /var/run and /var/lib/debug
  	* fixfiles delete tmp sockets and pipes rather
  	* fixfile use find -delete instead of pipe
  	* chcat man page typo
  	* add man page for genhomedircon
  	* setfiles fix typo
  	* setsebool should inform users they need to
  	* setsebool typos
  	* open_init_tty man page typos
  	* Don't add user site directory to sys.path
  	* newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
  	* seunshare: define _GNU_SOURCE earlier
  	* make ignore_enoent do something
  	* restorecond: first user logged in is not noticed
  	* Repo: update .gitignore

  2.1.1 2011-08-01
  	* Man page updates
  	* restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
  	* Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
  	* setfiles: Fix process_glob to handle error situations
  	* sandbox: Allow seunshare to run as root
  	* sandbox: trap sigterm to make sure sandbox
  	* sandbox: pass DPI from the desktop
  	* sandbox: seunshare: introduce helper spawn_command
  	* sandbox: seunshare: introduce new filesystem helpers
  	* sandbox: add -C option to not drop
  	* sandbox: split seunshare caps dropping
  	* sandbox: use dbus-launch
  	* sandbox: numerous simple updates to sandbox
  	* sandbox: do not require selinux context
  	* sandbox: Makefile: new man pages
  	* sandbox: rename dir to srcdir
  	* sandbox: allow users specify sandbox window size
  	* sandbox: check for paths up front
  	* sandbox: use defined values for paths rather
  	* sandbox: move seunshare globals to the top
  	* sandbox: whitespace fix
  	* semodule_package: Add semodule_unpackage executable
  	* setfiles: get rid of some stupid globals
  	* setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
  	* refparser: include open among valid permissions
  	* refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
  	* sepolgen-ifgen: new attr-helper does something
  	* audit2allow: use alternate policy file
  	* audit2allow: sepolgen-ifgen use the attr helper
  	* setfiles: switch from stat to stat64
  	* setfiles: Fix potential crash using dereferenced ftsent
  	* setfiles: do not wrap * output at 80 characters
  	* sandbox: add -Wall and -Werror to makefile
  	* sandbox: add sandbox cgroup support
  	* sandbox: rewrite /tmp handling
  	* sandbox: do not bind mount so much
  	* sandbox: add level based kill option
  	* sandbox: cntrl-c should kill entire process control group
  	* Create a new preserve_tunables flag in sepol_handle_t.
  	* semanage: show running and disk setting for booleans
  	* semanage: Dont print heading if no items selected
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
  	* More files to ignore
  	* tree: default make target to all not install
  	* sandbox: do not load unused generic init functions
      sepolgen-1.1.2
  	* src: sepolgen: add attribute storing infrastructure
  	* Change perm-map and add open to try to get better results on
  	* look for booleans that might solve problems
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
  	* sandbox: Maintain the LANG environment into the sandbox
  	* audit2allow: use audit2why internally
  	* fixfiles: label /root but not /var/lib/BackupPC
  	* semanage: update local boolean settings is dealing with localstore
  	* semanage: missing modify=True
  	* semanage: set modified correctly
  	* restorecond: make restorecond dbuss-able
  	* restorecon: Always check return code on asprintf
  	* restorecond: make restorecond -u exit when terminal closes
  	* sandbox: introduce package name and language stuff
  	* semodule_package: remove semodule_unpackage on clean
  	* fix sandbox Makefile to support DESTDIR
  	* semanage: Add -o description to the semanage man page
  	* make use of the new realpath_not_final function
  	* setfiles: close /proc/mounts file when finished
  	* semodule: Document semodule -p in man page
  	* setfiles: fix use before initialized
  	* restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
  	* Ignore permissive qualifier if found in an interface
  	* Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
  	* sandbox: move sandbox.conf.5 to just sandbox.5
  	* po: Makefile use -p to preserve times to allow multilib simultatious installs
  	* of po files
  	* sandbox: Allow user to specify the DPI value for X in a sandbox
  	* sandbox: make sure the domain launching sandbox has at least 100 categories
  	* sandbox: do not try forever to find available category set
  	* sandbox: only complain if sandbox unable to launch
  	* sandbox: init script run twice is still successful
  	* semanage: print local and dristo equiv rules
  	* semanage: check file equivalence rules for conflict
  	* semanage: Make sure semanage fcontext -l -C prints even if local keys
  	* are not defined
  	* semanage: change src,dst to target,substitute for equivalency
  	* sestatus: Updated sestatus and man pages.
  	* Added SELinux config file man page.
  	* add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
  	* better analysis of why things broke
  - policycoreutils
  	* Remove excess whitespace
  	* sandbox: Add back in . functions to sandbox.init script
  	* Fix Makefile to match other policycoreutils Makefiles
  	* semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* sandbox: do not propogate inside mounts outside
  	* sandbox: Removing sandbox init script, should no longer be necessary
  	* restorecond: Stop using deprecated interfaces for g_io
  	* semanage: proper auditting of user changes for LSPP
  	* semanage: audit message to show what record(s) and item(s) have chaged
  	* scripts: Update Makefiles to handle /usrmove
  	* mcstrans: Version should have been bumped on last check in
  	* seunshare: Only drop caps not the Bounding Set from seunshare
  	* Add bash-completion scripts for setsebool and semanage
  	* newrole: Use correct capng calls in newrole
  	* Fix infinite loop with inotify on 2.6.31 kernels
  	* fix ftbfs with hardening flags
  	* Only run setfiles if we found read-write filesystems to run it on
  	* update .po files
  	* remove empty po files
  	* do not fail to install if unable to make load_policy lnk file

     - sepolgen
  	* Fix dead links to www.nsa.gov/selinux
  	* audit.py Dont crash if empty data is passed to sepolgen
  	* do not use md5 when calculating hash signatures
  	* fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* restorecond: wrong options should exit with non-zero error code
  	* restorecond: Add -h option to get usage command
  	* resorecond: user: fix fd leak
  	* mcstrans: add -f to run in foreground
  	* semanage: fix man page range and level defaults
  	* semanage: bash completion for modules should include -a,-m, -d
  	* semanage: manpage update for -e
  	* semanage: dontaudit off should work
  	* semanage: locallist option does not take an argument
  	* sepolgen: Make use of setools optional within sepolgen
     - sepolgen
  	* Make use of setools optional within sepolgen
  	* We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream
  	* genhomedircon: manual page improvements
  	* setfiles/restorecon minor improvements
  	* run_init: If open_init_pty is not available then just use exec
  	* newrole: do not drop capabilities when newrole is run as
  	* restorecon: only update type by default
  	* scripts: Don't syslog setfiles changes on a fixfiles restore
  	* setfiles: do not syslog if no changes
  	* Disable user restorecond by default
  	* Make restorecon return 0 when a file has changed context
  	* setfiles: Fix process_glob error handling
  	* semanage: allow enable/disable under -m
  	* add .tx to gitignore
  	* translations: commit translations from Fedora community
  	* po: silence build process
  	* gui: Checking in policy to support polgengui and sepolgen.
  	* gui: polgen: search for systemd subpackage when generating policy
  	* gui: for exploring booleans
  	* gui: system-config-selinux gui
  	* Add Makefiles to support new gui code
  	* gui: remove lockdown wizard
  	* return equivalency records in fcontext customized
  	* semanage: option to not load new policy into kernel after
  	* sandbox: manpage update to describe standard types
  	* setsebool: -N should not reload policy on changes
  	* semodule: Add -N qualifier to no reload kernel policy
  	* gui: polgen: sort selinux types of user controls
  	* gui: polgen: follow symlinks and get the real path to
  	* gui: Fix missing error function
  	* setfiles: return errors when bad paths are given
  	* fixfiles: tell restorecon to ignore missing paths
  	* setsebool: error when setting multiple options
  	* semanage: use boolean subs.
  	* sandbox: Make sure Xephyr never listens on tcp ports
  	* sepolgen: return and output constraint violation information
  	* semanage: skip comments while reading external configuration files
  	* restorecond: relabel all mount runtime files in the restorecond example
  	* genhomedircon: dynamically create genhomedircon
  	* Allow returning of bastard matches
  	* sepolgen: return and output constraint violation information
  	* audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands.
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  -  Additional changes for bash completsion and generate man page to match the w
  -  Add newtype as a new qualifier to sepolicy generate.  This new mechanism wil
  -  a policy write to generate types after the initial policy has been written a
  -  will autogenerate all of the interfaces.
  -  I also added a -w options to allow policy writers from the command line to s
  -  the writable directories of files.
  -
  -  Modify network.py to include interface definitions for newly created port type
  -  Standardize of te_types just like all of the other templates.

  -  Change permissive domains creation to raise exception if sepolgen is not ins
  -  get_te_results no longer needs or uses the opts parameter.
  -  The compliler was complaining so I just removed the option.
  -  Start returning analysis data for audit2allow


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
changelog:
  - Update to latest patches from eparis/Upstream
  - fixfiles onboot will write any flags handed to it to /.autorelabel.
  -   * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
  -   * This should allow fixfiles -F onboot, to force a hard relabel.
  - Add -p to show progress on full relabel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-58
changelog:
  - Reorginize sepolicy so all get_all functions are in main module
  - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
changelog:
  - Update to upstream
  	* setfiles: estimate percent progress
  	* load_policy: make link at the destination directory
  	* Rebuild polgen.glade with glade-3
  	* sepolicy: new command to unite small utilities
  	* sepolicy: Update Makefiles and po files
  	* sandbox: use sepolicy to look for sandbox_t
  	* gui: switch to use sepolicy
  	* gui: sepolgen: use sepolicy to generate
  	* semanage: use sepolicy for boolean dictionary
  	* add po file configuration information
  	* po: stop running update-po on all
  	* semanage: seobject verify policy types before allowing you to assign them.
  	* gui: Start using Popen, instead of os.spawnl
  	* sandbox: Copy /var/tmp to /tmp as they are the same inside
  	* qualifier to shred content
  	* semanage: Fix handling of boolean_sub names when using the -F flag
  	* semanage: man: roles instead of role
  	* gui: system-config-selinux: Catch no DISPLAY= error
  	* setfiles: print error if no default label found
  	* semanage: list logins file entries in semanage login -l
  	* semanage: good error message is sepolgen python module missing
  	* gui: system-config-selinux: do not use lokkit
  	* secon: add support for setrans color information in prompt output
  	* restorecond: remove /etc/mtab from default list
  	* gui: If you are not able to read enforcemode set it to False
  	* genhomedircon: regenerate genhomedircon more often
  	* restorecond: Add /etc/udpatedb.conf to restorecond.conf
  	* genhomedircon generation to allow spec file to pass in SEMODULE_PATH
  	* fixfiles: relabel only after specific date
  	* po: update translations
  	* sandbox: seunshare: do not reassign realloc value
  	* seunshare: do checking on setfsuid
  	* sestatus: rewrite to shut up coverity


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-4
changelog:
  - Revert some changes which are causing the wrong policy version file to be created
  - Switch sandbox to start using openbox rather then matchbox
  - Make sepolgen a symlink to sepolicy
  - update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-6
changelog:
  - Fix newrole to retain cap_audit_write when compiled with namespace, also
  do not drop capabilities when run as root.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-7
changelog:
  - Add --root/-r flag to sepolicy manpage,
  - This allows us to generate man pages on the fly in the selinux-policy build


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-8
changelog:
  - Sepolixy should not throw an exception on an SELinux disabled machine
  - Switch from using console app to using pkexec, so we will work better
  with policykit.
  - Add missing import to fix system-config-selinux startup
  - Add comment to pamd files about pam_rootok.so
  - Fix sepolicy generate to not comment out the first line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
changelog:
  - Fix sepolicy to be able to work on an SELinux disabled system.
  - Needed to be able to build man pages in selinux-policy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-12
changelog:
  - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.1.14-13
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-14
changelog:
  - Allow users with symlinked homedirs to work. call realpath on homedir
  - Fix sepolicy reorganization of helper functions.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-20
changelog:
  - Mention creation of permissive domains in sepolicy generate man page
  - Change sepolicy manpage to use shortname with an "_" to stop accidently grabbing unrelated types for a domain.
  - Fix audit2allow to show better information on constraint violations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-21
changelog:
  - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-22
changelog:
  - Fix newrole to not drop capabilities from the bounding set.
  - Stop dropping capabilities from its children.
  - Add better error messages.
  - Change location of bash_completion files to /usr/share/bash-completion/compl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-23
changelog:
  - sepolicy manpage:
  -   use nroff instead of man2html
  -   Remove checking for name of person who created the man page
  - audit2allow
  -   Fix output to show the level that is different.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-26
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-28
changelog:
  - Fix audit2allow output to better align analysys with the allow rules
  - Apply Miroslav Grepl patch to clean up sepolicy generate usage
  - Apply Miroslav Grepl patch to fixupt handing of admin_user generation
  - Update Tranlslations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-30
changelog:
  - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
  - Add support for returning alias data to sepolicy.info python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-31
changelog:
  - Add post install scripts for gui to make sure Icon Cache is refreshed.
  - Fix grammar issue in secon man page
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-32
changelog:
  - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
  - Apply Miroslav Grepl Patches for sepolicy
  -- Fix generate mutually groups option handling
  -- EUSER is used for existing policy
  -- customize options can be used together with admin_domain option
  -- Fix manpage.py to generate correct man pages for SELinux users
  -- Fix policy *.te file generated by customize+writepaths options
  -- Fix install script for confined_admin option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-34
changelog:
  - Update translations
  - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-35
changelog:
  - Update translations
  - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-37
changelog:
  - Fix exceptionion hanling in audit2allow -o
  - Generate Man pages for everydomain, not just ones with exec_t entrypoints
  - sepolicy comunicate should return ValueError not TypeError
  - Trim header line in sepolicy manpage to use less space
  - Add missing options to restorecon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-38
changelog:
  - No longer run sepolgen-ifgen at install time.
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-39
changelog:
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
  - Add  Sven Vermeulen  patches to cleanup man pages


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-40
changelog:
  - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-42
changelog:
  - Add support for Xephyr -resizable, so sandbox can now resize window
  - Add support for compressed policy.xml
  - Miroslav Grepl patch to allow sepolicy interface on individual interface fil
  - Also add capability to test interfaces for correctness.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
changelog:
  - Fix sepolicy-generate man page to clear up options/policy type
  - Add Miroslav Grepl to not generate man page when doing
    sepolicy generate --customize
  - Add support for executing semanage user within spec file
  - Fix generation of confined admin domains, to handle booleans properly.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-46
changelog:
  - Fix the name of the spec file generated in the build script
  - Add mgrepl patch to support argparse for semanage command parsing


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-48
changelog:
  - Fix audit2allow -o to open file for append
  - Fix the name of the spec file generated in the build script


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-50
changelog:
  - Fix sepolicy generate --confined_admin to generate tunables
  - Add new interface to generate entrypoints for use with new gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
changelog:
  - Fix semanage export/import commands
  - Fix semange module command
  - Remove --version option from sandbox


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-57
changelog:
  - Remove requires for systemd-sysv
  - Move systemd-units require to restorecond section
  - Update Tranlasions
  - More sepolicy interfaces for gui
  - Cleanup man pages for sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-63
changelog:
  - Update sepolicy gui.
  - Error out of you call sepolicy gui without policycoreutils-gui package installed
  - Fix semanage login -d command
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-65
changelog:
  - Do not generate shell script or spec file for sepolicy generate --newtype
  - Update translations
  - Fix sepolicy generate --admin_user man page again
  - Fix setsebool to print less verbose error messages by default, add -V for ve


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-68
changelog:
  - Fix bugs introduced by previous patch.  semanage port
  - Update Translations
  - Add test suite for sepolicy command lines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-75
changelog:
  - Update sepolicy gui code, cleanups and add file transition tab
  - Fix semanage fcontext -a --ftype code to work.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-79
changelog:
  - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
  - Additional help screens for sepolicy gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-80
changelog:
  - Random fixes for sepolicy gui
    * Do not prompt for password until you make a change
    * Add user mappings and selinux users page
    * lots of code cleanup

  - Verify homedir is owned by user before mounting over it with seunshare
  - Fix fixfiles to handle Relabel properly
  - Fix semanage fcontext -e / command to allow "/"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-82
changelog:
  - Improvements to sepolicy gui
    - Add more help information
    - Cleanup code
    - Add deny_ptrace on lockdown screen
    - Make unconfined/permissivedomains lockdown work
    - Add more support for file equivalency


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-85
changelog:
  - Fixes for fixfiles
    * exclude_from_dirs should apply to all types of restorecon calls
    * fixfiles check now works
    * exit with the correct status

  - semanage no longer import selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-86
changelog:
  - sepolicy gui
    - mgrepl added delete screens for users and login
    - Fix lots of bugs.
  - Update Translations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-88
changelog:
  - Cleanup errors found by pychecker
  - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs
  Resolves: #1018913


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-89
changelog:
  - Update to latest sepolicy tool chain.
  - Document semodule -P
  - Verify input to semanage permissive -a is a valid domain.
  - Assigning login user with semanage login, range should default to user record


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Properly build the swig exception file from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH and INITDIR in Makefile from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville.
  	* Fix init_policy warning from Laurent Bigonville.
  	* Fix semanage logging from Laurent Bigonville.
  	* Open newrole stdin as read/write from Sven Vermeulen.
  	* Fix sepolicy transition from Sven Vermeulen.
  	* Support overriding CFLAGS from Simon Ruderich.
  	* Create correct man directory for run_init from Russell Coker.
  	* restorecon GLOB_BRACE change from Michal Trunecka.
  	* Extend audit2why to report additional constraint information.
  	* Catch IOError errors within audit2allow from Dan Walsh.
  	* semanage export/import fixes from Dan Walsh.
  	* Improve setfiles progress reporting from Dan Walsh.
  	* Document setfiles -o option in usage from Dan Walsh.
  	* Change setfiles to always return -1 on failure from Dan Walsh.
  	* Improve setsebool error r eporting from Dan Walsh.
  	* Major overhaul of gui from Dan Walsh.
  	* Fix sepolicy handling of non-MLS policy from Dan Walsh.
  	* Support returning type aliases from Dan Walsh.
  	* Add sepolicy tests from Dan Walsh.
  	* Add org.selinux.config.policy from Dan Walsh.
  	* Improve range and user input checking by semanage from Dan Walsh.
  	* Prevent source or target arguments that end with / for substitutions from Dan Walsh.
  	* Allow use of <<none>> for semanage fcontext from Dan Walsh.
          * Report customized user levels from Dan Walsh.
  	* Support deleteall for restoring disabled modules from Dan Walsh.
  	* Improve semanage error reporting from Dan Walsh.
  	* Only list disabled modules for module locallist from Dan Walsh.
  	* Fix logging from Dan Walsh.
  	* Define new constants for file type character codes from Dan Walsh.
  	* Improve bash completions from Dan Walsh.
  	* Convert semanage to argparse from Dan Walsh (originally by Dave Quigley).
  	* Add semanage tests from Dan Walsh.
  	* Split semanage man pages from Dan Walsh.
  	* Move bash completion scripts from Dan Walsh.
  	* Replace genhomedircon script with a link to semodule from Dan Walsh.
  	* Fix fixfiles from Dan Walsh.
  	* Add support for systemd service for restorecon from Dan Walsh.
  	* Spelling corrections from Dan Walsh.
  	* Improve sandbox support for home dir symlinks and file caps from Dan Walsh.
  	* Switch sandbox to openbox window manager from Dan Walsh.
  	* Coalesce audit2why and audit2allow from Dan Walsh.
  	* Change audit2allow to append to output file from Dan Walsh.
  	* Update translations from Dan Walsh.
  	* Change audit2why to use selinux_current_policy_path from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-2
changelog:
  - Shift around some of the files to more appropriate packages.
          * semodule_* packages are required for devel.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  Resolves: #1002529
  Resolves: #924105
  Resolves: #918140
  Resolves: #1028096

  - Speed up startup time of sepolicy gui
  - Clean up ports screen to only show enabled ports.
  - Update to upstream 
  	* Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
  	* Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
  	* Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.3-1
changelog:
  - Update to upstream 
  	* Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
  	* Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
  - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-1
changelog:
  - Update to upstream 
  	* Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
  - Add patches for sepolicy gui from mgrepl to
    Fix advanced_item_button_push() to allow to select an application in advanced search menu
    Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-5
changelog:
  - Fix semanage man page description of import command
  - Fix policy kit file to allow changing to permissive mode


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-6
changelog:
  - Fix sepolicy gui selection for advanced screen
  - Update Translations
  - Move requires checkpolicy requirement into policycoreutils-python
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-1
changelog:
  - Fix Mass Rebuild problems
  - Update to upstream 
  	* Ignore selevel/serange if MLS is disabled from Sven Vermeulen.
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections
  Resolves: #1049977


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-5
changelog:
  - Remove default s0 range from semanage-login command. It is handled in seobject.py.
  Resolves:#1028106


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-12
changelog:
  - Make selinux-policy build working also on another architectures related to sepolicy-manpage generate
  Resolves:#1103292


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-13
changelog:
  - If the user attempts to restorecon the label of a file that does not exist, do not report this as an error
  Resolves:#1082956
  - Make fixfiles_exclude_dirs working if there is a substituion for the given directory
  Resolves:#1082676
  - Add ability to list the actual active modules
  Resolves:#1075023
  - Update XDG_RUNTIME_DIR directory
  Resolves:#1112811
  - Fix semanage man page to talk about  semanage-* (8) man pages.
  Resolves:#1084390


author: Jaromir Capik <jcapik@redhat.com> - 3.3.2-2
changelog:
  - Fixing requires in the devel subpackage (missing (x86-32) macro)
  - License statement clarification (upstream patch referrenced in the spec header)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-2
changelog:
  - fixing the following regressions:
  -   negative ETIME field in ps (#871819)
  -   procps states a bug is hit when receiving a signal (#871824)
  -   allow core file generation by ps command (#871825)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Changing URL/Source from gitorious to recently created sourceforge page
  - Replacing autogen.sh with autoreconf


author: Jaromir Capik <jcapik@redhat.com> - 3.3.8-7
changelog:
  - Disabling screen content restoration when exiting 'top' (#977561)
  - Enabling SIGWINCH flood prevention


author: Jaromir Capik <jcapik@redhat.com> - 3.3.8-11
changelog:
  - Support for libselinux (#975459)
  - Support for systemd (#994457)
  - Support for 'Shmem' in free (#993271)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.9-5
changelog:
  - Support for timestamps & wide diskstat (#1053428, #1025833)
  - Fixing fd leak in watch
  - Fixing format-security build issues
  - Skipping trailing zeros in read_unvectored (#1057600)
  - Resolves: rhbz#1053428, Related: rhbz#1025833


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-1
changelog:
  - Upgrading to 3.3.10
  - top.1: physical memory - has used / is using (#1119263)
  - Include man pages for openproc, readproc and readproctab (#1119260)
  - ps -p cycles over all PIDs instead of just one (#1060715)
  - Remove explicit dependency on systemd-libs package (#1113206)
  - Allow longer usernames to display in ps output (#1112734)
  - w doesn't display FROM by default (#1078310)
  - Return value of pgrep is incorrect (#1116309)
  - Should shared memory be accounted in cached in free output? (#1070736)
  - Resolves: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Resolves: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-2
changelog:
  - Replacing RC tarball with final 3.3.10 release
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-3
changelog:
  - Disabling translated man pages due to conflicts with man-pages-*
  - Removing /etc/sysctl.d (quietly stolen by systemd)
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.2-2
changelog:
  - Fixing requires in the devel subpackage (missing (x86-64) macro)
  - License statement clarification (upstream patch referrenced in the spec header)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-7
changelog:
  - Change spec tag Copyright -> License
  - change logrotate to rotate daily, and keep 1 month (31 days) of data


author: Mike A. Harris <mharris@redhat.com> 6.3.2-9
changelog:
  - Fixed bug (#53307) psacct is enabled by default, and the log files
    are huge, and will fill the disk up very quickly.  logrotate will
    now compress them daily.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-11
changelog:
  - Conditionalized acct-6.3.2-config.patch to only be applied for RHL 7.x
    builds, as it breaks FHS compliance by putting files in nonstandard
    locations.  Also fixed up other places in specfile for FHS 2.2.
  - Added acct-6.3.2-I-HATE-GNU-AUTOCONK.patch because I hate GNU autoconk
    really really badly.
    
  - Bumped to -11 to avoid buildsystem stupidness


author: Mike A. Harris <mharris@redhat.com> 6.3.2-13
changelog:
  - Removed Build_7x flag, added FHS_compliant flag, reworked specfile to use new
    flag, and fixed bug (#60716)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-15
changelog:
  - Added new feature - psacct initscript now controls process accounting so
    that it is not just forced on if installed as was the previous behaviour
  - Modified the initscripts package to not force psacct on anymore and made
    the new psacct-6.3.2-15 conflict with previous initscripts packages.
  - Fixed logrotate config to set perms/owner of new log files, and closed
    bug (#54165)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-17
changelog:
  - Removed the files usracct and savacct, which are not used by psacct
    utilities at all, but by the sa program.  Our sa uses files in a different
    location, and so these files are unused and unnecessary.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-19
changelog:
  - Made initscript touch/chmod accounting file if it is not present during
    startup, to ensure accounting works properly when enabled.


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Take the time to make sure things get through on all archs, by simply
    running it through the build system.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-23
changelog:
  - Fixed chkconfig issue in rpm scripts (#61191)
  - Excludearch ia64, not taking the time to debug/troubleshoot random
    buildsystem failure due to higher priorities.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-24
changelog:
  - Fixed initscript reload/restart by creating start/stop functions and
    making everything use them (#72261)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-25
changelog:
  - Added with_last conditional to disable /usr/bin/last because ours is in
    the SysVInit package.  This fixes unpackaged files terminate build prob.


author: Charles Bennett <ccb@redhat.com> 6.3.2-33.fc4
changelog:
  - rhbz 133077: logrotate fixed to continue accounting during rotate
  - rhbz 141802: lastcomm was not handling all forms of --strict-match
  - rhbz 141971: rpm -e no longer leaves /var/lock/subsys/psacct
  - rhbz 43294: sa will never report any io because the kernel doesn't
     provide it.  Tweaked to ignore ac_io in acct.h
  - integrate lastcomm hz patch from RH support


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.1-2
changelog:
  - fix initscript (accton parameters changed)
  - fix lastcomm setings (#550229 - confusion about accounting file 
    location)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.1-5
changelog:
  - Fix the logrotate script and split its template to a separate file.
    (Michal Schmidt patch, thanks)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.4-4
changelog:
  - Resolves: #575975
    Build psacct with --enable-linux-multiformat
  - remove obsolete change
  - fix sa problem with hzval variable


author: Jan Görig <jgorig@redhat.com> - 6.5.5-1
changelog:
  - upgrade to new upstream release
  - remove obsolete patches
  - remove FHS_compliant condition
  - remove obsolete conflicts with initscripts
  - info installation fix
  - modified man-pages patch
  - spec fixes


author: Jaromir Capik <jcapik@redhat.com> - 6.5.5-8
changelog:
  - #759321 - psacct logrotate script references init.d service
  - #735300 - Enabling psacct causes daily cron spam


author: Pierre Ossman <drzeus@drzeus.cx> 0.8.1-1
changelog:
  - Update to 0.8.1
  - Split into more packages
  - Remove the modules' static libs as those shouldn't be used (they shouldn't
    even be installed)


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.3-1
changelog:
  - Update to 0.9.3
  - GLib 1.2 bindings dropped.
  - Howl compat dropped as Avahi is supported natively.
  - Added fix for pc files on x86_64.


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.5-3
changelog:
  - Add esound-compat subpackage that allows PulseAudio to be a drop-in
    replacement for esd (based on patch by Matthias Clasen).
  - Backport patch allows startup to continue even when the users'
    config cannot be read.


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.5-4
changelog:
  - Add patch to handle ALSA changing the frame size (bug 230211).
  - Add patch for suspended ALSA devices (bug 228205).


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.2.svn20070812
changelog:
  - Update snapshot, contains 64 bit build fixes, and disables module-x11-xsmp by
    default to avoid deadlock when PA is started from gnome-session


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.3.svn20070812
changelog:
  - Depend on tcp_wrappers-devel instead of tcp_wrappers, to make sure we
    actually get the headers installed.


