04-04-2003	
	A summary of updates to LSM and SELinux since the 01-15-2003
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.bkbits.net for more information about the LSM updates.

	Updates to LSM:
	  Merged 2.5.59.
	  Restored file_permission hooks to sendfile.
	  Revised private file changes.
	  Moved syslog capable check into syslog hook.
	  Added CONFIG_SECURITY_NETWORK option.
	  Merged 2.5.62.
	  Merged 2.5.64.
	  Merged 2.5.65.
	  Merged 2.5.66.

	Updates to SELinux:
	  Restored sem_semop hook to 2.5.
	  Added recv_msg permission check.
	  Merged apache diff (Tom Vogt).
	  Merged policy patches (Russell Coker, Carsten Grohmann).	
	  Include errno.h in libsecure/src/security.c (Petr Vandrovec).
	  Merged version 0.7 of setools (Tresys).
	  Separated core policy and started audit+reduction.
	  Changed setfiles to give precedence to fully specified paths.
	  Fixed SELinux ptrace checking.
	  Fixed bug in SELinux swapoff hook.
	  Use kernel SID for kernel threads in reparent_to_init, kmod_set_label.
	  Merged usermod/group* patch (David Caplan, Tresys).
	  Added ARM port (Dave Dodge).
	  Added mainline 2.5-based SELinux.

01-15-2003
	A summary of updates to LSM and SELinux since the 12-12-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.bkbits.net for more information about the LSM updates.

	Updates to LSM:
	  Back ported 2.5 nfsd changes to use init_private_file.
	  Merged 2.5.52.
	  Merged 2.5.53.
	  Back ported LSM changes from lsm-2.5 to lsm-2.4:
		Make LSM configurable (CONFIG_SECURITY).
		Allow modules to only set hooks that they want to use.
		Add hooks for xattr operations.
		Drop file_llseek hook.
		Rework System V IPC hooks.
	  Added d_instantiate hook, removed inode_post_lookup hook.
	  Merged 2.5.54.
	  Merged 2.5.55.
	  Merged 2.5.56.
	  Merged 2.5.57.
	  Merged 2.5.58.
 
	Updates to SELinux:
	  Added sysvipc entry to genfs_contexts to avoid matching on sys.
	  Updated policy for driverfs to sysfs name change in 2.5.
	  Fixed bug in logrotate base code (Russell Coker).
	  Reworked inode security initialization.
	  Added xattr hooks to 2.4 module.
	  Replaced inode_post_lookup with d_instantiate hook function.
	  Fixed bug in 2.5 task_kill hook function.
	  Enhanced description lines in .te files for display by sepcut.
	  Updated the policy report.
	  Updated the spasswd README.
	  Updated sds' email address.
	  Merged setools (Tresys). 
	  Fixed a bug in scmpd.

12-12-2002
	A summary of updates to LSM and SELinux since the 10-22-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.bkbits.net for more information about the LSM updates.

	Updates to LSM:
	   Merged 2.5.45.
	   Merged 2.5.46.
	   Merged 2.5.47.
	   Simplified LSM IPC hooks in 2.5.
	   Added file_alloc_security/free_security calls for private files.
	   Merged 2.5.48.
	   Merged 2.5.49.
	   Merged 2.4.20.
	   Merged 2.5.50.
	   Make LSM configurable, convert all hooks to new format (lsm-2.5).
	   Merged 2.5.51.

