# changelog

author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compression


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
    daemon(): avoid starting another bash
    killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't
    initialize them. This gave error messages during startup


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
    - no need to set NETWORKING=no, it is not used/exported
    - do not export BOOTUP
    - delete two "sleep 1" calls that wants to add time to go
      into confirmation mode. There is enough time to press a
      key anyway or use "confirm" in /proc/cmdline.
    - read /proc/cmdline into a variable
    - use strstr() to search in /proc/cmdline
    - add "forcefsck" as possible option in /proc/cmdline
    - while removing lock files, no need to call `basename`
    - add unamer=`uname -r` and reduce number of forks
    - do not fork new bash to create /var/log/ksyms.0


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
    - do not read udev.conf, this seems to be all in the start_udev script
    - fix detection of "nomodules" kernel command line option
    - read /proc/cmdline earlier and convert rhgb to use that, too
    - load_module(): change redirection to /dev/null
    - some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
    - remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
    - remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add an autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.21-1
changelog:
  - move handling of network hotplug events here, add appropriate udev
    rules, obsolete hotplug
  - get rid of some path lookups (#178321, <mclasen@redhat.com>)
  - get hwaddrs from sysfs as opposed to ip | sed
  - translation updates
  - lang.sh: don't run unicode_start for subshells (#176832)
  - halt: ignore sysfs but not /sys<otherstuff> (#177612, <bnocera@redhat.com>)
  - add service(8) man page (#44857) <mitr@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.22-1
changelog:
  - remove references to /usr/X11R6/bin (#177938)
  - rc.sysinit: fix SELinux message formatting (#178532)
  - rc.sysinit: clean cvs as well (#178539, <ville.skytta@iki.fi>)
  - init.d/halt: move halt.local so that it runs before /  is remounted r/o (#179314)
  - rc.sysinit: don't activate already active dmraids (<pjones@redhat.com>)
  - rc.sysinit: don't mount usbfs, libusb no longer uses it
  - init.d/functions: Add -p to status() (#134363, <mitr@redhat.com>)
  - init.d/functions: Separate /var/run/*.pid handling and pidof calls
    to private functions (#63440, <mitr@redhat.com>)
  - init.d/functions: update for current LSB, including -p pidfile
    (#99325, #134363, <mitr@redhat.com>, <tobias.burnus@physik.fu-berlin.de>)
  - getkey: various cleanups, add man page (#54481, <mitr@redhat.com>)
  - lang.sh: don't always call consoletype (<laroche@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.26-1
changelog:
  - revert "rc.sysinit: don't mount usbfs, libusb no longer uses it" change
  - add some ugly hacks to make sure net hotplug doesn't run after unclean
    shutdown (#177795)
  - don't mount /sys and /proc in rc.sysinit - the initrd already does
    (<pjones@redhat.com>)
  - halt: try to unmount tmpfs filesystems before swapoff (#174000,
    <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.27-1
changelog:
  - translation updates
  - lang.sh: revert fix for #176832, it's broken
  - ifup-aliases fixes (<pjones@redhat.com>,<mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.28-1
changelog:
  - kill nash-hotplug before starting udev (<pjones@redhat.com>)
  - silence warnings on /dev/pts remount (<pjones@redhat.com>)
  - more translation updates


author: Bill Nottingham <notting@redhat.com> 8.30-1
changelog:
  - hotplug: don't cause modules to be reloaded on ifdown/rmmod (#179809)
  - fix endless loops in ifup/ifdown (#177792, #182466)
  - fix enabling of enforcing SELinux mode after relabel (#181893)
  - remove debugging code from ifup-bnep
  - add /proc, /sys mounting back to rc.sysinit
    Note: booting without an initrd is deprecated
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.32-1
changelog:
  - netfs: fix redirect (#187505)
  - rc.sysinit add forcequotacheck (#168118, <mitr@redhat.com>)
  - functions/pidof: various fixes (#182623, others <mitr@redhat.com>)
  - add support for DHCP on bridges (#125259, <mitr@redhat.com>,
    anders@kaseorg.com>)
  - rc.sysinit: use pidof, not killall (#185429, <pjones@redhat.com>)
  - ppp fixes (#129195, #163950, #92023, <mitr@redhat.com>, <avi@argo.co.il>)
  - ifup/ifdown: unset $WINDOW (#174336, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.33-1
changelog:
  - support for readonly root
  - rc.sysinit: remove call to zfcpconf.sh - that should be udev rules
  - ifup*: add NETWORKDELAY and LINKDELAY (#176851, <mitr@redhat.com>)
  - rc.sysinit: remove obsolete initrd code (<pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.34-1
changelog:
  - link glib2 dynamically now that it's in /lib, conflict with older
    versions
  - handle cups specially when cleaning /var (#189168)
  - remove ifdown-aliases (<mitr@redhat.com>)
  - ifup-ipsec: fix key handling when only one of AH or ESP is used
    (#166257, <mituc@iasi.rdsnet.ro>)
  - IPv6 updates, including RFC 3041 support (<pb@bieringer.de>)
  - routing fixes, add METRIC support for default routes (#124045, <mitr@redhat.com>)
  - fix handling of mount points with white space (#186713, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.35-1
changelog:
  - readonly root enhancments (modified from <law@redhat.com>, #193164)
  - encrypted swap, non-root filesystem support (#127378, <mitr@redhat.com, <redhat@flyn.org>)
  - clarify killproc usage (#193711, <mitr@redhat.com>)
  - document BRIDGE= (#192576, <mitr@redhat.com>)
  - rc.sysinit: allow for sulogin instead of automatic relabeling (<dwalsh@rehdat.com>)


author: Bill Nottingham <notting@redhat.com> 8.36-1
changelog:
  - rework automatic swapon - only run if AUTOSWAP=yes, and fix errors
    (#198695, #196179, #196208)
  - redo single so it starts last in runlevel 1, and doesn't kill/start
    services itself
  - add configurable delay for killproc() (#198429, <jorton@redhat.com>)
  - fix loop in rename_device (#199242, <markmc@redhat.com>)
  - rc.sysinit: stateless updates (#197972, <law@redhat.com>)
  - support for copying dhcp leases from initramfs (#198601, <markmc@redhat.com>)
  - readonly-root: SELinux works now in the kernel, allow it
  - init.d/network: don't bring down network if root is on a network device
  - init.d/halt: don't use -i to halt; causes problems with iscsi
  - add support for routing rule-$device (#132252, <mitr@redhat.com>)
  - fix rhgb output (#192604, <tonynelson@georgeanelson.com>)
  - fix crypttab options for LUKS (#197656, <mitr@redhat.com>)
  - ipsec: various fixes & new features (#150682, #168972, <mitr@redhat.com>, <alex@milivojevic.org>)
  - ipsec: add check for IKE_METHOD (#197576, <john_smyth@mail.ru>)
  - rename_device: ignore alias devices, fix race (#186355)
  - ifup/ifdown: don't mark as %config
  - rwtab: some additions/cleanup


author: Bill Nottingham <notting@redhat.com> 8.38-1
changelog:
  - translation updates
  - bring down bonding slaves on ifdown (#199706)
  - support LINKDELAY for dhcp (#191137)
  - netfs: run multipath on netdev devices (#180977)
  - halt: use /proc/mounts instead of /etc/mtab (#198426, <mitr@redhat.com>)
  - rc.sysinit: fix getkey race (#191453, <mitr@redhat.com>)
  - spec cleanups (#188614, <kloczek@rudy.mif.pg.gda.pl>)
  - support aliases on vlan (#193133, <mitr@redhat.com>)
  - clean up ifcfg file handling (<mitr@redhat.com>, <michal@harddata.com>)
  - GRE and IPIP tunnel support (#168990, <mitr@redhat.com>,
    <razvan.vilt@linux360.ro>, <aaron.hope@unh.edu>, <sean@enertronllc.com>)
  - rc.sysinit: don't format encrypted swap always (#127378)
  - don't try to add routes to alias devices (#199825, #195656)


author: Bill Nottingham <notting@redhat.com> 8.39-1
changelog:
  - translation updates
  - Handle partitions on multipath/dmraid better (<pjones@redhat.com>)
  - make /dev/mapper/control ourselves (<pjones@redhat.com>)
  - init.d/network: simplify 'status' call
  - fix actual 169.254 networks (#203591)
  - rc.sysinit: don't run vgscan (#191879)
  - init.d/halt: don't umount /dev/root<foo> (<oblin@mandriva.com>)
  - rc.sysinit: catch more dmraid errors (#200683)
  - support 'tmp' option in /etc/crypttab (#201382, <mitr@redhat.com>,
    <lv@lekv.de>)
  - IPv6 updates (<pb@bieringer.de>, includes a fix for #143452)


author: Bill Nottingham <notting@redhat.com> 8.40-1
changelog:
  - translation updates
  - rename_device: use '__tmpXXXX' instead of 'devXXXX' as a temporary device
    name to avoid any realistic namespace clashes
  - rc.sysinit: set default affinity if specified on commandline (#203359)
  - always pass path to '.' (#206035)
  - run setsysfont, loadkeys always when /dev/tty{0,1} exist (#150769)
  - allow going to a shell when system is shut down cleanly (from <dwalsh@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.41-1
changelog:
  - fix network ipv6 hang (#207137, others)
  - rc.sysinit: change blkid.tab path to /etc/blkid/blkid.tab
  - rename_device: reset DEVPATH also when renaming (#206884, <phil@fifi.org>)
  - sysconfig.txt: clarify onboot/onparent usage


author: Bill Nottingham <notting@redhat.com> 8.42-1
changelog:
  - run rc.sysinit, /etc/rc in monitor mode (part of #184340)
  - use a better check for 'native' services (#190989, #110761, adapted
    from <matthias@rpmforge.net>)


author: Bill Nottingham <notting@redhat.com> 8.43-1
changelog:
  - move ccwgroup initialization to a udev rule (should fix #199139,
    - init.d/functions: don't write to gdmfifo
  - remove unused-since-RHL-7 consolechars code, update docs (#206106)
  - stateless updates (#206331, <law@redhat.com>)
  - translation updates (el, ms, hr, sl)


author: Bill Nottingham <notting@redhat.com> 8.44-1
changelog:
  - separate tmpfs-usage for state from readonly-root
  - set keymap correctly in non-utf8 locale (#167363)
  - setsysfont: run unicode_stop if in non-unicode locale
  - lang.csh/lang.sh: set iutf8 if appropriate (#186961)
  - lang.csh/lang.sh: handle non-utf8 locales correctly (#200100)
  - rc.sysinit: redirect stderr from setsysfont (#209204, indirectly)
  - rwtab: fix iscsi file location (#208864)
  - translation updates: el, da, as, or
  - fix stateless updates (#206331, <law@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45-1
changelog:
  - lang.csh/lang.sh - do *not* stty iutf8; too much chaos with SIGTTOU
    (reverts: #186961; fixes #209469)
  - translation updates: ms


author: Bill Nottingham <notting@redhat.com> 8.46-1
changelog:
  - ifup-eth: restorecon on moved lease file
  - rc.sysinit: handle "nodmraid" and "nompath" command line options (#209377, <pjones@redhat.com>)
  - revert early-login support (#210836, essentially)
  - blacklist CJKI on the virtual console (#120819)
  - rc.sysinit: use dmraid.static (#211297)
  - use sysfs interface for bonding (#202443, <agospoda@redhat.com>)
  - use /etc/statetab, /etc/statetab.d for local state (#211839, <markmc@redhat.com>)
  - fix or_IN and similar locales (#212219)
  - use SUBCHANNELS as the primary key for s390 network devices (#204803)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.47-1
changelog:
  - lang.{sh,csh}: handle sinhalese as well in CJKI clauses (#212438)
  - rc.sysinit: add '--auto=yes' to mdadm invocation (#213671)
  - rename_device: fix incorrect handling of .bak files
  - mount tmpfs with -n (#213132)
  - various SUBCHANNELS related s390 fixage (#204803)
  - lang.{sh,csh}: support iso-8859-8 (#212738, <matan@svgalib.org>)


author: Bill Nottingham <notting@redhat.com> 8.48-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #214817)
  - make sure network modules don't get accidentally reloaded (#211474)
  - rc.sysinit: fix dmraid test (#216334)
  - init.d/halt: don't unmount network filesystems
  - ipsec: Add a way to manually manage racoon.conf (#159343, <mitr@redhat.com>)
  - sysconfig.txt: Document ~/.i18n (#199323, <mitr@redhat.com>)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 8.49-1
changelog:
  - rc.sysinit: remove raidautorn (#219226)
  - ifup-eth: set MACADDR, MTU before initializing bonding slaves, etc (#218792)
  - translation updates: mr, ms, hi, te, ml


author: Bill Nottingham <notting@redhat.com> 8.50-1
changelog:
  - lang.csh, lang.sh: if $LANG is set, don't override it (#229102)
  - initlog.1: fix man page formatting (<esr@thyrsus.com>)
  - network-functions: simplify bonding test (#215887, <herbert.xu@redhat.com>)
  - fix ifup-post when lookup fails (#220318, <hiroshi.fujishima+redhat@gmail.com>)
  - add bridging docs (#221412, <markmc@redhat.com>)
  - release bonding slaves properly (#220525)
  - fix ppp-watch with ONBOOT=yes (#216749)
  - support VLAN_PLUS_VID_NO_PAD (#222975, #223011)
  - remove NETWORKING_IPV6; to disable, use a modprobe rule
  - translation updates: ms, de, el, pt_BR, fi, bs, sr, it, ko


author: Bill Nottingham <notting@redhat.com> 8.51-1
changelog:
  - fix 'Fedora Fedora' in rc.sysinit
  - halt: use kexec -x to not shut down network (#223932, <mchristi@redhat.com>)
  - network_functions: fix is_bonding_device logic (#229643)
  - translation updates: nb


author: Bill Nottingham <notting@redhat.com> 8.52-1
changelog:
  - lang.sh: fix locales where SYSFONT is not the default (#229996)
  - ifup-wireless: properly quote arguments (#234756)
  - readonly-root: add options for mounting state (#234916)
  - rwtab: updates (#219339, <law@redhat.com>)
  - add netconsole init script (#235952)
  - disable link checking when PERSISTENT_DHCLIENT is set (#234075)
  - restore file context on /etc/resolv.conf (#230776, <dwalsh@redhat.com>)
  - ifup-post: only use the first address (#230157, <michal@harddata.com>)
  - ifup-ipsec: allow overriding of my_identifier (#229343, <cmadams@hiwaay.net>)
  - ifup-wireless: set link up before itweaking wireless parameters (#228253)
  - rc.sysinit: restorecon on mount points when relabeling (#220322)
  - init.ipv6-global: cleanup & optimize sysctl usage (#217595)
  - ifup-eth: support ETHTOOL_OPTS on bridge devices (#208043, <bbaetz@acm.org>)
  - network-functions-ipv6: as we don't use NETWORKING_IPV6, silence errors (#195845)
  - fix description (#229919)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.53-1
changelog:
  - init.d/halt: use sound saving wrapper from alsa-utils, conflict with
    older versions (#236916)
  - usernetctl: drop user gid (#229372)
  - translation updates: ta, pt_BR, nb, as, hi, de


author: Bill Nottingham <notting@redhat.com> 8.54-1
changelog:
  - translation updates: as, bg, cs, ja, ms
  - redirect bogus errors from cryptsetup to /dev/null <karsten@redhat.com>


