# changelog

author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-4 + 0.10.3-5
changelog:
  - Unbreak PKCS#11 URI tests (#1648262)
  - Allow to disable RSA signatures with SHA1 (#1648898)
  - Dump missing GSS options from client configuration (#1649505)
  - Minor fixes from Fedora related to GSSAPI and keberos
  - Follow the system-wide PATH settings


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
  - Ignore unknown parts of PKCS#11 URI (#1631478)
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1629692)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-2 + 0.10.3-5
changelog:
  - New upstream release fixing CVE 2018-15473
  - Remove unused patches
  - Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
  - Address coverity issues
  - Unbreak scp between two IPv6 hosts (#1620333)
  - Unbreak GSSAPI key exchange (#1624323)
  - Unbreak rekeying with GSSAPI key exchange (#1624344)


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-6 + 0.10.3-4
changelog:
  - Fix listing of kex algoritms in FIPS mode
  - Allow aes-gcm cipher modes in FIPS mode
  - Coverity fixes


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-1 + 0.10.3-4
changelog:
  - New upstream release (#1563223)
  - Add support for ECDSA keys in PKCS#11 (#1354510)
  - Add support for PKCS#11 URIs


author: Jakub Jelen <jjelen@redhat.com> - 7.6p1-5 + 0.10.3-3
changelog:
  - Drop support for TCP wrappers (#1530163)
  - Do not pass hostnames to audit -- UseDNS is usually disabled (#1534577)


author: Jakub Jelen <jjelen@redhat.com> - 7.6p1-3 + 0.10.3-3
changelog:
  - Do not segfault during audit cleanup (#1524233)
  - Avoid gcc warnings about uninitialized variables


author: Jakub Jelen <jjelen@redhat.com> - 7.6p1-1 + 0.10.3-3
changelog:
  - New upstream release OpenSSH 7.6
  - Addressing review remarks for OpenSSL 1.1.0 patch
  - Fix PermitOpen bug in OpenSSH 7.6
  - Drop support for ExposeAuthenticationMethods option


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-6 + 0.10.3-2
changelog:
  - Do not export KRB5CCNAME if the default path is used (#1199363)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1477636)
  - Add new GSSAPI kex algorithms with SHA-2, but leave them disabled for now
  - Enforce pam_sepermit for all logins in SSH (#1492313)
  - Remove pam_reauthorize, since it is not needed by cockpit anymore (#1492313)


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-4 + 0.10.3-2
changelog:
  - Remove SSH-1 subpackage for Fedora 27 (#1474942)
  - Follow system-wide crypto policy in server (#1479271)


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-2 + 0.10.3-2
changelog:
  - Fix various after-release typos including failed build in s390x (#1434341)
  - Revert chroot magic with SELinux


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-4 + 0.10.3-1
changelog:
  - Avoid sending the SD_NOTIFY messages from wrong processes (#1427526)
  - Address reports by coverity


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Properly report errors from included files (#1408558)
  - New pam_ssh_agent_auth 0.10.3 release
  - Switch to SD_NOTIFY to make systemd happy


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.2-5
changelog:
  - Fix ssh-agent cert signing error (#1416584)
  - Fix wrong path to crypto policies
  - Attempt to resolve issue with systemd


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.2-5
changelog:
  - New upstream release (#1406204)
  - Cache supported OIDs for GSSAPI key exchange (#1395288)
  - Fix typo causing heap corruption (use-after-free) (#1409433)
  - Prevent hangs with long MOTD


author: Jakub Jelen <jjelen@redhat.com> - 7.3p1-7 + 0.10.2-4
changelog:
  - Properly deserialize received RSA certificates in ssh-agent (#1402029)
  - Move MAX_DISPLAYS to a configuration option


author: Jakub Jelen <jjelen@redhat.com> - 7.3p1-5 + 0.10.2-4
changelog:
  - Build against OpenSSL 1.1.0 with compat changes
  - Recommend crypto-policies
  - Fix chroot dropping capabilities (#1386755)


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-10 + 0.10.2-3
changelog:
  - CVE-2016-6210: User enumeration via covert timing channel (#1357443)
  - Expose more information about authentication to PAM
  - Make closefrom() ignore softlinks to the /dev/ devices on s390


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-8 + 0.10.2-3
changelog:
  - Enable seccomp filter for MIPS architectures
  - UseLogin=yes is not supported in Fedora
  - SFTP server forced permissions should restore umask
  - pam_ssh_agent_auth: Fix conflict bewteen two getpwuid() calls (#1349551)


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-7
changelog:
  - Fix regression in certificate-based authentication (#1333498)
  - Check for real location of .k5login file (#1328243)
  - Fix unchecked dereference in pam_ssh_agent_auth
  - Clean up old patches
  - Build with seccomp filter on ppc64(le) (#1195065)


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-5 + 0.10.2-3
changelog:
  - CVE-2015-8325: ignore PAM environment vars when UseLogin=yes (#1328013)
  - Fix typo in sysconfig/sshd (#1325535)


author: Jakub Jelen <jjelen@redhat.com> 7.2p2-3 + 0.10.2-3
changelog:
  - Make sshd-keygen comply with packaging guidelines (#1325535)
  - Soft-deny socket() syscall in seccomp sandbox (#1324493)
  - Remove *sha1 Kex in FIPS mode (#1324493)
  - Remove *gcm ciphers in FIPS mode (#1324493)


author: Jakub Jelen <jjelen@redhat.com> 7.2p2-2 + 0.10.2-3
changelog:
  - Fix GSSAPI Key Exchange according to RFC (#1323622)
  - Remove init.d/functions dependency from sshd-keygen (#1317722)
  - Do not use MD5 in pam_ssh_agent_auth in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> 7.1p2-4.1 + 0.10.2-1
changelog:
  - Fix race condition in auditing events when using multiplexing (#1308295)
  - Fix X11 forwarding CVE according to upstream
  - Fix problem when running without privsep (#1303910)
  - Remove hard glob limit in SFTP


author: Jakub Jelen <jjelen@redhat.com> 7.1p2-3 + 0.10.2-1
changelog:
  - Fix segfaults with pam_ssh_agent_auth (#1303036)
  - Silently disable X11 forwarding on problems
  - Systemd service should be forking to detect immediate failures


author: Jakub Jelen <jjelen@redhat.com> 7.1p2-2 + 0.10.2-1
changelog:
  - Rebased to recent version of pam_ssh_agent_auth
  - Upstream fix for CVE-2016-1908
  - Remove useless defattr


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-7 + 0.9.2-8
changelog:
  - Change RPM define macros to global according to packaging guidelines
  - Fix wrong handling of SSH_COPY_ID_LEGACY environment variable
  - Update ssh-agent and ssh-keysign permissions (#1296724)
  - Fix few problems with alternative builds without GSSAPI or openSSL
  - Fix condition to run sshd-keygen


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-6 + 0.9.2-8
changelog:
  - Preserve IUTF8 tty mode flag over ssh connections (#1270248)
  - Do not require sysconfig file to start service (#1279521)
  - Update ssh-copy-id to upstream version
  - GSSAPI Key Exchange documentation improvements
  - Remove unused patches


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-4 + 0.9.2-8
changelog:
  - Review SELinux user context handling after authentication (#1269072)
  - Handle root logins the same way as other users (#1269072)
  - Audit implicit mac, if mac is covered in cipher (#1271694)
  - Increase size limit for remote glob over sftp


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-3 + 0.9.2-8
changelog:
  - Fix FIPS mode for DH kex (#1260253)
  - Provide full RELRO and PIE form askpass helper (#1264036)
  - Fix gssapi key exchange on server and client (#1261414)
  - Allow gss-keyex root login when without-password is set (upstream #2456)
  - Fix obsolete usage of SELinux constants (#1261496)


author: Jakub Jelen <jjelen@redhat.com> 7.0p1-2 + 0.9.3-7
changelog:
  - Fix problem with DSA keys using pam_ssh_agent_auth (#1251777)
  - Add GSSAPIKexAlgorithms option for server and client application
  - Possibility to validate legacy systems by more fingerprints (#1249626)


author: Jakub Jelen <jjelen@redhat.com> 7.0p1-1 + 0.9.3-7
changelog:
  - New upstream release (#1252639)
  - Fix pam_ssh_agent_auth package (#1251777)
  - Security: Use-after-free bug related to PAM support (#1252853)
  - Security: Privilege separation weakness related to PAM support (#1252854)
  - Security: Incorrectly set TTYs to be world-writable (#1252862)


author: Jakub Jelen <jjelen@redhat.com> 6.9p1-2 + 0.9.3-6
changelog:
  - Enable SECCOMP filter for s390* architecture (#1195065)
  - Fix race condition when multiplexing connection (#1242682)


author: Jakub Jelen <jjelen@redhat.com> 6.9p1-1 + 0.9.3-6
changelog:
  - New upstream release (#1238253)
  - Increase limitation number of files which can be listed using glob in sftp
  - Correctly revert "PermitRootLogin no" option from upstream sources (#89216)


author: Jakub Jelen <jjelen@redhat.com> 6.8p1-6 + 0.9.3-5
changelog:
  - Resolve problem with pam_ssh_agent_auth after rebase (#1225106)
  - ssh-copy-id: tcsh doesnt work with multiline strings
  - Fix upstream memory problems
  - Add missing options in testmode output and manual pages
  - Provide LDIF version of LPK schema
  - Document required selinux boolean for working ssh-ldap-helper


author: Jakub Jelen <jjelen@redhat.com> 6.8p1-3 + 0.9.3-5
changelog:
  - Fixed issue with GSSAPI key exchange (#1207719)
  - Add pam_namespace to sshd pam stack (based on #1125110)
  - Remove krb5-config workaround for #1203900
  - Fix handling SELinux context in MLS systems
  - Regression: solve sshd segfaults if other instance already running


author: Jakub Jelen <jjelen@redhat.com> 6.8p1-1 + 0.9.3-5
changelog:
  - new upstream release openssh-6.8p1 (#1203245)
  - Resolve segfault with auditing commands (#1203900)
  - Workaround krb5-config bug (#1204646)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-11 + 0.9.3-4
changelog:
  - Ability to specify LDAP filter in ldap.conf for ssh-ldap-helper
  - Fix auditing when using combination of ForceCommand and PTY
  - Add sftp option to force mode of created files (from rhel)
  - Fix tmpfiles.d entries to be more consistent (#1196807)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-9 + 0.9.3-4
changelog:
  - Adjust seccomp filter for primary architectures and solve aarch64 issue (#1197051)
  - Solve issue with ssh-copy-id and keys without trailing newline (#1093168)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-6 + 0.9.3-4
changelog:
  - Update seccomp filter to work on i686 architectures (#1194401)
  - Fix previous failing build (#1195065)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-3 + 0.9.3-4
changelog:
  - update coverity patch
  - make output of sshd -T more consistent (#1187521)
  - enable seccomp for sandboxing instead of rlimit (#1062953)
  - update hardening to compile on gcc5
  - Add SSH KDF CAVS test driver (#1193045)
  - Fix ssh-copy-id on non-sh remote shells (#1045191)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-11.1 + 0.9.3-3
changelog:
  - error message if scp when directory doesn't exist (#1142223)
  - parsing configuration file values (#1130733)
  - documentation in service and socket files for systemd (#1181593)
  - updated ldap patch (#981058)
  - fixed vendor-patchlevel
  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278 (#1170745)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-9 + 0.9.3-3
changelog:
  - the .local domain example should be in ssh_config, not in sshd_config
  - use different values for DH for Cisco servers (#1026430)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-6 + 0.9.3-3
changelog:
  - privsep_preauth: use SELinux context from selinux-policy (#1008580)
  - change audit trail for unknown users (mindrot#2245)
  - fix kuserok patch which checked for the existence of .k5login
    unconditionally and hence prevented other mechanisms to be used properly
  - revert the default of KerberosUseKuserok back to yes (#1153076)
  - ignore SIGXFSZ in postauth monitor (mindrot#2263)
  - sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-5 + 0.9.3-3
changelog:
  - set a client's address right after a connection is set (mindrot#2257)
  - apply RFC3454 stringprep to banners when possible (mindrot#2058)
  - don't consider a partial success as a failure (mindrot#2270)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-1 + 0.9.3-2
changelog:
  - disable the curve25519 KEX when speaking to OpenSSH 6.5 or 6.6
  - add support for ED25519 keys to sshd-keygen and sshd.sysconfig
  - drop openssh-server-sysvinit subpackage
  - slightly change systemd units logic - use sshd-keygen.service (#1066615)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-4 + 0.9.3-1
changelog:
  - use SSH_COPY_ID_LEGACY variable to run ssh-copy-id in the legacy mode
  - make /etc/ssh/moduli file public (#1043661)
  - test existence of /etc/ssh/ssh_host_ecdsa_key in sshd-keygen.service
  - don't clean up gssapi credentials by default (#1055016)
  - ssh-agent - try CLOCK_BOOTTIME with fallback (#1091992)
  - prevent a server from skipping SSHFP lookup - CVE-2014-2653 (#1081338)
  - ignore environment variables with embedded '=' or '\0' characters - CVE-2014-2532
    (#1077843)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-3 + 0.9.3-1
changelog:
  - sshd-keygen - use correct permissions on ecdsa host key (#1023945)
  - use only rsa and ecdsa host keys by default


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-2 + 0.9.3-1
changelog:
  - fix fatal() cleanup in the audit patch (#1029074)
  - fix parsing logic of ldap.conf file (#1033662)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-5 + 0.9.3-7
changelog:
  - adjust gss kex mechanism to the upstream changes (#1024004)
  - don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-2 + 0.9.3-6
changelog:
  - use default_ccache_name from /etc/krb5.conf for a kerberos cache (#991186)
  - increase the size of the Diffie-Hellman groups (#1010607)
  - sshd-keygen to generate ECDSA keys <i.grok@comcast.net> (#1019222)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-9 + 0.9.3-5
changelog:
  - use dracut-fips package to determine if a FIPS module is installed
  - revert -fips subpackages and hmac files suffixes


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-8 + 0.9.3-5
changelog:
  - sshd-keygen: generate only RSA keys by default (#1010092)
  - use dist tag in suffixes for hmac checksum files


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-7 + 0.9.3-5
changelog:
  - use hmac_suffix for ssh{,d} hmac checksums
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A
  - automatically restart sshd.service on-failure after 42s interval


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-4 + 0.9.3-5
changelog:
  - don't show Success for EAI_SYSTEM (#985964)
  - make sftp's libedit interface marginally multibyte aware (#841771)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-3 + 0.9.3-4
changelog:
  - sshd.service: use KillMode=process (#890376)
  - add latest config.{sub,guess} to support aarch64 (#926284)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-2 + 0.9.3-4
changelog:
  - keep track of which IndentityFile options were manually supplied and
    which were default options, and don't warn if the latter are missing.
    (mindrot#2084)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-3 + 0.9.3-3
changelog:
  - replace RequiredAuthentications2 with AuthenticationMethods based on upstream
  - obsolete RequiredAuthentications[12] options
  - fix openssh-6.1p1-privsep-selinux.patch


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-2
changelog:
  - add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port (#861400)
  - drop required chkconfig (#865498)
  - drop openssh-5.9p1-sftp-chroot.patch (#830237)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-1 + 0.9.3-3
changelog:
  - new upstream release (#852651)
  - use DIR: kerberos type cache (#848228)
  - don't use chroot_user_t for chrooted users (#830237)
  - replace scriptlets with systemd macros (#850249)
  - don't use /bin and /sbin paths (#856590)


author: Tomas Mraz <tmraz@redhat.com> 5.9p1-23 + 0.9.3-1
changelog:
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running, most probably not exploitable
  - update pam_ssh_agent_auth to 0.9.3 upstream version


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-18 + 0.9.2-32
changelog:
  - replace TwoFactorAuth with RequiredAuthentications[12]
    https://bugzilla.mindrot.org/show_bug.cgi?id=983


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-13 + 0.9.2-32
changelog:
  - add back the restorecon call to ssh-copy-id - it might be needed on older
    distributions (#739989)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-12 + 0.9.2-32
changelog:
  - still support /etc/sysconfig/sshd loading in sshd service (#754732)
  - fix incorrect key permissions generated by sshd-keygen script (#754779)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-11 + 0.9.2-32
changelog:
  - remove unnecessary requires on initscripts
  - set VerifyHostKeyDNS to ask in the default configuration (#739856)


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p2-12 + 0.9.2-31
changelog:
  - Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
  - Split out the host keygen into their own command, to ease future migration
    to systemd. Compatitbility with the init script was kept.
  - Migrate the package to full native systemd unit files, according to the Fedora
    packaging guidelines.
  - Prepate the unit files for running an ondemand server. (do not add it actually)


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-20 + 0.9.2-30
changelog:
  - use /dev/random or /dev/urandom for seeding prng
  - improve periodical reseeding of random generator


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-18 + 0.9.2-30
changelog:
  - add periodical reseeding of random generator 
  - change selinux contex for internal sftp in do_usercontext
  - exit(0) after sigterm


author: Jan F. Chadima <jchadima@redhat.com> - 5.6p1-20 + 0.9.2-29
changelog:
  - reapair clientloop crash (#627332)
  - properly restore euid in case connect to the ssh-agent socket fails


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-10 + 0.9.2-26
changelog:
  - Repair the reference in man ssh-ldap-helper(8)
  - Repair the PubkeyAgent section in sshd_config(5)
  - Provide example ldap.conf


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Ondrej Vasik <ovasik@redhat.com> - 2.11-36
changelog:
  - in 2015, file name in CVE-2014-9112 shows in a bit different timestamp
    format (fix FTBFS, #1239416)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-33
changelog:
  - the stored archive in testsuite has little endian headers, expect also
    'reversed byte-order' warning on big-endian


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-32
changelog:
  - adjust the testsuite fix for CVE-2014-9112 (#1167573)
  - put the testsuite.log to standard output if make check fails


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-26
changelog:
  - fix manual page to warn users about inode truncation (#952313)
  - fix for RU translation (#1075510)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-24
changelog:
  - properly trim "crc" checksum to 32 bits (#1001965)
  - remove unneeded patch for config.gues/config.sub (#951442)
  - allow treat read() errors (#996150)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-14
changelog:
  - fix bad changelog entries
  - allow to build in Fedora Rawhide (temporarily because of #872336) (the value
    is guessed from from /usr/include/asm-generic/fcntl.h)


author: Ondrej Vasik <ovasik@redhat.com> 2.11-8
changelog:
  - drop unnecessary patches: cpio-2.9-dir_perm.patch and
    cpio-2.9-sys_umask.patch - reported by M.Castellini


author: Ondrej Vasik <ovasik@redhat.com> 2.10-6
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#572150)
  - comment patches


author: Ondrej Vasik <ovasik@redhat.com> 2.10-5
changelog:
  - remove redundant setLocale patch
  - fix segfault with nonexisting file with patternnames
    (#567022)


author: Radek Brich <rbrich@redhat.com> 2.9-7
changelog:
  - fix -dir_perm patch to restore permissions correctly even
    in passthrough mode -- revert affected code to cpio 2.8 state
    (bz#430835)


author: Radek Brich <rbrich@redhat.com> 2.9-6
changelog:
  - when extracting archive created with 'find -depth',
    restore the permissions of directories properly (bz#430835)
  - fix for GCC 4.3


author: Peter Vrabec <pvrabec@redhat.com> 2.6-13
changelog:
  - merge toAsciiError.patch with writeOutHeaderBufferOverflow.patch
  - merge largeFileGrew.patch with lfs.patch
  - fix large file support, cpio is able to store files<8GB 
    in 'old ascii' format (-H odc option)
  - adjust warnings.patch


author: Peter Vrabec <pvrabec@redhat.com> 2.6-12
changelog:
  - fix warn_if_file_changed() and set exit code to #1 when 
    cpio fails to store file > 4GB (#183224)


author: Peter Vrabec <pvrabec@redhat.com> 2.6-8
changelog:
  - fix large file support, archive >4GiB, archive members <4GiB (#160056)
  - fix race condition holes, use mode 0700 for dir creation


author: Jeff Johnson <jbj@redhat.com> 2.5-1
changelog:
  - update 2.5, restack and consolidate patches.
  - don't apply (but include for now) freebsd and #56346 patches.
  - add url (#54598).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - revert the stdout patch (#3358), restoring original GNU cpio behavior
    (#6376, #7538), the patch was dumb.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix infinite loop unpacking empty files with hard links (#4208).
  - stdout should contain progress information (#3358).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump package.
  - Don't include /bin/mt -- use the mt from mt-st package.
  - Add prereq's


author: Steve Dickson <steved@redhat.com> 2.3.3-39
changelog:
  - systemd: Ingnore export failures in nfs-server.serivce unit (bz 1894873)
  - exports.man: Remove some outdated verbiage (bz 1769688)


author: Steve Dickson <steved@redhat.com> 2.3.3-38
changelog:
  - exports man page: warn about subdirectory exports (bz 1652437)
  - Don't modify /etc/group on upgrades (bz 1856881)
  - nfs-iostat: divide by zero with fresh mount (bz 1861823)
  - nfsiostat: Drop autofs entries before calling compare_iostats() (bz 1859130)
  - nfsdclddb: clddb-tool was recently renamed to nfsdclddb (bz 1893599)


author: Steve Dickson <steved@redhat.com> 2.3.3-33
changelog:
  - manpage: Add a description of the 'nconnect' mount option (bz 1761352)
  - nfsdclddb: Redname clddb-tool to nfsdclddb (bz 1836924)


author: Steve Dickson <steved@redhat.com> 2.3.3-32
changelog:
  - junction: Fixed debug statement (bz 1831829)
  - Userspace support for the latest nfsdcld daemon (bz 1817756)


author: Steve Dickson <steved@redhat.com> 2.3.3-27
changelog:
  - More coverity scans updates (bz 1746572)
  - nfsd: Adjust nfs.conf setting/parsing of rdma port (bz 1710532)
  - Add plain --rdma option to nfs.conf convertor (bz 1747295)
  - mountstats: Add per-op error counts to iostat command (bz 1719983)
  - gssd: add configure options verbosity to man page (bz 1749642)


author: Steve Dickson <steved@redhat.com> 2.3.3-24
changelog:
  - nfs.man: Fixed small typo in man page (bz 1732877)
  - mount: Report correct error in the fall_back cases (bz 1709963)
  - rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1712202)
  - spec: Remove redundant manpage files (bz 1718738)


author: Steve Dickson <steved@redhat.com> 2.3.3-17
changelog:
  - Moved the gating tests out of a patch and into the top dir (bz 1653927)
  - Move the mode corrections on /etc/nfs.conf to nfsconvert.py (bz 1655880)
  - gssd: add verbosity options to the rpc.gssd man page (bz 1668026)


author: Steve Dickson <steved@redhat.com> 2.3.3-16
changelog:
  - Add a conversion for new sm-notify force option in nfs.conf (bz 1677576)
  - Correct the modes on /etc/nfs.conf after a conversion (bz 1655880)


author: Steve Dickson <steved@redhat.com> 2.3.3-15
changelog:
  - nfs.conf: Fixed manage-gids option typo (bz 1672395)
  - sm-notify: Added -f flag to nfs.conf parsing (bz 1677576)
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1683714)


author: Steve Dickson <steved@redhat.com> 2.3.3-12
changelog:
  - Change nfsconvert.sh not to set the immutable bit (bz 1673685)
  - Change nfsconvert.py not to create the new dummy /etc/sysconfig/nfs (bz 1673685)


author: Steve Dickson <steved@redhat.com> 2.3.3-8
changelog:
  - Update junction code with latest upstream code (1543126)
  - Make sure /etc/sysconfig/nfs is immutabl (1639432)


author: Steve Dickson <steved@redhat.com> 2.3.3-6
changelog:
  - Changed /var/lib/nfs/rpc_pipefs to have 555 permissions (bz 1583489)
  - Removed tcp wrappers support from man pages (bz 1642596) 
  - Reload not restart gssproxy in nfs-server.service (bz 1592660)


author: Steve Dickson <steved@redhat.com> 2.3.3-3
changelog:
  - Ensure /var/lib/nfs/rpc_pipefs has the correct permissions (bz 1583489)
  - mount.nfs: Only ignore EBUSY when a filesystem is already mount (bz 1629644)


author: Steve Dickson <steved@redhat.com> 2.3.1-8.rc1
changelog:
  - Ensure /var/lib/nfs/rpc_pipefs has the correct permissions (bz 1583489)
  - Remove rpc.svcgssd from systemd scripts (bz 1591700)


author: Steve Dickson <steved@redhat.com> 2.3.1-6.rc1
changelog:
  - Stop failing when systemctl try-restart gssproxy fails (bz 1552976)
  - Use Fedora build flags (bz 1548679)


author: Steve Dickson <steved@redhat.com> 2.2.1-1.rc1
changelog:
  - Restore ABI compat with pre-merge libnfsidmap (bz 1509063)
  - Add a build-time dependency on python3-devel


author: Steve Dickson <steved@redhat.com> 2.1.1-5.rc4
changelog:
  - Updated to the latest RC releease: nfs-utils-2-1-2-rc4 (bz 1462218)
  - rpc.c: added include file so UINT16_MAX is defined


author: Steve Dickson <steved@redhat.com> 2.1.1-5.rc2
changelog:
  - Conditionally restart gssproxy now that config file is installed (bz 1440885)
  - systemd: Afters are also needed for the Wants=network-online.target (bz 1419351)
  - nfsdcltrack: silence some expected errors (bz 1445863)
  - Cleaned up fuzzy patches


author: Steve Dickson <steved@redhat.com> 2.1.1-4.rc2
changelog:
  - Updated to the latest RC release: nfs-utils-2-1-2-rc2 (bz 1419351)
  - Fixed typo in nfs.sysconfig  (bz 1422249)


author: Steve Dickson <steved@redhat.com> 1.3.3-7.rc4
changelog:
  - Updated to the latest RC release: nfs-utils-1-3-4-rc4 (bz 1316701)
  - Changed BuildRequires: glibc-headers ==> BuildRequires: gcc (bz 1230477)


author: Steve Dickson <steved@redhat.com> 1.3.2-0.2
changelog:
  - Change statd-notify.service to not wait for network to come up (bz 1183293)
  - Added the rpcuser group before adding the rpcuser uid (bz 1165322)


author: Steve Dickson <steved@redhat.com> 1.3.1-4.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-3-2-rc4 (bz 1164477)
  - Handle the rpcuser like other created users (bz 1165322)
  - Restored lockd port and v4 grace/lease interface (bz 1115225)
  - Make sure nfs-client target is enabled (bz 1173564)


author: Steve Dickson <steved@redhat.com> 1.3.1-0.0
changelog:
  - Update to the latest upstream release: nfs-utils-1-3-1
  - Enable gssproxy to manage the GSSAPI creds on the server.


author: Steve Dickson <steved@redhat.com> 1.3.0-5.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-3-1-rc3
  - Use _statdpath to define where statd's state lives


author: Steve Dickson <steved@redhat.com> 1.2.9-3.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-10-rc3
    - gssd: Improve first attempt at acquiring GSS credentials (bz 1055077)
  - gssd: set $HOME to prevent recursion (bz 1052902)


author: Steve Dickson <steved@redhat.com> 1.2.9-2.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-10-rc2
  - Added Also=nfs.target to nfs-service file. (bz 1047972)


author: Steve Dickson <steved@redhat.com> 1.2.8-2.0
changelog:
  - Update to latest upstream RC release: nfs-utils.1.2.9-rc1
  - Added GSS_USE_PROXY variable to nfs.sysconfig (bz 967112)


author: Steve Dickson <steved@redhat.com> 1.2.7-5
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc4
  - Added nfs-lock.service to After line in nfs-server.service (bz 914792)


author: Steve Dickson <steved@redhat.com> 1.2.7-3
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc3
  - Took ownership of /usr/lib/nfs-utils (bz 894535)


author: Steve Dickson <steved@redhat.com> 1.2.6-14
changelog:
  - Allow the service to start when RPCNFSDCOUNT is comment out. (bz 870143)
  - Removed some old cruft from the spec file (bz 226198)


author: Steve Dickson <steved@redhat.com> 1.2.6-12
changelog:
  - Added FedFS support by added a BuildRequires for fedfs-utils-devel
  - Introduce new systemd-rpm macros (bz 850227)
  - Updated to latest upstream RC release: nfs-utils.1.2.7-rc5 (bz 833024)


author: Steve Dickson <steved@redhat.com> 1.2.6-1
changelog:
  - Correctly search for the existence of nfsnobody (bz 816149)
  - Correctly change the default group id for nfsnobody (bz 816149)


author: Steve Dickson <steved@redhat.com> 1.2.6-0
changelog:
  - Update to the latest upstream release: nfs-utils-1.2.6 (bz 821673)
  - Split out NFS server daemons into individual service files (bz 769879) 
  - Removed Wants= from nfs-lock.service (bz 817895)
  - Only enable services if they are enabled on upgrades (bz 807020)


author: Steve Dickson <steved@redhat.com> 1.2.5-14
changelog:
  - gssd: Look for user creds in user defined directory (bz 786993)
  - gssd: Don't link with libgssapi_krb5 (bz 784908)


author: Steve Dickson <steved@redhat.com> 1.2.5-13
changelog:
  - Make sure statd is start before NFS mounts (bz 786050)
  - rpc.idmap: Hide global symbols from libidmap plugins (bz 797332)
  - nfsd: Bump up the default to 8 nprocs (bz 757452)


author: Steve Dickson <steved@redhat.com> 1.2.5-11
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc6
  - Reworked how the nfsd service requires the rpcbind service (bz 768550)


author: Steve Dickson <steved@redhat.com> 1.2.5-7
changelog:
  - Enabled new idmaping by installing the id_resolver.conf file.
  - Update to upstream RC release: nfs-utils-1.2.6-rc4


author: Steve Dickson <steved@redhat.com> 1.2.5-6
changelog:
  - Remove RQUOTAD_PORT and RQUOTAD from /etc/sysconfig/nfs (bz 754496)
  - Ensured nfs-idmap service is started after the named is up (bz 748275)


author: Steve Dickson <steved@redhat.com> 1.2.5-5
changelog:
  - Ensured nfs-idmap service is started after the network up (bz 748275)
  - Update to upstream RC release: nfs-utils-1.2.6-rc3 (bz 746497)


author: Steve Dickson <steved@redhat.com> 1.2.5-2
changelog:
  - Removed SUID bits on mount commands (bz 528498)
  - Fixed a few typos in a couple man pages (bz 668124, 673818, 664330)
  - Fixed a I/0 problem in rpc.idmapd (bz 684308)


author: Steve Dickson <steved@redhat.com> 1.2.5-1
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc1
  - Added named.service to After list in nfs-server.service (bz 742746)


author: Steve Dickson <steved@redhat.com> 1.2.4-9
changelog:
  - Both the nfs.lock and nfs.idmap services should always
    enabled on both installs and upgrades (bz 699040)
  - Fixed the paths to the server scriptlets (bz 733531)


author: Steve Dickson <steved@redhat.com> 1.2.4-7
changelog:
  - Added StandardError=syslog+console to all the service files
    so startup errors will be logged. 
  - Changed exportfs to only log errors on existing /etc/export.d 
    directory, which eliminates a needless syslog entry.
  - Automount /proc/fs/nfsd for rpc.nfsd


author: Steve Dickson <steved@redhat.com> 1.2.4-4
changelog:
  - Converted init scrips to systemd services. (bz 699040)
  - Made nfsnobody's uid/gid to always be a 16-bit value of -2
  - mount: fix for libmount from util-linux >= 2.20


author: J. Bruce Fields <bfields@redhat.com> 1.2.4-1
changelog:
  - Rely on crypto module autoloading in init scripts
  - initscripts: just try to mount rpc_pipefs always


author: Steve Dickson <steved@redhat.com> 1.2.3-7
changelog:
  - Updated to latest upstream release: nfs-utils-1-2-4-rc5
  - Add initscripts changes needed for rpcbind to be running when nfs is started
  - Initscripts changes needed to support NFS over RDMA
  - Allow the setting of the NFSv4 grace period (bz 665387)


author: Steve Dickson <steved@redhat.com> 1.2.3-4
changelog:
  - The nfs service is not stopped on reboot or halt (bz 652786)
  - Removed obsolete configuration values (bz 653765)


author: Steve Dickson <steved@redhat.com> 1.2.3-2
changelog:
  - Initscripts do not conform to LSB specification (bz 621562)
  - sm-notify needs to call res_init() before each try (bz 625531)
  - exports(5) man page duplicated paragraphs (bz 590921)


author: Steve Dickson <steved@redhat.com> 1.2.1-13
changelog:
  - mount.nfs: Configuration file parser ignoring options
  - mount.nfs: Set the default family for lookups based on 
      defaultproto= setting
  - Enabled ipv6


author: Steve Dickson <steved@redhat.com> 1.2.1-12
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for tcpwrapper (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-11
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for statd (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-10
changelog:
  - Updated to the latest pseudo root release (rel10) which
    containts the upstream pseudo root release


author: Steve Dickson <steved@redhat.com> 1.2.0-17
changelog:
  - Updated to the latest pseudo root release (rel7).
  - Added upstream 1.2.1-rc7 patch which fixes:
    - Stop ignoring the -o v4 option (bz 529407)
    - Allow network protocol roll backs when proto is set
      in the config file (bz 529864)
  - v4 mounts will roll back to v3 mounts when the mount
    fails with ENOENT.


author: Steve Dickson <steved@redhat.com> 1.2.0-15
changelog:
  - Change the nfsmount.conf file to define v3 as the default 
    protocol version.
  - Make sure versions set on the command line override version
    set in nfsmount.conf
  - Make version rollbacks still work when versions are set in
    nfsmount.conf


author: Steve Dickson <steved@redhat.com> 1.2.0-13
changelog:
  - Added upstream 1.2.1-rc5 patch
    - mount.nfs: Support negotiation between v4, v3, and v2
    - mount.nfs: Keep server's address in nfsmount_info
    - mount.nfs: Sandbox each mount attempt
    - mount.nfs: Support negotiation between v4, v3, and v2


author: Steve Dickson <steved@redhat.com> 1.2.0-11
changelog:
  - Added upstream 1.2.1-rc5 patch
    - Added --sort --list functionality to nfs-iostat.py
    - Fixed event handler in idmapd
    - Added -o v4 support
    - Disabled IPv6 support in nfsd
    - Don't give client an empty flavor list
    - Fixed gssed so it does not blindly caches machine credentials


author: Steve Dickson <steved@redhat.com> 1.2.0-10
changelog:
  - Added upstream 1.2.1-rc4 patch
    - Fix bug when both crossmnt
    - nfs(5): Add description of lookupcache mount option
    - nfs(5): Remove trailing blanks
    - Added nfs41 support to nfssat
    - Added support for mount to us a configuration file.


author: Steve Dickson <steved@redhat.com> 1.2.0-9
changelog:
  - Added upstream 1.2.1-rc3 patch
    - Add IPv6 support to nfsd
    - Allow nfssvc_setfds to properly deal with AF_INET6
    - Convert nfssvc_setfds to use getaddrinfo
    - Move check for active knfsd to helper function
    - Declare a static common buffer for nfssvc.c routine
    - Convert rpc.nfsd to use xlog() and add --debug and --syslog options


author: Steve Dickson <steved@redhat.com> 1.2.0-6
changelog:
  - Added NFSD v4 dynamic pseudo root patch which allows
    NFS v3 exports to be mounted by v4 clients.