	Updates to SELinux:
           Removed httpd_cache_port_t bind access from $1_ssh_t (bug fix).
           Removed __exit attribute from several selopt functions (bug fix).
           Merged policy diffs (Russell Coker).
           Merged newrules.pl, libsecure Makefile diffs (Carsten Grohmann).
	   Restored missing ipv4_specific declaration to selinux-2.5.patch.
	   Changed selinux-2.[45].patch to permit non-SELinux builds.
	   Dropped fs/namei.c diff from selinux-2.[45].patch.
	   Added fs/dcache.c diff to selinux-2.[45].patch.
	   Created Kconfig file for 2.5 SELinux module.
	   Fixed security/selinux/flask Makefile for 2.5 SELinux module.
	   Removed inline attribute from avc_has_perm_ref_audit.
	   Merged revised crond/fcron policy (Russell Coker).
	   Add synchronization to inode_doinit.
	   Added domain for pamconsole.
	   Added initial SID and context for SCMP packets.
	   Changed inode_doinit to allocate security structure if necessary.
	   Convert selinux-2.5.patch to new hook format.
	   Merged sockaddr typecast patch (Russell Coker).
	   Removed inode_init stub hook functions from selinux-2.5.patch,
		stub hooks unnecessary as of 2.5.51.
	   Merged updated strace patch (Russell Coker).
	   Updated logrotate patch to RH8.0 logrotate-3.6.5-2 SRPM.

10-22-2002
	A summary of updates to LSM and SELinux since the 08-23-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.bkbits.net for more information about the LSM updates.

	Updates to LSM:
          Merged 2.5.32 (lsm-2.5).
          Merged 2.5.33 (lsm-2.5).
	  Pass listening sock to tcp_create_openreq_child (both).
          Merged 2.5.34 (lsm-2.5).
          Merged 2.5.35 (lsm-2.5).
          Merged 2.5.36 (lsm-2.5).
	  Added sb_kern_mount hook (both).
	  Merged 2.5.37 (lsm-2.5).
	  Merged 2.5.38 (lsm-2.5).
	  Merged 2.5.39 (lsm-2.5).
	  Merged 2.5.40 (lsm-2.5).
	  Merged 2.5.41 (lsm-2.5).
	  Merged 2.5.42 (lsm-2.5).
	  Merged 2.5.43 (lsm-2.5).
          Added open_request_alloc_security, open_request_free_security,
          tcp_connection_request, tcp_synack hooks.
          Pass open request structure to tcp_create_openreq_child hook.
	  Merged 2.5.44 (lsm-2.5).
	
	Updates to SELinux:
	  Added chkpwd domain.
	  Changed SELinux module to save the socket SID in the sock
	  security structure for labeling outgoing packets when the
	  sock is not attached to a user socket. 
  	  Fixed a bug in the audit output for name_bind checks.
	  Fixed a bug in the constraint evaluation code.
	  Changed login, sshd, and crond to use new libsecure functions and
		new /etc/security/default_contexts configuration.
	  Fixed a bug in setfiles when checking for conflicts.
	  Fixed a bug in the persistent label mapping code.
	  Added sb_kern_mount and inode_init hooks to SELinux kernel patch.
	  Exterminated precondition functions.
	  Added capability check for KDSKB(S)?ENT ioctl (loadkeys).
	  Removed obsolete permissions from access_vectors and policy.
	  Added signull permission for kill(pid, 0).
	  Incremented policy version number for new access_vectors definitions.
	  Fixed bug in SELinux handling of pivot_root.
	  Added domain for suseradd/suserdel.
	  Changed suseradd/suserdel to reset labels on /etc/group and /etc/gshadow.
	  Merged policy diffs (Russell Coker).
	  Merged spasswd signal patch (Russell Coker).
	  Merged updated amanda domain (Carsten Grohmann).
	  Merged policy diffs (Carsten Grohmann).
	  Merged checkpolicy patch (Frank Mayer, Tresys).
	  Added popen_secure/pclose_secure to libsecure.
	  Changed sshd to use popen_secure/pclose_secure.
	  Restructured architecture-specific code (Dave Dodge).
	  Updated SELinux tar patch to tar-1.13.25-4.7.1.
	  Fixed omissions in SELinux fileutils patch.
          Implemented the swapoff hook.
          Implemented reliable new connection SID labeling for the useclient
          case. Implemented correct labeling of the SYN/ACK on new connections.
          These changes use the tcp_connection_request and tcp_synack hooks.

08-23-2002
	A summary of updates to LSM and SELinux since the 07-03-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.bkbits.net for more information about the LSM updates.