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.9.svn20070904
changelog:
  - Update SVN snapshot
  - ship libflashsupport in our package
  - drop pulseaudio-devel since libpulsecore is not linked statically


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.12.svn20070925
changelog:
  - New SVN snapshot
  - Split off libflashsupport again
  - Rename "-lib" packages to "-libs", like all other packages do it.
  - Provide esound


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.16.svn20071017
changelog:
  - Another SVN snapshot, fixing another round of bugs (#330541)
  - Split libpulscore into a seperate package to work around multilib limitation (#335011)


author: Lubomir Kundrak <lkundrak@redhat.com> 0.9.8-4.1
changelog:
  - Actually add content to pulseaudio-0.9.8-create-dot-pulse.patch
  - Make the Source0 tag point to URL instead of a local file
  - Drop the nochown patch; it's not applied at all and no longer needed


author: Lubomir Kundrak <lkundrak@redhat.com> 0.9.8-8
changelog:
  - Fix multilib issue (#228383)
  - Prevent dumping core if exiting sooner that ltdl initializaion (#427962)


author: Adam Jackson <ajax@redhat.com> 0.9.8-11
changelog:
  - pulseaudio-0.9.8-disable-realtime.patch: Don't ask PolicyKit for increased
    scheduling mojo for now.  It's not clear that it's a win; and if it is,
    the policy should just be fixed to always allow it.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.9.21-3
changelog:
  - Explicitly BR libatomic_ops-static in accordance with the Packaging
    Guidelines (libatomic_ops-devel is still static-only).


author: Rex Dieter <rdieter@fedoraproject.org> 1.1-2
changelog:
  - -libs: Obsoletes: pulseaudio-libs-zeroconf
  - use versioned Obsoletes/Provides
  - tighten subpkg deps via %_isa
  - remove autoconf/libtool hackery


author: Wim Taymans <wtaymans@redhat.com> - 3.0-16
changelog:
  - Build SUID proximity-helper with full relro
  - don't mark .desktop and dbus configurations as %config
  - Related #884146


author: Wim Taymans <wtaymans@redhat.com> - 3.0-17
changelog:
  - Use the statically allocated UID and GID from /usr/share/doc/setup/uidgid (#1056656)
  - The pulse-rt group doesn't exist (#885020)
  - Related #884146


author: Wim Taymans <wtaymans@redhat.com> - 3.0-28
changelog:
  - core-util: Remove redundant check of directory permissions
  - core-util: Call fchown() only when necessary
  - core: Fix resource leak in core-util
  - Resolves: rhbz#1136330


author: John (J5) Palmieri <johnp@redhat.com> - 2.90.2-2
changelog:
  - fix up issues uncovered during package review
  - disable docs because they still reference the static bindings 
    and upstream is working on new documentation


author: Kalev Lember <kalevlember@gmail.com> - 3.7.1-2
changelog:
  - Remove lib64 rpaths (#817701)
  - Move code examples to the -devel subpackage and fix the multilib
    conflict (#831434)


author: Chris Lumens <clumens@redhat.com> 0.2-1
changelog:
  - Rename module to pykickstart to avoid conflicts in anaconda.
  - Rename data classes for consistency.
  - Add default bytesPerInode settings.


author: Chris Lumens <clumens@redhat.com> 0.3-1
changelog:
  - Add a deprecated attribute to options.
  - Add --card option back to xconfig and mark as deprecated.
  - Throw a deprecation warning on mouse and langsupport commands.
  - Rename Writer to KickstartWriter for consistency.
  - Collapse scripts into a single list and add an attribute on Script to
    differentiate.


author: Chris Lumens <clumens@redhat.com> 0.7-1
changelog:
  - Fix clearpart --all.
  - vnc command does not require --connect option (#172192).
  - network --onboot does not take any option.
  - Remove extra spaces from firewall --ports and --trust.
  - Write out network --<service> options.


author: Chris Lumens <clumens@redhat.com> 0.8-1
changelog:
  - Default to SELINUX_ENFORCING.
  - Default partition sizes to None for anaconda (#172378).
  - Don't call shlex.split on anything inside a script (#172313).


author: Chris Lumens <clumens@redhat.com> 0.13-1
changelog:
  - Recognize the --eject parameter to shutdown/halt.
  - Store the exact post-installation action in ksdata.


author: Chris Lumens <clumens@redhat.com> 0.18-1
changelog:
  - Fix some errors pychecker caught.
  - Allow exceptions to not be fatal so ksvalidator can spot more errors in
    a single pass (#179894).


author: Chris Lumens <clumens@redhat.com> 0.21-1
changelog:
  - Provide an option to not traceback on missing include files (#181760).
  - Update programming documentation.


author: Chris Lumens <clumens@redhat.com> 0.24-1
changelog:
  - Don't write out a blank xconfig line.
  - Reorder output handlers to group like commands together.
  - Mark strings for translation.


author: Chris Lumens <clumens@redhat.com> 0.26-1
changelog:
  - Ignore spaces before group names (#188095).
  - Added some translations.
  - Add options for repo command.
  - Reorder %packages section output.
  - Output %packages header options.
  - Initialize RAID and volume group members to empty lists.


author: Chris Lumens <clumens@redhat.com> 0.30-1
changelog:
  - Change order of LVM-related writing functions (#193073).
  - Require urlgrabber.
  - Return a more useful error message on unknown commands.
  - Fix logvol writing typo.
  - Make ksvalidator validate from a URL in addition to a file.
  - Don't write out an empty packages section (#192851).


author: Chris Lumens <clumens@redhat.com> 0.30-2
changelog:
  - Add BuildRequires to fix building under mock (#194156,  Joost Soeterbroek
    <fedora AT soeterbroek.com>).


author: Chris Lumens <clumens@redhat.com> 0.31-1
changelog:
  - Handle nfs --opts (katzj).
  - RAID devices should be integers instead of strings (#176537).
  - Add initial support for iscsi (katzj).


author: Chris Lumens <clumens@redhat.com> - 0.90-1
changelog:
  - Support multiple versions of kickstart syntax from one code base
    (#189348).
  - Fix inconsistency between Script parser and writer (#222877).


author: Chris Lumens <clumens@redhat.com> - 0.92-1
changelog:
  - Fix KickstartVersionError reporting.
  - Add a version attribute to handler objects.
  - Fix line number reporting on lots of commands.
  - Add initial support for Fedora 7 and remove deprecated commands.
  - Accept a --default argument to the %packages header (#221305).


author: Chris Lumens <clumens@redhat.com> - 0.93-1
changelog:
  - Add support for FC3, RHEL4, and RHEL5.
  - The key command was not supported until after FC6.
  - Accept more strings in stringToVersion.


author: Chris Lumens <clumens@redhat.com> - 0.94-1
changelog:
  - Add a newline to the end of the key command output.
  - Use network bootproto constants (#197694).
  - Fix tracebacks in subclass __str__ methods (#226734).


author: Chris Lumens <clumens@redhat.com> - 0.95-1
changelog:
  - KickstartParser no longer takes a version argument.
  - Be more lenient in what strings stringToVersion accepts.
  - Allow setting state on one data object from multiple files.


author: Chris Lumens <clumens@redhat.com> - 0.96-1
changelog:
  - Fix __str__ methods for langsupport and reboot commands.
  - Renamed BaseHandler.empty to BaseHandler.maskAllExcept.
  - Split command objects out into their own files in commands/.
  - Rename command objects to start with Version_.
  - Support extended group selection syntax.


author: Chris Lumens <clumens@redhat.com> - 0.99-1
changelog:
  - The timezone command didn't recognize --isUtc before FC6 (#231189).
  - Recognize %ksappend lines in ksvalidator.
  - Don't set default values in some command __init__ methods.
  - Added an updates command.
  - Add support for RAID10.


author: Chris Lumens <clumens@redhat.com> - 0.100-1
changelog:
  - bootloader should be written out after upgrade/install.
  - Treat class names as unicode strings (#231053).


author: Chris Lumens <clumens@redhat.com> - 1.1-1
changelog:
  - Better regexes for splitting version strings into family and version.
  - Add basic support for RHEL3.
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 1.2-1
changelog:
  - Fix harddrive install method error checking (#232492).
  - Set authentication information from the input line to preserve quoting
    (#241657).
  - Allow included files to be given by URL.
  - Fix typo in user --iscrypted option.


author: Chris Lumens <clumens@redhat.com> 1.7-1
changelog:
  - Clarify license in spec file and all source files.
  - Check string values to options to make sure they're not other options
    (#251318).


author: Chris Lumens <clumens@redhat.com> 1.9-1
changelog:
  - Add support for the %end directive to be placed at the end of scripts
    and packages sections.  Deprecate old syntax.
  - Clean up after ksvalidator if pykickstart issues a traceback.
  - Add support for repo --priority --includepkgs --excludepkgs.
  - Fix newline at end of reboot --eject output (#253562).


author: Chris Lumens <clumens@redhat.com> 1.12-1
changelog:
  - Fix lots of problems in processing the bootloader, device, network, and
    raid commands.
  - Add %end when writing out scripts and packages.
  - Add a makefile target to run pychecker to cut down on errors in
    releases.


author: Chris Lumens <clumens@redhat.com> 1.13-1
changelog:
  - Add a function to convert URL method strings into repo objects
    (jkeating).
  - Writer formatting fixes.
  - Add kickstart documentation from the Fedora Wiki.


author: Chris Lumens <clumens@redhat.com> 1.14-1
changelog:
  - Fix output formatting for packages section header (#310211).
  - Add a script to flatten kickstart files containing includes (katzj).


author: Chris Lumens <clumens@redhat.com> 1.16-1
changelog:
  - Undeprecate %packages --excludedocs.
  - Fix a traceback in the device command handling.
  - Add bootloader --timeout (katzj).


author: Chris Lumens <clumens@redhat.com> 1.18-1
changelog:
  - Don't write out %end to packages and scripts if the syntax version doesn't
    support it.
  - Remove obsolete translation (#332221).


author: Chris Lumens <clumens@redhat.com> 1.20-1
changelog:
  - Pull wiki docs from the new location.
  - Fix error messages for options that have been removed after having been
    previously deprecated.
  - zerombr no longer takes any arguments.
  - %packages --ignoredeps --resolvedeps have been removed.
  - firewall --high --medium have been removed.
  - vnc --connect has been removed.
  - xconfig options from monitor have now been removed.
  - --bytes-per-inode has been marked as deprecated.
  - Fix typos.
  - Add --fsprofile option to disk commands (pjones).
  - Add F9 support (pjones).
  - Lots of internal fixes (clumens, pjones).


author: Chris Lumens <clumens@redhat.com> 1.22-1
changelog:
  - Don't process or write out vnc --enabled (jlaska AT redhat DOT com).
  - Fix a traceback in the clearpart command.


author: Chris Lumens <clumens@redhat.com> - 1.23-1
changelog:
  - Take Makefile improvements from anaconda.
  - Fix a traceback on F9 zerombr command (#395431).
  - Update to handle new Python eggs packaging.


author: Chris Lumens <clumens@redhat.com> - 1.24-1
changelog:
  - Make inheritance and overriding of %packages work (#427768). (clumens)
  - Add an option for which languages should be installed. (katzj)
  - Use the right name for the iscsi --target variable (#418781). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.25-1
changelog:
  - Add the version to the output ks file. (clumens)
  - Add syntax for encrypted partitions and raid devices. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.30-1
changelog:
  - Reverse writePriorities of iscsi and iscsname (#434965, jlaska).
  - Fix printing of iscsiname command (#434945, jlaska).
  - Don't traceback on ENOENT. (pnasrat)
  - Store the mouse name as a string, not a list. (clumens)
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 1.32-1
changelog:
  - Make the string reader act like the file reader upon EOF. (clumens)
  - Add syntax for encrypted logical volumes. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.33-1
changelog:
  - Fix whitespace when printing out the bootloader command (pmeyers).
  - Fix the type on bootloader --timeout processing. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.34-1
changelog:
  - Load the handler module automatically. (clumens)
  - Add support for F10. (clumens)
  - Initialize cmd.handler earlier; fixes repo.methodToRepo() (markmc)
  - Don't shadow builtin function names. (clumens)
  - Running check is now required before pykickstart can be packaged. (clumens)
  - Reorganize code a little bit to pass pychecker. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.35-1
changelog:
  - Bring driverdisk command in line with the docs. (clumens)
  - Change RAID command print priorities (jlaska).
  - According to docs, physvols are space delimited. (jlaska)
  - Don't write the label out twice (jlaska).
  - Deprecate monitor and xconfig commands. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.40-1
changelog:
  - RHEL5_LogVolData should inherit from FC4, not FC3.
    Also fix FC9->F9 typo. (dlehman)
  - Support creation of encrypted block devices in RHEL5. (#449830) (dlehman)
  - Use the right LogVolData objects for RHEL3 and 4 (jlaska). (clumens)
  - We no longer use rhpl for translations. (clumens)
  - All the base classes should derive from object. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.41-1
changelog:
  - RHEL5 supports ignoredisk --only-use now too. (clumens)
  - Do not include passphrases for encrypted block devices in
    anaconda-ks.cfg. (dlehman)
  - Fix F9,F10,RHEL5 "part" commands to use the same class as
    "partition". (dlehman)
  - Add an apply method() for commands and implement for lang (katzj)


author: Chris Lumens <clumens@redhat.com> - 1.42-1
changelog:
  - Add rescue command to pykickstart (atodorov)
  - Sort %packages output (katzj)
  - Fix a typo (atodorov).


author: Chris Lumens <clumens@redhat.com> - 1.43-1
changelog:
  - Revert "Do not include passphrases for encrypted block devices in
    anaconda-ks.cfg." (dlehman)
  - yum doesn't like when mirrorlist is "". (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.48-1
changelog:
  - Allow ignoring group metadata from repos, using a '--ignoregroups'
    boolean. (notting)
  - Add initial support for F11.
  - Specify the command versions in the handlers instead of making copies.
  - Remove empty and pointless __init__ methods.
  - Pass arguments to superclasses via *args and **kwargs, all the way up.
  - Add removedKeywords and removedAttrs lists on Commands and Data.
  - Fix version regexes to handle double digits and minor releases (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.49-1
changelog:
  - Add upgrade --root-device (atodorov, #471232).
  - Use python's builtin set rather than the Sets module (#477836, dcantrell).


author: Chris Lumens <clumens@redhat.com> - 1.50-1
changelog:
  - Add a script to diff two versions of kickstart syntax.
  - Add an option to ksvalidator to list all available syntax versions.
  - Remove a couple extra newlines in output formatting.
  - Add documentation for the new %include representation.
  - Add support %include to the pykickstart data objects.


author: Chris Lumens <clumens@redhat.com> - 1.51-1
changelog:
  - Make a couple changes to how the logging command is handled.
  - Add a lot of test cases (clumens, alindebe, jlaska, fcami, adamwill, pfrields).
  - Fix output formatting for the rootpw command.
  - For commands that take exactly one argument, check and error correctly.
  - Surround module options in quotes on the output side (jlaska).
  - Set module opts in the FC3 handler correctly.
  - Fix newlines on the device command output (jlaska).
  - If --autoscreenshot is not specified, still output "autostep".
  - Move the currentCmd and currentLine into getParser(). (jlaska)
  - Write out an selinux line if set to disabled, but not if None.
  - F9_LogVolData should inherit from FC4_LogVolData, not FC3_LogVolData (jlaska).
  - Add unittest framework along with logvol and vnc unittests. (jlaska)
  - Don't set the KSOption.required attribute in the constructor (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.52-1
changelog:
  - Add lots more test cases (alindebe, mgracik, stickster).
  - Add a skip attribute on key to shut up pychecker.
  - Only show autostep command when requested (jlaska)
  - Strip spaces from service names, and require an option to be provided.
  - Surround services lists in double quotes.
  - Remove the extra space from the services __str__ method.
  - Fix output formatting bugs in firewall, partition, and repo (mgracik).
  - Specifying both or neither of --drives and --only-use should be an error.
  - Corrected newline char in return value of FC6_Method. (mgracik)
  - Make --drives a required option for FC3, and catch no args on F8.
  - Fix final printing of the rescue command (mgracik).
  - Surround output strings in double quotes.
  - Fix a typo in the deviceprobe command.
  - Revert the more strict option processing on displaymode.
  - Properly handle erroring on extra args, not just extra options.
  - Don't use the logging class since it interferes with the logging test.
  - port without host should raise KickstartParseError, not kickstartValueError.
  - Add the --key option to option processing, since it's a valid argument.
  - Fix test cases that were failing due to the new use of KSOptionParser.
  - Teach driverdisk.py command to reject extra partitions (stickster).
  - Add KSOptionParser to all commands ... enables more strick option checking (jlaska).
  - Use KSOptionParser so we can catch bad command options (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.53-1
changelog:
  - Move lineno= from KSOptionParser.__init__ to parse_args (#497149). (clumens)
  - Use the F11 version of the partition command. (clumens)
  - Remove the --start and --end options since anaconda no longer uses them. (clumens)
  - Remove a broken test case. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.55-1
changelog:
  - Add support for the group command to F12 (#509119).
  - RHEL5 now supports RAID 10.
  - The f12 hander class should be called F12Handler. (jgranado)
  - Remove bootloader --lba32.
  - Add a new version of the driverdisk command without --type=.
  - Add initial support for F12.
  - Fetch the programmers-guide from the wiki now.


author: Chris Lumens <clumens@redhat.com> - 1.56-1
changelog:
  - Make sure to import the gettext stuff in fcoe. (clumens)
  - Correctly deprecate bootloader --lba32 (jlaska).
  - pykickstart: fix zfcp command writepriority (hdegoede)
  - pykickstart: Add fcoe command (take 2) (hdegoede)
  - Add a test case for RAID (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.58-1
changelog:
  - Adjust writePriority to fix lvm-on-raid0 test cases (jlaska).
  - Add F12 to the version number tests. (clumens)
  - F12_User test case. (dcantrell)
  - Add --gecos argument to the 'user' command (dcantrell)
  - Convert user.py to use _getArgsAsStr() (dcantrell)


author: Chris Lumens <clumens@redhat.com> - 1.59-1
changelog:
  - Handle a few more places where a urlgrabber error could happen (#512951).
  - Error out if the same partition/repo/network is defined twice (#512956).
  - Call parent class tests first. (jlaska)
  - Add KSOptionParser to FC3 upgrade command. (jlaska)
  - Correct missing return stmt in _getArgsAsStr() (jlaska)


author: Chris Lumens <clumens@redhat.com> - 1.60-1
changelog:
  - Put quotes around the repo's name (Marc.Herbert@gmail.com).
  - Make duplicate entries warnings, not errors (#516338).


author: Chris Lumens <clumens@redhat.com> - 1.62-1
changelog:
  - Support translated help text in optparse (#479519).
  - If the input kickstart file cannot be read, raise IOError (#519477).


author: Chris Lumens <clumens@redhat.com> - 1.63-1
changelog:
  - Add encryption key escrow support (mitr, #508963).
  - Fix the repo test cases to expect quotes around the repo's name.


author: Chris Lumens <clumens@redhat.com> - 1.65-1
changelog:
  - Add additional arguments to BaseHandler.__init__ for better map control.
  - Return the KickstartCommand/KickstartData object from dispatcher.
  - Add an "sshpw" command for changing the passwords in anaconda's env.
  - Add --proxy support to the url and repo commands.
  - Add support for F13.  Is it really that time already?


author: Hans de Goede <hdgoede@redhat.com> - 1.66-1
changelog:
  - Add --dcb option to fcoe command (#513011)
  - Remove rhpl from tests
  - Port bootloader --hvargs option added in rhel5
  - Ignore comments when looking for %ksappend lines (#525676)
  - Use python 2.x exception syntax


author: Chris Lumens <clumens@redhat.com> - 1.67-1
changelog:
  - Don't use action="append_const" in firewall.py.
  - Make "make archive" depend on test and check passing again.
  - versionToString now works in all cases we test for.
  - Fix the few pychecker errors outstanding in options.py.
  - Fix make docs to make docs dir before trying to download files there (hdegoede)


author: Chris Lumens <clumens@redhat.com> - 1.68-1
changelog:
  - Support removing groups that were included by a glob (#554717). (clumens)
  - Make sure that everything in version.versionMap has a handler. (clumens)
  - Add support for RHEL6 (#552230). (clumens)
  - Don't consider RHEL versions as developmental even if they're latest. (clumens)
  - Add lineno to BaseData and derived classes (version 2) (hdegoede)
  - Give the non mandatory iscsi --port argument a sane default (hdegoede)
  - Change python_sitelib macro to use %global for new rpm (hdegoede)
  - Fix typo in iscsi parsing error message (hdegoede)


author: Chris Lumens <clumens@redhat.com> - 1.69-1
changelog:
  - Add driverdisk --biospart= (#570437). (clumens)
  - Fix IOError catching in ksflatten (jgregusk, #558650).


author: Chris Lumens <clumens@redhat.com> - 1.71-1
changelog:
  - Don't overwrite the excluded group list after every %packages line (#577334). (clumens)
  - Add a bunch of test cases for the packages section. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74-1
changelog:
  - If an option is deprecated, do not care if it takes a value (#602303). (clumens)
  - Don't compare the dest ("telnet") with the option string ("--telnet"). (clumens)
  - The --connect= parameter wasn't really deprecated in FC6. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.75-1
changelog:
  - Update translation files. (clumens)
  - Remove everything from pykickstart that's been deprecated forever. (clumens)
  - Using the knowledge of what command supports what option, condense test cases. (clumens)
  - Add a method to list all supported options for a command being tested. (clumens)
  - Add support for F14. (clumens)
  - The %end at the end of a section is now required. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.76-1
changelog:
  - method: new parameter '--noverifyssl' after --url. (akozumpl)
  - repo: new parameter '--noverifyssl'. (akozumpl)


author: Chris Lumens <clumens@redhat.com> - 1.77-1
changelog:
  - Send the key command down the memory hole. (clumens)
  - Deprecate interactive kickstart mode. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.78-1
changelog:
  - Raise KickstartError instead of IOError (#618002). (clumens)
  - It's --biospart, not --biosdisk (#620855). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> 1.79-1
changelog:
  - Move from pychecker to pylint, since the latter actually works.
  - Lots of minor corrections for pylint.
  - Add bootloader --iscrypted (#554870).
  - Add support for F15.


author: Chris Lumens <clumens@redhat.com> - 1.80-1
changelog:
  - Remove preceededInclude= support (#639372). (clumens)
  - support noverifyssl on the rhel6-branch (method, repo) (#660340). (akozumpl)
  - l10n: Added Low German translation (ncfiedler)


author: Chris Lumens <clumens@redhat.com> - 1.81-1
changelog:
  - Add support for "raid --label=" (#670643). (clumens)
  - --baseurl/--mirrorlist are no longer required for the repo command. (clumens)
  - Make use of the "interactive" command an error. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.83-1
changelog:
  - Add kickstart network --nodefroute option (#668417) (rvykydal)
  - Add support for network --bootproto ibft option (#668417) (rvykydal)
  - Add network --activate option (#668417) (rvykydal)
  - Add support for F16. (clumens)


author: Chris Lumens <clumens@redhat.com> 1.99.0-1
changelog:
  - Add a way to tell how often a section has been handled. (clumens)
  - Add a NullSection that just ignores any section provided. (clumens)
  - Add test cases for the parser itself. (clumens)
  - Allow for defining your own kickstart %sections. (clumens)
  - The docs need to be fetched from an HTTPS location now. (clumens)
  - Write out --onboot=off if it's False. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.1-1
changelog:
  - Fix a couple Makefile typos. (clumens)
  - typo fix (vpodzime)
  - option for wpa wifi connection specification added (vpodzime)
  - Update Makefiles to work with new translation system. (clumens)
  - BuildRequires transifex-client. (clumens)
  - Ignore po/*.po files. (clumens)
  - Remove translation files. (clumens)
  - Add transifex-client configuration file. (clumens)
  - Fix po files so "msgfmt -c" passes and they can be uploaded to transifex. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.3-1
changelog:
  - Ignore reimport warnings. (clumens)
  - Add support for 'autopart --nolvm' (jlaska)
  - autopart - Inherit error checking from base class (jlaska)
  - Let's just use url.size instead.  That's defined for both FTP and HTTP. (clumens)
  - It's url.hdr now, not url.info. (clumens)
  - Support end-of-line comments in the %packages section (#728563). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.4-1
changelog:
  - --reserved-space and --reserved-percent should be checked on a callback. (clumens)
  - Add a volgroup unit test, and fix a bug it uncovered. (clumens)
  - Add support for reserved space in volume group. (dlehman)
  - Allow a %include to come in the middle of a section (#733455). (clumens)
  - Add a test case for %include inside %packages. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.5-1
changelog:
  - Don't error out if raid --useexisting is given with no members (#741728). (clumens)
  - When %end is missing, include the unterminated section in the error message. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.6-1
changelog:
  - Add --boot-drive option to bootloader command to pick boot drive. (dlehman)
  - Add support for F17. (clumens)
  - The guts of a script could include a line starting with a % (#746928). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.8-1
changelog:
  - Add support for RHEL7 (#802369).
  - Add a method to set a command back to its initial blank state.
  - btrfs likes its raid levels in lower case. (#799154) (dlehman)
  - iscsi: add support for interface binding to F17 (rvykydal)
  - iscsi: add support for interface binding (#500273) (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.9-1
changelog:
  - Add __ne__ methods to every object with an __eq__ method. (clumens)
  - Use the older exception syntax for python 2.4 compatibility. (clumens)
  - Add an __eq__ method to the method command. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.10-1
changelog:
  - Add resize option to partition and logvol commands. (dlehman)
  - Add --list= mode to clearpart for explicit list of partitions to remove. (dlehman)


author: Chris Lumens <clumens@redhat.com> - 1.99.11-1
changelog:
  - pylint doesn't like .setter syntax at all. (clumens)
  - Modify keyboard command to handle multiple layouts (vpodzime)
  - Add support for F18. (vpodzime)
  - Fix traceback if modules cannot be loaded when running tests (vpodzime)


author: Chris Lumens <clumens@redhat.com> - 1.99.12-1
changelog:
  - Add --nontp option and a way to specify NTP servers to the timezone command (vpodzime)
  - fix TypeError in network.py with ipv6 static addresses (wwoods)
  - Layouts may include spaces, so put them in quotes (vpodzime)


author: Chris Lumens <clumens@redhat.com> - 1.99.13-1
changelog:
  - Support bootloader --leavebootorder for F18 and RHEL7 (#824801) (pjones)
  - Allow %include in %pre and %post (#827269) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.99.14-1
changelog:
  - add reboot test (bcl)
  - add correct halt command handling (bcl)
  - return parsed object from assert_parse (bcl)
  - The monitor command has been deprecated since F10.  Get rid of it. (clumens)
  - Add --hibernation option for swap size specification (vpodzime)
  - Add leavebootorder test (hamzy)


author: Chris Lumens <clumens@redhat.com> - 1.99.18-1
changelog:
  - Fix the multilib package test case. (clumens)
  - Add support for --multilib option to %packages. (dlehman)
  - Mark --nobase as deprecated. (notting)


author: Chris Lumens <clumens@redhat.com> - 1.99.19-1
changelog:
  - bonding support: add network --bondslaves --bondopts options (rvykydal)
  - vlan support: add network --vlanid option. (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.20-1
changelog:
  - Disable pylint warnings related to the previous patch. (clumens)
  - Revert "Fix superclass constructor call in F18_Keyboard." (clumens)
  - Fix superclass constructor call in F18_Keyboard. (dlehman)
  - Add cipher option for encrypting block devices. (dlehman)
  - Change keyboard command to accept VConsole keymap and X layouts (vpodzime)
  - add unsupported_hardware command (#824963) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.99.22-1
changelog:
  - Add support for url --mirrorlist, needed by anaconda (#868558). (clumens)
  - Only write out a logging line if one was provided (#873242). (clumens)
  - If no timezone was provided, do not write out an empty timezone command. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.23-1
changelog:
  - Don't print any of the autopart command if autopart is disabled (#888841). (clumens)
  - Call sys.exit instead of os._exit (#891419, gconradi AT factset.com). (clumens)
  - Beware of possible unicode strings (#876293) (vpodzime)
  - Remove the lang.apply method (#882186). (clumens)
  - Add 'make coverage' command to the make file (stefw)


author: Chris Lumens <clumens@redhat.com> - 1.99.25-1
changelog:
  - pylint appears to have gotten pickier. (clumens)
  - Fix typo in --wpakey string representation method (rvykydal)
  - Also add the F19 handler file. (clumens)
  - Don't strip the newline from reboot or shutdown commands (#915013). (clumens)
  - Add bonding support to RHEL 7 (rvykydal)
  - Add bonding support to F19 (rvykydal)
  - Add support for F19 (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.26-1
changelog:
  - parser.py: Allow shlex to strip lines (fedora.dm0)
  - Fix a bug in logvol duplicate reporting (#924579, mhuth). (clumens)
  - Add gid attribute to User command and associated data structure (msivak)
  - Make sure tests can run and report import errors (bcl)
  - Add network --vlanid option to Fedora. (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.28-1
changelog:
  - Add network --ipv6gateway option (#905226) (rvykydal)
  - Add lang --addsupport option (#912364) (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.32-1
changelog:
  - transifex.net is now transifex.com (bcl)
  - Update raid --device to be an array name specifier. (dlehman)
  - Add more tests for the realm command (mkolman)
  - RHEL7 is now more or less based on F19, at least for kickstart. (clumens)
  - realm: Fix --no-password option (stefw)
  - Add man pages for all programs (#948440). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.33-1
changelog:
  - Add support for lvm thin provisioning. (dlehman)
  - Add support for F20. (clumens)
  - Add a new test for the group command. (clumens)
  - In the test cases, error on all non-deprecation warnings. (clumens)
  - Remove unused imports from the test suite. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.34-1
changelog:
  - Always create self.handler on-demand in the test cases. (clumens)
  - Also set the seen attribute when __call__ is used. (clumens)
  - Mark the upgrade command as deprecated. (clumens)
  - Add the method test case back in. (clumens)
  - Set the seen attribute when parsing in test cases, too. (clumens)
  - Add a proxy method command object. (clumens)
  - Add an interactive kickstart shell command, ksshell. (clumens)
  - Fix string substitution errors in translatable text. (clumens)
  - Break the method command out into individual commands. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.35-1
changelog:
  - Add aliases for all the old method classes (#986069). (clumens)
  - Check syntax version before issuing a deprecation warning (#972098). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.36-1
changelog:
  - When method.method is set, also set the right seen attribute (#994553). (clumens)
  - Add tests for incorrect command usage detection (mkolman)
  - Add class for independent multi-line command sequence tests (mkolman)
  - Raise an error if autopart is combined with partitioning commands (#886010) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.37-1
changelog:
  - Correct exception raising style. (clumens)
  - Fix up how we call pylint for 1.0.0. (clumens)
  - Set method.method when attempted. (dshea)


author: Brian C. Lane <bcl@redhat.com> - 1.99.38-1
changelog:
  - Return None for attributes if no method has been set (#1001081) (dshea)
  - Fix up a couple pylint errors in the tools. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.39-1
changelog:
  - Call the right attribute method (#1004889) (bcl)
  - Reset method seen attrs when switching method (#1004889) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.99.42-1
changelog:
  - Remove a triple-X message that is no longer needed (mkolman)
  - Add --remove-service option for the firewall command (#1016008) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.3-1
changelog:
  - method getattr should default to handler.url (#1029245) (bcl)
  - Add missing version bumps for RHEL7 command control map (#1032738) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.5-1
changelog:
  - Check VNC password length (#1056939) (vpodzime)
  - Don't do string comparisons in "make test" (#1057573). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.6-1
changelog:
  - Run "make test" as part of the RPM build process (#1025226). (clumens)
  - Use the correct LogVolData object (#1058520). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.7-1
changelog:
  - Include test cases in the source distribution. (clumens)
  - We need python-urlgrabber to do builds now. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.8-1
changelog:
  - Add support for fcoe --autovlan option (#1055779) (rvykydal)
  - Provide syntax for specifying environments (#1061296). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.11-1
changelog:
  - Add autopart --fstype support (#1112697) (bcl)
  - ostreesetup: Fix noGpg attribute (walters)
  - ostreesetup: New command (walters)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.13-1
changelog:
  - Use the right bootloader command version for RHEL7 and F19. (clumens)
  - Do not set any magic default PE size in pykickstart (vpodzime)
  - Add an option to disable even installing the core group. (clumens)
  - Add a new bootloader --disabled option. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.43.14-1
changelog:
  - Make --size and --percent mutually exclusive in logvol (RHEL7). (dlehman)
  - Some tests for --size and --percent (#1117908) (amulhern)
  - Update tests where necessary with --size flag (#1117908) (amulhern)
  - Supply regex values for assert_parse_error calls in logvol.py (#1117908) (amulhern)
  - Check the regular expression when asserting a parse error (#1117908) (amulhern)
  - Add tests for --interfacename validation (mkolman)
  - Validate network interface name when parsing the kickstart (#1081982) (mkolman)
  - Move some statically detectable kickstart errors out of anaconda (#1117908) (amulhern)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Initial build split out into separate source from the parted package.
  - Don't build on ppc64 right now due to parted build problems (#118183)


author: Jeremy Katz <katzj@redhat.com> - 1.6.8-1
changelog:
  - update for new parted ABI
    - device -> heads, sectors, cylinders now refer to the bios geometry
  - require parted >= 1.6.12


author: David Cantrell <dcantrell@redhat.com> - 1.8.0-1
changelog:
  - Bump version to 1.8.0 and require parted >= 1.8.0
  - Remove python-abi Requires line since rpm handles that automatically


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-1
changelog:
  - Determine Python version to use in %build so the source RPM is more
    easily moved between distribution releases.


author: Chris Lumens <clumens@redhat.com> - 2.1.2-1
changelog:
  - Upgrade to pyparted-2.1.2:
        PED_DEVICE_DM is always defined in libparted these days.
        Handle parted exceptions arising from ped_device_get (#495433).