author: Steve Dickson <steved@redhat.com> 1.2.0-4
changelog:
  - Added upstream 1.2.1-rc1 patch 
    - Fix to check in closeall()
    - Make --enable-tirpc the default
    - Set all verbose types in gssd daemons
    - Retry exports if getfh() fails


author: Steve Dickson <steved@redhat.com> 1.1.6-3
changelog:
  - Added upstream 1.1.7-rc1 patch 
    - utils/nfsd: add support for minorvers4
    - sm-notify: Don't orphan addrinfo structs
    - sm-notify: Failed DNS lookups should be retried
    - mount: remove legacy version of nfs_name_to_address()
    - compiling error in rpcgen
    - nfs-utils: Fix IPv6 support in support/nfs/rpc_socket.c
    - umount.nfs: Harden umount.nfs error reportin


author: Steve Dickson <steved@redhat.com> 1.1.5-4
changelog:
  - Added upstream rc3 patch
    - gssd: initialize fakeseed in prepare_krb5_rfc1964_buffer
    - gssd: NULL-terminate buffer after read in read_service_info (try #2)
    - gssd: free buffer allocated by gssd_k5_err_msg
    - gssd: fix potential double-frees in gssd
    - Removed a number of warn_unused_result warnings


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Fixed lockd not using settings in sysconfig/nfs (bz 461043)
  - Fixed some lost externs in the tcpwrapper code


author: Steve Dickson <steved@redhat.com> 1.1.4-18
changelog:
  - umount.nfs command: Add an AF_INET6-capable version of nfs_call_unmount()
  - umount.nfs command: Support AF_INET6 server addresses
  - umount command: remove do_nfs_umount23 function


author: Steve Dickson <steved@redhat.com> 1.1.4-15
changelog:
  - Reworked tcp wrapper code to correctly use API (bz 480223)
  - General clean up of tcp wrapper code.


author: Steve Dickson <steved@redhat.com> 1.1.4-14
changelog:
  - text-based mount command: make po_rightmost() work for N options
  - text-based mount command: Function to stuff "struct pmap" from mount options
  - text-based mount options: Use new pmap stuffer when	rewriting mount options
  - text-based mount command: fix mount option rewriting logic
  - text-based mount command: support AF_INET6 in rewrite_mount_options()


author: Steve Dickson <steved@redhat.com> 1.1.4-12
changelog:
  - configure: Remove inet_ntop(3) check from configure.ac
  - configure: Add new build option "--enable-tirpc"
  - showmount command: Quiesce warning when TI-RPC is disabled


author: Steve Dickson <steved@redhat.com> 1.1.4-11
changelog:
  - Added warnings to tcp wrapper code when mounts are 
    denied due to misconfigured DNS configurations.
  - gssd: By default, don't spam syslog when users' credentials expire
  - mount: revert recent fix for build problems on old systems
  - mount: use gethostbyname(3) when building on old systems
  - mount: getport: don't use getaddrinfo(3) on old systems
  - mount: Random clean up
  - configure: use "--disable-uuid" instead of	"--without-uuid"


author: Steve Dickson <steved@redhat.com> 1.1.4-9
changelog:
  - text-based mount command: add function to parse numeric mount options
  - text-based mount command: use po_get_numeric() for handling retry
  - sm-notify command: fix a use-after-free bug
  - statd: not unlinking host files


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - mount command: AF_INET6 support for probe_bothports()
  - mount command: support AF_INET6 in probe_nfsport() and probe_mntport()
  - mount command: full support for AF_INET6 addresses in probe_port()
  - gssd/svcgssd: add support to retrieve actual context expiration
  - svcgssd: use the actual context expiration for cache


author: Steve Dickson <steved@redhat.com> 1.1.4-6
changelog:
  - mount command: remove local getport() implementation
  - mount command: Replace clnt_ping() and getport() calls in probe_port()
  - mount command: Use nfs_error() instead of perror()
  - mount command: Use nfs_pmap_getport() in probe_statd()


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - Make sure /proc/fs/nfsd exists when the nfs init script
    does the exports (bz 473396)
  - Fixed typo in nfs init script that caused rpc.rquotad daemons
    to be started but not stoppped (bz 473929)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - gssd: unblock DNOTIFY_SIGNAL in case it was blocked
  - Ensure statd gets started if required when non-root
    user mounts an NFS filesystem


author: Steve Dickson <steved@redhat.com> 1.1.3-5
changelog:
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 462508)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)


author: Steve Dickson <steved@redhat.com> 1.1.2-12
changelog:
  - Changed the default directories for sm-notify (bz 435480)
  - Added 'condstop' to init scripts so service are not
    started when nfs-utils is removed.


author: Steve Dickson <steved@redhat.com> 1.1.2-7
changelog:
  - Added -D_FILE_OFFSET_BITS=64 to CFLAGS
  - make nfsstat read and print stats as unsigned integers
  - Added (but not installed) the mountstats and nfs-iostat
    python scripts.


author: Steve Dickson <steved@redhat.com> 1.1.2-3
changelog:
  - Documented how to turn off/on protocol support for
    rpc.nfsd in /etc/sysconfig/nfs (bz443625)
  - Corrected the nfslock initscript 'status' return code (bz 441605)
  - Removed obsolete code from the nfslock initscript (bz 441604)


author: Steve Dickson <steved@redhat.com> 1.1.1-5
changelog:
  - Stopped mountd from incorrectly logging an error
    (commit 9dd9b68c4c44f0d9102eb85ee2fa36a8b7f638e3)
  - Stop gssd from ignoring the machine credential caches
    (commit 46d439b17f22216ce8f9257a982c6ade5d1c5931)
  - Fixed typo in the nfsstat command line arugments.
    (commit acf95d32a44fd8357c24e8a04ec53fc6900bfc58)
  - Added test to stop buffer overflow in idmapd
    (commit bcd0fcaf0966c546da5043be700587f73174ae25)


author: Steve Dickson <steved@redhat.com> 1.1.1-3
changelog:
  - Added in relatime mount option so mount.nfs stays
    compatible with the mount command in util-linux-ng (bz 274301)


author: Steve Dickson <steved@redhat.com> 1.1.1-2
changelog:
  - Added -S/--since to the nfsstat(1) manpage
  - The wording in the exportfs man page can be a bit confusing, implying
    that "exportfs -u :/foo" will unexport /foo from all hosts, which it won't
  - Removed nfsprog option since the kernel no longer supports it.
  - Removed mountprog option since the kernel no longer supports it.
  - Stop segfaults on amd64 during warnings messages.
  - Fix bug when both crossmnt and fsid are set.


author: Steve Dickson <steved@redhat.com> 1.1.1-1
changelog:
  - Updated to latest upstream release, nfs-utils-1.1.1
  - Added the removal of sm-notify.pid to nfslock init script.
  - Changed spec file to use condrestart instead of condstop
    when calling init scripts.
  - Fixed typo in rpc.mountd man page 
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Steve Dickson <steved@redhat.com> 1.1.0-5
changelog:
  - Changed the default paths in sm-notify to 
    /var/lib/nfs/statd (bz 258461)
  - Updated exportfs manpage (bz 262861)


author: Steve Dickson <steved@redhat.com> 1.1.0-4
changelog:
  - Make sure the open() system calling in exportfs uses
    mode bits when creating the etab file (bz 252440).


author: Steve Dickson <steved@redhat.com> 1.0.10-6
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240225)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Disabled the FSCache patch, for now...


author: Steve Dickson <steved@redhat.com> 1.0.12-5
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Updated mountd and showmount reverse lookup flags (bz 220772)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887) 
  - Added missing unlock_mtab() call in moutnd
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)


author: Steve Dickson <steved@redhat.com> 1.0.12-2
changelog:
  - Added condstop to all the initscripts (bz 196934)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.10-4
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 212471)


author: Steve Dickson <steved@redhat.com> 1.0.10-2
changelog:
  - Fixed -o remount (bz 210346)
  - fix memory leak in rpc.idmapd (bz 212547)
  - fix use after free bug in dirscancb (bz 212547)
  - Made no_subtree_check a default export option (bz 212218)


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-4
changelog:
  - New subpackage platform-python-setuptools without files from /usr/bin/*
  - python3-setuptools contains only files from /usr/bin/* and depends
    on platform-python-setuptools
  - Resolves: rhbz#1641973


author: Miro Hrončok <mhroncok@redhat.com> - 37.0.0-1
changelog:
  - Update to 37.0.0 (fixes #1474126)
  - Removed not needed pip3 patch (upstream included different version of fix)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-7
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-6
changelog:
  - Add the platform-python subpackage
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-5
changelog:
  - Add Patch 0 that fixes a test suite failure on Python 3 in absence of
    the Python 2 version of pip
  - Move docs to their proper place


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-4
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules.


author: Michal Cyprian <mcyprian@redhat.com> - 36.2.0-3
changelog:
  - Revert "Add --executable option to easy_install command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Kevin Fenzi <kevin@scrye.com> - 34.1.1-1
changelog:
  - Update to 34.1.1. Fixes bug #1412268
  - Fix License tag. Fixes bug #1412268
  - Add Requires for fomerly bundled projects: six, packaging appdirs


author: Kevin Fenzi <kevin@scrye.com> 17.1.1-3
changelog:
  - Drop no longer needed Requires/BuildRequires on python-backports-ssl_match_hostname
  - Fixes bug #1231325


author: Ralph Bean <rbean@redhat.com> - 6.0.2-2
changelog:
  - Modernized python2 macros.
  - Inlined locale environment variables in the %check section.
  - Remove bundled egg-info and .exes.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-8
changelog:
  - Remove the python-setuptools-devel Virtual Provides as per this Fedora 21
    Change: http://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-1
changelog:
  - Update to new upstream release with a few things removed from the API:
    Changelog: https://pypi.python.org/pypi/setuptools#id139


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.7-1
changelog:
  - Update to newer upstream release that has our patch to the unittests
  - Fix for http://bugs.python.org/issue17997#msg194950 which affects us since
    setuptools copies that code. Changed to use
    python-backports-ssl_match_hostname so that future issues can be fixed in
    that package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.6-1
changelog:
  - Update to newer upstream release.  Some minor incompatibilities listed but
    they should affect few, if any consumers.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.9.5-1
changelog:
  - Update to 0.9.5
    - package_index can handle hashes other than md5
    - Fix security vulnerability in SSL certificate validation
    - https://bugzilla.redhat.com/show_bug.cgi?id=963260


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.8-1
changelog:
  - Update to upstream 0.8  release.  Codebase now runs on anything from
    python-2.4 to python-3.3 without having to be translated by 2to3.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.13-5
changelog:
  - Upstream patch for compatibility problem with setuptools
  - Minor spec cleanups
  - Provide python-distribute for those who see an import distribute and need
    to get the proper package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.10-1
changelog:
  - Update the python3 portions but disable for now.
  - Update to 0.6.10
  - Remove %pre scriptlet as the file has a different name than the old
    package's directory


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.9-4
changelog:
  - Fix install to make /usr/bin/easy_install the py2 version
  - Don't need python3-tools since the library is now in the python3 package
  - Few other changes to cleanup style


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.7-1
changelog:
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.
  - Update to 0.6.7 bugfix.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.4-1
changelog:
  - First build from the distribute codebase -- distribute-0.6.4.
  - Remove svn patch as upstream has chosen to go with an easier change for now.


author: Bastien Nocera <bnocera@redhat.com> - 1.6-3
changelog:
  - Remove file-roller as handler for cbz/cbr files
    See https://bugzilla.gnome.org/show_bug.cgi?id=767244


author: Bastien Nocera <bnocera@redhat.com> 1.4-2
changelog:
  - Rename defaults.list to be GNOME specific and follow
    the latest changes in the shared mime info spec


author: Bastien Nocera <bnocera@redhat.com> 1.2-2
changelog:
  - Update totem mime-type list
  - Handle legacy Real Media files by default now that RealPlayer
    doesn't exist any more


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 1.0-4
  - defaults.list: s/mozilla-firefox/firefox/ (see #736558)
  - defaults.list: s/gpk-install-file/gpk-install-local-file/
  - defaults.list: application/x-catalog=gpk-install-catalog.desktop (#770019)


author: Matthias Clasen <mclasen@redhat.com> - 1.0-2
changelog:
  - Own/%ghost files generated by update-mime-database from
    freedesktop.org.xml (patch by Ville Skyttä, #716451))


author: Bastien Nocera <bnocera@redhat.com> 0.91-3
changelog:
  - Make shotwell the default for camera roll handling
  - Make shotwell-viewer the default image viewer (for the
    image types it handles)
  - Prefer Rhythmbox to Totem for music files


author: Bastien Nocera <bnocera@redhat.com> 0.90-4
changelog:
  - Update defaults.list and update for newer desktop names,
    with help from Edward Sheldrake (#659457)


author: Bastien Nocera <bnocera@redhat.com> 0.90-2
changelog:
  - Update list of defaults, adding new mime-types for Totem,
    as well as scheme handlers, and install defaults for
    Evolution and Firefox


author: Colin Walters <walters@verbum.org> - 0.71-4
changelog:
  - Fix previous change to be Requires(post); spotted by
    Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Colin Walters <walters@verbum.org> - 0.71-3
changelog:
  - Requires(pre) on glib, since update-mime-database uses it
  - Remove /dev/null redirection, we should see future errors
    And really, RPM is dumb here - this stuff needs to go to
    log files.


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: - Bastien Nocera <bnocera@redhat.com> - 0.23-5
changelog:
  - Make Totem the default for the mime-types it handles (#366101)
  - And make sure Rhythmbox is the second default only for the mime-types
    it handles


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-5
changelog:
  - Remove Totem as the default music/movie player, it will be the
    default for movies, as only it handles them, and Rhythmbox can
    handle missing plugins now


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-2
changelog:
  - Don't say that webcal files are handled by evolution-2.0, it can't
  - Disable vCard mapping as well, as evolution doesn't handle it
    (See http://bugzilla.gnome.org/show_bug.cgi?id=309073)


author: Dan Williams <dcbw@redhat.com> - 0.16-3
changelog:
  - Update OpenOffice.org desktop file names. #155353
  - WordPerfect default now OOo Writer, since Abiword is in Extras


author: David Zeuthen <davidz@redhat.com> - 0.16-2
changelog:
  - Make Evince the default for application/pdf and application/postscript
  - Remove remaining references to gnome-ggv (application/x-gzpostscript and
    image/x-eps) as this is no longer in the distribution


author: Mike FABIAN <mfabian@redhat.com> - 60.3-2
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808238


author: Mike FABIAN <mfabian@redhat.com> - 60.3-1
changelog:
  - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677093


author: Parag Nemade <pnemade AT redhat DOT com> - 60.2-7
changelog:
  - Resolves:rh#1602551 - Fix specfile by adding compile options
  - also add BuildRequires for gcc and gcc-c++
  - Correct the upstream URL


author: Mike FABIAN <mfabian@redhat.com> - 60.2-4
changelog:
  - Add negative-daylight-savings.patch from upstream.
    (see http://bugs.icu-project.org/trac/ticket/13566 and
    http://bugs.icu-project.org/trac/changeset/40954)


author: Raphael Groner <projects.rg@smart.ms> - 56.1-5
changelog:
  - even more verbosity and debug output
  - add path to extend ICU's internal cache of codes
  - use license macro
  - provide samples in devel subpackage
  - modernize generally


author: Eike Rathke <erack@redhat.com> - 54.1-3
changelog:
  - Resolves: rhbz#1190131 CVE-2014-7923 CVE-2014-7926 CVE-2014-9654
  - Resolves: rhbz#1184811 CVE-2014-6585 CVE-2014-6591


author: Eike Rathke <erack@redhat.com> - 52.1-1
changelog:
  - upgrade to upstream ICU 52.1
  - Resolves: rhbz#1049265 icu-52.1 is available
  - Resolves: rhbz#1050063 Trivial change to icu-config to support ppc64le
  - drop icu-51-layout-fix-10107.tgz source
  - drop integrated icu.10318.CVE-2013-2924_changeset_34076.patch
  - drop integrated icu.10143.memory.leak.crash.patch


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Eike Rathke <erack@redhat.com> - 50.1.2-1
changelog:
  - Update to 50.1.2
  - Resolves: rhbz#856594 to-do add --disable-renaming on next soname bump
  - removed upstream applied icu.9283.regexcmp.crash.patch


author: Eike Rathke <erack@redhat.com> - 4.8.1-3
changelog:
  - Resolves: rhbz#766542 CVE-2011-4599 Stack-based buffer overflow
  - add icu.8984.CVE-2011-4599.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.6-1
changelog:
  - latest version
  - upgrade includes a .pc now of its own, drop ours
  - drop integrated icu.6995.kannada.patch
  - drop integrated icu.7971.buildfix.patch
  - drop integrated icu.7972.buildfix.patch
  - drop integrated icu.7932.doublecompare.patch
  - drop integrated icu.8011.buildfix.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.4.1-2
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Caolán McNamara <caolanm@redhat.com> - 4.4-1
changelog:
  - latest version
  - drop integrated icu.6969.pkgdata.patch
  - drop integrated icu.icu7039.badextract.patch
  - drop integrated icu.XXXX.buildfix.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.2-0.1.d03
changelog:
  - 4.2 release candidate
  - drop resolved icu.icu6008.arm.padding.patch
  - drop resolved icu.icu6439.bare.elif.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.0-2
changelog:
  - Resolves: rhbz#459698 drop Malayalam patches. Note test with Rachana/Meera
    instead of Lohit Malayalam before filing bugs against icu wrt.
    Malayalam rendering


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-5
changelog:
  - Resolves: rhbz#431401 split syllables on 1st 0d4d of a 0d4d + 
    (>= 0d15 && <= 0d39) + 0d4d + 0d30 sequence


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-3
changelog:
  - CVE-2007-4770 CVE-2007-4771 add icu.regexp.patch
  - Resolves: rhbz#423211 fix malalayam stuff in light of syllable
    changes


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-2
changelog:
  - remove icu.icu5365.dependantvowels.patch and cleanup
    icu.icu5506.multiplevowels.patch as they patch and unpatch 
    eachother (thanks George Rhoten for pointing out that madness)


author: Caolán McNamara <caolanm@redhat.com> - 3.8-0.1.d01
changelog:
  - 3.8 release candidate
  - drop integrated icu.icu5433.oriya.patch
  - drop integrated icu.icu5488.assamese.patch
  - drop integrated icu.icu5500.devicetablecrash.patch
  - drop integrated icu.icu5501.sinhala.biggerexpand.patch
  - drop integrated icu.icu5594.gujarati.patch
  - drop integrated icu.icu5465.telegu.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.6-20
changelog:
  - Resolves: rhbz#243984 change the icu group as it is libicu 
    which is "System Environment/Libraries" not icu


author: Caolán McNamara <caolanm@redhat.com> - 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Caolán McNamara <caolanm@redhat.com> - 3.6-2
changelog:
  - fix rh#205252#/icu#5365 (gnome#121882#/#icu#4026#) to make icu 
    like pango for multiple dependant vowels


author: Caolán McNamara <caolanm@redhat.com> - 3.6-0.1.d01
changelog:
  - rh#200728# update to prelease 3.6d01 to pick up on sinhala fixes
  - drop integrated rh190879.patch
  - drop integrated icu-3.4-sinhala1.patch


author: Ville Skyttä <ville.skytta at iki.fi> - 3.2-3
changelog:
  - Apply upstream case mapping mutex lock removal patch.
  - Build with gcc 3.2 as a temporary workaround for #152495.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:3.0-0.fdr.1
changelog:
  - Update to 3.0, datadirs patch no longer needed.
  - Package data in shared libs, drop -locales subpackage.
  - Rename -docs subpackage to libicu-doc, and generate graphs with graphviz.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.6.1-0.fdr.3
changelog:
  - Partial fix for bad datadirs returned by icu-config (works as long as
    data packaging mode is not "common" or "dll").


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - enable hardened build
  - migrate from consolehelper to policykit (#502750)
  - specfile cleanup
  - introduce grace period (#1009051)
  - query all ipv6 nameservers (#966174)
  - add missing documentation (#1015552)


author: Adam Tkac <atkac redhat com> - 2:0.81-1
changelog:
  - update to 0.81
  - mtr-now-waits-for-last-response.patch is no longer needed
  - fixed wide report output (#703549)


author: Jan Görig <jgorig redhat com> 2:0.80-1
changelog:
  - update to 0.80
  - mtr now waits for last sent packet (#611739)
  - fixed crashes in XML format
  - XML format fixes


author: Adam Tkac <atkac redhat com> 2:0.75-6
changelog:
  - install mtr as SUID binary (#518828)
  - use fprintf instead of perror when getaddrinfo fails (#516603)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.69-4
changelog:
  - Made the output, especially for reports much more readable (#147865)
  - Fixed --address option (#162029)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.54-9
changelog:
  - Add CVE patch for security reasons (#129386)
  - Add patch to fix broken --address option (#132628)
  - Add patch to fix broken reverse DNS lookups for ipv6 (#134532)


author: Phil Knirsch <pknirsch@redhat.com> 0.54-7
changelog:
  - Fixed broken behaviour with resolver SERVFAIL results (#125392)
  - Added ncurses-devel libtermcap-devel as BuildPreReq (#124553)
  - Added gtk+ Requires for mtr-gtk package (#121705)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added IPv6 patch from ftp://ftp.kame.net/pub/kame/misc/mtr-054-*
  - Enabled IPv6 in mtr.
  - Included fix from Robert Scheck to make GTK optional in configure.


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-9
changelog:
  - Remove absolute paths from the PAM configuration, ensuring that the modules
    for the right arch get used on multilib systems.
  - Remove Icon:.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.41-1]
  - Added afr's patch to allow disabeling of gtk without Robn's hack.
  - Made report mode report the newly added extra resolution.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  - renamed mtr-gtk to xmtr
  - added symlink from /usr/bin/mtr to /usr/sbin/mtr

    [mtr-0.40-1]
  - Fixed some problems with HPUX and SunOS.
  - Included Olav Kvittem's patch to do packetsize option.
  - Made the timekeeping in micro seconds.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.37-1]
  - v0.37
  - Added Bill Bogstad's "show the local host & time" patch.
  - Added R. Sparks' show-last-ping patch, submitted by Philip Kizer.

  - v0.36
  - Added Craigs change-the-interval-on-the-fly patch.
  - Added Moritz Barsnick's "do something sensible if host not found"
    patch.
  - Some cleanup of both Craigs and Moritz' patches.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.35-1]
  - v0.35
  - Added Craig Milo Rogers pause/resume for GTK patch.
  - Added Craig Milo Rogers cleanup of "reset". (restart at the beginning)
  - Net_open used to send a first packet. After that the display-driver
    got a chance to distort the timing by taking its time to initialize.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.34-1]
  - v0.34
  - Added Matt's nifty "use the icmp unreachables to do the timing" patch.
  - Added Steve Kann's pause/resume patch.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.33-1]
  - v0.33
  - Fixed the Linux glibc resolver problems.
  - Fixed the off-by-one problem with -c option.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.31-1]
  - v0.31
  - Fixed a few documentation issues. -- Matt
  - Changed the autoconf stuff to find the resolver library on
    Solaris. -- REW
  - Cleaned up the autoconf.in file a bit. -- Matt.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.30-1]
  - Build gtk version against gtk+-1.2.0
  - v0.30
  - Fixed a typo in the changelog (NEWS) entry for 0.27. :-)
  - added use of "MTR_OPTIONS" environment variable for defaults.


author: Al Stone <ahs3@redhat.com> - 20180629-3
changelog:
  - Add in man page for acpiexamples.  So that the man page makes some sense,
    also copy the source code used for acpiexamples to the doc directory for
    this package.  Closes BZ#1611145.
  - Add in the converterSample.asl file from the misc tests.  Clean up the
    run-misc-tests.sh script, too, to make it more robust by simplifying
    the work done.


author: Al Stone <ahs3@redhat.com> - 20180629-1
changelog:
  - Update to 20180629 source tree, including patch refeshes. Closes BZ#1584923
  - Includes upstream fix for #1592971 (iasl segfault).


author: Al Stone <ahs3@redhat.com> - 20180508-2
changelog:
  - %pre and %post scriptlets fail -- stupid thinko where I inadvertently
    tested for alternatives not existing, vs existing


author: Al Stone <ahs3@redhat.com> - 20180508-1
changelog:
  - Update to 20180508 source tree, including patch refeshes. Closes BZ#1544048
  - acpidump/acpixtract no longer have alternatives, so remove the scriptlets
    that maintain them and just install them directly; we do leave the pre-
    and post- scriptlets to remove the alternatives for now.  Closes BZ#1576970
  - Typo: OPT_LDFLAGS, not OPT_LDLAGS in the build section.  Closes BZ#1560542


author: Al Stone <ahs3@redhat.com> - 20180209-1
changelog:
  - Update to 20180209 source tree, including patch refeshes. Closes BZ#1544048
  - CVE-2017-13693: operand cache leak in dsutils.c -- applied github patch to
    fix the leak.  Resolves BZ#1485346.
  - CVE-2017-13694: acpi parse and parseext cache leaks in psobjects.c -- applied
    github patch to fix the leaks.  Resolves BZ#1485348.
  - CVE-2017-13695: operand cache leak in nseval.c -- applied github patch to fix
    the leak.  Resolves BZ#1485349.
  - Security fixes for the CVEs above applied.  Closes BZ#1485355.  NOTE: these
    patches fix acpica-tools ONLY; the kernel needs to be patch separately.
  - Added gcc to BuildRequires
  - It turns out the %build section was incorrectly passing in OPT_CFLAGS; it
    made the wrong assumptions about what generate/unix/Makefile.config did with
    that value.  Added to the spec file what should happen so that a full and
    complete set of C flags get passed in, not just the small subset that was.
  - Clean up compiler warnings for truncated strings
  - Clean up compiler warnings for pointer casting on 32-bit architectures


author: Al Stone <ahs3@redhat.com> - 20180105-1
changelog:
  - Update to 20180105 source tree, including patch refeshes. Closes BZ#1526651
  - Cleaned up changelog. Closes BZ#1525938
  - Pulled in a mips32/BE patch from Debian, for completeness sake


author: Al Stone <ahs3@redhat.com> - 20171110-1
changelog:
  - Update to 20171110 source tree, including patch refeshes
  - Add patch for mips64el build, should it ever be needed; it also cleans
    up all 64-bit arches, so nice to have regardless
  - Add new patch for a TPM2 big-endian issue.


author: Al Stone <ahs3@redhat.com> - 20170929-1
changelog:
  - Update to 20170929 source tree, including patch refeshes
  - Removed aslts-acpibin.patch to fix PATH problem in ASLTS; in upstream now


author: Al Stone <ahs3@redhat.com> - 20170831-1
changelog:
  - Update to 20170831 source tree, including patch refeshes
  - Add aslts-acpibin.patch to fix PATH problem in ASLTS that prevents
    some tests from being run


author: Al Stone <ahs3@redhat.com> - 20170728-3
changelog:
  - Completed the big-endian fixes (I think)
  - Fix ppc64le.patch that inadvertently broke s390x
  - Minor patch refresh
  - Re-enable full %check for s390x


author: Al Stone <ahs3@redhat.com> - 20170728-2
changelog:
  - Start some long delayed clean-up
  - Temporarily disable one test section until all the big-endian issues
    can be resolved; it provides what may be a false negative result
  - Consolidate the big-endian patches


author: Al Stone <ahs3@redhat.com> - 20170303-2
changelog:
  - Correct update-big-endian.patch; it introduced a bug due to logic being
    replaced in the wrong order.


author: Al Stone <ahs3@redhat.com> - 20170119-1
changelog:
  - Update to latest upstream.  Closes BZ#1381017.
  - Refresh patches.
  - Add patch to fix ASLTS.
  - Add patch to fix ppc64le build.
  - Add patch to fix arm7hl build.


author: Al Stone <ahs3@redhat.com> - 20160930-3
changelog:
  - Restructure the repairs for big-endian support to simplify patching -- it is
    all combined into update-big-endian.patch now.  (NB: this version may still
    have issues on big-endian)


author: Al Stone <ahs3@redhat.com> - 20160930-2
changelog:
  - Major repairs to compiler and disassembler code to make it endian-neutral
    again (added patches big-endian-part1 and big-endian-part2).


author: Al Stone <ahs3@redhat.com> - 20160930-2
changelog:
  - Update to latest upstream.  Closes BZ#1381017.
  - Refresh patches.
  - Major repairs to disassembler code to make it endian-neutral again.


author: Al Stone <ahs3@redhat.com> - 20160831-1
changelog:
  - Update to latest upstream.  Closes BZ#1372107.
  - Refresh patches.
  - Closes BZ#1365193 -- s390x FTBFS due to int/ptr size mismatch: made sure
    the tools built with 64-bit integers for s390x


author: Al Stone <ahs3@redhat.com> - 20151218-1
changelog:
  - Update to latest upstream.  Closes BZ#1292987.
  - Refresh patches, and remove one no longer needed (acpinames).


author: Al Stone <ahs3@redhat.com> - 20151124-1
changelog:
  - Update to latest upstream.  Closes BZ#1267772.
  - Refresh patches.
  - Add back in a patch to rename source/tools/acpinames/AcpiNames.h to remove
    the camel case; this is a leftover in the conversion to Un*x files, and
    crept back in with this version.


author: Al Stone <ahs3@redhat.com> - 20150930-1
changelog:
  - Update to latest upstream.  Closes BZ#1267772.
  - Refresh patches, and remove one no longer needed.


author: Al Stone <ahs3@redhat.com> - 20150818-2
changelog:
  - Remove extraneous patch files for AAPITS.
  - Correct an assumption that all names are stored in little-endian format.
    Fix is in asllookup-ppc64.patch.  Closes BZ#1251972.


author: Al Stone <ahs3@redhat.com> - 20150818-1
changelog:
  - Update to latest upstream.  Closes BZ#1256134.
  - Refresh patches
  - This version deprecates aapits (ACPICA API Test Suite) for now; this is
    in accordance with upstream wishes, but in this maintainer's view, may
    not be the correct long term solution as there is no other API specific
    test suite.
  - Add a patch to rename source/tools/acpinames/AcpiNames.h to remove the
    camel case; this is a leftover in the conversion to Un*x files.


author: Al Stone <ahs3@redhat.com> - 20150717-1
changelog:
  - Update to latest upstream.  Closes BZ#1244449.
  - Refresh patches
  - Bodge back together the aapits makefile after source file relocations in
    the primary ACPICA component files
  - Update the misc test results to incorporate iasl improvements


author: Al Stone <ahs3@redhat.com> - 20150515-2
changelog:
  - Replace dev-mem patch with nodevmem; this is a much more robust version of
    the functionality needed, and set up properly for arm64 -- the patch makes
    it so that acpidump does not use /dev/mem at all on arm64 since it might
    not contain the right data.


author: Al Stone <ahs3@redhat.com> - 20150515-1
changelog:
  - Update to latest upstream.  Closes BZ#122166
  - Refresh patches
  - Add patch from upstream for incorrect UUIDs for NFIT
  - Add patch from Linaro to remove use of /dev/mem (use /sys instead)
  - Add patch from upstream to correct ARM GIC entries in MADT
  - Add patch to fix segfaults reported.  Closes BZ#1219341.


author: Al Stone <ahs3@redhat.com> - 20141107-1
changelog:
  - Update to latest upstream.  Closes BZ#1147131.
  - Refresh patches
  - Patch to ensure ASLTS always reports when an error occurs, instead
    of glossing over it has been incorporated upstream, so remove patch.


author: Al Stone <ahs3@redhat.com> - 20140926-1
changelog:
  - Update to latest upstream.  Closes BZ#1147131.
  - Refresh patches
  - Add patch to ensure ASLTS always reports when an error occurs, instead
    of glossing over it.
  - Add use of %__global_ldflags.  Closes BZ#1126134.


author: Al Stone <ahs3@redhat.com> - 20140724-1
changelog:
  - Update to latest upstream.  Closes BZ#1114275.
  - This update adds support for the 5.1 version of the ACPI specification
  - Refresh patches so everything applies properly.


author: Al Stone <ahs3@redhat.com> - 20140424-2
changelog:
  - Add ppc64le as a 64-bit arch in run-misc-tests.sh.  Closes BZ#1098614.
  - Re-enable big-endian support in iasl.


author: Al Stone <ahs3@redhat.com> - 20140325-1
changelog:
  - Update to latest upstream.  Closes BZ#1080791.
  - Incorporated patch to fix broken symlinks.  Closes BZ#1074256.
  - Add patch to fix missing .o files in aapits tests.


author: Al Stone <ahs3@redhat.com> - 20140214-1
changelog:
  - Update to latest upstream.  Closes BZ#1053396.
  - Remove temporary patch so that AAPITS will build and run.
  - Add patch to print asllookup.c warning properly on big endian;
    Closes BZ#1069178.


author: Al Stone <ahs3@redhat.com> - 20140114-1
changelog:
  - Update to latest upstream.  Closes BZ#1053396.
  - Remove temporary patch to add Makefile missing from upstream tarball.
  - Add temporary patch so that AAPITS will build and run.


author: Al Stone <ahs3@redhat.com> - 20131218-1
changelog:
  - Update to latest upstream.  Closes BZ#1044951.
  - Add temporary patch to add Makefile missing from upstream tarball.


author: Al Stone <ahs3@redhat.com> - 20131115-1
changelog:
  - Update to latest upstream.  Closes BZ#1031255.
  - Add a little code to workaround build problems that can occur (the tests
    will fail) when a build starts before midnight, but ends after midnight
  - Remove patch to include Makefile.config that was missing from tarball.


author: Al Stone <ahs3@redhat.com> - 20130927-1
changelog:
  - Update to latest upstream.  Closes BZ#1013090.
  - Add temporary patch to include Makefile.config being missing from tarball.


author: Dean Nelson <dnelson@redhat.com> - 20130823-4
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64
    when run on a s390x system.


author: Al Stone <ahs3@redhat.com> - 20130823-2
changelog:
  - Add in a copy of the GPLv2 text in order to comply with the requirement
    to always redistribute the terms of the license.


author: Al Stone <ahs3@redhat.com> - 20130725-2
changelog:
  - Fix several rpmlint items (listed below)
  - Add versions to explicit provides for acpixtract, acpidump
  - Not all setup steps used -q
  - Setup executable test script (run-misc-tests.sh) differently
  - Removed unneeded commented out line with macros in it
  - Removed mixed use of spaces and tabs (all spaces now)
  - Corrected source URLs (upstream moved)


author: Al Stone <ahs3@redhat.com> - 20130626-1
changelog:
  - Update to latest upstream source.
  - Move acpidump to acpidump-acpica so it be an alternative properly
  - Add basic man page for acpidump
  - Enable use of AAPITS tests during the check step


author: Al Stone <ahs3@redhat.com> - 20130517-2
changelog:
  - Correct an oversight: we provide an acpidump in conflict with the
    version in pmtools (which appears to be dead upstream) but had not
    made it an alternative before


author: Al Stone <ahs3@redhat.com> - 20130517-1
changelog:
  - Update to latest upstream source.
  - Remove acpica-tools-config.patch -- now in upstream
  - Remove iasl-signed-char.patch -- now in upstream
  - Updated debian-big_endian.patch
  - Updated debian-unaligned.patch


author: Al Stone <ahs3@redhat.com> - 20130214-2
changelog:
  - Incorporate use of optflags macro in the build.
  - Remove extraneous rm -rf of buildroot.
  - Remove extraneous use of defattr in the files section.
  - Incorporate use of parallel make.
  - Remove extraneous use of the clean section.
  - Use simpler globbing in the files section.
  - Use simpler globbing in the install section.
  - Remove obsolete git notes from README.Fedora.
  - Remove ExcludeArch restrictions.