	Updates to LSM:
	  Hook flattening (both).
	  Merged 2.5.25 (lsm-2.5).
	  Added reparent_to_init hook (both).
	  Removed LSM NetFilter-based IP hooks (both).
	  Merged 2.5.26 (lsm-2.5).
	  Merged 2.5.27 (lsm-2.5).  Includes framework, task/binprm hooks.
	  Merged 2.5.28 (lsm-2.5).
	  Merged 2.5.29 (lsm-2.5).  Includes file-related hooks.
	  Fixed several minor bugs in the IPC hooks (both).
	  Added settime hook (both).
	  Fixed file_lock hook (both).
	  Merged 2.4.19 (lsm-2.4).
	  Merged 2.5.30 (lsm-2.5).
	  Merged 2.5.31 (lsm-2.5).
	  Fixed dnotify_struct leak (both).
	  Added security field and hooks for struct sock (both).

	Updates to SELinux:
	  Minor policy revisions based on user feedback.
	  Fixed checkpolicy to accept - in genfs_contexts pathnames.
	  Removed duplicate lstat_secure call from setfiles.
	  Replaced (|/.*) with (/.*)? in *.fc files to conform to regex(7).
	  Fixed auditdeny logic bug (Russell Coker).
	  Merged automatic type transitions for pts in devfs (Rogelio M. Serrano Jr).
	  Changed SELinux module to directly register its Netfilter hooks (James Morris).
	  Changed openssh-3.4p1 Makefile to add sshd user if one doesn't exist.
	  Removed setattr permission from rw_file_perms and rw_dir_perms macros.
	  Added SELinux patch for strace-4.4 (Russell Coker).
	  Fixed several bugs in the PSID mapping code.
	  Short term fix for bug in ipc_permission.
	  Install setfiles man page (Carsten Grohmann).
	  Merged policy management diffs (Frank Mayer, Tresys).
	  Fixed multibyte errors in tar (David Caplan, Tresys).
	  Re-implemented peer SID functionality using new sock hooks.
	  Changed the sysctl hook and /proc/sys labeling to be configurable.
	  Merged with Russell Coker's policy (Russell Coker).

07-03-2002
	A summary of updates to LSM and SELinux since the 05-31-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.bkbits.net for more information about the LSM updates.

	Updates to LSM:
	  Merged 2.5.20 (lsm-2.5).
	  Merged 2.5.21 (lsm-2.5).
	  Added official IA64 number for sys_security (lsm-2.4).
	  Merged 2.5.22 (lsm-2.5).
	  Merged 2.5.23 (lsm-2.5).
	  Merged 2.5.24 (lsm-2.5).
	   
	Updates to SELinux:
	  Made many policy sections optional, added keywords as necessary.
	  Added dontaudit rules, changed all auditdeny rules to dontaudit form.
	  Changed kernel module to reload PSID mapping after a policy reload
	    upon a change_root or pivot_root operation.
	  Changed checkpolicy to display recently scanned line contents on 
		errors and warnings.
	  Generalized filesystem labeling support and made it configurable.
		Added genfs_contexts.
		Added fs_use.
		Removed devfs_contexts (obsoleted by genfs_contexts).
		Removed nfscon (obsolete, dead code).
		Removed hardcoded usbdevfs logic (obsoleted by genfs_contexts).
		Changed proc to use genfs_contexts except for /proc/pid and /proc/sys.
		Removed initial SIDs related to particular filesystem types.
		policydb -> version 11
	  Implemented labeling for kernel-generated IGMP packets. 
	  Merged policy diffs from selinux-small_2002053110-3.diff (Russell Coker).
	  Added attrib.te - explicit type attribute declarations.
	  Implemented labeling for Netfilter-injected ICMP packets.
	  Updated sysctl SID tables.
	  Merged xserver.fc and sendmail.fc updates for RH7.3 (Justin Smith).
	  Fixed bug in udp_client.c and unix_dgram_client.c (James Morris).
	  Merged amanda policy (Carsten Grohmann).
	  Updated openssh patch to openssh-3.4p1 from openssh.org.
	  Removed direct transitions from sshd_t to sysadm_t.
	  Changed root entry in utils/appconfig/*context to default to user_r.
	  Added ichsid call and added -i option to setfiles.
	  Merged samba policy (Ryan Bergauer).
	  Merged policy diffs from selinux-small_2002053110-4.diff (Russell Coker).
	  Added support for loading gzipped policies.