author: David Cantrell <dcantrell@redhat.com> - 2.2-1
changelog:
  - Upgrade to pyparted-2.2:
        Fixes PedDisk2_ped_Disk() and avoids losing disk label data
        in the conversion process (#526999)


author: David Cantrell <dcantrell@redhat.com> - 2.3-1
changelog:
  - Upgrade to pyparted-2.3:
        Remove root user requirement in _ped
        Add testcases for new _ped device methods
        Add python wrapper for new PedDisk partition alignment info function
        Add support for new PedDisk parition alignment info function
        Add python wrappers for new PedDevice alignment info functions
        Add support for new PedDevice alignment info functions
        Fix a whole pile of test cases.
        Remove ped_disk_commit_to_dev() call from py_ped_disk_new_fresh()
        Fix error in Constraint __str__ method
        Make _ped_Device2PedDevice properly set / throw exceptions
        Fixup various errorhandling issues in pydisk.c
        Add missing _ped_Device2PedDevice() retval checks
        Use libparted commit() for parted.disk.Disk.commit() (hdegoede).
  - BR parted-devel >= 1.9.0-20


author: David Cantrell <dcantrell@redhat.com> - 2.4-1
changelog:
  - Upgrade to pyparted-2.4:
        Use PedDevice length instead of DIY (#532023) (hdegoede)
        Use sectorSize not physicalSectorSize for size calculations (hdegoede)


author: David Cantrell <dcantrell@redhat.com> - 2.5-1
changelog:
  - Update release instructions. (dcantrell)
  - Remove old cylinder alignment test cases for _ped. (dcantrell)
  - Add tests for max partition length / start sector (hdegoede)
  - Add _pedmodule and parted functions for max partition length / start
    sector (hdegoede)
  - Remove align_to_cylinders function bindings (hdegoede)
  - Add tests for disk flag methods (hdegoede)
  - Add _pedmodule and parted functions for per disk flags (hdegoede)
  - Every tuple member requires a comma after it. (dcantrell)
  - Fill out a lot of simple _ped.Disk test cases. (dcantrell)
  - Disable DeviceDestroyTestCase for now. (dcantrell)
  - Add RequiresLabeledDevice to tests/_ped/baseclass.py. (dcantrell)
  - Attempt at fixing _ped.Device.destroy(), no dice. (dcantrell)
  - Fix UnitFormatCustomTestCase and UnitFormatTestCase. (dcantrell)
  - Fix UnitFormatCustomByteTestCase and UnitFormatByteTestCase. (dcantrell)
  - Add DeviceStrTestCase, disable DeviceDestroyTestCase. (dcantrell)
  - Add DeviceDestroyTestCase and DeviceCacheRemoveTestCase. (dcantrell)
  - Implemented ConstraintIsSolutionTestCase(). (dcantrell)
  - Implement ConstraintSolveMaxTestCase(). (dcantrell)
  - Implement ConstraintSolveNearestTestCase(). (dcantrell)
  - Correct py_ped_file_system_probe_specific() for NULL returns. (dcantrell)
  - Implement FileSystemProbeSpecificTestCase(). (dcantrell)
  - Implement FileSystemProbeTestCase(). (dcantrell)
  - Add RequiresFileSystem to tests/_ped/baseclass.py. (dcantrell)
  - Add disk alignment test cases in test_ped.py. (dcantrell)
  - Fix CHSGeometryStrTestCase(). (dcantrell)
  - Fix ConstraintDuplicateTestCase...finally. (dcantrell)
  - Put a deprecation warning in py_ped_constraint_duplicate(). (dcantrell)
  - Note that we need parted from Fedora for pyparted. (dcantrell)
  - Fix UnitGetSizeTestCase in _ped test cases for _ped.UNIT_PERCENT.
    (dcantrell)
  - Add testcase for new _ped disk get_partition_alignment method (hdegoede)


author: Hans de Goede <hdegoede@redhat.com> - 2.5-3
changelog:
  - Change python_sitearch macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html


author: Hans de Goede <hdegoede@redhat.com> - 2.5-4
changelog:
  - Rebuild for new parted-2.1
  - Remove py_disk_clobber_exclude function binding, as this function was
    removed from parted-2.1


author: David Cantrell <dcantrell@redhat.com> - 3.5-1
changelog:
  - Drop dependency on python-decorator module. (dcantrell)
  - Differentiate the "Could not commit" messages. (jgranado)
  - Import _ped.DiskLabelException into parted namespace (cjwatson)
  - Return PED_EXCEPTION_NO for yes/no interactive exceptions. (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-9
changelog:
  - Disable python-coverage tests on s390x
    Related: rhbz#1057626
  - Fix python-coverage tests (some disabled that are not working)
    Resolves: rhbz#1057626


author: David Lehman <dlehman@redhat.com> 0.2-1
changelog:
  - Updated source from final pre-split anaconda source.
  - Renamed pyanaconda.storage to blivet throughout.
  - Updated spec file to include runtime Requires.


author: David Lehman <dlehman@redhat.com> - 0.2-1
changelog:
  - Add Requires: iscsi-initiator-utils, fcoe-utils, device-mapper-multipath. (dlehman)
  - Use a threading lock to control program log output. (dlehman)
  - Fix reference to data to refer to ksdata in Blivet constructor. (dlehman)
  - Remove the loop around proc.communicate in util._run_program. (dlehman)


author: David Lehman <dlehman@redhat.com> - 0.4-1
changelog:
  - Use a two-part version number instead of three. (dlehman)
  - Rename the rpm package from blivet to python-blivet. (dlehman)
  - Move get_mount_device, get_mount_paths from pyanaconda.packaging to util. (dlehman)
  - Update the TODO list. (dlehman)
  - Carry over s390 exclusion of fcoe-utils from anaconda. (dlehman)
  - Enable translations via transifex. (dlehman)


author: David Lehman <dlehman@redhat.com> - 0.5-1
changelog:
  - Add mountOnly to turnOnFilesystems (bcl)
  - Update lvm scanning to account for new ignored device handling. (dlehman)
  - Scan in all devices and then hide those that use ignored disks. (dlehman)
  - Adjust child counts correctly when unhiding a device. (dlehman)
  - Generate lvm config args each time they're needed/used. (dlehman)
  - Add ability to grab 70-anaconda.rules udev data directly. (dlehman)
  - Add support for active luks mappings at populate time. (dlehman)
  - Don't require nss, required only for escrow key support. (dlehman)
  - Update the TODO list. (dlehman)
  - Add missing constant DMI_CHASSIS_VENDOR. (dlehman)
  - Allow for multiple calls to DeviceTree.processActions. (#881023,#846573) (dlehman)
  - Use CGit snaphot URL for Source in specfile. (dlehman)
  - Streamline some logic in storageInitialize. (dlehman)
  - Don't re-add deleted or hidden devices during DeviceTree.populate. (dlehman)
  - Only run findExistingInstallations and start iscsi, &c in installer mode. (dlehman)
  - Do not change device status during populate in normal mode. (#817064) (dlehman)
  - Drop old code related to saving clearPartType from pre-f18. (dlehman)
  - check for skipping bootloader in doIt (bcl)
  - check for stage1 when not installing bootloader (#882065,#895232) (bcl)
  - explicitly detect iso9660 on a disk (#903158) (bcl)
  - Fix several problems in python-blivet.spec. (dlehman)
  - Remove #!/usr/bin/python from tsort.py (dlehman)
  - Update COPYING file. (dlehman)
  - Add a Requires for dmidecode on x86. (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.6-1
changelog:
  - parse buffer output from resize (#913141) (bcl)
  - prevent traceback when root device is not defined #rhbz883768 (sbueno+anaconda)
  - Move empty_disk to a top-level function, and rename. (clumens)
  - Add some high-level comments to DeviceFactory.configure_device. (dlehman)
  - Refactor DeviceFactory.set_container_members for clarity. (dlehman)
  - Rename the main blivet logger from "storage" to "blivet". (dlehman)
  - Use the blivet domain for translations. (dlehman)
  - Move DeviceFactory classes and related code into a new file. (dlehman)
  - New version: 0.5 (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.7-1
changelog:
  - Merge branch 'master' of git+ssh://git.fedorahosted.org/git/blivet (bcl)
  - Bring in productName from pyanaconda in installer mode. (#913559) (dlehman)


author: David Lehman <dlehman@redhat.com> - 0.8-1
changelog:
  - Check for "ip=ibft" cmdline option, not for "ibft". (rvykydal)
  - run_program returns an int. (#920584) (dlehman)
  - Fix units for lvs output. (dlehman)
  - Don't pass an intf arg to ISCSI.stabilize. (#920041) (dlehman)
  - Add __version__ to blivet/__init__.py. (dlehman)
  - Only run info prog (eg: dumpe2fs) once per filesystem. (dlehman)
  - Processing of a PV with no VG metadata is easy. (dlehman)
  - Add some convenience properties for displaying DeviceAction info. (dlehman)
  - Ignore MTDs, as we do not have the tools to write to them (#916771). (clumens)
  - Include udev's list of symbolic links in StorageDevice. (#914724) (dlehman)
  - Set a DeviceFormat instance's type attribute to the requested type. (dlehman)
  - Allow size specs that do not include a 'b' or 'B'. (#888851) (dlehman)
  - Fix reference to 'factory' from within DeviceFactory class. (dlehman)
  - Fix problems detecting lvm and md devices. (#914730) (dlehman)
  - Allow passing size=None to device factories for unbounded growth. (dlehman)
  - Provide a way to set the default fstype for a Blivet instance. (#838145) (dlehman)
  - Allow changing the size of encrypted devices via DeviceFactory. (#913169) (dlehman)
  - Don't dump storage state except in installer mode. (dlehman)
  - Fix device resolution for btrfs. (dlehman)
  - Fix device resolution to find named md devices. (dlehman)
  - Account for active mounts in normal mode. (#914898) (dlehman)
  - Add an example script which lists all devices. (dlehman)
  - Add scripts/makeupdates script (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.9-1
changelog:
  - NTFS.minSize is supposed to be a property. (#924410) (dlehman)
  - Mount /run during install and fix /sys mount (#922988) (bcl)
  - Fix two excptions triggered by calls to copy_to_system. (hamzy)


author: David Lehman <dlehman@redhat.com> - 0.10-1
changelog:
  - Extended partitions containing logical partitions are not leaves. (#949912) (dlehman)
  - Remove devices in reverse order in Blivet.recursiveRemove. (#949912) (dlehman)
  - Rewrite the DeviceFactory classes. (dlehman)
  - Hook up error handling in installer-specific methods. (#948250) (dlehman)
  - Don't traceback if fcoe.startup is called without fcoe utils present. (dlehman)
  - Fix logic error that causes us to ignore disks in exclusiveDisks. (dlehman)
  - Slightly improve currentSize for btrfs volumes. (dlehman)
  - Simplify multipath handling. (dlehman)
  - Don't expect anaconda udev rules to be in use. (dlehman)
  - Drop requires for things only needed for OS installation. (dlehman)
  - New version: 0.9 (bcl)
  - Only install packages for devices and filesystems used by the OS. (dlehman)
  - Fix LVMLogicalVolumeDevice.maxSize. (dlehman)
  - Fix handling of name=None in newLV, newMDArray, newVG. (dlehman)
  - Allow calls to suggestDeviceName with only a prefix argument. (dlehman)
  - Move mdadm superblock size calculation into devicelibs.mdraid. (dlehman)


author: David Lehman <dlehman@redhat.com> - 0.11-1
changelog:
  - Fix handling of isohybrid media. (#950510) (dlehman)
  - Fix getting dracut setup args from dasd.conf. (#950964) (dlehman)


author: David Lehman <dlehman@redhat.com> - 0.12-1
changelog:
  - Fix a bug in renaming lvm lvs. (dlehman)
  - Add container size policies for unlimited growth and fixed size. (dlehman)
  - Remove device factory methods to change container name. (dlehman)
  - Override any default subvol when mounting main btrfs volume. (#921757) (dlehman)
  - Fix detection of multipath. (#955664) (dlehman)
  - When a btrfs subvol's name is changed, change its subvol argument too. (clumens)
  - Allow returning hidden disks from the getDeviceBy* methods, if asked. (clumens)
  - Fix fipvlan -f argument once more and for good (#836321) (rvykydal)
  - Remove the intf parameters from the iscsi class. (clumens)
  - Don't relly on /proc/mdstat when enumeraing RAID levels. (jsafrane)
  - Set product names in non-installer mode. (jsafrane)
  - Fixed checking status of MD RAID which was just deleted. (jsafrane)
  - Account for the fact that md's metadata usage is unpredictable. (dlehman)
  - Remove members from their containers before destroying them. (dlehman)
  - Make get_container work even if there are duplicate names. (dlehman)
  - LVMFactory with a container_raid_level means use LVMOnMDFactory. (dlehman)
  - Add a check for enough raid members after allocating partitions. (dlehman)
  - Make parent_factory an attribute of the DeviceFactory instance. (dlehman)
  - All container settings use container_ kwargs. (dlehman)
  - Add ability to find raid level of an lvm vg. (dlehman)
  - Always pass -f to wipefs since it lies about in-use devices. (#953329) (dlehman)
  - Fix a bug extended partition management. (#951765) (dlehman)
  - Don't return incomplete devices from getDeviceByFoo methods by default. (dlehman)
  - Don't traceback when degraded md raid arrays are present. (#953184) (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.13-1
changelog:
  - Make sure createBitmap is updated when level changes (#960271) (bcl)
  - Update biosboot error message (#960691) (bcl)


author: David Lehman <dlehman@redhat.com> - 0.14-1
changelog:
  - total_memory calculation needs to round up (#962231) (bcl)
  - The dev.node attribute for iscsi devices is not copyable (#962865). (clumens)
  - Wipe partitions before they are created (#950145) (bcl)
  - Pass ROOT_PATH as an argument instead of importing it. (clumens)
  - If no iscsi nodes are discovered, return an empty list instead of None. (clumens)


author: Brian C. Lane <bcl@redhat.com> - 0.15-1
changelog:
  - Switch to the LGPLv2+. (dlehman)
  - Clear md arrays' sysfs path after deactivating them. (#954062) (dlehman)
  - Factories with existing containers use the container's disk set. (dlehman)
  - Don't set up a child factory if the container is set and exists. (dlehman)
  - Set a non-zero size for new btrfs subvols in an existing volume. (dlehman)
  - Open as many luks devs as possible with any given passphrase. (#965754) (dlehman)
  - Make sure container changes worked before applying device changes. (#965805) (dlehman)
  - Re-initialize platform in storageInitialize (#962104) (bcl)
  - Make a copy of devicetree._devices before using the append operator. (clumens)
  - Handle incomplete devices becoming complete on device rescan. (clumens)
  - Don't allow a device to be on the hidden list more than once. (clumens)


author: Brian C. Lane <bcl@redhat.com> - 0.16-1
changelog:
  - Install utilities for all devices -- not just those being used. (#964586) (dlehman)
  - Add a method to apply Blivet settings to ksdata. (dlehman)
  - Increase padding for md metadata in lvm factory. (#966795) (dlehman)
  - Move lvm-on-md into LVMFactory. (dlehman)
  - Switch to a minimum of four members for raid10. (#888879) (dlehman)
  - Update the TODO list. (dlehman)
  - Deactivate devices before hiding those on ignored disks. (#965213) (dlehman)
  - Allow udev queue to settle after writing zeros to disk. (#969182) (hamzy)
  - Run lsof when umount fails (bcl)
  - Run udev settle before umount (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.17-1
changelog:
  - Used Python type instead of variable name (#968122) (hamzy)
  - Fix detection of valid EFI system partition during autopart. (dlehman)
  - New version: 0.16 (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.18-1
changelog:
  - Raise XFS max size limit to 100TB. (sbueno+anaconda)
  - Add a device factory class for thinly-provisioned lvm. (dlehman)
  - Add support for automatic partitioning using lvm thin provisioning. (dlehman)
  - Add convenience methods related to lvm thin provisioning. (dlehman)
  - Add support for detection of lvm thinp setups. (dlehman)
  - Add classes for lvm thin pool and thin volume. (dlehman)
  - Add backend support for lvm thinp operations. (dlehman)
  - Fix return value of get_pv_space for size of 0. (dlehman)
  - Fix ksdata for lvm created in custom spoke based on autopart. (dlehman)
  - Only put max size in ksdata if partition is growable. (dlehman)
  - Allow subclasses to inherit ksdata classes. (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.19-1
changelog:
  - Don't waste time looking for devices dependent on leaf devices. (dlehman)
  - Add some example code for creation of disk partitions. (dlehman)
  - Don't manipulate partition boot flags except in installer mode. (dlehman)
  - Add an example of DeviceFactory usage. (dlehman)
  - Cosmetic changes for the arch module (vpodzime)
  - No more sparc support (vpodzime)
  - Cleanup arch.py reredux (hamzy)
  - Allow explicit requests for extended partitions. (#891861) (dlehman)
  - Fix disklabel handling for multiple calls to processActions. (dlehman)
  - Add support for explicit start/end sectors in partition requests. (#881025) (dlehman)
  - Store current mount options in getActiveMounts. (#914898) (dlehman)
  - Lack of formatting does not preclude device resize. (dlehman)
  - Handle negative sizes correctly. (dlehman)
  - Fix handling of clearpart type linux in shouldClear. (dlehman)
  - Add some tests for clearpart and related functionality. (dlehman)
  - Update unit tests and add a make target to run them. (dlehman)
  - Don't pass dracut args for lvm thin pools. (dlehman)
  - Update the TODO list. (dlehman)
  - Fix a copy/paste error. (dlehman)
  - Remove transifex-client BuildRequires. (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.20-1
changelog:
  - Fix typo in examples/list_devices.py (dlehman)
  - Use iscsi-iname instead of trying to reimplemnt it in python. (dlehman)
  - Catch exceptions raised while finding old installations. (#981991) (dlehman)
  - Keep the dasd list in sync with the devicetree's device list. (#965694) (dlehman)
  - Don't save luks keys unless installer_mode flag is set. (#996118) (dlehman)
  - Pass mount options to resolveDevice in _parseOneLine (#950206) (vpodzime)
  - Fix handling of devices in detected installations in Blivet.copy. (dlehman)
  - Clean up detection of lvm raid. (dlehman)
  - Tag the first build of each version without the release. (dlehman)
  - Remove dangling code block from commit 737169b75af1. (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.21-1
changelog:
  - Only force luks map names to include UUID during OS installation. (#996457) (dlehman)
  - Allow DiskLabelCommitError to reach the caller. (#1001586) (dlehman)
  - Do not try to align partitions to optimal_io_size. (#989333) (gustavold)
  - Fix rpmlog make target (bcl)
  - Add missing changelog lines to spec (bcl)


author: David Lehman <dlehman@redhat.com> - 0.22-1
changelog:
  - Allow implicit inclusion of multipath/fwraid by including all members. (dlehman)
  - If a device has been removed, omit it from the copied root. (#1004572) (dlehman)
  - Thinp metadata and chunk size default to 0 -- not None. (#1004718) (dlehman)
  - Revert "Do not try to align partitions to optimal_io_size. (#989333)" (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.23-1
changelog:
  - Make sure bootloader is setup after autopart (#1015277) (bcl)
  - Let setUpBootLoader raise BootloaderError (#1015277) (bcl)
  - Limit the maximum swap size to 10 % of disk space (if given) (vpodzime)
  - support ppc64le architecture (hamzy)
  - Don't call handleUdevDeviceFormat without udev device (#1009809) (dshea)


author: David Lehman <dlehman@redhat.com> - 0.24-1
changelog:
  - Close file descriptors other than stdin,stdout,stderr on exec. (#1016467) (dlehman)
  - Don't use hardcoded /tmp paths. (#1004404) (dlehman)
  - Fix detection of lvm thinp setups. (#1013800) (dlehman)
  - Generate a name if necessary when reconfiguring a factory device. (#1019500) (dlehman)
  - Handle anaconda's cmdline option to disable mpath friendly names. (#977815) (dlehman)
  - Allow specifying which swaps should appear in fstab (vpodzime)
  - Do not limit swap size to 10 % of disk space for hibernation (vpodzime)


author: Brian C. Lane <bcl@redhat.com> - 0.25-1
changelog:
  - Remove requirement for btrfsctl which no longer exists. (#1012504) (dlehman)
  - Allow for adjustment of factory vg after removal of thin pool. (#1021890) (dlehman)
  - Add boot description for "disk" devices on s390. (#867777, #903237, #960143) (sbueno+anaconda)
  - Add initial spport for aarch64 as we only plan to support UEFI this should be enough (dennis)


author: Brian C. Lane <bcl@redhat.com> - 0.26-1
changelog:
  - Add macefi format type (#1010495) (bcl)
  - Allow hfs+ boot devices to have their name set (#1010495) (bcl)
  - Update parted partitions on hidden disks when copying a Blivet. (#1023556)
    (dlehman)
  - Add ack flag checking to makebumpver (bcl)
  - Add makebumpver script (bcl)


author: David Lehman <dlehman@redhat.com> - 0.27-1
changelog:
  - Specify btrfs volumes by UUID in /etc/fstab. (dlehman)
  - Catch any exception raised by findExistingInstallations. (#980267) (dlehman)
  - Prevent md_node_from_name from raising OSError. (#980267) (dlehman)
  - Tidy up tests in devicelibs_test directory. (amulhern)
  - Preparation for lv resize is a subset of that for lv destroy. (#1027682)
    (dlehman)
  - Make sure new values of targetSize are within bounds. (dlehman)
  - Devices with non-existent formatting are resizable. (#1027714) (dlehman)
  - Do not hide non-existent devices. (#1027846) (dlehman)
  - Change XFS maximum to 16EB (#1016035) (bcl)
  - Add tmpfs support (#918621) (mkolman)
  - Add support for returning machine word length (mkolman)
  - Require cryptsetup instead of cryptsetup-luks (#969597) (amulhern)
  - Fix initialization of disks containing sun or mac disklabels. (dlehman)
  - Newly formatted devices are used unless mountpoint is empty. (#966078)
    (dlehman)
  - Fix detection of lvm setups. (#1026466) (dlehman)
  - Fix handling of overcommitted thin pools in thinp factory. (#1024144)
    (dlehman)
  - Fix name checking for new thin lvs. (#1024076) (dlehman)


author: David Lehman <dlehman@redhat.com> - 0.28-1
changelog:
  - Clear whole-disk formatting before initializing disks. (#1032380) (dlehman)
  - Simplify calculation of vol size when adding a btrfs subvol. (#1033356)
    (dlehman)
  - Handle passing a btrfs volume as device to BTRFSFactory. (dlehman)
  - Add support for detecting btrfs default subvolume. (dlehman)
  - Handle nested btrfs subvolumes correctly. (#1016959) (dlehman)
  - Mark all format names as translatable (dshea)
  - Add parameters for untranslated Size specs. (dshea)
  - Fix usage of _ vs N_ (dshea)
  - Added a i18n module for gettext functions. (dshea)
  - Allow non-ASCII characters in the size spec (dshea)


author: Brian C. Lane <bcl@redhat.com> - 0.29-1
changelog:
  - btrfs and xfs do not support fsck or dump at boot time (#862871) (bcl)
  - Removed raid level constants from mdraid.py. (amulhern)
  - Remove raidLevel and get_raid_min_members for mdraid.py. (amulhern)
  - Remove raidLevelString in raid and mdraid. (amulhern)
  - In devicefactory.py change mdraid procedures call to raid method calls.
    (amulhern)
  - Removed mdraid.raid_levels (amulhern)
  - Removed mdraid.get_raid_max_spares. (amulhern)
  - Change MDRaidArrayDevice to use raid package. (amulhern)
  - Changed devicelibs.mdraid to make use of devicelibs.raid. (amulhern)
  - Implement a RAID class hierarchy. (amulhern)
  - A few small tests for MDFactory class. (amulhern)
  - Add some additional unit tests in mdraid_tests.py. (amulhern)
  - Make MDRaidArrayDevice initializer not except raid level of None. (amulhern)
  - Add some basic unit tests for MDRaidArrayDevice. (amulhern)
  - Move pyanaconda import into blivet.enable_installer_mode. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.30-1
changelog:
  - Always run action's cancel method as part of cancelAction. (dlehman)
  - Show Invalid Disk Label for damaged GPT (#1020974) (bcl)
  - Make error message in setDefaultFSType more informative (#1019766) (amulhern)
  - Set sysfsPath of LUKSDevice when adding to device tree (#1019638) (jsafrane)
  - Use given format type as format's name instead of type (vpodzime)


author: Brian C. Lane <bcl@redhat.com> - 0.31-1
changelog:
  - Make RAIDLevel an abstract class using abc. (amulhern)
  - Restore a util import that was removed in a recent commit. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.32-1
changelog:
  - Work on devicelibs.btrfs methods that require that the device be mounted.
    (amulhern)
  - Remove some methods from devicelibs.btrfs. (amulhern)
  - Add a comment to btrfs.create_volume. (amulhern)
  - Add a file to run btrfs tests. (amulhern)
  - Remove format.luks.LUKS.removeKeyFromFile. (amulhern)
  - Changes to devicelibs.mdraid.mdactivate. (amulhern)
  - Restore an import removed in a previous commit. (amulhern)
  - Add a PE for LUKS metadata (#1038969) (bcl)
  - Adjust currentSize methods slightly. (amulhern)
  - Put additional constraints on the ActionResizeDevice initializer. (amulhern)
  - Remove redundant checks in existing resize() methods. (amulhern)
  - Add some baseline unit tests for BTRFS devices. (amulhern)
  - Robustify use of defaultSubVolumeID field. (amulhern)
  - Check that a BTRFS subvolume has exactly one parent in constructor.
    (amulhern)
  - BTRFSSubVolume.volume checks the class of its return value. (amulhern)
  - Raise ValueError in BTRFS constructor if no parents specified. (amulhern)
  - Add tests for a couple of additional properties for MDRaidArrayDevice.
    (amulhern)
  - Factor state testing behavior into a separate class. (amulhern)
  - Remove redundant condition in if statement. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.33-1
changelog:
  - Add initial 64-bit ARM (aarch64) support (#1034435) (dmarlin)
  - Convert to sphinx docstrings. (dlehman)
  - Add some documentation. (dlehman)
  - Move getActiveMounts from Blivet into DeviceTree. (dlehman)
  - Add an example of creating lvs using growable requests. (dlehman)
  - Remove a whole bunch of unused stuff from Blivet. (dlehman)
  - Remove usage of float in Size.humanReadable. (dlehman)
  - Add missing abbreviations for binary size units. (dlehman)
  - Fix shouldClear for devices with protected descendants. (#902417) (dlehman)
  - Use // division so that it continues to be floor division in Python 3.
    (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.34-1
changelog:
  - Forget existing partitions of device becoming a multipath member (#1043444)
    (rvykydal)
  - Include blivet.devicelibs.raid in the generated documentation. (amulhern)
  - Upgrade the comments in raid.py to be compatible with sphinx. (amulhern)
  - Make space for LUKS metadata if creating encrypted device (#1038847)
    (vpodzime)
  - fcoe: give error message in case of fail when adding device (#903122)
    (rvykydal)
  - fcoe: adapt bnx2fc detection to changed sysfs path structure (#903122)
    (rvykydal)
  - Update format of iscsi device becoming multipath member (#1039086) (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 0.35-1
changelog:
  - Convert everything to use Size. (dlehman)
  - Allow negative sizes. (dlehman)
  - Fix return value of Size.convertTo with a spec of bytes. (dlehman)
  - Discard partial bytes in Size constructor. (dlehman)
  - Prefer binary prefixes since everything is really based on them. (dlehman)
  - Fix a few minor problems introduced by recent raid level changes. (dlehman)
  - Move label setter and getter into DeviceFormat class (#1038590) (amulhern)
  - Add a test for labeling swap devices (#1038590) (amulhern)
  - Default to None to mean none, rather than empty string (#1038590) (amulhern)
  - Add a labelFormatOK method to the DeviceFormat's interface (#1038590)
    (amulhern)
  - Indicate whether the filesystem can label (#1038590) (amulhern)
  - Restore ability to write an empty label where possible (#1038590) (amulhern)
  - More tests to check writing and reading labels (#1038590) (amulhern)
  - Remove fsConfigFromFile (#1038590) (amulhern)
  - Changes to the handling of filesystem labeling (#1038590) (amulhern)
  - Add some simple tests for file formats. (amulhern)
  - Give DeviceFormat objects an id (#1043763) (amulhern)
  - Refactor to use ObjectID class (#1043763) (amulhern)
  - Make a class that creates a unique-per-class id for objects (#1043763)
    (amulhern)
  - Revert "Make a class that creates a unique-per-class id for objects
    (#1043763)" (amulhern)
  - Revert "Give DeviceFormat objects an object_id (#1043763)" (amulhern)
  - Make the maximum end sector for PReP boot more benevolent (#1029893)
    (vpodzime)
  - Give DeviceFormat objects an object_id (#1043763) (amulhern)
  - Make a class that creates a unique-per-class id for objects (#1043763)
    (amulhern)
  - Make get_device_format_class return None if class not found (#1043763)
    (amulhern)
  - A few simple unit tests for some formats methods (#1043763) (amulhern)
  - Don't translate format names (dshea)