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - avoid calling unicode_start unnecessarily often during startup/shutdown which
    causes certain monitor/video card combos to flicker heavily (#237839)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add /etc/networks (#239602)
  - rc.sysinit: fix quotacheck, remove obsolete convertquota (#249003, <tometzky@batory.org.pl>)
  - rc.sysinit: add gfs2 to the 'don't mount here' list (#248985)
  - netfs: check for rpcbind, not portmap (#245595)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - translation updates: cy, en_GB, mk, ml, ms, pl, sk, ta, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.56-1
changelog:
  - rename_device: fix open() call
  - rc.sysinit: optimize out some excess greps (<harald@redhat.com>)
  - halt: support newer nut syntax, conflict with old versions (#252973, <tsmetana@redhat.com>)
  - fix buildreq from popt -> popt-devel
   - newer popt is in /lib|/lib64 - require it, and link dynamically
  - rc.sysinit: added support for cryptsetup-uuids (bug #242078, <harald@redhat.com>)
  - netconsole: fix status(), assorted other cleanups
  - translation updates: fr, ro, sk


author: Bill Nottingham <notting@redhat.com> - 8.57-1
changelog:
  - work around upstream bash changes (#220087, modified from <nvigier@mandriva.com>)
  - init.d/network: add Should-Start for firewall services
  - ifup-eth: handle arp_ip_target separately (#288151, <agospoda@redhat.com>)
  - rc.sysinit: remove rc.serial support - should be udev rules
  - rc.sysinit: remove acpi module loading - now supported by the kernel automatically
  - fix en_GB translation (#271201)
  - translation updates: as, bn_IN, bg, ca, cs, de, el, es, fi, gu, hi, it, ja, ko, kn, ml,
    mr, nb, nl, pa, pl, pt, pt_BR, ro, sl, sr, sr@Latn, sv, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.58-1
changelog:
  - revert kernel conflict so that xen can still work (#319401)
  - rename_device, 60-net.rules: only suggest an interface name (part of #264901)
  - require newer udev for persistent net rules (part of #264901)
  - don't hang if someone puts a dangling pipe in /etc/rhgb/temp (#251219)
  - genhostid: fix for 64-bit systems (#306811)
  - more bash matching fixes (#220087)
  - translation updates: is, nb


author: Bill Nottingham <notting@redhat.com> - 8.59-1
changelog:
  - rc.sysinit: fix rhgb check
  - prefdm: add wdm section (#248087)
  - init.d/functions, halt: clean up some extraneous delays (#219816)
  - ifup-wireless: set mode before bringing link up (#254046, <linville@redhat.com>)
  - translation updates: pt_BR, hr


author: Bill Nottingham <notting@redhat.com> - 8.61-1
changelog:
  - use lvm, not lvm.static (#429222)
  - ifup-eth: don't do something odd if we find a mac address that
    matches the user-set MACADDR (#251415)
  - rc.sysinit: fix root fs check to catch 'rw,ordered,noatime,etc.' properly
    (#334171)
  - rc.sysinit: Use proper invocations for authconfig, system-config-network
    (#426372, #428202)
  - service: handle unreadable scripts (#427767)
  - initscripts.spec: add requirements for stateless
  - fix perms on /etc/profile.d (#407531, <ville.skytta@iki.fi>)
  - rename_device: handle quoted HWADDR, etc. in ifcfg scripts (#351291)
  - minor stateless fixes
  - Makefile cleanups (from OLPC, <cscott@cscott.net>)
  - translation updates: fr, ru, nb
  - don't endelessly loop on ifdown (#390271)
  - rc.sysinit: - fix encrypted swap partitions with random key
    (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.63-1
changelog:
  - don't start RAID arrays in rc.sysinit, that's done by udev (corollary of #429604)
  - add a NetworkManager-dispatcher script that does netreport on interface changes
  - use udev rules to set the clock, avoiding issues with modular rtcs (#290731)


author: Bill Nottingham <notting@redhat.com> - 8.64-1
changelog:
  - Add a console_init udev helper to do console initialization
  - add /sbin/pidof requirement (#434863)


author: Bill Nottingham <notting@redhat.com> - 8.65-1
changelog:
  - Add a serial console udev/upstart handler (#434764, indirectly)
  - Add some upstart notification for sysv scripts (modified from <cjdahlin@ncsu.edu>, #431231)
  - Handle _rnetdev correctly (#435358, <pjones@redhat.com>)
  - various minor speedups (<arjan@infradead.org>)
  - translation updates: el, fr
  - disable network by default, in favor of NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.68-1
changelog:
  - netfs: umount 'ncp' filesystems as well (#437117)
  - improve performance of s390 ccw rules (#437110, <mernst@de.ibm.com>)
  - fix consoletype environment leak (#439546)
  - ifdown-eth: make sure NEWCONFIG exists before grepping for it (#390271, continued)
  - console_check: always open with NONBLOCK, clear the serial structs first,
    handle non-16550 ports (<dwmw2@infradead.org>)
  - halt: don't use /etc/sysconfig/clock (#438337)
  - ifup: don't attempt to re-enslave already-enslaved devices (#440077)
  - netfs: run as a NetworkManagerDispatcher script (#439242)
  - netfs: remove $local_fs from the list of provides (making it implicitly provided
    by booting)
  - serial: add a crude hack to wait for runlevels to finish (#437379)
  - serial: frob /etc/securetty when necessary (#437381)
  - add an upstart-specific inittab
  - translation updates: as, bn_IN, cs, de, es, fi, fr, gu, hi, it, ja, kn, ml, mr, nb,
    nl, pa, pl, pt_BR, ru, sk, sr, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.69-1
changelog:
  - Bring up lo whenever it shows up, not just in network/NM
  - fix shutdown-related oddities (#438444)
  - translation updates: el, sr, sr@latin, sv


author: Bill Nottingham <notting@redhat.com> - 8.70-1
changelog:
  - find is now in /bin. Use it. (#192991, #239914, #244941, #442178)
  - require event-compat-sysv for now (#442291)
  - fix serial event to wait properly
  - handle encrypted LVs properly (#441728)
  - add a sit tunnel type (#441635)
  - translation updates: ru


author: Bill Nottingham <notting@redhat.com> - 8.71-1
changelog:
  - adjust to gdm using LANG instead of GDM_LANG (#372151, <rstrode@redhat.com>)
  - rework netfs' check for networking availability to properly handle both network
    and NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.73-1
changelog:
  - move event-compat-sysv events here, obsolete it
  - fix ctrl-alt-del during rc.sysinit (#444050)
  - fix 'telinit X' from single-user mode (#444001)


author: Bill Nottingham <notting@redhat.com> - 8.74-1
changelog:
  - use full path to /sbin/ip in NetworkManagerDispatcher script (#444378)
  - lang.{sh,csh}: read only user customization if LANG is already set (#372151)


author: Bill Nottingham <notting@redhat.com> - 8.77-1
changelog:
  - NMDispatcher/05-netfs: fix check for default route (#445509)
  - service: don't set $LANG, rely on it to inherit from system locales (#422141)
  - init.d/functions: fix resolve_dm_raid() for older dmraid configs
  - Don't unmount sysfs in halt. (#446292)
  - rc.sysinit: don't try to startup crypto if we can't find the device
  - rc.sysinit: don't echo crypto stuff unless we're actually *doing* something
  - ifup: don't try to rename devices - udev rules are the way to go
  - rc.sysinit: fix typo, and don't restorecon on swap, etc. partitions (#448886)
  - set MALLOC_CHECK_ & MALLOC_PERTURB_ if configured (<pjones@redhat.com>)
  - console_init: support SYSFONTACM correctly, and support UNIMAP (#448704,
    <vvv+fedora@colocall.net>)
  - don't export GRAPHICAL - plymouth is for all modes. also, don't start rhgb
  - fix clock rules to properly handle old-style RTC devices (#447019)
  - translation updates: ko, or, pl


author: Bill Nottingham <notting@redhat.com> - 8.79-1
changelog:
  - fix mcheck stuff to be installed correctly
  - don't do an arping check for loopback interfaces
  - console_init: don't wait (<arjan@infradead.org>)
  - rc: clean up extraneous set -x noise
  - remove references to static dmraid/multipath binaries (#453987)
  - translation updates: lv


author: Bill Nottingham <notting@redhat.com> - 8.80-1
changelog:
  - Fix translation typo (#455804, <ruslanpisarev@gmail.com>)
  - Turn off syncookies
  - Cleanups for proper plymouth support
  - Move the mcheck code to a debugmode package, make it more generic


author: Bill Nottingham <notting@redhat.com> - 8.81-1
changelog:
  - rc.sysinit: Don't use -L in find (#458652, #458504, CVE-2008-3524)
  - ifup: kill more code from loopback bringup


author: Bill Nottingham <notting@redhat.com> - 8.82-1
changelog:
  - refresh translation strings
  - plymouth updates. (#460702, <rstrode@redhat.com>)
  - translation updates: fi, lv, no
  - remove duplicate dependency (#465182)
  - ifup-eth: Change how we set the zeroconf route. (#239609)
  - ifup*: Use 0.0.0.0/0, not 0/0. (#460580)


author: Bill Nottingham <notting@redhat.com> - 8.83-1
changelog:
  - various merge review fixes (#225900)
    Notably: init scripts/network scripts are no longer %config
  - remove some extraneous device-mapper initialization
  - use pidfile in status before calling pidof (#463205)
  - use plymouth directly, not the rhgb-client wrapper
  - move bridging after bonding (#449950, <djuran@redhat.com>)
  - use alsactl to save sound settings. (#462677, <jkysela@redhat.com>)
  - quit plymouth differently (<rstrode@redhat.com>)
  - make sure we don't try and spawn a repair shell when there's no
    tty (#463161)
  - move udev rules to /lib
  - stateless updates (#433702, <harald@redhat.com>)
  - call logger with a full path (#447928, <harald@redhat.com>)
  - translation updates: as, bn_IN, ca, cz, de, es, fi, fr, gu, it, ja,
    lv, mr, nl, or, pa, pl, pt_BR, ru, te, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.84-1
changelog:
  - override Arabic, Persian, and Hebrew on the console (<alsadi@ojuba.org>)
  - explicitly run mdadm on boot to catch degraded arrays. (<dledford@redhat.com>)
  - fix setting of console font/map (#458362, <ak@sensi.org>)
  - translations updates: hi, kn, nb, sk, sv, ta


author: Bill Nottingham <notting@redhat.com> - 8.85-1
changelog:
  - add some error handling/hiding to netfs NM dispatcher script (#469197)
  - halt: fix code that causes a syntax error on multiple sound cards (#469156)
  - require a new enough udev version to handle where we put the rules
  - exit 0 in /etc/rc.d/rc (#469050)
  - don't set up encrypted devices that have already been set up under different
    names (#462371, <wwoods@redhat.com>)
  - accept either the '+<addr>', or comma-separated addresses for arp_ip_target. (#467954,
    <darcy.sherwood@gmail.com>)
  - translation updates: hu, kn, ko, ml, sr, sr@latin


author: Bill Nottingham <notting@redhat.com> - 8.86-1
changelog:
  - stop plymouth before stopping the runlevel (#467207)
  - fix get_config_by_subchannel (#459044, <harald@redhat.com>)
  - use blkid -l to pick a single most appropriate device (#470027)
  - don't mkswap on halt, as it breaks swap-by-label/UUID (#469823)


author: Bill Nottingham <notting@redhat.com> - 8.87-1
changelog:
  - rename_device: be much faster in the presence of many devices (#480687, <danms@us.ibm.com>)
  - fix switching from targeted to MLS policy (#479054, <dwalsh@redhat.com>)
  - rc.sysinit: don't set $(uname -r) or $(uname -m); they're not used
  - network-functions-ipv6: set MTU correctly for 6to4. (#477976, <ackistler@yahoo.com>)
  - add more entries to rwtab (#476799, <harald@redhat.com>)
  - net.hotplug: Bail out sooner if the network service isn't running
  - init.d/halt: determine reboot/halt via existing INIT_HALT environment variable. (#475227)
  - event.d/serial: add some docs
  - init.d/functions: __pids_var_run: Handle multi-line pid files correctly (#473287)
  - remove support for no longer existing 'brctl setgcint' command. (#360471)
  - add %config back for ifcfg-lo (#472761)
  - rcS/rcS-sulogin: don't match commented lines when finding runlevel (#472717)
  - updated translations: de, sk


author: Bill Nottingham <notting@redhat.com> - 8.89-1
changelog:
  - use a leading path when sourcing files (#482826)
  - netfs: don't unmount nfsd filesystem by accident (#481794, <sprabhu@redhat.com>)
  - bring up ipsec interfaces last (#481733)
  - ifdown-eth: fix bridge + vlan (#481557, <danken@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.90-1
changelog:
  - init.d/functions: cgroup support (<jsafrane@redhat.com>)
  - fix various issues with dmraid handling (#485895, <hdegoede@redhat.com>)
  - rc.sysinit: fix typo. (#487926)
  - console_init: loadkeys has a -q option for silent running. Use it.
  - ifup-tunnel: add compatibility for openNHRP tunnels (#486559, <claude.tompers@ieee.lu>)
  - ccw_init: don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - netfs: use same kpartx arguments as rc.sysinit
  - don't list mtab in rwtab (#457941)
  - translation updates: fi, de, mai


author: Bill Nottingham <notting@redhat.com> - 8.91-1
changelog:
  - fix DHCP reading of options from ifcfg-XXX (#483257)
  - ifdown-eth: clean up bridges on ifdown (#463325, <sean@bruenor.org>)
  - support MD on iSCSI (#480627)
  - remove support for 'ifcfg-foo-bar' configurations that inherit from 'ifcfg-foo'
  - remove slip support
  - translation updates: es, pl, ca, sr, de, sv, pa, pt_BR


author: Bill Nottingham <notting@redhat.com> - 8.93-1
changelog:
  - rc.sysinit: add a disk synchronization point with scsi_wait_scan post-udev (#481470)
  - netfs: drop smbfs support, we don't even ship the module or tools any more
  - setsysfont: honor LC_CTYPE (#487133, <skasal@redhat.com>)
  - prefdm: do fallbacks based on provides of 'service(graphical-login)' (#485751)
  - rc.sysinit: handle multiple IP addresses without choking in the stateless code (#443945)
  - rc.sysinit: catch the right error code from checking for passphrases (#483269, <vladis.kletnieks@vt.edu>)
  - prefdm: handle empty /etc/sysconfig/desktop correctly (#480113)
  - ifup-ipsec: allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - ifup-eth: allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - ifup-eth: fix dhcpv6 when there is no IPv4 configuration (#486507)
  - ifup-ppp: avoid spurious SIGCHLD to pppd (#448881)
  - ifup-eth: add support for creating TUN/TAP devices on the fly (#453973, <scott@zahna.com>)
  - stop plymouth when starting single-user mode. (#491062)
  - add plymouth shutdown script (#473237, <jmccann@redhat.com>)
  - fix lang.sh/lang.sh/consoletype for execution with '-e'
  - ifdown-eth: remove arp_ip_target on ifdown for bonding devices. (#483711)
  - add vlan support for s390 HSI interfaces. (#490584)
  - ipcalc: support IPv6 (#464268, <dcantrell@redhat.com>)
  - translation updates: all


author: Bill Nottingham <notting@redhat.com> - 8.94-1
changelog:
  - prefdm: add simple fallbacks, sort rpmdb query for consistency (#494461)
  - translation updates; bn, de, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.95-1
changelog:
  - don't kill runlevel events on subsequent entering of the same runlevel (#498514)
  - lang.*sh: handle spaces in $HOME (#498482)
  - network-functions: explicitly source from the proper directory. (#496233)
  - remove persistent names on sys-unconfig. (#448322)
  - init.d/functions: cgexec has moved to /bin (#495715)
  - allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - translation updates: fr, ml, pt