05-31-2002
	A summary of updates to LSM and SELinux since the 05-02-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.bkbits.net for more information about the LSM updates.

	Updates to LSM:
	  Merged 2.5.13 (lsm-2.5).
	  Removed bdflush hook (lsm-2.5).
	  Added permission_lite hook (lsm-2.5).
	  Merged 2.5.14 (lsm-2.5).
	  Merged 2.5.15 (lsm-2.5).
	  Merged 2.5.18 (lsm-2.5).
	  Removed revalidate hook (lsm-2.5).
	  Changed stat hook to getattr hook (lsm-2.5). 
	  Merged 2.5.19 (lsm-2.5).
	  Updated Makefiles for kbuild changes (lsm-2.5).

	Updates to SELinux:
	  Fixed checkpolicy to accept . in devfs_contexts pathnames.
	  Implemented ICMP notifications for send*_secure denials.
	  Fixed security_get_sids locking and layering.
	  Implemented connection peer SID list for accept_secure.
	  Added separate kernel config option for extended socket calls.
	  Moved optional extended socket call processing into extsocket.h.
	  Added audit flag to avoid dcache deadlocks on exec_permission_lite.
	  Implemented permission_lite hook (2.5).
	  Changed run_init to chdir / prior to executing the program.
	  Added -q option to setfiles.
	  Moved the NSID and Selopt options under Experimental.
	  Permit blocking allocation when loading the policy. 
	  Fixed connection permission revalidation for extended socket calls.
	  Allow enforcing mode to be selected at boot time (development).
	  Audit the comm if the exe cannot be safely obtained.
	  Updated the quotactl hook (2.5).
	  Added support for MLS trusted subjects and objects.
	  Added support for runtime checking of MLS policy presence.

05-02-2002
	A summary of updates to LSM and SELinux since the 3-14-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.immunix.org for more information about the LSM updates.

	Updates to LSM:
	  Merged 2.5.7 (lsm-2.5).
	  Added sock post_accept and skb recv_datagram hooks (both).
	  Fixed priorities of NetFilter-based hooks relative to conntrack.
	  Removed nfsservctl hook (lsm-2.5).
	  Merged 2.5.8 (lsm-2.5).
	  Merged 2.5.9 (lsm-2.5).
	  Added pivotroot and post_pivotroot hooks (both).
	  Merged 2.5.10 (lsm-2.5).
	  
	Updates to SELinux:
	  Changed installation to use the setfiles reset target.
	  Fixed build ordering for selopt.
	  Partitioned the file_contexts configuration.
	  Protect libsecure headers against multiple inclusion (Russell Coker).
	  Split httpadm.te from apache.te (MITRE).
	  Merged ntpd domain (Russell Coker).
	  Fixed getdate.y files (Dale Amon).
	  Merged various policy revisions (Russell Coker).
	  Merged domains for courier, devfsd, dhcpd, gpg, ldconfig (Russell Coker).
	  Merged changes to ipsec domain (Paul Krumviede).
	  Merged additional network interface types (Reino Wallin).
	  Implemented the internal processing for the extended socket calls.
	  Changed newrole and run_init to display the SELinux user identity.
	  Moved run_init program to sbin and man page to section 8.
	  Added support for stacking owlsm w/o CONFIG_OWLSM_FD.
	  Added magic number and string identifier to policydb, moved
		installed policy to /etc/security/selinux/policy.VERSION.
	  Merged some policy Makefile changes (Russell Coker).
	  Fixed SMP problems in the security server, AVC, and hook functions.
	  Merged devfsd module (Russell Coker).
	  Merged server port types (Russell Coker).
	  Merged speedmgmt, dictd, radius, cups, usbmodules, dpkg, sysstat,
	    radvd domains and updated courier domain (Russell Coker).
	  Moved init_t sigchld rules into init.te.
	  Merged -s option into setfiles and setfiles man page (Russell Coker).
	  Moved file contexts configuration under policy.
	  Merged bootloader (lilo) domain (Russell Coker).
          Changed checkpolicy to allow nested brackets to support unions
		of class and permission macros.	
	  Merged modifications to named domain (Russell Coker).
	  Try reloading the policy from the real root filesystem after a pivot.