author: Brian C. Lane <bcl@redhat.com> - 0.36-1
changelog:
  - Update the TODO list. (dlehman)
  - Multipath, fwraid members need not be in exclusiveDisks. (#1032919) (dlehman)
  - Convert parted getLength values to Size (dshea)
  - Last of the Device._id -> Device.id (bcl)
  - iscsi: in installer automatically log into firmware iscsi targets (#1034291)
    (rvykydal)
  - Use isinstance for testing numeric types (vpodzime)
  - Device._id -> Device.id (clumens)
  - Allow resetting partition size to current on-disk size. (#1040352) (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.37-1
changelog:
  - Only do SELinux context resets if in installer mode (#1038146) (amulhern)
  - Look up SELinux context for lost+found where it is needed (#1038146)
    (amulhern)
  - Don't reset the SELinux context before the filesystem is mounted (#1038146)
    (amulhern)
  - Test setting selinux context on lost+found (#1038146) (amulhern)
  - Only retrieve the unit specifier once (dshea)
  - Fix the Device.id usage. (dshea)
  - Accept both English and localized sizes in Size specs. (dshea)
  - Use a namedtuple to store information on unit prefixes (dshea)
  - Remove en_spec Size parameters. (dshea)
  - Fix potential traceback in devicetree.populate. (#1055523) (dlehman)
  - Fall back on relabeling app where available (#1038590) (amulhern)
  - Change the meaning of label field values (#1038590) (amulhern)
  - Enable labeling on NTFS filesystem (#1038590) (amulhern)
  - Enable labeling on HFS filesystem (#1038590) (amulhern)
  - Add a method that indicates ability to relabel (#1038590) (amulhern)
  - Use filesystem creation app to set filesystem label (#1038590) (amulhern)
  - Import errors so FSError name is resolved (#1038590) (amulhern)
  - Remove BTRFS._getFormatOptions (#1038590) (amulhern)
  - Make an additional class for labeling abstractions (#1038590) (amulhern)
  - Fix copyright date (#1038590) (amulhern)
  - Remove redundant _defaultFormatOptions field (#1038590) (amulhern)
  - Remove code about unsetting a label (#1038590) (amulhern)
  - Return None if the filesystem has no label (#1038590) (amulhern)
  - Removed redundant check for existance of filesystem (#1038590) (amulhern)
  - Have writeLabel throw a more informative exception (#1038590) (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.38-1
changelog:
  - Some simple tests for _verifyLUKSDevicesHaveKey (#1023442) (amulhern)
  - Verify that LUKS devices have some encryption key (#1023442) (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.39-1
changelog:
  - escrow: make sure the output directory exists (#1026653) (wwoods)
  - provide a more useful error message if user fails to create an ESP (awilliam)
  - Tell lvcreate not to ask us any questions and do its job. (#1057066)
    (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.40-1
changelog:
  - makebumpver: Only remove from list if action is not Resolves (bcl)
  - Update bumpver to allow Related bugs (bcl)
  - Remove all dependent devices of san device becoming multipath (#1058939)
    (rvykydal)
  - When repopulating multipath members mark them as multipath (#1056024)
    (rvykydal)
  - fcoe: parse yet another sysfs structure for bnx2fc devices (#903122)
    (rvykydal)
  - fcoe: add fcoe=<NIC>:<EDB> to boot options for nics added manually (#1040215)
    (rvykydal)
  - Convert the ntfs minsize to an int (#1060031) (dshea)
  - Convert the string representation of Size to a str type. (#1060382) (dshea)
  - don't display stage2 missing error as well if the real problem is stage1
    (awilliam)
  - Provide a mechanism for platform-specific error messages for stage1 failure
    (awilliam)
  - Don't add None value to req_disks (#981316) (amulhern)
  - Make error message more informative (#1022497) (amulhern)
  - Check that file that loop device is going to use exists (#982164) (amulhern)
  - Use os.path.isabs to check whether path name is absolute (#994488) (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.41-1
changelog:
  - ntfs _getSize needs to use Decimal (#1063077) (bcl)
  - Separate sanityCheck-ing from doAutoPartition (#1060255) (amulhern)
  - Change messages to SanityExceptions objects (#1060255) (amulhern)
  - Make a small SanityException hierarchy (#1060255) (amulhern)
  - Remove unused exception class (#1060255) (amulhern)
  - Add another .decode("utf-8") to humanReadable (#1059807) (dshea)
  - makebumpver: Any failure should cancel the bump (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.42-1
changelog:
  - Wait for udev to create device node for new md arrays. (#1036014) (dlehman)
  - Fix detection of thin pool with non-standard segment types. (#1022810)
    (dlehman)
  - NFSDevice does not accept the exists kwarg. (#1063413) (dlehman)
  - Don't run mpathconf for disk image installations. (#1066008) (dlehman)
  - If /etc/os-release exists, check it to identify an installed system.
    (clumens)
  - Get the unit tests into a runnable state. (dlehman)
  - Update Source URL in spec file to use github. (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.43-1
changelog:
  - Include tmpfs mounts in post-install kickstart (#1061063) (mkolman)
  - Count with the extra metadata extents for RAID consistently (#1065737)
    (vpodzime)
  - Make partitioning error message more friendly (#1020388) (amulhern)
  - Fix partition handling across multiple processActions calls. (#1065522)
    (dlehman)
  - Let the udev queue settle before populating the devicetree. (#1049772)
    (dlehman)
  - Don't activate or deactivate devices from the action classes. (#1064898)
    (dlehman)
  - Improve handling of parted.DiskLabelCommitError slightly. (dlehman)
  - Make teardownAll work regardless of flags. (dlehman)
  - Fix maxSize test when setting device target size. (dlehman)
  - Size.convertTo should return a Decimal. (dlehman)
  - Don't use float for anything. (dlehman)
  - Fix type of block count in PartitionDevice._wipe. (dlehman)
  - Fix handling of size argument to devicelibs.lvm.thinlvcreate. (#1062223)
    (dlehman)
  - return empty set when no matching fcoe nic (#1067159) (bcl)
  - Return str from Size.humanReadable (#1066721) (dshea)
  - Add a coverage test target (#1064895) (amulhern)
  - Filesystem labeling tests will not run without utilities (#1065422)
    (amulhern)
  - Rename misc_test.py to something more descriptive (#1065422) (amulhern)
  - Refactor labeling tests (#1065422) (amulhern)
  - Move SwapSpace tests into a separate class (#1065422) (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.44-1
changelog:
  - Fix an old typo in zeroing out a PReP partition. (#1072781) (dlehman)
  - Only count with the extra metadata extents in new VGs and LVs (#1072999)
    (vpodzime)
  - Use container's parent's name for PV if available (#1065737) (vpodzime)
  - Fix traceback with write_dasd_conf. (#1072911) (sbueno+anaconda)
  - When copying a root, also copy hidden devices (#1043763) (amulhern)
  - Add hidden flag to devicetree.getDeviceByID (#1043763) (amulhern)
  - Only set device for mountpoint if it is not None (#1043763) (amulhern)
  - Extend the list of things to be omitted if moddisk is False (#1043763)
    (amulhern)
  - Set req_name to None at the top of initializer (#1043763) (amulhern)
  - Log action cancelation (#1043763) (amulhern)
  - Make DeviceTree.hide() remove a larger set (#1043763) (amulhern)
  - Re-write the DASD storage code. (#1001070) (sbueno+anaconda)
  - Include image install flag when updating from anaconda flags. (#1066008)
    (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.45-1
changelog:
  - Changes to allow pylint checks to be run on a distribution of the source.
    (amulhern)
  - Remove non-doing check target (amulhern)
  - Add a script to relate pylint errors to lines changed. (amulhern)
  - Change output format so that it is suitable for diff-cover. (amulhern)
  - Do an initial setup for running pylint tests in blivet. (amulhern)
  - Handle None in devicePathToName(#996303) (dshea)
  - Remove bootloader.packages from storage.packages (#1074522). (clumens)
  - Whitespace fixes for the crypto devicelib module (vpodzime)
  - Use random.choice for generating LUKS backup passphrase (vpodzime)
  - Trivial fixes for the lvm devicelib module (vpodzime)
  - Make vginfo work the same way as pvinfo and other LVM functions (vpodzime)
  - Allow NTFS to be mountable. (#748780) (dshea)
  - Limit the LV size to VG's free space size (vpodzime)


author: Brian C. Lane <bcl@redhat.com> - 0.46-1
changelog:
  - Adapt callers to use the new parent list interface. (dlehman)
  - Change management of Device parents to use a simple list interface. (dlehman)
  - Convert ContainerDevice to an abstract base class. (dlehman)
  - Set device uuid before calling Device ctor. (dlehman)
  - Improve the mechanism for VG completeness. (dlehman)
  - Support mutually-obsoleting actions. (dlehman)
  - Add some checking to MDRaidArrayDevice._setSpares. (dlehman)
  - Make sorting by action type part of the action classes. (dlehman)
  - Add action classes for container member set management. (dlehman)
  - Add a property to provide consistent access to parent container device.
    (dlehman)
  - Add type-specific methods for member set management. (dlehman)
  - Adapt callers to new method names for add/remove member device. (dlehman)
  - Add a ContainerDevice class to consolidate member management code. (dlehman)
  - Add backend functions for container member set management. (dlehman)
  - Teardown RAID device once testing is over (amulhern)
  - Make lvm tests runnable. (amulhern)
  - Make crypt tests runnable. (amulhern)
  - Replace unnecessarily complicated expression with string multiplication
    (amulhern)
  - Suppress unused variable warning for index in range (amulhern)
  - Suppress some unused variable warnings. (amulhern)
  - Suppress some unused variable warnings (amulhern)
  - Update to the new raise syntax (dshea)
  - Removed an unnecessary semicolon (dshea)
  - Removed a redundant definition of NoDisksError (dshea)
  - Specify regular expressions containing backslashes as raw strings (dshea)
  - Fixed some questionable indentation (dshea)
  - Fix logging function string format warnings. (dshea)
  - All size specifications should be Size instances (#1077163) (vpodzime)
  - Make sure StorageDevice's self._size is a Size instance (#1077179) (vpodzime)
  - Allow creating Size instance from another Size instance (vpodzime)
  - Force removal of hidden devices (#1078163) (amulhern)
  - Get action_test into working order. (dlehman)
  - Update action_test.py to specify sizes using blivet.size.Size. (dlehman)
  - Don't corrupt the environment when setting up StorageTestCase. (dlehman)
  - Make minSize, maxSize consistent and correct. (dlehman)
  - Don't prevent grow actions on devices with no max size. (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.47-1
changelog:
  - Change labelApp to a more concisely defined abstract property (amulhern)
  - Change defaultLabel to a more concisely defined abstract property. (amulhern)
  - Change _labelstrRegex to a more concisely defined abstract property.
    (amulhern)
  - Make reads property a bit more succinct. (amulhern)
  - Make name an abstract property and omit _name (amulhern)
  - Remove an unused import from devicelibs/raid.py (vpodzime)
  - Fix all pylint errors in pylintcodediff (amulhern)
  - Don't run test if the git branch is dirty (amulhern)
  - Exit if the specified log file does not exist. (amulhern)
  - Update lvm devicelibs tests to reflect recent changes. (dlehman)
  - Add required LVs as needed instead of trying to sort by attrs. (dlehman)
  - Fix missed conversion of rm->missing in vgreduce call. (dlehman)
  - Only gather lvm information one time per DeviceTree.populate call. (dlehman)
  - Add support for listing everything to pvinfo and lvs. (dlehman)
  - Get lv list from lvm in a more straightforward format. (dlehman)
  - Gather lv list where we use it to save from having to stash it. (dlehman)
  - Split out common lvm parsing code. (dlehman)
  - Add tests that use ParentList as part of Device. (dlehman)
  - Parent list length doesn't reflect new member in _addParent. (dlehman)
  - Rearrange _startEdd to be a little more obvious. (amulhern)
  - Raise exceptions using the new syntax (amulhern)
  - Do not import logging twice. (amulhern)
  - Suppress unused variable warning (amulhern)
  - Get rid of writeRandomUUID. (amulhern)
  - Remove unused variable but retain call for its side-effects (amulhern)
  - Put docstring in class (amulhern)
  - Remove appendiceal assignment (amulhern)
  - Keep first parameter "self" (amulhern)
  - Omit compile flag (amulhern)
  - Move lines beneath __main__ into a main method (amulhern)
  - Indent with spaces, not tabs (amulhern)
  - Change param default [] to None and convert in method (amulhern)
  - Change to a semantically equivalent version of FileDevice.path (amulhern)
  - Adapt existing tests to changed signature of some methods (amulhern)
  - Don't assign return value to unused variable (amulhern)
  - Be specific when catching exceptions (dshea)
  - Remove appendiceal assignments (amulhern)
  - Remove a lot of unused variables extracted from udev info (amulhern)
  - Don't get return values from communicate() if they are ignored (amulhern)
  - Use the disk's name in log message (amulhern)
  - Get rid of old exception unpacking syntax (dshea)
  - Rearranged some iffy exception checking (dshea)
  - Replace with a semantically equivalent chunk. (amulhern)
  - Remove some unused exception names. (amulhern)
  - Remove unused assignment to boot. (amulhern)
  - Delete method-local pruneFile function. (amulhern)
  - Don't comment out function headers but leave their bodies uncommented
    (amulhern)
  - Get rid of unnecessary pass statements (amulhern)
  - Put a field and a method in the base class (amulhern)
  - Spell parameter self correctly (amulhern)
  - Give abstract method the same signature as its overriding methods. (amulhern)
  - Catch correct error and disable warning. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.48-1
changelog:
  - Do not execute smallestMember property method twice. (amulhern)
  - Remove unnecessary function definitions in abstract properties (amulhern)
  - Pass format args as arguments to debug method (#1085057) (amulhern)
  - Move udev_settle call from util into fs to break circular dependency
    (amulhern)
  - Change implicit relative imports to explicit relative imports (amulhern)
  - Remove unused imports (amulhern)
  - Get rid of os.path import (amulhern)
  - Really avoid dynamic import of formats/__init__.py by itself (amulhern)
  - Ignore E1101 errors in savePassphrase. (amulhern)
  - Add a bunch of E1120 errors to the false positives file (amulhern)
  - Make LabelingAsRoot class an abstract class and define two properties
    (amulhern)
  - Suppress false positive W0631 error. (amulhern)
  - Use self.nic instead of nic (amulhern)
  - Make sure _state_functions is a dictionary in base class (amulhern)
  - Remove unnecessary lambda wrappers on assertion functions (amulhern)
  - Obvious fix inspired by an "Undefined variable warning" (amulhern)
  - Remove all references to lvm_vg_blacklist and blacklistVG. (amulhern)
  - Update for changes in the anaconda errorHandler API. (dshea)
  - Remove unused imports. (amulhern)
  - Import from the defining module. (amulhern)
  - Move import to top level. (amulhern)
  - Do not use implicit relative imports (amulhern)
  - Remove wildcard import (amulhern)
  - Fix a bug and catch a change in lvm's thin pool layout. (dlehman)
  - Plumb uuid down through DMDevice. (dlehman)


author: Brian C. Lane <bcl@redhat.com> - 0.49-1
changelog:
  - Slightly reduce loop and get rid of obsolete comment (amulhern)
  - Slightly rewrite loop to avoid a redefining builtin error (amulhern)
  - Simplify find_library and fix redefining built-in errors. (amulhern)
  - Make loop variables a little more descriptive (amulhern)
  - Make regular expressions raw strings. (amulhern)
  - Suppress unused variable warning and check for failure. (amulhern)
  - Add W0105 warning about attribute docstrings to false positives (amulhern)
  - Make signature of setup() in parent class same as in children (amulhern)
  - Suppress some correct pylint warnings (amulhern)
  - Get _loopMap.values() when all that's needed is the values (amulhern)
  - Obvious fix inspired by pylint E0602 error (amulhern)
  - Suppress W0631 warning for abbr and prefix. (amulhern)
  - Do not do formatting operation in the argument of the translation (amulhern)
  - Remove unnecessary global statements (amulhern)
  - Disable W0703 message in test (amulhern)
  - Explicitly set the module level platform variable (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.50-1
changelog:
  - Don't apply action until after all checks have passed. (dlehman)
  - Apply action for extended partition creation. (dlehman)
  - Fix an issue introduced in commit a210eb5c. (dlehman)
  - Move changes from action ctors into apply methods. (dlehman)
  - Tell lvm to prefer /dev/mapper/ and /dev/md/ to dm-X and mdX nodes. (dlehman)
  - Use the right md UUID when trying to look one up from addUdevDevice.
    (dlehman)
  - Pass UUID of existing md array to superclass constructor. (dlehman)
  - Fix accounting related to addition of md member devices. (dlehman)
  - Add some more tests for the Size.humanReadable method (vpodzime)
  - If size is an integer value, show it as an integer value (vpodzime)
  - Make sure that using just k/m/g/... results in KiB/MiB/GiB/... (vpodzime)
  - Make humanReadable size use binary prefixes and nicer units (vpodzime)
  - Round sizes in humanReadable instead of flooring them (vpodzime)
  - Do not assign result of evaluating EddTestFS() to a variable (amulhern)
  - Rename bits() to numBits() (amulhern)
  - Rename to avoid conflict with name in outer scope. (amulhern)
  - Put module level code in a method (amulhern)
  - Do not use strip() incorrectly (amulhern)
  - Disable E1101 (no-member) error (amulhern)
  - Use isResize in isShrink and isGrow. (amulhern)
  - Suppress W0612 (unused-variable) false positives (amulhern)
  - Suppress W0621 warnings (amulhern)
  - Add a stub function for get_bootloader (amulhern)
  - Suppress W0602 false positives (amulhern)
  - Remove BootLoaderError definitions (amulhern)
  - Disable E1003 warning. (amulhern)
  - Do not cache the DeviceFormat object (amulhern)
  - Suppress W0201 error where attribute is set in __new__. (amulhern)
  - Add to false positives an error which is not suppressed by a pragma.
    (amulhern)
  - Suppress W0201 errors (amulhern)
  - Make signature of Size.__str__ match signature of Decimal.__str__ (amulhern)
  - Do not evaluate % operator in log message arguments (amulhern)
  - Remove suite() methods in tests (amulhern)
  - Remove addKeyFromFile() method (amulhern)
  - Import name 'deviceaction' where needed (amulhern)
  - Setting variables in __init__ (amulhern)
  - Log exception information and disable W0703 warning. (amulhern)
  - Disable some W0703 warnings (amulhern)
  - Disable some W0703 warnings. (amulhern)
  - Add a function that logs available exception info. (amulhern)
  - Restrict scope of pylint pragmas as much as possible (amulhern)
  - Change all pylint numeric codes to mnemonic strings. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.51-1
changelog:
  - Adjust the available size on each disk using chunk size. (amulhern)
  - Removed some now unused methods from devices (#1085474) (amulhern)
  - Rename size() method to get_size() method. (amulhern)
  - Remove unused get_size method (#1085474) (amulhern)
  - Use raid.size method to get size of device (#1085474) (amulhern)
  - Add a size() method to the raid classes (#1085474) (amulhern)
  - Move line that might throw an MDRaid exception inside try block (#1085474)
    (amulhern)
  - Check whether type is mdbiosraidarray before checking smallest member
    (#1085474) (amulhern)
  - Log if there was a failure to calculate the size of the MDRaidArrayDevice
    (#1085474) (amulhern)
  - Rename get_raw_array_size to get_net_array_size (#1085474) (amulhern)
  - Rename _get_size to _trim, which describes its function better (#1085474)
    (amulhern)
  - Improve comments on a few methods (#1085474) (amulhern)
  - Make RAIDLevels iterable (#1085474) (amulhern)
  - Update makebumpver for python-bugzilla 1.0.0 (bcl)
  - Disable unused argument warning for 'key_file' in devicelibs.crypto methods
    (amulhern)
  - Disable unused argument warning for 'del_passphrase' in luks_remove_key
    (amulhern)
  - Disable unused argument warning for 'data' in doAutoPartition (amulhern)
  - Disable unused argument warning for 'info' in handleUdevLuksFormat (amulhern)
  - Disable unused argument warning for 'disks' in get_pv_space. (amulhern)
  - Remove pointless parameters from unittest methods. (amulhern)
  - Disable a no member warning for EddTestFS initializer. (amulhern)
  - Get rid of unused argument 'args' in MakeBumpVer constructors (amulhern)
  - Changes to _parseOneLine() and its single invocation. (amulhern)
  - Remove obsolete comment (amulhern)
  - Rename to avoid redefining parameter built-ins (amulhern)
  - Change name to avoid redefining built-in (amulhern)
  - Remove unused parameter in makeupdates. (amulhern)
  - Removed unused argument 'options' from testMount (amulhern)
  - Make signature of _setSize match that of the method it overrrides. (amulhern)
  - Actually use argv parameter (amulhern)
  - Pass fname as first argument to shutil.copy2 (amulhern)
  - Remove minimumSector method and _minimumSector attribute (amulhern)
  - Disable not-callable pylint warning. (amulhern)
  - Set child_factory_fstype to None in DeviceFactory (amulhern)
  - Suppress unpacking-non-sequence pylint warning (amulhern)
  - Prefix name with defining package (amulhern)
  - Update Platform instance from flags instead of replacing it. (#1090646)
    (dlehman)
  - Rename to avoid redefining built-ins where the redefinition is method local.
    (amulhern)
  - Set device.format in else block of try/except/else. (amulhern)
  - Do not run pylint on sphinx generated conf.py (amulhern)
  - Get rid of a redefined builtin while simplifying method. (amulhern)
  - Compress loop into generator list comprehension (amulhern)
  - Rewrite resize() method to depend on _resizable. (amulhern)
  - Remove definition of LVMThinLogicalVolumeDevice._resizable (amulhern)
  - Add an attribute docstring for _resizable. (amulhern)
  - Correct comment on resizable property (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.52-1
changelog:
  - Split ROOT_PATH usage into getTargetPhysicalRoot()/getSysroot() (walters)
  - Update and fix copyright info for docs. (dlehman)
  - Add some tests for extended partition management. (dlehman)
  - Add some tests that verify the results of DeviceTree.populate. (dlehman)
  - Add a base class for tests backed by disk image storage. (dlehman)
  - Adapt examples to examples/common.py function dispersement. (dlehman)
  - Change devices.SparseFileDevice._create to use util.create_sparse_file.
    (dlehman)
  - Move set_up_logging and create_sparse_file into blivet.util for reuse.
    (dlehman)
  - Make examples.common.tear_down_disk_images a DeviceTree method. (dlehman)
  - Fix handling of devices activated as a side-effect of actions. (dlehman)
  - Check for problematic active devices before processing any actions. (dlehman)
  - Split some large blocks out of DeviceTree.processActions. (dlehman)
  - Explicitly requested extended partitions already have an action. (dlehman)
  - Fix handling of extended partitions across various modes of operation.
    (dlehman)
  - Handle the case of md arrays getting activated from outside blivet. (dlehman)
  - Make an extra effort to remove dm partition nodes that want to stay.
    (dlehman)
  - Fix handling of clearing a partitioned disk and leaving it cleared. (dlehman)
  - Don't check for disklabels on partitions. (dlehman)
  - Update targetSize to reflect actual size after a device is created. (dlehman)
  - Remove redundant msecs from logging timestamp. (dlehman)
  - Make signature of Size.__new__ match signature of Decimal.__new__ (amulhern)
  - Change Size so that it takes a single value parameter. (amulhern)
  - Change all 'format' keyword args to 'fmt' in Device constructors (amulhern)
  - Change format keyword argument to fmt in scheduleCreateFormat (amulhern)
  - Change keyword parameters in devicetree.findActions (amulhern)
  - Change ActionCreateFormat constructor keyword argument to 'fmt' (amulhern)
  - Remove unused parameter 'ignoreErrors' from umountFilesystems() (amulhern)
  - Remove parameter 'raiseErrors' from mountFilesystems() methods. (amulhern)
  - Disable unused argument warning for 'major' and 'minor' (amulhern)
  - Set dummy functions as values rather than via function definition syntax.
    (amulhern)
  - Pass size value to superconstructor for LVMVolumeGroupDevice. (amulhern)
  - Sort the pylint-false-positives file (amulhern)
  - Do not disable unused argument warning. (amulhern)
  - Omit pylint warning about disabled warnings or errors from pylint log.
    (amulhern)
  - Put the pyblock warning in pylint-false-positives (amulhern)
  - Remove obsolete documentation for parameter 'label'. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.53-1
changelog:
  - Remove extra quotes from the xfs_db arguments. (dshea)
  - Factor duplicate code in __deepcopy__ methods into one method (#1095244)
    (amulhern)
  - Rearrange code related to handleUdevDeviceFormat() (#1095329) (amulhern)
  - Make dumpState catch and log all AttributeErrors (#1095329) (amulhern)
  - Add sectorSize property to catch and handle missing partedDevice (#1095329)
    (amulhern)
  - Get rid of remaining uses of spec keyword for Size() in examples directory.
    (amulhern)
  - Generalize false positive regular expression for multiple pylint versions
    (amulhern)
  - Do not run some tests unless running on Jenkins. (amulhern)
  - Miscellaneous pylint fixes. (amulhern)
  - Globally disable pointless string statement warning (amulhern)
  - Disable unused argument warning for 'args' in TmpFSDevice constructor
    (amulhern)
  - Omit 'args' parameter from formats constructors (amulhern)
  - Disabled unused argument warning for kwargs in formats.destroy() (amulhern)
  - Omit *args from parameters for format.create() and formats.destroy()
    (amulhern)
  - Omit *args from parameters in formats.setup() (amulhern)
  - Make formats.teardown() not take any extra parameters. (amulhern)
  - Make formats.mount use explicit keywords instead of kwargs. (amulhern)
  - Remove non-self params from FS.doResize method (amulhern)
  - Make doFormat use regular style keyword parameters (amulhern)
  - Do not use *args, **kwargs idiom in scheduleCreateFormat. (amulhern)
  - Do not use *args, **kwargs idiom in various schedule* auxiliary test methods.
    (amulhern)
  - Remove upgrading param from turnOnSwap() (amulhern)
  - Disable unused-argument warning (amulhern)
  - Disable pylint unused-argument warning. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.54-1
changelog:
  - Add tests for setting device's parent list directly (vpodzime)
  - Do not alter the ParentList being iterated over (#1083581) (vpodzime)
  - Do not limit ThinLV's size to VG's free space (vpodzime)
  - Take extra RAID metadata into account when growing LV (#1093144) (vpodzime)
  - Move apply_chunk_growth outside of a for-cycle (vpodzime)
  - Multiple arguments for string formatting need to be in parentheses (#1100263)
    (mkolman)
  - Make print statements Python 3 compatible (mkolman)
  - Validate device names (dshea)
  - Use a setter for Device.name as foretold by the prophecy of TODO (dshea)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.55-1
changelog:
  - IPSeriesPPC now supports GPT in Open Firmware (hamzy)
  - Fix device name validation for devices that can contain / (#1103751) (dshea)
  - Add a getRaidLevel() convenience method to raid.py (amulhern)
  - Make a StorageDevice.raw_device property and use it where appropriate
    (amulhern)
  - Simplify a small chunk of Blivet.updateKSData() (amulhern)
  - Move the code for getting a space requirement from devicefactory to raid.
    (amulhern)
  - Make all devicefactory classes uses RAID objects instead of strings.
    (amulhern)
  - Remove devicefactory.get_raid_level from blivet (amulhern)
  - Put get_supported_raid_levels in devicefactory.py (amulhern)
  - Make BTRFS devices use RAID objects instead of strings for levels (amulhern)
  - Add lists of supported RAID levels for btrfs and lvm (amulhern)
  - Add "linear" to mdraid's list of supported raid levels. (amulhern)
  - Remove getRaidLevel() from mdraid file and make RAID_levels public (amulhern)
  - Check for required methods in MDRaidLevels.isRaidLevel. (amulhern)
  - Use has_redundancy property to decide how to add a member to an array.
    (amulhern)
  - Update the mdraid.mdadd comments (amulhern)
  - Use has_redundancy raid property when checking whether a device is removable
    (amulhern)
  - Make createBitmap() a property and update tests appropriately. (amulhern)
  - Add a Dup class to the various descendants of RAIDLevel. (amulhern)
  - Add an is_uniform property to the RAID levels. (amulhern)
  - Add a has_redundancy method that returns True if there is actual redundancy
    (amulhern)
  - Add Linear and Single to the RAID classes. (amulhern)
  - Move Container class to raid package and tidy it up (amulhern)
  - Allow the RAID object itself to be a valid RAID descriptor for lookup.
    (amulhern)
  - Adjust RaidLevel hierarchy so that all raid level objects extend RAIDLevel
    (amulhern)
  - No longer use _standard_levels as the default set of RAID levels. (amulhern)
  - Extract selection of members in complete() into a separate method. (amulhern)
  - Remove DMRaidArrayDevice.members property. (amulhern)
  - Comment mdraid.mdcreate() and update tests appropriately. (amulhern)
  - Import name 'lvm' instead of names from lvm package. (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.56-1
changelog:
  - Skip device name validation for some device types. (dlehman)
  - Add a property indicating whether a device is directly accessible. (dlehman)
  - Add support for read-only btrfs snapshots. (dlehman)
  - Add tests for snapshots. (dlehman)
  - Special treatment for getting parted device for old-style lvm snapshots.
    (dlehman)
  - Some devices have immutable formatting. (dlehman)
  - Detect existing btrfs snapshots. (dlehman)
  - Drop special accounting for snapshot space usage in VG. (dlehman)
  - Use LVMSnapshotDevice when populating the devicetree. (dlehman)
  - Add Device classes for snapshots. (dlehman)
  - Add ignore_skip keyword arg to lvactivate. (dlehman)
  - Add optional kwarg to force removal of a logical volume. (dlehman)
  - Add backend functions for creating and managing snapshots. (dlehman)
  - Add docstrings for BTRFSVolumeDevice and BTRFSSubVolumeDevice. (dlehman)
  - Remove duplicate portion of lvm config string. (dlehman)
  - Reset the devicetree before tearing everything down in _cleanUp. (dlehman)
  - Make sure disk filters are applied even if populate fails. (dlehman)
  - Sync the spec file with downstream (vpodzime)


author: Brian C. Lane <bcl@redhat.com> - 0.57-1
changelog:
  - Make DevicelibsTestCase devices configurable. (amulhern)
  - Use correct parameters in __init__() in subclasses of unittest.TestCase.
    (amulhern)
  - Add num_blocks parameter to makeLoopDev(). (amulhern)
  - Move skipUnless decorator to the top level class of skipped classes.
    (amulhern)
  - Explicitly accept a string as well as a RAIDLevel object. (amulhern)
  - Update BTRFS initializer comments for level type. (amulhern)
  - Remove some extra imports. (amulhern)
  - Add method to set the default disklabel (#1078537) (bcl)
  - Do not try to activate dmraid sets if the dmraid usage flag is false
    (mkolman)
  - Use the value of the Anaconda dmraid flag to set the Blivet dmraid flag
    (mkolman)
  - Use the value of the Anaconda ibft flag to set the Blivet ibft flag (mkolman)
  - Ignore _build directory in doc directory. (amulhern)
  - Change intersphinx mapping to avoid linkcheck redirect errors. (amulhern)
  - Remove doctest target from Makefile. (amulhern)
  - Allow the table of contents to go one level deeper. (amulhern)
  - Automate generation of the .rst files which just set up the modules.
    (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.58-1
changelog:
  - Only import ROOT_PATH if needed (bcl)
  - Add early keyword to setUpBootLoader (#1086811) (bcl)
  - Only log a warning about labeling if something is wrong (#1075136) (amulhern)
  - When adding an md array, allow adding incomplete arrays (#1090009) (amulhern)
  - Add a flag to control whether a degraded md raid array is used (#1090009)
    (amulhern)
  - Remove preferLeaves parameter from getDeviceByPath() (amulhern)
  - Factor out commonalities among getDevice[s|]By* methods. (amulhern)
  - Omit special check for md devices in addUdevDevice(). (amulhern)
  - Remove unused 'slaves' variable. (amulhern)
  - Move down or remove assignment to device in add* methods. (amulhern)
  - Move DevicelibsTestCase up to the top level of the testing directory.
    (amulhern)
  - Accept None for btrfs raid levels (#1109195) (amulhern)
  - Add a test for a btrfs error associated with small devices (#1109195)
    (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.60-1
changelog:
  - Do not use udev info to get the name of the device. (amulhern)
  - Remove unnecessary fanciness about importing devices. (amulhern)
  - Disable some pylint warnings that arise due to anaconda versions. (amulhern)
  - Allow RAID1 on EFI (#788313) (amulhern)


author: Brian C. Lane <bcl@redhat.com> - 0.61-1
changelog:
  - Fix conf.py version bumping (bcl)
  - Add some tests for Chunk and Request class hierarchy. (dlehman)
  - Honor the skip list when allocating leftover sectors. (dlehman)
  - A Chunk is done growing when its pool is empty. (dlehman)
  - Don't use integer division to calculate a fraction. (dlehman)
  - Bump version in sphinx config from scripts/makebumpver. (dlehman)
  - Remove spec= from Size usage in intro.rst. (dlehman)
  - Attempt to reset the uuid of the mdraid member device (#1070095) (amulhern)
  - Add new method udev.device_get_md_device_uuid() method (#1070095) (amulhern)
  - Canonicalize mdadm generated UUIDS (#1070095) (amulhern)
  - Add a udev.device_get_md_metadata() method to udev and use it. (amulhern)
  - Change use of METADATA to MD_METADATA. (amulhern)
  - Check for md_level of None (amulhern)
  - Do not convert the result of udev.device_get_md_devices() to int. (amulhern)
  - Add documentation to udev.device_get_md_*() methods. (amulhern)
  - Document udev.device_get_uuid() method. (amulhern)
  - Add a few small tests for mdexamine (amulhern)
  - Add test for raid level descriptor None. (amulhern)
  - Use context manager with assertRaises*() tests. (amulhern)
  - Change uuid parameter to array_uuid (amulhern)
  - Remove udev_ prefix from udev methods. (amulhern)
  - Remove all references to DeviceFormat.majorminor (amulhern)
  - Use add_metaclass instead of with_metaclass. (amulhern)
  - Disable redefined-builtin warning. (amulhern)
  - Use range instead of xrange in generateBackupPassphrase() (amulhern)
  - Add a simple test of generateBackupPassphrase() result format (amulhern)
  - Python3 compatibility (rkuska)
  - Replace python-setuptools-devel BR with python-setuptools (bcl)


author: David Lehman <dlehman@redhat.com> - 0.61.0.1-1
changelog:
  - Remove dependency on python-six. (dlehman)
    Related: rhbz#1075561
  - Update transifex config for rhel7-branch. (dlehman)
    Related: rhbz#1075561
  - Don't pass md array UUID as member format UUID. (dlehman)
    Related: rhbz#1075561
  - Make prefering leaves the default in getDeviceByPath (amulhern)
    Related: rhbz#1075561
  - Make _filterDevices() return a generator consistently (amulhern)
    Related: rhbz#1075561
  - Add some tests for blivet.partitioning.addPartition. (dlehman)
    Related: rhbz#1075561
  - Add a couple of tests for blivet.partitioning.DiskChunk. (dlehman)
    Related: rhbz#1075561
  - Add a DiskFile class for testing partitioning code as a non-root user.
    (dlehman)
    Related: rhbz#1075561
  - Add a contextmanager to create and remove sparse tempfiles. (dlehman)
    Related: rhbz#1075561
  - Make missing encryption key error message more helpful (amulhern)
    Resolves: rhbz#1074441