author: Bill Nottingham <notting@redhat.com> - 8.96-1
changelog:
  - fix up upstart rules for s390(x). (#515222)
  - leave ChangeLog in the tarball only. (#515012)
  - disable netfilter on bridged interfaces. (#512206)
  - assorted shell-related cleanups to ipv6 and other code (<victor.lowther@gmail.com>)
  - use resolv.conf from dracut netboot before setting hostname. (#514801, <wtogami@redhat.com>)
  - ipcalc updates (<victor.lowther@gmail.com>)
  - only use ethtool for link checking; no more mii-tool
  - require /sbin/blkid directly, as it moves between packages (#508413)
  - redirect bash errors on 'unset' to /dev/null. (#482888)
  - fix dmraid partition naming (#501476, <hdegoede@redhat.com>)
  - don't quote upstart signals. (#501155)
  - translation updates: bn_IN, da, es, sk


author: Bill Nottingham <notting@redhat.com> - 8.97-1
changelog:
  - ipcalc: fix IPv6 address checking (#516319)
  - ifup-aliases: fix syntax error from earlier cleanups. (#515612, <jik@kamens.brookline.ma.us>)
  - translation updates: nb
  - rc.sysinit: remove useless call to pam_console_apply


author: Bill Nottingham <notting@redhat.com> - 8.98-1
changelog:
  - sysconfig.txt: doucment DHCP_HOSTNAME (#498052)
  - 88-clock.rules: Use --systz instead of --hctosys. (#517886, #489494)
  - Support rwtab and state passed from dracut initrd (#515771, <wtogami@redhat.com>)
  - restore context of *tmp files (#519748)
  - halt: don't try and save mixer settings if it's not writable. (#515771)
  - rwtab: add /var/spool, /var/lib/dbus, others (#494973, #515771)
  - sysconfig.txt: clarify docs (#518614)
  - rc.sysinit: don't pretend /selinux is configurable (#518164)
  - assorted ipv6 redundant code deletion
  - translation updates: bn, ca, de, es, fi, fr, gu, hi, it, ja, ko, ml, nb, nl, pl, pt, pt_BR, ru, sr, ta, zh_CN, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.99-1
changelog:
  - init.d/functions: add a '-l' option to status to pass lock file name (#521772)
  - tweak kernel conflict
  - translation updates: as, bn_IN, de, fr, hi, it, hu, kn, mr, or, pa, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 9.00-1
changelog:
  - halt: wrap /sbin/killall5 to catch some return codes (#526539)
  - netfs, netconsle, network: fix return codes to match LSB spec (#524489, #524480, #524486)
  - handle kernels compiled both with and without CONFIG_RTC_HCTOSYS
  - halt: use killall5's return code to avoid unncesssary sleeping (#524359, <hdegoede@redhat.com>)
  - halt: don't kill mdmon on shutdown. (#524357, <hdegoede@redhat.com>)
  - rc.sysinit: do not try and activate ISW raidsets, unless noiswmd is passed. (#524355, <hdegoede@redhat.com>)
  - translation updates: ca, cs, da, mai, po, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.01-1
changelog:
  - rc.sysinit: fix handling of dmraid output to avoid error messages (#527726, <mschmidt@redhat.com>)
  - rwtab: add /var/lib/xend (#526046)
  - translation updates: fi, nb, pl


author: Bill Nottingham <notting@redhat.com> - 9.02-1
changelog:
  - remove long-since deprecated initlog
  - remove IUCV support (#507217)
  - halt: put a wrapper around killall5 to account for retval 2 not being an error (#526539, <hdegoede@redhat.com>)
  - ifup-eth: honor DEFROUTE=yes|no for 'all' connection types. (#528822)
  - network-functions: load bonding driver if BONDING_OPTS is defined. (#516569)
  - rc.sysinit: put /dev/shm in mtab too, as dracut now mounts it. (#528667)


author: Bill Nottingham <notting@redhat.com> - 9.03-1
changelog:
  - migrate to upstart 0.6.x (<notting@redhat.com>, <plautrba@redhat.com>)
  -- jobs move to /etc/init
  -- collapse rcX and ttyX jobs into single job definitions
  -- jobs are no longer %config
  - remove obsolete doexec command
  - rc.sysinit: handle yet another random return string from dmraid
  - remove never-used 'sulogin' upstart event
  - fix time-setting udev rules for old-style RTC devices (#537595)
  - init.d/network: keep error codes limited to '1'. (#537841)
  - add initial ifup/ifdown man pages. (#529328, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.04-1
changelog:
  - various shell-related cleanups and optimizations <ville.skytta@iki.fi>
  - ifup-eth: use dhclient's -H option instead of munging dhclient config files
  - rc.sysinit: move mdadm after dmraid (#494821)
  - ifup-eth: use dhclient -6, not the no-longer-included dhcp6c
  - add more man pages (#529328, <plautrba@redhat.com>)
  - move is_wireless after MACADDR/MTU setting (#552638)
  - serial.conf: respawn correctly. (#552324, <zing@fastmail.fm>)
  - network-functions: use sysfs for wireless check (#551019, <adel.gadllah@gmail.com>)
  - reload init on started messagebus (<plautrba@redhat.com>)
  - honor HOTPLUG in ifdown (#547737)
  - network-functions: silence error. (#516569)


author: Bill Nottingham <notting@redhat.com> - 9.05-1
changelog:
  - network-functions: don't use ethtool for link state, assorted other cleanups
  - inittab: fix job paths in comments (<plautrba@redhat.com>)
  - init.d/functions: don't clear environment in runuser (#203010, #564093)
  - 88-clock.rules: use ATTR, not SYSFS (#560756)
  - init.d/network: don't quote regex argument to bash's =~ (<ville.skytta@iki.fi>)
  - network-functions: use HWADDR to determine DEVICE if DEVICE isn't set (#545597)
  - don't HUP init when messagebus starts (#557791)
  - setsysfont: use UNIMAP, not SYSFONTACM, when calling unicode_start (#557089)
  - ifup: don't leave the link down on link failure for DHCP (#462013, #491009)
  - translation updates: cs


author: Bill Nottingham <notting@redhat.com> - 9.06-1
changelog:
  - move ccw_init and ccw udev rules to s390utils (#539491)
  - rc.sysinit: suppress LVM2 warnings.  (#561938, <prajnoha@redhat.com>)
  - fix translated checks for user input (#566579)
  - refresh translations


author: Bill Nottingham <notting@redhat.com> - 9.07-1
changelog:
  - clean out some extraneous package requirements
  - fix dmraid error checking now that dmraid has return codes (#568790, others)
  - integrate with NetworkManager for ifup/ifdown (#523064)
  - translation updates: cs, da, de, en_GB, es, fi, nl, pl, pt_BR, ru, sr


author: Bill Nottingham <notting@redhat.com> - 9.08-1
changelog:
  - network-functions: redirect error messages when nmcli isn't installed (#570828, <zing@fastmail.fm>)
  - ifdown: use nmcli to get the device, if not specified
  - ifdown: fix typo
  - translation updates: fr


author: Bill Nottingham <notting@redhat.com> - 9.09-1
changelog:
  - rc.sysinit: change RAID handling (<dledford@redhat.com>)
  - fix german mistranslation (#575954, <pb@bierenger.de>)
  - init.d/functions: correct fix for environment with runuser. (#203010, #564093)
  - halt: fix mdmom pid handling for newer mdadm (#549726, <dledford@redhat.com>)
  - init.d/network: only blacklist the original loopback interface. (#579816, <evgsyr@gmail.com>
  - translation updates: de, ja, nb, pt, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.10-1
changelog:
  - fstab-decode.8: fix formatting (#586476)
  - prefdm: add --retain-splash for KDM as well (#585250)
  - init.d/functions: handle being unable to read a specified pid file. (#584575)
  - init/quit-plymouth.conf: use 'task' for stopping plymouth. (<rstrode@redhat.com>)
  - ifup-eth: run dhclient -6 similar to dhclient -4. (#585047)
  - net.hotplug: don't run on odd interfaces. (#584530)


author: Bill Nottingham <notting@redhat.com> - 9.14-1
changelog:
  - clean up plymouth shtudown splash (#590099, <rstrode@redhat.com>)
  - rc.sysinit: use lvm2 --sysinit option (#588777)
  - network-functions: behave sanely in the absence of $DEVICE (#589521)
  - sysconfig/debug: export debug variables (#589378)
  - netfs: check for NM to be connected, not just running (#589710)
  - rcS*.conf: check if /etc/inittab exists (#590703, <plautrba@redhat.com>)
  - port vlan code to /sbin/ip (#566485, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.15-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607764, #607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)
  - ifdown-ipsec: don't use a full path when killing racoon, so it works in MLS policy (#567295)
  - network-functions: check NM_CONTROLLED before deciding to use NM for a connection. (#599707, probably others.)
  - rc.sysinit: always reboot on autorelabel. (#595823)
  - init.d/functions: handle permission denied on reading PID file. (#595597)
  - clean up some deprecated items
  - translation updates: el, nl, or, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.16-1
changelog:
  - halt: don't umount cgroups (#612789)
  - rename_device: dequote DEVICE key, handle SUBCHANNELS (<harald@redhat.com>)
  - sysconfig.txt: document PREFIX/NETMASK (#617481, <jklimes@redhat.com>)
  - sysconfig.txt: document NETWORKWAIT (#595386)
  - remove support for hotkey interactive startup (#605016). Use 'confirm' on the commandline
    (but even that doesn't fully make sense in an upstart/systemd world)
  - don't directly execute bash for single-user mode (#540216, #584443, #585053)


author: Bill Nottingham <notting@redhat.com> - 9.17-1
changelog:
  - init.d/functions: redirect start/stop/condrestart/etc to systemctl in a systemd environment (#612728)
  - rc.sysinit: don't frob the console loglevel on boot (#621257, #626572)
  - service: use systemctl on systemd services
  - 10-console.rules: only init consoles on add, not change (<lennart@poettering.net>)
  - halt: fix unmounting bind mounts (#620461, <phr@doc.ic.ac.uk>)
  - killall: exit 0 (#605519)
  - translation updates: de, es, fi, fr, nl, pl, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.18-1
changelog:
  - fix for new cgroups location (#612789, others <plautrba@redhat.com>)
  - add in basic systemd units
  - translation updates: nb, pt, sv


author: Bill Nottingham <notting@redhat.com> - 9.19-1
changelog:
  - fix packaging of prefdm, rc-local systemd units (#630952)
  - systemd/single.service: conflict with shutdown.target (#630935)
  - translation updates: ja, pt_BR, ru


author: Bill Nottingham <notting@redhat.com> - 9.20-1
changelog:
  - use new pidof -m option to avoid false positives (#632321)
  - systemd/single: set $HOME for single-user mode. (#631590)
  - systemd/killal.service: require shutdown.target (#630935, #632198)


author: Bill Nottingham <notting@redhat.com> - 9.21-1
changelog:
  - build for systemd only
  - ship a default.target link in case the one in /etc gets deleted
  - rc.sysinit: reset btmp on boot if necessary (#633768, <dmach@redhat.com>)
  - single.service: fix invocation so that 'runlevel' works (#630914)


author: Bill Nottingham <notting@redhat.com> - 9.22-1
changelog:
  - merge in systemd-specific startup support; package a -legacy package
    (based on work by <harald@redhat.com>)
  - init-ipv6.global: don't load sit module on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - do not call rhgb-client
  - network-functions: add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown nmcli invocation (#612934, jklimes@redhat.com>)
  - *ipv6*: don't use obsolete /sbin/ip wrapper
  - sysconfig.txt: adjust clock docs (#637058)
  - lang.csh: fix tcsh + grep-2.7. (#636552)


author: Bill Nottingham <notting@redhat.com> - 9.23-1
changelog:
  - don't throw errors on unreadable /dev/stderr (#650103, <plautrba@redhat.com>)
  - support multiple ipv4 addresses, not just alias devices (#132912, #633984, <jklimes@redhat.com>)
  - properly handle /var/run on tmpfs (#656602, <plautrba@redhat.com>)
  - allow '0' as a vlan tag (#624704, #635360)
  - assorted systemd unit cleanup (<lennart@poettering.net>)


author: Bill Nottingham <notting@redhat.com> - 9.24-1
changelog:
  - ifup-eth/ifdown-eth: handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - tmpfiles.d: remove entries that exist in systemd
  - frob device when calling sysctl, in case of vlans. (#665601, #667211, <ossman@cendio.se>)
  - netfs: rework to handle bind-mounted cifs/ncpfs (#663140, <dmudrich@nospam.mudrichsystems.com>)
  - own /etc/crypttab (#664309)
  - init.d/network: add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - ifup-eth: fix routing regression (#660363)
  - sysctl.conf.s390 - system z optimized sysctl settings per default (#633323, <plautrba@redhat.com>)
  - serial.conf, tty.conf: stop tty and serial also on runlevel 's' (#629257, <plautrba@redhat.com>)
  - translation updates: bn_IN, es, gu, hi, nds, or, pa, uk, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.25-1
changelog:
  - remove 'Red Hat Linux' references from sysctl.conf* (<ville.skytta@iki.fi>)
  - rc.sysinit: add support for sysctl.d (#593211, <martin@laptop.org>)
  - console_check: support OMAP serial console (#678875, <ndevos@redhat.com>)
  - /sbin/service: accept --ignore-dependencies, --skip-redirect as options
  - /sbin/service: honor SYSTEMCTL_IGNORE_DEPENDENCIES (<lennart@poettering.net>)
  - translation updates: kn, pa, ta, uk


author: Bill Nottingham <notting@redhat.com> - 9.26-1
changelog:
  - network-functions: fix check for unmanaged devices (#670154)
  - ifup-eth: also check /dev/.run/initramfs (<harald@redhat.com>)
  - systemd: execute fedora-sysinit-unhack after sysinit.target (<arvidjaar@gmail.com>)
  - init.d/functions: don't do force/lazy umount for the first nfs umount. (#676851, <jlayton@redhat.com>)
  - further sysctl.d fixes (#593211)
  - init.d/functions: make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - ifup: add GVRP support (#597598, <tomek@jot23.org>)
  - init.d/functions: add support for noauto crypt devices, to mirror systemd
  - documentation updates
  - bash cleanups (<ville.skytta@iki.fi>)
  - ifup: remove network device naming requirement from VLAN devices (#462095, <Matt_Domsch@dell.com>)


author: Bill Nottingham <notting@redhat.com> - 9.27-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode. (#685137)
  - support ipv6 routing rules, merge route/rule code (#680872, <tobiasoed@hotmail.com>)
  - autorelabel.service, loadmodules.service: fix conditions so that they operate as OR, not AND. (#684125)


author: Bill Nottingham <notting@redhat.com> - 9.28-1
changelog:
  - add some generic network logging, port scripts to it (#507515, #653630)
  - add an error when setting the gateway fails (#672202)


author: Bill Nottingham <notting@redhat.com> - 9.29-1
changelog:
  - systemd: add a storage setup service after cryptsetup.target (#692198)
  - fix /.autorelabel handling (<mschimdt@redhat.com>)
  - don't explicitly disallow IPv6 aliases (#583409, #612877)
  - netfs: don't print errors if mdadm isn't installed. (#692187)
  - ifup-eth: use /run/initramfs rather then /dev/.run/initramfs (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.30-1
changelog:
  - ifup-eth: handle IPADDRx correctly for static addresses (#697838)
  - systemd: fix storage setup service after cryptsetup.target (#699918)
  - prefdm: tweak how plymouth is quit in the gdm/kdm case (<rstrode@redhat.com>)
  - support /etc/hostname as an override for hostname in /etc/sysconfig/network
  - init.d/single: only ship this in -legacy
  - network-functions: fix IPADDRx index handling (<jklimes@redhat.com>)
  - ifup/down-eth: properly handle apr_ip_target, when used with module options (#604669, <harald@redhat.com>)
  - ifup-eth: ensure bond exists before bringing up slaves (#694501)