author: Al Stone <ahs3@redhat.com> - 20130214-1
changelog:
  - New upstream.
  - Remove most of the config file patch; still need to remove -m{32,64}.
  - Clarify the licensing; this source is dual-licensed and is being released
    under the GPLv2 as allowed by the original Intel license.
  - Redo the misc tests so they compare results properly.


author: Al Stone <ahs3@redhat.com> - 20130117-6
changelog:
  - Added a zero-fill to a date used in comparing testing results so that the
    comparison would be correct on days numbered < 10.


author: Al Stone <ahs3@redhat.com> - 20130117-5
changelog:
  - Simplify versioning scheme and revert to the original scheme in use by
    iasl, which is use the latest official tarball date (2013017) as the
    version and 1%{?dist} as the release, to be incremented for packaging
    and bug fixes as needed.


author: Al Stone <ahs3@redhat.com> - 20130117-4
changelog:
  - Do a little reset: go back to using just the original upstream tarball
    instead of the latest git; the snapshot approach was more complicated
    than needed.
  - Upstream tarballs split commands from test suites, so had to add the
    test suite back in as another Source: file.
  - Change versioning scheme to include the APCI specification level (5.0),
    the latest official tarball date (2013017) and a revision level  (the
    .1 at the end) for packaging and bug fixes as needed.
  - Changed the License field to reflect the source tarball change; the release
    tarball is dual-licensed, Intel ACPI or GPLv2.
  - Updated patches to apply cleanly as needed.
  - Corrected Obsoletes and Provides version numbers.


author: Al Stone <ahs3@redhat.com> - 20130117-2
changelog:
  - Verify ExcludeArch restrictions -- the architectures excluded can have
    no use for these tools.  Hardware support for ACPI is simply not
    implemented for them.
  - Corrected versioning to note this source came from a git pull.
  - Add License file as upstream has not yet provided one (and has not for
    many years).
  - Insert properly versioned Provides and Obsoletes for iasl.
  - Corrected files to use man.1* (vs man.1.gz) to allow flexibility in the
    compression being used.


author: Al Stone <ahs3@redhat.com> - 20130117-1
changelog:
  - Clone from the current iasl package, with the intent of replacing it
  - Update source to latest upstream
  - NB: ACPICA documentation would normally be included in a source tarball.
    But, since it is not clearly redistributable, it is not included in the
    source RPM for this package.
  - Build all ACPICA tools, not just iasl (and hence the package replacement)
  - Add in brief man pages
  - Set up acpixtract from this package as an alternative to the same command
    in the pmtools package
  - Run the check step once built


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-10
changelog:
  - Also add Provides for the old name without %_isa
  - Use %python_provide for the python3 subpackage and drop manual Provide which
    conflicts with %python_provide in the python2 subpackage.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-9
changelog:
  - Python 2 binary package renamed to python2-dbus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: John (J5) Palmieri <johnp@redhat.com> - 0.80.1-1
changelog:
  - upgrade to 0.80.1
  - remove dependency on Pyrex and libxml2
  - some API breakage,
    please see http://dbus.freedesktop.org/doc/dbus-python/NEWS.html
    for notes on changes


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-45
changelog:
  - origin/rhel-8.4.0) Revert "Revert "Append both nofail and x-systemd.before to kdump mount target""
  - kdump.conf: add ipv6 example for nfs and ssh dump
  - fix kdump failure of saving vmcore with the scp + ipv6 method


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-44
changelog:
  - module-setup.sh: don't polute the namespace unnecessarily
  - module-setup.sh: don't source $dracutfunctions
  - logger: source the logger file individually
  - dracut-module-setup.sh: enable ForwardToConsole=yes in fadump mode


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-43
changelog:
  - Always include watchdog-modules
  - mkdumprd: Ensure kdumpbase is added
  - Move watchdog detect and install code to module-setup.sh
  - Add a helper to omit non-mandatory dracut module
  - Move some dracut module dependencies checks to module-setup.sh
  - Set watchdog's pretimeout to zero in kdump kernel
  - kdump-lib.sh: Use a more generic helper to detect omitted dracut module
  - Fix the watchdog drivers detection code
  - Add a helper for detecting watchdog drivers
  - Remove a redundant nfs check
  - kdumpctl: split the driver detection from fs dection function
  - kdump.service: use ConditionKernelCommandLine=crashkernel
  - Revert "Append both nofail and x-systemd.before to kdump mount target"
  - Revert "Don's try to restart dracut-initqueue if it's already failed"
  - Fix dump_fs mount point detection and fallback mount
  - kdump.conf: Update doc about core_collector for ssh target
  - Save the final failure information to log file if saving vmcore failed
  - Doc: Improve the kdump sysconfig document
  - kdumpctl: fix a variable expansion in check_fence_kdump_config()
  - Fedora 33 rhpkg build bug


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-38
changelog:
  - Don's try to restart dracut-initqueue if it's already failed
  - fadump-howto: update about 'nocma' and 'off' options for 'fadump=' parameter
  - dracut-module-setup.sh: use auto6 for ipv6
  - module-setup.sh: enable vlan on team interface
  - Fix rootfs detection in dump_fs
  - Remove RHEL-only patch: kexec-tools-2.0.18-makedumpfile-arm64-Add-support-for-ARMv8.2-LVA-52-bi.patch
  - Rebase to makedumpfile-1.6.8 (step1)


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-37
changelog:
  - Doc: improve the usage documentation of the logger
  - Update the kdump sysconfig
  - Capitalize the configuration name of log level
  - Add the rd.kdumploglvl option to control log level in the second kernel
  - Appropriately converts logger numeric level to syslog log level
  - Remove unused log levels for kdump logger
  - Add sanity checks for the log levels
  - Add code comments to help better understanding
  - Doc: add a documentation for the usage of logger
  - Improve debugging in the kdump kernel
  - kdumpctl: add the '-d' option to enable the kexec loading debugging messages
  - kdump.sysconfig: add the kdump logger configurations
  - enable the logger for kdump
  - introduce the kdump logger from the dracut


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-36
changelog:
  - arm64: Enable 'kexec_file_load' by default
  - Fix, Add a kernel install hook to clean up kdump initramfs


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-35
changelog:
  - module-setup.sh: Instead of drop journalctl log, just don't read kmsg
  - s390x: enable the kexec file load by default
  - increase makdumpfile default message level to 7
  - Rework check_config and warn on any duplicated option
  - kdumpctl: Error out if path is set more than once.
  - Don't drop journalctl content if failure action is "shell"
  - dracut-module-install: Move systemd conf install code to a function
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-31
changelog:
  - ppc64/kdump: use kexec_file_load when secureboot is enabled
  - kdump_pre: make notes more precise
  - dracut-kdump.sh: exit shell when machine reboot
  - kdump.conf: fix a grammar issue
  - kdumpctl: detect modification of scripts by its directory's timestamp
  - module-setup.sh: suppress false alarm
  - kexec-tools.spec: make the existence of pre.d and post.d mandatory


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-30
changelog:
  - x86_64: enable the kexec file load by default
  - Revert "kdump-lib: switch to the kexec_file_load() syscall on x86_64 by default"


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-28
changelog:
  - mkdumprd: Fix nfs detection in to_mount
  - Always wrap up call to dracut get_persistent_dev function
  - man: improve description about /etc/kdump/{pre.d,post.d}interface


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-26
changelog:
  - Fix kdump failure when mount target specified by dracut_args
  - mkdumprd: Fix dracut error on multiple extra_modules


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-25
changelog:
  - kdump.conf: Specify /etc/kdump/{pre.d,post.d}interface
  - dracut-kdump.sh: Execute the binary and script filesin /etc/kdump/{pre.d,post.d}
  - kdumpctl: Check the update of the binary and script files in /etc/kdump/{pre.d,post.d}
  - dracut-module-setup.sh: Install files under /etc/kdump/{pre.d,post.d} into kdump initramfs


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-21
changelog:
  - Don't inherit swiotlb parameter form 1st kernel by default
  - Add a new option 'rd.znet_ifname' in order to use it in udev rules
  - kdump.sysconfig: Remove the option 'log_buf_len' from kdump command line
  - kdump-error-handler.service: Remove ExecStopPost
  - module-setup.sh: Add "rd.neednet" parameter if network is needed


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-20
changelog:
  - Update docs for the new noauto dump target support
  - kexec-kdump-howto.txt: Add some format to the document
  - mkdumprd: generate usable kdump initramfs even target is not mounted
  - Use get_mount_info to replace findmnt calls
  - kdump-lib.sh: add fstab failback helper for getting mount info
  - Allow calling mkdumprd from kdumpctl even if targat not mounted
  - Add a is_mounted helper
  - Introduce get_kdump_mntpoint_from_target and fix duplicated /
  - Doc: Improves the early-kdump-howto.txt document in several points
  - Doc: Add --force option to step 2 in early-kdump-howto.txt
  - Doc: Fix typo in early-kdump-howto.txt
  - Remove adjust_bind_mount_path call
  - No longer treat atomic/silverblue specially
  - mkdumprd: Simplify handling of user specified target
  - mkdumprd: Use get_save_path instead of parsing config
  - Remove is_dump_target_configured
  - Always use get_save_path to get the 'path' option
  - kdump-lib: Don't abuse echo, and clean up
  - mkdumprd: Fix dracut args parsing
  - mkdumprd: simplify dracut args parsing


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-19
changelog:
  - dracut-module-setup.sh: improve get_alias()
  - fadump: update fadump-howto.txt with some troubleshooting help
  - Append both nofail and x-systemd.before to kdump mount target
  - Partially Revert "Don't mount the dump target unless needed"
  - Don't unmount the dump target just after saving vmcore


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-10
changelog:
  - arm64: kdump: deal with a lot of resource entries in /proc/iomem
  - arm64: kexec: allocate memory space avoiding reserved regions
  - kexec: add variant helper functions for handling memory regions


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-6
changelog:
  -rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
  - spec: move binaries from /sbin to /usr/sbin
  - As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
  - kdumpctl: make reload fail proof


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-5
changelog:
  - Don't execute final_action if failure_action terminates the system
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed
  - kdumpctl: echo msg when waiting for connection
  - kdumpctl: distinguish the failed reason of ssh
  - kdumpctl: wait a while for network ready if dump target is ssh
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - dracut-module-setup: get localhost alias by manual


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.4
changelog:
  - dracut-module-setup.sh: Don't use squash module for fadump
  - Don't mount the dump target unless needed
  - dracut-module-setup: fix bond ifcfg processing
  - Doc: amend the man page of kdump.conf


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.3
changelog:
  - Limit the size of vmcore-dmesg.txt to 2G
  - makedumpfile: x86_64: Fix incorrect exclusion by -e option with KASLR
  - mkdumprd: ensure ssh path exists before check size


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-3
changelog:
  - earlykdump: Add a note of final_action option to avoid crash loop
  - Add final_action option to kdump.conf
  - Add failure_action as alias of default and make default obsolete
  - earlykdump: warn when installed kernel version differs from dracut target
  - earlykdump: add more sanity check when generating initramfs
  - fadump: use the original initrd to rebuild fadump initrdfrom


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-2
changelog:
  - kdumpctl: Detect block device driver change for initramfs rebuild
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - mkdumprd: allow spaces after 'path' config phrase with network dump setting
  - kexec.rules: create dedicated udev rules for ppc64
  - Revert "rhel-only/kexec.rules: create dedicated udev rules for ppc64"
  - rh-only makedumpfile/arm64: Add support for ARMv8.2-LVA (52-bit user-space VA support)


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-1
changelog:
  - kexec-tools: rebasing to 2.0.19
  - makedumpfile: upgrade to 1.6.5
  - kexec-tools: x86: Introduce a new option --reuse-video-type
  - makedumpfile: exclude pages that are logically offline
  - earlykdump: Fix failure when earlykdump is included by dracut
  - Update man page for new kdumpctl command: reload / rebuild
  - kdumpctl: add rebuild support
  - rhel-only/kexec.rules: create dedicated udev rules for ppc64


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-27
changelog:
  - Revert "kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled"
  - mkdumprd: refine regex on dropping mount options


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-26
changelog:
  - earlykdump: fix kexec fails to load the early kdump kernel
  - makedumpfile/x86_64: fix an unnecessary message with --mem-usage option


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-24
changelog:
  - makedumpfile/arm64: Fix 'info->page_offset' calculation for both KASLR and non-KASLR cases
  - makedumpfile: Prepare paddr_to_vaddr() for arch-specific p2v conversion


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-21
changelog:
  - makedumpfile: Support newer kernels
  - kdump-lib-initramfs.sh: using -force option when poweroff
  - kexec-tools/vmcore-dmesg: fix infinite loop if log buffer wraps around
  - makedumpfile: sadump: fix failure of reading 640 KB backup region if at over 4GB location
  - Make udev reload rules quiet during bootup


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-20
changelog:
  - makedumpfile: Fix failure of detection of SPARSEMEM EXTREME in case of -x VMLINUX
  - makedumpfile: ppc64: increase MAX_PHYSMEM_BITS to 128TB
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-19
changelog:
  - Add aarch64 specific kdump.sysconfig and use 'nr_cpus' instead of 'maxcpus'
  - Add missing usage info
  - Throttle kdump reload request triggered by udev event
  - Rewrite kdump's udev rules
  - kdumpctl: Add reload support


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-17
changelog:
  - Update help text to indicate --mem-usage is supported on archs other than x86_64
  - Fix 'makedumpfile --split' error ("Can't read the buffer of struct page") on x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-16
changelog:
  - dracut-module-setup: Enable dracut squash module
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v


author: Kairui Song <kasong@redhat.com> - 2.0.17-14
changelog:
  - Add support to supply 'kaslr-seed' to secondary kernel
  - kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch


author: Dave Young <dyoung@redhat.com> - 2.0.16-6
changelog:
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel
  - kdumpctl: Check the modification time of core_collector
  - dracut-module-setup.sh: pass correct ip= param for ipv6


author: Dave Young <dyoung@redhat.com> - 2.0.16-2
changelog:
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Dave Young <dyoung@redhat.com> - 2.0.15-13
changelog:
  - dracut-module-setup.sh: eliminate redundant kdump_get_mac_addr call
  - mkdumprd: use --quiet dracut argument to speedup initramfs build
  - mkdumprd: fix patterns to modify mount options
  - fadump: rebuild default initrd with dump capture capability
  - module-setup: remove software iscsi cmdline generated by dracut
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - Revert "kdumpctl: use generated rd.lvm.lv=X"
  - Revert "mkdumprd: omit crypt when there is no crypt kdump target"
  - Revert "mkdumprd: omit dracut modules in case of no dm target"
  - Revert "mkdumprd: omit dracut modules in case of network dumping"
  - update bogus date in rpm spec


author: Dave Young <dyoung@redhat.com> - 2.0.15-10
changelog:
  - Improve 'cpu add' udev rules
  - module-setup: suppress the early iscsi error messages
  - mkdumprd: use 300s as the default systemd unit timeout for kdump mount


author: Dave Young <dyoung@redhat.com> - 2.0.15-3
changelog:
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: omit dracut modules in case of network dumping
  - mkdumprd: omit dracut modules in case of no dm target
  - mkdumprd: omit crypt when there is no crypt kdump target
  - kdumpctl: use generated rd.lvm.lv=X
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: fix infinite loop caused by running under bash


author: Dave Young <dyoung@redhat.com> - 2.0.14-13
changelog:
  - kexec-tools.spec: Fix whitespace errors
  - dracut-module-setup: Fix test for inclusion of DRM modules
  - kdump.conf.5: clarify the fence_kdump_nodes option


author: Dave Young <dyoung@redhat.com> - 2.0.14-11
changelog:
  - kdumpctl: change the shebang header to use /bin/bash
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf" (rhbz1449801)


author: Dave Young <dyoung@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - kdumpctl: bail out earlier in case of no reserved memory


author: Dave Young <dyoung@redhat.com> - 2.0.14-9
changelog:
  - kdump: Introduce 'force_no_rebuild' option
  - kdump-lib-initramfs.sh: ignore the failure of echo
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Dave Young <dyoung@redhat.com> - 2.0.14-8
changelog:
  - kdumpctl: fix status check when CONFIG_CRASH_DUMP is not enabled in kernel
  - kdumpctl: fix a bug in remove_cmdline_param()
  - kdumpctl: remove "root=X" for kdump boot
  - Revert "kdumpctl: filter 'root' kernel parameter when running in live images"


author: Dave Young <dyoung@redhat.com> - 2.0.14-7
changelog:
  - kdump-emergency: fix "Transaction is destructive" emergency failure
  - mkdumprd: reduce lvm2 memory under kdump


author: Dave Young <dyoung@redhat.com> - 2.0.14-5
changelog:
  - kdump-lib.sh: fix incorrect usage with pipe as input for grep -q in is_pcs_fence_kdump()
  - Document: fix incorrect link in fadump-how.txt


author: Dave Young <dyoung@redhat.com> - 2.0.14-4
changelog:
  - drop kdump script rhcrashkernel-param in kexec-tools repo
  - kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors
  - kdumpctl: change prepare_cmdline() to operate KDUMP_COMMANDLINE directly
  - use --hostonly-i18n for dracut


author: Dave Young <dyoung@redhat.com> - 2.0.13-9
changelog:
  - rename function kdump_to_udev_name
  - Raw dump: use by-id as persistent policy in 2nd kernel
  - drop dracut duplicate functions
  - dracut-kdump: use POSIX shell syntax
  - Correct two typos in kdumpctl and kdump.conf


author: Dave Young <dyoung@redhat.com> - 2.0.13-8
changelog:
  - kexec/arch/i386: Add support for KASLR memory randomization
  - Update kdump anaconda addon
  - fadump: restore default initrd when fadump mode is disabled
  - kdump/fadump: fix network interface name when switching from fadump to kdump
  - kdumpctl: filter 'root' kernel parameter when running in live images
  - Documentation: step by step guide on confiuring kdump in live images


author: Dave Young <dyoung@redhat.com> - 2.0.13-5
changelog:
  - Fix bug 1373958 for system boot without initrd
  - Do not depend on /etc/fstab in kdumpctl in case it does not exist


author: Dave Young <dyoung@redhat.com> - 2.0.12-9
changelog:
  - Update kdump anaconda addon
  - makedumpfile: Support _count -> _refcount rename in struct page
  - module-setup: Don't handle iBFT in kdump


author: Dave Young <dyoung@redhat.com> - 2.0.12-5
changelog:
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file


author: Dave Young <dyoung@redhat.com> - 2.0.12-4
changelog:
  - update kdump anaconda addon to add mem range in tui 
  - .gitignore: Update to make it more generic
  - kdumpctl: check_rebuild improvement 
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only


author: Dave Young <dyoung@redhat.com> - 2.0.11-3
changelog:
  - use "systemctl reboot -f" for reboot action
  - Remove kernel param "quiet" from kdump kernel cmdline
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE
  - Add missing prefixes in default sysconfig file
  - fix bogus date in changelog


author: Baoquan He <bhe@redhat.com> - 2.0.10-6
changelog:
  - mkdumprd: Remove ifcfg from dracut's modules
  - module-setup: Choose the first matched gateway in kdump_static_ip
  - module-setup: Add permanent option to detect static ip address or not


author: Dave Young <dyoung@redhat.com> - 2.0.10-4
changelog:
  - ipv6 support (except for link scope addresses)
  - Apply the manual DNS to the 2nd kernel
  - load iTCO_wdt early in cmdline hook


author: Dave Young <dyoung@redhat.com> - 2.0.10-3
changelog:
  - Update kdump addon icon
  - Revert static route corner case patches per bhe. He discussed with Marc
    it is just a corner case.


author: Dave Young <dyoung@redhat.com> - 2.0.10-1
changelog:
  - Rebase kexec-tools 2.0.10
  - Rebase eppic git tree 050615
  - Enhance kdump.conf "default" parameters check


author: Dave Young <dyoung@redhat.com> - 2.0.9-2
changelog:
  - Resolve bug 1236456, kexec load fail because koji add extra gcc flags.
  - Remove -FPIC for makedumpfile since it is not necessary without harden build


author: Dave Young <dyoung@redhat.com> - 2.0.9-1
changelog:
  - Rebase kexec-tools 2.0.9
  - Rebase makedumpfile 1.5.8
  - revert 6347630 since ipv6 patches has not been reviewed.


author: Baoquan He <bhe@redhat.com> -2.0.8-11
changelog:
  - make kdump work when kernel crash after shutdown
  - Disable transparent hugepages in second kernel
  - Filtered out "noauto" options in 2nd kernel fstab


author: Baoquan He <bhe@redhat.com> -2.0.8-10
changelog:
  - add fPIC to makefumpfile CFLAGS to support hardening
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path


author: Baoquan He <bhe@redhat.com> -2.0.8-9
changelog:
  - Revert "execute kdump_post after do_default_action"
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames
  - make kdump saving directory name consistent with RHEL6


author: Dave Young <dyoung@redhat.com> - 2.0.8-8
changelog:
  - execute kdump_post after do_default_action
  - update kdump anaconda addon (translations/help text issus)


author: WANG Chao <chaowang@redhat.com> - 2.0.8-6
changelog:
  - mount fail if its mount point doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: WANG Chao <chaowang@redhat.com> - 2.0.8-5
changelog:
  - remove panic_on_warn kernel param in 2nd kernel
  - remove sysctl.conf to restore sysctl default values in 2nd kernel
  - fix a core_collector issue in ssh and raw dump case
  - update to kdump-anaconda-addon-005-2-g86366ae.tar.gz
  - some cleanups


author: WANG Chao <chaowang@redhat.com> - 2.0.7-10
changelog:
  - Enable ppc64le arch.
  - Rebase makedumpfile-1.5.7
  - add sample eppic scripts to kexec-tools-eppic package
  - Restart kdump service on cpu ADD/REMOVE events


author: Baoquan He <bhe@redhat.com> - 2.0.7-9
changelog:
  - kdumpctl: Use kexec file based syscall for secureboot enabled machines
  - kdumpctl: Use kexec file based mode to unload kdump kernel
  - kdumpctl: Do not redirect error messages to /dev/null
  - kexec: Provide an option to use new kexec system call


author: WANG Chao <chaowang@redhat.com> - 2.0.7-8
changelog:
  - use absolute path for executable in systemd service
  - update to kdump-anaconda-addon-003
  - remove dead kdump firstboot module and po files


author: WANG Chao <chaowang@redhat.com> - 2.0.7-5
changelog:
  - rework of kdump error handling
  - add fadump support
  - add static route support
  - systemd will take care of shutdown and umount filesystems


author: WANG Chao <chaowang@redhat.com> - 2.0.6-4
changelog:
  - generate kdump service dependencies on the fly
  - kdump.conf: a standalone path directive becomes a relative path to it's backed disk.


author: WANG Chao <chaowang@redhat.com> - 2.0.6-1
changelog:
  - Rebase kexec-tools-2.0.6
  - fix an issue when dump path is mounted on nfs
  - vmcore-dmesg: stack smashing fix
  - get_ssh_size fix for localized df output


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - regression fix on wdt kernel drivers instal


author: WANG Chao <chaowang@redhat.com> - 2.0.4-24
changelog:
  - add kdump-in-cluster-environment.txt to rpm pkg
  - Secure Boot status check warning
  - Some watchdog driver support


author: WANG Chao <chaowang@redhat.com> - 2.0.4-23
changelog:
  - ssh dump: create random-seed manually
  - makedumpfile: memset() in cyclic bitmap initialization introduce segment fault.
  - Add acpi_no_memhotplug to kdump kernel
  - Add fence kdump support


author: WANG Chao <chaowang@redhat.com> - 2.0.4-21
changelog:
  - makedumpfile: Improve progress information for huge memory system
  - s390: use nr_cpus=1 instead of maxcpus=1


author: WANG Chao <chaowang@redhat.com> - 2.0.4-20
changelog:
  - vmcore-dmesg: fix timestamp error in vmcore-dmesg.txt
  - makedumpfile: re-enable mmap() and introduce --non-mmap
  - kdump.conf uncomment default core_collector line
  - fix an issue when 'ssh' directive appearing in kdump.conf, the rest part of
    lines in this file are ignored


author: WANG Chao <chaowang@redhat.com> - 2.0.4-18
changelog:
  - update translation files
  - makedumpfile: default to lzo compression
  - makedumpfile: add makedumpfile.conf.sample and its manpage


author: WANG Chao <chaowang@redhat.com> - 2.0.4-14
changelog:
  - Add rd.memdebug in kdump module
  - kdumpctl: Avoid leaking fd to subshell
  - makedumpfile: Understand >= v3.11-rc4 dmesg
  - makedumpfile, ppc: Support to filter dump for kernels that use CONFIG_SPARSEMEM_VMEMMAP.


author: WANG Chao <chaowang@redhat.com> - 2.0.4-12
changelog:
  - fix sadump format phys_base calculating error
  - kdump, x86: Process multiple Crash kernel in /proc/iomem
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption
  - Fix max_mapnr issue on system has over 44-bit addressing.


author: Baoquan He <bhe@redhat.com> - 2.0.4-9
changelog:
  - Strip inline comments from the kdump config file before use
  - kdump-lib.sh: add common function strip_comments
  - Introduce kdump-lib.sh for kdump shared functions
  - kdump.service: Start kdump after network is online and remote fs is mounted
  - dracut-module-setup: _dev to be a local variable
  - kdumpctl: Run multiple kdumpctl instances one by one in serial order


author: Baoquan He <bhe@redhat.com> - 2.0.4-7
changelog:
  - dracut-kdump.sh: add do_dump() and error out if dump vmcore fails
  - dracut-module-setup.sh: setup correct system time and time zone in 2nd kernel.
  - kernel cmdline: Remove hugepage allocations
  - Use /lib/dracut/no-emergency-shell to control action on fail
  - Revert: kdump.sysconfig: Add option action_on_fail and set its default as continue
  - dracut-kdump.sh: Redirect kdump script stdout/stderr to /dev/console
  - makedumpfile: Add vmap_area_list definition for ppc/ppc64.


author: Baoquan He <bhe@redhat.com> - 2.0.4-6
changelog:
  - add snappy build
  - add lzo build
  - pull makedumpfile-1.5.4
  - mkdumprd: check return value of subshell
  - mkdumprd: get_persistent_dev() return original dev if no persistent dev exists.
  - dracut-kdump.sh: Merge dump_to_rootfs() to dump_fs()
  - dracut-kdump.sh: explicitly sync after each dump
  - Correct wrong weekday of changelog
  - kexec-tools.spec: Remove incorrect description in changelog


author: Baoquan He <bhe@redhat.com> - 2.0.4-5
changelog:
  - monitor-dd-progress fix
  - rawdump: only show dd progress bar when core_collector is not makedumpfile
  - kexec-tools.spec: replaces scriptlets with new systemd macros
  - dracut-kdump.sh: umount fs right before kdump exit
  - dracut-kdump.sh: recursively umount fs and its submounts
  - dracut-kdump.sh: cleanup - using local variable names instead of $1/$2 in functions
  - dracut-kdump.sh: name the invalid vmcore to vmcore-incomplete
  - dracut-kdump.sh: Output top level information about the kdump progress.
  - kexec-kdump-howto: Add a section for debugging tips


author: Baoquan He <bhe@redhat.com> - 2.0.4-4
changelog:
  - dracut-module-setup.sh: improve the approach to get a bridged interface list
  - dracut-module-setup.sh: cleanup - use kdump_get_mac_addr() function
  - dracut-module-setup.sh: use kernel exported mac address in kdump_get_mac_addr()
  - dracut-module-setup.sh: use perm addr of slaves to setup bonding network
  - kdump: Do not output debug messages by default
  - dracut-module-setup.sh: kdump module depends on drm module
  - mkdumprd: return error if no write permission on save path of server for ssh


author: Baoquan He <bhe@redhat.com> - 2.0.4-3
changelog:
  - mkdumprd: remove -M option for dracut
  - kdumpctl: add selinux relabel when service startup
  - depends on dracut selinux module
  - dracut-kdump.sh: umount rootfs after dump_to_rootfs
  - kdump.sysconfig: append "panic=10" to kdump cmdline
  - kexec-kdump-howto: grubby is suggested modifing kernel cmdline
  - kexec-tools.spec: removes kexec udev rules for s390
  - kdump.sysconfig: Add option action_on_fail and set its default as continue
  - Add tab key as delimiter for core_collector in kdump.conf
  - redirect stdout to stderr


author: Baoquan He <bhe@redhat.com> - 2.0.4-2
changelog:
  - kdump: Save vmcore-dmesg.txt before saving vmcore
  - Remove "ip=" overwrite to 40ip.conf
  - Add support for bridge over bond/team/vlan.
  - Fix bonding options syntax and get all specified options from ifcfg file.
  - add dracut_args option to kdump.conf
  - kexec-tools.spec: Add ethtool to dependency.
  - error out if dump target is encrypted


author: Baoquan He <bhe@redhat.com> - 2.0.4-1
changelog:
  - Delete several patches which have been merged into kexec-tools-2.0.4
  - Revert: Release 2.0.3-72
  - Release 2.0.3-72
  - Pull kexec-tools-2.0.4
  - Check if block device as dump target is resettable
  - mkdumprd: add function perror_exit
  - Deprecate blacklist option


author: Baoquan He <bhe@redhat.com> - 2.0.3-68
changelog:
  - tune sysconfig to save memory usage
  - Remove useless codes related to LOGGER in kdumpctl
  - kdumpctl:print out the service status
  - Return to start() function when check_ssh_target failed
  - use findmnt instead of blkid in mkdumprd
  - check dump target mounting earlier
  - kdumpctl: rename function name check_config
  - add function to check kdump config file
  - dracut-module-setup.sh: remove UUID/LABEL quotes before using it
  - Change dump_to_rootfs to be a default option and reboot to be default action
  - Remove "-F" in CORE_COLLECTOR when dump_to_rootfs


author: Baoquan He <bhe@redhat.com> - 2.0.3-67
changelog:
  - Remove comma which is redundant
  - Modify codes related to dump dir to make it clearer
  - Rectify the get_host_ip implementation
  - Revert: Merge an upstream patch for fix a ppc64 makedumpfile bug with with CONFIG_SPARSEMEM_EXTREME
  - pull makedumpfile 1.5.3


author: Dave Young <ruyang@redhat.com> - 2.0.3-66
changelog:
  - Spec: remove kdump image when a corresponding kernel is removed
  - Merge an upstream patch for fix a ppc64 makedumpfile bug


author: Dave Young <ruyang@redhat.com> - 2.0.3-65
changelog:
  - Add support for team devices
  - Update translation file po/it.po
  - remove wait for net ok function
  - add bootdev cmdline param
  - kdumpnic cmdline file name cleanup


author: Dave Young <ruyang@redhat.com> - 2.0.3-63
changelog:
  - revert explictly handling of PIPESTATUS
  - enable pipefail bash option
  - wrong ssh key fix
  - build fix: Update 3 po files: po/gu.po po/or.po po/zh_CN.po


author: Dave Young <ruyang@redhat.com> - 2.0.3-62
changelog:
  - Pull translated po files from zanata
  - Optimize redundent code fetching server of network dump
  - change the dump dir format to be more readable


author: Dave Young <ruyang@redhat.com> - 2.0.3-60
changelog:
  - makedumpfile 1.5.1
  - Update po tar.gz
  - Add a notes for zanata process
  - Add two xmls file for po zanata translation
  - Cleanup and recreate po files


author: Dave Young <ruyang@redhat.com> - 2.0.3-59
changelog:
  - Enable kdump service after installation
  - get MEM_RESERVED from sysfs attribute
  - get_ssh_size: use -n to redirect stdin from /dev/null
  - add random feeding code for ssh dump
  - kdump option space checking improvement
  - kdumpctl: multi dump target checking fix


author: Dave Young <ruyang@redhat.com> - 2.0.3-56
changelog:
  - Pull vmcore-dmesg patches from vivek
  - ppc/ppc64: compile purgatory with gcc option msoft-float
  - Update to support f18 grub2 efi config file
  - pass persistent name to dracut --device
  - pass persistent name to dracut --mount
  - use persistent name in kdump.conf of initramfs
  - mkdumprd: add function get_persistent_dev
  - remove useless uuid and label handling


author: Dave Young <ruyang@redhat.com> - 2.0.3-54
changelog:
  - pass raw device as dracut argument
  - iscsi setup fix
  - firstboot: add automatic and manual memory reservation for rhel
  - firstboot: remove unnecessary underline shortkey
  - firstboot: fix gtk warning about non-zero page size
  - firstboot: update all kernels config in grubbyCmd
  - firstboot: add actual reserved memory widget
  - firstboot code cleanup
  - rhcrashkernel-param: echo crashkernel=auto for rhel7
  - Remove the kernel-kdump handling
  - s390x firstboot fix
  - remove elilo support
  - grub2 fix in firstboot
  - Take closing the reboot dialog as no
  - Handle new crashkernel= syntax in firstboot
  - Fix a localized string in firstboot
  - Configure kdump in firstboot
  - fix firstboot to ensure kdump svc is disabled properly
  - firstboot text domain fix
  - Update to use systemctl instead of sysv chkconfig
  - port force_rebuild kdump.conf option
  - Change return value to indicate the result of dump_raw() correctly.
  - call dracut function for default shell


author: Dave Young <ruyang@redhat.com> - 2.0.3-53
changelog:
  - refactor net option
  - use fstab-sys to mount nfs
  - rename function dump_localfs
  - dump_localfs error path fix
  - update kexec-kdump-howto.txt about systemctl commands
  - ssh propagate alert message fix
  - remove useless dracut cmdline '-c /dev/null'
  - remove useless dracut cmdline for kernel-modules and kdumpbase
  - install core_collector in module-setup.sh
  - install extra_bins in module-setup.sh
  - remove busybox dependency
  - improve warning message of space checking
  - do not mount root twice
  - do not add fstab-sys module in dracut cmdline
  - omit dash module
  - network dns config fix
  - shell exit value fix


author: Dave Young <ruyang@redhat.com> - 2.0.3-51
changelog:
  - add s390x netdev setup
  - Add s390x support
  - Cleanup temp file leaved at /tmp/
  - add check_size function for fs dump
  - add ssh check_size
  - blacklist patch apply fix
  - Respect bonding mode
  - Support dump over vlan tagged bonding


author: Dave Young <ruyang@redhat.com> - 2.0.3-50
changelog:
  - add blacklist option, Resolves: bz805774
  - Add kdump_post and kdump_pre support, Resolves: bz805773
  - Port check_config from rhel6, Resolves: bz805778
  - raw core_collector fix
  - ssh core_collector fix
  - drcut-kdump.sh: cleanup kdump.conf check


author: Dave Young <ruyang@redhat.com> - 2.0.3-49
changelog:
  - cleanup DUMP_INSTRUCTION handling
  - final reboot behavior fix
  - dump_rootfs for default target fix
  - add vlan support
  - fix and refactor bond handling code
  - fix and refactor bridge handling code
  - core_collector doc basic fix
  - omit plymouth module, Resolves: bz821997
  - mkdumprd manpage cleanup manpage
  - mkdumprd: remove --debug
  - mkdumprd: remove noconf
  - makedumprd: remove -d
  - kdump.conf add sshkey
  - kdump.conf remove disk_timeout
  - kdump.conf make path uncommented
  - kdump.conf.5 add default poweroff
  - kdump.conf default shell fix
  - kdump.conf default default action fix
  - kdump.conf.5 remove module option
  - kdump.conf remove kdump_pre/kdump_post
  - kdump.conf: remove link_delay


author: Dave Young <ruyang@redhat.com> - 2.0.3-48
changelog:
  - do_default_action cleanup, Resolves: bz805773
  - add rhcrashkernel-param for anaconda use, Resolves: bz707441
  - Basic iscsi target dump support (software initiator), Resolves bz822701
  - Static ip configuratio support, Resolves: bz822739
  - udev rules fix, Resolves: bz808817


author: Dave Young <ruyang@redhat.com> - 2.0.3-46
changelog:
  - mkdumprd: Start using --hostonly and --add kdumpbase while calling dracut
  - get_mp function cleanup
  - move kdump script order to the end of pre pivot
  - port raw dump from rhel6
  - remove multi dump


author: Dave Young <dyoung@redhat.com> - 2.0.3-44
changelog:
  - update ppc64 sysconfig, resolve bug 811449
  - deal with nic rename issue, resolve bug 810107
  - update x86_64 sysconfig, resolve bug 813711


author: Cong Wang <xiyou.wangcong@gmail.com> - 2.0.3-42
changelog:
  - get ip addr with getent
  - spec: depends on dracut-network
  - Handle net option for nfs in kdump.conf correctly


author: CAI Qian <caiqian@redhat.com> - 2.0.0-34
changelog:
  - Massive forward-port from RHEL6
  - Update kexec-kdump-howto.txt
  - Update docs to reflect use of ext4
  - Update mkdumprd to pull in all modules needed
  - Fix mkdumprd typo
  - Removed universal add of ata_piix from mkdumprd
  - Fix infinite loop from modprobe changes
  - Fixed kexec-kdump-howto.doc for RHEL6
  - Update makedumpfile to 1.3.5
  - Improved mkdumprd run time
  - Cai's fix for broken regex
  - Fixing crashkernel syntax parsing
  - Fix initscript to return proper LSB return codes
  - Fixed bad call to resolve_dm_name
  - Added poweroff option to mkdumprd
  - Fixed readlink issue
  - Fixed x86_64 page_offset specifictaion
  - Fixed lvm setup loop to not hang
  - Added utsname support to makedumpfile for 2.6.32
  - Fix critical_disks list to exclude cciss/md
  - Add help info for -b option
  - Add ability to handle firmware hotplug events
  - Update mkdumprd to deal with changes in busybox fsck
  - Vitaly's fix to detect need for 64 bit elf
  - Fix major/minor numbers on /dev/rtc
  - Fix ssh id propogation w/ selinux
  - Add blacklist feature to kdump.conf
  - Removed rhpl code from firstboot
  - Fixed firstboot enable sense
  - Remove bogus debug comment from mkdumprd.
  - Handle SPARSEMEM properly
  - Fix scp monitoring script
  - Fix firstboot to find grub on EFI systems
  - Fixed mkdumprd to remove dup insmod
  - Fixed kdump fsck pause
  - Fixed kdump option handling
  - fixed raid5 module detection


author: Neil Horman <nhorman@redhat.com> 2.0.0-18
changelog:
  - Updated initscript to use mkdumprd2 if manifest is present
  - Updated spec to require dash
  - Updated sample manifest to point to correct initscript
  - Updated populate_std_files helper to fix sh symlink


author: Neil Horman <nhorman@redhat.com> - 1.102pre-6
changelog:
  - Bringing rawhide up to date with bugfixes from RHEL5
  - Adding patch to prevent kexec buffer overflow on ppc (bz 428684)


author: Neil Horman <nhorman@redhat.com> - 1.102pre-3
changelog:
  - Fix ARCH placement in kdump init script (bz 427201)
  - Fix BuildRequires
  - Fix Makedumpfile to build with new libelf


author: Neil Horman <nhorman@redhat.com> - 1.102pre-1
changelog:
  - Bumping kexec version to latest horms tree (bz 257201)
  - Adding trigger to remove initrds when a kernel is removed


author: Neil Horman <nhorman@redhat.com> - 1.101-58
changelog:
  - Updating kdump.init and mkdumprd with most recent RHEL5 fixes
  - Fixing BuildReq to require elfutils-devel-static