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.2-1
changelog:
  - Condense and comment some devicelibs.dasd methods (amulhern)
    Related: rhbz#1070115
  - Add a test file for DASD handling (amulhern)
    Related: rhbz#1070115
  - Pylint inspired cleanup (amulhern)
    Related: rhbz#1070115
  - Add a property for read-only devices. (dshea)
    Resolves: rhbz#1072619
  - Allow user code creating free space snapshot (vpodzime)
    Related: rhbz#1132436
  - Add two functions to enable manual addition of ECKD DASDs. (sbueno+anaconda)
    Related: rhbz#1070115


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.3-1
changelog:
  - Disable MacEFI platform type and hfs+ ESP (bcl)
    Related: rhbz#1119305
  - Prefer ID_SERIAL over ID_SERIAL_SHORT (vpodzime)
    Resolves: rhbz#1138254


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.4-1
changelog:
  - Check if device has enough members when setting RAID level (amulhern)
    Related: rhbz#1019685
  - Add BTRFSValueError error and use in btrfs related code (amulhern)
    Related: rhbz#1019685
  - iscsi: mount partitions in initramfs for root on iscsi (rvykydal)
    Related: rhbz#740106
  - Remove poolMetaData (amulhern)
    Resolves: rhbz#1021505


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.5-1
changelog:
  - Make sure autopart requests fit in somewhere (vpodzime)
    Resolves: rhbz#978266
  - Work with free region sizes instead of parted.Geometry objects (vpodzime)
    Related: rhbz#978266
  - Check that we have big enough free space for the partition request (vpodzime)
    Related: rhbz#978266
  - Allow specifying minimum entropy when creating LUKS (vpodzime)
    Related: rhbz#1073679
  - Allow user code provide callbacks for various actions/events (vpodzime)
    Related: rhbz#1073679
  - Fix pylint errors from recent btrfs commits. (dlehman)
    Related: rhbz#1015072
    Related: rhbz#1095866
  - Only cancel actions on disks related to the one we are hiding. (dlehman)
    Related: rhbz#1085201
    Related: rhbz#1129595
    Related: rhbz#1075671
  - Cancel actions before hiding descendent devices. (dlehman)
    Related: rhbz#1085201
    Related: rhbz#1129595
    Related: rhbz#1075671
  - Improve handling of device removals/additions from the devicetree. (dlehman)
    Resolves: rhbz#1077906
    Resolves: rhbz#1085201
    Resolves: rhbz#1129595
    Resolves: rhbz#1075671
  - The first format destroy action should obsolete any others. (dlehman)
    Related: rhbz#1085201
    Related: rhbz#1075671
  - Propagate mount options for btrfs members to all volumes/subvolumes.
    (dlehman)
    Resolves: rhbz#1095866
  - Properly identify dm devices even when udev info is incomplete. (dlehman)
    Resolves: rhbz#1080727
  - Do not mount btrfs to list subvolumes outside installer_mode. (dlehman)
    Resolves: rhbz#1015072
  - Reset default subvolume prior to removing the default subvolume. (dlehman)
    Resolves: rhbz#1076383
  - Increase max size for btrfs to 16 EiB. (dlehman)
    Resolves: rhbz#1114435
  - Improve adjustment for removal of a subvol in BTRFSFactory. (dlehman)
    Resolves: rhbz#1078995
  - Set dummy mountpoint in ksdata for lvm thin pools. (dlehman)
    Resolves: rhbz#1100244


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.6-1
changelog:
  - Disable LVM autobackup when doing image installs (wwoods)
    Resolves: rhbz#1066004
  - Add attribute 'flags.lvm_metadata_backup' (wwoods)
    Related: rhbz#1066004
  - lvm_test: refactoring + minor fix (wwoods)
    Related: rhbz#1066004
  - devicelibs.lvm: refactor _getConfigArgs()/lvm() (wwoods)
    Related: rhbz#1066004
  - devicelibs.lvm: fix pvmove(src, dest=DESTPATH) (wwoods)
    Related: rhbz#1066004
  - Align free regions used for partition growing calculations. (dlehman)
    Resolves: rhbz#1083687
  - Try to align end sector up when aligning new partitions. (dlehman)
    Related: rhbz#1090477
  - Remove obsolete conversion of size to float. (dlehman)
    Resolves: rhbz#1140642
  - Honor size specified for explicit extended partition requests. (dlehman)
    Resolves: rhbz#1077250
  - Honor zerombr regardless of clearpart setting. (dlehman)
    Resolves: rhbz#1117946
  - Fix treatment of percent as lvm lv size spec. (dlehman)
    Related: rhbz#1116435
  - Change variable keyword (amulhern)
    Related: rhbz#1075671
  - Remove unused import (amulhern)
    Related: rhbz#1075671
  - Remove unused import (amulhern)
    Related: rhbz#1073679
  - Don't mix target and discovery credentials (mkolman)
    Resolves: rhbz#1037564
  - Make sure /boot/efi is metadata 1.0 if it's on mdraid. (pjones)
    Related: rhbz#788313
  - iscsi: fix root argument being overriden by local variable (rvykydal)
    Resolves: rhbz#1144463
  - iscsi: add iscsi singleton back (rvykydal)
    Related: rhbz#1144463


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.7-1
changelog:
  - Remove all traces of singlePV. (sbueno+anaconda)
    Related: rhbz#1147501
  - Change the default /boot part on s390x to not be lvm. (sbueno+anaconda)
    Resolves: rhbz#1147501
  - Remove redundant check for parents in Blivet.newBTRFS. (dlehman)
    Resolves: rhbz#1072285
  - Filter out free regions too small for alignment of partitions. (dlehman)
    Related: rhbz#1083687
  - Return early when setting new size for non-existent partition. (dlehman)
    Related: rhbz#978266


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.10-1
changelog:
  - Raise an exception when we find orphan partitions. (dlehman)
    Related: rhbz#1144410
  - Fall back to parted to detect dasd disklabels. (dlehman)
    Resolves: rhbz#1144410


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.11-1
changelog:
  - Convert int to str before passing it to run_program (#1151129)
    Related: rhbz#1076383
  - Avoid unneccesarily tripping raid-level member count checks. (dlehman)
    Related: rhbz#1148980
  - Allow toggling encryption of raid container members. (dlehman)
    Related: rhbz#1148980


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.12-1
changelog:
  - Take care when checking relationship of parent and child UUIDs (amulhern)
    Related: rhbz#1151649
  - Canonicalize MD_UUID* values in udev.py (amulhern)
    Resolves: rhbz#1153096
  - Add a test for activation (amulhern)
    Related: rhbz#1153096
  - Add a test for mddetail on containers (amulhern)
    Related: rhbz#1153096
  - Still attempt to destroy even if remove failed (amulhern)
    Related: rhbz#1153096
  - Use long messages for unittest errors (amulhern)
    Related: rhbz#1153096
  - Fix mdnominate error message (amulhern)
    Related: rhbz#1153096
  - Break once metadata value is found (amulhern)
    Related: rhbz#1153096
  - Split mdadd into separate functions (amulhern)
    Related: rhbz#1153096
  - Refactor mdraid tests (amulhern)
    Related: rhbz#1153096
  - Add a method to extract information about an mdraid array (amulhern)
    Related: rhbz#1153096
  - Extend mdadm() to capture output (amulhern)
    Related: rhbz#1153096
  - Be more robust in the face of possible changes to mdadm's UUIDs (amulhern)
    Related: rhbz#1153096
  - Factor canonicalize_UUID() into separate method (amulhern)
    Related: rhbz#1153096
  - Add a docstring to mdraid.mdexamine (amulhern)
    Related: rhbz#1153096
  - Update tests to bring into line w/ previous commit (amulhern)
    Related: rhbz#1151649
  - Abstract ContainerDevice member format check into a method (amulhern)
    Resolves: rhbz#1151649
  - Register DeviceFormat class (amulhern)
    Related: rhbz#1151649


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.13-1
changelog:
  - Set _partedDevice attribute before calling device constructor (amulhern)
    Related: rhbz#1151649
  - Set sysfsPath attribute before calling Device constructor (amulhern)
    Related: rhbz#1151649


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.15-1
changelog:
  - Add testing for MDRaidArrayDevice.mdadmFormatUUID (amulhern)
    Related: rhbz#1155151
  - Give mdadm format uuids to the outside world (amulhern)
    Resolves: rhbz#1155151


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.16-1
changelog:
  - Add ability to set a default fstype for the boot partition (bcl)
    Related: rhbz#1112697
  - Pass a list of string items to log_method_return. (sbueno+anaconda)
    Resolves: rhbz#1155984


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.17-1
changelog:
  - getArch should return ppc64 or ppc64le (bcl)
    Resolves: rhbz#1159271
  - Pack data for the wait_for_entropy callback (vpodzime)
    Related: rhbz#1073679
  - Allow the wait_for_entropy callback enforce continue (vpodzime)
    Related: rhbz#1073679


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.21-1
changelog:
  - Use _netdev mount option as needed. (dlehman)
    Resolves: rhbz#1166509
  - Don't crash when a free region is too small for an aligned partition.
    (dlehman)
    Resolves: rhbz#1167292
  - Avoid exception when aligned start and end are crossed over (exclusion)
    Resolves: rhbz#1167233
  - Multiple loops shouldn't be fatal (bcl)
    Resolves: rhbz#980510
  - If allowing degraded array, attempt to start it (amulhern)
    Resolves: rhbz#1090009
  - Add a method that looks at DEVNAME (amulhern)
    Related: rhbz#1090009
  - Add mdrun method to just start, not assemble, an array. (amulhern)
    Related: rhbz#1090009
  - Change allow_degraded_mdraid flag to allow_imperfect_devices (amulhern)
    Related: rhbz#1090009


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.23-1
changelog:
  - Raise a more descriptive exception for corrupt gpt disklabels. (dlehman)
    Resolves: rhbz#1123450
  - Don't raise an exception for failure to scan an ignored disk. (dlehman)
    Related: rhbz#1123450
  - Try to deactivate lvm on corrupted gpt disks. (dlehman)
    Related: rhbz#1123450


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.25-1
changelog:
  - Fallback implicit partition size must be big enough for BTRFS (vpodzime)
    Related: rhbz#1171116
  - Make implicit partitions smaller if real requests don't fit anywhere
    (vpodzime)
    Resolves: rhbz#1171116
  - Revert "Try to deactivate lvm on corrupted gpt disks." (dlehman)
    Resolves: rhbz#1186317


author: Brian C. Lane <bcl@redhat.com> - 0.61.0.26-1
changelog:
  - Use a safer method to get a dm partition's disk name. (dlehman)
    Resolves: rhbz#1190886
    Related: rhbz#1181336


author: Andy Grover <agrover@redhat.com> - 1.99.1.git987b63b-3
changelog:
  - Address comments from spec review
    - drop examples/myshell from doc, it hasn't been updated for API change
    - Fully document procedure to generate source .tar.gz
    - Remove "." from summary
    - Remove commented-out spec todos and other cruft


author: Andy Grover <agrover@redhat.com> - 1:1.1-2
changelog:
  - Properly update changelog
  - Sync version with upstream, Epoch used
  - Change Source URL to intermediate github repo


author: Andy Grover <agrover@redhat.com> - 1:1.1.fb1-1
changelog:
  - New upstream source and release
  - Remove patches:
    * python-configshell-remove-epydoc-dep.patch
    * python-configshell-git-version.patch


author: Andy Grover <agrover@redhat.com> - 1:1.1.fb9-1
changelog:
  - New upstream release
  - Remove dependency on python-simpleparse in favor of pyparsing
  - Remove BuildRequires


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.0-1
changelog:
  - New since 1.6.0:
  -
  -        Rdatas now have a to_digestable() method, which returns the
  -        DNSSEC canonical form of the rdata, suitable for use in
  -        signature computations.
  -
  -        The NSEC3, NSEC3PARAM, DLV, and HIP RR types are now supported.
  -
  -        An entropy module has been added and is used to randomize query ids.
  -
  -        EDNS0 options are now supported.
  -
  -        UDP IXFR is now supported.
  -
  -        The wire format parser now has a 'one_rr_per_rrset' mode, which
  -        suppresses the usual coalescing of all RRs of a given type into a
  -        single RRset.
  -
  -        Various helpful DNSSEC-related constants are now defined.
  -
  -        The resolver's query() method now has an optional 'source' parameter,
  -        allowing the source IP address to be specified.
  -
  - Bugs fixed since 1.6.0:
  -
  -        On Windows, the resolver set the domain incorrectly.
  -
  -        DS RR parsing only allowed one Base64 chunk.
  -
  -        TSIG validation didn't always use absolute names.
  -
  -        NSEC.to_text() only printed the last window.
  -
  -        We did not canonicalize IPv6 addresses before comparing them; we
  -        would thus treat equivalent but different textual forms, e.g.
  -        "1:00::1" and "1::1" as being non-equivalent.
  -
  -        If the peer set a TSIG error, we didn't raise an exception.
  -
  -        Some EDNS bugs in the message code have been fixed (see the ChangeLog
  -        for details).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.1-1
changelog:
  - New since 1.7.0:
  -
  -        Nothing
  -
  - Bugs fixed since 1.7.0:
  -
  -        The 1.7.0 kitting process inadventently omitted the code for the
  -        DLV RR.
  -
  -        Negative DDNS prerequisites are now handled correctly.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-1
changelog:
  - New since 1.7.1:
  -
  -  Support for hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and
  -  hmac-sha512 has been contributed by Kevin Chen.
  -
  -  The tokenizer's tokens are now Token objects instead of (type,
  -  value) tuples.
  -
  - Bugs fixed since 1.7.1:
  -
  -  Escapes in masterfiles now work correctly.  Previously they were
  -  only working correctly when the text involved was part of a domain
  -  name.
  -
  -  When constructing a DDNS update, if the present() method was used
  -  with a single rdata, a zero TTL was not added.
  -
  -  The entropy pool needed locking to be thread safe.
  -
  -  The entropy pool's reading of /dev/random could cause dnspython to
  -  block.
  -
  -  The entropy pool did buffered reads, potentially consuming more
  -  randomness than we needed.
  -
  -  The entropy pool did not seed with high quality randomness on
  -  Windows.
  -
  -  SRV records were compared incorrectly.
  -
  -  In the e164 query function, the resolver parameter was not used.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.1-1
changelog:
  - New since 1.9.0:
  -
  -        Nothing.
  -
  - Bugs fixed since 1.9.0
  -
  -        The dns.dnssec module didn't work with DSA due to namespace
  -        contamination from a "from"-style import.
  -
  - New since 1.8.0:
  -
  -        dnspython now uses poll() instead of select() when available.
  -
  -        Basic DNSSEC validation can be done using dns.dnsec.validate()
  -        and dns.dnssec.validate_rrsig() if you have PyCrypto 2.3 or
  -        later installed.  Complete secure resolution is not yet
  -        available.
  -
  -        Added key_id() to the DNSSEC module, which computes the DNSSEC
  -        key id of a DNSKEY rdata.
  -
  -        Added make_ds() to the DNSSEC module, which returns the DS RR
  -        for a given DNSKEY rdata.
  -
  -        dnspython now raises an exception if HMAC-SHA284 or
  -        HMAC-SHA512 are used with a Python older than 2.5.2.  (Older
  -        Pythons do not compute the correct value.)
  -
  -        Symbolic constants are now available for TSIG algorithm names.
  -
  - Bugs fixed since 1.8.0
  -
  -        dns.resolver.zone_for_name() didn't handle a query response
  -        with a CNAME or DNAME correctly in some cases.
  -
  -        When specifying rdata types and classes as text, Unicode
  -        strings may now be used.
  -
  -        Hashlib compatibility issues have been fixed.
  -
  -        dns.message now imports dns.edns.
  -
  -        The TSIG algorithm value was passed incorrectly to use_tsig()
  -        in some cases.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.2-1
changelog:
  - It's brown paper bag time :) The fix for the import problems was
  - actually bad, but didn't show up in testing because the test suite's
  - conditional importing code hid the problem.
  -
  - Any, 1.9.2 is out.
  -
  - Sorry for the churn!


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.3-1
changelog:
  -
  - New since 1.9.2:
  -
  -     A boolean parameter, 'raise_on_no_answer', has been added to
  - the query() methods.  In no-error, no-data situations, this
  - parameter determines whether NoAnswer should be raised or not.
  - If True, NoAnswer is raised.  If False, then an Answer()
  - object with a None rrset will be returned.
  -
  - Resolver Answer() objects now have a canonical_name field.
  -
  - Rdata now have a __hash__ method.
  -
  - Bugs fixed since 1.9.2:
  -
  -        Dnspython was erroneously doing case-insensitive comparisons
  - of the names in NSEC and RRSIG RRs.
  -
  - We now use "is" and not "==" when testing what section an RR
  - is in.
  -
  - The resolver now disallows metaqueries.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.4-1
changelog:
  -
  - dnspython 1.9.4 has been released and is available at
  - http://www.dnspython.org/kits/1.9.4/
  -
  - There is no new functionality in this release; just a few bug fixes
  - in RRSIG and SIG code.
  -
  - I will be eliminating legacy code for earlier versions of DNSSEC in a
  - future release of dnspython.


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-1
changelog:
  - Rebase to version 1.11.1
  - Remove downstream patch that was merged upstream
  Resolves: rhbz#1112999


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-2.20140901git9329daf
changelog:
  - Rebase to latest upstream commit
  - Remove unnecessary sources and patches
  - Specfile cleanup
  Resolves: rhbz#1112999


author: Rob Crittenden <rcritten@redhat.com> - 0.1735-2
changelog:
  - Include GSS_C_DELEG_FLAG in gss_init_sec_context() so the command-line
    tools can do kerberos ticket forwarding.


author: Rob Crittenden <rcritten@redhat.com> - 1.0-1
changelog:
  - Change name to python-kerberos from PyKerberos
  - Change license from "Apache License" to ASL 2.0 per guidelines
  - Upstream released 1.0 which is equivalent to version 1541. Reverting
    to that.


author: Ville Skyttä <ville.skytta at iki.fi> 0:2.0.0-0.fdr.0.pre16.3
changelog:
  - Stricter python version requirements.
  - BuildRequire openssl-devel.
  - Explicitly build *.pyo, install them as %ghost.
  - Own more installed dirs.
  - Remove $RPM_BUILD_ROOT at start of %install.


author: Matthew Barnes <mbarnes@redhat.com> - 2.2.0-1
changelog:
  - Update to 2.2.0
  - Update python-ldap-2.0.6-rpath.patch and rename it to
    python-ldap-2.2.0-dirs.patch.


author: Matthew Barnes <mbarnes@redhat.com> - 0:2.4.15-2
changelog:
  - Add syncrepl_refreshdone() method to SyncreplConsumer class.
    Need by FreeIPA, subsequently accepted upstream.
  - Resolves: rhbz#1122495


author: Chris Lumens <clumens@redhat.com> - 0.2-1
changelog:
  - Add a title to the main exception dialog so it looks right in anaconda.
  - Don't include an extra '/' in the displayed bug URL (#517515).
  - Now that there's .po files, package them.
  - Use the new exception icon (#517164).


author: Chris Lumens <clumens@redhat.com> - 0.4-1
changelog:
  - Add a default description to bug reports.
  - Handle the user pressing Escape by continuing to show the dialog.
  - Lots more translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.6-1
changelog:
  - Make idSkipList work again.
  - Support dumping objects derived from Python's object.
  - Use the right method to set text on a snack.Entry (#526884).


author: Chris Lumens <clumens@redhat.com> - 0.7-1
changelog:
  - Add a test case framework.
  - Move src -> meh for ease of test case writing.
  - Another attempt at making the attrSkipList work (#532612, #532737).


author: Chris Lumens <clumens@redhat.com> - 0.8-1
changelog:
  - And add a requirement for report as well. (clumens)
  - filer.py is now completely taken over by meh. (clumens)
  - Everything from savers.py has moved into report. (clumens)
  - Remove unused UI code now that report handles all this for me. (clumens)
  - Switch ExceptionHandler to use report (#562656). (clumens)
  - Don't allow an exception when writing out an attribute stop the whole dump. (clumens)
  - Credit where credit is due. (clumens)


author: Chris Lumens <clumens@redhat.com> - 0.9-1
changelog:
  - Remove the requirement on python-bugzilla (#602794). (clumens)
  - Rename ba.po -> bs.po (#583055). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.11-1
changelog:
  - Update the spec file URL to something valid (#670601). (clumens)
  - Don't use _D for Debug, since that's already used by the expander (#640929). (clumens)
  - Translation updates.


author: Vratislav Podzimek <vpodzime@redhat.com> 0.12
changelog:
  - Use new libreport API to get more information to bugzilla (vpodzime).
  - Adapt to the new API of libreport (vpodzime).
  - Move "import rpm" to where it's needed to avoid nameserver problems (clumens).
    Resolves: rhbz#749330
  - Change dependency to libreport-* (mtoman).
    Resolves: rhbz#730924
  - Add abrt-like information to bug reports (vpodzime).
    Resolves: rhbz#728871
  - Propagate the screen attr when using text mode (jmoskovc).


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.13-1
changelog:
  - Add files specified in the Config object as attachments to bugreports (vpodzime)
  - Display hint how to quit the debugger (vpodzime)
  - Do not kill the process when 'continue' is used in pdb (vpodzime)
  - Port to Gtk3 and the new design (vpodzime)
  - Remove the rc attribute and getrc methods (vpodzime)
  - Fix 'all' and 'install' Makefile targets (vpodzime)
  - Migrate l10n to Transifex (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.14-1
changelog:
  - Use just a basename of the attached file as the item name (vpodzime)
  - Set the type hint for the mainExceptionWindow to Dialog (vpodzime)
  - Store and then write out the string representation of the traceback and object dump (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.15-1
changelog:
  - Add main_window property to the MainExceptionWindow (vpodzime)
  - Don't try to dump objects without __dict__ (vpodzime)
  - Change require from rpm to rpm-python (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.16-1
changelog:
  - Do not overwrite process information with files having the same basename (vpodzime)
  - Encode dump as utf-8 before writing to file (#854959) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.18-1
changelog:
  - Handle tracebacks with no stack (#866441) (vpodzime)
  - Parse component name correctly (#866526) (vpodzime)
  - Spelling corrections (#865993) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.19-1
changelog:
  - Add test for handling unicode strings and files (vpodzime)
  - Read files as UTF-8 and ignore errors (#874250) (vpodzime)
  - Add %check section to the spec file (vpodzime)
  - Fix tests (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.21-1
changelog:
  - New purely textual text interface (vpodzime)
  - Add dumb enableNetwork implementation to GraphicalIntf (vpodzime)
  - Destroy main window after running it (vpodzime)
  - Get rid of the accountManager and use new libreport API (vpodzime)
  - Add a way to override previously registered callback (vpodzime)
  - Allow callbacks marked as attachment only (vpodzime)
  - Add support for callbacks providing additional data (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.22-1
changelog:
  - Some more stuff for ABRT/libreport (#929181) (vpodzime)
  - Tell ABRT we are reporting a Python excetion (vpodzime)
  - Use named tuples instead of our magic tuples (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.23-1
changelog:
  - Use Sphinx syntax for docstrings (vpodzime)
  - Allow a change of the I/O functions (vpodzime)
  - Reword the 'Debug' button warning (#948256) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.25-1
changelog:
  - Add and use the safe_string module and the SafeStr class (vpodzime)
  - Give translators hint about the cryptic strings (vpodzime)


author: John Dennis <jdennis@redhat.com> - 0.1-1
changelog:
  - clean up ssl_example.py, fix arg list in get_cert_nicknames,
     make certdir cmd line arg consistent with other NSS tools
  - update httplib.py to support client auth, add httplib_example.py which illustrates it's use
  - fix some documentation
  - fix some type usage which were unsafe on 64-bit


author: John Dennis <jdennis@redhat.com> - 0.2-1
changelog:
  - Convert licensing to MPL tri-license
  - apply patch from bug #472805, (Miloslav Trmač)
    Don't allow closing a socket twice, that causes crashes.
    New function nss.io.Socket.new_socket_pair()
    New function nss.io.Socket.poll()
    New function nss.io.Socket.import_tcp_socket()
    New method nss.nss.Certificate.get_subject_common_name()
    New function nss.nss.generate_random()
    Fix return value creation in SSLSocket.get_security_status
    New function nss.ssl.SSLSocket.import_tcp_socket()


author: John Dennis <jdennis@redhat.com> - 0.3-1
changelog:
  - installed source code in Mozilla CVS repository
    update URL tag to point to CVS repositoy
    (not yet a valid URL, still have to coordinate with Mozilla)
    minor tweak to src directory layout


author: John Dennis <jdennis@redhat.com> - 0.4-1
changelog:
  - add binding for NSS_NoDB_Init(), bug #509002
    move nss_init and nss_shutdown from ssl module to nss module


author: John Dennis <jdennis@redhat.com> - 0.5-1
changelog:
  - restore ssl.nss_init and ssl.nss_shutdown but make them deprecated
    add __version__ string to nss module


author: John Dennis <jdennis@redhat.com> - 0.7-1
changelog:
  - add support for symmetric encryption/decryption
    more support for digests (hashes)

    The following classes were added:
    PK11SymKey PK11Context

    The following methods and functions were added:
    get_best_wrap_mechanism          get_best_key_length
    key_gen                          derive
    get_key_length                   digest_key
    clone_context                    digest_begin
    digest_op                        cipher_op
    finalize                         digest_final
    read_hex                         hash_buf
    sec_oid_tag_str                  sec_oid_tag_name
    sec_oid_tag_from_name            key_mechanism_type_name
    key_mechanism_type_from_name     pk11_attribute_type_name
    pk11_attribute_type_from_name    get_best_slot
    get_internal_key_slot            create_context_by_sym_key
    import_sym_key                   create_digest_context
    param_from_iv                    param_from_algid
    generate_new_param               algtag_to_mechanism
    mechanism_to_algtag

    The following files were added:
    cipher_test.py digest_test.py


author: John Dennis <jdennis@redhat.com> - 0.8-1
changelog:
  - The following methods, properties  and functions were added:
    SecItem.type SecItem.len, SecItem.data
    PK11SymKey.key_data, PK11SymKey.key_length, PK11SymKey.slot
    create_context_by_sym_key
    param_from_iv
    generate_new_param
    get_iv_length
    get_block_size
    get_pad_mechanism
  - SecItem's now support indexing and slicing on their data
  - Clean up parsing and parameter validation of variable arg functions


author: John Dennis <jdennis@redhat.com> - 0.9-1
changelog:
  - Unicode objects now accepted as well as str objects for
    interfaces expecting a string.

  - Sockets were enhanced thusly:
      - Threads will now yield during blocking IO.
      - Socket.makefile() reimplemented
            file object methods that had been missing (readlines(), sendall(),
            and iteration) were implemented, makefile now just returns the same
            Socket object but increments an "open" ref count. Thus a Socket
            object behaves like a file object and must be closed once for each
            makefile() call before it's actually closed.
      - Sockets now support the iter protocol
      - Add Socket.readlines(), Socket.sendall()

  - The following classes were added:
      AuthKeyID
      BasicConstraints
      CRLDistributionPoint
      CRLDistributionPts
      CertificateExtension
      GeneralName
      SignedCRL
      X500AVA
      X500Name
      X500RDN

  - The following module functions were added:
      nss.nss.cert_crl_reason_from_name()
      nss.nss.cert_crl_reason_name()
      nss.nss.cert_general_name_type_from_name()
      nss.nss.cert_general_name_type_name()
      nss.nss.cert_usage_flags()
      nss.nss.decode_der_crl()
      nss.nss.der_universal_secitem_fmt_lines()
      nss.nss.import_crl()
      nss.nss.make_line_pairs()
      nss.nss.oid_dotted_decimal()
      nss.nss.oid_str()
      nss.nss.oid_tag()
      nss.nss.oid_tag_name()
      nss.nss.read_der_from_file()
      nss.nss.x509_alt_name()
      nss.nss.x509_ext_key_usage()
      nss.nss.x509_key_usage()

  - The following class methods and properties were added:
    Note: it's a method if the name is suffixed with (), a propety otherwise
      Socket.next()
      Socket.readlines()
      Socket.sendall()
      SSLSocket.next()
      SSLSocket.readlines()
      SSLSocket.sendall()
      AuthKeyID.key_id
      AuthKeyID.serial_number
      AuthKeyID.get_general_names()
      CRLDistributionPoint.issuer
      CRLDistributionPoint.get_general_names()
      CRLDistributionPoint.get_reasons()
      CertDB.find_crl_by_cert()
      CertDB.find_crl_by_name()
      Certificate.extensions
      CertificateExtension.critical
      CertificateExtension.name
      CertificateExtension.oid
      CertificateExtension.oid_tag
      CertificateExtension.value
      GeneralName.type_enum
      GeneralName.type_name
      GeneralName.type_string
      SecItem.der_to_hex()
      SecItem.get_oid_sequence()
      SecItem.to_hex()
      SignedCRL.delete_permanently()
      X500AVA.oid
      X500AVA.oid_tag
      X500AVA.value
      X500AVA.value_str
      X500Name.cert_uid
      X500Name.common_name
      X500Name.country_name
      X500Name.dc_name
      X500Name.email_address
      X500Name.locality_name
      X500Name.org_name
      X500Name.org_unit_name
      X500Name.state_name
      X500Name.add_rdn()
      X500Name.has_key()
      X500RDN.has_key()

  - The following module functions were removed:
    Note: use nss.nss.oid_tag() instead
      nss.nss.sec_oid_tag_from_name()
      nss.nss.sec_oid_tag_name()
      nss.nss.sec_oid_tag_str()

  - The following files were added:
      doc/examples/cert_dump.py
      test/test_cert_components.py

  - Apply patches from  Miloslav Trmač <mitr@redhat.com>
    for ref counting and threading support. Thanks Miloslav!

  - Review all ref counting, numerous ref counting fixes

  - Implement cyclic garbage collection support by
    adding object traversal and clear methods

  - Identify static variables, move to thread local storage


author: John Dennis <jdennis@redhat.com> - 0.9-2
changelog:
  - fold in more ref counting patches from Miloslav Trmač <mitr@redhat.com>
    into upstream.
    Did not bump upstream version, just bumped release ver in this spec file.


author: John Dennis <jdennis@redhat.com> - 0.9-3
changelog:
  - Add format_lines() & format() methods to the new certificate extension objects.
  - Add printing of certificate extensions.
  - Add BasicContstraints certificate extension.
  - Fix several reference counting and memory problems discovered with valgrind.


author: John Dennis <jdennis@redhat.com> - 0.9-5
changelog:
  - Fix incomplete read bug (due to read ahead buffer bookkeeping).
  - Remove python-nss specific httplib.py, no longer needed
    python-nss now compatible with standard library
  - Rewrite httplib_example.py to use standard library and illustrate
    ssl, non-ssl, connection class, http class usage


author: John Dennis <jdennis@redhat.com> - 0.9-6
changelog:
  - Invoke nss_init_nodb() when nss modules loads, this prevents segfaults
    in NSS if Python programmer forgot to call one of the NSS
    initialization routines.

  - Rename the classes X500Name, X500RDN, X500AVA to DN, RDN, AVA
    respectively.

  - DN and RDN objects now return a list of their contents when indexed by
    type, this is to support multi-valued items.

  - Fix bug where AVA object's string representation did not include it's
    type.