03-14-2002
	A summary of updates to LSM and SELinux since the 1-18-2002
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.immunix.org for more information about the LSM updates.

	Updates to LSM:
	  Merged 2.5.3 (lsm-2.5).
	  Inserted setgroups hook call into sys_setgroups16 (both).
	  Eliminated dup fd lookup on fcntl(F_*LK) code paths (both).
	  Inserted lock hook call into fcntl*lk operations for consistency (both).
	  Added hooks for extended attribute operations (lsm-2.5).
	  Merged 2.5.4 (lsm-2.5).
	  Added binprm check_security hook (both).
	  Merged 2.5.5 (lsm-2.5).
	  Merged 2.4.18 (lsm-2.4).
	  Merged 2.5.6 (lsm-2.5).

	Updates to SELinux:
	  Minor policy revisions based on feedback.
	  Merged snort domain (Shaun Savage).
	  Merged devfs_context changes, new pppd domain, new nscd domain, new squid domain (Russell Coker).
	  Updated findutils, psmisc, stat, and tar patches to RH7.2 SRPMS
	    (initial update by Shaun Savage, some revisions by Bede McCall).
	  Added rpm utility domain.
	  Removed immutable/append restriction from chsid.
	  Fixed avc_audit to check the skb->protocol value.
	  Fixed bug in runas (Russell Coker).
	  Added initial permission checks for extended attribute operations.
	  Merged Selopt (James Morris).
	  Revised SELinux socket/network access controls to use Selopt. 
	  Added domains for Selopt daemon (scmpd) and utilities.
	  Merged default user (user_u) for unspecified Linux users (Mark Westerman).
	  Fixed setfiles to support large files.
	  Added minimal support for usbdevfs labeling.
	  Added -R option to setfiles and reset target to Makefile.
	  Renamed gdm* to xdm* in the policy and added type aliases.
	  Fixed a bug in checkpolicy related to type aliases.
	  Deprecated clone statements and role transition statements.
	  Made TE assertions order-independent.
	  Moved every.te rules into every_domain macro.  Started partitioning.
	  Removed general read access to home directory types.
	  Partitioned role declarations.
	  Partitioned domain transitions for big "multiplexor" domains:
	     init_t, initrc_t, userdomain (user_t/sysadm_t), inetd_t, tcpd_t
	  Partitioned terminal access rules via type attributes.
	  Added consistent transitions from sysadm_t to admin program domains.
	  Moved all macro definitions to new macros hierarchy, use includes
	    for non-global macros, eliminate ordering dependencies.
          Reorganized domains hierarchy; merge system into program, move
	    user and admin up one level. 
	  Started cleaning up domains to provide better encapsulation.
	  Fixed function prototypes for new syscalls (Russell Coker).
	  Merged bug fix for channel code of openssh (OpenSSH).
	  Updated openssh patch to openssh-3.1p1-2 from RedHat.
	  Moved *stat64* calls and test program into arch/i386 subdirectories.

01-18-2002
	A summary of updates to LSM and SELinux since the 12-10-2001
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.immunix.org for more information about the LSM updates.

	Updates to LSM:
	  Merged 2.5.1 (lsm-2.5).
	  Removed the super_block parameter from the post_mountroot hook (both).
	  Reverted the kill-1 change (lsm-2.5).
	  Moved the super_block alloc_security and free_security hook calls (both).
	  Moved the super_block check_sb and post_addmount hook calls into
	    graft_tree to cover all mounts, including bind and move mounts (both).
	  Merged 2.4.17 (lsm-2.4).
	  Added support for kbuild-2.5 (both).
	  Merged 2.5.2 (lsm-2.5).
          Swap and scheduler fixes for 2.5.2 (lsm-2.5).
	