author: Bill Nottingham <notting@redhat.com> - 9.31-1
changelog:
  - remove ifup/ifdown-ipsec; they're now in ipsec-tools
  - rc.sysinit: start udev by hand, start_udev is no more (#714531)
  - ifup-aliases: if IPv6 is configured on the alias, configure it. (#583409)
  - ifup-eth: ensure DHCP_HOSTNAME is a short hostname, seed it from HOSTNAME if needed. (#697877)
  - network-functions: override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - exclude single symlink from main package (#705457)
  - network: VLAN, etc. interfaces can be slaves; check for being a slave first. (#703475)
  - network: use LC_ALL=C when calling sed. (https://bugs.mageia.org/show_bug.cgi?id=1216, via <sander.lepik@eesti.ee>)
  - functions: (umount_loop) fuser -k defaults to -9; set the initial pass to kill -15. (#703457)
  - init.d/halt: don't match filesystem types in hostnames (#703203, <jmueller@data-tronics.com>)


author: Bill Nottingham <notting@redhat.com> - 9.32-1
changelog:
  - prefdm: if exec() of all DMs fails, call 'plymouth quit' (#735215)
  - %ghost rc.local (but leave it around on upgrade) (#734268)
  - ifup: support random bridging options via BRIDGING_OPTS (#734045, #665378)
  - selinuxfs moved to /sys/fs, handle it (#733759)
  - netfs/fedora-storage-init: call multipath and kpartx with -u (#733437)
  - plymouth lives in /bin (#702814)
  - drop fedora-autoswap
  - ifdown-eth: fix dhclient pid file for IPv6 (#729292, <daveg@dgit.ndo.co.uk>)
  - move some more things to the legacy subpackage
  - netfs: don't mount gfs2 here (#689593)
  - readonly-root: add an empty CLIENTSTATE definition (#725476)
  - drop sysinit hack/unhack
  - ifup-eth: allow more options in ETHTOOL_OPTS (#692410, #693583)
  - rwtab: update for systemd (#704783)
  - debug.csh: fix for latest csh
  - update translations: eu_ES, hy, ku, lo, my, wa


author: Bill Nottingham <notting@redhat.com> - 9.33-1
changelog:
  - netconsole: only use the first ARP response (#744309, <doug.knight@karmix.org>)
  - udev/rules.d/88-clock.rules: drop this entirely, as it causes issues in conjunction with systemd
  - init.d/network: be less picky about ifcfg file names. (#742276)
  - /sbin/service: do not check for the existence of a systemd unit before redirecting (<mschmidt@redhat.com>)
  - init.d/functions: only run consoletype if connected to something that's console-ish. (#657869)


author: Bill Nottingham <notting@redhat.com> - 9.34-1
changelog:
  - read locale.conf if it exists (#706756)
  - ifdown: fix logic error with removing arp_ip_target (#745681)


author: Bill Nottingham <notting@redhat.com> - 9.35-1
changelog:
  - use the same DHCP lease file names as NetworkManager, where appropriate
  - copy network state from initramfs with a systemd service, not inline (<wwoods@redhat.com>)
  - sysconfig.txt: clean up section on disabling IPv6
  - ifup: allow for ifup-$TYPE/ifdown-$TYPE
  - fedora-readonly.service: drop StandardInput=tty (#785662)
  - sysconfig.txt: document additional ETHTOOL_OPTS enhancements (<raghusiddarth@gmail.com>)
  - port assorted ancient ifup-XYZ scripts away from ifconfig
  - don't use ifconfig in ifup-aliases (#721010, 588993, based on <tgummels@redhat.com>)
  - fedora-storage-init: handle dmraid sets with spaces (#728795, <lnykryn@redhat.com>)
  - fedora-readonly: don't exit with an error if SEinux isn't active. (#768628)
  - init.d/network: fix checks for network filesystems (#760018)
  - fedora-wait-storage: drop stdin/stdout/stderr (#735867)
  - netfs: move to legacy package
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 9.36-1
changelog:
  - ifup-aliases: fix IFS usage mangling of device names (#802119)
  - ifup/ifdown: fix typo (#802055, <lubek@users.sourceforge.net>)


author: Bill Nottingham <notting@redhat.com> - 9.39-1
changelog:
  - assorted documentation cleanups
  - typo, spelling, licenese clean up (<ville.skytta@iki.fi>)
  - service: add support for legacy custom actions packaged in
    /usr/libexec/initscripts/legacy-actions/<script>/<action>
  - network-functions: handle quoted HWADDR (#835372)
  - allow bridge names that start with '-' (<danken@redhat.com>)
  - remove all non-legacy uses of /sbin/route (#682308)
  - move default sysctl.conf to /usr/lib/sysctl.d (#760254)


author: Bill Nottingham <notting@redhat.com> - 9.41-1
changelog:
  - debugmode: MALLOC_CHECK_ is not thread safe. Don't enable it by default (#853175)
  - Add support for 256 color terminals (<pbrady@redhat.com>)
  - ifdown-eth: be less strict about VLAN name (#505314, <vpavlin@redhat.com>)
  - drop prefdm
  - ifup-eth: allow duplicate address detection to be disabled (<bcodding@uvm.edu>)
  - process rule6-* for sit devices (#840009, <lnykryn@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.42-1
changelog:
  - Halloween release!
  - add a default /etc/sysctl.conf that describes how to change values, and where the defaults now live. (#760254)
  - translation updates
  - fedora-autorelabel: don't pass -F to fixfiles (#863662, <dwalsh@redhat.com>)
  - fix calling of firewall-cmd in ifup-post/ifdown-post (<jpopelka@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.43-1
changelog:
  - 60-net.rules: explicitly set the interface name (#870859)
  - ifup-eth: set firewall zone before ifup-ipv6 for DHCPv6 (#802415)
  - migrate to /etc/locale.conf, /etc/vconsole.conf (#881923)
  - rename_device: fix bogus locking
  - fix wireless device detection for kernel 3.6 (#875328)
  - drop fedora-storage-init, fedora-wait-storage (<prajinoha@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.44-1
changelog:
  - limit udev rule for network renaming (#907365, mschmidt@redhat.com)
  - fix path for arpwatch, seems to be in /var/lib on Fedora 18
  - fix the path for lvm cache, there is no file /etc/lvm/.cache ( but there is one /etc/lvm/cache )
  - fix path for dhcpd, is /var/lib/dhcpd since 2005 ( see 31cdb58df77 on the dhcp package git )
  - fix the patch for apache modules in rwtab, that are now in /var/cache/httpd
  - remove no longer used directory ( at least in Fedora ), hald is deprecated,
    /var/tux cannot be found and xend seems to use a subdirectory of /var/lib/xen
  - correct the path for puppet directory in /etc/rwtab, now use /var/lib/puppet by default
  - allow passing -F from /.autorelabel to fixfiles when relabeling system (#904279)
  - correctly detect Open vSwitch device types
  - clear DEVICE and TYPE variables before every iteration (#902463)
  - sets BONDING_OPTS before interface is brougth up
  - check an IP address for existence in ifup-alias (#852005)
  - sync FSF address with GPL 2 text.
  - fix rpmlint's spaces vs tabs warning.
  - fix bogus %changelog dates.
  - build with $RPM_LD_FLAGS.
  - use -sf, not -s. (#901827)
  - add /usr/libexec/initscripts to file list (#894475)
  - rename term256 to 256term (glob sort) (#849429)
  - readd missing shebang. (#885821)
  - migrate even further away from /etc/sysconfig/network for hostname, and /etc/sysconfig/i18n.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.45-1
changelog:
  - turn on symlink protections in sysctl (#922030)
  - add systemd-random-seed.service to  Before= in fedora-readonly.service (#888615)
  - mention rule6 files in sysconfig.txt
  - skip nmcli for wireless device (#863707)
  - remove config-noreplace from /etc/inittab (#627474)
  - remount-rootfs.service got renamed to systemd-remount-fs.service
  - compile netreport and usernetctl with full RELRO and PIE (#853178)
  - move stuff directly to /usr (#905492)
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - fix greps to correctly handle comments and quotation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.46-1
changelog:
  - add /var/lib/NetworkManager
  - add ipip6 tunneling support (#928232, raorn@raorn.name)
  - bonding: set master up before slaves
  - set net.ipv6.conf.SYSCTLDEVICE.autoconf in ifup-ipv6
  - ifdown: don't call nmcli on interface that is alread down
  - remove some defaults from sysctl.conf (move to systemd)
  - call flush addresses with scope global
  - service: action should not be empty when calling legacy-actions (#947817)
  - ifup-eth: ignore arping errors (#928379)
  - replace tunctl with ip tuntap (#947875)
  - reload sysctl settings for vlans on ifup
  - try dhcpv6 after v4 failed (#846618)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.47-1
changelog:
  - network-functions: to determine state of nscd check socket not lock (#960779)
  - sysconfig.txt advised saslauthd -a instead of -v
  - update translations from transifex
  - drop translation for other initscripts
  - tweak ifup/ifdown usage and man page (#961917)
  - ctrl-alt-delete.target is provided by systemd package
  - remove some defaults from arch specific sysctl.conf
  - readonly-root: remount rpc_pipefs if readonly-root is used
  - service: mention legacy actions and systemctl redirection in man page


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.48-1
changelog:
  - man: add systemd man pages to service.8 "see also" section
  - add possibility to set domainname through /etc/sysconfig/network
  - rename_device: don't wait for lock with lower permissions
  - 256term.csh: remove quotes around variable (#979796)
  - drop useless variables from /etc/sysconfig/init
  - readonly-root: rpcidmapd restart is not needed anymore
  - ifup-eth: print error only if arping is really called (#974603)
  - readonly-root: Add /var/lib/samba to rwtab


author: Lukas Nykryn <lnykryn@redhat.com> - 9.50-1
changelog:
  - ipcalc: support RFC3021 (#997271)
  - symlink /etc/sysctl.conf -> /etc/sysctl.d/
  - man: only action specified in LSB are redirected to systemd
  - service: filter actions that are not supported by systemctl in service (#947823)
  - install_bonding_driver: drop check for existing device (#991335)
  - consider IPV6INIT undefined as YES
  - don't care about network filesystems


author: Lukáš Nykrýn <lnykryn@redhat.com> 9.51-1
changelog:
  - readonly-root: bind-mount only necessary subset of entries in rwtab
  - readonly-root: Add /var/log/audit/audit.log to rwtab
  - readonly-root: restore selinux context after bind mount
  - rename_device: remove comments and trailing whitespaces
  - service: suggest using systemctl if unknown action is used
  - ifup-eth: fix typo in error message
  - use iw instead of iwconfig and friends
  - update functions who call nmcli
  - ifdown: fix typo in nmcli call


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.53-1
changelog:
  - bridging: add possibility to set prio and ageing
  - ifup: add possibility to specify value for -w parameter of arping
  - network: try to not compete with NM during boot
  - fedora-domainname: DefaultDependencies=no
  - service: add condrestart to allowed commands
  - update ifup/ifdown NetworkManager interaction once more(#1036701, #1061810)
  - network: modify ifup-wireless so it doesn't call exit
  - set shmmax and shmall defaults to match rhel6 values (#1056547)
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - service: fix action matching
  - remove ifup-ipx from spec
  - Delete IPX support.
  - remove dependency on sysvinit-tools


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.54-1
changelog:
  - move ppp support to ppp package
  - remove fedora-configure
  - network: detect if / is on netfs
  - is_nm_handling: fix RE
  - bonding: match whole name of interface
  - network: add support for team devices
  - ifup-wireless: fix syntax error
  - fedora-readonly: fix prefix detection


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.55-1
changelog:
  - fix license handling
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - inittab: fix path and mention set-default
  - don't require /sbin/sysctl
  - init.d/functions: check parent dir of pid file for accessibility
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - remove ppp from translation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.56-1
changelog:
  - network_function: return immediately when device is pres
  ent
  - add configurable DEVTIMEOUT
  - fedora-import-state: do not clobber /
  - network-functions: grep->fgrep in bonding masters matchi
  ng
  - man: update sys-unconfig.8
  - rename_devices: comments need to have a blank before them
  - add example ifcfg files
  - network-functions: improve bonding_masters grep
  - ifup: if we were unable to determine DEVICE always call nmcli up
  - ifup-tunnel: call ifup-ipv6 in the end
  - ifup: also set multicast_snooping after the bridge is up
  - network-functions: ETHTOOL_DELAY introduction patch
  - use pie and relro by default
  - custom naming for VLAN devices
  - vi.po: fix parentheses
  - ifup-wireless: add support for wowlan
  - ifup-wireless: add support for wowlan (second part)
  - ifup-aliases: do not bring up ipv6 for range files
  - sys-unconfig: use poweroff instead of halt
  - ifup-aliases: improve duplicate address detection
  - network-functions: handle BONDING_OPTS better
  - network: tell nm to wake the slaves


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.60-1
changelog:
  - improve check for bond master in install bonding driver
  - network-functions: reeplace iwconfig with iw
  - ifup: fix typo
  - ifdown-ipv6: reset addrgenmode to eui64 for device


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.61-1
changelog:
  - specfile cleanup
  - ifup-ipv6: set accept_ra to 2 when IPV6FORWARDING=yes and IPV6_AUTOCONF=yes
  - ifup-post: check resolve.conf also with DNS2
  - ifup-aliases: do not fail when only ipv6 addr is specified
  - fedora-import-state.service: run a little bit later
  - fedora-readonly: Updates for systemd random-seed handling
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - ifdown-post: remove resolv.conf only in specific cases
  - network-functions: fix check in install_bonding_driver


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.62-1
changelog:
  - network-functions: fix change_resolv_conf after grep update
  - ifup-aliases: don't return with error when arping fails
  - init.d/functions: rc.debug option to debug initscripts
  - ifup-aliases: inherit ARPCHECK from parent device
  - network: report that we can't shut down network for root on netfs
  - ifdown-eth: use scope host for lo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.63-1
changelog:
  - remove ipcalc, it has its own package now
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - ifup: don't call NM for loopback
  - clarify daemon() usage message
  - rename_device: allow non-channel nics for s390x machines
  - ifup: add missing quotes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.64-1
changelog:
  - network-functions: fix wireless detection
  - fedora-readonly: use --make-slave with --bind mounts
  - import-state: don't run restorecon when it does not exist
  - network: modem type interfaces should explicitly start after and stop before common interfaces
  - ifup-post: should be interpreted in bash


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.65-1
changelog:
  - init.d/functions: end with 0
  - fedora-loadmodules: we don't have readahead anymore
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - ifdown: clean ipv4 localhost addresses
  - ifup-eth: some bridge options are applied later
  - service: improve status and stop function for daemon with intscripts
  - init.d/functions: reload systemd if it can't see an initscript


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.66-1
changelog:
  - remove autorelabel stuff
  - autorelabel: turn quota off before relabeling
  - network: Treat other tunnel interfaces, fixes ifdown stage
  - autorelabel: call dracut-initramfs-restore before forced reboot
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - ifdown-eth: fix comparison


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.67-1
changelog:
  - import-state: restore also sensitivity part of SELinux context
  - network: run after network-pre.target
  - ifup-eth: fix setting preferred_lft and valid_lft
  - ifup: don't call nmcli on any lo device
  - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
  - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
  - rwtab: /var/lib/nfs needs to copy the files
  - functions: improve killing loops
  - ifup: set valid_lft and preferred_lft to forever for static ip
  - service: use systemd mangle for given service


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.68-1
changelog:
  - fedora-import-state: skip modifying of existing folders (#1347436)
  - functions: systemctl show now returns an error when unit does not exist


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.71-1
changelog:
  - usleep: print deprecation warning from now on
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - specfile: mark 'rwtab' and 'statetab' as config files
  - killproc/status: add missing '-b <binary>' option
  - ifdown-eth: we need to flush global scope as well
  - ifup-eth: remove quote marks
  - po: download latest translations from zanata
  - rwtab: add /var/lib/systemd/timers
  - Update initscripts.pot
  - Port headers in xgettext_sh.py to 2017