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Christopher Meng <rpm@cicku.me> - 1.4.8-1
changelog:
  - Updated to freeipmi-1.4.8
   - Fix segfault in crypt code with libgcrypt versions >= 1.6.0.
   - Fix --fanout command line parse bug.
   - Fix typ - from FRU spec, language "Tegulu" is actually "Telugu".
   - Fix typ - in SEL session output, "Invalid Username of Password" to
    "Invalid Username or Password".
   - Loop on select() call if interrupted by EINTR in openipmi, ssif, and
    sunbmc inband drivers.
   - Fix integer overflow bug in ipmi-config when configure vlan ID > 255.
   - Add workaround for ipmi-config issue on Supermicr - X10DDW-i.
   - Fix error handling bug in bmc-info.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.6-1
changelog:
  - Updated to upstream freeipmi-1.4.6
   - In ipmi-fru, support output of DDR4 SDRAM modules.
   - Fix EFI probing on non IA64 systems.
   - Fix corner case in ipmi-raw w/ standard input or --file and empty lines.
   - Fix parsing corner case in ipmi-chassis.
   - Support SSIF bridging.
   - Fix libipmiconsole calculation bug w/ SOL character send size.
   - Support Supermicro H8DGU and H8DG6 OEM sensors and events.
   - Minor documentation updates.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.3-1
changelog:
  - Updated to upstream freeipmi-1.4.3
   - In ipmi-oem, support Supermicro get-power-supply-status and
     get-pmbus-power-supply-status commands.
   - Support 'ipmiping' workaround in ipmipower.
   - Minor documentation updates.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.1-1
changelog:
  - Updated to upstream freeipmi-1.4.1
   - Support new tool ipmi-config.  Ipmi-config is a consolidated
     configuration tool implementing everything that was previously in
     bmc-config, ipmi-pef-config, ipmi-sensors-config, and
     ipmi-chassis-config.
     - The consolidated tool will allow users to checkout, commit, and
       diff sections/fields across the four former tools using only one
       tool.
     - The consolidated tool will also allow users to checkout, commit,
       and diff new sections/fields not yet covered in the four former
       tools.
     - Legacy scripts for bmc-config, ipmi-pef-config,
       ipmi-sensors-config, and ipmi-chassis-config will point to the new
       tool with all appropriate options to ensure full backwards
       compatability.
     - The ipmi-pef-config --info option has been made legacy.  It is
       still supported but no longer advertised.
   - Support Intel Data Center Host Interface / Management Engine as
     optional driver type for in-band communication.
     - Typically these are loaded as /dev/dcmi and /dev/mei drivers.
     - This driver is identified as the "inteldcmi" type, as it is
       specific to Intel systems.
   - Support OEM extensions for Intel Windmill, Wiwynn Windmill, and
     Quanta Winterfell motherboards in ipmi-sel and ipmi-sensors.  These
     motherboards are also know as motherboards for the Open Compute
     Project (OCP).
   - Support DCMI configuration in ipmi-config.
   - Update FreeIPMI for changes in IPMI 2.0 Errata 5.  Include are:
     - New sensor events for Power Supply and OS Boot sensors.  New
       events are supported in all areas, ipmi-sensors, ipmi-sel,
       libipmimonitoring, etc.
     - PEF now supports 255 filter numbers, not 127.  This is supported
       in ipmi-config (formerly ipmi-pef-config).
     - Support get/set of new System Info Parameters Present OS Version,
       BMC URL, and Base OS/Hypervisor URL.  This is supported in
       bmc-info and bmc-device.
   - Update ipmi-oem Intel Node Manager OEM commands for changes listed
     in Intelligent Power Node Manager 2.0 specification.
     - Due to changes in the specification, minor text changes may exist
       in some output from intelnm OEM commands.
   - Update ipmi-sel to support new SEL events in Intelligent Power Node
     Manager 2.0 specification.
   - Support 'serialalertsdeferred' workaround in ipmiconsole.
   - Support 'solpacketseq' workaround in ipmiconsole.
   - Fix portability issues for Apple / OS X.
   - Fix bmc-info output of GUID, format was output with two bytes out of
     order.
     - May affect scripts parsing and using the GUID.
   - Bmc-info now supports --get-system-guid and outputs the System GUID
     as well as the Device GUID by default.
     - The Device GUID is not prefixed with the text "Device GUID"
       instead of just "GUID".  Any scripts scripting against this will
       need to be adjusted.
   - Bmc-info now supports a workaround of 'guidformat' to read the GUID
     with a format a number of vendors have incorrectly used.
   - In ipmi-config's sensor configuration, decimal values that cannot be
     encoded accurately now report a clearer error message.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.4-2
changelog:
  - Module alias dependencies.
  - Changes for previous 1.3.4 update:
   - Support 'solchannelsupport' workraound in ipmiconsole /
     IPMICONSOLE_WORKAROUND_SKIP_CHANNEL_PAYLOAD_SUPPORT workaround flag in
     libipmiconsole.
   - Fix SDR cache workaround for motherboards with invalid SDR record
     counts listed.
   - Workaround Supermicro bug in bmc-watchdog. 
   - Fix error checks in sensor decoding functions, leading to possible
     problems in ipmi-sensors-config.
   - Update documentation with additional workarounds for motherboards.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.3-1
changelog:
  - Updated to freeipmi-1.3.3
   - Add support for intelnm get-node-manager-alert-destination and
     set-node-manager-alert-destination in ipmi-oem.
   - Under very verbose mode, ipmi-sel will now record types for OEM
     records.  This should allow OEM parses outside of FreeIPMI to more
     effectively parse OEM specific SEL records.
   - Fix big endian portability bugs.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.2-1
changelog:
  - Updated to freeipmi-1.3.2
   - Update FreeIPMI tools to check libfreeipmi API error codes
     correctly.
   - Update ipmi-api.h to list mappings of IPMI completion codes and
     RMCPPlus codes to API Error codes.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.1-1
changelog:
  - Updated to freeipmi-1.3.1
   - Timestamp UTC/localtime reporting compliant with specification.
     Remote timestamp expected to be in localtime already.
   - Timestamp reporting options --utc-to-localtime,
     --localtime-to-utc and --utc-offset.
   - In ipmi-fru, support output of DDR3 SDRAM modules.
   - In ipmi-fru, support output of new FRU multirecords, most notably
     extended DC output and extended DC load (per FRU Revision 1.2).
   - Support additional chassis types (per FRU Revision 1.2 update).
   - and more


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-2
changelog:
  - spec update by Christopher Meng <rpm@cicku.me>
  - hardened build flags should include PIE also for bmc-watchdog.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-1
changelog:
  - Updated to freeipmi-1.2.6
   - Support HP Proliant DL160 G8 OEM sensors.
   - Support Supermicro X9SCM-iiF OEM sensors and events.
   - Support output of temperature sampling period to ipmi-dcmi.
   - Clarify error message when SOL session cannot be stolen in
     ipmiconsole/libipmiconsole.
   - Fix dcmi rolling average time period output error
   - Fix ipmi-dcmi output errors with --get-dcmi-sensor-info.
   - Fix corner case in calculation of confidentiality pad length with
     AES-CBC-128 encryption.  Incorrect pad effects some vendor firmware
     implementations.
   - Send IPMI 2.0 packets differently than IPMI 1.5 packets, as the
     former does not require legacy pad data to be appended to payloads.
   - Fix Intel OEM SEL buffer overflow.
   - Fix out of trunk source build.
   - Support new ipmi_rmcpplus_sendto() and ipmi_rmcpplus_recvfrom()
     functions.
   - Support new HP Proliant DL160 G8 OEM sensor events.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.5-1
changelog:
  - Updated to freeipmi-1.2.5:
   - Support Supermicro X9SPU-F-O OEM sensors and events.
   - Support Supermicro X9DRI-LN4F+ OEM intepretations (previously
     forgotten).


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.4-1
changelog:
  - Updated to freeipmi-1.2.4:
   - Support Supermicro X9DRI-LN4F+ OEM sensors and events.
   - Fix output corner case for "session-based" channels.
   - Fix ipmi-oem set-power-restore-delay corner case in time settings.
   - Fix ipmiseld memleak.
   - Fix libfreeipmi potential fd leak when generating random numbers.
   - Fix libfreeipmi error output bug in RMCP interface.
   - Fix several minor corner cases discovered by static code analysis.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.3-1
changelog:
  - Updated to freeipmi-1.2.3:
   - In ipmi-oem, support new Dell Poweredge R720 OEM commands extensions,
     including:
    - get-nic-selection-failover
    - set-nic-selection-failover
    - power-monitoring-over-interval
    - power-monitoring-interval-range
    - get-last-post-code
   - In ipmi-oem, update active-lom-status for Dell Poweredge R720.
   - In ipmi-oem, support new Dell Poweredge R720 get-system-info option
     'cmc-info'.
   - In ipmi-oem, Dell get-system-info "slot-number" key changed to
     "blade-slot-info".  Legacy option still supported.
   - In ipmi-sel, support Dell Poweredge R720 OEM SEL extensions.
   - In all tools, support nochecksumcheck workaround option.
   - In all daemons (ipmiseld, ipmidetectd, bmc-watchdog), check for
     syscall errors during daemon setup.

   - In libfreeipmi, support Dell R720 OEM extension intepretations.
   - In libfreeipmi, libipmimonitoring, and libipmiconsole, support
     NO_CHECKSUM_CHECK workaround flag.
   - In libipmiconsole, IPMICONSOLE_DEBUG_FILE logs debug to files in
     current working directory and not /var/log.  PID is also appended to
     debug files.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.2-1
changelog:
  - Updated to freeipmi-1.2.2:
   - Support new --sol-payload-instance and --deactivate-all-instances
     options in ipmiconsole.
   - Fix ipmiseld compile issue with -Werror=format-security.


author: Jan Safranek <jsafrane@redhat.com> - 1.2.1-1
changelog:
  - Reworked RPM scriptlets to use systemd-rpm macros (#850117).
  - Updated to freeipmi-1.2.1:
   - Support new ipmiseld daemon, a daemon that regularly polls the SEL
     and stores the events to the local syslog.
   - In ipmipower, support --oem-power-type option to support OEM
     specific power control operations.  Included in this support were
     the follow changes to ipmipower:
     - Support initial OEM power type of C410X.
     - Re-architect to allow input of extra information for an OEM power
       operation via the '+' operator after the hostname.
     - Re-architect to allow input of target hostname multiple times
       under OEM power cases.
     - Re-architect to allow serialization of power control operations to
       the same host.
   - Globally in tools, support --target-channel-number and
     --target-slave-address to specify specific targets.
   - Globally in tools, support ability to specify alternate port via
     optional [:port] in hostname or host config.
   - In ipmi-fru, support --bridge-fru option to allow reading FRU entries
     from satellite controllers.
   - In bmc-config, add configuration support for
     Maximum_Privilege_Cipher_Suite_Id_15 under RMCPplus_Conf_Privilege.
   - Globally support Cipher Suite ID 15 and 16 based on comments from
     Intel.
   - In ipmi-sensors, support --output-sensor-thresholds, to allow
     outputting of sensor thresholds in default output for scripting.
   - In ipmi-sel, support new --post-clear option.
   - In bmc-device, support new --set-sensor-reading-and-event-status
     option.
   - In ipmi-oem, support additional Intel Node Manager commands,
     including:
     - get-node-manager-capabilities
     - node-manager-policy-control 
     - get-node-manager-policy
     - set-node-manager-policy
     - remove-node-manager-policy
     - get-node-manager-alert-thresholds
     - set-node-manager-alert-thresholds
     - get-node-manager-policy-suspend-periods
     - set-node-manager-policy-suspend-periods
     - set-node-manager-power-draw-range
   - In ipmi-oem, support Wistron OEM commands extensions.
   - In ipmi-sel, support Wistron OEM SEL interpretations.
   - In ipmi-fru, support Wistron OEM FRU records.
   - In ipmi-pef-config, support configuration volatile Alert String 0
     and Lan Alert Destination 0.


author: Jan Safranek <jsafrane@redhat.com> - 1.0.3-1
changelog:
  - Updated to freeipmi-1.0.3, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-03/msg00017.html


author: Jan Safranek <jsafrane@redhat.com> - 1.0.2-1
changelog:
  - Updated to freeipmi-1.0.2, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-02/msg00027.html


author: Jan Safranek <jsafrane@redhat.com> - 1.0.1:1
changelog:
  - Updated to freeipmi-1.0.1, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-01/msg00006.html
  - Configuration files moved from /etc/ to /etc/freeipmi/. Support legacy config
    files for backwards compatibility.
  - More detailed release information can be found in the NEWS file.


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.9-2
changelog:
  - Move development related docs to devel sub package
  - Cleanup spec and macros
  - Update valgrind ExclusiveArch


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.3-1
changelog:
  - updated to 1.3 (#426488, #431334)
  - use wrapper around libtasn1-config which should make it multilib
    safe (#342411); this implies an untagged 'Requires: pkgconfig' for
    -devel now
  - conditionalized BR of valgrind (#401041)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> 0:0.2.5-0.fdr.1
changelog:
  - updated to 0.2.5
  - changed license to LGPL
  - rearranged %check to reflect execution order
  - minor cosmetical changes


author: Xin Long <lxin@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.


author: Matthias Saou <http://freshrpms.net/> 1.0.4-1
changelog:
  - Update to 1.0.4.
  - Update syntax patch.
  - Execute bootstrap if no configure script is found.
  - Don't own entire man? directories.
  - Own data and lib lksctp-tools directories.
  - Move devel libs in _libdir/lksctp-tools/ to devel package.
  - Exclude .la files.
  - Minor spec file cleanups.


author: Peter Jones <pjones@redhat.com> - 2.3.0-2
changelog:
  - Once again, don't complain about compilers newer than tested with in the
    public headers.
  - Fix up bad %global vs %define directives
  - Fix up bad old changelog dates
  - Note there's a missing changelog here from the 2.3.0 rebase


author: Srinivas G Gowda <srinivas_g_gowda@dell.com> - 2.2.28-14
changelog:
  - Fixes Bug 852719: Dell Open Manage falis to start when libsmbios in EPEL branch is used.
  - Patch re-enables display of "OEM String" in smbios-sys-info-lite.


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.28-3
changelog:
  - Fixing the build failure of version 2.2.26-4.
  - The updated sources adds support for the compiler version available in F15 and other fixes.


author: Michael Brown <michael-e_brown at dell.com> - 2.2.25-1
changelog:
  - Fix breakage resulting from improperly fixing up constructors for MemoryAccess/CmosAccess. Fixes CLI utilities.


author: Michael Brown <michael-e_brown at dell.com> - 2.2.22-1
changelog:
  - Fixup bug in reading asset and service tag where it A) read checksum from wrong location and B) used wrong comparison check to validate it
  - enable service tag SET for machines that still set service tag in CMOS
  - ABI/API - change to -fvisibility=hidden for libsmbios_c.so.*, mark public api's. This removes all non-public symbols that were not formerly part of the ABI from the dynamic link table.


author: Michael E Brown <michael_e_brown at dell.com> - 2.2.12-1
changelog:
  - Add feature to turn on debugging printf()'s without recompiling by setting
    certain environment variables:
      LIBSMBIOS_C_DEBUG_OUTPUT_ALL    -- all debugging output
          or, per module:
      LIBSMBIOS_C_DEBUG_CONSTRUCTOR_C
      LIBSMBIOS_C_DEBUG_SYSINFO_C
      LIBSMBIOS_C_DEBUG_SMBIOS_C
      LIBSMBIOS_C_DEBUG_TOKEN_C
      LIBSMBIOS_C_DEBUG_MEMORY_C
      LIBSMBIOS_C_DEBUG_CMOS_C
      LIBSMBIOS_C_DEBUG_SMI_C


author: Michael E Brown <michael_e_brown at dell.com> - 2.2.12-1
changelog:
  - Add pkgconfig files to -devel
  - fixup yum plugin to not parse certain data that causes a crash on some machines (Optiplex 755, others may be affected)


author: Michael E Brown <michael_e_brown at dell.com> - 2.2.7-1
changelog:
  - change source to bz2 format
  - Update to latest upstream release. Many changes in the new release:
    - python interface
    - libsmbios_c interface almost fully implemented
    - libsmbios c++ interface deprecated


author: Michael E Brown <michael_e_brown at dell.com> - 2.0.0
changelog:
  - ABI incompatible, minor API changes
  - sync up libsmbios soname with version #
  - move binaries to /usr/sbin as they are only runnable by root
  - drop libsmbiosxml lib as it was mostly unused.
  - drop autotools generated files out of git and add autogen.sh
  - drop tokenCtl binary-- pysmbios has a *much* improved version


author: Michael E Brown <michael_e_brown at dell.com> - 0.13.9
changelog:
  - Fix a couple of failure-to-check-return on fopen. most were unit-test code
    only, but two or three were in regular code.
  - Add hinting to the memory class, so that it can intelligently close /dev/mem
    file handle when it is not needed (which is most of the time). it only
    leaves it open when it is scanning, so speed is not impacted.


author: Michael E Brown <michael_e_brown at dell.com> - 0.13.6
changelog:
  - critical bugfix for dellBiosUpdate utility for packet mode
  - autoconf/automake support for automatically building docs
  - more readable 'make' lines by splitting out env vars
  - remove run_cppunit option... always run unit tests.
  - update autoconf/automake utilities to latest version
  - fix LDFLAGS to not overwrite user entered LDFLAGS
  - add automatic doxygen build of docs
  - fix urls of public repos
  - remove yum repo page in favor of official page from docs
  - split dmi table entry point from smbios table entry point
  - support legacy _DMI_ tables
  - fix support for EFI-based imacs without proper _SM_ anchor


author: Michael E Brown <michael_e_brown at dell.com> - 0.13.5
changelog:
  - rpmlint cleanups
  - Add dellLEDCtl binary
  - update AUTHORS file to add credit for dellLEDCtl
  - update doc/DellToken.txt to add a few more useful tokens.
  - updated build system to create documentation
  - skip cppunit dep on .elX builds (not in EPEL yet)


author: Michael E Brown <michael_e_brown at dell.com> - 0.13.4-1
changelog:
  - Added dellWirelessCtl binary
  - Added 'static' makefile target to build static binaries and clean them as well
  - fix for signed/unsigned bug in probes binary. CPU temp misreported
  - simplify interface for DELL_CALLING_INTERFACE_SMI, autodetect Port/Magic
  - document all of the tokens for controlling wireless on dell notebooks
  - enums for SMI args/res to make code match docs better (cbRES1 = res[0], which
    was confusing.
  - helper functions isTokenActive() and activateToken() to simplify token API.
  - Added missing windows .cpp files to the dist tarball for those who compile
    windows from dist tarball vs source control
  - Add support for EFI based machines without backwards compatible smbios table
    entry point in 0xF0000 block.
  - Added wirelessSwitchControl() and wirelessRadioControl() API for newer
    laptops.
  - fixed bug in TokenDA activate() code where it wasnt properly using SMI
    (never worked, but apparently wasnt used until now.)


author: Michael E Brown <michael_e_brown at dell.com> - 0.12.4-1
changelog:
  - Changes per Fedora Packaging Guidelines to prepare to submit to Extras.
  - Add in a changelog entry per Fedora Packaging Guidelines...


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-23
changelog:
  - Another MergeReview improvements(provided by Patrice Dumas)
  - copy Automake-1.4 files instead of rerunning autotools,
  - better preserving timestamps, better handling of documentation
  - improved XML-common description


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-22
changelog:
  - Merge Review(226415)
  - changed: License Tag, using RPM macros instead of hardcoded
    dirs, summary ended with dot, added URL, removed CHANGES
    file as obsolete, preserved timestamps and some other cosmetic
    changes
  - no longer shipping old automake tarball, fixed issue with man8_DATA,
    BuildRequire:Automake,Autoconf again(see MergeReview discussion)


author: Tim Waugh <twaugh@redhat.com> 0.6.3-15
changelog:
  - Patch from Ville Skyttä <ville.skytta@iki.fi> (bug #111625):
    - Include /usr/share/xml in xml-common.
    - Own /usr/share/sgml and /usr/share/xml.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-8
changelog:
  - Back to /usr/share/sgml.  Now install docbook-dtds.
  - Use a real install-sh, not the symlink shipped in the tarball.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-6
changelog:
  - Don't create a useless empty catalog.
  - Don't try to put install things outside the build root.
  - Build requires a libxml2 that actually works.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-1
changelog:
  - 0.6.3.  Incorporates oldsyntax and quiet patches.
  - Make /etc/sgml/sgml.conf noreplace.
  - Own /etc/sgml, various other directories (bug #47485, bug #54180).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Install by hand (man/en/...).  Use %{_mandir}.
  - Use %{_tmppath}.
  - Make install-catalog fail silently if given the old syntax.
  - Add CHANGES file.
  - Change Copyright: to License:.
  - Remove Packager: line.


author: Ondrej Vasik <ovasik@redhat.com> - 3.7-1
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - own /usr/lib/sysimage
  - improve filesystem content file to include symlinks and rootdir


author: Ondrej Vasik <ovasik@redhat.com> - 3.6-1
changelog:
  - own /usr/share/bash-completion{,/completions,/helpers} (#1504616)
  - create and own /usr/lib/debug/.dwz dir to prevent
    dangling symlink (#1508610)


author: Ondrej Vasik <ovasik@redhat.com> - 3.2-39
changelog:
  - refresh lang-exceptions list - /usr/share/locale ownerships
    (#1409402, #1313421)
  - add ownership for /usr/share/help (#1357974)


author: Kay Sievers <kay@redhat.com> - 3.2-14
changelog:
  - fix yum installroot ending up with directories in /var
    instead of the expected symlinks to /run
  - ship /var/run and /var/lock as plain symlinks
  - do not handle /var/lock/subsys, it is always on tmpfs
  - create all symlinked directories and their targets
    in pretrans to make sure other packages install into
    the right place, even if filesystem.rpm is not the
    first package installed in the transaction


author: Ondrej Vasik <ovasik@redhat.com> 3.2-8
changelog:
  - ship /var/run and /var/lock as symlinks in payload,
    don't handle them as part of post scriptlet (#919374)


author: Ondrej Vasik <ovasik@redhat.com> 3.2-1
changelog:
  - own /etc/bash_completion.d (#870193)
  - own /etc/default and create it as symlink do /etc/sysconfig (#797316)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.45-1
changelog:
  - own and create /var/adm, /var/gopher and /var/spool/uucp
    as these are homedirs for default legacy system accounts
    (#752885)


author: Adam Jackson <ajax@redhat.com> 2.4.37-1
changelog:
  - Drop Prov/Obs: xorg-x11-filesystem and pm-utils-filesystem, both last seen
    in Fedora 11.
  - Remove explicit BuildRoot.


author: Ondrej Vasik <ovasik@redhat.com> 2.4.29-1
changelog:
  - iso_codes package no longer provides tab files, do generate
    them on fly with sed (thanks D. Tardon)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.28-1
changelog:
  - Provide/obsolete pm-utils-filesystem, own dirs for pm-utils
    hooks(#515362)
  - Do own man sections for /usr/share/man/<locale> dirs (#220265)
  - Do own /usr/share/sounds (#515485)


author: Ondrej Vasik <ovasik@redhat.com> - 2.4.22-1
changelog:
  - do own interface description directory /usr/share/idl(#451719)
  - add a few missing lang-exceptions to filelist(#508309)


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.16-1
changelog:
  - Dropped /etc/news again as we're handling it now correctly (#437462)
  - Filesystem is now an official fedorahosted project, part of the review
    changes (#225752)
  - Removed duplicate entry in lang_exceptions for ca_ES@valencian (#225752)


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.12-1
changelog:
  - Added be@latin to lang-exceptions (#231737)
  - Added /usr/share/man{0,1,3]p to owned files (#233879)
  - Added /usr/share/fonts to owned files (#302141)
  - Renamed sr@Latn to sr@latin (#436887)


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-1
changelog:
  - Added /etc/fonts/conf.d and /usr/share/themes (#239246)
  - Removed /etc/xdg/menus, already owned by redhat-menus (#228779)


author: Phil Knirsch <pknirsch@redhat.com> - 2.3.7-2
changelog:
  - Fixed games location according to FHS 2.1 (#165425)
  - Added {_libdir}/sse2 to owned files (#192853)
  - Added /dev to owned files (#192860)
  - Added {_datadir}/icons to owned files (#195911)
  - Dropped obsolete /etc/X11/starthere (#191163)


author: Bill Nottingham <notting@redhat.com> 2.2.3-1
changelog:
  - move /usr/dict to /usr/share/dict (#113645)
  - add /usr/lib/locale, /var/empty (#108686,#113036)
  - add */%{_lib}/tls (#113050)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - /etc/opt, /usr/share/{info,man/man*,misc,doc} (FHS 2.1)
  - added /var/games.  Data should move from /var/lib/games to there (FHS 2.1)
  - bump version up to 2.0 already!


author: Erik Troan <ewt@redhat.com>
changelog:
  - added /var/db
  - set attributes in the spec file; don't depend on the ones in the cpio
    archive
  - use a tarball instead of a cpioball


author: Jiri Kucera <jkucera@redhat.com> - 1.13.1-2
changelog:
  - Remove *.pc files due to 'nothing provides pkgconfig(gpg-error)'
    and 'nothing provides pkgconfig(libassuan)' dnf errors
    Related: #1829822


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79811)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78080)
  - Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.040-1
changelog:
  - Update to 2.040
    - Croak if attempt to freeze/thaw compression object (CPAN RT#69985)
  - BR: perl(Carp)


author: Chris Weyl <cweyl@alumni.drew.edu> 2.026-1
changelog:
  - PERL_INSTALL_ROOT => DESTDIR, use _fixperms incantation
  - add perl_default_filter (XS package)
  - update by Fedora::App::MaintainerTools 0.006
  - updating to latest GA CPAN version (2.026)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
changelog:
  - fix chronyc getting stuck in infinite loop after clock step
  - don't allow packaging without vendor zone
  - suggest ntp-refclock
  - remove obsolete dependency
  - update description


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-4
changelog:
  - use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599)
  - fix seccomp filter for new glibc once again
  - don't drop PHC samples with zero delay


author: Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.1.pre1
changelog:
  - update to 2.2-pre1
  - enable seccomp support
  - use weak dependency for timedatex on Fedora 24 and later


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1
  - extend chrony-helper to allow using servers from DNS SRV records (#1234406)
  - set random seed in testing to get deterministic results


author: Miroslav Lichvar <mlichvar@redhat.com> 1.31-1
changelog:
  - update to 1.31
  - add servers from DHCP with iburst option by default
  - use upstream configuration files and scripts
  - don't package configuration examples
  - compress chrony.txt


author: Miroslav Lichvar <mlichvar@redhat.com> 1.30-0.1.pre1
changelog:
  - update to 1.30-pre1
  - execute test suite
  - avoid calling systemctl in helper script
  - call chronyc directly from logrotate and NM dispatcher scripts
  - add conflict with systemd-timesyncd service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-3
changelog:
  - disable chrony-wait service by default (#961047)
  - drop old systemd scriptlets
  - don't own ntp-units.d directory
  - move files from /lib
  - remove unncessary dependency on syslog target


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-2
changelog:
  - suppress error messages from tr when generating key (#907914)
  - fix delta calculation with extreme frequency offsets


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-1
changelog:
  - update to 1.27
  - start chrony-wait service with chronyd
  - start chronyd service after sntp
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844
changelog:
  - update to git snapshot 1ca844
  - update systemd integration (#846303)
  - use systemd macros if available (#850151)
  - use correct vendor pool.ntp.org zone on RHEL (#845981)
  - don't log output of chrony-wait service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-5.20110831gitb088b7
changelog:
  - improve chrony-helper to keep track of servers added from DHCP (#787042)
  - fix dhclient script to always return with zero exit code (#767859)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-3.20110831gitb088b7
changelog:
  - update to git snapshot 20110831gitb088b7
  - on first start generate password with 16 chars
  - change systemd service type to forking
  - add forced-command to chrony-helper (#735821)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-0.1.pre1
changelog:
  - update to 1.26-pre1
  - fix service name in %triggerun
  - drop SysV init script
  - add chrony-wait service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.1.pre1
changelog:
  - update to 1.25-pre1
  - use iburst, four pool servers, rtcsync, stratumweight in default config
  - add systemd support
  - drop sysconfig file 
  - suppress install-info errors


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
changelog:
  - update to 20100428git73d775
  - replace initstepslew directive with makestep in default config
  - add NetworkManager dispatcher script
  - add dhclient script
  - retry server/peer name resolution at least once to workaround
    NetworkManager race condition on boot
  - don't verify chrony.keys


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-1
changelog:
  - update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294)
  - modify default config
    - step clock on start if it is off by more than 100 seconds
    - disable client log
  - build with -fPIE on sparc


author: Miroslav Lichvar <mlichvar@redhat.com> 1.23-2.20081106gitbe42b4
changelog:
  - fix info uninstall
  - generate random command key in init script
  - support cyclelogs, online, offline commands in init script
  - add logrotate script


author: Pino Toscano <ptoscano@redhat.com> - 1.12.0-5
changelog:
  - Fix completion with special characters in augtool. (RHBZ#1232224)
  - Krb5: improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1798486)
  - Systemd: improve parsing of quoted variables of Environment (RHBZ#1798922)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-6
changelog:
  - Semanage: new lens (RHBZ#1652840)
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653768)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-4
changelog:
  - Grub: better handle invalid grub.conf files (RHBZ#1649262)
  - Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-3
changelog:
  - Backport some upstream commits to fix few memory leaks, and potential
    memory issues (RHBZ#1602446)


author: EL Errata <el-errata_ww@oracle.com> - 238.2-1.0.1
changelog:
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Martin Pitt <mpitt@redhat.com> - 238.1-1
changelog:
  - Several UI alignment fixes
  - Re-drop unit tests from built packages
  - Metrics: Don't show swap column when no swap is present
  - Metrics: Don't show duplicate events


author: Martin Pitt <mpitt@redhat.com> - 238-1
changelog:
  - Web server: Preserve permissions of administrator-provided certificates
  - System: Performance page shows busiest CPU cores


author: Martin Pitt <mpitt@redhat.com> - 235-1
changelog:
  - Login: Improved handling of SSH host keys
  - Overview: Editable motd
  - Adjust tests for sos 4.x to fix gating tests (rhbz#1895912)


author: Katerina Koukiou <kkoukiou@redht.com> - 233.1-1
changelog:
  - Non-admin users no longer see Cockpit in motd (rhbz#1872562)
  - Improved host editing
  - Replace system's graph page with a completely new USE method page
  - Logging of remote IP addresses
  - shell: Any page can be the shell
  - Accounts: Allow setting weak passwords (rhbz#1652390)
  - Terminal: Fix issue with prompt not returning when clicking reset button in disoconnected session (rhbz#1897430)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Martin Pitt <mpitt@redhat.com> - 223-1
changelog:
  - Webserver: Standard-conformant lifetime of web server Certificate
  - Support certificate authentication against Active Directory
  - Fix cockpit-desktop privileges (rhbz#1841104)
  - Translation updates (rhbz#1820538)


author: Matej Marusak <mmarusak@redhat.com> - 222-1
changelog:
  - Logs: More flexible text filters
  - Services, Dashboard: Hide some buttons when access is limited
  - Webserver: Lock down cockpit.service privileges
  - Localization updates (rhbz#1820538)


author: Martin Pitt <mpitt@redhat.com> - 221.1-1
changelog:
  - Put back missing base1/patternfly.css
  - Services: Don't offer 'Start Service' in Limited Access mode