	Updates to SELinux:
	  Updated util-linux-2.11f patch to util-linux-2.11f-17.
	  Fixed bug in selinux_file_send_sigiotask hook function.
	  Minor policy revisions.
	  Added contributed scripts/newrules.pl script (Justin Smith).  
	  Fixed a bug in the SID table code.
	  Revised SELinux module initialization code.
	    Dealt with initialization changes in 2.5.1.
	    Permit deferred loading of policy if development module.
	  Fixed the symlinks target in the module Makefile.
	  Changed lsm-patch to set the Netlink option defaults.
	  Generalized README, Makefile, module/Makefile for 2.5 build.
	  Fixed bug in ipc_precondition calls.
	  Added avc_enforcing system call and program.
	  Revised the access vector table structure and code.
	  Fixed a bug in newrole's handling of descriptors.

12-10-2001
	A summary of updates to LSM and SELinux since the 11-19-2001
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.immunix.org for more information about the LSM updates.

	Updates to LSM:
	  No longer export capability_ops.
	  Changed swapon and swapoff hooks to take the swap_info_struct.
	  Merged 2.4.16.
	  Synchronized with lsm-2001_11_26-2.4.16 (LSM only).
	  Synchronized with lsm-full-2001_11_26-2.4.16 (LSM + modules).
	  Merged the SELinux module.
	  Synchronized with lsm-full-2001_12_10-2.4.16 (LSM + modules).

	Updates to SELinux:
	  Regenerated lsm-patch for updated security/Makefile.
	  Updated swapon and swapoff hook functions.
	  Fixed bug in selinux_inode_delete hook.
	  Updated procps patch to RH7.2 procps-2.0.7 SRPM.
	  Updated sh-utils patch to RH7.2 sh-utils-2.0.11 SRPM.
	  Updated and revised utils/Makefile.
	  Added Configure.help, defconfig, Makefile patches to lsm-patch.
	    (includes change to -selinux suffix for kernel)
	  Changed AVC auditing to only impose ratelimit if enforcing.
	  Moved share and ptrace permission checks from compute_creds
	     to set_security and changed so that the exec will fail 
	     rather than merely continuing under the old SID.
	  Added stat64 versions for stat_secure system calls,
	     with the usual transparent redirection if desired.
	  Started updating policy for RH7.2.
	  Minor policy updates based on feedback.
	  Merged ipchains domain (Justin Smith).
	  Changed AVC auditing to put each message on a single line.
	  Added "quick install" instructions and Makefile.
	  Updated fileutils patch to RH7.2 fileutils-4.1 SRPM.
	  Updated openssh patch to RH7.2 openssh-2.9p2-12 SRPM.
	  More code cleanup and bug fixes for newrole.
	  Changed newrole and run_init PAM files to omit pam_rootok.so. 
	  Moved the SELinux module into the LSM tree.

11-19-2001
	Fourth public release of the LSM-based SELinux prototype.

	A summary of updates to LSM and SELinux since the 10-16-2001
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.immunix.org for more information about the LSM updates.

	Updates to LSM:
	  Minor cleanup of kernel/capability.c.
	  Added check_sb hook.
	  Merged 2.4.13.  
	  Synchronized with lsm-2001_10_24 against 2.4.13.
	  Improved verification of security_operations structure.
	  Removed version field from security_operations. 
	  Renamed all configuration options to use CONFIG_SECURITY prefix.
	  Renamed and modified capabilities module to drop the _plug suffix.
	  Changed inline hook documentation to kernel-doc format.
	  Merged 2.4.14.
	  Applied loopback driver fix.
	  Synchronized with lsm-2001_11_05 against 2.4.14.