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.72-1
changelog:
  - rename_device.c: rewrite of isCfg() function
  - Add *.old to list of ignored files
  - Replace usleep(1) calls with sleep(1) calls


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.73-1
changelog:
  - Makefile: replace /var/run with /run
  - Replace /var/run with /run everywhere
  - Update references to sysctl.conf
  - Drop sysctl.d/00-system.conf
  - Drop 256term.{sh,csh}
  - ARPUPDATE introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.75-1
changelog:
  - Makefile: $ROOT variable is now empty by default
  - Makefile: Fix additional error in commit b119d37d1
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - init.d/functions: convert2sec() function added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.76-1
changelog:
  - Makefile: return make archive for testing purposes
  - Revert "Makefile: replace /var/run with /run"


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.78-1
changelog:
  - specfile: drop dependancy on /etc/system-release
  - ifup-post: always update nameserver & search entries in /etc/resolv.conf
  - network-scripts: forward DBus calls to /dev/null
  - Spelling fixes
  - Tell git to ignore *.o
  - Use grep -E instead of deprecated egrep
  - Avoid some unnecessary stat calls
  - systemd/system: symlinks for fedora-* services removed
  - network-scripts: firewall-cmd replaced with DBus calls
  - 'debugmode' subpackage dropped completely
  - sysconfig/init* files dropped
  - sysctl.conf.s390 dropped
  - usleep: change the error message to print the full replacement commandline


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.79-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network: add knob to optionally keep interfaces up during shutdown
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.80-1
changelog:
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - use proper shebang where appropriate
  - specfile: remove the systemctl call in the %postun phase
  - network-functions: use tr to upper case strings rather than awk
  - network-functions: add error messages for bonding installation
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed
  - netconsole: LSB header added
  - po/xgettext_sh*: converted to use to python3
  - network.service: 'reload' removed
  - ifup-tunnel: Support 'external' tunnels
  - spec: add gcc to BuildRequires
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.81-1
changelog:
  - src/consoletype.c: deprecation warning added
  - src/genhostid.c: deprecation warning added
  - src/genhostid.c: fixed to not override /etc/hostid if it already exists
  - src/usleep.c: GCC warnings fixed
  - nis-domainname.service removed
  - fedora-* services renamed to more general names
  - specfile: missing fedora-domainname.service returned in systemd macros
  - COPYING updated to latest GNU version (GPLv2+)
  - network-scripts: control 'network' service with alternatives as well
  - netreport functionality dropped
  - networks moved into 'setup' package
  - lang.{sh,csh} moved into setup package
  - lang.{sh,csh} cleanup before moving to 'setup' package
  - src/sushell moved into 'policycoreutils' package
  - src/shvar.* removed
  - po/xgettext_sh removed
  - sys-unconfig removed
  - Outdated files from doc/ folder removed
  - make archive: ChangeLog generating removed
  - network-scripts: ifup & ifdown -- use alternatives system
  - adjtime moved into 'util-linux' package
  - specfile: simplified & updated to new repository layout
  - .gitignore files updated to new repository layout
  - Makefile simplified & updated to new repository layout
  - po/Makefile simplified & updated to new repository layout
  - src/Makefile simplified & updated to new repository layout
  - Repository scheme updated to new layout
  - fedora-readonly: command substitution warning fixed (null-byte input)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.82-1
changelog:
  - Makefile: make the creation of symlinks relative to path again
  - specfile: trailing file of netreport removed


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.83-1
changelog:
  - network-scripts: Add previously dropped error checking
  - network-scripts: Replace brctl with ip-link
  - Makefile: new release-commit rule added
  - src/rename_device.c: GCC warnings about unused return value suppressed
  - src/usernetctl.c: GCC warnings about unused return value suppressed
  - Makefile: allow sub-makefiles to run in parallel
  - specfile: netconsole service moved to /usr/libexec
  - specfile: services from /usr/lib/systemd moved to /usr/libexec
  - specfile: summary & description updated
  - specfile: no longer needed conflicts dropped
  - specfile: requirements cleanup
  - specfile: obsoletes on previous version of initscripts package added
  - specfile: network-scripts subpackage created
  - specfile: readonly-root subpackage created
  - specfile: netconsole-service subpackage created
  - README.md: Travis CI build icon added
  - .travis.yml: check the 'make install' proceeds as well
  - .travis.yml: initial commit
  - README.md: bug reporting described
  - README.dm: future of initscripts described
  - README.md: description added
  - README.md: references to old git branches added
  - README.md: initial commit
  - network-scripts: setting of firewall ZONE fixed
  - ifdown-post: artifact whitespace removed from the DBus call
  - l10n: drop .tx directory
  - l10n: add zanata.xml


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00-1
changelog:
  - Move the /etc/rwtab.d & /etc/statetab.d folders to 'filesystem'
  - specfile: fix failing build because of incorrect use of (aarch-64)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00.1-1
changelog:
  - consoletype/genhostid/usleep: allow disabling of deprecation warnings
  - network/ifup/ifdown: allow disabling of deprecation warnings
  - network/ifup/ifdown: deprecation warnings for 'network-scripts' added


author: Jan Macku <jamacku@redhat.com> - 10.00.3-1
changelog:
  - rc.d/functions: fix escape sequence being output under systemd service units
  - Replace not working awk command with sed


author: Jan Macku <jamacku@redhat.com> - 10.00.5-1
changelog:
  - network-function: bridges are created by ifup-eth
  - network: don't fail with IFDOWN_ON_SHUTDOWN
  - Add ip6gre tunnel option
  - ifup-eth: Check that device name is set
  - Initscripts no longer care about rc.local


author: Dan Walsh <dwalsh@redhat.com> 0.1.4-1
changelog:
  - Add patch from sgrubb
  - 	Fix 64 bit size problems
  - 	Increase the open file limit
  -	Make sure maximum size is not exceeded


author: Joe Nall <joe@nall.com> 0.3.1-1
changelog:
  - Rewrite translations to allow individual word/category mapping
  - Eamon Walsh's color mapping changes


author: Ted X Toth <txtoth@gmail.com> - 0.3.2-0
changelog:
  - Add constraints
  - Add setrans.conf man page
  - Fix mixed raw and translated range bug
  - Moved todo comments to TODO file


author: Dan Walsh <dwalsh@redhat.com> - 0.3.3-7
changelog:
  - Add secolor.conf.5 man page
  - Make mcstransd watch for content being written to /run/setrans for files names containing translations.
  -- This will allow apps like libvirt to write content nameing randomly selected MCS labels
  - Fix memory leak in mcstransd


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: Paul Wouters <pwouters@redhat.com> - 3.2.22-2
changelog:
  - Update to 3.2.22 (rhbz#963111)
  - Add patch for double tree crasher in rtnl_link_set_address_family()


author: Thomas Haller <thaller@redhat.com> - 3.2.24-3
changelog:
  - add nl_has_capability() function
  - retry local port on ADDRINUSE (rh #1097175)
  - python: fix passing wrong argument in netlink/core.py
  - fix return value of nl_rtgen_request()
  - fix nl_msec2str()
  - fix crash in rtnl_act_msg_parse()
  - fix rtnl_route_build_msg() not to guess the route scope if RT_SCOPE_NOWHERE


author: Thomas Haller <thaller@redhat.com> - 3.2.26-3
changelog:
  - Update to 3.2.26-rc1
  - fix broken symbols from 3.2.26-1
  - backport upstream fix for nl_socket_set_fd()


author: Thomas Haller <thaller@redhat.com> - 3.2.29-2
changelog:
  - Update with patches from upstream
  - check valid input arguments for nla_reserve() (rh#1414305, CVE-2017-0386)
  - fix crash during SRIOV parsing
  - lazyly read psched settings
  - use O_CLOEXEC when creating file descriptors with fopen()


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3.0-4
changelog:
  - Python 2 binary package renamed to python2-libnl3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.4.1.el8_1]
changelog:
  - [block] blk-mq: apply normal plugging for HDD (Ming Lei) [1782181 1759380]
  - [block] blk-mq: honor IO scheduler for multiqueue devices (Ming Lei) [1782181 1759380]
  - [block] blk-mq: simplify blk_mq_make_request() (Ming Lei) [1782181 1759380]
  - [block] blk-mq: remove blk_mq_put_ctx() (Ming Lei) [1782181 1759380]
  - [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1781660 1779553] {CVE-2019-19338}
  - [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1778693 1765979]
  - [fs] cifs: avoid using MID 0xFFFF (Leif Sahlberg) [1778693 1765979]
  - [fs] cifs: Fix retry mid list corruption on reconnects (Leif Sahlberg) [1778693 1765979]
  - [fs] smb3: fix unmount hang in open_shroot (Leif Sahlberg) [1781113 1757670]
  - [fs] CIFS: fix deadlock in cached root handling (Leif Sahlberg) [1781113 1757670]
  - [fs] Fix match_server check to allow for auto dialect negotiate (Leif Sahlberg) [1781113 1757670]
  - [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1781113 1757670]
  - [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1781113 1757670]
  - [fs] cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (Leif Sahlberg) [1781113 1757670]
  - [fs] smb3: fix signing verification of large reads (Dave Wysochanski) [1781110 1753114]
  - [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1781108 1733217]
  - [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1778692 1739607]
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778633 1778634] {CVE-2019-17133}
  - [block] blkcg: perpcu_ref init/exit should be done from blkg_alloc/free() (Ming Lei) [1777766 1741392]
  - [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777389 1749763] {CVE-2019-14898}
  - [netdrv] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Jarod Wilson) [1776618 1775484] {CVE-2019-14814 CVE-2019-14815 CVE-2019-14816}
  - [netdrv] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Jarod Wilson) [1776209 1776210] {CVE-2019-14895}
  - [netdrv] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Jarod Wilson) [1776161 1776162] {CVE-2019-14901}
  - [netdrv] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775222 1775223] {CVE-2019-17666}
  - [pci] hv: Avoid use of hv_pci_dev->pci_slot after freeing it (Mohammed Gamal) [1764635 1737569]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.5.1.el8_1]
changelog:
  - [powerpc] powerpc/shared: Use static key to detect shared processor (Phil Auld) [1781114 1767529]
  - [powerpc] powerpc/vcpu: Assume dedicated processors as non-preempt (Phil Auld) [1781114 1767529]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.6.1.el8_1]
changelog:
  - [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
  - [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
  - [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
  - [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
  - [mm] mm/page-writeback.c: don't break integrity writeback on ->writepage() error (Christoph von Recklinghausen) [1797962 1782117]
  - [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
  - [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
  - [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
  - [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
  - [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
  - [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
  - [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
  - [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
  - [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
  - [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
  - [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
  - [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
  - [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
  - [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
  - [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
  - [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: remove RX seqno in skb->cb (Philipp Rudo) [1794059 1781085]
  - [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
  - [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
  - [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
  - [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
  - [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
  - [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
  - [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
  - [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
  - [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
  - [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
  - [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
  - [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
  - [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.7.1.el8_1]
changelog:
  - [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
  - [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
  - [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
  - [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
  - [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build', removed '%prefix'.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Simo Sorce <ssorce@redhat.com> 3.0.0-0.pre8.fc9
changelog:
  - Eight prerelease
  - Add second source, now patches are in a separate file
  - Add temporary fix to the xattrs.diff patch line as, in this version
    the patch contains one extra humk already contained in acls.diff


author: Michal Luscon <mluscon@redhat.com> 3.0.9-4
changelog:
  - Fixed: #823088 - rsync loses track of files with different directory prefixes
  - Fixed: #495310 - rsync contains forked copy of zlib


author: Michal Luscon <mluscon@redhat.com> - 3.1.0-1pre1
changelog:
  - Upstream 3.1.0 pre release
  - Fixed: #495310 - rsync contains forked copy of zlib
  - Fixed: #926459 - building aarch64
  - Fixed: bogus dates in changelog


author: Michal Luscon <mluscon@redhat.com> - 3.1.0-3
changelog:
  - Fixed: CVE-2014-2855 - denial of service
  - Reverted: compilation with system provided zlib (#1043965)


author: Jarod Wilson <jarod@redhat.com> - 12-3
changelog:
  - Take libi40iw out of tech-preview state (rhbz 1428930)
  - Add ibv_*_pingpong man pages (rhbz 1416541)


author: Jarod Wilson <jarod@redhat.com> - 12-4
changelog:
  - Clean up devel files list
  - Fix up a few dependencies rpmdiff complained about (rhbz 1404035)
  - Add Requires: pciutils for dracut to behave in minimalist cases (rhbz 1429046)
  - Adjust Conflicts: on infiniband-diags to match RHEL packaging (rhbz 1428785)


author: Jarod Wilson <jarod@redhat.com> - 13-1
changelog:
  - Update to rdma-core v13 release (rhbz 1404035)
  - Mellanox mlx5 Direct Verbs support (rhbz 1426430)
  - Get build working on s390x, less mlx5 (rhbz 1434029)


author: Jarod Wilson <jarod@redhat.com> 13-6
changelog:
  - Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
  - Add necessary Provides/Obsoletes for old -static packages
  - Remove ibverbs providers that we aren't currently able to support
  - Resolves: rhbz#1453096, rhbz#1451607


author: Jarod Wilson <jarod@redhat.com> 15-2
changelog:
  - Fix ibacm segfault and improper multicast handling
  - Resolves: rhbz#1502745
  - Resolves: rhbz#1502759


author: Honggang Li <honli@redhat.com> 15-3
changelog:
  - srp_daemon: Don't create async_ev_thread if only run once
  - srp_daemon: Remove unsupported systemd configurations
  - srp_daemon: Start srp_daemon service after network target
  - Resolves: bz1525193
  - Resolves: bz1528671


author: Jarod Wilson <jarod@redhat.com> 15-4
changelog:
  - Add support for extended join multicast API in librdmacm
  - Add support for striding RQ on mlx5
  - Resolves: rhbz#1515487, rhbz#1516571


author: Jarod Wilson <jarod@redhat.com> 15-5
changelog:
  - libmlx4: report RSS caps for improved DPDK support
  - Fix double mutex unlock in iwpmd
  - Resolves: rhbz#1527350
  - Resolves: rhbz#1542362


author: Jarod Wilson <jarod@redhat.com> 15-7
changelog:
  - i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
    causing problems with suspend and resume, and fall back to load via
    systemd rdma initscript.
  - Resolves: rhbz#1561566


author: Jarod Wilson <jarod@redhat.com> 17.1-1
changelog:
  - Rebase to upstream rdma-core v17.1 stable release
  - No more libibcm or ib sysv initscripts
  - Remove ibverbs provider for unsupported CXGB3 devices
  - Remove ibverbs provider for unsupported OCRDMA devices
  - Resolves: rhbz#1492324
  - Resolves: rhbz#1492924
  - Resolves: rhbz#1503621
  - Resolves: rhbz#1504528
  - Resolves: rhbz#1504581
  - Resolves: rhbz#1503723


author: Jarod Wilson <jarod@redhat.com> 18.1-2
changelog:
  - Disable nes, mthca and ipath libibverbs providers, this
    old hardware is no longer supported, and fix disabling
    of cxgb3 and ocrdma


author: Jarod Wilson <jarod@redhat.com> - 19.1-1
changelog:
  - Update to v19.1 stable branch release
  - Fix SRQ support in libi40iw
  - Backport libqedr support for SRQ
  - Resolves: rhbz#1639692
  - Switch rxe_cfg from ifconfig to iproute2
  - Resolves: rhbz#1640637


author: Jarod Wilson <jarod@redhat.com> - 22-1
changelog:
  - Update to upstream v22 release for features and fixes
  - Include legacy ibdev2netdev helper script
  - Resolves: rhbz#1643904


author: Jarod Wilson <jarod@redhat.com> - 22.3-1
changelog:
  - Update to upstream v22.3 stable release for fixes
  - Enable support for Broadcom 57500 hardware
  - Enable support for Mellanox ConnectX-6 DX hardware
  - Resolves: rhbz#1678276
  - Resolves: rhbz#1687435