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - Support for Cross-Origin-Resource-Policy
  - Accounts: Some buttons are hidden when access is limited
  - Developers: Importing "base1/patternfly.css" is deprecated
  - Translation updates (rhbz#1820538)


author: Matej Marusak <mmarusak@redhat.com> - 220-1
changelog:
  - New navigation with integrated switching of hosts
  - Logs: Inline help for filtering
  - Fix cockpit-system AppStream dependency (rhbz#1838003)


author: Matej Marusak <mmarusak@redhat.com> - 219-1
changelog:
  - Rebase to upstream version 219
  - Accept upper-case login names for ssh/polkit agent challenges (rhbz#1825749)
  - Show last/failed login (rhbz#1784772)
  - Modernize services page (rhbz#1791193)
  - Search in journal (rhbz#1710731)
  - The default mode is not consistent with the mode in the created bond (rhbz#1817948)
  - Fix deadlock in channel pressure handling (rhbz#1751783)


author: Matej Marusak <mmarusak@redhat.com> - 211.2-1
changelog:
  - Users: Fix reboot warnings of changed roles
  - Translation updates (rhbz#1754958)
  - Fix CPU mitigations to recognize kernel options at the beginning of line


author: Martin Pitt <mpitt@redhat.com> - 211.1-1
changelog:
  - system: Fix graph layout across all browsers (rhbz#1792623)
  - websocket: Fix unaligned access in send_prefixed_message_rfc6455()


author: Martin Pitt <mpitt@redhat.com> - 211-1
changelog:
  - Fix HTTPS requests > 4 KiB (rhbz#1785509)
  - Better support for various TLS certificate formats
  - Switch from Zanata to Weblate
  - Overview layout optimizations
  - Translation updates (rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 210-1
changelog:
  - Overview: Add CPU utilization to usage card
  - Dashboard: Support SSH identity unlocking when adding new machines
  - SElinux: Introduce an Ansible automation script
  - Translation updates (partially fixes rhbz#1754958)


author: Matej Marusak <mmmarusak@redhat.com> - 209-1
changelog:
  - New overview design
  - Session timeouts
  - Banners on login screen
  - Client certificate authentication
  - Dropped support for pam_rhost


author: Martin Pitt <mpitt@redhat.com> - 206-1
changelog:
  - Sync with Fedora 31, to get cockpit-tls prerequisite for upcoming Smart card
    support
  - Logging in with SELinux-restricted user role now works (rhbz#1727382)


author: Martin Pitt <mpitt@redhat.com> - 196.1-1
changelog:
  - networkmanager: Show correct IPv6 route metric in dialog (rhbz#1719575)
  - networkmanager: Ensure that endianess is always set (rhbz#1728213)
  - Update translations (rhbz#1689977)


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Networking: Add Firewall Zones configuration rhbz#1678473
  - Fix ssh login to unknown hosts rhbz#1701174
  - Fix login when ~/.bashrc prints to stdout rhbz#1716223
  - Much better On/Off buttons, also avoid text overlap rhbz#1677593


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - System: Enable/disable SMT rhbz#1678956
  - Logs: Add service filtering rhbz#1657756
  - Networking: Add custom firewall ports rhbz#1660400


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Add search box to Services page rhbz#1657752
  - Connect to firewalld as superuser rhbz#1664158
  - Fix log filtering rhbz#1665421
  - Show error message for invalid IdM domain names rhbz#1659333
  - Changing passwords as root does not ask for current password rhbz#1666005


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Integration of Cockpit pages on the desktop rhbz#1651264
  - Fix crash in Simplified Chinese locale rhbz#1653544
  - Update screenshots in AppStream data rhbz#1656982
  - Update translations from Zanata rhbz#1608292
  - Improve login error message if cockpit-system is not installed rhbz#1650467
  - Mark deleted cookie as HttpOnly to pacify security scanners rhbz#1656441


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Kernel Dump: Support non-local targets rhbz#1651691
  - Fix firewall page oops when not selecting anything rhbz#1652207
  - Fix changing user's own password rhbz#1652304
  - Never send Content-Length with chunked encoding rhbz#1652511
  - Include "Web Console" in package description rhbz#1653617
  - Respect SSH configuration


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Various crash fixes (coverity) rhbz#1635182
  - Updates for React 16 (for future backports) rhbz#1635182
  - Fix building with platform-python rhbz#1631174


author: Martin Pitt <mpitt@redhat.com> - 178-1
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627634
  - Fix large downloads stalling after a few megabytes rhbz#1626847
  - Recommend system-logos to ensure correct branding rhbz#1626066


author: Martin Pitt <mpitt@redhat.com> - 177-1
changelog:
  - Support centrally-managed SSH known hosts rhbz#1622835
  - Drop support for Internet Explorer rhbz#1619993


author: Martin Pitt <mpitt@redhat.com> - 176-1
changelog:
  - Fix Cockpit activation message (/etc/issue.d) rhbz#1615316
  - Suggest other browsers when browser is unsupported rhbz#1619993


author: Marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 172-1
changelog:
  - System: Offer installation of PCP
  - Software Updates: Improve layout in mobile mode
  - Remove ability to drop privileges from navigation bar
  - API: Introduce flow control for all channels
  - Python 3 support rhbz#1561472


author: Martin Pitt <martin@piware.de> - 171-1
changelog:
  - Machines: Add virtual CPU configuration
  - Kubernetes: Add KubeVirt pod metrics
  - Docker: Show container volumes
  - Fix broken actions for non-administrators
  - Networking: Handle non-running NetworkManager
  - Accounts: User role improvements
  - Localize times


author: Martin Pitt <martin@piware.de> - 170-1
changelog:
  - Software Updates: Layout rework
  - oVirt: Use authenticated libvirt connection by default
  - Disable optional packages, they moved to cockpit-appstream source
  - Drop dashboard recommends from metapackage, not RHEL ready yet


author: Martin Pitt <martin@piware.de> - 169-1
changelog:
  - Storage: Offer installation of NFS client support
  - System: Request FreeIPA SSL certificate for Cockpit's web server
  - Services: Show unit relationships
  - Provide motd help about how to access cockpit


author: Martin Pitt <martin@piware.de> - 166-1
changelog:
  - Kubernetes: Add creation of Virtual Machines
  - Realms: Automatically set up Kerberos keytab for Cockpit web server
  - Numbers now get formatted correctly for the selected language


author: Martin Pitt <martin@piware.de> - 165-1
changelog:
  - Storage: Show more details of sessions and services that keep NFS busy
  - Machines: Detect if libvirtd is not running
  - Machines: Show virtual machines that are being created


author: Martin Pitt <martin@piware.de> - 164-1
changelog:
  - Storage: Move NFS management into new details page
  - System: Show available package updates and missing registration
  - System: Fix inconsistent tooltips
  - Logs: Change severities to officially defined syslog levels
  - Machines: Add error notifications
  - Accessibility improvements
  - Reloading the page in the browser now reloads Cockpit package manifests


author: Martin Pitt <martin@piware.de> - 163-1
changelog:
  - Drop "Transfer data asynchronously" VDO option on Storage page
  - Hide Docker storage pool reset button when it cannot work properly
  - Update jQuery to version 3.3.1 (deprecated cockpit API!)


author: Martin Pitt <martin@piware.de> - 161-1
changelog:
  - New VMs can be created on Machines page
  - VMs running in Kubernetes can now be deleted
  - Improve LVM volume resizing
  - Add new Hardware Information page
  - Load Application metadata (Appstream) packages on demand on Debian/Ubuntu
  - Rename cockpit-ovirt package to cockpit-machines-ovirt
  - Stop advertising and supporting cockpit-bundled jQuery library


author: Martin Pitt <martin@piware.de> - 160-1
changelog:
  - Add kubevirt Virtual Machines overview
  - Redesign package list on Software Updates page and show RHEL Errata
  - Install AppStream collection metadata packages on demand on Apps page
  - Add AppStream metadata to cockpit-sosreport for showing up on Apps page
  - Change CPU graphs to use "100%" for a fully loaded multi-processor system
  - Show storage, network, and other numbers with 3 digits of precision
  - Add an example bastion container


author: Martin Pitt <martin@piware.de> - 159-1
changelog:
  - Configure data deduplication with VDO devices on Storage page
  - Add serial console to virtual Machines page and redesign the Consoles tab
  - Show more error message details for failures on virtual Machines page


author: Martin Pitt <martin@piware.de> - 158-1
changelog:
  - Add check boxes for common NFS mount options
  - Clarify Software Update status if only security updates are available
  - Create self-signed certificates with SubjectAltName


author: Martin Pitt <martin@piware.de> - 156-1
changelog:
  - Redesign navigation and support mobile browsing
  - Use /etc/cockpit/krb5.keytab if present to support alternate keytabs
  - Add project homepage link to Apps page
  - Maintain issue(5) file with current Cockpit status
  - Use event-driven refresh of oVirt data instead of polling


author: Martin Pitt <martin@piware.de> - 155-1
changelog:
  - Add NFS client support to the Storage page
  - Add "Maintenance" switch for oVirt hosts
  - Fix Terminal rendering issues in Chrome
  - Prevent closing Terminal with Ctrl+W when focused
  - Support the upcoming OpenShift 3.7 release


author: Martin Pitt <martin@piware.de> - 154-1
changelog:
  - Center the "Disconnected" message in the content area
  - Fix two layout regressions on the Cluster page
  - Remove long-obsolete "./configure --branding" option


author: Martin Pitt <martin@piware.de> - 153-1
changelog:
  - Add cockpit-ovirt package to control oVirt virtual machine clusters
  - Clean up rpmlint/lintian errors in the packages


author: Martin Pitt <martin@piware.de> - 152-1
changelog:
  - Add Applications page
  - Add automatic update configuration for dnf to Software Updates
  - Fix cockpit-bridge crash if /etc/os-release does not exist


author: Martin Pitt <martin@piware.de> - 151-1
changelog:
  - Support loading SSH keys from arbitrary paths
  - Support X-Forwarded-Proto HTTP header for Kubernetes
  - Fix Kubernetes connection hangs (regression in version 150)


author: Martin Pitt <martin@piware.de> - 150-1
changelog:
  - Automatically enable and start newly created timers on the Services page
  - Support cockpit-dashboard installation into OSTree overlay on Atomic
  - Support Kubernetes basic auth with Google Compute Engine 1.7.x


author: petervo <petervo@redhat.com> - 149-1
changelog:
  - Support sending non-maskable interrupt to VMs
  - Fix building on fedora 27
  - Add information about non-met conditions for systemd services
  - Clear cockpit cookie on logout


author: Martin Pitt <martin@piware.de> - 146-1
changelog:
  - Show recent updates and live update log on Software Updates page
  - Improve available Software Updates table layout for small/mobile screens
  - Support OAuth Kubernetes logins to work with Google Compute Engine
  - Fix reporting ABRT crashes that are already known to the server
  - Scroll the virtual machine VNC console into view automatically


author: Martin Pitt <martin@piware.de> - 145-1
changelog:
  - Resize the terminal dynamically to use all available space
  - Let the Machines page update immediately after changes
  - Add delete VM functionality to the Machines page
  - Retire support for external Machines provider API
  - Always recommend rebooting after applying Software Updates
  - Group D-Bus channels to avoid hitting connection limits
  - Fix building on Fedora Rawhide/glibc 2.25.90


author: Martin Pitt <<martin@piware.de>> - 143-1
changelog:
  - Add "Software Updates" page for package (rpm/deb) based operating systems
  - Fix cockpit-machines package to make inline VNC console actually work
  - Fix Kubernetes authentication when Kubernetes configured for RBAC
  - Build Docker page for s390x architecture


author: Martin Pitt <<martin@piware.de>> - 142-1
changelog:
  - Virtual machines display an interactive console, either in browser, or a popup viewer
  - Fix Virtual Machines operations on non-English locales
  - Add documentation explaining how to grant/restrict access via polkit rules


author: Martin Pitt <<mpitt@redhat.com>> - 139-1
changelog:
  - Show more information about virtual machines, such as boot order
  - Fix enablement of timer systemd units created on Services page
  - Fix Storage crash on multiple iSCSI sessions
  - cockpit-docker is now installable with docker-ce or other alternatives
  - Hide docker push commands on Registry image pages for  "pull" roles


author: Stef Walter <<stefw@redhat.com>> - 138-1
changelog:
  - Only allow mdraid disk removal when it won't destroy data
  - Allow DN style usernames in the Kubernetes dashboard
  - Simplify protocol that cockpit talks to session authentication processes


author: Martin Pitt <<mpitt@redhat.com>> - 137-1
changelog:
  - Read ~/.ssh/known_hosts for connecting to remote machines with ssh
  - The Storage LVM setup can add unpartitioned free space as a physical volume
  - NetworkManager's Team plugin can be used on architectures other than x86_64
  - Cockpit's web server understands and properly responds to HTTP HEAD requests
  - Allow parameter substitution in manifest when spawning peer bridges


author: Martin Pitt <<mpitt@redhat.com>> - 134-1
changelog:
  - Show /etc/motd in the "System" task page
  - Drop "System" service actions which are intended for scripts
  - Make login page translatable
  - NetworkManager now activates slave interfaces by itself
  - Add call timeout option to the cockpit.dbus() API
  - The Debian packaging is now able to apply binary patches


author: Martin Pitt <<mpitt@redhat.com>> - 133-1
changelog:
  - Remotely managed machines are now configured in /etc/cockpit/machines.d/*.json
  - Fix NetworkManager's "MTU" dialog layout
  - Build the cockpit-tests package for releases too
  - Split translations into individual packages
  - Packages now configure alternate cockpit-bridge's to interact with the system


author: Martin Pitt <<mpitt@redhat.com>> - 132-1
changelog:
  - Make basic SELinux functionality available without setroubleshootd
  - Allow changing the MAC address for ethernet adapters and see them for bonds
  - Hide "autoconnect" checkbox for network devices without settings
  - Support for external providers other than libvirt on Machines page
  - Some tooltip fixes
  - Add option to restrict max read size to the Cockpit file API
  - Relax dependencies on cockpit-bridge package on Debian/Ubuntu
  - Rename cockpit-test-assets package to cockpit-tests
  - When touching patched files handle case of only one file
  - Always build the cockpit-tests subpackage


author: Stef Walter <<stefw@redhat.com>> - 131-1
changelog:
  - Show session virtual machines on Machines page
  - Fix use of the TAB key on login page
  - Robust naming and detection of network bond master
  - Debian packaging fixes


author: Stef Walter <<stefw@redhat.com>> - 130-1
changelog:
  - cockpit.file() can read non-memory-mappable file
  - Add kdump configuration user interface
  - Allow container Registry Console user names with '@' sign


author: Stef Walter <<stefw@redhat.com>> - 129-1
changelog:
  - Diagnostic sosreport feature now works on RHEL Atomic again
  - The configure script has a --disable-ssh option to toggle libssh dep
  - The configure --disable-ws option has been replaced with above.
  - Unit tests have been fixed on recent GLib versions
  - Several Fedora and Debian packaging fixes


author: Stef Walter <<stefw@redhat.com>> - 126-1
changelog:
  - Show security scan information about containers
  - Choose whether password is cached and reused on login screen
  - Allow renaming of active devices in networking interface
  - More clearly indicate when checking network connectivity
  - The remotectl command can now combine certificate and key files
  - Support Openshift's certificate autogeneration when used as a pod
  - The remotectl tool now checks for keys in certificate files
  - Domain join operations can now be properly cancelled
  - Make Kerberos authentication work even if gss-proxy is in use
  - Javascript code can now export DBus interfaces
  - When proxied, support X-Forwarded-Proto
  - Ignore block devices with a zero size in the storage interface


author: Stef Walter <<stefw@redhat.com>> - 125-1
changelog:
  - Cockpit is now properly translatable
  - Display OSTree signatures
  - New expandable views for storage devices
  - No longer offer to format read-only block devices
  - Use stored passphrases for LUKS devices properly
  - Start testing on RHEL 7.3
  - More strict about transport channels a bridge accepts
  - System shutdown can be scheduled by date


author: Stef Walter <<stefw@redhat.com>> - 124-1
changelog:
  - Build and test on Debian Jessie
  - Deprecate older javascript files
  - Properly terminate user sessions on the Accounts page
  - Fix regression on login screen in older Internet Explorer browsers
  - Fix regression where Date Picker was not shown in System Time dialog


author: Stef Walter <<stefw@redhat.com>> - 123-1
changelog:
  - Release a second tarball with cached javascript dependencies
  - Start verifying that Cockpit works on Ubuntu 16.04
  - Enable and verify the network functionality on Debian
  - Integration tests now log core dumps for diagnosis


author: Stef Walter <stefw@redhat.com> - 122-1
changelog:
  - Works with UDisks in addition to storaged
  - Allow logging into other systems from login page
  - Explicitly specify javascript dependency versions


author: Stef Walter <stefw@redhat.com> - 121-1
changelog:
  - Network Manager Checkpoints
  - Add Debian Branding
  - Fix GSSAPI login on Debian and Ubuntu
  - Generate map files for debugging Javascript and CSS


author: Stef Walter <stefw@redhat.com> - 120-1
changelog:
  - New containers page layout
  - Quick filtering of containers and images on the container page
  - Added sidebar for phisical volumes in a volume group
  - Run a separate cockpit-ssh process when making SSH connections
  - Allow connecting to remote machines from the login page
  - Only connect to remote machines already known to Cockpit
  - Fix bugs preventing journal page from working on Firefox 49
  - Add tooltip describing group name in Roles list


author: petervo <petervo@redhat.com> - 119-1
changelog:
  - Adds basic VM Management and Monitoring
  - MDRaid job improvements
  - Show unmanaged network devices
  - Better errors when formating storage devices
  - Updated VNC example
  - Port subscriptions package to react
  - Allow branding.css to overide shell css


author: Stef Walter <stefw@redhat.com> - 118-1
changelog:
  - Support PAM conversations on the Login screen
  - Users can create systemd timer jobs
  - Provide default names for volume groups and logical volumes
  - Make Docker graphs work on Debian
  - Only offer to format disks with supported file systems
  - Show all managed NetworkManager devices
  - Use webpack for building Cockpit javascript
  - Cockpit URLs can be proxied with a configured HTTP path prefix
  - Allow Cockpit packages to require a minimum version of Cockpit
  - Translations fixes


author: Stef Walter <stefw@redhat.com> - 0.117-1
changelog:
  - * Add support for network teams
  - * Select translations for complex language names
  - * Don't allow formating extended partitions
  - * Can configure Openshift Registry so anonymous users can pull images


author: Stef Walter <stefw@redhat.com> - 0.116-1
changelog:
  - * Support for volumes when starting a docker container
  - * Support for setting environment variables in a docker container
  - * Fix regressions that broke display of localized text


author: Stef Walter <stefw@redhat.com> - 0.115-1
changelog:
  - * Setup Docker container and image storage through the UI
  - * Use Webpack to build Cockpit UI packages
  - * Update the Cockpit Vagrant development box to use Fedora 24


author: Stef Walter <stefw@redhat.com> - 0.114-1
changelog:
  - .104
  - * Network configuration of the Ethernet MTU
  - * Red Hat Subscriptions can now specify activation keys and orgs
  - * Start integration testing on CentOS
  - * SSH Host keys are show on system page
  - * Machine ID is shown on system page
  - * Show intelligent password score error messages


author: Stef Walter <stefw@redhat.com> - 0.113-1
changelog:
  - * Show timer information for systemd timer jobs
  - * Use 'active-backup' as the default for new network bonds
  - * When changing system time check formats properly
  - * Hide the machine asset tag when no asset exists
  - * Disable the network on/off switch for unknown or unmanaged interfaces
  - * Show full string for system hardware info and operating system name


author: Stef Walter <stefw@redhat.com> - 0.112-1
changelog:
  - * Don't show network interfaces where NM_CONTROLLED=no is set
  - * Add textual fields to container memory and CPU sliders
  - * Display contianer memory and CPU resources on Debian
  - * Disable tuned correctly when clearing a performance profile
  - * Fix SELinux enforcing toggle switch and status


author: Stef Walter <stefw@redhat.com> - 0.111-1
changelog:
  - * Tarball build issue in 0.110 is now fixed
  - * The Containers page layouts have been tweaked
  - * Make the Containers resource limits work again
  - * Registry image now have layers displayed correctly


author: Dominik Perpeet <dperpeet@redhat.com> - 0.109-1
changelog:
  - * API stabilization, structural cleanup
  - * SELinux Troubleshooting: documentation, support latest API
  - * Update Patternfly
  - * Use CockpitLang cookie and Accept-Language for localization
  - * Can now click through to perform administration tasks on Nodes on the Cluster dashboard
  - * Cockpit terminal now supports shells like fish


author: Stef Walter <stefw@redhat.com> - 0.108-1
changelog:
  - * SELinux troubleshooting alerts can now be dismissed
  - * Show SELinux icon for critical alerts
  - * SELinux enforcing mode can be turned off and on with a switch
  - * Kubernetes Nodes are now include charts about usage data
  - * Fix Debian dependency on Docker
  - * Update the look and feel of the toggle switch
  - * Update ListenStream documentation to include address info


author: Stef Walter <stefw@redhat.com> - 0.107-1
changelog:
  - * Display image stream import errors
  - * Add GlusterFS persistent volumes in Cluster dashboard
  - * Show a list of pending persistent volume claims
  - * jQuery Flot library is no longer part of the base1 package
  - * Fix Content-Security-Policy issues with jQuery Flot


author: Stef Walter <stefw@redhat.com> - 0.106-1
changelog:
  - * Add namespaces to cockpit CSS classes
  - * Display container image layers in a simpler graph
  - * Hide actions in Cluster projects listing that are not accessible


author: Stef Walter <stefw@redhat.com> - 0.105-1
changelog:
  - * Strict Content-Security-Policy in all shipped components of Cockpit
  - * Can now add and remove Openshift users to and from groups
  - * Add timeout setting for Cockpit authentication
  - * Registry interface now has checkbox for mirroring from insecure registries
  - * Kubernetes dashboard now allows deletion of Nodes


author: Stef Walter <stefw@redhat.com> - 0.104-1
changelog:
  - * Show errors correctly when deleting or modifying user accounts
  - * Add support for iSCSI cluster volumes
  - * Strict Content-Security-Policy in the dashboard, sosreport and realmd code
  - * Better list expansion and navigation behavior across Cockpit
  - * Don't show 'Computer OU' field when leaving a domain
  - * Remove usage of bootstrap-select
  - * Show errors properly in performance profile dialog
  - * Fix Cluster sidebar to react to window size
  - * Allow specifying specific tags in registry image streams
  - * Make registry project access policy more visible


author: Stef Walter <stefw@redhat.com> - 0.103-1
changelog:
  - * Strict Content-Security-Policy for subscriptions component
  - * New dialog for Kubernetes connection configuration
  - * Release to a cockpit-project Ubuntu PPA
  - * Remove jQuery usage from cockpit.js
  - * New styling for cluster dashboard
  - * Fix build issue on MIPS


author: Stef Walter <stefw@redhat.com> - 0.102-1
changelog:
  - * Can configure Docker restart policy for new containers
  - * Use a single dialog for creating logical volumes
  - * Package and test the storage UI on Debian
  - * Don't offer 'Computer OU' when joining IPA domains
  - * Don't distribute jshint build dependency due to its non-free license


author: Stef Walter <stefw@redhat.com> - 0.95-1
changelog:
  - * iSCSI initiator support on the storage page
  - * Page browser title now uses on operating system name
  - * Better look when Cockpit disconnects from the server
  - * Avoid use of NFS in the Vagrantfile
  - * Expand 'Tools' menu when navigating to one of its items
  - * Set a default $PATH in cockpit-bridge


author: Stef Walter <stefw@redhat.com> - 0.94-1
changelog:
  - * Handle interruptions during cockpit-ws start while reading from /dev/urandom
  - * Remove BIOS display from Server Summary page
  - * Support tuned descriptions
  - * Fix Content-Security-Policy in example manifest.json files


author: Stef Walter <stefw@redhat.com> - 0.93-1
changelog:
  - * Set system performance profile via tuned
  - * Support for WebSocket client in cockpit-bridge
  - * Support using Nulecule with Openshift
  - * Actually exit cockpit-ws when it's idle


author: Stef Walter <stefw@redhat.com> - 0.92-1
changelog:
  - * OAuth login support
  - * Update Patternfly
  - * Log to stderr when no journal
  - * Make sosreport work on RHEL and Atomic


author: Stef Walter <stefw@redhat.com> - 0.91-1
changelog:
  - * Fix computing of graph samples on 32-bit OS
  - * Distribute licenses of included components
  - * Distribute development dependencies
  - * Support 'make clean' properly in the tarball


author: Stef Walter <stefw@redhat.com> - 0.90-1
changelog:
  - * Fix Content-Security-Policy which broke loading in certain situations
  - * Deal correctly with failures trying to join unsupported domains
  - * Add documentation about Cockpit startup
  - * Better data in storage usage graphs
  - * Start creating debian source packages


author: Stef Walter <stefw@redhat.com> - 0.89-1
changelog:
  - * Start routine testing of Cockpit on Debian Unstable
  - * Make the config file case insensitive
  - * Reorder graphs on server summary page
  - * Don't suggest syncing users when adding a machine to dashboard
  - * Enable weak dependencies for F24+
  - * Show correct data in per interface network graphs
  - * Fix the Vagrantfile to pull in latest Cockpit
  - * Add Content-Security-Policy header support


author: Stef Walter <stefw@redhat.com> - 0.88-1
changelog:
  - * User interface for OSTree upgrades and rollbacks
  - * General reusable purpose angular kubernetes client code
  - * Allow custom login scripts for handling authentication
  - * A specific dashboards can now be the default destination after login
  - * Kill ssh-agent correctly when launched by cockpit-bridge
  - * Add a new cockpit-stub bridge for non-local access


author: Stef Walter <stefw@redhat.com> - 0.87-1
changelog:
  - * Fix login on Windows, don't prompt for additional auth
  - * Use the machine host name in the default self-signed certificate
  - * Cockpit release tarballs are now distributed in tar-ustar format
  - * Allow overriding package manifests
  - * Testing and build fixes


author: Stef Walter <stefw@redhat.com> - 0.86-1
changelog:
  - * SOS report UI page
  - * Simpler way for contributors to build cockpit RPMs
  - * Infrastructure for implementing downloads


author: Stef Walter <stefw@redhat.com> - 0.84-1
changelog:
  - * Add a cockpit manual page
  - * Set correct SELinux context for certificates
  - * Remove custom SELinux policy
  - * Testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.83-1
changelog:
  - * Fix NTP server configuration bugs
  - * Kubernetes dashboard topology icons don't leave the view
  - * Kubernetes dashboard uses shared container-terminal component
  - * Fix race when adding machine to Cockpit dashboard
  - * Updated documentation for running new distributed tests
  - * Lots of other bug and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.82-1
changelog:
  - * Support certificate chains properly in cockpit-ws
  - * Rename the default self-signed certificate
  - * Implement distributed integration testing


author: Stef Walter <stefw@redhat.com> - 0.81-1
changelog:
  - * Allow configuring NTP servers when used with timesyncd
  - * Fix regression in network configuration switches
  - * Make the various graphs look better
  - * Openshift Routes and Deployment Configs can be removed
  - * Run integration tests using TAP "test anything protocol"
  - * Lots of other bug fixes and cleanup


author: Stef Walter <stefw@redhat.com> - 0.80-1
changelog:
  - * UI for loading, viewing, changing Private SSH Keys
  - * Always start an ssh-agent in the cockpit login session
  - * New listing panel designs
  - * Lots of testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.79-1
changelog:
  - * Vagrant file for Cockpit development
  - * Use libvirt for testing
  - * Display only last lines of Kubernetes container logs


author: Stef Walter <stefw@redhat.com> - 0.78-1
changelog:
  - * Fix extreme CPU usage issue in 0.77 release
  - * Fix compatibility with older releases
  - * Offer to activate multipathd for multipath disks
  - * Guide now contains insight into feature internals
  - * Lots of other minor bug fixes


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 0.77-1.1
changelog:
  - disable FMA support to get it pass all tests on secondary architectures
  - removed duplicated "global rel 1"


author: Stef Walter <stefw@redhat.com> - 0.77-1
changelog:
  - * Work better with multipath storage
  - * Deletion of kubernetes objects
  - * Cleaner URLs in the bookmark bar
  - * Show a warning when adding too many machines
  - * Make authentication work when embedding Cockpit
  - * Complete componentizing Cockpit


author: Stef Walter <stefw@redhat.com> - 0.76-1
changelog:
  - * Fix displaying of network bonds
  - * Better Kubernetes filter bar, shell access
  - * Show some Openshift related objects
  - * Use patternfly v2.2


author: petervo <petervo@redhat.com> - 0.75-1
changelog:
  - New design for kubernetes listing pages
  - Namespace filter for kubernetes
  - Pretty http error pages
  - Lots of bugs, build and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.74-1
changelog:
  - * Display an intelligent message when password auth is not possible
  - * Correctly start terminal in home directory
  - * NetworkManager code is in a separate package
  - * PCP is an optional build dependency
  - * Lots of bugs, build and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.73-1
changelog:
  - * Kubernetes UI can connect to non-local API server
  - * Automate Web Service container build on Docker Hub
  - * Add validation options to TLS client connections
  - * PAM pam_ssh_add.so module for loading SSH keys based on login password
  - * Build, testing and other fixes


author: Peter <petervo@redhat.com> - 0.63-1
changelog:
  - Update to 0.63 release
  - Remove cockpit-docker for armv7hl while docker
    packages are being fixed


author: Peter <petervo@redhat.com> - 0.49-1
changelog:
  - Update to 0.49 release.
  - cockpitd was renamed to cockpit-wrapper the cockpit-daemon
    package was removed and is now installed with the
    cockpit-bridge package.


author: Stef Walter <stefw@redhat.com> - 0.27-1
changelog:
  - Update to 0.27 release
  - Don't create cockpit-*-admin groups rhbz#1145135
  - Fix user management for non-root users rhbz#1140562
  - Fix 'out of memory' error during ssh auth rhbz#1142282


author: Stef Walter <stefw@redhat.com> - 0.26-1
changelog:
  - Update to 0.26 release
  - Can see disk usage on storage page rhbz#1142459
  - Better order for lists of block devices rhbz#1142443
  - Setting container memory limit fixed rhbz#1142362
  - Can create storage volume of maximum capacity rhbz#1142259
  - Fix RAID device Bitmap enable/disable error rhbz#1142248
  - Docker page connects to right machine rhbz#1142229
  - Clear the format dialog label correctly rhbz#1142228
  - No 'Drop Privileges' item in menu for root rhbz#1142197
  - Don't flash 'Server has closed Connection on logout rhbz#1142175
  - Non-root users can manipulate user accounts rhbz#1142154
  - Fix strange error message when editing user accounts rhbz#1142154


author: Stef Walter <stefw@redhat.com> 0.18-1
changelog:
  - Update to 0.18 release
  - Add glib-networking build requirement
  - Let selinux-policy-targetted distribute selinux policy


author: Patrick Uiterwijk (LOCAL) <puiterwijk@redhat.com> - 0.2-0.3.5e1faadgit
changelog:
  - Fixed license tag
  - Updated to new FSF address upstream
  - Removing libgsystem before build
  - Now claiming specific manpages
  - Made the config files noreplace
  - Removed the test assets
  - Put the web assets in a subpackage


author: Kamil Dudka <kdudka@redhat.com> - 5.5-1
changelog:
  - update to latest upstream release, which fixes the following vulnerabilities:
      CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
      CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
      CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()


author: Kamil Dudka <kdudka@redhat.com> - 5.4.2-7
changelog:
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)


author: Kamil Dudka <kdudka@redhat.com> - 5.3.1-12
changelog:
  - use %make_install instead of %makeinstall, which is deprecated
  - modernize spec file (Group tag, %clean, %defattr)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 5.3.1-4
changelog:
  - Add build deps on gdbm-devel and pcre-devel.  Pass --enable-pcre to
    configure.  These should ensure that the pcre and gdbm modules are built.
    (#1438009)


author: Kamil Dudka <kdudka@redhat.com> - 5.3-2
changelog:
  - drop zsh-4.3.6-8bit-prompts.patch which was superseeded by an upstream patch
    (see http://www.zsh.org/mla/users/2007/msg00468.html for details)
  - drop undocumented zsh-test-C02-dev_fd-mock.patch


author: Kamil Dudka <kdudka@redhat.com> - 5.0.7-7
changelog:
  - fix SIGSEGV when handling heredocs and keyboard interrupt (#972624)
  - queue signals when manipulating global state to avoid deadlock


author: Kamil Dudka <kdudka@redhat.com> - 5.0.7-5
changelog:
  - suppress a warning about closing an already closed file descriptor (#1184002)
  - improve handling of NULL in the 'cd' built-in (#1183238)


author: Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.5-4
changelog:
  - fix FTBFS issue (RHBZ#1106713)
  - remove individual _bindir setting; install to /usr/bin/ (RHBZ#1034060)
  - require info package instead of /sbin/install-info binary


author: Toshio Kuratomi <toshio@fedoraproject.org> - 4.3.10-6
changelog:
  - Rebuild for FTBFS https://bugzilla.redhat.com/show_bug.cgi?id=631197
  - Remove deprecated PreReq, the packages aren't needed at runtime and they're
    already in Requires(post,preun,etc): lines.