	Updates to SELinux:
	  Fixed newrole and run_init shadow password support.
	  Updated openssh patch to latest RedHat openssh-2.9p2 SRPM.
	  Updated util-linux patch to latest RedHat util-linux-2.11f SRPM.
	  Merged miscellaneous policy updates.
	  Merged contributed sound domain and types (Mark Westerman).
	  Added ext3 as a recognized type for persistent labeling.
	  Added getscheduler hook function.
	  Added check_sb hook function and updated post_addmount.
	  Removed the separately loaded module discussion from README. 
	  Fixed Makefile.kernel files for module configuration.
	  Added a new initial SID and type for /proc/sys/net/unix.
	  Changed quotactl hook function to correctly work with -ac series.
	  Fixed IPC alloc_security hooks to free if create check fails.
	  Moved checkpolicy-specific files to separate directory, and
	    separated from module build.
	  Minor cleanup of socket hook functions.
	  Fixed a bug in load_policy when in permissive mode. 
	  Fixed calls to avc_audit to only audit the denied permissions. 
	  Removed version field from security_operations.
	  Changed extern inline to static inline (SubmittingPatches).
	  Renamed SELinux configuration option to CONFIG_SECURITY_SELINUX.
	  Dropped use of _plug suffix when inserted into the kernel tree.
	  Started eliminating #ifdefs from module code (SubmittingPatches).
	  Incremented policydb version to reflect elimination of 
	    CONFIG_FLASK_AUDIT (mainstreamed) and CONFIG_FLASK_NOTIFY (dropped).
	  Reimplemented execve_secure using the security syscall.
	  Added a separate Config.in file for SELinux.
	  Renamed CONFIG_FLASK_DEVELOP to CONFIG_SECURITY_SELINUX_DEVELOP
	    and moved into kernel configuration.  Cleaned up #ifdefs.
	  Renamed CONFIG_FLASK_MLS to CONFIG_SECURITY_SELINUX_MLS
	    and moved into kernel configuration.  Cleaned up #ifdefs. 
	    Still experimental and not configured for use.
	  Extended MLS code to provide default behavior for contexts that lack
	    a level or range component.  Ease policy transition to MLS.
	  Restored conditional support for MLS to checkpolicy and policy 
	    Makefiles.
	  Added README.MLS.
	  Updated vixie-cron patch to vixie-cron-3.0.1-63.
	  Added logrotate-3.5.9 and ported patch from logrotate-3.5.4.
	  Fixed several bugs in newrole.

10-16-2001
        Third public release of the LSM-based SELinux prototype.
	
	A summary of updates to LSM and SELinux since the 9-26-2001
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.immunix.org for more information about the LSM updates.

	Updates to LSM:
	  Added comment to security.h about GPL controversy.
	  Synchronized with lsm-2001_09_26 against 2.4.10.
	  Added skb_set_owner_w hook.
	  Fixed a bug in the dummy netlink_send hook.
	  Changed the delete_module hook to take module prameter,
	  and added hook call in the automatic reaping case.
	  Removed name parameter from init_module hook (redundant with module).
	  Merged 2.4.11.
	  Changed security/Makefile to export capability_plug.o symbols.
	  Synchronized with lsm-2001_10_10 against 2.4.11. 
	  Merged 2.4.12.
	  Applied parport bug fix patch.
	  Synchronized with lsm-2001_10_11 against 2.4.12.
	  
	Updates to SELinux:
	  Added support for stacking the capability plug.
	  Added domain for the ssh client program.
	  Added explicit modes to install commands in the Makefiles.
	  Merged contributed named domain (Yuichi Nakamura).
	  Added more permissions related to logrotate and crond.
	  Added init_var_run_t derived type for /var/run/shutdown.pid.
	  Added auditdeny rules relating to su by user_t.
	  Added checkpc to file_contexts (oversight from earlier).
	  Pruned apostrophes from policy comments - not handled well by m4.
	  Fixed a bug in the netlink_send hook.
	  Updated delete_module and init_module hooks.
	  Merged contributed gdm domain (Mark Westerman).
	  Fixed extended IPC syscalls to use sys_ipc.
	  Moved creation of arch symlinks to selinux_plug Makefiles.
	  Added run_init utility and policy.

09-26-2001
        Second public release of the LSM-based SELinux prototype.
	