author: Jarod Wilson <jarod@redhat.com> - 26.0-2
changelog:
  - Add Obsoletes/Provides pair for infiniband-diags-devel
  - Pull in upstream stable-v26 branch patches
  - Fix %postun scriptlet failures by removing superfluous -p options
  - Add new BuildRequires: on pandoc
  - Related: rhbz#1722257


author: Jindrich Luza <jluza@redhat.com> 0.1.2
changelog:
  - automatic changelog system
  - fixed issue #14
  - libcomps.Dict is now behave more like python dict. Implemented iter(libcomps.Dict)
  - libcomps.iteritems() and libcomps.itervalues()
  - remaked error reporting system.
  -     libcomps.Comps.fromxml_f and libcomps.Comps.fromxml_str now return
  -     -1, 0 or 1. 0 means parse procedure completed without any problem,
  -     1 means there's some errors or warnings but not fatal. -1 indicates
  -     fatal error problem (some results maybe given, but probably incomplete
  -     and invalid)
  - errors catched during parsing can be obtained by calling
  -     libcomps.Comps.get_last_parse_errors
  - all log is given by
  -     libcomps.Comps.get_last_parse_log
  - prop system complete
  - fixed issue 1
  - fixed issue 3
  - added <packagereq requires=...> support
  - new prop system in progress....
  - separated doc package
  - some minor fixes in CMakeFiles
  - improved integrated tests


author: Jindrich Luza <jluza@redhat.com> 0.1.3
changelog:
  - finished default attribute support in groupid object
  - Comps.get_last_parse_errors and Comps.get_last_parse_log has been renamed
  -   as Comps.get_last_errors and Comps.get_last_log
  - finished default attribute support in groupid object
  - Comps.get_last_parse_errors and Comps.get_last_parse_log has been renamed
  -   as Comps.get_last_errors and Comps.get_last_log


author: Jindrich Luza <jluza@redhat.com> 0.1.4
changelog:
  - added missing files
  - architectural redesign finished
  - fixed #1003986 by Gustavo Luiz Duarte guidelines (but not tested on ppc)
  - fixed bug #1000449
  - fixed bug #1000442
  - added GroupId.default test
  - some minor unreported bugs discovered during testing fixed
  - finished default attribute support in groupid object
  - Comps.get_last_parse_errors and Comps.get_last_parse_log has been renamed
  -   as Comps.get_last_errors and Comps.get_last_log
  - version bumped. Python bindings is now easier.
  - added missing files


author: Jindrich Luza <jluza@redhat.com> 0.1.5
changelog:
  - version bump
  - PyCOMPS_Sequence.__getitem__["objectid"] implemented for libcomps.GroupList, libcomps.CategoryList, libcomps.EnvList
  - added missing files
  - missing display_order fix for libcomps.Environment


author: Jindrich Luza <jluza@redhat.com> 0.1.4-4
changelog:
  - group.uservisible is true by default now.
  - fixed comps_mobjradix parent node problem
  - implemented bindings for blacklist, whiteout and langpacks
  - COMPS_Logger redesigned


author: Jindrich Luza <jluza@redhat.com> 0.1.6
changelog:
  - version bumped
  - added libcomps.MDict.keys()
  -         libcomps.MDict.values()
  -         libcomps.MDict.items()
  -         libcomps.MDict.clear()
  -         libcomps.MDict.update()
  -         libcomps.MDict.copy()
  - COMPS_List replaced with COMPS_HSList
  - added missing basearchonly to DocGroupPackage
  - python3/CMakeLists.txt fixed
  - added explicit attributes support for xml options
  - added arch_filter test for python
  - insert method in libcomps.Sequence
  - Unioning is now accomplished with replace x append policy
  - Weaker package equality check (comparing only name now)
  - Fixed leeks in unioning
  - modified test_merge_comps test_libcomps
  - dictionaries are now storing keys in alphabetical order
  - comps parser redesigned
  - change python/tests directory composition
  - added elem attributes check in parser
  - xml output '_arch' attribute support
  - parser and xml output defaults options for specify defaults values
  - comps object validation in python
  - added validity checker before append/set object to list (python only)
  - .validate() method
  - added libcomps.Dict.keys
  -         libcomps.Dict.values
  -         libcomps.Dict.items
  -         libcomps.Dict.clear
  -         libcomps.Dict.update
  -         libcomps.Dict.copy
  - added xml output options (comps.xml_str([options = {}]), comps.xml_f(options = {}))


author: Jindrich Luza <jluza@redhat.com> 0.1.7
changelog:
  - added langpacks to union process
  - comps DOCTYPE read-write-read fix
  - support biarchonly attribute
  - fixed rhbz#1073885 rhbz#1073890 rhbz#1073907 rhbz#1073979
  - fix rhbz#1073079
  - comps_*_match() now support fnmatching
  - added libpycomps.MATCH_IGNORECASE as matching flag
  - added group.packages_match
  - added comps.groups_match, comps.categories_match, comps.entironments_match
  - PyCOMPS_Package hash
  - cmake-2.6, python-2.6, RHEL-6 compatible
  - '_arch' attribute change to 'arch'
  - empty 'arch' attribute will be ommited from output from now


author: Petr Pisar <ppisar@redhat.com> - 2.12-367
changelog:
  - Fix CVE-2017-6512 (setting arbitrary mode on an arbitrary file in rmtree()
    and remove_tree()) (bug #1457834)


author: John Kacur <jkacur@redhat.com>
changelog:
  - disabled #patch01
  - Updated the trace-cmd source
  - Changed version to 0.7.0
  - Added bogus patch to satisfy rpm requirements
  - Related:bz519630


author: John Kacur <jkacur@redhat.com>
changelog:
  - Added trace-cmd-Makefile-EXTRAVERSION-should-be-set-withou.patch
  - Added trace-cmd-Makefile-use-a-substitution-reference.patch
  - add-DESTDIR-to-make.patch
  - Related: rhbz599507


author: John Kacur <jkacur@redhat.com>
changelog:
  - Rebasing to trace-cmd-1.0.2
  - Added parse-events-Do-not-fail-on-FORMAT-TOO-BIG-event-err.patch
  - Added trace-cmd-Prevent-latency-tracer-plugins-from-doing-.patch
  - Added trace-cmd-Prevent-print_graph_duration-buffer-overfl.patch


author: Jon Stanley <jonstanley@gmail.com> - 1.0.5-1
changelog:
  - Rebase to 1.0.5
  - Add Makefile patch to support passing RPM_OPT_FLAGS
  - Add kernelshark subpackage
  - Initial Fedora version


author: Zamir SUN <zsun@fedoraproject.org> - 2.6-2
changelog:
  - Add bz1386451-trace-cmd-record-crash-f-before-e.patch
  - Fix rpmlint error unstripped-binary-or-object
  - Resolves: rhbz#1386451


author: John Kacur <jkacur@redhat.com> - 2.7-8
changelog:
  - Install kernelshark manpage with kernelshark subpackage, not with trace-cmd
  Resolves: rhbz#1678252


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-3
changelog:
  - DBD::SQLite fails to build with the current FC-5 sqlite version (3.3.3);
    see bugzilla entry #183530.
    Forcing package rebuild with the included version of sqlite (3.2.7).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-4
changelog:
  - Patch to build with system sqlite 3.3.x (#183530).
  - Patch to avoid type information segv (#187873).


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Thomas Woerner <twoerner@redhat.com> 0.1.1-1
changelog:
  - new version 0.1.1
  - fixed source path in POTFILES*
  - added missing firewall_config.py.in
  - added misssing space for spec_ver line
  - using firewall_config.VARLOGFILE
  - added date to logging output
  - also log fatal and error logs to stderr and firewall_config.VARLOGFILE
  - make log message for active_firewalld fatal


author: Thomas Woerner <twoerner@redhat.com> 0.1.2-1
changelog:
  - fixed package according to package review (rhbz#665395):
    - non executable scripts: dropped shebang
    - using newer GPL license file
    - made /etc/dbus-1/system.d/FirewallD.conf config(noreplace)
    - added requires(post) and (pre) for chkconfig


author: Thomas Woerner <twoerner@redhat.com> 0.1.3-1
changelog:
  - new version 0.1.3
  - restore all firewall features for reload: panic and virt rules and chains
  - string fixes for firewall-cmd man page (by Jiri Popelka)
  - fixed firewall-cmd port list (by Jiri Popelka)
  - added firewall dbus client connect check to firewall-cmd (by Jiri Popelka)
  - translation updates: de, es, gu, it, ja, kn, ml, nl, or, pa, pl, ru, ta,
                         uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-1
changelog:
  - version 0.2.0 with new FirewallD1 D-BUS interface
  - supports zones with a default zone
  - new direct interface as a replacement of the partial virt interface with 
    additional passthrough functionality
  - dropped custom rules, use direct interface instead
  - dropped trusted interface funcionality, use trusted zone instead
  - using zone, service and icmptype configuration files
  - not using any system-config-firewall parts anymore


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-2
changelog:
  - added glib2-devel to build requires, needed for gsettings.m4
  - added --with-system-unitdir arg to fix installaiton of system file
  - added glib-compile-schemas calls for postun and posttrans
  - added EXTRA_DIST file lists


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)


author: Thomas Woerner <twoerner@redhat.com> 0.2.2-1
changelog:
  - enabled dhcpv6-client service for zones home and work
  - new dhcpv6-client service
  - firewall-cmd: query mode returns reversed values
  - new zone.changeZone(zone, interface)
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)
  - reset MinimalMark in firewalld.cnf to default value
  - fixed service destination (addresses not used)
  - fix xmlplus to be compatible with the python xml sax parser and python 3
    by adding __contains__ to xml.sax.xmlreader.AttributesImpl
  - use icon and glib related post, postun and posttrans scriptes for firewall
  - firewall-cmd: fix typo in state
  - firewall-cmd: fix usage()
  - firewall-cmd: fix interface action description in usage()
  - client.py: fix definition of queryInterface()
  - client.py: fix typo in getInterfaces()
  - firewalld.service: do not fork
  - firewall-cmd: fix bug in --list=port and --port action help message
  - firewall-cmd: fix bug in --list=service


author: Thomas Woerner <twoerner@redhat.com> 0.2.3-1
changelog:
  - firewall-cmd: several changes and fixes
  - code cleanup
  - fixed icmp protocol used for ipv6 (rhbz#801182)
  - added and fixed some comments
  - properly restore zone settings, timeout is always set, check for 0
  - some FirewallError exceptions were actually not raised
  - do not REJECT in each zone
  - removeInterface() don't require zone
  - new tests in firewall-test script
  - dbus_to_python() was ignoring certain values
  - added functions for the direct interface: chains, rules, passthrough
  - fixed inconsistent data after reload
  - some fixes for the direct interface: priority positions are bound to ipv,
    table and chain
  - added support for direct interface in firewall-cmd:
  - added isImmutable(zone) to zone D-Bus interface
  - renamed policy file
  - enhancements for error messages, enables output for direct.passthrough
  - added allow_any to firewald policies, using at leas auth_admin for policies
  - replaced ENABLE_FAILED, DISABLE_FAILED, ADD_FAILED and REMOVE_FAILED by
    COMMAND_FAILED, resorted error codes
  - new firewalld configuration setting CleanupOnExit
  - enabled polkit again, found a fix for property problem with slip.dbus.service
  - added dhcpv6-client to 'public' (the default) and to 'internal' zones.
  - fixed missing settings form zone config files in
    "firewall-cmd --list=all --zone=<zone>" call
  - added list functions for services and icmptypes, added --list=services and
    --list=icmptypes to firewall-cmd


author: Thomas Woerner <twoerner@redhat.com> 0.2.5-1
changelog:
  - Fixed traceback in firewall-cmd for failed or canceled authorization, 
    return proper error codes, new error codes NOT_RUNNING and NOT_AUTHORIZED
  - Enhanced firewalld service file (RHBZ#806868) and (RHBZ#811240)
  - Fixed duplicates in zone after reload, enabled timed settings after reload
  - Removed conntrack --ctstate INVALID check from default ruleset, because it
    results in ICMP problems (RHBZ#806017).
  - Update interfaces in default zone after reload (rhbz#804814)
  - New man pages for firewalld(1), firewalld.conf(5), firewalld.icmptype(5),
    firewalld.service(5) and firewalld.zone(5), updated firewall-cmd man page
    (RHBZ#811257)
  - Fixed firewall-cmd help output
  - Fixed missing icon for firewall-applet (RHBZ#808759)
  - Added root user check for firewalld (RHBZ#767654)
  - Fixed requirements of firewall-applet sub package (RHBZ#808746)
  - Update interfaces in default zone after changing of default zone (RHBZ#804814)
  - Start firewalld before NetworkManager (RHBZ#811240)
  - Add Type=dbus and BusName to service file (RHBZ#811240)


author: Thomas Woerner <twoerner@redhat.com> 0.2.6-1
changelog:
  - New D-BUS interface for persistent configuration
  - Aded support for persistent zone configuration in firewall-cmd
  - New Shields Up feature in firewall-applet
  - New requirements for python-decorator and pygobject3
  - New firewall-config sub-package
  - New firewall-convert-scfw-config config script


author: Thomas Woerner <twoerner@redhat.com> 0.2.8-1
changelog:
  - Do not apply old settings to zones after reload
  - FirewallClient: Added callback structure for firewalld signals
  - New firewall-config with full zone, service and icmptype support
  - Added Shields Up/Down configuration dialog to firewall-applet
  - Name attribute of main tag deprecated for zones, services and icmptypes,
    will be ignored if present
  - Fixed wrong references in firewalld man page
  - Unregister DBus interfaces after sending out the Removed signal
  - Use proper DBus signature in addIcmpType, addService and addZone
  - New builtin property for config interfaces
  - New test case for Config interface
  - spec: use new systemd-rpm macros (rhbz#850110)
  - More config file verifications
  - Lots of smaller fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 0.2.9-1
changelog:
  - firewall-config: some UI usability changes
  - firewall-cmd: New option --list-all-zones, output of --list-all changed,
    more option combination checks
  - firewall-applet: Replaced NMClient by direct DBUS calls to fix python core
    dumps in case of connection activates/deactivates
  - Use fallback 'C' locale if current locale isn't supported (RHBZ#860278)
  - Add interfaces to zones again after reload
  - firewall-cmd: use FirewallClient().connected value
  - firewall-cmd: --remove-interface was not working due to a typo
  - Do not use restorecon for new and backup files
  - Fixed use of properties REJECT and DROP
  - firewalld_test.py: check interfaces after reload
  - Translation updates
  - Renamed firewall-convert-scfw-config to firewall-offline-cmd, used by
    anaconda for firewall configuration (e.g. kickstart)
  - Fix python shebang to use -Es at installation time for bin_SCRIPTS and
    sbin_SCRIPTS and at all times in gtk3_chooserbutton.py
  - tests/firewalld_config.py: update test_zones() test case
  - Config interface: improve renaming of zones/services/icmp_types
  - Move emiting of Added signals closer to source.
  - FirewallClient(): config:ServiceAdded signal was wrongly mapped
  - Add argument 'name' to Removed signal
  - firewall-config: Add callbacks for config:[service|icmp]-[added|removed]
  - firewall-config: catch INVALID_X error when removing zone/service/icmp_type
  - firewall-config: remove unused code
  - Revert "Neutralize _xmlplus instead of conforming it"
  - firewall-applet: some UI usability changes
  - firewall-cmd: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings


author: Thomas Woerner <twoerner@redhat.com> 0.2.10-1
changelog:
  - tests/firewalld_config.py: tests for config.service and config.icmptype
  - FirewallClientConfigServiceSettings(): destinations are dict not list
  - service/zone/icmptype: do not write deprecated name attribute
  - New service ntp
  - firewall-config: Fixed name of about dialog
  - configure.in: Fixed getting of error codes
  - Added coding to all pyhton files
  - Fixed copyright years
  - Beautified file headers
  - Force use of pygobject3 in python-slip (RHBZ#874378)
  - Log: firewall.server.config_icmptype, firewall.server.config_service and
    firewall.server.config_zone: Prepend full path
  - Allow ":" in interface names for interface aliases
  - Add name argument to Updated and Renamed signal
  - Disable IPv4, IPv6 and EB tables if missing - for IPv4/IPv6 only environments
  - firewall-config.glade file cleanup
  - firewall-config: loadDefaults() can throw exception
  - Use toolbars for Add/Edit/Remove/LoadDefaults buttons for zones, services
    and icmp types
  - New vnc-server service, opens ports for displays :0 to :3 (RHBZ#877035)
  - firewall-cmd: Fix typo in help output, allow default zone usage for
    permanenent options
  - Translation updates: cs, fr, ja, pt_BR and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-1
changelog:
  - Fixed more _xmlplus (PyXML) incompatibilities to python xml
  - Several man page updates
  - Fixed error in addForwardPort, removeForwardPort and queryForwardPort
  - firewall-cmd: use already existing queryForwardPort()
  - Update firewall.cmd man page, use man page as firewall-cmd usage (rhbz#876394)
  - firewall-config: Do not force to show labels in the main toolbar
  - firewall-config: Dropped "Change default zone" from toolbar
  - firewall-config: Added menu entry to change zones of connections
  - firewall-applet: Zones can be changed now using nm-connection-editor
    (rhbz#876661)
  - translation updates: cs, hu, ja