author: Nicola Sella <nsella@redhat.com> - 3.4.0-3
changelog:
  - Patch: Add support for setting a platform module ID
  - Rename "update" command to "upgrade", "update" remain as compatibility alias


author: Ales Matej <amatej@redhat.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Fix: do not download metadata in remove command
  - Add reinstall command
  - Add "--setopt=tsflags=test" support
  - Add "--setopt=reposdir=<path>" and "--setopt=varsdir=<path1>,<path2>,..." support
  - Add "--config=<path_to_config_file>" support
  - Add "--disableplugin", "--enableplugin" support (RhBug:1781126)
  - Add "--noplugins" support
  - Add "--setopt=cachedir=<path_to_cache_directory>" support
  - Add "--installroot=<path_to_installroot_directory>" support
  - Add "--refresh" support
  - Support "install_weak_deps" conf option and "--setopt=install_weak_deps=0/1"
  - Respect reposdir from conf file
  - Respect "metadata_expire" conf file opton (RhBug:1771147)
  - [repolist] Print padding spaces only if output is terminal


author: EL Errata <el-errata_ww@oracle.com> - 8.4-0.6.0.1
changelog:
  - Remove package eula
  - Remove Provides: system-release as this is provided by oraclelinux-release.
  - Set the epoch to prevent upgrade conflict with OL7 version [Orabug: 20681742]
  - Remove content provided by oraclelinux-release package


author: Leon Kang <lekang@redhat.com> - 8.2-0.9.el8
changelog:
  - enable nvmefc-boot-connections.service in
    /usr/lib/systemd/system-preset/90-default.preset
  - Resolves: RCM-77224


author: Josh Boyer <jwboyer@redhat.com> - 8.2-0.8.el8
changelog:
  - Allow stateless system usage of os-release (RhBug: 1766754)
  - Based on a contribution from Neal Gompa


author: Pavel Niahodkin <pniahodk@redhat.com> - 8.0-0.19
changelog:
  - Change RHEL-8 systemd defaults in order to address differences between fedora-release and redhat-release (RhBug: 1572550)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.4.46-2
changelog:
  - Perl 5.28 rebuild
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-13
changelog:
  - fix: openldap does not use Fedora build flags
    + makes use of redhat-rpm-config package
  - Drop superfluous back-sql linking patch


author: Matus Honek <mhonek@redhat.com> - 2.4.45-12
changelog:
  - MozNSS Compat. Layer: fix: libldap tlsmc continues even after it fails to extract CA certificates (#1550110)


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.4.45-9
changelog:
  - Escape macros in %changelog
  - Disable TLSMC in F29+
  - Remove obsolete Group tag
  - Don't call ldconfig in servers subpackage
  - Switch to %ldconfig_scriptlets
  - Remove unneeded Requires(post): systemd-sysv, chkconfig
  - Switch to %systemd_requires
  - Change BuildRequires: systemd-units to systemd


author: Matus Honek <mhonek@redhat.com> - 2.4.45-7
changelog:
  - MozNSS Compat. Layer fixes (#1400570)
    - fix incorrect parsing of CACertDir (orig. #1533955)
    - fix PIN disclaimer not always shown (orig. #1516409)
    - fix recursive directory deletion (orig. #1516409)
    - Ensure consistency of a PEM dir before usage (orig. #1516409)
      + Warn just before use of a PIN about key file extraction
    - Enable usage of NSS DB with PEM cert/key (orig. #1525485)
      + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-5
changelog:
  - Fix issues in MozNSS compatibility layer (#1400570)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.45-1
changelog:
  - Rebase to version 2.4.45 (#1458081)
    * fixes CVE-2017-9287 (#1456712, #1456713)
  - Update the 'sources' file with new SHA512 hashes


author: Matus Honek <mhonek@redhat.com> - 2.4.44-9
changelog:
  - NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS (#1435692)
  - NSS: Rearrange ciphers-, parsing-, and protocol-related patches (#1435692)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-3
changelog:
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1375432)
  - fix: slapd should start after network-online.service (#1336487)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-7
changelog:
  - remove tmpfiles config since it's no longer needed
  - fix invalid ldif
  - simplify checking for missing server configuration


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-6
changelog:
  - remove openldap-fedora-systemd.patch
  - remove openldap-ldaprc-currentdir.patch
  - remove openldap-userconfig-setgid.patch
  - remove openldap-syncrepl-unset-tls-options.patch
  - remove unneeded configure flags, disable sql backend and aci
  - make mdb default after a new installation
  - remove pid file and args file
  - renumber patches and sources


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-5
changelog:
  - harden the build
  - improve check_password
  - provide an unversioned symlink to check_password.so.1.1


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - remove redundant sysconfig-related stuff
  - add documentation reference to service file
  - alias slapd.service as openldap.service


author: Jan Synáček <jsynacek@redhat.com> - 2.4.37-1
changelog:
  - new upstream release (#1023916)
  - fix: missing a linefeed at the end of file /etc/openldap/ldap.conf (#1019836)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.15-1
changelog:
  - Rebase to 0.3.15
  - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332
  resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414


author: Tomáš Mráz <tmraz@redhat.com> 0.3.13-4
changelog:
  - Split libtspi to a trousers-lib subpackage (#1225062)
  - Fix FTBFS with current gcc (drop inline keyword when bogus)


author: Steve Grubb <sgrubb@redhat.com> 0.3.11.2-3
changelog:
  - Fix crash when linking libgnutls and libmysqlclient (#1069079)
  - Don't order tcsd after syslog.target (#1055198)


author: Milos Jakubicek <xjakub@fi.muni.cz> - 0.3.1-17
changelog:
  - Do not overuse macros.
  - Removed unnecessary file requirements on chkconfig, ldconfig and service,
    now requiring the initscripts and chkconfig packages.


author: David Woodhouse <David.Woodhouse@intel.com> - 0.3.1-11
changelog:
  - Work around SELinux namespace pollution (#464037)
  - Use SO_REUSEADDR
  - Use TPM emulator if it's available and no hardware is


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-10
changelog:
  - Also rename python-slip-dbus and python-slip-gtk to python2-*
  - Add missing %python_provide macros
  - Use new python2- names in dependencies


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-8
changelog:
  - Python 2 binary package renamed to python2-slip
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nils Philippsen <nils@redhat.com> - 0.6.2-1
changelog:
  - dbus: listen less aggressively on NameOwnerChanged signals
  - use GLib instead of GObject for wrapper functions (#1202554)


author: Nils Philippsen <nils@redhat.com> - 0.6.0-1
changelog:
  - version 0.6.0
    - support Python 3.x
    - fix util.hookable hashing, add Hookable.add_hook_hookable()
  - remove our own age-old python directory macros
  - fix changelog date


author: Nils Philippsen <nils@redhat.com> - 0.4.0-1
changelog:
  - version 0.4.0:
    - get rid of (ancient) PolicyKit-0.x support
    - add basic (experimental, unstable) dbus introspection support
    - learn to cope with polkitd being restarted


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
  - allow service object methods to be called locally
  - preserve signature, docstrings, etc. of decorated methods


author: Nils Philippsen <nils@redhat.com> - 0.2.17-1
changelog:
  - fix default timeouts of None in bus objects (#716620)
  - reduce proxy method calling overhead a bit more


author: Nils Philippsen <nils@redhat.com> - 0.2.12-1
changelog:
  - use os.path.abspath instead of .realpath (#615819)
  - use tempfile.mkstemp
  - don't use hardcoded file ext separator


author: Nils Philippsen <nphilipp@redhat.com> - 0.1.6
changelog:
  - move proxy.polkit_enable to polkit.enable_proxy
  - rename polkit.NotAuthorized to NotAuthorizedException, polkit.auth_required
    to require_auth


author: Nils Philippsen <nphilipp@redhat.com> - 0.1.4
changelog:
  - implement PolicyKit convenience functions and decorators
  - rename slip.dbus.service.TimeoutObject -> slip.dbus.service.Object


author: Yanko Kaneti <yaneti@declera.com> - 20150731-1
changelog:
  - The latest revision - 20150731
  - Move to the new upstream filename. Install a compat symlink for now


author: Yanko Kaneti <yaneti@declera.com> - 20141230-1
changelog:
  - Initial version for review - 20141124-1
  - Today's revision. Add license file - 20141218-1
  - Today's revision - 20141223-1
  - Today's revision - 20141230-1


author: Abhi Das <adas@redhat.com> - 4.3-20
changelog:
  - rhbz#1895017 - unsquashfs does not preserve file capabilities
    rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally
    Resolves: rhbz#1895017, rhbz#1754815


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Bruno Wolff III <bruno@wolff.to> 4.3-6
changelog:
  - Apply a couple of upstream patches.
  - Fixes issue issue with too much memory use under PAE kernels


author: Bruno Wolff III <bruno@wolff.to> 4.3-1
changelog:
  - Update to real 4.3 release
  - Added support for lz4 since the stable snapshot
  - Added support for alternate zlib compression strategies


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.8.gitca6a1c90
changelog:
  - Latest pre 4.3 snapshot
  - New option to display compression options used
  - Some error message improvements


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.1.git0be606be
changelog:
  - Pre-release of 4.3 to get early testing
  - This update includes a bit of internal code infrastructure changes
  - There are lots of fixes to better handle bad data
  - The final release is expected sometime in December
  - Until the release only the README doc file is available


author: Bruno Wolff III <bruno@wolff.to> - 4.2-1
changelog:
  - 4.2 is released.
  - Bugfix for bad data causing crash.
  - Include doc files added for release.
  - Big endian patch is now upstream.
  - Buildroot tag isn't needed any more.
  - We can now specify CFLAGS on the make call.
  - Compressor options are now passed with the make call.


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.2.20101231
changelog:
  - Pull latest upstream snapshot
  - Includes check for matching compression type when adding to an existing image
  - Sample cvs command now includes timezone and specifies when on the date to use for the snapshot


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.1.20101223
changelog:
  - Switch to 4.2 development snapshot to get new XZ support
  - LZMA and XZ (LZMA2) support are now different


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.4.20100827
changelog:
  - Rebase to latest upstream.
  - The main reason is to pick up a fix for large xattr similar to the large inode fix. This doesn't need to get backported as 4.0 doesn't have xattr support.
  - An option was added to build without xattr support.
  - Various source cleanups have been done as well.


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.3.20100803
changelog:
  - Rebase to latest upstream
  - Prevent warning message for xattr for virtual directory
  - Fix issue with large inodes - BZ 619020


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.1.20100607
changelog:
  - Rebase to 4.1 prerelease with xz wrapper
  - Provides lzma compression as an option.
  - squashfs-fix-unsquashing-v3.patch is part of the 4.1 prerelease


author: Russell Cattelan <cattelan@thebarn.com> - 2.2.38-3
changelog:
  - Fix the /usr/sbin sym links to relative links
  - Add the Distribution tag
  - Add ncurses-devel to buildrequires


author: Russell Cattelan <cattelan@thebarn.com> - 2.2.38-2
changelog:
  - install removes the makefile installed version of the docs
  	package the docs based in the version specfic directory


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-9
changelog:
  - Fix the "extra tokens at end of #ifdef directive" warning:
    579f2702 "bpf: exclude bit fields from the check".


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-8
changelog:
  - Fix expected alignment for IPC tests (#1795251):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".
  - Update tests-m32/looping_threads.test and tests-mx32/looping_threads.test
    in 0025-tests-check-tracing-of-looping-threads.patch.
  - Update the bpf syscall decoder:
    d6c71dd0 "Fix preprocessor indentation",
    cabd6955 "bpf: print struct bpf_prog_info.gpl_compatible",
    14a9b6ca "bpf: add support for btf_* fields in BPF_MAP_CREATE",
    27bd13d3 "bpf: add support for btf_* fields in struct bpf_map_info",
    d1f90bcd "bpf: add support for *jited_ksyms and *jited_func_lens fields
             in struct bpf_prog_info", and
    940fe50f "bpf: add support for new twelve fields in struct bpf_prog_info".
    c661605b "tests: robustify bpf-obj_get_info_by_fd test against future kernels"


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-7
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790053):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Update tests-m32/ioctl_evdev.c and tests-mx32/ioctl_evdev.c
    in 0002-evdev-fix-decoding-of-EVIOCGBIT-0.patch.
  - Update tests-m32/Makefile.in and tests-mx32/Makefile.in
    in 0032-tests-check-decoding-of-successful-evdev-ioctl.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747214).
  - Include commit v4.26~65 "s390x: beautify sthyi data tail prints" (#1747514).
  - Include upstream patches that fix issues reported by covscan (#1747526):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Sync up thread handling unfairness fix with the upstream version.
  - Fix "xlat_idx: Unexpected xlat value 0 at index ..." messages (#1660759).
  - Remove "ptrace(SYSCALL): No such process" messages (#1662936).
  - Wire up rseq and kexec_file_load on aarch64 (#1676045).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Add transition for strace32 package pn those architectures that
    provided it in RHEL 7 (ppc64 and s390x).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.23-4
changelog:
  - Fix tests build with fresh glibc that now provides struct statx in sys/stat.h.
  - Resolves #1611749.


author: Dmitry V. Levin <ldv@altlinux.org> - 4.14-1
changelog:
  - v4.13 -> v4.14:
    + added printing of the mode argument of open and openat syscalls
      when O_TMPFILE flag is set (#1377846).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.11.0.163.9720-1
changelog:
  - New upstream snapshot v4.11-163-g972018f:
    + fixed decoding of syscalls unknown to the kernel on s390/s390x (#1298294).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.11-1
changelog:
  - New upstream release:
    + print nanoseconds along with seconds in stat family syscalls (#1251176).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.9-1
changelog:
  - New upstream release:
    + fixed build when <sys/ptrace.h> and <linux/ptrace.h> conflict (#993384);
    + updated CLOCK_* constants (#1088455);
    + enabled ppc64le support (#1122323);
    + fixed attach to a process on ppc64le (#1129569).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Bohuslav Kabrda <bkabrda@redhat.com> - 5.0.5-1
changelog:
  - Updated to 5.0.5 (new upstream "with the blessing of original creator")
  - Introduced python3-configobj subpackage
  - Changed upstream url to documentation written by new upstream


author: Luke Macken <lmacken@redhat.com> - 4.7.0-2
changelog:
  - Merge a bunch of changes from Gareth Armstrong <gareth.armstrong@hp.com>
      - The src zip file should come either from http://www.voidspace.org.uk/
        downloads/ or http://code.google.com/p/configobj/ as the PyPI tarball is
        not complete.  No docs and no test code.
      - Added docs
      - Remove BR on python-setuptools-devel


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.10.1-3
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz #1853168)
  - Added CI gating tests (bz #1682555)
  - Resolves: bz #1682555, #1853168


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Joe Orton <jorton@redhat.com> 1.95.8-10
changelog:
  - remove trailing dot in Summary (#225742)
  - use preferred BuildRoot per packaging guidelines (#225742)


author: Joe Orton <jorton@redhat.com> 1.95.8-9
changelog:
  - regenerate configure/libtool correctly (#199361)
  - strip DSP files from examples (#186889)
  - fix expat.h compilation with g++ -pedantic (#190244)


author: Marek Kasik <mkasik@redhat.com> - 2.5.3-4
changelog:
  - Don't return flags of privately used libraries when
  - calling "freetype-config --libs"
  - Resolves: #1079302


author: Marek Kasik <mkasik@redhat.com> - 2.5.0-1
changelog:
  - Update to 2.5.0
  - Backport changes from freetype-2.5.0.1
  -   (ft2demos-2.5.0.1 and freetype-doc-2.5.0.1 were not released)


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-3
changelog:
  - Fix emboldening:
      - split out MSB function
      - fix integer overflows
      - fix broken emboldening at small sizes
  - Resolves: #891457


author: Marek Kasik <mkasik@redhat.com> 2.4.5-2
changelog:
  - Add freetype-2.4.5-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723469


author: Marek Kasik <mkasik@redhat.com> 2.4.4-3
changelog:
  - Enable bytecode interpreter (#547532).
  - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.


author: Marek Kasik <mkasik@redhat.com> 2.4.3-2
changelog:
  - Add freetype-2.4.3-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651764


author: Behdad Esfahbod <behdad@redhat.com> 2.3.11-1
changelog:
  - Update to 2.3.11.
  - Add freetype-2.3.11-more-demos.patch
  - New demo programs ftmemchk, ftpatchk, and fttimer


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2
changelog:
  - Add Provides: freetype-bytecode and freetype-subpixel if built
    with those options.
  - Resolves: #155210


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3
changelog:
  - Add full source URL to Source lines.
  - Add docs to main and devel package.
  - rpmlint is happy now.
  - Resolves: #225770


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2
changelog:
  - Change spec file to permit enabling bytecode-interpreter and
    subpixel-rendering without editing spec file.
  - Resolves: 249986


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1
changelog:
  - Update to 2.3.0.
  - Drop upstream patches.
  - Drop -fno-strict-aliasing, it should just work.
  - Fix typo in ftconfig.h generation.


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16
changelog:
  - Backport binary-search fixes from HEAD
  - Add freetype-2.2.1-ttcmap.patch
  - Resolves: #208734

  - Fix rendering issue with some Asian fonts.
  - Add freetype-2.2.1-fix-get-orientation.patch
  - Resolves: #207261

  - Copy non-X demos even if not compiling with_xfree86.

  - Add freetype-2.2.1-zero-item-size.patch, to fix crasher.
  - Resolves #214048

  - Add X11_PATH=/usr to "make"s, to find modern X.
  - Resolves #212199


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10
changelog:
  - Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841
  - Add freetype-2.2.1-memcpy-fix.patch


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1
changelog:
  - Update to 2.2.1
  - Remove FreeType 1, to move to extras
  - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid
  - Enable modules gxvalid and otvalid


author: Owen Taylor <otaylor@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to 2.1.9
  - Since we are just using automake for aclocal, use it unversioned,
    instead of specifying 1.4.


author: Owen Taylor <otaylor@redhat.com> 2.1.7-4
changelog:
  - Add patch from freetype CVS to fix problem with eexec (#117743)
  - Add freetype-devel to buildrequires and -devel requires
    (Maxim Dzumanenko, #111108)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-3
changelog:
  - Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and
    SIGILL crashes in mkfontscale which have been traced into freetype and seem
    to be caused by aliasing issues in freetype macros (#118021)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow compiling without the demos as that requires XFree86
    (this allows bootstrapping XFree86 on new archs)


author: Owen Taylor <otaylor@redhat.com> 2.1.4-1
changelog:
  - Version 2.1.4
  - Relibtoolize to get deplibs right for x86_64
  - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781)
  - Relativize absolute symlinks to fix the -debuginfo package 
    (#83521, Mike Harris)


author: Elliot Lee <sopwith@redhat.com> 2.1.3-7
changelog:
  - Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries 
    on ppc64.
  - Use _smp_mflags (for freetype 2.x only)


author: Owen Taylor <otaylor@redhat.com> 2.1.3-4
changelog:
  - Make FreeType robust against corrupt fonts with recursive composite 
    glyphs (#74782, James Antill)


author: Mike A. Harris <mharris@redhat.com> 2.1.3-2
changelog:
  - Update to freetype 2.1.3
  - Removed ttmkfdir sources and patches, as they have been moved from the
    freetype packaging to XFree86 packaging, and now to the ttmkfdir package
  - Removed patches that are now included in 2.1.3:
    freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch,
    freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch,
    freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch,
    freetype-2.1.2-leftright.patch
  - Conditionalized inclusion of freetype 1.4 library.


author: Mike A. Harris <mharris@redhat.com> 2.1.2-10
changelog:
  - Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS
  - Cleaned up various _foodir macros throughtout specfile
  - Removed with_ttmkfdir build option as it is way obsolete


author: Mike A. Harris <mharris@redhat.com> 2.0.8-2
changelog:
  - Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7
    on the freetype website.  Munged specfile to deal with the problem by using
    {oldversion} instead of version where appropriate.  <sigh>


author: Tim Powers <timp@redhat.com> 2.0.6-3
changelog:
  - bumping release so that we don't collide with another build of
    freetype, make sure to change the release requirement in the XFree86
    package


author: Mike A. Harris <mharris@redhat.com> 2.0.6-2
changelog:
  - Made ttmkfdir inclusion conditional, and set up a define to include
    ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new
    XFree86-font-utils package.


author: Elliot Lee <sopwith@redhat.com> 2.0.5-3
changelog:
  - Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating
    font list). (ttmkfdir-iso10646.patch)
  - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch)
  - Undo fix for #24253, assume compiler was fixed.


author: Mike A. Harris <mharris@redhat.com> 2.0.4-2
changelog:
  - Added new subpackage freetype-demos, added demos to build
  - Disabled ftdump, ftlint in utils package favoring the newer utils in
    demos package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4
changelog:
  - Add ft2build.h to -devel package, since it's included by all other
    freetype headers, the package is useless without it


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3
changelog:
  - Change "Requires: freetype = name/ver" to "freetype = version/release",
    and move the requirements to the subpackages.


author: Mike A. Harris <mharris@redhat.com> 2.0.3-1
changelog:
  - Updated to Freetype 2.0.3, minor specfile tweaks.
  - Freetype2 docs are is in a separate tarball now. Integrated it.
  - Built in new environment.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - libtool is used to build libttf, so use libtool to link ttmkfdir with it
  - fixup a paths for a couple of missing docs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin
  - freetype utilities moved to subpkg, X dependency removed from main pkg
  - libttf.so symlink moved to devel pkg


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - call libtoolize to sanitize config.sub and get ARM support
  - dispoze of the patch (not necessary anymore)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-4
changelog:
  - Patch to build with system sqlite 3.3.x (#183530).
  - Patch to avoid type information segv (#187873).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-3
changelog:
  - DBD::SQLite fails to build with the current FC-5 sqlite version (3.3.3);
    see bugzilla entry #183530.
    Forcing package rebuild with the included version of sqlite (3.2.7).


author: John Eckersberg <jeckersb@redhat.com> - 0.1.5-1
changelog:
  - New upstream release 0.1.5 (bz1061087)
  - Removed patches for CVE-2013-6393; they are included in 0.1.5
    upstream


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John D. Ramsdell <ramsdell@mitre.org> - 1.0-6
changelog:
  - Changed URL to SourceForge development site.
  - Changed source to NEU site.
  - Quoted % references in macros within changelog.
  - README: Note tpm-tools only needed to take ownership of a TPM.


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Miroslav Lichvar <mlichvar@redhat.com> 14:1.1.1-3
changelog:
  - ignore /sys/net/dev files on ENODEV (#693943)
  - drop ppp patch
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 14:0.9.5-1
changelog:
  - split from tcpdump package (#193657)
  - update to 0.9.5
  - don't package static library
  - maintain soname


author: Colin Walters <walters@redhat.com> - 2.7.1-5
changelog:
  - Test for /run/systemd to detect systemd state rather than invoking
    rpm in % pre - it is not really supported by rpm.


author: jchaloup <jchaloup@redhat.com> - 2.7.1-3
changelog:
  - switching back to crontabs
    resolves: #1177993
    resolves: #1171450
  - rpm verify reports for /var/cache/man
    resolves: #1173496


author: jchaloup <jchaloup@redhat.com> - 2.7.0.2-2
changelog:
  - replacing cron with systemd.timer
    resolves: #1148559
  - adding zsoelim to {_libexecdir}/man-db/zsoelim
    related: #1145493


author: jchaloup <jchaloup@redhat.com> - 2.6.7.1-3
changelog:
  - resolves: #1110274
    Add systemd tmpfiles snippet to clean up old cat files after (upstream patch)


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 2.6.5-3
changelog:
  - Add a missing requirement on crontabs to spec file
  - Mark the cron job as config(noreplace)
  - Fix RHBZ#989077


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-1
changelog:
  - resolves: #858577
    updated to 2.6.3
  - cleaned .spec file
  - resolves: #855632
    fixed SIGABRT crash
  - adds support for man-pages-overrides


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.2-1
changelog:
  - resolves: #833312
    update to 2.6.2
  - resolves: #657409
    fixed warning when invoking col by the mandb program in cron
  - resolves: #829935
    enabled support for man pages compressed with lzip
  - resolves: #821778
    added virtual provides for bundled gnulib library
  - resolves: #824825
    apropos returns correct exit code for invalid man page


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.1-2
changelog:
  - resolves: #677669
    added support for wildcards in path
  - resolves: #693458
    fixed error with .so links


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.1-1
changelog:
  - resolves: #790771
    update to 2.6.1
  - resolves: #806086
    removed hard-dependency on cron, update man db after install or update


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.0.2-3
changelog:
  - resolves: #702904
    fixed double free or corruption issue
  - resolves: #739207
    require groff-base instead of groff
  - rebuilt for gdbm-1.9.1-1


author: Charalampos Stratakis <cstratak@redhat.com> - 0.6-10
changelog:
  - SPEC file cleanup
  - Added licence tag
  - Removal of old and unneeded macros
  - Use of newest python macros
  - Removed Python 2 dependency
  - Added patch for Python 3 build


author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Xiao Ni <xni@redhat.com> - 4.1.12
changelog:
  - Update mdadm to latest upstream && change tmpfiles directory && correct changelog date
  - Resolves rhbz#1800521 and rhbz#1657265


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-2
changelog:
  - Fix i686 build error
  - Fix problem where it was not possible to stop an IMSM array during reshape
  - Fix Degraded Raid1 array becomes inactive after rebooting
  - Fix problem with raid0 arrays not being detected by Anaconda due to it
    setting MALLOC_PERTURB_
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Fix problem with mdadm large device names overflowing an internal buffer
  - Fix problem about reshape stuck at beginning
  - Resolves bz1303380


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.1-3
changelog:
  - Improve error message for "--grow -n2" when used on Linear arrays
  - Fix problem where explicitly specified arrays were not assembled if
    they were disabled in /etc/mdadm.conf
  - Resolves bz1122146, bz1124310


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.1-2
changelog:
  - Revert 'change' event support fix from 3.3.1-1 - this requires a lot
    more testing if we are to go there.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-6
changelog:
  - Revert changes introduced in 3.3-5, they were based on incorrect
    recommendations.
  - Resolves bz1053176


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-5
changelog:
  - Do not create /var/run/mdadm in the rpm file, since this is sitting on
    tmpfs and is created by tmpfiles during boot.
  - Resolves bz1053176


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-4
changelog:
  - Fix byteswap macros return types to allow for building on big endian
    architectures again.
  - Resolves bz1015494


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-3
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015521


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-21
changelog:
  - Fix pointless rpmbuild noise over mismatching date info
  - Remove Fedora 17 support
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape bz956053 (f18), bz956056 (f19)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-19
changelog:
  - Fix problem where  rebuild of IMSM RAID5 volume started in OROM,
    does not proceed in OS 
  - Resolves bz956021 (f18), bz956026 (f17), bz956031 (f19)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-18
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz948745


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-16
changelog:
  - Rely on rpm macros to place files in correct directories, and match /usr
    move
  - Resolves bz955248


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-14
changelog:
  - Resync with final version of upstream patches for launching mdmon
    via systemctl. Require dracut 024-025 or later to match.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-12
changelog:
  - Launch mdmon via systemctl to avoid it ending up in the wrong cgroup
    and getting killed in the boot process when switching from the
    initrd to the real root.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-11
changelog:
  - Move code to leave udev cgroup into mdmon and excute it after we
    work, to make sure it actually does the right thing.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-9
changelog:
  - Reintroduce fix for removing dangling symlink of
    mdmonitor-takeover.service which got lost in the fix introduced in
    3.2.6-8


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-8
changelog:
  - mdmonitor-takeover.service is obsolete with the --offroot support,
    and it is harmful as of 3.2.6
  - Resolves bz834245


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Fix issue with udev scripts where if an raid volume with one of
    the disks failing, the failed disk is still present in the volume
    and container. The raid volume stays is in normal state (should be
    degraded) and the rebuild cannot start.
  - Resolves bz886123


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-5
changelog:
  - mdadm-sysvinit is obsolete given that we no longer support booting
    using sysvinit scripts
  - Resolves bz884993


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Disallow creating a second IMSM RAID array size 0 (bz880972)
  - Disallow creating IMSM RAIDs that spans multiple controllers (bz880974)
  - Resolves bz880972, bz880974


author: Doug Ledford <dledford@redhat.com> - 3.2.6-2
changelog:
  - Modify mdadm to set the cgroup of mdmon to systemd if it's available
  - Related bz873576 (and others)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-13
changelog:
  - Relax installation requirements for abrt script to only depend on
    libreport-filesystem rather than the full abrt package


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-7
changelog:
  - Remove bogus rogue patch applied in 3.2.5-5 with justification and
    without following the structure of the mdadm package.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4
changelog:
  - Move /etc/tmpfiles.d/mdadm.conf to /lib/tmpfiles.d/ to comply with
    Fedora tmpfile rules
  - Resolves bz840187


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Fix problem where reshape of RAID volume is broken after trying to
    stop all MD devices.
  - Enhance raid-check to allow the adming to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz830177, bz820124


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-2
changelog:
  - Fix uninstall script to remove dangling symlink to
    mdmonitor-takeover.service, if the mdadm package is uninstalled from
    the system.
  - Resolves bz828354


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-3
changelog:
  - Fix mdadm-3.2.4 introduced bug where --add fails in common cases
  - Resolves bz821717 (f17) bz821718 (f16) bz821719 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-2
changelog:
  - Fix mdadm.conf to use 'd' for /var/run/mdadm creation, to avoid the
    map file getting deleted during boot.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-9
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - Correctly fix failure when trying to add internal bitmap to 1.0 arrays
  - Resolves: bz817023 (f17) bz817024 (f17) bz817026 (f17) bz817028 (f17)
  - Resolves: bz817029 (f17) bz817032 (f17) bz817038 (f17) bz808774 (f17)
  - Resolves: bz817039 (f17) bz817042 (f17)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-8
changelog:
  - Fix bug where IMSM arrays stay inactive in case a reboot is
  - performed during the reshape process.
  - Resolves: bz817522 (f17) bz817535 (f16) bz817537 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-7
changelog:
  - Fix issue when re-adding drive to a raid1 array with bitmap
  - Resolves: bz807743 (f17) bz769323 (f16) bz791159 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-6
changelog:
  - Fix double free on buggy old kernel sysfs read
  - Fix segfault if trying to write superblock to non existing device
  - Resolves: bz795707 (f17) bz795747 (f16) bz795748 (f15)
  - Resolves: bz795461 (f17) bz795749 (f16) bz795750 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-5
changelog:
  - Fix issue with devices failing to be added to a raid using bitmaps,
    due to trying to write the bitmap with mis-aligned buffers using
    O_DIRECT 
  - Resolves: bz789898 (f16) bz791189 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-4
changelog:
  - Add support for --offroot to mdadm/mdmon
  - Resolves: bz785739 (rawhide) bz785737 (f16) bz771405 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-3
changelog:
  - Fix case where we have to retry in case a remove fails due to an array
    being busy
  - Resolves: bz773337 (rawhide) bz773340 (f16) bz773341 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-1
changelog:
  - Update to upstream 3.2.3
  - Resolves: bz770110 (rawhide) bz771413 (f16) bz759014 (rawhide)
  - Resolves: bz759015 (f16) bz759035 (rawhide) bz759036 (f16)
  - Resolves: bz771608 (f15) bz759016 (f15) bz759039 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-15
changelog:
  - Backport upstream fix for memory leak that can prevent migration to
    RAID5 from completing.
  - Backport upstream fix preventing mounting a device while it is in
    process of reshaping
  - Resolves: bz755005 bz755009


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-14
changelog:
  - Backport upstream fixes to prevent growing v0.90 metadata raid out
    of supported size.
  - Add missing 'disable' argument to systemctl in preun script
  - Resolves: bz735306 (Fedora 15) bz748731 (Fedora 16) bz748732 (rawhide),
    Resolves: bz751716


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-12
changelog:
  - Backport upstream version of fix for IMSM RAID assembly problem,
    which resolves issues when booting off sysvinit based system.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-10
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)
  - Fix race between udev and mdadm when assembling md device using
    mdadm -I, where udev would spawn an additional mdadm command to
    perform the assembly in parallel.


author: Doug Ledford <dledford@redhat.com> - 3.2.2-8
changelog:
  - Rework the 65-md-incremental.rules file to add the following support:
    Nested md raid arrays should now work
    MD on top of LUKS or other lvm based devices should now work
    We should no longer grab multipath paths before multipath can


author: Milan Broz <mbroz@redhat.com> - 3.2.2-3
changelog:
  - Use unit files with systemd. (johannbg)
  - Add sub-package sysvinit for SysV init script.
  - Resolves: bz713573


author: Doug Ledford <dledford@redhat.com> - 3.1.5-1
changelog:
  - Update to latest upstream stable release
  - Update mdadm.rules file to honor noiswmd and nodmraid command line options
  - Ghost the directory in /var/run, create /var/run/mdadm in mdmonitor init
    script
  - Don't report mismatch counts on either raid1 or raid10
  - Check both active and idle arrays during raid check runs
  - Move the raid-check script from cron.weekly to /usr/sbin, add a crontab
    file to /etc/cron.d and mark it config(noreplace).  This way users can
    select their own raid-check frequency and have it honored through
    upgrades.
  - Allow the raid-check script to set the process and io priority of the
    thread performing the check in order to preserve responsiveness of the
    machine during the check.
  - Resolves: 633229, 656620. 679843, 671076, 659933


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100804.1
changelog:
  - Update to latest upstream release (resolves an issue with stale lock
    files on the md device map file)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.2
changelog:
  - Remove the glibc-static buildreq and don't build the static mdadm since
    we don't install it anyway
  - Remove the udev file since adding it was supposed to be a rawhide only change


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, fixes bz602457)
  - Add in 64-md-raid.rules to compensate for it no longer being in udev
    (bz581905)
  - Remove mdadm.static as its no longer used in initrd creation


author: Doug Ledford <dledford@redhat.com> - 3.1.2-7
changelog:
  - Fix up directory in mdmonitor init script so that we restart mdmon like we
    are supposed to
  - Add a rule to run incremental assembly on containers in case there are
    multiple volumes in a container and we only started some of them in the
    initramfs
  - Make -If work with imsm arrays.  We had too restrictive of a test in
    sysfs_unique_holder.
  - Make incremental assembly of containers act like incremental assembly of
    regular devices (aka, --run is needed to start a degraded array)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-2
changelog:
  - Add a little more paranoia checking to the RebuildMap code to avoid ever
    having the same infinite loop as in bz569019 again even if we change file
    locations to somewhere where we can't create a mapfile


author: Doug Ledford <dledford@redhat.com> - 3.1.2-1
changelog:
  - Grab latest upstream release instead of git repo snapshot (bz552344, bz572561)
  - The lack of /dev/md is causing problems, so add code to mapfile.c to cause
    us to create /dev/md if it doesn't exist (bz569019)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.6
changelog:
  - Newer version of imsm patch that leaves warning, but only when there
    actually are too many devices on the command line (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.5
changelog:
  - The uuid patch cause a different problem during assembly, so use a gross
    hack to work around the uuid issue that won't break assembly until fixed
    properly upstream (bz567132)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.4
changelog:
  - Fix problem with booting multiple imsm containers when they aren't listed
    "just so" in the mdadm.conf file (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.3
changelog:
  - Don't run the raid-check script if the kernel doesn't support
    md devices (bz557053)
  - Don't report any mismatch_cnt issues on raid1 devices as there are
    legitimate reasons why the count may not be 0 and we are getting enough
    false positives that it renders the check useless (bz554217, bz547128)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.1
changelog:
  - Update to head of upstream git repo, which contains a significant number
    of bug fixes we need (bz543746)


author: Doug Ledford <dledford@redhat.com> - 3.0.3-1
changelog:
  - New upstream release 3.0.3 (bz523320, bz527281)
  - Update a couple internal patches
  - Drop a patch in that was in Neil's tree for 3.0.3 that we had pulled for
    immediate use to resolve a bug
  - Drop the endian patch because it no longer applied cleanly and all attempts
    to reproduce the original problem as reported in bz510605 failed, even up
    to and including downloading the specific package that was reported as
    failing in that bug and trying to reproduce with it on both ppc and ppc64
    hardware and with both ppc and ppc64 versions on the 64bit hardware.
    Without a reproducer, it is impossible to determine if a rehashed patch
    to apply to this code would actually solve the problem, so remove the patch
    entirely since the original problem, as reported, was an easy to detect DOA
    issue where installing to a raid array was bound to fail on reboot and so
    we should be able to quickly and definitively tell if the problem resurfaces.
  - Update the mdmonitor init script for LSB compliance (bz527957)
  - Link from mdadm.static man page to mdadm man page (bz529314)
  - Fix a problem in the raid-check script (bz523000)
  - Fix the intel superblock handler so we can test on non-scsi block devices


author: Hans de Goede <hdegoede@redhat.com> - 3.0.2-1
changelog:
  - New upstream release 3.0.2
  - Add a patch fixing mdadm --detail -export segfaults (bz526761, bz523862)
  - Add a patch making mdmon store its state under /dev/.mdadm for initrd
    mdmon, rootfs mdmon handover
  - Restart mdmon from initscript (when running) for rootfs mdmon handover


author: Doug Ledford <dledford@redhat.com> - 3.0-3
changelog:
  - Update to current head of upstream git repo for various imsm related fixes
    (fixes bz523262)
  - Fix display of metadata version in output of Detail mode
  - Add UUID output to --detail --export (bz523314)


author: Doug Ledford <dledford@redhat.com> - 3.0-2
changelog:
  - Improved raid-check script as well as the ability to configure what devices
    get checked
  - Endian patch for uuid generation