	A summary of updates to LSM and SELinux since the 08-23-2001
	release of SELinux follows.  Many of the LSM updates and some of 
	the SELinux updates were contributed by others.  See the BitKeeper 
	tree at lsm.immunix.org for more information about the LSM updates.
	
        Updates to LSM:
          Fixed bug in Documentation/DocBook/Makefile.
          Added hooks for controlling Unix domain socket IPC.
          Changed int to unsigned int for sys_security parameters.
          Renamed the syscall hook to sys_security.
          Fixed bug in lsm/net/ipv4/netfilter/ip_queue.c.
	  Synchronized with lsm-2001_08_23 against 2.4.9.
	  Fixed bug in lsm/kernel/acct.c.
	  Reworked message queue hooks to address pipelined IPC.
	  Added hooks for quotactl and quota_on.
	  Moved IPC associate hook calls to calculate id only once.
	  Added hooks for syslog and bdflush.
	  Fixed error handling of ip_decode_options hook.	
	  Added hook for prctl.
	  Moved IPC alloc_security hook calls to make key and flags available.
	  Split dummy security module from base framework.
	  Synchronized with lsm-2001_09_04 against 2.4.9.
	  Moved mkdir hook so that mode is sanitized prior to call.
	  Fixed bug in lsm/fs/file_table.c.
	  Fixed various failures to initially clear security field.
	  Fixed call to post_addmount to only occur on success.
	  Fixed placement of unix_may_send hook.
	  Added missing call to shm free_security hook.
	  Moved mount-related hooks into super_block_security_ops.
	  Changed skb_clone to return an error status.
	  Documented the hook function prototypes in security.h.
	  Synchronized with lsm-2001_09_20 against 2.4.9.
	  Merged 2.4.10.
	  Synchronized with lsm-2001_09_23 against 2.4.10.
	  Fixed initialization.
	  Removed capable hook from must_not_trace_exec.
	  Added a draft overview document for LSM to Documentation/DocBook.

        Updates to SELinux:
	  Added access controls for Unix domain socket IPC.
	  Updated permissions in policy for Unix domain socket IPC.
	  Updated sys_security call and hook function.
	  Fixed bug in selinux_sock_rcv_skb.
	  Removed permissions in policy to generic socket class.
	  Added separate security class for PF_KEY sockets.
	  Removed obsolete pipe class.
	  Updated message queue hook functions.
	  Merged contributed IPSEC domain (Mark Westerman).
	  Added configurable support for labeling devfs entries.
	  Implemented msgsid, shmsid, and semsid calls.
	  Fixed performance bug in inode-to-PSID mapping code.
	  Fixed bug in selinux_ip_postroute.
	  Revised policy based on feedback.
	  Added fd use permission to newrole_t.
	  Added permission checks and updated policy for nfsservctl, 
	  quotactl, quota_on, bdflush, and syslog.
	  Restored the avc_ratelimit mechanism.
	  Merged contributed fix (SAFE_ALLOC) for memory allocation 
	  in netdev_alloc_security and security server (James Morris).
	  Changed remaining allocations to also use SAFE_ALLOC.
	  Added safe_down/up for interrupt-safe semaphores.
	  Added semaphores for allocator functions.
	  Added in_interrupt tests to precondition functions.
	  Changed the initializing tests to use atomic bitops.
	  Added per-inode and per-filesystem semaphores for relabels.
	  Added per-filesystem semaphore for PSID->context mapping updates.
	  Added semaphores for SID table insertions.
	  Added write memory barriers for list insertions into 
	  PSID and SID tables.
	  Moved mounton into common file permissions.
	  Removed mountassociate permission.
	  Added semaphores and interrupt handling for policy reloads.
	  Fixed a bug in flush_unauthorized_files and file_receive.
	  Updated for 2.4.10.
	  Merged contributed updates to the policy configuration (David Wheeler,Mark Westerman).

08-23-2001
	Initial public release of the LSM-based SELinux prototype.

	This release was based on the lsm-2001_08_16 patch against kernel
	2.4.9, but also incorporated several changes made between 8/16 and
	8/22 to LSM.
	
	