  - Enhance test/test_cert_components.py unit test to test for above
    changes.

  - Add CertificateRequest object


author: John Dennis <jdennis@redhat.com> - 0.9-7
changelog:
  - Remove nss_init_nodb() when nss modules loads from previous version
    apparently this prevents subsequent calls to nss_init with a
    database to silently fail.
  - Clean up some cruft in doc/examples/verify_server.py


author: John Dennis <jdennis@redhat.com> - 0.10-1
changelog:
  - The following classes were added:
      InitParameters
      InitContext

  -The following module functions were added:
      nss.nss.nss_initialize()
      nss.nss.nss_init_context()
      nss.nss.nss_shutdown_context()
      nss.nss.nss_init_flags()


author: John Dennis <jdennis@redhat.com> - 0.10-2
changelog:
  - split documentation out into separate doc sub-package
    and make building api documentation optional


author: John Dennis <jdennis@redhat.com> - 0.10-3
changelog:
  - Fix all rpmlint warnings
  - doc for license, changelog etc. now in main package,
    doc subpackage now only contains api doc, examples, test, etc.
  - Filter provides for .so files
  - Remove execute permission on everything in docdir
  - Capitalize description


author: John Dennis <jdennis@redhat.com> - 0.11-1
changelog:
  * Better support for IPv6

    * Add AddrInfo class to support IPv6 address resolution. Supports
      iteration over it's set of NetworkAddress objects and provides
      hostname, canonical_name object properties.

    * Add PR_AI_* constants.

    * NetworkAddress constructor and NetworkAddress.set_from_string() added
      optional family parameter. This is necessary for utilizing
      PR_GetAddrInfoByName().

    * NetworkAddress initialized via a string paramter are now initalized via
      PR_GetAddrInfoByName using family.

    * Add NetworkAddress.address property to return the address sans the
      port as a string. NetworkAddress.str() includes the port. For IPv6 the
      a hex string must be enclosed in brackets if a port is appended to it,
      the bracketed hex address with appended with a port is unappropriate
      in some circumstances, hence the new address property to permit either
      the address string with a port or without a port.

    * Fix the implementation of the NetworkAddress.family property, it was
      returning bogus data due to wrong native data size.

    * HostEntry objects now support iteration and indexing of their
      NetworkAddress members.

    * Add io.addr_family_name() function to return string representation of
      PR_AF_* constants.

    * Modify example and test code to utilize AddrInfo instead of deprecated
      NetworkAddress functionality. Add address family command argument to
      ssl_example.

    * Fix pty import statement in test/setup_certs.py

      Deprecated Functionality:
      -------------------------

    * NetworkAddress initialized via a string paramter is now
      deprecated. AddrInfo should be used instead.

    * NetworkAddress.set_from_string is now deprecated. AddrInfo should be
      used instead.

    * NetworkAddress.hostentry is deprecated. It was a bad idea,
      NetworkAddress objects can support both IPv4 and IPv6, but a HostEntry
      object can only support IPv4. Plus the implementation depdended on
      being able to perform a reverse DNS lookup which is not always
      possible.

    * HostEntry.get_network_addresses() and HostEntry.get_network_address()
      are now deprecated. In addition their port parameter is now no longer
      respected. HostEntry objects now support iteration and
      indexing of their NetworkAddress and that should be used to access
      their NetworkAddress objects instead.


author: John Dennis <jdennis@redhat.com> - 0.11-2
changelog:
  - Resolves: #689059
    Add family parameter to Socket constructors in examples and doc.
    Mark implicit family parameter as deprecated.
    Raise exception if Socket family does not match NetworkAddress family.
    Add --server-subject to setup_certs.py (made testing IPv6 easier without DNS)


author: John Dennis <jdennis@redhat.com> - 0.12-1
changelog:
  * Major new enhancement is additon of PKCS12 support and
      AlgorithmID's.

    * setup.py build enhancements
      - Now searches for the NSS and NSPR header files rather
        than hardcoding their location. This makes building friendlier
        on other systems (i.e. debian)
      - Now takes optional command line arguments, -d or --debug
        will turn on debug options during the build.

    * Fix reference counting bug in PK11_password_callback() which
      contributed to NSS not being able to shutdown due to
      resources still in use.

    * Add UTF-8 support to ssl.config_server_session_id_cache()

    * Added unit tests for cipher, digest, client_server.

    * All unittests now run, added test/run_tests to invoke
      full test suite.

    * Fix bug in test/setup_certs.py, hardcoded full path to
      libnssckbi.so was causing failures on 64-bit systems,
      just use the libnssckbi.so basename, modutil will find
      it on the standard search path.

    * doc/examples/cert_dump.py uses new AlgorithmID class to
      dump Signature Algorithm

    * doc/examples/ssl_example.py now can cleanly shutdown NSS.

    * Exception error messages now include PR error text if available.

    * The following classes were replaced:
      - SignatureAlgorithm replaced by new class AlgorithmID

    * The following classes were added:
      - AlgorithmID
      - PKCS12DecodeItem
      - PKCS12Decoder

    * The following class methods were added:
      - PK11Slot.authenticate()
      - PK11Slot.get_disabled_reason()
      - PK11Slot.has_protected_authentication_path()
      - PK11Slot.has_root_certs()
      - PK11Slot.is_disabled()
      - PK11Slot.is_friendly()
      - PK11Slot.is_internal()
      - PK11Slot.is_logged_in()
      - PK11Slot.is_removable()
      - PK11Slot.logout()
      - PK11Slot.need_login()
      - PK11Slot.need_user_init()
      - PK11Slot.user_disable()
      - PK11Slot.user_enable()
      - PKCS12DecodeItem.format()
      - PKCS12DecodeItem.format_lines()
      - PKCS12Decoder.database_import()
      - PKCS12Decoder.format()
      - PKCS12Decoder.format_lines()

    * The following class properties were added:
      - AlgorithmID.id_oid
      - AlgorithmID.id_str
      - AlgorithmID.id_tag
      - AlgorithmID.parameters
      - PKCS12DecodeItem.certificate
      - PKCS12DecodeItem.friendly_name
      - PKCS12DecodeItem.has_key
      - PKCS12DecodeItem.shroud_algorithm_id
      - PKCS12DecodeItem.signed_cert_der
      - PKCS12DecodeItem.type
      - SignedData.data
      - SignedData.der

    * The following module functions were added:
      - nss.nss.dump_certificate_cache_info()
      - nss.nss.find_slot_by_name()
      - nss.nss.fingerprint_format_lines()
      - nss.nss.get_internal_slot()
      - nss.nss.is_fips()
      - nss.nss.need_pw_init()
      - nss.nss.nss_init_read_write()
      - nss.nss.pk11_disabled_reason_name()
      - nss.nss.pk11_disabled_reason_str()
      - nss.nss.pk11_logout_all()
      - nss.nss.pkcs12_cipher_from_name()
      - nss.nss.pkcs12_cipher_name()
      - nss.nss.pkcs12_enable_all_ciphers()
      - nss.nss.pkcs12_enable_cipher()
      - nss.nss.pkcs12_export()
      - nss.nss.pkcs12_map_cipher()
      - nss.nss.pkcs12_set_nickname_collision_callback()
      - nss.nss.pkcs12_set_preferred_cipher()
      - nss.nss.token_exists()
      - nss.ssl.config_mp_server_sid_cache()
      - nss.ssl.config_server_session_id_cache_with_opt()
      - nss.ssl.get_max_server_cache_locks()
      - nss.ssl.set_max_server_cache_locks()
      - nss.ssl.shutdown_server_session_id_cache()

    * The following constants were added:
      - nss.nss.int.PK11_DIS_COULD_NOT_INIT_TOKEN
      - nss.nss.int.PK11_DIS_NONE
      - nss.nss.int.PK11_DIS_TOKEN_NOT_PRESENT
      - nss.nss.int.PK11_DIS_TOKEN_VERIFY_FAILED
      - nss.nss.int.PK11_DIS_USER_SELECTED
      - nss.nss.int.PKCS12_DES_56
      - nss.nss.int.PKCS12_DES_EDE3_168
      - nss.nss.int.PKCS12_RC2_CBC_128
      - nss.nss.int.PKCS12_RC2_CBC_40
      - nss.nss.int.PKCS12_RC4_128
      - nss.nss.int.PKCS12_RC4_40

    * The following files were added:
      - test/run_tests
      - test/test_cipher.py (replaces cipher_test.py)
      - test/test_client_server.py
      - test/test_digest.py (replaces digest_test.py)
      - test/test_pkcs12.py

    * The following were deprecated:
      - SignatureAlgorithm


author: John Dennis <jdennis@redhat.com> - 0.12-2
changelog:
  - add patch python-nss-0.12-rsapssparams.patch to fix build problem
    which appears only with nss 3.13 and later.


author: John Dennis <jdennis@redhat.com> - 0.13-0
changelog:
  - Update to version 0.13
    Introduced in 0.13:

    * Fix NSS SECITEM_CompareItem bug via workaround.

    * Fix incorrect format strings in PyArg_ParseTuple* for:
      - GeneralName
      - BasicConstraints
      - cert_x509_key_usage

    * Fix bug when decoding certificate BasicConstraints extension

    * Fix hang in setup_certs.

    * For NSS >= 3.13 support CERTDB_TERMINAL_RECORD

    * You can now query for a specific certificate extension
      Certficate.get_extension()

    * The following classes were added:
      - RSAGenParams

    * The following class methods were added:
      - nss.nss.Certificate.get_extension
      - nss.nss.PK11Slot.generate_key_pair
      - nss.nss.DSAPublicKey.format
      - nss.nss.DSAPublicKey.format_lines

    * The following module functions were added:
      - nss.nss.pub_wrap_sym_key

    * The following internal utilities were added:
      - PyString_UTF8
      - SecItem_new_alloc()

    * The following class constructors were modified to accept
      intialization parameters

      - KEYPQGParams (DSA generation parameters)

    * The PublicKey formatting (i.e. format_lines) was augmented
      to format DSA keys (formerly it only recognized RSA keys).

    * Allow lables and values to be justified when printing objects

    * The following were deprecated:
      - nss.nss.make_line_pairs (replaced by nss.nss.make_line_fmt_tuples)

      Deprecated Functionality:
      -------------------------
      - make_line_pairs() has been replaced by make_line_fmt_tuples()
        because 2-valued tuples were not sufficently general. It is
        expected very few programs will have used this function, it's mostly
        used internally but provided as a support utility.


author: John Dennis <jdennis@redhat.com> - 0.14-1
changelog:
  External Changes:
    -----------------

    The primary enhancements in this version is support of certifcate
    validation, OCSP support, and support for the certificate "Authority
    Information Access" extension.

    Enhanced certifcate validation including CA certs can be done via
    Certificate.verify() or Certificate.is_ca_cert(). When cert
    validation fails you can now obtain diagnostic information as to why
    the cert failed to validate. This is encapsulated in the
    CertVerifyLog class which is a iterable collection of
    CertVerifyLogNode objects. Most people will probablby just print the
    string representation of the returned CertVerifyLog object. Cert
    validation logging is handled by the Certificate.verify() method.
    Support has also been added for the various key usage and cert type
    entities which feature prominently during cert validation.


    * Certificate() constructor signature changed from

      Certificate(data=None, der_is_signed=True)

      to

      Certificate(data, certdb=cert_get_default_certdb(), perm=False, nickname=None)

      This change was necessary because all certs should be added to the
      NSS temporary database when they are loaded, but earlier code
      failed to to that. It's is not likely that an previous code was
      failing to pass initialization data or the der_is_signed flag so
      this change should be backwards compatible.

    * Fix bug #922247, PKCS12Decoder.database_import() method. Importing into
      a NSS database would sometimes fail or segfault.

    * Error codes and descriptions were updated from upstream NSPR & NSS.

    * The password callback did not allow for breaking out of a password
      prompting loop, now if None is returned from the password callback
      the password prompting is terminated.

    * nss.nss_shutdown_context now called from InitContext destructor,
      this assures the context is shutdown even if the programmer forgot
      to. It's still best to explicitly shut it down, this is just
      failsafe.

    * Support was added for shutdown callbacks.

    * The following classes were added:
      - nss.CertVerifyLogNode
      - nss.CertVerifyLog
      - error.CertVerifyError (exception)
      - nss.AuthorityInfoAccess
      - nss.AuthorityInfoAccesses


    * The following class methods were added:
      - nss.Certificate.is_ca_cert
      - nss.Certificate.verify
      - nss.Certificate.verify_with_log
      - nss.Certificate.get_cert_chain
      - nss.Certificate.check_ocsp_status
      - nss.PK11Slot.list_certs
      - nss.CertVerifyLogNode.format_lines
      - nss.CertVerifyLog.format_lines
      - nss.CRLDistributionPts.format_lines

    * The following class properties were added:
      - nss.CertVerifyLogNode.certificate
      - nss.CertVerifyLogNode.error
      - nss.CertVerifyLogNode.depth
      - nss.CertVerifyLog.count

    * The following module functions were added:
      - nss.x509_cert_type
      - nss.key_usage_flags
      - nss.list_certs
      - nss.find_certs_from_email_addr
      - nss.find_certs_from_nickname
      - nss.nss_get_version
      - nss.nss_version_check
      - nss.set_shutdown_callback
      - nss.get_use_pkix_for_validation
      - nss.set_use_pkix_for_validation
      - nss.enable_ocsp_checking
      - nss.disable_ocsp_checking
      - nss.set_ocsp_cache_settings
      - nss.set_ocsp_failure_mode
      - nss.set_ocsp_timeout
      - nss.clear_ocsp_cache
      - nss.set_ocsp_default_responder
      - nss.enable_ocsp_default_responder
      - nss.disable_ocsp_default_responder

    * The following files were added:
        src/py_traceback.h
        doc/examples/verify_cert.py
        test/test_misc.py

    * The following constants were added:
      - nss.KU_DIGITAL_SIGNATURE
      - nss.KU_NON_REPUDIATION
      - nss.KU_KEY_ENCIPHERMENT
      - nss.KU_DATA_ENCIPHERMENT
      - nss.KU_KEY_AGREEMENT
      - nss.KU_KEY_CERT_SIGN
      - nss.KU_CRL_SIGN
      - nss.KU_ENCIPHER_ONLY
      - nss.KU_ALL
      - nss.KU_DIGITAL_SIGNATURE_OR_NON_REPUDIATION
      - nss.KU_KEY_AGREEMENT_OR_ENCIPHERMENT
      - nss.KU_NS_GOVT_APPROVED
      - nss.PK11CertListUnique
      - nss.PK11CertListUser
      - nss.PK11CertListRootUnique
      - nss.PK11CertListCA
      - nss.PK11CertListCAUnique
      - nss.PK11CertListUserUnique
      - nss.PK11CertListAll
      - nss.certUsageSSLClient
      - nss.certUsageSSLServer
      - nss.certUsageSSLServerWithStepUp
      - nss.certUsageSSLCA
      - nss.certUsageEmailSigner
      - nss.certUsageEmailRecipient
      - nss.certUsageObjectSigner
      - nss.certUsageUserCertImport
      - nss.certUsageVerifyCA
      - nss.certUsageProtectedObjectSigner
      - nss.certUsageStatusResponder
      - nss.certUsageAnyCA
      - nss.ocspMode_FailureIsVerificationFailure
      - nss.ocspMode_FailureIsNotAVerificationFailure

    * cert_dump.py extended to print NS_CERT_TYPE_EXTENSION

    * cert_usage_flags, nss_init_flags now support optional repr_kind parameter

    Internal Changes:
    -----------------

    * Reimplement exception handling
      - NSPRError is now derived from StandardException instead of
        EnvironmentError. It was never correct to derive from
        EnvironmentError but was difficult to implement a new subclassed
        exception with it's own attributes, using EnvironmentError had
        been expedient.

      - NSPRError now derived from StandardException, provides:
        * errno (numeric error code)
        * strerror (error description associated with error code)
        * error_message (optional detailed message)
        * error_code (alias for errno)
        * error_desc (alias for strerror)

      - CertVerifyError derived from NSPRError, extends with:
        * usages (bitmask of returned usages)
        * log (CertVerifyLog object)

    * Expose error lookup to sibling modules

    * Use macros for bitmask_to_list functions to reduce code
      duplication and centralize logic.

    * Add repr_kind parameter to cert_trust_flags_str()

    * Add support for repr_kind AsEnumName to bitstring table lookup.

    * Add cert_type_bitstr_to_tuple() lookup function

    * Add PRTimeConvert(), used to convert Python time values
      to PRTime, centralizes conversion logic, reduces duplication

    * Add UTF8OrNoneConvert to better handle unicode parameters which
      are optional.

    * Add Certificate_summary_format_lines() utility to generate
      concise certificate identification info for output.

    * Certificate_new_from_CERTCertificate now takes add_reference parameter
      to properly reference count certs, should fix shutdown busy problems.

    * Add print_traceback(), print_cert() debugging support.


author: John Dennis <jdennis@redhat.com> - 0.14.0-2
changelog:
  - resolves: bug#1002589
  - resolves: bug#1003979

  - Rewrite setup_certs.py. No longer behaves like an expect script
    which was fragile. By default now creates a sql style database.
  - By default all examples & tests use new sql format for NSS database
  - db-name is now used instead of dbdir to provide distinction between
    the database directory and it's scheme (e.g. 'sql:')
  - all examples and tests now default db-name to 'sql:pki'
  - replaced legacy getopt & optparse command line argument handling
    with modern argparse.


author: John Dennis <jdennis@redhat.com> - 0.14.0-3
changelog:
  - resolves: bug#1003979
  - In coordination with QE with regards to bz 1019934 it was requested
    the unittest patches be enhanced with a more robust version of
    test_pkcs12, no actual bug, just better testing.


author: John Dennis <jdennis@redhat.com> - 0.15.0-1
changelog:
  - resolves: bug#1109769 rebase to 0.15.0
  - includes fixes for 1087031 and 1060314
    See doc/Changelog for details


author: John Dennis <jdennis@redhat.com> - 0.16.0-1
changelog:
  - resolves: bug#1155703 - Add API call for SSL_VersionRangeSet (rebase)
    rebased to 0.16.0
  - The primary enhancements in this version is adding support for the
    setting trust attributes on a Certificate, the SSL version range API,
    information on the SSL cipher suites and information on the SSL connection.

    * The following module functions were added:

      - ssl.get_ssl_version_from_major_minor
      - ssl.get_default_ssl_version_range
      - ssl.get_supported_ssl_version_range
      - ssl.set_default_ssl_version_range
      - ssl.ssl_library_version_from_name
      - ssl.ssl_library_version_name
      - ssl.get_cipher_suite_info
      - ssl.ssl_cipher_suite_name
      - ssl.ssl_cipher_suite_from_name

    * The following deprecated module functions were removed:

      - ssl.nssinit
      - ssl.nss_ini
      - ssl.nss_shutdown

    * The following classes were added:

      - SSLCipherSuiteInfo
      - SSLChannelInfo

    * The following class methods were added:

      - Certificate.trust_flags
      - Certificate.set_trust_attributes

      - SSLSocket.set_ssl_version_range
      - SSLSocket.get_ssl_version_range
      - SSLSocket.get_ssl_channel_info
      - SSLSocket.get_negotiated_host
      - SSLSocket.connection_info_format_lines
      - SSLSocket.connection_info_format
      - SSLSocket.connection_info_str
  	
      - SSLCipherSuiteInfo.format_lines
      - SSLCipherSuiteInfo.format

      - SSLChannelInfo.format_lines
      - SSLChannelInfo.format

    * The following class properties were added:

      - Certificate.ssl_trust_flags
      - Certificate.email_trust_flags
      - Certificate.signing_trust_flags

      - SSLCipherSuiteInfo.cipher_suite
      - SSLCipherSuiteInfo.cipher_suite_name
      - SSLCipherSuiteInfo.auth_algorithm
      - SSLCipherSuiteInfo.auth_algorithm_name
      - SSLCipherSuiteInfo.kea_type
      - SSLCipherSuiteInfo.kea_type_name
      - SSLCipherSuiteInfo.symmetric_cipher
      - SSLCipherSuiteInfo.symmetric_cipher_name
      - SSLCipherSuiteInfo.symmetric_key_bits
      - SSLCipherSuiteInfo.symmetric_key_space
      - SSLCipherSuiteInfo.effective_key_bits
      - SSLCipherSuiteInfo.mac_algorithm
      - SSLCipherSuiteInfo.mac_algorithm_name
      - SSLCipherSuiteInfo.mac_bits
      - SSLCipherSuiteInfo.is_fips
      - SSLCipherSuiteInfo.is_exportable
      - SSLCipherSuiteInfo.is_nonstandard

      - SSLChannelInfo.protocol_version
      - SSLChannelInfo.protocol_version_str
      - SSLChannelInfo.protocol_version_enum
      - SSLChannelInfo.major_protocol_version
      - SSLChannelInfo.minor_protocol_version
      - SSLChannelInfo.cipher_suite
      - SSLChannelInfo.auth_key_bits
      - SSLChannelInfo.kea_key_bits
      - SSLChannelInfo.creation_time
      - SSLChannelInfo.creation_time_utc
      - SSLChannelInfo.last_access_time
      - SSLChannelInfo.last_access_time_utc
      - SSLChannelInfo.expiration_time
      - SSLChannelInfo.expiration_time_utc
      - SSLChannelInfo.compression_method
      - SSLChannelInfo.compression_method_name
      - SSLChannelInfo.session_id

    * The following files were added:

      - doc/examples/cert_trust.py
      - doc/examples/ssl_version_range.py

    * The following constants were added:
      - nss.CERTDB_TERMINAL_RECORD
      - nss.CERTDB_VALID_PEER
      - nss.CERTDB_TRUSTED
      - nss.CERTDB_SEND_WARN
      - nss.CERTDB_VALID_CA
      - nss.CERTDB_TRUSTED_CA
      - nss.CERTDB_NS_TRUSTED_CA
      - nss.CERTDB_USER
      - nss.CERTDB_TRUSTED_CLIENT_CA
      - nss.CERTDB_GOVT_APPROVED_CA
      - ssl.SRTP_AES128_CM_HMAC_SHA1_32
      - ssl.SRTP_AES128_CM_HMAC_SHA1_80
      - ssl.SRTP_NULL_HMAC_SHA1_32
      - ssl.SRTP_NULL_HMAC_SHA1_80
      - ssl.SSL_CK_DES_192_EDE3_CBC_WITH_MD5
      - ssl.SSL_CK_DES_64_CBC_WITH_MD5
      - ssl.SSL_CK_IDEA_128_CBC_WITH_MD5
      - ssl.SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5
      - ssl.SSL_CK_RC2_128_CBC_WITH_MD5
      - ssl.SSL_CK_RC4_128_EXPORT40_WITH_MD5
      - ssl.SSL_CK_RC4_128_WITH_MD5
      - ssl.SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA
      - ssl.SSL_FORTEZZA_DMS_WITH_NULL_SHA
      - ssl.SSL_FORTEZZA_DMS_WITH_RC4_128_SHA
      - ssl.SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA
      - ssl.SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA
      - ssl.TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
      - ssl.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_DES_CBC_SHA
      - ssl.TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
      - ssl.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_DH_ANON_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_ANON_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_DES_CBC_SHA
      - ssl.TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
      - ssl.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_anon_WITH_AES_128_CBC_SHA
      - ssl.TLS_DH_anon_WITH_AES_256_CBC_SHA
      - ssl.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_anon_WITH_DES_CBC_SHA
      - ssl.TLS_DH_anon_WITH_RC4_128_MD5
      - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_EMPTY_RENEGOTIATION_INFO_SCSV
      - ssl.TLS_FALLBACK_SCSV
      - ssl.TLS_NULL_WITH_NULL_NULL
      - ssl.TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
      - ssl.TLS_RSA_EXPORT_WITH_RC4_40_MD5
      - ssl.TLS_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_RSA_WITH_AES_256_CBC_SHA256
      - ssl.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_RSA_WITH_IDEA_CBC_SHA
      - ssl.TLS_RSA_WITH_NULL_MD5
      - ssl.TLS_RSA_WITH_NULL_SHA
      - ssl.TLS_RSA_WITH_NULL_SHA256
      - ssl.TLS_RSA_WITH_RC4_128_MD5
      - ssl.TLS_RSA_WITH_RC4_128_SHA
      - ssl.TLS_RSA_WITH_SEED_CBC_SHA
      - ssl.SSL_VARIANT_DATAGRAM
      - ssl.SSL_VARIANT_STREAM
      - ssl.SSL_LIBRARY_VERSION_2
      - ssl.SSL_LIBRARY_VERSION_3_0
      - ssl.SSL_LIBRARY_VERSION_TLS_1_0
      - ssl.SSL_LIBRARY_VERSION_TLS_1_1
      - ssl.SSL_LIBRARY_VERSION_TLS_1_2
      - ssl.SSL_LIBRARY_VERSION_TLS_1_3
      - ssl.ssl2
      - ssl.ssl3
      - ssl.tls1.0
      - ssl.tls1.1
      - ssl.tls1.2
      - ssl.tls1.3

     * The following methods were missing thread locks, this has been fixed.

       - nss.nss_initialize
       - nss.nss_init_context
       - nss.nss_shutdown_context


author: Michel Salim <salimma@fedoraproject.org> - 2.4.1-2
changelog:
  - Clean up spec, removing unnecessary declarations
  - Rename tool in %{_bindir} to the less ambiguous qrcode