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Remove stale patches already accepted by upstream
  - Fix the raid-check script to only try and check a device if it is
    checkable
  - Update to official mdadm-3.0 version
  - Resolves: bz505587, bz505552


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.7
changelog:
  - Move the mdadm.map file from /dev/md/ to /dev/ so the installer doesn't
    need to precreate the /dev/md/ directory in order for incremental
    assembly to work


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.6
changelog:
  - Only check raid devices automatically, do not attempt to repair them
    during the weekly data scrubbing


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.5
changelog:
  - Fix a few issues with the new code to determine when a device gets to
    keep its name and when it doesn't


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.3
changelog:
  - Slightly tweak the udev rules to make sure we don't start arrays
    while running in rc.sysinit...leave array starting to it instead
  - Modify mdadm to put its mapfile in /dev/md instead of /var/run/mdadm
    since at startup /var/run/mdadm is read-only by default and this
    breaks incremental assembly
  - Change how mdadm decides to assemble incremental devices using their 
    preferred name or a random name to avoid possible conflicts when plugging
    a foreign array into a host


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.1
changelog:
  - Update to latest devel release
  - Remove the no longer necessary udev patch
  - Remove the no longer necessary warn patch
  - Remove the no longer necessary alias patch
  - Update the mdadm.rules file to only pay attention to device adds, not
    changes and to enable incremental assembly
  - Add a cron job to run a weekly repair of the array to correct bad sectors
  - Resolves: bz474436, bz490972


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.2
changelog:
  - Readd our old mdadm rules file that does incremental assembly
  - Remove the new mdadm rules file from upstream as we already have this in
    our udev package (and the one in the udev package already has a bug fixed)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.1
changelog:
  - Update to latest upstream devel release
  - Use the udev rules file included with mdadm instead of our own
  - Drop all the no longer relevant patches
  - Fix a build error in mdopen.c
  - Fix the udev rules path in Makefile
  - Fix a compile issue with the __le32_to_cpu() macro usage (bad juju to
    to operations on the target of the macro as it could get executed
    multiple times, and gcc now throws an error on that)
  - Add some casts to some print statements to keep gcc from complaining


author: Doug Ledford <dledford@redhat.com> - 2.6.7.1-1
changelog:
  - Updated to latest upstream stable release (#466803)
  - Change udev rule to not assemble degraded arrays (#453314)
  - Fix metadata matching in config file (#466078)
  - Fix assembly of raid10 devices (#444237)
  - Fix incremental assembly of partitioned raid devices (#447818)


author: Doug Ledford <dledford@redhat.com> - 2.6.7-1
changelog:
  - Update to latest upstream version (should resolve #444237)
  - Drop incremental patch as it's now part of upstream
  - Clean up all the open() calls in the code (#437145)
  - Fix the build process to actually generate mdassemble (#446988)
  - Update the udev rules to get additional info about arrays being assembled
    from the /etc/mdadm.conf file (--scan option) (#447818)
  - Update the udev rules to run degraded arrays (--run option) (#452459)


author: Bill Nottingham <notting@redhat.com> - 2.6.4-4
changelog:
  - make /dev/md if necessary in incremental mode (#429604)
  - open RAID devices with O_EXCL to avoid racing against other --incremental processes (#433932)


author: Doug Ledford <dledford@redhat.com> - 2.6.2-4
changelog:
  - Oops, if we call -C -e1, minor_version is no longer properly set, fix that
    up
  - Related: bz230207


author: Doug Ledford <dledford@redhat.com> - 2.6.2-3
changelog:
  - Oops, had to update the file leak patch, missed one thing
  - Minor tweak to return codes in init script and add LSB header
  - Resolves: bz244582, bz246980


author: Doug Ledford <dledford@redhat.com> - 2.6.2-2
changelog:
  - Fix a file leak issue when mdadm is in monitor mode
  - Update mdadm init script so that status will always run and so
    return codes are standards compliant
  - Fix assembly of version 1 superblock devices
  - Make the attempt to create an already running device have a clearer
    error message
  - Allow the creation of a degraded raid4 array like we allow for raid5
  - Make mdadm actually pay attention to raid4 devices when in monitor mode
  - Make the mdmonitor script use daemon() correctly
  - Fix a bug where manage mode would not add disks correctly under certain
    conditions
  - Resolves: bz244582, bz242688, bz230207, bz169516, bz171862, bz171938
  - Resolves: bz174642, bz224272, bz186524


author: Doug Ledford <dledford@redhat.com> - 2.6.2-1
changelog:
  - Update to latest upstream
  - Remove requirement for /usr/sbin/sendmail - it's optional and not on by
    default, and sendmail isn't *required* for mdadm itself to work, and isn't
    even required for the monitoring capability to work, just if you want to
    have the monitoring capability do the automatic email thing instead of
    run your own program (and if you use the program option of the monitor
    capability, your program could email you in a different manner entirely)


author: Doug Ledford <dledford@redhat.com> - 2.6-1
changelog:
  - Update to latest upstream version
  - Remove the mdmpd daemon entirely.  Now that multipath tools from the lvm/dm
    packages handles multipath devices well, this is no longer needed.
  - Various cleanups in the spec file


author: Doug Ledford <dledford@redhat.com> - 2.5.4-1
changelog:
  - Update to 2.5.4 (listed as a bugfix update by upstream)
  - Remove previous bitmap patch that's now part of 2.5.4


author: Warren Togami <wtogami@redhat.com> 2.2-1
changelog:
  - 2.2 upgrade (#167897)
  - disable diet because we don't ship it anymore
    and we don't actually use mdassemble now


author: Doug Ledford <dledford@redhat.com> 1.11.0-4.fc4
changelog:
  - Make the mdmonitor init script use the pid-file option, major cleanup
    of the script now possible (#134459)


author: Doug Ledford <dledford@redhat.com> 1.11.0-2.fc4
changelog:
  - Change the default auto= mode so it need not be on the command line to
    work with udev, however it is still supported on the command line (#132706)
  - Add a man page (from Luca Berra) for mdassemble


author: Doug Ledford <dledford@redhat.com> 1.6.0-1
changelog:
  - Update to newer upstream version
  - Make mdmpd work on kernels that don't have the event interface patch


author: Doug Ledford <dledford@redhat.com> - 1.5.0-9
changelog:
  - Fix Makefile and build method to satisfy bz #123769
  - Add mdmpd man page, update mdmpd version to 0.3 - bz #117160
  - Make sure mdadm --monitor closes all md device files so that md devices
    can be stopped while mdadm is still running - bz #119532


author: Doug Ledford <dledford@redhat.com> 2.5.0-6
changelog:
  - Fix a bug in the postun scriptlet related to downgrading to a version
    of mdadm that doesn't include the mdmpd daemon.


author: Doug Ledford <dledford@redhat.com> 1.5.0-5
changelog:
  - Disable service mdmpd by default to avoid [Failed] messages on
    current 2.6 kernels.  Possibly re-enable it by default once the
    2.6 kernels have the md event interface.


author: Doug Ledford <dledford@redhat.com> 1.5.0-4
changelog:
  - Update mdmonitor script to start daemon more cleanly
  - Repackage mdmpd tarball to include gcc-3.4 changes and to make
    mdmpd properly daemonize at startup instead of forking and leaving
    the child attached to the terminal.


author: Doug Ledford <dledford@redhat.com> 1.5.0-2
changelog:
  - Add a default MAILADDR line to the mdadm.conf file installed by default
    (Bugzilla #92447)
  - Make it build with gcc-3.4


author: <gleblanc@localhost.localdomain>
changelog:
  - beautification
  - made mdadm.conf non-replaceable config
  - renamed Copyright to License in the header
  - added missing license file
  - used macros for file paths


author: Honggang Li <honli@redhat.com> - 1.11.1-1
changelog:
  - Rebase to upstream release v1.11.1
  - EFA Support requires libfabric
  - Resolves: bz1831145, bz1852636


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
  	* Add Android support for building dispol.
  	* Report source file and line information for neverallow failures.
  	* Prevent incompatible option combinations for checkmodule.
  	* Drop -lselinux from LDLIBS for test programs; not used.
  	* Add debug feature to display constraints/validatetrans from Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Fix hyphen usage in man pages from Laurent Bigonville.
  	* handle-unknown / -U required argument fix from Laurent Bigonville.
  	* Support overriding Makefile PATH and LIBDIR from Laurent Bigonville.
  	* Support space and : in filenames from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
changelog:
  - Fix a segmentation fault if the --handle-unknown option was set without
  arguments.
  - Thanks to Alexandre Rebert and his team at Carnegie Mellon University
  for detecting this crash.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
          * Fix errors found by coverity
          * implement default type policy syntax
          * Free allocated memory when clean up / exit.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
changelog:
  - Update to latest patches from eparis/Upstream
  -   checkpolicy: libsepol: implement default type policy syntax
  -   
  -   We currently have a mechanism in which the default user, role, and range
  -   can be picked up from the source or the target object.  This implements
  -   the same thing for types.  The kernel will override this with type
  -   transition rules and similar.  This is just the default if nothing
  -   specific is given.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* sepolgen: We need to support files that have a + in them
  	* Android/MacOS X build support


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* implement new default labeling behaviors for usr, role, range
  	* Fix dead links to www.nsa.gov/selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* dis* fixed signed vs unsigned errors
  	* dismod: fix unused parameter errors
  	* test: Makefile: include -W and -Werror
  	* allow ~ in filename transition rules
  - Allow policy to specify the source of target for generating the default user,role 
  - or mls label for a new target.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  - Upgrade to upstream
  	* Revert "checkpolicy: Redo filename/filesystem syntax to support filename trans rules"
  	* drop libsepol dynamic link in checkpolicy


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
changelog:
  -Update to upstream
  	* .gitignore changes
  	* dispol output of role trans
  	* man page update: build a module with an older policy version


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  -Update to upstream
  	* Wrap file names in filename transitions with quotes by Steve Lawrence.
  	* Allow filesystem names to start with a digit by James Carter.
  	* Add support for using the last path compnent in type transitions by Eric


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-4
changelog:
  - Patches from Eric Paris 
  We just use random numbers to make menu selections.  Use #defines and
  names that make some sense instead.

  This patch adds support for using the last path component as part of the
  information in making labeling decisions for new objects.  A example
  rule looks like so:

  type_transition unconfined_t etc_t:file system_conf_t eric;

  This rule says if unconfined_t creates a file in a directory labeled
  etc_t and the last path component is "eric" (no globbing, no matching
  magic, just exact strcmp) it should be labeled system_conf_t.

  The kernel and policy representation does not have support for such
  rules in conditionals, and thus policy explicitly notes that fact if
  such a rule is added to a conditional.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-2
changelog:
  - Add James Carters Patch
    *This patch is needed because some filesystem names (such as 9p) start
    with a digit.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Latest update from NSA
    * Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Latest update from NSA
  	* Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
  - Allow policy version to be one number


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Latest update from NSA
  	* Add support for building Xen policies from Paul Nuzzi.
  	* Add long options to checkpolicy and checkmodule by Guido
  	  Trentalancia <guido@trentalancia.com>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Latest update from NSA
  	* Fix alias field in module format, caused by boundary format change
  	  from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Latest update from NSA
  	* Properly escape regex symbols in the lexer from Stephen Smalley.
  	* Add bounds support from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Latest update from NSA
  	* Update checkpolicy for user and role mapping support from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Latest update from NSA
  	* Fix for policy module versions that look like IPv4 addresses from Jim Carter.
  	  Resolves bug 444451.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Latest update from NSA
  	* Split out non-grammar parts of policy_parse.yacc into
  	  policy_define.c and policy_define.h from Todd C. Miller.
  	* Initialize struct policy_file before using it, from Todd C. Miller.
  	* Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Latest update from NSA
  	* Use yyerror2() where appropriate from Todd C. Miller.
  - Build against latest libsepol


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Latest update from NSA
  	* Initialize the source file name from the command line argument so that checkpolicy/checkmodule report something more useful than "unknown source".
  	* Merged remove use of REJECT and trailing context in lex rules; make ipv4 address parsing like ipv6 from James Carter.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  * Merged handle unknown policydb flag support from Eric Paris.
  	  Adds new command line options -U {allow, reject, deny} for selecting
  	  the flag when a base module or kernel policy is built.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Latest update from NSA
  	* Merged fix for segfault on duplicate require of sensitivity from Caleb Case.
  	* Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Latest update from NSA
  	* Merged patch to use new libsepol error codes by Karl MacMillan.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.12-1
changelog:
  - Latest update from NSA
  	* Merged user and range_transition support for modules from 
  	  Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> - 1.30.11-1
changelog:
  - Latest update from NSA
  	* merged range_transition enhancements and user module format
  	  changes from Darrel Goeddel
  	* Merged symtab datum patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.8-1
changelog:
  - Latest upgrade from NSA
  	* Lindent.
  	* Merged patch to remove TE rule conflict checking from the parser
  	  from Joshua Brindle.  This can only be done properly by the 
  	  expander.
  	* Merged patch to make checkpolicy/checkmodule handling of
  	  duplicate/conflicting TE rules the same as the expander 
  	  from Joshua Brindle.
  	* Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.5-1
changelog:
  - Latest upgrade from NSA
  	* Merged compiler cleanup patch from Karl MacMillan.
  	* Merged fix warnings patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.4-1
changelog:
  - Latest upgrade from NSA
  	* Changed require_class to reject permissions that have not been
  	  declared if building a base module.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.3-1
changelog:
  - Latest upgrade from NSA
  	* Fixed checkmodule to call link_modules prior to expand_module
  	  to handle optionals.
  	* Fixed require_class to avoid shadowing permissions already defined
  	  in an inherited common definition.


author: Dan Walsh <dwalsh@redhat.com> - 1.30-1
changelog:
  - Latest upgrade from NSA
  	* Updated version for release.
  	* Fixed bug in role dominance (define_role_dom).


author: Dan Walsh <dwalsh@redhat.com> - 1.29.4-1
changelog:
  - Latest upgrade from NSA
  	* Added a check for failure to declare each sensitivity in
  	  a level definition.
  	* Changed to clone level data for aliased sensitivities to
  	  avoid double free upon sens_destroy.  Bug reported by Kevin
  	  Carr of Tresys Technology.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Latest upgrade from NSA
  	* Added error checking of all ebitmap_set_bit calls for out of
  	  memory conditions.
  	* Merged removal of compatibility handling of netlink classes
  	  (requirement that policies with newer versions include the
  	   netlink class definitions, remapping of fine-grained netlink
  	   classes in newer source policies to single netlink class when
  	   generating older policies) from George Coker.


author: Dan Walsh <dwalsh@redhat.com> 1.27.16-1
changelog:
  - Latest upgrade from NSA
  	* Removed obsolete cond_check_type_rules() function and call and 
  	  cond_optimize_lists() call from checkpolicy.c; these are handled
  	  during parsing and expansion now.
  	* Updated calls to expand_module for interface change.
  	* Changed checkmodule to verify that expand_module succeeds 
  	  when building base modules.
  	* Merged module compiler fixes from Joshua Brindle.
  	* Removed direct calls to hierarchy_check_constraints() and 
  	  check_assertions() from checkpolicy since they are now called 
  	  internally by expand_module().


author: Dan Walsh <dwalsh@redhat.com> 1.27.10-1
changelog:
  - Latest upgrade from NSA
  	* Updated for changes to sepol expand_module and link_modules interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Latest upgrade from NSA
  	* Merged support for require blocks inside conditionals from
  	Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Latest upgrade from NSA
  	* Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Latest upgrade from NSA
  	* Merged bugfix for dup role transition error messages from
  	Karl MacMillan (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.12-1
changelog:
  - Update to NSA Release
  	* Fixed handling of validatetrans constraint expressions.
  	Bug reported by Dan Walsh for checkpolicy -M.


author: Dan Walsh <dwalsh@redhat.com> 1.25.11-1
changelog:
  - Update to NSA Release
  	* Merged use-after-free fix from Serge Hallyn (IBM).  
  	  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.10-1
changelog:
  - Update to NSA Release
  	* Fixed further memory leaks found by valgrind.
  	* Changed checkpolicy to destroy the policydbs prior to exit
  	  to allow leak detection.
  	* Fixed several memory leaks found by valgrind.


author: Dan Walsh <dwalsh@redhat.com> 1.25.8-1
changelog:
  - Update to NSA Release
  	* Updated checkpolicy and dispol for the new avtab format.
  	  Converted users of ebitmaps to new inline operators.
    	  Note:  The binary policy format version has been incremented to 
  	  version 20 as a result of these changes.  To build a policy
  	  for a kernel that does not yet include these changes, use
  	  the -c 19 option to checkpolicy.
  	* Merged patch to prohibit use of "self" as a type name from Jason Tang (Tresys).
  	* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to NSA Release
  	* Fixed call to hierarchy checking code to pass the right policydb.
  	* Merged patch to update dismod for the relocation of the
  	  module read/write code from libsemanage to libsepol, and
  	  to enable build of test subdirectory from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update to NSA Release
  	* Merged loadable module support from Tresys Technology.
  	* Merged patch to prohibit the use of * and ~ in type sets 
  	  (other than in neverallow statements) and in role sets
  	  from Joshua Brindle (Tresys).
  	* Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.23-3-1
changelog:
  - Update to NSA Release
  	* Added sepol_ prefix to Flask types to avoid namespace
  	  collision with libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23,1-1
changelog:
  * Merged hierarchical type/role patch from Tresys Technology.
  	* Merged MLS fixes from Darrel Goeddel of TCS.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  * Merged define_user() cleanup patch from Darrel Goeddel (TCS).
  	* Moved genpolusers utility to libsepol.
  	* Merged range_transition support from Darrel Goeddel (TCS).


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Latest from NSA
  	* Merged typeattribute statement patch from Darrel Goeddel of TCS.
  	* Changed genpolusers to handle multiple user config files.
  	* Merged nodecon ordering patch from Chad Hanson of TCS.


author: Tomas Orsava <torsava@redhat.com> - 2.18.4-6
changelog:
  - Skip all tests needing httpbin: httpbin has too many dependencies to be
    shipped in RHEL just for build-time package tests


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Ralph Bean <rbean@redhat.com> - 2.7.0-6
changelog:
  - Replace the provides macro with a plain provides field for now until we can
    re-organize this package into two different subpackages.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-3
changelog:
  - Lock down the python-urllib3 version to the specific version we unbundled.
    https://bugzilla.redhat.com/show_bug.cgi?id=1253823


author: Ralph Bean <rbean@redhat.com> - 2.0.0-1
changelog:
  - Latest upstream.
  - Add doc macro to the python3 files section.
  - Require python-urllib3 greater than or at 1.7.1.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.14.1-4
changelog:
  - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules
    by removing them from the python{,3}-requests package that they did not belong
    in.
  - Use the certificates in the ca-certificates package instead of the bundled one
    + https://bugzilla.redhat.com/show_bug.cgi?id=904614
  - Fix a problem with cookie handling
    + https://bugzilla.redhat.com/show_bug.cgi?id=906924


author: Arun S A G <sagarun@gmail.com> 0.13.1-1
changelog:
  - Updated to latest upstream release 0.13.1
  - Use system provided ca-certificates
  - No more async requests use grrequests https://github.com/kennethreitz/grequests
  - Remove gevent as it is no longer required by requests


author: Arun SAG <sagarun@gmail.com> - 0.9.3-1
changelog:
  - Updated to new upstream version 0.9.3
  - Include python-gevent as a dependency for requests.async
  - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py


author: Arun SAG <sagarun@gmail.com> - 0.5.1-2
changelog:
  - Remove OPT_FLAGS from build section since it is a noarch package
  - Fix use of mixed tabs and space
  - Remove extra space around the word cumbersome in description


author: Peter Jones <pjones@redhat.com> - 36-1
changelog:
  - Update to efivar 36 (and some change)
    Resolves: rhbz#1635019
  - Add NVDIMM support
  - Re-written linux interface parser to handle how devices are
    partitioned better, and for cleaner code, with one file per device
    type.
  - lots of verbosity updates
  - better CI
  - analysis with clang's analyzer as well as coverity
  - Better handling of immutable bits in sysfs
  - LIBEFIVAR_OPS=help
  - lots of code cleanups.
  - Add emmc device support
  - Add SAS port expander support
  - Support for ACPI root nodes that are less common
    (i.e. ACPI Generic Container and Embedded Controller PNP nodes)
  - Make abbreviated device paths if we can't parse a device's info
  - Don't require NVME to have an EUI


author: Peter Jones <pjones@redhat.com> - 35-1
changelog:
  - Update to efivar 35
  - fixes for older compilers
  - efi_get_variable_exists()
  - Lots of stuff to make CI work.
  - use usleep() to avoid hitting the kernel rate limiter on efivarfs
  - better EFI_GUID macro
  - add efi_guid_fwupdate (0abba7dc-e516-4167-bbf5-4d9d1c739416)


author: Peter Jones <pjones@redhat.com> - 32-1
changelog:
  - efivar 32
  - lots of coverity fixes; mostly leaked memory and fds and the like
  - fix sysfs pci path formats
  - handle device paths for dns, nfit, bluetooth, wifi, emmc, btle.
  - improved abi checking on releases
  - Fix failures on EDIT_WRITE in edit_variable() when the variable doesn't exist
  - Add efi_guid_ux_capsule_guid to our guids
  - Now with %check


author: Peter Jones <pjones@redhat.com> - 31-1
changelog:
  - Update to efivar 31
  - Work around NVMe EUI sysfs change
  - Provide some oldish version strings we should have kept.
  - lots of overflow checking on our pointer math in dp parsing
  - fix major/minor device number handling in the linux code
  - Do better formatting checks for MBR partitions
  - Fixes for gcc 7


author: Peter Jones <pjones@redhat.com> - 29-1
changelog:
  - Use -pie not -PIE in our linker config
  - Fix some overflow checks for gcc < 5.x
  - Make variable class probes other than the first one actually work
  - Move -flto to CFLAGS
  - Pack all of the efi device path headers
  - Fix redundant decl of efi_guid_zero()


author: Peter Jones <pjones@redhat.com> - 0.21-1
changelog:
  - Rename "make test" so packagers don't think it's a good idea to run it
    during builds.
  - Error check sizes in vars_get_variable()
  - Fix some file size comparisons
  - make SONAME reflect the correct values.
  - Fix some uses of "const"
  - Compile with -O2 by default
  - Fix some strict-aliasing violations
  - Fix some of the .pc files and how we do linking to work better.


author: Peter Jones <pjones@redhat.com> - 0.20-1
changelog:
  - Update to 0.20
  - Make sure tester is build with the right link order for libraries.
  - Adjust linker order for pkg-config
  - Work around LocateDevicePath() not grokking PcieRoot() devices properly.
  - Rectify some missing changelog entries


author: Peter Jones <pjones@redhat.com> - 0.14-1
changelog:
  - Update to 0.14
  - add efi_id_guid_to_guid() and efi_guid_to_id_guid(), which support {ID GUID}
    as a concept.
  - Add some vendor specific guids to our guid list.
  - Call "empty" "zero" now, as many other places do.  References to
    efi_guid_is_empty() and efi_guid_empty still exist for ABI compatibility.
  - add "efivar -L" to the man page.


author: Peter Jones <pjones@redhat.com> - 0.13-1
changelog:
  - Update to 0.13:
  - add efi_symbol_to_guid()
  - efi_name_to_guid() will now fall back on efi_symbol_to_guid() as a last
    resort
  - "efivar -L" to list all the guids we know about
  - better namespacing on libefivar.so (rename well_known_* -> efi_well_known_*)


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Peter Jones <pjones@redhat.com> - 0.6-1
changelog:
  - Update package to 0.6
  - fixes to documentation from lersek
  - more validation of uefi guids
  - use .xz for archives


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 1.8.10-3
changelog:
  - The default installed polkit policy allows console users to access
    smart cards. Non-interactive or remote usage now requires admin
    rights, or a specific policy (see README.polkit)


author: Kalev Lember <kalevlember@gmail.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Drop the systemd support patches which are now upstreamed
  - Package the new pcsc-spay tool in -devel subpackage


author: Kalev Lember <kalevlember@gmail.com> - 1.7.4-6
changelog:
  - Remove the automatic card power down disabling patch again;
    no longer needed with latest libusb1 1.0.9 rc1 (#737988)


author: Kalev Lember <kalev@smartlink.ee> - 1.7.3-1
changelog:
  - Update to 1.7.3
  - Dropped upstreamed patches
  - Dropped the lib64 rpath patch; pcsc-lite now uses system libtool
  - Cleaned up the spec file for modern rpmbuild


author: Kalev Lember <kalev@smartlink.ee> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Dropped upstreamed patches
  - Removed configure --disable-dependency-tracking option which is the
    default with configure macro.


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-4
changelog:
  - Fix init script start / stop priorities (#580322)
  - Don't require pkgconfig as the dep is now automatically generated by rpm


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-3
changelog:
  - Added patch to fix init script LSB header (#565241)
  - Dropped BR: libusb-devel as configure script really picks up libhal instead
  - Use %global instead of %define


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-2
changelog:
  - Require -libs subpackage from main pcsc-lite package
  - Build -doc subpackage as noarch
  - Dropped --enable-runpid configure option which was removed in 1.4.99
  - Dropped obsolete provides
  - Spec file cleanup


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-1
changelog:
  - Updated to pcsc-lite 1.5.5
  - Rebased rpath64 patch
  - Dropped upstreamed pcsc-lite-1.5-permissions.patch


author: Karsten Hopp <karsten@redhat.com> 1.4.102-4
changelog:
  - remove excludearch s390, s390x (#467788)
    even though s390 does not have libusb or smartCards, the libusb
    packages are required to build other packages.


author: Bob Relyea <rrelyea@redhat.com> - 1.4.4-2
changelog:
  - Silence libpcsc-lite even when the daemon isn't running.
  - fix typo in init file which prevents the config file from being read.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.0-1
changelog:
  - 1.3.0, init script and reader.conf updater included upstream.
  - Split developer docs into a -doc subpackage, include API docs.
  - libmusclecard no longer included, split into separate package upstream.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.2.0-13
changelog:
  - Don't ship static libraries.
  - Don't mark the init script as a config file.
  - Use rm instead of %exclude.
  - Specfile cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-10
changelog:
  - Disable dependency tracking to speed up the build.
  - Drop reader.conf patch, it's not needed any more.
  - Rename update-reader-conf to update-reader.conf for consistency with Debian,
    and improve it a bit.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.6
changelog:
  - Improve package summary.
  - Improvements based on suggestions from Ludovic Rousseau:
    - Don't install pcsc_demo but do include its source in -devel.
    - Sync reader.conf with current upstream CVS HEAD (better docs, less
      intrusive in USB-only setups where it's not needed).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.0.2.rc3
changelog:
  - Update to 1.2.0-rc3.
  - Trivial init script improvements.
  - Enable %{_smp_mflags}.
  - Don't bother trying to enable SCF.


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-2
changelog:
  - patch: Fix possible memory corruption in LUKS2 validation
  	 code in 32bit library.
  - Resolves: #1872294


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399


author: Ondrej Kozina <okozina@redhat.com> - 2.2.0-2
changelog:
  - patch: Fix mapped segments overflow on 32bit architectures.
  - patch: Take optimal io size in account with LUKS2 reencryption.
  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.0.6-1
changelog:
  - Update to cryptsetup 2.0.6
  - Enables all supported metadata sizes in LUKS2 validation code.
  - Resolves: #1653383


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-2
changelog:
  - patch: fix device alignment bug when processing hinted
    value by device topology info.
  - Resolves: #1614219


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-1
changelog:
  - Update to cryptsetup 2.0.4.
  - patch: Add RHEL system library paths in configure.
  - patch: Increase default LUKS2 header size to 8 MiBs.
  - patch: update tests to be compatible with larger headers.
  - Set default format to LUKS2.
  - Cleanup changelog.
  - Resolves: #1564540 #1595257 #1595266 #1595881 #1600164


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-3
changelog:
  - Add "Provides: oracleasm" and "Provides: oracleasm-kmod".
  - Dropping "0001-oracleasm-driver-replace-fs_context-with-mount_pseud.patch".


author: EL Errata <el-errata_ww@oracle.com> - 3:173-0.0.1
changelog:
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Prarit Bhargava <prarit@redhat.com> - 3:173-0
changelog:
  - Update to v173
  - adds support for Tigerlake, Rocketlake, Alderlake, Lakefield
  - adds support for CometLake, Icelake server, Icelake-D, and Snow Ridge


author: Prarit Bhargava <prarit@redhat.com> - 3:160-1
changelog:
  - Deduce channel number for Haswell/Broadwell/Skylake systems [1641046]
  - Add decoding for Optane DC persistent memory mode [1645344]


author: Prarit Bhargava <prarit@redhat.com> 2:1.0-0.10.f0d7654
changelog:
  - updated to latest mcelog
  - removed mcelog-fix-trigger-path-and-cacheing.patch. AFAICT triggers are
    correctly installed
  - added mcelog-disable-cron-job.patch as mcelog runs in daemon mode by
    default in Fedora


author: Prarit Bhargava <prarit@redhat.com> 2:1.0-0.3.6e4e2a00
changelog:
  - Updated sources to deal with various warning issues [701083] [704302]
  - Update URL for new location of Andi's mcelog tree
  - Update n-v-r to include latest git hash


author: Jon Masters <jcm@redhat.com> 2:1.0-0.1.pre3
changelog:
  - Bump epoch and use standard Fedora Packaging Guidelines for NVR.
  - Switch to using signed bz2 source and remove dead patch.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-8
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1622990.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-7
changelog:
  - weak-modules: use is_kernel_installed wrapper in update_modules_for_krel.
  - weak-modules: more abstract symvers search implementation.
  - weak-modules: use additional paths for System.map file.
    Resolves: rhbz#1621306.


author: Eugene Syromiatnikov <esyr@redhat.com> - 25-6
changelog:
  - weak-modules: check also for /lib/modules/$krel/symvers.gz as a possible
    symvers file path.
    Resolves: rhbz#1614119.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-5
changelog:
  - weak-modules: handle versions with + and other special regex symbols
  - weak-modules: fix misleading message when cannot find dracut.
    Resolves: rhbz#1609372.


author: Kay Sievers <kay@redhat.com> - 7-1
changelog:
  - update to version 7
    - fix issue with --show-depends, where built-in
      modules of the running kernel fail to include
      loadable modules of the kernel specified


author: Harald Hoyer <harald@redhat.com> 5-6
changelog:
  - add upstream patch to fix "modprobe --ignore-install --show-depends"
    otherwise dracut misses a lot of modules, which are already loaded


author: Kay Sievers <kay@redhat.com> - 5-3
changelog:
  - temporarily add fake-provides to be able to bootstrap
    the new udev which pulls the old udev into the buildroot


author: Kay Sievers <kay@redhat.com> - 5-1
changelog:
  - Update to version 5
  - replace the module-init-tools package and provide all tools
    as compatibility symlinks


author: Jon Masters <jcm@jonmasters.org> - 3-1
changelog:
  - Update to latest upstream (adds new depmod replacement utility)
  - For the moment, use the "kmod" utility to test the various functions


author: Jon Masters <jcm@jonmasters.org> - 2-3
changelog:
  - Update package incorporating fixes from initial review feedback
  - Cleaups to SPEC, rpath, documentation, library and binary locations


author: Than Ngo <than@redhat.com> - 3.7.0-3
changelog:
  - fixed multilib issue
  - enable file encryption (missing hpicrypt)
  - add BR on net-snmp in order to fix the undefined reference issue


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.1-5
changelog:
  - Had to disable sysfs support due to new libsysfs and incompatible API.
  - Added missing ncurses-devel buildrequires


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-4
changelog:
  - Added the openhpi config file
  - Added missing /var/lib/openhpi dir with proper rights
  - Added a few missing BuildPreReqs


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-1
changelog:
  - Moved the pkgconfig files to the devel package (#152507)
  - Update to openhpi-2.0.3
  - Had to manually disable ipmi support for now until openhpi builds correctly
    against it again
  - Dropped net-snmp-config patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 1.9.2-2
changelog:
  - Fixed overflow in plugins/sysfs/sysfs2hpi.c
  - Fixed rebuild problem with latest net-snmp
  - Removed is_simulator patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 1.9.1-1
changelog:
  - Added proper BuildRequires
  - Drop ia64 for first build, something fishy with the compiler and warning.


author: Petr Pisar <ppisar@redhat.com> - 4:2.86-3
changelog:
  - Fix Encode::encode_utf8(undef) to return undef (CPAN RT#116904)
  - Refuse non-shortests UTF-8 representations in strict mode
  - Fix panic when encoding undefined scalars


author: Petr Pisar <ppisar@redhat.com> 2.47-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Make devel sub-package architecture specific due to file location


author: Jakub Martisko <jamartis@redhat.com> - 1:6.1.2-9
changelog:
  - Add support for intel CET and -fcf-protection
  - Add missing compiler/linker flags
  Related: #1630567


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-8
changelog:
  - Missing fipschecks added into build process (bug #1553679)
  - --enable-fat option added to %configure (bug #1493218)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-3
changelog:
  - Build process updated to correctly build .debug_info for i386
    and to correctly use hardening flags


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-13
changelog:
  - do not package sse2 variant, use --enable-fat instead (a bit dangerous, some low level routines will be skipped in `make check`)


author: Karsten Hopp <karsten@redhat.com> 6.0.0-3
changelog:
  - set default for BMOD_1_TO_MOD_1_THRESHOLD on ppc64, patch by 
    Torbjorn Granlund:
    https://gmplib.org/repo/gmp/rev/4a6d258b467f