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-2
changelog:
  - require pygobject3-base instead of pygobject3 (no cairo needed) (RHBZ#874378)
  - fixed dependencies of firewall-config to use gtk3 with pygobject3-base and 
    not pygtk2


author: Thomas Woerner <twoerner@redhat.com> 0.2.12-1
changelog:
  - firewall-cmd: use -V instead of -v for version info (RHBZ#886477)
  - firewall-cmd: don't check reload()'s return value (RHBZ#886461)
  - actually install firewalld.zones.5
  - firewall-config: treat exceptions when adding new zone/service/icmp
    (RHBZ#886602)
  - firewalld.spec: Fixed requirements of firewall-config to use gtk2 and
    pygobject3
  - Fail gracefully when running in non X environment.(RHBZ#886551)
  - offline-cmd: fail gracefully when no s-c-f config
  - fix duplicated iptables rules (RHBZ#886515)
  - detect errors and duplicates in config file (RHBZ#886581)
  - firewall-config: don't make 'Edit Service' and 'Edit ICMP Type' insensitive
  - firewalld.spec: fixed requirements, require pygobject3-base
  - frewall-applet: Unused code cleanup
  - firewall-applet: several usability fixes and enhancements
    (RHBZ#886531) (RHBZ#886534)
  - firewall/server/server.py: fixed KeyboardInterrupt message (RHBZ#886558)
  - Moved fallback zone and minimal_mark to firewall.config.__init__
  - Do not raise ZONE_ALREADY_SET in change_zone if old zone is set again
    (RHBZ#886432)
  - Make default zone default for all unset connections/interfaces
    (RHBZ#888288) (RHBZ#882736)
  - firewall-config: Use Gtk.MessageType.WARNING for warning dialog
  - firewall-config: Handle unknown services and icmptypes in persistent mode
  - firewall-config: Do not load settings more than once
  - firewall-config: UI cleanup and fixes (RHBZ#888242)
  - firewall-cmd: created alias --change-zone for --change-interface
  - firewall-cmd man page updates (RHBZ#806511)
  - Merged branch 'build-cleanups'
  - dropped call to autogen.sh in build stage, not needed anymore due to 
    'build-cleanups' merge


author: Jiri Popelka <jpopelka@redhat.com> - 0.2.12-2
changelog:
  - Default zone in firewalld.conf was reseted with every restart (RHBZ#902845)
  - Add icon cache related scriptlets for firewall-config (RHBZ#902680)
  - Fix typo in firewall-config (RHBZ#895812)
  - Fix few mistakes in firewall-cmd(1) man page


author: Thomas Woerner <twoerner@redhat.com> 0.3.0-1
changelog:
  - Added rich language support
  - Added lockdown feature
  - Allow to bind interfaces and sources to zones permanently
  - Enabled IPv6 NAT support
    masquerading and port/packet forwarding for IPv6 only with rich language
  - Handle polkit errors in client class and firewall-config
  - Added priority description for --direct --add-rule in firewall-cmd man page
  - Add XML Schemas for zones/services/icmptypes XMLs
  - Don't keep file descriptors open when forking
  - Introduce --nopid option for firewalld
  - New FORWARD_IN_ZONES and FORWARD_OUT_ZONES chains (RHBZ#912782)
  - Update cluster-suite service (RHBZ#885257)
  - firewall-cmd: rename --enable/disable-panic to --panic-on/off (RHBZ#874912)
  - Fix interaction problem of changed event of gtk combobox with polkit-kde
    by processing all remaining events (RHBZ#915892)
  - Stop default zone rules being applied to all zones (RHBZ#912782)
  - Firewall.start(): don't call set_default_zone()
  - Add wiki's URL to firewalld(1) and firewall-cmd(1) man pages
  - firewalld-cmd: make --state verbose (RHBZ#886484)
  - improve firewalld --help (RHBZ#910492)
  - firewall-cmd: --add/remove-* can be used multiple times (RHBZ#879834)
  - Continue loading zone in case of wrong service/port etc. (RHBZ#909466)
  - Check also services and icmptypes in Zone() (RHBZ#909466)
  - Increase the maximum length of the port forwarding fields from 5 to 11 in
    firewall-config
  - firewall-cmd: add usage to fail message
  - firewall-cmd: redefine usage to point to man page
  - firewall-cmd: fix visible problems with arg. parsing
  - Use argparse module for parsing command line options and arguments
  - firewall-cmd.1: better clarify where to find ACTIONs
  - firewall-cmd Bash completion
  - firewall-cmd.1: comment --zone=<zone> usage and move some options
  - Use zone's target only in %s_ZONES chains
  - default zone in firewalld.conf was set to public with every restart (#902845)
  - man page cleanup
  - code cleanup


author: Thomas Woerner <twoerner@redhat.com> 0.3.1-1
changelog:
  - Use explicit file lists for make dist
  - New rich rule validation check code
  - New global check_port and check_address functions
  - Allow source white and black listing with the rich rule
  - Fix error handling in case of unsupported family in rich rule
  - Enable ip_forwarding in masquerade and forward-port
  - New functions to read and write simple files using filename and content
  - Add --enable-sysconfig to install Fedora-specific sysconfig config file.
  - Add chains for security table (RHBZ#927015)
  - firewalld.spec: no need to specify --with-systemd-unitdir
  - firewalld.service: remove syslog.target and dbus.target
  - firewalld.service: replace hard-coded paths
  - Move bash-completion to new location.
  - Revert "Added configure for new build env"
  - Revert "Added Makefile.in files"
  - Revert "Added po/Makefile.in.in"
  - Revert "Added po/LINGUAS"
  - Revert "Added aclocal.m4"
  - Amend zone XML Schema


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.2-1
changelog:
  - Fix signal handling for SIGTERM
  - Additional service files (RHBZ#914859)
  - Updated po files
  - s/persistent/permanent/ (Trac Ticket #7)
  - Better behaviour when running without valid DISPLAY (RHBZ#955414)
  - client.handle_exceptions(): do not loop forever
  - Set Zone.defaults in zone_reader (RHBZ#951747)
  - client: do not pass the dbus exception name to handler
  - IO_Object_XMLGenerator: make it work with Python 2.7.4 (RHBZ#951741)
  - firewall-cmd: do not use deprecated BaseException.message
  - client.py: fix handle_exceptions() (RHBZ#951314)
  - firewall-config: check zone/service/icmptype name (RHBZ#947820)
  - Allow 3121/tcp (pacemaker_remote) in cluster-suite service. (RHBZ#885257)
  - firewall-applet: fix default zone hangling in 'shields-up' (RHBZ#947230)
  - FirewallError.get_code(): check for unknown error


author: Thomas Woerner <twoerner@redhat.com> 0.3.3-1
changelog:
  - new service files
  - relicensed logger.py under GPLv2+
  - firewall-config: sometimes we don't want to use client's exception handler
  - When removing Service/IcmpType remove it from zones too (RHBZ#958401)
  - firewall-config: work-around masquerade_check_cb() being called more times
  - Zone(IO): add interfaces/sources to D-Bus signature
  - Added missing UNKNOWN_SOURCE error code
  - fw_zone.check_source: Raise INVALID_FAMILY if family is invalid
  - New changeZoneOfInterface method, marked changeZone as deprecated
  - Fixed firewall-cmd man page entry for --panic-on
  - firewall-applet: Fixed possible problems of unescaped strings used for markup
  - New support to bind zones to source addresses and ranges (D-BUS, cmd, applet
  - Cleanup of unused variables in FirewallD.start
  - New firewall/fw_types.py with LastUpdatedOrderedDict
  - direct.chains, direct.rules: Using LastUpdatedOrderedDict
  - Support splitted zone files
  - New reader and writer for stored direct chains and rules
  - LockdownWhitelist: fix write(), add get_commands/uids/users/contexts()
  - fix service_writer() and icmptype_writer() to put newline at end of file
  - firewall-cmd: fix --list-sources
  - No need to specify whether source address family is IPv4 or IPv6
  - add getZoneOfSource() to D-Bus interface
  - Add tests and bash-completion for the new "source" operations
  - Convert all input args in D-Bus methods
  - setDefaultZone() was calling accessCheck() *after* the action
  - New uniqify() function to remove duplicates from list whilst preserving order
  - Zone.combine() merge also services and ports
  - config/applet: silence DBusException during start when FirewallD is not running (RHBZ#966518)
  - firewall-applet: more fixes to make the address sources family agnostic
  - Better defaults for lockdown white list
  - Use auth_admin_keep for allow_any and allow_inactive also
  - New D-Bus API for lockdown policies
  - Use IPv4, IPv6 and BRIDGE for FirewallD properties
  - Use rich rule action as audit type
  - Prototype of string-only D-Bus interface for rich language
  - Fixed wrongly merged source family check in firewall/core/io/zone.py
  - handle_cmr: report errors, cleanup modules in error case only, mark handling
  - Use audit type from rule action, fixed rule output
  - Fixed lockdown whitelist D-Bus handling method names
  - New rich rule handling in runtime D-Bus interface
  - Added interface, source and rich rule handling (runtime and permanent)
  - Fixed dbus_obj in FirewallClientConfigPolicies, added queryLockdown
  - Write changes in setLockdownWhitelist
  - Fixed typo in policies log message in method calls
  - firewall-cmd: Added rich rule, lockdown and lockdown whitelist handling
  - Don't check access in query/getLockdownWhitelist*()
  - firewall-cmd: Also output masquerade flag in --list-all
  - firewall-cmd: argparse is able to convert argument to desired type itself
  - firewall-cmd_test.sh: tests for permanent interfaces/sources and lockdown whitelist
  - Makefile.am: add missing files
  - firewall-cmd_test.sh: tests for rich rules
  - Added lockdown, source, interface and rich rule docs to firewall-cmd
  - Do not masquerade lo if masquerade is enabled in the default zone (RHBZ#904098)
  - Use <rule> in metavar for firewall-cmd parser


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Remove migrating to a systemd unit file from a SysV initscript
  - Remove pointless "ExclusiveOS" tag


author: Thomas Woerner <twoerner@redhat.com> 0.3.4-1
changelog:
  - several rich rule check enhancements and fixes
  - firewall-cmd: direct options - check ipv4|ipv6|eb (RHBZ#970505)
  - firewall-cmd(1): improve description of direct options (RHBZ#970509)
  - several firewall-applet enhancements and fixes
  - New README
  - several doc and man page fixes
  - Service definitions for PCP daemons (RHBZ#972262)
  - bash-completion: add lockdown and rich language options
  - firewall-cmd: add --permanent --list-all[-zones]
  - firewall-cmd: new -q/--quiet option
  - firewall-cmd: warn when default zone not active (RHBZ#971843)
  - firewall-cmd: check priority in --add-rule (RHBZ#914955)
  - add dhcpv6 (for server) service (RHBZ#917866)
  - firewall-cmd: add --permanent --get-zone-of-interface/source --change-interface/source
  - firewall-cmd: print result (yes/no) of all --query-* commands
  - move permanent-getZoneOf{Interface|Source} from firewall-cmd to server
  - Check Interfaces/sources when updating permanent zone settings.
  - FirewallDConfig: getZoneOfInterface/Source can actually return more zones
  - Fixed toaddr check in forward port to only allow single address, no range
  - firewall-cmd: various output improvements
  - fw_zone: use check_single_address from firewall.functions
  - getZoneOfInterface/Source does not need to throw exception
  - firewall.functions: Use socket.inet_pton in checkIP, fixed checkIP*nMask
  - firewall.core.io.service: Properly check port/proto and destination address
  - Install applet desktop file into /etc/xdg/autostart
  - Fixed option problem with rich rule destinations (RHBZ#979804)
  - Better exception creation in dbus_handle_exceptions() decorator (RHBZ#979790)
  - Updated firewall-offline-cmd
  - Use priority in add, remove, query and list of direct rules (RHBZ#979509)
  - New documentation (man pages are created from docbook sources)
  - firewall/core/io/direct.py: use prirority for rule methods, new get_all_ methods
  - direct: pass priority also to client.py and firewall-cmd
  - applet: New blink and blink-count settings
  - firewall.functions: New function ppid_of_pid
  - applet: Check for gnome3 and fix it, use new settings, new size-changed cb
  - firewall-offline-cmd: Fix use of systemctl in chroot
  - firewall-config: use string.ascii_letters instead of string.letters
  - dbus_to_python(): handle non-ascii chars in dbus.String.
  - Modernize old syntax constructions.
  - dict.keys() in Python 3 returns a "view" instead of list
  - Use gettext.install() to install _() in builtins namespace.
  - Allow non-ascii chars in 'short' and 'description'
  - README: More information for "Working With The Source Repository"
  - Build environment fixes
  - firewalld.spec: Added missing checks for rhel > 6 for pygobject3-base
  - firewall-applet: New setting show-inactive
  - Don't stop on reload when lockdown already enabled (RHBZ#987403)
  - firewall-cmd: --lockdown-on/off did not touch firewalld.conf
  - FirewallApplet.gschema.xml: Dropped unused sender-info setting
  - doc/firewall-applet.xml: Added information about gsettings
  - several debug and log message fixes
  - Add chain for sources so they can be checked before interfaces (RHBZ#903222)
  - Add dhcp and proxy-dhcp services (RHBZ#986947)
  - io/Zone(): don't error on deprecated family attr of source elem
  - Limit length of zone file name (to 12 chars) due to Netfilter internals.
  - It was not possible to overload a zone with defined source(s).
  - DEFAULT_ZONE_TARGET: {chain}_ZONE_{zone} -> {chain}_{zone}
  - New runtime get<X>Settings for services and icmptypes, fixed policies callbacks
  - functions: New functions checkUser, checkUid and checkCommand
  - src/firewall/client: Fixed lockdown-whitelist-updated signal handling
  - firewall-cmd(1): move firewalld.richlanguage(5) reference in --*-rich-rule
  - Rich rule service: Only add modules for accept action
  - firewall/core/rich: Several fixes and enhanced checks
  - Fixed reload of direct rules
  - firewall/client: New functions to set and get the exception handler
  - firewall-config: New and enhanced UI to handle lockdown and rich rules
  - zone's immutable attribute is redundant
  - Do not allow to set settings in config for immutable zones.
  - Ignore deprecated 'immutable' attribute in zone files.
  - Eviscerate 'immutable' completely.
  - FirewallDirect.query_rule(): fix it
  - permanent direct: activate firewall.core.io.direct:Direct reader
  - core/io/*: simplify getting of character data
  - FirewallDirect.set_config(): allow reloading