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.2-1
changelog:
  - Remove I18N code. (dgoodwin@redhat.com)
  - Spec cleanup. (dgoodwin@redhat.com)
  - Cleaning out unused log parsing functions (jharris@redhat.com)
  - More tolerant with no rhsm.conf in place. (dgoodwin@redhat.com)
  - Switch to python-iniparse. (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.10-1
changelog:
  - Related: #661863
  - Add certificate parsing library. (dgoodwin@redhat.com)
  - Fix build on F12/RHEL5 and earlier. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.12-1
changelog:
  - Related: #668006
  - Remove a missed translation. (dgoodwin@redhat.com)
  - Fix logger warning messages. (dgoodwin@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - Add new extensions to order (jbowes@redhat.com)
  - remove shebang from certificate.py for rpmlint (jbowes@redhat.com)
  - Adding activateMachine to connection api. (jharris@redhat.com)
  - 668814: break out 404 and 500s into a different error (cduryee@redhat.com)
  - Initialized to use tito. (jbowes@redhat.com)
  - bump version (jbowes@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.3-1
changelog:
  - 700601: Don't set the Accept-Language if we don't have a valid locale
    (alikins@redhat.com)
  - 692210: remove a non critical warning message that is spamming the logs
    (alikins@redhat.com)
  - 691788: Fix bad check for missing order info. (dgoodwin@redhat.com)
  - Add a version of get_datetime from M2Crypto since it isnt avail on RHEL 5.7
    (alikins@redhat.com)
  - Use older strptime call format (cduryee@redhat.com)
  - 683550: fix parsing empty cert extensions (jbowes@redhat.com)
  - Add support for content tagging. (dgoodwin@redhat.com)
  - Use tlsv1 instead of sslv3, for fips compliance (cduryee@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 0.96.4-1
changelog:
  - Adding profile module and updating spec (pkilambi@redhat.com)
  - Added stacking Id to the certificate (wottop@dhcp231-152.rdu.redhat.com)
  - Changed call to CP for owner list (wottop@dhcp231-152.rdu.redhat.com)
  - added getOwners function for use with 'list --owners'
    (wottop@dhcp231-152.rdu.redhat.com)
  - change (wottop@dhcp231-152.rdu.redhat.com)
  - Added the owner entered in the cli to the post for register
    (wottop@dhcp231-152.rdu.redhat.com)
  - altered pool query to use both owner and consumer
    (wottop@dhcp231-152.rdu.redhat.com)
  - Added getOwner(consumerid) function (wottop@dhcp231-152.rdu.redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.96.5-1
changelog:
  - Fix backward compatability with old use of getPoolsList.
    (dgoodwin@redhat.com)
  - Remove one built in type issue. (bkearney@redhat.com)
  - Removed unused Bundle class (alikins@redhat.com)
  - quantity for subscription (wottop@dhcp231-152.rdu.redhat.com)
  - Add the activation key call, and remove subscription tokens
    (bkearney@redhat.com)
  - Improve the doco, referencing the candlepin site. (bkearney@redhat.com)
  - Improve the defualt values for the config (bkearney@redhat.com)
  - Fix bug with owner specification during registration. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.6-1
changelog:
  - Add support for new Katello error responses. (dgoodwin@redhat.com)
  - Log the response when there's an issue parsing error JSON.
    (dgoodwin@redhat.com)
  - Add support for registration to Katello environments. (dgoodwin@redhat.com)
  - Don't send an http body if we don't have one. (jbowes@redhat.com)
  - Add call to list environments. (dgoodwin@redhat.com)
  - Do not load CA certs if in insecure mode. (dgoodwin@redhat.com)
  - Cache supported resources after establishing connection.
    (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.7-1
changelog:
  - Logging cleanup. (dgoodwin@redhat.com)
  - Remove unused add_ssl_certs method. (dgoodwin@redhat.com)
  - Load supported resources when UEPConnection is instantiated.
    (dgoodwin@redhat.com)
  - Send package profile. (dgoodwin@redhat.com)
  - Allow testing if package profiles equal one another. (dgoodwin@redhat.com)
  - Support creating package profile from a file descriptor.
    (dgoodwin@redhat.com)
  - Allow the attributes to be None for username and password in consumer
    selction. (bkearney@redhat.com)
  - Add a Package object. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.8-1
changelog:
  - 719378: Encode whitespace in urls (bkearney@redhat.com)
  - Change package profile upload url. (dgoodwin@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.9-1
changelog:
  - self.sanitize, and add support for quote_plus. (cduryee@redhat.com)
  - Enhance the insecure mode to not do peer checks. (bkearney@redhat.com)
  - Wrap urllib.quote in a helper method to cast int to str as needed.
    (cduryee@redhat.com)
  - 728266: Unsubscribe from subscription manager GUI is broken
    (cduryee@redhat.com)
  - Remove quantity for bind by product. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.10-1
changelog:
  - Submit a Content-Length when body of request is empty. (dgoodwin@redhat.com)
  - Support installed products when registering. (dgoodwin@redhat.com)
  - Add ability to update a consumer's installed products list.
    (dgoodwin@redhat.com)
  - Support for new bind method (cduryee@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.11-1
changelog:
  - add future date bind (jesusr@redhat.com)
  - 735226: allow Keys to validate themselves (bkearney@redhat.com)
  - Add getVirtOnly() (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.12-1
changelog:
  - Add makefile and targets for coverage and "stylish" checks
    (alikins@redhat.com)
  - Add tests for config parsing (cduryee@redhat.com)
  - 736166: move certs from subscription-manager to python-rhsm
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.97.1-1
changelog:
  - 746241: UEPConnection.updateConsumer now passes empty list in POST request
    (mstead@redhat.com)
  - 737935: overcome 255 char limit in uuid list (cduryee@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.2-1
changelog:
  - 749853: backport new python-rhsm API calls present in 6.2 for 5.8
    (cduryee@redhat.com)
  - rev python-rhsm version to match sub-mgr (cduryee@redhat.com)
  - point master to rhel5 builder (cduryee@redhat.com)
  - fix python syntax for older versions (jbowes@redhat.com)
  - Fix yum repo location for EL6. (dgoodwin@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.3-1
changelog:
  - 752854: Fixing error in iniparser around unpacking of a dictionary for
    default values. (awood@redhat.com)
  - 708362: remove entitlement keys on delete as well (alikins@redhat.com)
  - 734114: registering with --org="foo bar" throws a NetworkException instead of
    a RestlibException (awood@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.7-1
changelog:
  - 766895: Added hypervisorCheckIn call to allow sending a mapping of host/guest ids for
    creation/update. (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.2-1
changelog:
  - 768983: When consuming a future subsciption, the repos --list should be empty
    (wpoteat@redhat.com)
  - 720360: Write *-key.pem files out with 0600 permissions. (awood@redhat.com)
  - 754425: Remove grace period logic (cduryee@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.3-1
changelog:
  - 785247: Update releasers.conf for RHEL6.3 (mstead@redhat.com)
  - Stop building for F14. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.4-1
changelog:
  - Add support for updating consumer service level. (dgoodwin@redhat.com)
  - Add call to list service levels for an org. (dgoodwin@redhat.com)
  - Add GoneException for deleted consumers (jbowes@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.5-1
changelog:
  - 744654: Any bad value from the config file, when converting to an int, causes
    a traceback. (bkearney@redhat.com)
  - Add support for dry-run autobind requests. (dgoodwin@redhat.com)
  - Build for Fedora 17. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.6-1
changelog:
  - Add ContentConnection to support rhsm "release" command (alikins@redhat.com)
  - Allow unsetting the consumer service level. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.7-1
changelog:
  - 803773: quote international characters in activation keys before sending to
    server (cduryee@redhat.com)
  - PEP8 fixes. (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.0.1-1
changelog:
  - Add default constants for RHN connections. (dgoodwin@redhat.com)
  - 813296: Remove check for candlepin_version (jbowes@redhat.com)
  - Remove module scope eval of config properties (alikins@redhat.com)
  - Add call to get Candlepin status. (awood@redhat.com)
  - Added access to python-rhsm/sub-man versions. (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.2-1
changelog:
  - add upstream server var to version obj (cduryee@redhat.com)
  - 822057: wrap ContentConnection port in safe_int (cduryee@redhat.com)
  - 822965: subscription-manager release does not work with proxies
    (cduryee@redhat.com)
  - 806958: BadCertificateException not displaying properly. (awood@redhat.com)
  - 822965: release verb does not work with proxies (cduryee@redhat.com)
  - Add config for "checkcommits" (alikins@redhat.com)
  - Include various Makefile improvements from subscription-manager
    (alikins@redhat.com)
  - Upload el6 yum packages to another dir for compatability.
    (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.3-1
changelog:
  - Update copyright dates (jbowes@redhat.com)
  - 825952: Error after deleting consumer at server (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.4-1
changelog:
  - Remove unused stub method. (dgoodwin@redhat.com)
  - Cleanup entitlement cert keys on delete. (dgoodwin@redhat.com)
  - Drop unused quantity and flex quantity from Content. (dgoodwin@redhat.com)
  - Make CertFactory and Extensions2 classes private. (dgoodwin@redhat.com)
  - RHEL5 syntax fixes. (dgoodwin@redhat.com)
  - Handle empty pem strings when creating certs. (dgoodwin@redhat.com)
  - Remove Base64 decoding. (dgoodwin@redhat.com)
  - Fix failing subjectAltName nosetest (jbowes@redhat.com)
  - Fix up remaining compiler warnings (jbowes@redhat.com)
  - Fix up memory leaks (jbowes@redhat.com)
  - clean up some C module compiler warnings (jbowes@redhat.com)
  - Fix get_all_extensions (jbowes@redhat.com)
  - C module formatting fixups (jbowes@redhat.com)
  - Add as_pem method to C module (jbowes@redhat.com)
  - Revert Extensions object to old state, add new sub-class.
    (dgoodwin@redhat.com)
  - Spec file changes for C module (jbowes@redhat.com)
  - Get nosetests running (jbowes@redhat.com)
  - tell setup.py to use nose (jbowes@redhat.com)
  - get certv2 tests passing (jbowes@redhat.com)
  - Move methods onto X509 class in C cert reader (jbowes@redhat.com)
  - Add method to get all extensions in a dict (jbowes@redhat.com)
  - Add POC C based cert reader (jbowes@redhat.com)
  - Remove use of str.format for RHEL5. (dgoodwin@redhat.com)
  - Remove some python2.6'ism (trailing if's) (alikins@redhat.com)
  - add "version_check" target that runs pyqver (alikins@redhat.com)
  - Fix error reporting on bad certs. (dgoodwin@redhat.com)
  - Remove number from order/account fields. (dgoodwin@redhat.com)
  - Style fixes. (dgoodwin@redhat.com)
  - Certv2 cleanup. (dgoodwin@redhat.com)
  - Cleanup bad padding/header cert testing. (dgoodwin@redhat.com)
  - New method of parsing X509 extensions. (dgoodwin@redhat.com)
  - Better cert type detection. (dgoodwin@redhat.com)
  - Deprecate the old certificate module classes. (dgoodwin@redhat.com)
  - Rename order support level to service level. (dgoodwin@redhat.com)
  - Convert product arch to multi-valued. (dgoodwin@redhat.com)
  - Add factory methods to certificate module. (dgoodwin@redhat.com)
  - Parse V2 entitlement certificates. (dgoodwin@redhat.com)
  - Add missing os import. (dgoodwin@redhat.com)
  - Improve certificate2 error handling. (dgoodwin@redhat.com)
  - Remove V1 named classes. (dgoodwin@redhat.com)
  - Add cert is_expired method. (dgoodwin@redhat.com)
  - Fix cert path issue. (dgoodwin@redhat.com)
  - Major/minor attributes not available in 5.4 (mstead@redhat.com)
  - 834108: Set the default connection timeout to 1 min. (jbowes@redhat.com)
  - Add default values to certificate2 Order class. (dgoodwin@redhat.com)
  - Define identity certificates explicitly. (dgoodwin@redhat.com)
  - Add identity cert support to certificate2 module. (dgoodwin@redhat.com)
  - Add file writing/deleting for new certificates. (dgoodwin@redhat.com)
  - Add product info to certificate2 module. (dgoodwin@redhat.com)
  - Add content info to certificate2 module. (dgoodwin@redhat.com)
  - Add order info to certificate2 module. (dgoodwin@redhat.com)
  - Port basic certificate data into new module. (dgoodwin@redhat.com)
  - Add certificate2 module and cert creation factory. (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.5-1
changelog:
  - add versionlint, requires pyqver (alikins@redhat.com)
  - Adding subject back to new certs (mstead@redhat.com)
  - 842885: add __str__ to NetworkException, ala  #830767 (alikins@redhat.com)
  - 830767: Add __str__ method to RemoteServerException. (awood@redhat.com)
  - Fix None product architectures. (dgoodwin@redhat.com)
  - Remove deprecated use of DateRange.has[Date|Now] (jbowes@redhat.com)
  - mark hasDate as deprecated as well (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.6-1
changelog:
  - 848742: support arbitrary bit length serial numbers (jbowes@redhat.com)
  - Stop doing F15 Fedora builds, add EL5 public builds. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.1.1-1
changelog:
  - Read certv3 detached format (jbowes@redhat.com)
  - Read file content types from certificates (mstead@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.3-1
changelog:
  - 863961: add test case for id cert default version (alikins@redhat.com)
  - 857426: Do not pass None when body is empty collection (mstead@redhat.com)
  - 863961: set a default version for id certs (alikins@redhat.com)
  - 859652: Subscribe with service level being ignored (wpoteat@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.4-1
changelog:
  - fixing a bug where certificates with carriage returns could not be parsed.
    (mhrivnak@redhat.com)
  - 790481: Send up headers with the subscription-manager and python-rhsm version
    info. (bkearney@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.6-1
changelog:
  - Making product and order info optional for a v3 EntitlementCertificate, since
    the server side will never have that data. (mhrivnak@redhat.com)
  - Adding path authorization checking for both v1 and v3 entitlement
    certificates (mhrivnak@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.1-1
changelog:
  - Do not retrieve the value unless the match is valid (bkearney@redhat.com)
  - Only look for a single item as it is quicker and all we care about is zero or
    not zero (bkearney@redhat.com)
  - Several small tweaks: (bkearney@redhat.com)
  - Store off the len of the oid to save recalculating it more that once
    (bkearney@redhat.com)
  - certificate.match will now only accept oids. (bkearney@redhat.com)
  - Remove the use of exceptions to denote a return value of false.
    (bkearney@redhat.com)
  - The email.utils module was named email.Utils in RHEL5 (bkearney@redhat.com)
  - Make stylish issues resolved (bkearney@redhat.com)
  - 772936: Warn the user when clock skew is detected. (bkearney@redhat.com)
  - Improve logging for rhsmcertd scenarios (wpoteat@redhat.com)
  - 845622: If an identity certificate has expired, there should be a friendly
    error message (wpoteat@redhat.com)
  - Add international text to test automatic JSON encoding. (awood@redhat.com)
  - 880070: Adding unicode encoding hook for simplejson. (awood@redhat.com)
  - 848836: Remove trailing / from the handler in UEPConnection
    (bkearney@redhat.com)
  - 884259: If LANG is unset, do not attempt to send up a default locale in
    redeem call (bkearney@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 1.8.2-1
changelog:
  - Add a default value for the report_package_profile setting
    (bkearney@redhat.com)
  - Remove F16 releasers, add F18. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.3-1
changelog:
  - 907536: Don't send body if it's just "" (alikins@redhat.com)
  - 882459: Change --heal-interval to --attach-interval in rhsmcertd
    (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.7-1
changelog:
  - 912776: Improve error message (wpoteat@redhat.com)
  - Add a method to get compliance status for a consumer. (awood@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.8-1
changelog:
  - no 'json' module in rhel5, use simplejson instead (alikins@redhat.com)
  - Adding plugin directory config option. (awood@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.9-1
changelog:
  - add note about check_path squashing '//' in paths (alikins@redhat.com)
  - normalizing path before checking (jsherril@redhat.com)
  - two new candlepin API methods (cduryee@redhat.com)
  - remove redundant \'s and slight formatting cleanup (alikins@redhat.com)
  - replace if "a == None" calls with if a is None (alikins@redhat.com)
  - Additional methods for working with owners (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.10-1
changelog:
  - Added core limit to entitlement object. (mstead@redhat.com)
  - Codestyle cleanup. (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.11-1
changelog:
  - Don't attach a question mark to the request if not necessary.
    (awood@redhat.com)
  - Sanitize consumerId input. (awood@redhat.com)
  - Add more test cases for Content.arches (alikins@redhat.com)
  - add 'arches' list of arches to Content object (alikins@redhat.com)
  - Add optional consumer to getPool. (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.12-1
changelog:
  - Update the releasers with a 6.3 (bkearney@redhat.com)
  - 967566: Enhance the ssl bindings to expose the issuer. (bkearney@redhat.com)
  - Update the dist-git releasers (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.9.1-1
changelog:
  - fix config failure (ckozak@redhat.com)
  - 988476, 988085: fix default hostname, remove excess config list output
    (ckozak@redhat.com)
  - rev master to 1.9.x (alikins@redhat.com)
  - add compliance date option (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.9.2-1
changelog:
  - remove rhel 5.9, 5.10, 6.3, 6.4 (jesusr@redhat.com)
  - Fedora 17 is at end of life. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.1-1
changelog:
  - 997194: fix interpolation of default values (ckozak@redhat.com)
  - bump version to 1.10.x (jesusr@redhat.com)
  - remove 6.5 releaser (jesusr@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.2-1
changelog:
  - 998033: Handle 401 and 403 with no response body (alikins@redhat.com)
  - Ignore json errors in validate_response (alikins@redhat.com)
  - Add unit tests for Restlib.validate_response (alikins@redhat.com)
  - 1000145: Fix deprecated exception message warning. (dgoodwin@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.3-1
changelog:
  - Merge pull request #89 from candlepin/alikins/flex_branding
    (c4kofony@gmail.com)
  - Change brand attr 'os' to 'brand_type' (alikins@redhat.com)
  - s/os_name/os (alikins@redhat.com)
  - add support for 'os_name' productid attribute (alikins@redhat.com)


author: ckozak <ckozak@redhat.com>
changelog:
  - 1006748: replace simplejson with 'ourjson' (alikins@redhat.com)
  - Log the new requestUuid from candlepin if it is present in the response.
    (dgoodwin@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.6-1
changelog:
  - Fix a crash that occurs when rhsm.conf is missing (ckozak@redhat.com)
  - Correct implementation of __eq__ for Content objects. (awood@redhat.com)
  - Log ca_dir and loaded ca pems on one line. (alikins@redhat.com)
  - Add default full_refresh_on_yum option. (awood@redhat.com)
  - Send empty JSON list when deleting all overrides. (awood@redhat.com)
  - Add __hash__ method to Content classes. (awood@redhat.com)
  - Add method to get all content overrides for a consumer (mstead@redhat.com)
  - Add methods to set and delete content overrides. (awood@redhat.com)
  - 1008808: json ValueErrors have no .msg attribute (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.9-1
changelog:
  - Removing entitlement cert and key from getEntitlementList (ckozak@redhat.com)
  - respect http(s)_proxy env variable for proxy information (jesusr@redhat.com)


author: ckozak <ckozak@redhat.com> 1.11.4-1
changelog:
  * Thu Apr 10 2014 Alex Wood <awood@redhat.com> 1.11.3-1
  - Specifically check for brand_name/brand_type="" (alikins@redhat.com)
  - Support new apis for guests and hypervisors (ckozak@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.11.5-1
changelog:
  - 1090350: fix time drift detection (ckozak@redhat.com)
  - 1096676: Use simplejson on RHEL 5. (dgoodwin@redhat.com)
  - 1094492: Alternate Subject needs different type that allows more characters.
    (wpoteat@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.1-1
changelog:
  - bump version to 1.12 (jesusr@redhat.com)
  - Add connection method to get available releases (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.12.2-1
changelog:
  - Detect when operating in container mode and load host system's config.
    (dgoodwin@redhat.com)
  - Convert doc strings to sphinx/restructuredtext (alikins@redhat.com)
  - Add setup for using sphinx for docs. (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.12.3-1
changelog:
  - Add 6.6/7.1 release targets. (dgoodwin@redhat.com)
  - Add a key_path() to EntitlementCertificate (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.4-1
changelog:
  - Add required bz flags to tito releasers. (dgoodwin@redhat.com)
  - Remove pyqver verbose flag. (alikins@redhat.com)
  - Use tox.ini to setup pep8 for 'make stylish' (alikins@redhat.com)
  - Update pyqver setup. Set min version of 2.7. (alikins@redhat.com)
  - Add libcrypto to list of libs to link to. (bcourt@redhat.com)


author: Alex Wood <awood@redhat.com> 1.13.6-1
changelog:
  - 1153375: Support TLSv1.2 and v1.1 by default. (alikins@redhat.com)
  - Set CA PEM files permissions to 644. (awood@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.13.10-1
changelog:
  - Add custom JSON encoding for set objects. (awood@redhat.com)
  - Update SSL context options to follow the M2Crypto standard idiom.
    (awood@redhat.com)


author: Andy Grover <agrover@redhat.com> - 1.99-6
changelog:
  - Update based on review comments
    - Fully document steps to build archive
    - Remove commented-out extraneous text
    - Remove a repeat in Requires line
    - Update git-version.patch to have proper sha1
    - Change location of fabric spec files to /var/lib/target
  - Remove unused specs


author: Andy Grover <agrover@redhat.com> - 2.1.fb1-1
changelog:
  - Change upstream URL
  - New upstream release
  - Remove upstreamed patches:
    * python-rtslib-git-version.patch
    * python-rtslib-use-ethtool.patch
    * python-rtslib-update-specpath.patch


author: Andy Grover <agrover@redhat.com> - 2.1.fb14-1
changelog:
  - Update Source URL to proper tarball
  - Add patch retry-target-creation.patch
  - New upstream release


author: Andy Grover <agrover@redhat.com> - 2.1.fb26-1
changelog:
  - New upstream release
  - Remove kernel dependency
  - Remove python-ethtool and python-ipaddr dependencies


author: Andy Grover <agrover@redhat.com> - 2.1.fb30-1
changelog:
  - New upstream version
  - Update description and summary
  - Remove patch0, upstream doesn't include usb gadget any more


author: James Antill <james@fedoraproject.org> 3.0.0-6
changelog:
  - Fix the ftp byterange port problem:
  - Resolves: bug#419241
  - Fixup the progress UI:
  -   add function for total progress
  -   add total progress percentagee current download line
  -   add rate to current download line
  -   use dead space when finished downloading
  -   don't confuse download rate on regets.


author: James Antill <james@fedoraproject.org> 3.0.0-7
changelog:
  - Fix reget's against servers that don't allow Range requests, also tweaks
  - reget == check_timestamp, if anyone/thing uses that.
  - Resolves: bug#435156
  - Fix minor typo in progress for single instance.


author: James Antill <james@fedoraproject.org> 3.0.0-8
changelog:
  - Tweak progress output so it's hopefully less confusing
  - Add dynamic resizing ability to progress bar
  - Resolves: bug#437197


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.9.1-15
changelog:
  - Update to latest head, misc bugfixes: BZ 832028, 831904, 831291.
  - Disable Kerberos auth.  BZ 769254
  - copy_local bugfix. BZ 837018
  - send 'tries' counter to mirror failure callback


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.9.1-25
changelog:
  - Update to latest HEAD.
  - fix some test cases that were failing.  BZ 918658
  - exit(1) or /bin/urlgrabber failures.  BZ 918613
  - clamp timestamps from the future.  BZ 894630
  - enable GSSNEGOTIATE if implemented correctly.
  - make error messages more verbose.


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-26
changelog:
  - Update to latest HEAD.
  - Handle HTTP 200 response to range requests correctly.  BZ 919076
  - Reset curl_obj to clear CURLOPT_RANGE from previous requests.  BZ 923951


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-28
changelog:
  - Update to latest HEAD.
  - Add the "minrate" option. BZ 964298
  - Workaround progress "!!!" end for file:// repos.
  - add URLGrabError.code to the external downloader API
  - Disable GSSNEGOTIATE to work around a curl bug.  BZ 960163


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-29
changelog:
  - Update to latest HEAD.
  - Fix parsing of FTP 213 responses
  - Switch to max_connections=1 after timing out.  BZ 853432
  - max_connections=0 should imply the default limit.


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-30
changelog:
  - Update to latest HEAD.
  - add ftp_disable_epsv option. BZ 849177
  - Spelling fixes.
  - docs: throttling is per-connection, suggest max_connections=1. BZ 998263
  - More robust "Content-Length" parsing. BZ 1000841


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-31
changelog:
  - Update to latest HEAD.
  - Switch to max_connections=1 after refused connect. BZ 853432
  - Never display negative downloading speed. BZ 1001767
  - clamp timestamps from the future.  BZ 894630, 1013733


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-32
changelog:
  - Update to latest HEAD.
  - Fix traceback when entering single-connection mode with DEBUG off
  - Fix traceback when limit==None and DEBUG is on
  - Fix the condition to enter single-connection mode


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.10-0
changelog:
  - clamp timestamps from the future.  BZ 894630, 1013733
  - Fix the condition to enter single-connection mode. BZ 853432
  - Fix unit tests


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-2.el7
changelog:
  - Create separate qemu-guest-agent package based on qemu-kvm-rhev-2.1.0-1.el7 [bz#1117096]
  - Resolves: #bz1117096


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-3.el7
changelog:
  - Allow building qemu-guest-agent on ppc64le
  - Synchronize with qemu-kvm-rhev-2.1.0-3.el7
  - Resolves: bz#1132718
    (qemu-guest-agent fails to build for ppc64le)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-4.el7
changelog:
  - kvm-Mark-etc-sysconfig-qemu-ga-as-config-noreplace.patch [bz#1150924]
  - Resolves: bz#1150924
    (/etc/sysconfig/qemu-ga is replaced when updated)


author: David Woodhouse <dwmw2@infradead.org> 0.7.0-2
changelog:
  - Proper fix for GCC 4 putting 'blr' or 'ret' in the middle of the function,
    for i386, x86_64 and PPC.


author: David Woodhouse <dwmw2@infradead.org> 0.8.0-3
changelog:
  - Use -mcpu= instead of -mtune= on x86_64 too
  - Disable SPARC targets on x86_64, because dyngen doesn't like fnegs


author: Matthias Saou <http://freshrpms.net/> 0.8.2-1
changelog:
  - Update to 0.8.2 (#200065).
  - Drop upstreamed syscall-macros patch2.
  - Put correct scriplet dependencies.
  - Force install mode for the init script to avoid umask problems.
  - Add %postun condrestart for changes to the init script to be applied if any.
  - Update description with the latest "about" from the web page (more current).
  - Update URL to qemu.org one like the Source.
  - Add which build requirement.
  - Don't include texi files in %doc since we ship them in html.
  - Switch to using gcc34 on devel, FC5 still has gcc32.
  - Add kernheaders patch to fix linux/compiler.h inclusion.
  - Add target-sparc patch to fix compiling on ppc (some int32 to float).


author: Matthias Saou <http://freshrpms.net/> 0.8.2-2
changelog:
  - Remove the target-list iteration for x86_64 since they all build again.
  - Make gcc32 vs. gcc34 conditional on %{fedora} to share the same spec for
    FC5 and FC6.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.9.0-2
changelog:
  - Fix direct loading of a linux kernel with -kernel & -initrd (bz 234681)
  - Remove spurious execute bits from manpages (bz 222573)


author: Daniel P. Berrange <berrange@redhat.com> - 0.9.0-3.fc8
changelog:
  - Added backport of VNC password auth, and TLS+x509 cert auth
  - Switch to rtl8139 NIC by default for linkstate reporting
  - Fix rtl8139 mmio region mappings with multiple NICs


author: Glauber Costa <glommer@redhat.com> - 1.0-0.1.svn6666
changelog:
  - Updated to tip svn (release 6666). Featuring split packages for qemu.
    Unfortunately, still using binary blobs for the bioses.


author: Glauber Costa <glommer@redhat.com> - 0.10-0.1.kvm20090303git
changelog:
  - Set Epoch to 1
  - Build KVM (basic build, no tools yet)
  - Set ppc in ExcludeArch. This is temporary, just to fix one issue at a time.
    ppc users (IBM ? ;-)) please wait a little bit.


author: Glauber Costa <glommer@redhat.com> - 0.92-0.1.kvm20090303git
changelog:
  - Set Epoch to 2
  - Set version to 0.92. It seems upstream keep changing minds here, so pick the lowest
  - Provides KVM, Obsoletes KVM
  - Only install qemu-kvm in ix86 and x86_64
  - Remove pkgdesc macros, as they were generating bogus output for rpm -qi.
  - fix ppc and ppc64 builds


author: Glauber Costa <glommer@redhat.com> - 2:0.10-0.5.kvm20090303git
changelog:
  - kvm.modules were being wrongly mentioned at %install.
  - update description for the x86 system package to include kvm support
  - build kvm's own bios. It is still necessary while kvm uses a slightly different
    irq routing mechanism


author: Glauber Costa <glommer@redhat.com> - 2:0.10-0.8.kvm20090310git
changelog:
  - fix Obsolete/Provides pair
  - Use kvm bios from bochs-bios package.
  - Using RPM_OPT_FLAGS in configure
  - Picked back audio-drv-list from kvm package


author: Glauber Costa <glommer@redhat.com> - 2:0.10-0.11.kvm20090323git
changelog:
  - Update to snapshot kvm20090323.
  - Removed patch2 (upstream).
  - use upstream's new split package.
  - --with-patched-kernel flag not needed anymore
  - Tell how to get the sources.


author: Glauber Costa <glommer@redhat.com> - 2:0.10-1
changelog:
  - Include debuginfo for qemu-img
  - Do not require qemu-common for qemu-img
  - Explicitly own each of the firmware files
  - remove firmwares for ppc and sparc. They should be provided by an external package.
    Not that the packages exists for sparc in the secondary arch repo as noarch, but they
    don't automatically get into main repos. Unfortunately it's the best we can do right
    now.
  - rollback a bit in time. Snapshot from avi's maint/2.6.30
    - this requires the sasl patches to come back.
    - with-patched-kernel comes back.


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10-5
changelog:
  - Fix vga segfault under kvm-autotest (#494002)
  - Kill kernelrelease hack; it's not needed
  - Build with "make V=1" for more verbose logs


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-1.kvm85
changelog:
  - Update to qemu-kvm-devel-85
  - kvm-85 is based on qemu development branch, currently version 0.10.50
  - Include new qemu-io utility in qemu-img package
  - Re-instate -help string for boot=on to fix virtio booting with libvirt
  - Drop upstreamed patches
  - Fix missing kernel/include/asm symlink in upstream tarball
  - Fix target-arm build
  - Fix build on ppc
  - Disable preadv()/pwritev() until bug #497429 is fixed
  - Kill more .kernelrelease uselessness
  - Make non-kvm qemu build verbose


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-5.kvm86
changelog:
  - Prevent locked cdrom eject - fixes hang at end of anaconda installs (#501412)
  - Avoid harmless 'unhandled wrmsr' warnings (#499712)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-6.kvm86
changelog:
  - Fix 'kernel requires an x86-64 CPU' error
  - BuildRequires ncurses-devel to enable '-curses' option (#504226)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-7.kvm87
changelog:
  - Update to kvm-87
  - Drop upstreamed patches
  - Cherry-pick new ppc build fix from upstream
  - Work around broken linux-user build on ppc
  - Fix hw/pcspk.c build with --disable-kvm
  - Re-enable preadv()/pwritev() since #497429 is long since fixed
  - Kill petalogix-s3adsp1800.dtb, since we don't ship the microblaze target


author: Daniel Berrange <berrange@lettuce.camlab.fab.redhat.com> - 2:0.10.50-10.kvm87
changelog:
  - Add udev rules to make /dev/kvm world accessible & group=kvm (rhbz #497341)
  - Create a kvm group if it doesn't exist (rhbz #346151)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.50-11.kvm88
changelog:
  - Update to kvm-88, see http://www.linux-kvm.org/page/ChangeLog
  - Package mutiboot.bin
  - Update for how extboot is built
  - Fix sf.net source URL
  - Drop qemu-fix-ppc-softmmu-kvm-disabled-build.patch
  - Drop qemu-fix-pcspk-build-with-kvm-disabled.patch
  - Cherry-pick fix for esound support build failure


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.91-0.1.rc1.rc0
changelog:
  - Update to qemu-kvm-0.11.0-rc1-rc0
  - This is a pre-release of the official -rc1
  - A vista installer regression is blocking the official -rc1 release
  - Drop qemu-prefer-sysfs-for-usb-host-devices.patch
  - Drop qemu-fix-build-for-esd-audio.patch
  - Drop qemu-slirp-Fix-guestfwd-for-incoming-data.patch
  - Add patch to ensure extboot.bin is installed


author: Mark McLoughlin <markmc@redhat.com> - 2:0.10.92-1
changelog:
  - Update to qemu-kvm-0.11.0-rc2
  - Drop upstreamed patches
  - extboot install now fixed upstream
  - Re-place TCG init fix (#516543) with the one gone upstream


author: Mark McLoughlin <markmc@redhat.com> - 2:0.11.0-4
changelog:
  - Use rtl8029 PXE rom for ne2k_pci, not ne (#526777)
  - Also, replace the gpxe-roms-qemu pkg requires with file-based requires


author: Mark McLoughlin <markmc@redhat.com> - 2:0.11.0-6
changelog:
  - Fix fs errors with virtio and qcow2 backing file (#524734)
  - Fix ksm initscript errors on kernel missing ksm (#527653)
  - Add missing Requires(post): getent, useradd, groupadd (#527087)


author: Mark McLoughlin <markmc@redhat.com> - 2:0.11.0-12
changelog:
  - Fix a use-after-free crasher in the slirp code (#539583)
  - Fix overflow in the parallels image format support (#533573)


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.12.2-5
changelog:
  - Avoid creating too large iovecs in multiwrite merge (#559717)
  - Don't try to set max_kernel_pages during ksm init on newer kernels (#558281)
  - Add logfile options for ksmtuned debug.


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.12.3-1
changelog:
  - Update to 0.12.3 upstream
  - vhost-net migration/restart fixes
  - Add F-13 machine type
  - virtio-serial fixes


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.12.3-6
changelog:
  - Change requires to the noarch seabios-bin
  - Add ownership of docdir to qemu-common (#572110)
  - Fix "Cannot boot from non-existent NIC" error when using virt-install (#577851)


author: Dan Horák <dan[at]danny.cz> - 2:0.12.3-8
changelog:
  - Add avoid-llseek patch from upstream needed for building on s390(x)
  - Don't use parallel make on s390(x)


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.13.0-0.3.20100809git25fdf4a
changelog:
  - Updates from upstream towards 0.13 stable
  - Fix requires on gpxe
  - enable spice now that buildreqs are in the repository.
  - ksmtrace has moved to a separate upstream package


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.13.0-1
changelog:
  - Update to 0.13.0 upstream release
  - Fixes for vhost
  - Fix mouse in certain guests (#636887)
  - Fix issues with WinXP guest install (#579348)
  - Resolve build issues with S390 (#639471)
  - Fix Windows XP on Raw Devices (#631591)


author: Daniel P. Berrange <berrange@redhat.com> - 2:0.13.0-2
changelog:
  - Revert previous change
  - Make qemu-common own the /etc/qemu directory
  - Add /etc/qemu/target-x86_64.conf to qemu-system-x86 regardless
    of host architecture.


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.14.0-0.1.20110210git7aa8c46
changelog:
  - Update git snapshot
  - Temporarily disable qemu-cris and qemu-sparc due to build errors (to be resolved shorly)


author: Richard W.M. Jones <rjones@redhat.com> - 2:0.14.0-9
changelog:
  - Add BR libattr-devel.  This caused the -fstype option to be disabled.
    https://www.redhat.com/archives/libvir-list/2011-June/thread.html#01017


author: Hans de Goede <hdegoede@redhat.com> - 2:0.15.0-0.2.20110718525e3df
changelog:
  - Add support usb redirection over the network, see:
    http://fedoraproject.org/wiki/Features/UsbNetworkRedirection
  - Restore chardev flow control patches


author: Richard W.M. Jones <rjones@redhat.com> - 2:0.15.0-2
changelog:
  - Add upstream qemu patch 'Allow to leave type on default in -machine'
    (2645c6dcaf6ea2a51a3b6dfa407dd203004e4d11).


author: Daniel P. Berrange <berrange@redhat.com> - 2:0.15.0-4
changelog:
  - Enable DTrace tracing backend for SystemTAP (rhbz #737763)
  - Enable build with curl (rhbz #737006)


author: Justin M. Forbes <jforbes@redhat.com> - 2:0.15.1-1
changelog:
  - Require seabios-bin >= 0.6.0-2 (#741992)
  - Replace init scripts with systemd units (#741920)
  - Update to 0.15.1 stable upstream


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.1.0-4
changelog:
  - Disable tests since they hang intermittently.
  - Add kvmvapic.bin (replaces vapic.bin).
  - Add cpus-x86_64.conf.  qemu now creates /etc/qemu/target-x86_64.conf
    as an empty file.
  - Add qemu-icon.bmp.
  - Add qemu-bridge-helper.
  - Build and include virtfs-proxy-helper + man page (thanks Hans de Goede).


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.1.0-7
changelog:
  - Add patch to fix default machine options.  This fixes libvirt
    detection of qemu.
  - Back out patch 1 which conflicts.


author: Cole Robinson <crobinso@redhat.com> - 1.1.1-1
changelog:
  - Upstream stable release 1.1.1
  - Fix systemtap tapsets (bz 831763)
  - Fix VNC audio tunnelling (bz 840653)
  - Don't renable ksm on update (bz 815156)
  - Bump usbredir dep (bz 812097)
  - Fix RPM install error on non-virt machines (bz 660629)
  - Obsolete openbios to fix upgrade dependency issues (bz 694802)


author: Adam Jackson <ajax@redhat.com> 1.2.0-0.5.rc1
changelog:
  - Flip Requires: ceph >= foo to Conflicts: ceph < foo, so we pull in only the
    libraries which we need and not the rest of ceph which we don't.