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1
changelog:
  - rebase to 5.1.0, de-ansi patch no longer applicable
  - upstream dropped libmp.so (bsdmp-like interface)
  - silenced bogus date in changelog


author: Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1
changelog:
  - resolves: #702919
    update to 5.0.2
  - resolves: #738091
    removed unused direct shlib dependency on libm
    updated license in gmp.h and gmp-mparam.h files


author: Ivana Varekova <varekova@redhat.com> 4.2.1-1
changelog:
  - update to 4.2.1
  - do some spec cleanups
  - fix 238794 - gmp-devel depends on {version} but not on 
    {version}-{release}
  - remove mpfr (moved to separate package)


author: Karsten Hopp <karsten@redhat.com> 4.1.4-12
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/... requirements
  - use make install DESTDIR=...
  - replace tabs with spaces
  - convert changelog to utf-8


author: Jakub Jelinek <jakub@redhat.com> 4.1.4-11
changelog:
  - make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371)
  - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable mpfr  #104395
  - enable cxx  #80195
  - add COPYING.LIB
  - add fixes from gmp web-site
  - remove some cruft patches for older libtool releases


author: Trond Eivind Glomsrød <teg@redhat.com> 4.1-3
changelog:
  - Redefine the configure macro, the included configure 
    script isn't happy about the rpm default one (#68190). Also, make
    sure the included libtool isn't replaced,


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not
  correctly identified as a 64 bit platform.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to the configure and makeinstall macros
  - FHS-compliance fixing
  - move docs to non-devel package


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - merge in some debian gmp fixes
  - Ulrich Drepper's __gmp_scale2 fix
  - my mpf_set_q fix
  - sparc64 fixes


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - include the private header file gmp-mparam.h because several
    apps seem to assume that they are building against the gmp
    source tree and require it.  Sigh.


author: Marc Ewing <marc@redhat.com>
changelog:
  - started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu>
  - cleaned up file list
  - fixed up install-info support


author: Sumit Bose <sbose@redhat.com> - 0.16.3-20
changelog:
  - realmd should handle default_realm in krb5.conf
    Resolves: rhbz#1791016
  - [RFE] Enable LDAPS functionality in realmd join
    Resolves: rhbz#1826964


author: Sumit Bose <sbose@redhat.com> - 0.16.3-19
changelog:
  - Realm join fails with error 'Failed to join domain: failed to lookup
    DC info ...'
    Resolves: rhbz#1859503
  - realm command to use option like dnshostname=fqdn
    Resolves: rhbz#1867912


author: Sumit Bose <sbose@redhat.com> - 0.16.3-17
changelog:
  - rebuild fails if DISTRO variable is exported
    Resolves: rhbz#1747454
  - realmd.conf user-principal RFE and clarification
    Resolves: rhbz#1747452
  - realmd.conf documentation incorrect
    Resolves: rhbz#1747457
  - Document realmd.conf and how realmd reads the configuration
    Resolves: rhbz#1747456


author: Sumit Bose <sbose@redhat.com> - 0.16.3-14
changelog:
  - Fix python BuildRequires
    Resolves: rhbz#1615564
  - Add RHEL specific patch for IPA
    Resolves: rhbz#1615320
  - Fix issues found by Coverity
    Resolves: rhbz#1602677


author: Sumit Bose <sbose@redhat.com> - 0.16.3-13
changelog:
  - Add latests patches from RHEL7
  - Add polkit runtime dependency
    Resolves: rhbz#1577179
  - Drop python2 build dependency
    Resolves: rhbz#1595813
  - Fix documentation reference in systemd unit file
    Resolves: rhbz#1596325


author: René Genz <liebundartig@freenet.de> - 0.16.3-12
changelog:
  - use correct authselect syntax for *-disable-logins to fix rhbz#1558245
  - Iryna Shcherbina <ishcherb@redhat.com>
    Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Stef Walter <stefw@redhat.com> - 0.16.0-1
changelog:
  - Updated to upstream 0.16.0
  - Resolves: rhbz#1205753
  - Resolves: rhbz#1142190
  - Resolves: rhbz#1061091
  - Resolves: rhbz#1205752


author: Stef Walter <stefw@redhat.com> - 0.14.6-1
changelog:
  - Update to upstream 0.14.6 point release
  - Set 'kerberos method = system keytab' in smb.conf properly
  - Limit Netbios name to 15 chars when joining AD domain


author: Stef Walter <stefw@redhat.com> - 0.14.5-1
changelog:
  - Update to upstream 0.14.5 point release
  - Fix regression conflicting --unattended and -U as in --user args
  - Pass discovered server address to adcli tool


author: Stef Walter <stefw@redhot.com> - 0.14.4-1
changelog:
  - Update to upstream 0.14.4 point release
  - Fix up the [sssd] section in sssd.conf if it's screwed up
  - Add an --unattended argument to realm command line client
  - Clearer 'realm permit' manual page example


author: Stef Walter <stefw@redhot.com> - 0.14.3-1
changelog:
  - Update to upstream 0.14.3 point release
  - Populate LoginFormats correctly [#961442]
  - Documentation clarifications
  - Set sssd.conf default_shell per domain
  - Notify in terminal output when installing packages
  - If joined via adcli, delete computer with adcli too [#961244]
  - If input is not a tty, read from stdin without getpass() [#983153]
  - Configure pam_winbind.conf appropriately [#983153]
  - Refer to FreeIPA as IPA
  - Support use of kerberos ccache to join when winbind


author: Stef Walter <stefw@redhat.com> - 0.14.2-1
changelog:
  - Update to upstream 0.14.2 version
  - Discover FreeIPA 3.0 with AD trust correctly [#966148]
  - Only allow joining one realm by default [#966650]
  - Enable the oddjobd service after joining a domain [#964971]
  - Remove sssd.conf allow lists when permitting all [#965760]
  - Add dependency on authconfig [#964675]
  - Remove glib-networking dependency now that we no longer use SSL.


author: Stef Walter <stefw@redhat.com> - 0.14.1-1
changelog:
  - Update to upstream 0.14.1 version
  - Fix crasher/regression using passwords with joins [#961435]
  - Make second Ctrl-C just quit realm tool [#961325]
  - Fix critical warning when leaving IPA realm [#961320]
  - Don't print out journalctl command in obvious situations [#961230]
  - Document the --all option to 'realm discover' [#961279]
  - No need to require sssd-tools package [#961254]
  - Enable services even in install mode [#960887]
  - Use the AD domain name in sssd.conf directly [#960270]
  - Fix critical warning when service Release() method [#961385]


author: Stef Walter <stefw@redhat.com> - 0.14.0-1
changelog:
  - Work around broken krb5 with empty passwords [#960001]
  - Add manual page for realmd.conf [#959357]
  - Update to upstream 0.14.0 version


author: Stef Walter <stefw@redhat.com> - 0.13.91-1
changelog:
  - Fix regression when using one time password [#958667]
  - Support for permitting logins by group [#887675]


author: Stef Walter <stefw@redhat.com> - 0.13.90-1
changelog:
  - Add option to disable package-kit installs [#953852]
  - Add option to use unqualified names [#953825]
  - Better discovery of domains [#953153]
  - Concept of managing parts of the system [#914892]
  - Fix problems with cache directory [#913457]
  - Clearly explain when realm cannot be joined [#878018]
  - Many other upstream enhancements and fixes


author: Stef Walter <stefw@redhat.com> - 0.7-1
changelog:
  - Update to upstream 0.7 version
  - Remove files no longer present in upstream version
  - Put documentation in its own realmd-devel-docs subpackage
  - Update upstream URLs


author: Stef Walter <stefw@redhat.com> - 0.3-2
changelog:
  - Add doc files
  - Own directories
  - Remove obsolete parts of spec file
  - Remove explicit dependencies
  - Updated License line to LGPLv2+


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-8
changelog:
  - 1640919 - augroup fedora, test case failure: /CoreOS/vim/Regression/bz241308-use-augroup-for-rh-autocmds


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1763-2
changelog:
  - 1576470 - Suggest correct packages to get embedded interpreters working
  - add libappstream-glib for appstream-util
  - 1576483 - Vim needs Python2 to build


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1666-2
changelog:
  - suggests ruby-libs, python2-libs, python3-libs, perl-libs and lua-libs for vim and gvim(bug #1562057)


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1523-2
changelog:
  - gcc is no longer in buildroot by default
  - 1546116 - make vim-filesystem noarch package
  - remove %{_libdir}/vim, because it is unused


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.1428-4
changelog:
  - throw vim.1.gz out from vim-minimal and other manpages from vim-common
  - appdata should be in metainfo folder now


author: Karsten Hopp <karsten@redhat.com> 8.0.1102-1
changelog:
  - vim-update.sh - add test for succesful build and fixing grepping of update's list
  - patchlevel 1102


author: Karsten Hopp <karsten@redhat.com> 8.0.1092-1
changelog:
  - editing vim-update.sh for building package
  - patchlevel 1092
  - 1487175 - VIm conflicts in man pages


author: Zdenek Dohnal <zdohnal@redhat.com> - 8.0.685-3
changelog:
  - update python dependencies accordingly Fedora Guidelines for Python (python-devel -> python2-devel)


author: Karsten Hopp <karsten@redhat.com> 8.0.347-1
changelog:
  - patchlevel 347
  - 1405234 - Gvim fails to properly render after Openbox desktop switch
  - 1426296 - vim: FTBFS with python3-3.6.0-18.fc26


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.134-2
changelog:
  - f24->f25 vim: copy paste no longer works (bug #1401410) - deleting mouse setting block from defaults.vim


author: Karsten Hopp <karsten@redhat.com> 8.0.134-1
changelog:
  - patchlevel 134
  - f24->f25 vim: copy paste no longer works (bug #1401410) - revert previous changes, set mouse=v in defaults.vim


author: Karsten Hopp <karsten@redhat.com> - 7.4.1830-3
changelog:
  - mv vim.sh and vim.csh to source files
  - sh profile.d improvements: don't leak $ID, don't fail on nounset
    (rhbz#1339106 Ville Skyttä)


author: Karsten Hopp <karsten@redhat.com> - 7.4.1797-3
changelog:
  - use uncompressed help files. vimtutor and vi will access those when
    vim-common is installed.  (rhbz#1262182)
    No hard requirement vim-minimal -> vim-common added, to allow minimal
    installations


author: Karsten Hopp <karsten@redhat.com> - 7.4.1718-2
changelog:
  - add vimfiles_root macro (rhbz#844975)
  - add %_libdir/vim  directory for plugins (rhbz#1193230)
  - vi, rvi, rview, ex, view don't read vimrc anymore. They use virc instead
    (rhbz#1045815)
  - fix dates in changelogs when spec.vim is used and locale != 'C'


author: Karsten Hopp <karsten@redhat.com> 7.4.909-1
changelog:
  - patchlevel 909
  - Fedora vim now uses tarballs created from upstream git instead
    of just upstream patches. Now runtime files will have fixes, too.


author: Karsten Hopp <karsten@redhat.com> 7.4.009-1
changelog:
  - patchlevel 009
    mkdir("foo/bar/", "p") gives an error message
    creating a preview window on startup messes up the screen
    new regexp engine can't be interrupted
    too easy to write a file was not decrypted (yet)


author: Karsten Hopp <karsten@redhat.com> 7.4.5-1
changelog:
  - patchlevel 5
  - when closing a window fails ":bwipe" may hang
  - "vaB" while 'virtualedit' is set selects the wrong area


author: Karsten Hopp <karsten@redhat.com> 7.3.638-2
changelog:
  - fix some man page typos (#668894, #675480)
  - own usr/share/vim/vimfiles/doc/tags (#845564)
  - add path to csope database (#844843)


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Jan Macku <jamacku@redhat.com> - 10.00.10-1
changelog:
  - Allow updating rfkill switch status while in readonly root mode
  - service: Prevent variables from globbing
  - Allow updating mlocate.db while in readonly root mode


author: Jan Macku <jamacku@redhat.com> - 10.00.8-1
changelog:
  - rwtab: Add support for chrony
  - ifup-eth: Switch to bc utility, which supports floating point computations.
  - Replace grep -EL with subshell since -L changed behaviour


author: Jan Macku <jamacku@redhat.com> - 10.00.7-1
changelog:
  - Wait for scope link addresses as well as for scope global addresses
  - Remove deprecated option -m of pidof


author: Jan Macku <jamacku@redhat.com> - 10.00.5-1
changelog:
  - network-function: bridges are created by ifup-eth
  - network: don't fail with IFDOWN_ON_SHUTDOWN
  - Add ip6gre tunnel option
  - ifup-eth: Check that device name is set
  - Initscripts no longer care about rc.local


author: Jan Macku <jamacku@redhat.com> - 10.00.3-1
changelog:
  - rc.d/functions: fix escape sequence being output under systemd service units
  - Replace not working awk command with sed


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00.1-1
changelog:
  - consoletype/genhostid/usleep: allow disabling of deprecation warnings
  - network/ifup/ifdown: allow disabling of deprecation warnings
  - network/ifup/ifdown: deprecation warnings for 'network-scripts' added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00-1
changelog:
  - Move the /etc/rwtab.d & /etc/statetab.d folders to 'filesystem'
  - specfile: fix failing build because of incorrect use of (x86-64)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.83-1
changelog:
  - network-scripts: Add previously dropped error checking
  - network-scripts: Replace brctl with ip-link
  - Makefile: new release-commit rule added
  - src/rename_device.c: GCC warnings about unused return value suppressed
  - src/usernetctl.c: GCC warnings about unused return value suppressed
  - Makefile: allow sub-makefiles to run in parallel
  - specfile: netconsole service moved to /usr/libexec
  - specfile: services from /usr/lib/systemd moved to /usr/libexec
  - specfile: summary & description updated
  - specfile: no longer needed conflicts dropped
  - specfile: requirements cleanup
  - specfile: obsoletes on previous version of initscripts package added
  - specfile: network-scripts subpackage created
  - specfile: readonly-root subpackage created
  - specfile: netconsole-service subpackage created
  - README.md: Travis CI build icon added
  - .travis.yml: check the 'make install' proceeds as well
  - .travis.yml: initial commit
  - README.md: bug reporting described
  - README.dm: future of initscripts described
  - README.md: description added
  - README.md: references to old git branches added
  - README.md: initial commit
  - network-scripts: setting of firewall ZONE fixed
  - ifdown-post: artifact whitespace removed from the DBus call
  - l10n: drop .tx directory
  - l10n: add zanata.xml


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.82-1
changelog:
  - Makefile: make the creation of symlinks relative to path again
  - specfile: trailing file of netreport removed


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.81-1
changelog:
  - src/consoletype.c: deprecation warning added
  - src/genhostid.c: deprecation warning added
  - src/genhostid.c: fixed to not override /etc/hostid if it already exists
  - src/usleep.c: GCC warnings fixed
  - nis-domainname.service removed
  - fedora-* services renamed to more general names
  - specfile: missing fedora-domainname.service returned in systemd macros
  - COPYING updated to latest GNU version (GPLv2+)
  - network-scripts: control 'network' service with alternatives as well
  - netreport functionality dropped
  - networks moved into 'setup' package
  - lang.{sh,csh} moved into setup package
  - lang.{sh,csh} cleanup before moving to 'setup' package
  - src/sushell moved into 'policycoreutils' package
  - src/shvar.* removed
  - po/xgettext_sh removed
  - sys-unconfig removed
  - Outdated files from doc/ folder removed
  - make archive: ChangeLog generating removed
  - network-scripts: ifup & ifdown -- use alternatives system
  - adjtime moved into 'util-linux' package
  - specfile: simplified & updated to new repository layout
  - .gitignore files updated to new repository layout
  - Makefile simplified & updated to new repository layout
  - po/Makefile simplified & updated to new repository layout
  - src/Makefile simplified & updated to new repository layout
  - Repository scheme updated to new layout
  - fedora-readonly: command substitution warning fixed (null-byte input)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.80-1
changelog:
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - use proper shebang where appropriate
  - specfile: remove the systemctl call in the %postun phase
  - network-functions: use tr to upper case strings rather than awk
  - network-functions: add error messages for bonding installation
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed
  - netconsole: LSB header added
  - po/xgettext_sh*: converted to use to python3
  - network.service: 'reload' removed
  - ifup-tunnel: Support 'external' tunnels
  - spec: add gcc to BuildRequires
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.79-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network: add knob to optionally keep interfaces up during shutdown
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.78-1
changelog:
  - specfile: drop dependancy on /etc/system-release
  - ifup-post: always update nameserver & search entries in /etc/resolv.conf
  - network-scripts: forward DBus calls to /dev/null
  - Spelling fixes
  - Tell git to ignore *.o
  - Use grep -E instead of deprecated egrep
  - Avoid some unnecessary stat calls
  - systemd/system: symlinks for fedora-* services removed
  - network-scripts: firewall-cmd replaced with DBus calls
  - 'debugmode' subpackage dropped completely
  - sysconfig/init* files dropped
  - sysctl.conf.s390 dropped
  - usleep: change the error message to print the full replacement commandline


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.76-1
changelog:
  - Makefile: return make archive for testing purposes
  - Revert "Makefile: replace /var/run with /run"


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.75-1
changelog:
  - Makefile: $ROOT variable is now empty by default
  - Makefile: Fix additional error in commit b119d37d1
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - init.d/functions: convert2sec() function added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.73-1
changelog:
  - Makefile: replace /var/run with /run
  - Replace /var/run with /run everywhere
  - Update references to sysctl.conf
  - Drop sysctl.d/00-system.conf
  - Drop 256term.{sh,csh}
  - ARPUPDATE introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.72-1
changelog:
  - rename_device.c: rewrite of isCfg() function
  - Add *.old to list of ignored files
  - Replace usleep(1) calls with sleep(1) calls


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.71-1
changelog:
  - usleep: print deprecation warning from now on
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - specfile: mark 'rwtab' and 'statetab' as config files
  - killproc/status: add missing '-b <binary>' option
  - ifdown-eth: we need to flush global scope as well
  - ifup-eth: remove quote marks
  - po: download latest translations from zanata
  - rwtab: add /var/lib/systemd/timers
  - Update initscripts.pot
  - Port headers in xgettext_sh.py to 2017


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.68-1
changelog:
  - fedora-import-state: skip modifying of existing folders (#1347436)
  - functions: systemctl show now returns an error when unit does not exist


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.67-1
changelog:
  - import-state: restore also sensitivity part of SELinux context
  - network: run after network-pre.target
  - ifup-eth: fix setting preferred_lft and valid_lft
  - ifup: don't call nmcli on any lo device
  - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
  - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
  - rwtab: /var/lib/nfs needs to copy the files
  - functions: improve killing loops
  - ifup: set valid_lft and preferred_lft to forever for static ip
  - service: use systemd mangle for given service


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.66-1
changelog:
  - remove autorelabel stuff
  - autorelabel: turn quota off before relabeling
  - network: Treat other tunnel interfaces, fixes ifdown stage
  - autorelabel: call dracut-initramfs-restore before forced reboot
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - ifdown-eth: fix comparison


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.65-1
changelog:
  - init.d/functions: end with 0
  - fedora-loadmodules: we don't have readahead anymore
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - ifdown: clean ipv4 localhost addresses
  - ifup-eth: some bridge options are applied later
  - service: improve status and stop function for daemon with intscripts
  - init.d/functions: reload systemd if it can't see an initscript


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.64-1
changelog:
  - network-functions: fix wireless detection
  - fedora-readonly: use --make-slave with --bind mounts
  - import-state: don't run restorecon when it does not exist
  - network: modem type interfaces should explicitly start after and stop before common interfaces
  - ifup-post: should be interpreted in bash


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.63-1
changelog:
  - remove ipcalc, it has its own package now
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - ifup: don't call NM for loopback
  - clarify daemon() usage message
  - rename_device: allow non-channel nics for s390x machines
  - ifup: add missing quotes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.62-1
changelog:
  - network-functions: fix change_resolv_conf after grep update
  - ifup-aliases: don't return with error when arping fails
  - init.d/functions: rc.debug option to debug initscripts
  - ifup-aliases: inherit ARPCHECK from parent device
  - network: report that we can't shut down network for root on netfs
  - ifdown-eth: use scope host for lo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.61-1
changelog:
  - specfile cleanup
  - ifup-ipv6: set accept_ra to 2 when IPV6FORWARDING=yes and IPV6_AUTOCONF=yes
  - ifup-post: check resolve.conf also with DNS2
  - ifup-aliases: do not fail when only ipv6 addr is specified
  - fedora-import-state.service: run a little bit later
  - fedora-readonly: Updates for systemd random-seed handling
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - ifdown-post: remove resolv.conf only in specific cases
  - network-functions: fix check in install_bonding_driver


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.60-1
changelog:
  - improve check for bond master in install bonding driver
  - network-functions: reeplace iwconfig with iw
  - ifup: fix typo
  - ifdown-ipv6: reset addrgenmode to eui64 for device


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.56-1
changelog:
  - network_function: return immediately when device is pres
  ent
  - add configurable DEVTIMEOUT
  - fedora-import-state: do not clobber /
  - network-functions: grep->fgrep in bonding masters matchi
  ng
  - man: update sys-unconfig.8
  - rename_devices: comments need to have a blank before them
  - add example ifcfg files
  - network-functions: improve bonding_masters grep
  - ifup: if we were unable to determine DEVICE always call nmcli up
  - ifup-tunnel: call ifup-ipv6 in the end
  - ifup: also set multicast_snooping after the bridge is up
  - network-functions: ETHTOOL_DELAY introduction patch
  - use pie and relro by default
  - custom naming for VLAN devices
  - vi.po: fix parentheses
  - ifup-wireless: add support for wowlan
  - ifup-wireless: add support for wowlan (second part)
  - ifup-aliases: do not bring up ipv6 for range files
  - sys-unconfig: use poweroff instead of halt
  - ifup-aliases: improve duplicate address detection
  - network-functions: handle BONDING_OPTS better
  - network: tell nm to wake the slaves


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.55-1
changelog:
  - fix license handling
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - inittab: fix path and mention set-default
  - don't require /sbin/sysctl
  - init.d/functions: check parent dir of pid file for accessibility
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - remove ppp from translation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.54-1
changelog:
  - move ppp support to ppp package
  - remove fedora-configure
  - network: detect if / is on netfs
  - is_nm_handling: fix RE
  - bonding: match whole name of interface
  - network: add support for team devices
  - ifup-wireless: fix syntax error
  - fedora-readonly: fix prefix detection


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.53-1
changelog:
  - bridging: add possibility to set prio and ageing
  - ifup: add possibility to specify value for -w parameter of arping
  - network: try to not compete with NM during boot
  - fedora-domainname: DefaultDependencies=no
  - service: add condrestart to allowed commands
  - update ifup/ifdown NetworkManager interaction once more(#1036701, #1061810)
  - network: modify ifup-wireless so it doesn't call exit
  - set shmmax and shmall defaults to match rhel6 values (#1056547)
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - service: fix action matching
  - remove ifup-ipx from spec
  - Delete IPX support.
  - remove dependency on sysvinit-tools


author: Lukáš Nykrýn <lnykryn@redhat.com> 9.51-1
changelog:
  - readonly-root: bind-mount only necessary subset of entries in rwtab
  - readonly-root: Add /var/log/audit/audit.log to rwtab
  - readonly-root: restore selinux context after bind mount
  - rename_device: remove comments and trailing whitespaces
  - service: suggest using systemctl if unknown action is used
  - ifup-eth: fix typo in error message
  - use iw instead of iwconfig and friends
  - update functions who call nmcli
  - ifdown: fix typo in nmcli call


author: Lukas Nykryn <lnykryn@redhat.com> - 9.50-1
changelog:
  - ipcalc: support RFC3021 (#997271)
  - symlink /etc/sysctl.conf -> /etc/sysctl.d/
  - man: only action specified in LSB are redirected to systemd
  - service: filter actions that are not supported by systemctl in service (#947823)
  - install_bonding_driver: drop check for existing device (#991335)
  - consider IPV6INIT undefined as YES
  - don't care about network filesystems


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.48-1
changelog:
  - man: add systemd man pages to service.8 "see also" section
  - add possibility to set domainname through /etc/sysconfig/network
  - rename_device: don't wait for lock with lower permissions
  - 256term.csh: remove quotes around variable (#979796)
  - drop useless variables from /etc/sysconfig/init
  - readonly-root: rpcidmapd restart is not needed anymore
  - ifup-eth: print error only if arping is really called (#974603)
  - readonly-root: Add /var/lib/samba to rwtab


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.47-1
changelog:
  - network-functions: to determine state of nscd check socket not lock (#960779)
  - sysconfig.txt advised saslauthd -a instead of -v
  - update translations from transifex
  - drop translation for other initscripts
  - tweak ifup/ifdown usage and man page (#961917)
  - ctrl-alt-delete.target is provided by systemd package
  - remove some defaults from arch specific sysctl.conf
  - readonly-root: remount rpc_pipefs if readonly-root is used
  - service: mention legacy actions and systemctl redirection in man page


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.46-1
changelog:
  - add /var/lib/NetworkManager
  - add ipip6 tunneling support (#928232, raorn@raorn.name)
  - bonding: set master up before slaves
  - set net.ipv6.conf.SYSCTLDEVICE.autoconf in ifup-ipv6
  - ifdown: don't call nmcli on interface that is alread down
  - remove some defaults from sysctl.conf (move to systemd)
  - call flush addresses with scope global
  - service: action should not be empty when calling legacy-actions (#947817)
  - ifup-eth: ignore arping errors (#928379)
  - replace tunctl with ip tuntap (#947875)
  - reload sysctl settings for vlans on ifup
  - try dhcpv6 after v4 failed (#846618)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.45-1
changelog:
  - turn on symlink protections in sysctl (#922030)
  - add systemd-random-seed.service to  Before= in fedora-readonly.service (#888615)
  - mention rule6 files in sysconfig.txt
  - skip nmcli for wireless device (#863707)
  - remove config-noreplace from /etc/inittab (#627474)
  - remount-rootfs.service got renamed to systemd-remount-fs.service
  - compile netreport and usernetctl with full RELRO and PIE (#853178)
  - move stuff directly to /usr (#905492)
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - fix greps to correctly handle comments and quotation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.44-1
changelog:
  - limit udev rule for network renaming (#907365, mschmidt@redhat.com)
  - fix path for arpwatch, seems to be in /var/lib on Fedora 18
  - fix the path for lvm cache, there is no file /etc/lvm/.cache ( but there is one /etc/lvm/cache )
  - fix path for dhcpd, is /var/lib/dhcpd since 2005 ( see 31cdb58df77 on the dhcp package git )
  - fix the patch for apache modules in rwtab, that are now in /var/cache/httpd
  - remove no longer used directory ( at least in Fedora ), hald is deprecated,
    /var/tux cannot be found and xend seems to use a subdirectory of /var/lib/xen
  - correct the path for puppet directory in /etc/rwtab, now use /var/lib/puppet by default
  - allow passing -F from /.autorelabel to fixfiles when relabeling system (#904279)
  - correctly detect Open vSwitch device types
  - clear DEVICE and TYPE variables before every iteration (#902463)
  - sets BONDING_OPTS before interface is brougth up
  - check an IP address for existence in ifup-alias (#852005)
  - sync FSF address with GPL 2 text.
  - fix rpmlint's spaces vs tabs warning.
  - fix bogus %changelog dates.
  - build with $RPM_LD_FLAGS.
  - use -sf, not -s. (#901827)
  - add /usr/libexec/initscripts to file list (#894475)
  - rename term256 to 256term (glob sort) (#849429)
  - readd missing shebang. (#885821)
  - migrate even further away from /etc/sysconfig/network for hostname, and /etc/sysconfig/i18n.


author: Bill Nottingham <notting@redhat.com> - 9.43-1
changelog:
  - 60-net.rules: explicitly set the interface name (#870859)
  - ifup-eth: set firewall zone before ifup-ipv6 for DHCPv6 (#802415)
  - migrate to /etc/locale.conf, /etc/vconsole.conf (#881923)
  - rename_device: fix bogus locking
  - fix wireless device detection for kernel 3.6 (#875328)
  - drop fedora-storage-init, fedora-wait-storage (<prajinoha@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.42-1
changelog:
  - Halloween release!
  - add a default /etc/sysctl.conf that describes how to change values, and where the defaults now live. (#760254)
  - translation updates
  - fedora-autorelabel: don't pass -F to fixfiles (#863662, <dwalsh@redhat.com>)
  - fix calling of firewall-cmd in ifup-post/ifdown-post (<jpopelka@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.41-1
changelog:
  - debugmode: MALLOC_CHECK_ is not thread safe. Don't enable it by default (#853175)
  - Add support for 256 color terminals (<pbrady@redhat.com>)
  - ifdown-eth: be less strict about VLAN name (#505314, <vpavlin@redhat.com>)
  - drop prefdm
  - ifup-eth: allow duplicate address detection to be disabled (<bcodding@uvm.edu>)
  - process rule6-* for sit devices (#840009, <lnykryn@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.39-1
changelog:
  - assorted documentation cleanups
  - typo, spelling, licenese clean up (<ville.skytta@iki.fi>)
  - service: add support for legacy custom actions packaged in
    /usr/libexec/initscripts/legacy-actions/<script>/<action>
  - network-functions: handle quoted HWADDR (#835372)
  - allow bridge names that start with '-' (<danken@redhat.com>)
  - remove all non-legacy uses of /sbin/route (#682308)
  - move default sysctl.conf to /usr/lib/sysctl.d (#760254)


author: Bill Nottingham <notting@redhat.com> - 9.36-1
changelog:
  - ifup-aliases: fix IFS usage mangling of device names (#802119)
  - ifup/ifdown: fix typo (#802055, <lubek@users.sourceforge.net>)


author: Bill Nottingham <notting@redhat.com> - 9.35-1
changelog:
  - use the same DHCP lease file names as NetworkManager, where appropriate
  - copy network state from initramfs with a systemd service, not inline (<wwoods@redhat.com>)
  - sysconfig.txt: clean up section on disabling IPv6
  - ifup: allow for ifup-$TYPE/ifdown-$TYPE
  - fedora-readonly.service: drop StandardInput=tty (#785662)
  - sysconfig.txt: document additional ETHTOOL_OPTS enhancements (<raghusiddarth@gmail.com>)
  - port assorted ancient ifup-XYZ scripts away from ifconfig
  - don't use ifconfig in ifup-aliases (#721010, 588993, based on <tgummels@redhat.com>)
  - fedora-storage-init: handle dmraid sets with spaces (#728795, <lnykryn@redhat.com>)
  - fedora-readonly: don't exit with an error if SEinux isn't active. (#768628)
  - init.d/network: fix checks for network filesystems (#760018)
  - fedora-wait-storage: drop stdin/stdout/stderr (#735867)
  - netfs: move to legacy package
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 9.34-1
changelog:
  - read locale.conf if it exists (#706756)
  - ifdown: fix logic error with removing arp_ip_target (#745681)


author: Bill Nottingham <notting@redhat.com> - 9.33-1
changelog:
  - netconsole: only use the first ARP response (#744309, <doug.knight@karmix.org>)
  - udev/rules.d/88-clock.rules: drop this entirely, as it causes issues in conjunction with systemd
  - init.d/network: be less picky about ifcfg file names. (#742276)
  - /sbin/service: do not check for the existence of a systemd unit before redirecting (<mschmidt@redhat.com>)
  - init.d/functions: only run consoletype if connected to something that's console-ish. (#657869)


author: Bill Nottingham <notting@redhat.com> - 9.32-1
changelog:
  - prefdm: if exec() of all DMs fails, call 'plymouth quit' (#735215)
  - %ghost rc.local (but leave it around on upgrade) (#734268)
  - ifup: support random bridging options via BRIDGING_OPTS (#734045, #665378)
  - selinuxfs moved to /sys/fs, handle it (#733759)
  - netfs/fedora-storage-init: call multipath and kpartx with -u (#733437)
  - plymouth lives in /bin (#702814)
  - drop fedora-autoswap
  - ifdown-eth: fix dhclient pid file for IPv6 (#729292, <daveg@dgit.ndo.co.uk>)
  - move some more things to the legacy subpackage
  - netfs: don't mount gfs2 here (#689593)
  - readonly-root: add an empty CLIENTSTATE definition (#725476)
  - drop sysinit hack/unhack
  - ifup-eth: allow more options in ETHTOOL_OPTS (#692410, #693583)
  - rwtab: update for systemd (#704783)
  - debug.csh: fix for latest csh
  - update translations: eu_ES, hy, ku, lo, my, wa


author: Bill Nottingham <notting@redhat.com> - 9.31-1
changelog:
  - remove ifup/ifdown-ipsec; they're now in ipsec-tools
  - rc.sysinit: start udev by hand, start_udev is no more (#714531)
  - ifup-aliases: if IPv6 is configured on the alias, configure it. (#583409)
  - ifup-eth: ensure DHCP_HOSTNAME is a short hostname, seed it from HOSTNAME if needed. (#697877)
  - network-functions: override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - exclude single symlink from main package (#705457)
  - network: VLAN, etc. interfaces can be slaves; check for being a slave first. (#703475)
  - network: use LC_ALL=C when calling sed. (https://bugs.mageia.org/show_bug.cgi?id=1216, via <sander.lepik@eesti.ee>)
  - functions: (umount_loop) fuser -k defaults to -9; set the initial pass to kill -15. (#703457)
  - init.d/halt: don't match filesystem types in hostnames (#703203, <jmueller@data-tronics.com>)


author: Bill Nottingham <notting@redhat.com> - 9.30-1
changelog:
  - ifup-eth: handle IPADDRx correctly for static addresses (#697838)
  - systemd: fix storage setup service after cryptsetup.target (#699918)
  - prefdm: tweak how plymouth is quit in the gdm/kdm case (<rstrode@redhat.com>)
  - support /etc/hostname as an override for hostname in /etc/sysconfig/network
  - init.d/single: only ship this in -legacy
  - network-functions: fix IPADDRx index handling (<jklimes@redhat.com>)
  - ifup/down-eth: properly handle apr_ip_target, when used with module options (#604669, <harald@redhat.com>)
  - ifup-eth: ensure bond exists before bringing up slaves (#694501)


author: Bill Nottingham <notting@redhat.com> - 9.29-1
changelog:
  - systemd: add a storage setup service after cryptsetup.target (#692198)
  - fix /.autorelabel handling (<mschimdt@redhat.com>)
  - don't explicitly disallow IPv6 aliases (#583409, #612877)
  - netfs: don't print errors if mdadm isn't installed. (#692187)
  - ifup-eth: use /run/initramfs rather then /dev/.run/initramfs (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.28-1
changelog:
  - add some generic network logging, port scripts to it (#507515, #653630)
  - add an error when setting the gateway fails (#672202)


author: Bill Nottingham <notting@redhat.com> - 9.27-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode. (#685137)
  - support ipv6 routing rules, merge route/rule code (#680872, <tobiasoed@hotmail.com>)
  - autorelabel.service, loadmodules.service: fix conditions so that they operate as OR, not AND. (#684125)


author: Bill Nottingham <notting@redhat.com> - 9.26-1
changelog:
  - network-functions: fix check for unmanaged devices (#670154)
  - ifup-eth: also check /dev/.run/initramfs (<harald@redhat.com>)
  - systemd: execute fedora-sysinit-unhack after sysinit.target (<arvidjaar@gmail.com>)
  - init.d/functions: don't do force/lazy umount for the first nfs umount. (#676851, <jlayton@redhat.com>)
  - further sysctl.d fixes (#593211)
  - init.d/functions: make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - ifup: add GVRP support (#597598, <tomek@jot23.org>)
  - init.d/functions: add support for noauto crypt devices, to mirror systemd
  - documentation updates
  - bash cleanups (<ville.skytta@iki.fi>)
  - ifup: remove network device naming requirement from VLAN devices (#462095, <Matt_Domsch@dell.com>)