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-1
changelog:
  - New upstream release 1.2.0 final
  - Add support for Spice seamless migration
  - Add support for Spice dynamic monitors
  - Add support for usb-redir live migration


author: Richard W.M. Jones <rjones@redhat.com> - 2:1.2.0-8
changelog:
  - Use 'global' instead of 'define', and underscore in definition name,
    n-v-r, and 'dist' tag of SLOF, all to fix RHBZ#855252.


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-11
changelog:
  - Rebuild against latest spice-server and spice-protocol
  - Fix non-seamless migration failing with vms with usb-redir devices,
    to allow boxes to load such vms from disk


author: Paolo Bonzini <pbonzini@redhat.com> - 2:1.2.0-13
changelog:
  - Add ppc support to kvm.modules (original patch by David Gibson)
  - Replace x86only build with kvmonly build: add separate defines and
    conditionals for all packages, so that they can be chosen and
    renamed in kvmonly builds and so that qemu has the appropriate requires
  - Automatically pick libfdt dependancy
  - Add knob to disable spice+seccomp


author: Paolo Bonzini <pbonzini@redhat.com> - 2:1.2.0-16
changelog:
  - add s390x KVM support
  - distribute pre-built firmware or device trees for Alpha, Microblaze, S390
  - add missing system targets
  - add missing linux-user targets
  - fix previous commit


author: Cole Robinson <crobinso@redhat.com> - 2:1.2.0-18
changelog:
  - Fix loading arm initrd if kernel is very large (bz #862766)
  - Don't use reserved word 'function' in systemtap files (bz #870972)
  - Drop assertion that was triggering when pausing guests w/ qxl (bz


author: Hans de Goede <hdegoede@redhat.com> - 2:1.2.0-19
changelog:
  - Sync spice patches with upstream, minor bugfixes and set the qxl pci
    device revision to 4 by default, so that guests know they can use
    the new features


author: Cole Robinson <crobinso@redhat.com> - 2:1.3.0-1
changelog:
  - Switch base tarball from qemu-kvm to qemu
  - qemu 1.3 release
  - Option to use linux VFIO driver to assign PCI devices
  - Many USB3 improvements
  - New paravirtualized hardware random number generator device.
  - Support for Glusterfs volumes with "gluster://" -drive URI
  - Block job commands for live block commit and storage migration


author: Michal Novotny <minovotn@redhat.com> - 2:1.3.0-3
changelog:
  - Remove dependency on bogus qemu-kvm-kvm package [bz#870343]
  - Resolves: bz#870343
    (qemu-kvm-1.2.0-16.el7 cant be installed)


author: Michal Novotny <minovotn@redhat.com> - 2:1.3.0-5
changelog:
  - Fix patch contents for usb-redir (bz#895491)
  - Resolves: bz#895491
    (PATCH: 0110-usb-redir-Add-flow-control-support.patch has been mangled on rebase !!)


author: Alon Levy <alevy@redhat.com> - 3:1.3.0-6
changelog:
  - Bump epoch back to 3 since there has already been a 3 package release:
    3:1.2.0-20.el7 https://brewweb.devel.redhat.com/buildinfo?buildID=244866
  - Mark explicit libcacard dependency on new enough qemu-img to avoid conflict
    since /usr/bin/vscclient was moved from qemu-img to libcacard subpackage.


author: Michal Novotny <minovotn@redhat.com> - 3:1.3.0-8
changelog:
  - Missing package qemu-system-x86 in hardware certification kvm testing (bz#912433)
  - Resolves: bz#912433
    (Missing package qemu-system-x86 in hardware certification kvm testing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3:1.4.0-4
changelog:
  - Enable build of libcacard subpackage for non-x86_64 archs (bz #873174)
  - Enable build of qemu-img subpackage for non-x86_64 archs (bz #873174)
  - Enable build of qemu-guest-agent subpackage for non-x86_64 archs (bz #873174)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3:1.5.0-2
changelog:
  - Enable werror (bz #948290)
  - Enable nbd driver (bz #875871)
  - Fix udev rules file location (bz #958860)
  - Remove +x bit from systemd unit files (bz #965000)
  - Drop unneeded kvm.modules on x86 (bz #963642)
  - Fix build flags
  - Enable libusb


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.1-2
changelog:
  - Fix package package version info (bz #952996)
  - pc: Replace upstream machine types by RHEL-7 types (bz #977864)
  - target-i386: Update model values on Conroe/Penryn/Nehalem CPU model (bz #861210)
  - target-i386: Set level=4 on Conroe/Penryn/Nehalem (bz #861210)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-2
changelog:
  - SPEC file prepared for RHEL/RHEV split (rhbz #987165)
  - RHEL guest( sata disk ) can not boot up (rhbz #981723)
  - Kill the "use flash device for BIOS unless KVM" misfeature (rhbz #963280)
  - Provide RHEL-6 machine types (rhbz #983991)
  - Change s3/s4 default to "disable". (rhbz #980840)  
  - Support Virtual Memory Disk Format in qemu (rhbz #836675)
  - Glusterfs backend for QEMU (rhbz #805139)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-3
changelog:
  - query mem info from monitor would cause qemu-kvm hang [RHEL-7] (rhbz #970047)
  - Throttle-down guest to help with live migration convergence (backport to RHEL7.0) (rhbz #985958)
  - disable (for now) EFI-enabled roms (rhbz #962563)
  - qemu-kvm "vPMU passthrough" mode breaks migration, shouldn't be enabled by default (rhbz #853101)
  - Remove pending watches after virtserialport unplug (rhbz #992900)
  - Containment of error when an SR-IOV device encounters an error... (rhbz #984604)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10:1.5.2-4
changelog:
  - qemu: guest agent creates files with insecure permissions in deamon mode [rhel-7.0] (rhbz 974444)
  - update qemu-ga config & init script in RHEL7 wrt. fsfreeze hook (rhbz 969942)
  - RHEL7 does not have equivalent functionality for __com.redhat_qxl_screendump (rhbz 903910)
  - SEP flag behavior for CPU models of RHEL6 machine types should be compatible (rhbz 960216)
  - crash command can not read the dump-guest-memory file when paging=false [RHEL-7] (rhbz 981582)
  - RHEL 7 qemu-kvm fails to build on F19 host due to libusb deprecated API (rhbz 996469)
  - Live migration support in virtio-blk-data-plane (rhbz 995030)
  - qemu-img resize can execute successfully even input invalid syntax (rhbz 992935)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-2.el7
changelog:
  - kvm-osdep-add-qemu_get_local_state_pathname.patch [bz#964304]
  - kvm-qga-determine-default-state-dir-and-pidfile-dynamica.patch [bz#964304]
  - kvm-configure-don-t-save-any-fixed-local_statedir-for-wi.patch [bz#964304]
  - kvm-qga-create-state-directory-on-win32.patch [bz#964304]
  - kvm-qga-save-state-directory-in-ga_install_service-RHEL-.patch [bz#964304]
  - kvm-Makefile-create-.-var-run-when-installing-the-POSIX-.patch [bz#964304]
  - kvm-qemu-option-Fix-qemu_opts_find-for-null-id-arguments.patch [bz#980782]
  - kvm-qemu-option-Fix-qemu_opts_set_defaults-for-corner-ca.patch [bz#980782]
  - kvm-vl-New-qemu_get_machine_opts.patch [bz#980782]
  - kvm-Fix-machine-options-accel-kernel_irqchip-kvm_shadow_.patch [bz#980782]
  - kvm-microblaze-Fix-latent-bug-with-default-DTB-lookup.patch [bz#980782]
  - kvm-Simplify-machine-option-queries-with-qemu_get_machin.patch [bz#980782]
  - kvm-pci-add-VMSTATE_MSIX.patch [bz#838170]
  - kvm-xhci-add-XHCISlot-addressed.patch [bz#838170]
  - kvm-xhci-add-xhci_alloc_epctx.patch [bz#838170]
  - kvm-xhci-add-xhci_init_epctx.patch [bz#838170]
  - kvm-xhci-add-live-migration-support.patch [bz#838170]
  - kvm-pc-set-level-xlevel-correctly-on-486-qemu32-CPU-mode.patch [bz#918907]
  - kvm-pc-Remove-incorrect-rhel6.x-compat-model-value-for-C.patch [bz#918907]
  - kvm-pc-rhel6.x-has-x2apic-present-on-Conroe-Penryn-Nehal.patch [bz#918907]
  - kvm-pc-set-compat-CPUID-0x80000001-.EDX-bits-on-Westmere.patch [bz#918907]
  - kvm-pc-Remove-PCLMULQDQ-from-Westmere-on-rhel6.x-machine.patch [bz#918907]
  - kvm-pc-SandyBridge-rhel6.x-compat-fixes.patch [bz#918907]
  - kvm-pc-Haswell-doesn-t-have-rdtscp-on-rhel6.x.patch [bz#918907]
  - kvm-i386-fix-LAPIC-TSC-deadline-timer-save-restore.patch [bz#972433]
  - kvm-all.c-max_cpus-should-not-exceed-KVM-vcpu-limit.patch [bz#996258]
  - kvm-add-timestamp-to-error_report.patch [bz#906937]
  - kvm-Convert-stderr-message-calling-error_get_pretty-to-e.patch [bz#906937]
  - Resolves: bz#838170
    (Add live migration support for USB [xhci, usb-uas])
  - Resolves: bz#906937
    ([Hitachi 7.0 FEAT][QEMU]Add a time stamp to error message (*))
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#964304
    (Windows guest agent service failed to be started)
  - Resolves: bz#972433
    ("INFO: rcu_sched detected stalls" after RHEL7 kvm vm migrated)
  - Resolves: bz#980782
    (kernel_irqchip defaults to off instead of on without -machine)
  - Resolves: bz#996258
    (boot guest with maxcpu=255 successfully but actually max number of vcpu is 160)


author: Michal Novotny <minovotn@redhat.com> - qemu-kvm-1.5.3-4.el7
changelog:
  - kvm-block-package-preparation-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-move-input-parsing-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-package-committing-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-package-rollback-code-in-qmp_transaction.patch [bz#1005818]
  - kvm-block-make-all-steps-in-qmp_transaction-as-callback.patch [bz#1005818]
  - kvm-blockdev-drop-redundant-proto_drv-check.patch [bz#1005818]
  - kvm-block-Don-t-parse-protocol-from-file.filename.patch [bz#1005818]
  - kvm-Revert-block-Disable-driver-specific-options-for-1.5.patch [bz#1005818]
  - kvm-qcow2-Add-refcount-update-reason-to-all-callers.patch [bz#1005818]
  - kvm-qcow2-Options-to-enable-discard-for-freed-clusters.patch [bz#1005818]
  - kvm-qcow2-Batch-discards.patch [bz#1005818]
  - kvm-block-Always-enable-discard-on-the-protocol-level.patch [bz#1005818]
  - kvm-qapi.py-Avoid-code-duplication.patch [bz#1005818]
  - kvm-qapi.py-Allow-top-level-type-reference-for-command-d.patch [bz#1005818]
  - kvm-qapi-schema-Use-BlockdevSnapshot-type-for-blockdev-s.patch [bz#1005818]
  - kvm-qapi-types.py-Implement-base-for-unions.patch [bz#1005818]
  - kvm-qapi-visit.py-Split-off-generate_visit_struct_fields.patch [bz#1005818]
  - kvm-qapi-visit.py-Implement-base-for-unions.patch [bz#1005818]
  - kvm-docs-Document-QAPI-union-types.patch [bz#1005818]
  - kvm-qapi-Add-visitor-for-implicit-structs.patch [bz#1005818]
  - kvm-qapi-Flat-unions-with-arbitrary-discriminator.patch [bz#1005818]
  - kvm-qapi-Add-consume-argument-to-qmp_input_get_object.patch [bz#1005818]
  - kvm-qapi.py-Maintain-a-list-of-union-types.patch [bz#1005818]
  - kvm-qapi-qapi-types.py-native-list-support.patch [bz#1005818]
  - kvm-qapi-Anonymous-unions.patch [bz#1005818]
  - kvm-block-Allow-driver-option-on-the-top-level.patch [bz#1005818]
  - kvm-QemuOpts-Add-qemu_opt_unset.patch [bz#1005818]
  - kvm-blockdev-Rename-I-O-throttling-options-for-QMP.patch [bz#1005818]
  - kvm-qemu-iotests-Update-051-reference-output.patch [bz#1005818]
  - kvm-blockdev-Rename-readonly-option-to-read-only.patch [bz#1005818]
  - kvm-blockdev-Split-up-cache-option.patch [bz#1005818]
  - kvm-qcow2-Use-dashes-instead-of-underscores-in-options.patch [bz#1005818]
  - kvm-qemu-iotests-filter-QEMU-version-in-monitor-banner.patch [bz#1006959]
  - kvm-tests-set-MALLOC_PERTURB_-to-expose-memory-bugs.patch [bz#1006959]
  - kvm-qemu-iotests-Whitespace-cleanup.patch [bz#1006959]
  - kvm-qemu-iotests-Fixed-test-case-026.patch [bz#1006959]
  - kvm-qemu-iotests-Fix-test-038.patch [bz#1006959]
  - kvm-qemu-iotests-Remove-lsi53c895a-tests-from-051.patch [bz#1006959]
  - Resolves: bz#1005818
    (qcow2: Backport discard command line options)
  - Resolves: bz#1006959
    (qemu-iotests false positives)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-7.el7
changelog:
  - kvm-spice-fix-display-initialization.patch [bz#974887]
  - kvm-Remove-i82550-network-card-emulation.patch [bz#921983]
  - kvm-Remove-usb-wacom-tablet.patch [bz#903914]
  - kvm-Disable-usb-uas.patch [bz#903914]
  - kvm-Disable-vhost-scsi.patch [bz#994642]
  - kvm-Remove-no-hpet-option.patch [bz#947441]
  - kvm-Disable-isa-parallel.patch [bz#1002286]
  - kvm-xhci-implement-warm-port-reset.patch [bz#949514]
  - kvm-usb-add-serial-bus-property.patch [bz#953304]
  - kvm-rhel6-compat-usb-serial-numbers.patch [bz#953304]
  - kvm-vmdk-fix-comment-for-vmdk_co_write_zeroes.patch [bz#995866]
  - kvm-gluster-Add-image-resize-support.patch [bz#1007226]
  - kvm-block-Introduce-bs-zero_beyond_eof.patch [bz#1007226]
  - kvm-block-Produce-zeros-when-protocols-reading-beyond-en.patch [bz#1007226]
  - kvm-gluster-Abort-on-AIO-completion-failure.patch [bz#1007226]
  - kvm-Preparation-for-usb-bt-dongle-conditional-build.patch [bz#1001131]
  - kvm-Remove-dev-bluetooth.c-dependency-from-vl.c.patch [bz#1001131]
  - kvm-exec-Fix-Xen-RAM-allocation-with-unusual-options.patch [bz#1009328]
  - kvm-exec-Clean-up-fall-back-when-mem-path-allocation-fai.patch [bz#1009328]
  - kvm-exec-Reduce-ifdeffery-around-mem-path.patch [bz#1009328]
  - kvm-exec-Simplify-the-guest-physical-memory-allocation-h.patch [bz#1009328]
  - kvm-exec-Drop-incorrect-dead-S390-code-in-qemu_ram_remap.patch [bz#1009328]
  - kvm-exec-Clean-up-unnecessary-S390-ifdeffery.patch [bz#1009328]
  - kvm-exec-Don-t-abort-when-we-can-t-allocate-guest-memory.patch [bz#1009328]
  - kvm-pc_sysfw-Fix-ISA-BIOS-init-for-ridiculously-big-flas.patch [bz#1009328]
  - kvm-virtio-scsi-Make-type-virtio-scsi-common-abstract.patch [bz#903918]
  - kvm-qga-move-logfiles-to-new-directory-for-easier-SELinu.patch [bz#1009491]
  - kvm-target-i386-add-cpu64-rhel6-CPU-model.patch [bz#918907]
  - kvm-fix-steal-time-MSR-vmsd-callback-to-proper-opaque-ty.patch [bz#903889]
  - Resolves: bz#1001131
    (Disable or remove device usb-bt-dongle)
  - Resolves: bz#1002286
    (Disable or remove device isa-parallel)
  - Resolves: bz#1007226
    (Introduce bs->zero_beyond_eof)
  - Resolves: bz#1009328
    ([RFE] Nicer error report when qemu-kvm can't allocate guest RAM)
  - Resolves: bz#1009491
    (move qga logfiles to new /var/log/qemu-ga/ directory [RHEL-7])
  - Resolves: bz#903889
    (The value of steal time in "top" command always is "0.0% st" after guest migration)
  - Resolves: bz#903914
    (Disable or remove usb related devices that we will not support)
  - Resolves: bz#903918
    (Disable or remove emulated SCSI devices we will not support)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#921983
    (Disable or remove emulated network devices that we will not support)
  - Resolves: bz#947441
    (HPET device must be disabled)
  - Resolves: bz#949514
    (fail to passthrough the USB3.0 stick to windows guest with xHCI controller under pc-i440fx-1.4)
  - Resolves: bz#953304
    (Serial number of some USB devices must be fixed for older RHEL machine types)
  - Resolves: bz#974887
    (the screen of guest fail to display correctly when use spice + qxl driver)
  - Resolves: bz#994642
    (should disable vhost-scsi)
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - qemu-kvm-1.5.3-8.el7
changelog:
  - kvm-vmdk-Make-VMDK3Header-and-VmdkGrainMarker-QEMU_PACKE.patch [bz#995866]
  - kvm-vmdk-use-unsigned-values-for-on-disk-header-fields.patch [bz#995866]
  - kvm-qemu-iotests-add-poke_file-utility-function.patch [bz#995866]
  - kvm-qemu-iotests-add-empty-test-case-for-vmdk.patch [bz#995866]
  - kvm-vmdk-check-granularity-field-in-opening.patch [bz#995866]
  - kvm-vmdk-check-l2-table-size-when-opening.patch [bz#995866]
  - kvm-vmdk-check-l1-size-before-opening-image.patch [bz#995866]
  - kvm-vmdk-use-heap-allocation-for-whole_grain.patch [bz#995866]
  - kvm-vmdk-rename-num_gtes_per_gte-to-num_gtes_per_gt.patch [bz#995866]
  - kvm-vmdk-Move-l1_size-check-into-vmdk_add_extent.patch [bz#995866]
  - kvm-vmdk-fix-L1-and-L2-table-size-in-vmdk3-open.patch [bz#995866]
  - kvm-vmdk-support-vmfsSparse-files.patch [bz#995866]
  - kvm-vmdk-support-vmfs-files.patch [bz#995866]
  - Resolves: bz#995866
    (fix vmdk support to ESX images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-9.el7
changelog:
  - kvm-qxl-fix-local-renderer.patch [bz#1005036]
  - kvm-spec-include-userspace-iSCSI-initiator-in-block-driv.patch [bz#923843]
  - kvm-linux-headers-update-to-kernel-3.10.0-26.el7.patch [bz#1008987]
  - kvm-target-i386-add-feature-kvm_pv_unhalt.patch [bz#1008987]
  - kvm-warn-if-num-cpus-is-greater-than-num-recommended.patch [bz#1010881]
  - kvm-char-move-backends-io-watch-tag-to-CharDriverState.patch [bz#1007222]
  - kvm-char-use-common-function-to-disable-callbacks-on-cha.patch [bz#1007222]
  - kvm-char-remove-watch-callback-on-chardev-detach-from-fr.patch [bz#1007222]
  - kvm-block-don-t-lose-data-from-last-incomplete-sector.patch [bz#1017049]
  - kvm-vmdk-fix-cluster-size-check-for-flat-extents.patch [bz#1017049]
  - kvm-qemu-iotests-add-monolithicFlat-creation-test-to-059.patch [bz#1017049]
  - Resolves: bz#1005036
    (When using “-vga qxl” together with “-display vnc=:5” or “-display  sdl” qemu displays  pixel garbage)
  - Resolves: bz#1007222
    (QEMU core dumped when do hot-unplug virtio serial port during transfer file between host to guest with virtio serial through TCP socket)
  - Resolves: bz#1008987
    (pvticketlocks: add kvm feature kvm_pv_unhalt)
  - Resolves: bz#1010881
    (backport vcpu soft limit warning)
  - Resolves: bz#1017049
    (qemu-img refuses to open the vmdk format image its created)
  - Resolves: bz#923843
    (include userspace iSCSI initiator in block driver whitelist)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-10.el7
changelog:
  - kvm-xhci-fix-endpoint-interval-calculation.patch [bz#1001604]
  - kvm-xhci-emulate-intr-endpoint-intervals-correctly.patch [bz#1001604]
  - kvm-xhci-reset-port-when-disabling-slot.patch [bz#1001604]
  - kvm-Revert-usb-hub-report-status-changes-only-once.patch [bz#1001604]
  - kvm-target-i386-Set-model-6-on-qemu64-qemu32-CPU-models.patch [bz#1004290]
  - kvm-pc-rhel6-doesn-t-have-APIC-on-pentium-CPU-models.patch [bz#918907]
  - kvm-pc-RHEL-6-had-x2apic-set-on-Opteron_G-123.patch [bz#918907]
  - kvm-pc-RHEL-6-don-t-have-RDTSCP.patch [bz#918907]
  - kvm-scsi-Fix-scsi_bus_legacy_add_drive-scsi-generic-with.patch [bz#1009285]
  - kvm-seccomp-fine-tuning-whitelist-by-adding-times.patch [bz#1004175]
  - kvm-block-add-bdrv_write_zeroes.patch [bz#921465]
  - kvm-block-raw-add-bdrv_co_write_zeroes.patch [bz#921465]
  - kvm-rdma-export-qemu_fflush.patch [bz#921465]
  - kvm-block-migration-efficiently-encode-zero-blocks.patch [bz#921465]
  - kvm-Fix-real-mode-guest-migration.patch [bz#921465]
  - kvm-Fix-real-mode-guest-segments-dpl-value-in-savevm.patch [bz#921465]
  - kvm-migration-add-autoconvergence-documentation.patch [bz#921465]
  - kvm-migration-send-total-time-in-QMP-at-completed-stage.patch [bz#921465]
  - kvm-migration-don-t-use-uninitialized-variables.patch [bz#921465]
  - kvm-pc-drop-external-DSDT-loading.patch [bz#921465]
  - kvm-hda-codec-refactor-common-definitions-into-a-header-.patch [bz#954195]
  - kvm-hda-codec-make-mixemu-selectable-at-runtime.patch [bz#954195]
  - kvm-audio-remove-CONFIG_MIXEMU-configure-option.patch [bz#954195]
  - kvm-pc_piix-disable-mixer-for-6.4.0-machine-types-and-be.patch [bz#954195]
  - kvm-spec-mixemu-config-option-is-no-longer-supported-and.patch [bz#954195]
  - Resolves: bz#1001604
    (usb hub doesn't work properly (win7 sees downstream port #1 only).)
  - Resolves: bz#1004175
    ('-sandbox on'  option  cause  qemu-kvm process hang)
  - Resolves: bz#1004290
    (Use model 6 for qemu64 and intel cpus)
  - Resolves: bz#1009285
    (-device usb-storage,serial=... crashes with SCSI generic drive)
  - Resolves: bz#918907
    (provide backwards-compatible RHEL specific machine types in QEMU - CPU features)
  - Resolves: bz#921465
    (Migration can not finished even the "remaining ram" is already 0 kb)
  - Resolves: bz#954195
    (RHEL machines <=6.4 should not use mixemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-11.el7
changelog:
  - kvm-chardev-fix-pty_chr_timer.patch [bz#994414]
  - kvm-qemu-socket-zero-initialize-SocketAddress.patch [bz#922010]
  - kvm-qemu-socket-drop-pointless-allocation.patch [bz#922010]
  - kvm-qemu-socket-catch-monitor_get_fd-failures.patch [bz#922010]
  - kvm-qemu-char-check-optional-fields-using-has_.patch [bz#922010]
  - kvm-error-add-error_setg_file_open-helper.patch [bz#922010]
  - kvm-qemu-char-use-more-specific-error_setg_-variants.patch [bz#922010]
  - kvm-qemu-char-print-notification-to-stderr.patch [bz#922010]
  - kvm-qemu-char-fix-documentation-for-telnet-wait-socket-f.patch [bz#922010]
  - kvm-qemu-char-don-t-leak-opts-on-error.patch [bz#922010]
  - kvm-qemu-char-use-ChardevBackendKind-in-CharDriver.patch [bz#922010]
  - kvm-qemu-char-minor-mux-chardev-fixes.patch [bz#922010]
  - kvm-qemu-char-add-chardev-mux-support.patch [bz#922010]
  - kvm-qemu-char-report-udp-backend-errors.patch [bz#922010]
  - kvm-qemu-socket-don-t-leak-opts-on-error.patch [bz#922010]
  - kvm-chardev-handle-qmp_chardev_add-KIND_MUX-failure.patch [bz#922010]
  - kvm-acpi-piix4-Enable-qemu-kvm-compatibility-mode.patch [bz#1019474]
  - kvm-target-i386-support-loading-of-cpu-xsave-subsection.patch [bz#1004743]
  - Resolves: bz#1004743
    (XSAVE migration format not compatible between RHEL6 and RHEL7)
  - Resolves: bz#1019474
    (RHEL-7 can't load piix4_pm migration section from RHEL-6.5)
  - Resolves: bz#922010
    (RFE: support hotplugging chardev & serial ports)
  - Resolves: bz#994414
    (hot-unplug chardev with pty backend caused qemu Segmentation fault)


author: Michal Novotny <minovotn@redhat.com> - 1.5.3-12.el7
changelog:
  - kvm-vl-Clean-up-parsing-of-boot-option-argument.patch [bz#997817]
  - kvm-qemu-option-check_params-is-now-unused-drop-it.patch [bz#997817]
  - kvm-vl-Fix-boot-order-and-once-regressions-and-related-b.patch [bz#997817]
  - kvm-vl-Rename-boot_devices-to-boot_order-for-consistency.patch [bz#997817]
  - kvm-pc-Make-no-fd-bootchk-stick-across-boot-order-change.patch [bz#997817]
  - kvm-doc-Drop-ref-to-Bochs-from-no-fd-bootchk-documentati.patch [bz#997817]
  - kvm-libqtest-Plug-fd-and-memory-leaks-in-qtest_quit.patch [bz#997817]
  - kvm-libqtest-New-qtest_end-to-go-with-qtest_start.patch [bz#997817]
  - kvm-qtest-Don-t-reset-on-qtest-chardev-connect.patch [bz#997817]
  - kvm-boot-order-test-New-covering-just-PC-for-now.patch [bz#997817]
  - kvm-qemu-ga-execute-fsfreeze-freeze-in-reverse-order-of-.patch [bz#1019352]
  - kvm-rbd-link-and-load-librbd-dynamically.patch [bz#989608]
  - kvm-rbd-Only-look-for-qemu-specific-copy-of-librbd.so.1.patch [bz#989608]
  - kvm-spec-Whitelist-rbd-block-driver.patch [bz#989608]
  - Resolves: bz#1019352
    (qemu-guest-agent: "guest-fsfreeze-freeze" deadlocks if the guest have mounted disk images)
  - Resolves: bz#989608
    ([7.0 FEAT] qemu runtime support for librbd backend (ceph))
  - Resolves: bz#997817
    (-boot order and -boot once regressed since RHEL-6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-13.el7
changelog:
  - kvm-seabios-paravirt-allow-more-than-1TB-in-x86-guest.patch [bz#989677]
  - kvm-scsi-prefer-UUID-to-VM-name-for-the-initiator-name.patch [bz#1006468]
  - kvm-Fix-incorrect-rhel_rhev_conflicts-macro-usage.patch [bz#1017693]
  - Resolves: bz#1006468
    (libiscsi initiator name should use vm UUID)
  - Resolves: bz#1017693
    (incorrect use of rhel_rhev_conflicts)
  - Resolves: bz#989677
    ([HP 7.0 FEAT]: Increase KVM guest supported memory to 4TiB)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-14.el7
changelog:
  - kvm-target-i386-remove-tabs-from-target-i386-cpu.h.patch [bz#928867]
  - kvm-migrate-vPMU-state.patch [bz#928867]
  - kvm-blockdev-do-not-default-cache.no-flush-to-true.patch [bz#1009993]
  - kvm-virtio-blk-do-not-relay-a-previous-driver-s-WCE-conf.patch [bz#1009993]
  - kvm-rng-random-use-error_setg_file_open.patch [bz#907743]
  - kvm-block-mirror_complete-use-error_setg_file_open.patch [bz#907743]
  - kvm-blockdev-use-error_setg_file_open.patch [bz#907743]
  - kvm-cpus-use-error_setg_file_open.patch [bz#907743]
  - kvm-dump-qmp_dump_guest_memory-use-error_setg_file_open.patch [bz#907743]
  - kvm-savevm-qmp_xen_save_devices_state-use-error_setg_fil.patch [bz#907743]
  - kvm-block-bdrv_reopen_prepare-don-t-use-QERR_OPEN_FILE_F.patch [bz#907743]
  - kvm-qerror-drop-QERR_OPEN_FILE_FAILED-macro.patch [bz#907743]
  - kvm-rhel-Drop-ivshmem-device.patch [bz#787463]
  - kvm-usb-remove-old-usb-host-code.patch [bz#1001144]
  - kvm-Add-rhel6-pxe-roms-files.patch [bz#997702]
  - kvm-Add-rhel6-pxe-rom-to-redhat-rpm.patch [bz#997702]
  - kvm-Fix-migration-from-rhel6.5-to-rhel7-with-ipxe.patch [bz#997702]
  - kvm-pc-Don-t-prematurely-explode-QEMUMachineInitArgs.patch [bz#994490]
  - kvm-pc-Don-t-explode-QEMUMachineInitArgs-into-local-vari.patch [bz#994490]
  - kvm-smbios-Normalize-smbios_entry_add-s-error-handling-t.patch [bz#994490]
  - kvm-smbios-Convert-to-QemuOpts.patch [bz#994490]
  - kvm-smbios-Improve-diagnostics-for-conflicting-entries.patch [bz#994490]
  - kvm-smbios-Make-multiple-smbios-type-accumulate-sanely.patch [bz#994490]
  - kvm-smbios-Factor-out-smbios_maybe_add_str.patch [bz#994490]
  - kvm-hw-Pass-QEMUMachine-to-its-init-method.patch [bz#994490]
  - kvm-smbios-Set-system-manufacturer-product-version-by-de.patch [bz#994490]
  - kvm-smbios-Decouple-system-product-from-QEMUMachine.patch [bz#994490]
  - kvm-rhel-SMBIOS-type-1-branding.patch [bz#994490]
  - kvm-Add-disable-rhev-features-option-to-configure.patch []
  - Resolves: bz#1001144
    (Disable or remove device usb-host-linux)
  - Resolves: bz#1009993
    (RHEL7 guests do not issue fdatasyncs on virtio-blk)
  - Resolves: bz#787463
    (disable ivshmem (was: [Hitachi 7.0 FEAT] Support ivshmem (Inter-VM Shared Memory)))
  - Resolves: bz#907743
    (qemu-ga: empty reason string for OpenFileFailed error)
  - Resolves: bz#928867
    (Virtual PMU support during live migration - qemu-kvm)
  - Resolves: bz#994490
    (Set per-machine-type SMBIOS strings)
  - Resolves: bz#997702
    (Migration from RHEL6.5 host to RHEL7.0 host is failed with virtio-net device)