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.5-1
changelog:
  - Only use one PK action for configuration (RHBZ#994729)
  - firewall-cmd: indicate non-zero exit code with red color
  - rich-rule: enable to have log without prefix & log_level & limit
  - log-level warn/err -> warning/error (RHBZ#1009436)
  - Use policy DROP while reloading, do not reset policy in restart twice
  - Add _direct chains to all table and chain combinations
  - documentation improvements
  - New firewalld.direct(5) man page docbook source
  - tests/firewall-cmd_test.sh: make rich language tests work
  - Rich_Rule._import_from_string(): improve error messages (RHBZ#994150)
  - direct.passthrough wasn't always matching out_signature (RHBZ#967800)
  - firewall-config: twist ICMP Type IP address family logic.
  - firewall-config: port-forwarding/masquerading dialog (RHBZ#993658)
  - firewall-offline-cmd: New --remove-service=<service> option (BZ#969106)
  - firewall-config: Options->Lockdown was not changing permanent.
  - firewall-config: edit line on doubleclick (RHBZ#993572)
  - firewall-config: System Default Zone -> Default Zone (RHBZ#993811)
  - New direct D-Bus interface, persistent direct rule handling, enabled passthough
  - src/firewall-cmd: Fixed help output to use more visual parameters
  - src/firewall-cmd: New usage output, no redirection to man page anymore
  - src/firewall/core/rich.py: Fixed forwad port destinations
  - src/firewall-offline-cmd: Early enable/disable handling now with mask/unmask
  - doc/xml/firewalld.zone.xml: Added more information about masquerade use
  - Prefix to log message is optional (RHBZ#998079)
  - firewall-cmd: fix --permanent --change-interface (RHBZ#997974)
  - Sort zones/interfaces/service/icmptypes on output.
  - wbem-https service (RHBZ#996668)
  - applet&config: add support for KDE NetworkManager connection editor
  - firewall/core/fw_config.py: New method update_lockdown_whitelist
  - Added missing file watcher for lockdown whitelist in config D-Bus interface
  - firewall/core/watcher: New add_watch_file for lockdown-whitelist and direct
  - Make use of IPv6 NAT conditional, based on kernel number (RHBZ#967376)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6-1
changelog:
  - firewalld.richlanguage.xml: correct log levels (RHBZ#993740)
  - firewall-config: Make sure that all zone settings are updated properly on firewalld restart
  - Rich_Limit: Allow long representation for duration (RHBZ#994103
  - firewall-config: Show "Changes applied." after changes (RHBZ#993643)
  - Use own connection dialog to change zones for NM connections
  - Rename service cluster-suite to high-availability (RHBZ#885257)
  - Permanent direct support for firewall-config and firewall-cmd
  - Try to avoid file descriptor leaking (RHBZ#951900)
  - New functions to split and join args properly (honoring quotes)
  - firewall-cmd(1): 2 simple examples
  - Better IPv6 NAT checking.
  - Ship firewalld.direct(5).


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6.2-1
changelog:
  - firewall-offline-cmd: --forward-port 'toaddr' is optional (RHBZ#1014958)
  - firewall-cmd: fix variable name (RHBZ#1015011)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.7-1
changelog:
  - Don't fail on missing ip[6]tables/ebtables table. (RHBZ#967376)
  - bash-completion: --permanent --direct options
  - firewall/core/fw.py: fix checking for iptables & ip6tables (RHBZ#1017087)
  - firewall-cmd: use client's exception_handler instead of catching exceptions ourselves
  - FirewallClientZoneSettings: fix {add|remove|query}RichRule()
  - Extend amanda-client service with 10080/tcp (RHBZ#1016867)
  - Simplify Rich_Rule()_lexer() by using functions.splitArgs()
  - Fix encoding problems in exception handling (RHBZ#1015941)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.8-1
changelog:
  - fix memory leaks
  - New option --debug-gc
  - Python3 compatibility
  - Better non-ascii support
  - several firewall-config & firewall-applet fixes
  - New --remove-rules commands for firewall-cmd and removeRules methods for D-Bus
  - Fixed FirewallDirect.get_rules to return proper list
  - Fixed LastUpdatedOrderedDict.keys()
  - Enable rich rule usage in trusted zone (RHBZ#994144)
  - New error codes: INVALID_CONTEXT, INVALID_COMMAND, INVALID_USER and INVALID_UID


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9-1
changelog:
  - translation updates
  - New IPv6_rpfilter setting to enable source address validation (RHBZ#847707)
  - Do not mix original and customized zones in case of target changes,
    apply only used zones
  - firewall-cmd: fix --*_lockdown_whitelist_uid to work with uid 0
  - Don't show main window maximized. (RHBZ#1046811)
  - Use rmmod instead of 'modprobe -r' (RHBZ#1031102)
  - Deprecate 'enabled' attribute of 'masquerade' element
  - firewall-config: new zone was added twice to the list
  - firewalld.dbus(5)
  - Enable python shebang fix again
  - firewall/client: handle_exceptions: Use loop in decorator
  - firewall-offline-cmd: Do not mask firewalld service with disabled option
  - firewall-config: richRuleDialogActionRejectType Entry -> ComboBox
  - Rich_Rule: fix parsing of reject element (RHBZ#1027373)
  - Show combined zones in permanent configuration (RHBZ#1002016)
  - firewall-cmd(1): document exit code 2 and colored output (RHBZ#1028507)
  - firewall-config: fix RHBZ#1028853


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9.3-1
changelog:
  - Fixed persistent port forwarding (RHBZ#1056154)
  - Stop default zone rules being applied to all zones (RHBZ#1057875)
  - Enforce trust, block and drop zones in the filter table only (RHBZ#1055190)
  - Allow RAs prior to applying IPv6_rpfilter (RHBZ#1058505)
  - Fix writing of rule.audit in zone_writer()


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.10-1
changelog:
  - new services: freeipa-*, puppermaster, amanda-k5, synergy,
                  xmpp-*, tor, privoxy, sane
  - do not use at_console in D-Bus policies (RHBZ#1094745)
  - apply all rich rules for non-default targets
  - AppData file (RHBZ#1094754)
  - separate Polkit actions for desktop & server (RHBZ#1091068)
  - sanitize missing ip6t_rpfilter (RHBZ#1074427)
  - firewall/core/io/*: few improvements (RHBZ#1065738)
  - no load failed error for absent direct.xml file
  - new DBUS_INTERFACE.getZoneSettings to get all run-time zone settings
  - fixed creation and deletion of zones, services and icmptypes over D-Bus signals
  - FirewallClientZoneSettings: Set proper default target
  - if Python2 then encode strings from sax parser (RHBZ#1059104, RHBZ#1058853)
  - firewall-cmd:
    - don't colour output of query commands (RHBZ#1097841)
    - use "default" instead of {chain}_{zone} (RHBZ#1075675)
    - New --get-target and --set-target
    - Create and remove permanent zones, services and icmptypes
  - firewall-config:
    - Adding services and icmptypes resulted in duplicates in UI
    - Use left button menu of -applet in Option menu
  - firewall-offline-cmd: same functionality as 'firewall-cmd --permanent'
  - firewall-applet: ZoneConnectionEditor was missing the Default Zone entry
  - bash-completion: getting zones/services/icmps is different with/without --permanent
  - firewalld.zone(5): removed superfluous slash (RHBZ#1091575)
  - updated translations


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-3
changelog:
  - New support for Fedora per-product configuration settings for Fedora.next
    https://fedoraproject.org/wiki/Per-Product_Configuration_Packaging_Draft
  - Added Fedora server zone (RHBZ#1110711)
  - Added Fedora workstation zone(RHBZ#1113775)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-4
changelog:
  - renamed fedora specific zones to FedoraServer and FedoraWorkstation for 
    zone name limitations (length and allowed chars)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.11-1
changelog:
  - firewalld:
    - improve error messages
    - check built-in chains in direct chain handling functions (RHBZ#1120619)
    - dbus_to_python() check whether input is of expected type (RHBZ#1122018)
    - handle negative timeout values (RHBZ#1124476)
    - warn when Command/Uid/Use/Context already in lockdown whitelist (RHBZ#1126405)
    - make --lockdown-{on,off} work again (RHBZ#1111573)
  - firewall-cmd:
    - --timeout now accepts time units (RHBZ#994044)
  - firewall-config:
    - show active (not default) zones in bold (RHBZ#993655)
  - configuration:
    - remove ipp-client service from all zones (RHBZ#1105639).
    - fallbacks for missing values in firewalld.conf
    - create missing dirs under /etc if needed
    - add -Es to python command in lockdown-whitelist.xml (RHBZ#1099065)
  - docs:
    - 'direct' methods concern only chains/rules added via 'direct' (RHBZ#1120619)
    - --remove-[interface/source] don't need a zone to be specified (RHBZ#1125851)
    - various fixes in firewalld.zone(5), firewalld.dbus(5), firewalld.direct(5)
  - others:
    - rpm macros for easier packaging of e.g. services


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.12-1
changelog:
  - firewalld:
    - new runtimeToPermanent and tracked passsthrough support
    - make permanent D-Bus interfaces more fine grained like the runtime versions (RHBZ#1127706)
    - richLanguage: allow using destination with forward-port
    - Rich_Rule.check(): action can't be used with icmp-block/forward-port/masquerade
    - fixed Python specific D-Bus exception (RHBZ#1132441)
  - firewall-cmd:
    - new --runtime-to-permanent to create permanent from runtime configuration
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - --direct: make fail messages consistent (RHBZ#1141835)
  - firewall-config:
    - richRuleDialog - OK button tooltip indicates problem
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - update "Change Zones of Connections" menu on default zone change (RHBZ#11120212)
    - fixed rename of zones, services and icmptypes to not create new entry (RBHZ#1131064)
  - configuration:
    - new service for Squid HTTP proxy server
    - new service for Kerberos admin server
    - new services for syslog and syslog-tls
    - new services for SNMP and SNMP traps
    - add Keywords to .desktop to improve software searchability
  - docs:
    - updated translations
    - firewalld.richlanguage: improvements suggested by Rufe Glick
    - firewalld.dbus: various improvements
    - firewalld.zone: better description of Limit tag
    - mention new homepage everywhere


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.13-1
changelog:
  - firewalld:
    - ipXtables: use -w or -w2 if supported (RHBZ#1161745, RHBZ#1151067)
    - DROP INVALID packets (RHBZ#1169837)
    - don't use ipv6header for protocol matching. (RHBZ#1065565)
    - removeAllPassthroughs(): remove passthroughs in reverse order (RHBZ#1167100)
    - fix config.service.removeDestination() (RHBZ#1164584)
  - firewall-config:
    - portProtoDialog: other protocol excludes port number/range
    - better fix for updating zoneStore also in update_active_zones()
    - fix typo in menu
  - configuration:
    - new services: tinc, vdsm, mosh, iscsi-target, rsyncd
    - ship and install XML Schema files. (#8)
  - man pages:
    - firewalld.dbus, firewalld.direct, firewalld, firewall-cmd
  - spec file:
    - filesystem subpackage
    - make dirs&files in /usr/lib/ world-readable (RHBZ#915988)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.13-2
changelog:
  - enable python2 and python3 bindings for fedora >= 20 and rhel >= 7
  - use python3 bindings on fedora >= 22 and rhel >= 8 for firewalld,
    firewall-config and firewall-applet


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14-1
changelog:
  - renamed python2-firewall to python-firewall
  - fixed requirements for GUI parts with Python3
  - dropped upstream merged python3 patch
  - firewalld:
    - print real zone names in error messages
    - iptables 1.4.21 does not accept limits of 1/day, minimum is 2/day now
    - rate limit fix for rich rules
    - fix readdition of removed permanent direct settings
    - adaption of the polkit domains to use PK_ACTION_DIRECT_INFO
    - fixed two minor Python3 issues in firewall.core.io.direct
    - fixed use of fallback configuration values
    - fixed use without firewalld.conf
    - firewalld main restructureization
    - IPv6_rpfilter now also available as a property on D-Bus in the config interface
    - fixed wait option use for ipXtables
    - added --concurrent support for ebtables
    - richLanguage: allow masquerading with destination
    - richLanguage: limit masquerading forward rule to new connections
    - ipXtables: No dns lookups in available_tables and _detect_wait_option
    - full ebtables support: start, stop, reload, panic mode, direct chains and rules
    - fix for reload with direct rules
    - fix or flaws found by landscape.io
    - pid file handling fixes in case of pid file removal
    - fix for client issue in case of a dbus NoReply error
  - configuration
    - new services: dropbox-lansync, ptp
    - new icmptypes: timestamp-request, timestamp-reply
  - man pages:
    - firewalld.zones(5): fixed typos
    - firewalld.conf(5): Fixed wrong reference to firewalld.lockdown-whitelist page
  - firewall-applet:
    - new version using Qt4 fixing several issues with the Gtk version
  - spec file:
    - enabled Python3 support: new backends python-firewall and python3-firewall
    - some cleanup
  - git:
    - migrated to github
  - translations:
    - migrated to zanata
  - build environment:
    - no need for autoconf-2.69, 2.68 is sufficient


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.1-1
changelog:
  - firewall-applet
    - do not use isSystemTrayAvailable check to fix KDE5 startup
    - dropped gtk applet remain: org.fedoraproject.FirewallApplet.gschema.xml


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-1
changelog:
  - reunification of the firewalld spec files for all Fedora releases
  - fix dependencies for -applet and -config: use_python3 is the proper switch
    not with_python3 (RHBZ#1232493)
  - firewalld.spec:
    - fixed requirements for -applet and -config
  - man pages:
    - adapted firewall-applet man page to new version
  - firewall-applet:
    - Only honour active connections for zone changes
    - Change QSettings path and file names
  - firewall-config:
    - Only honour active connections for zone changes in the “Change Zones of Connections” menu
  - Translations:
    - updated translations
    - marked translations for “Connections” for review


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-3
changelog:
  - Require python3-gobject-base for fedora >= 23 and rhel >= 8 (RHBZ#1242076)
  - Fix rhel defines: No python3 for rhel-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Version 0.4.0
    - Speed ups
    - ipset support
    - MAC address support
    - Log of denied packets
    - Mark action in rich rules
    - Enhanced alteration of config files with command line tools
    - Use of zone chains in direct interface
    - firewall-applet enhancement
    - New services: ceph-mon, ceph, docker-registry, imap, pop3, pulseaudio,
      smtps, snmptrap, snmp, syslog-tls and syslog
    - Several bug fixes
    - Code optimizations


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1-1
changelog:
  - Enhancements of ipset handling
    - No cleanup of ipsets using timeouts while reloading
    - Only destroy conflicting ipsets
    - Only use ipset types supported by the system
    - Add and remove several ipset entries in one call using a file
  - Reduce time frame where builtin chains are on policy DROP while reloading
  - Include descriptions in --info-X calls
  - Command line interface support to get and alter descriptions of zones,
    services, ipsets and icmptypes with permanent option
  - Properly watch changes in combined zones
  - Fix logging in rich rule forward rules
  - Transformed direct.passthrough errors into warnings
  - Rework of import structures
  - Reduced calls to get ids for port and protocol names (RHBZ#1305434)
  - Build and installation fixes by Markos Chandras
  - Provide D-Bus properties in introspection data
  - Fix for flaws found by landscape.io
  - Fix for repeated SUGHUP
  - New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  - configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  - Code cleanups
  - Bug fixes


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1.2-1
changelog:
  - Fixed translations with python3
  - Fixed exception for failed NM import, new doc string
  - Make ipsets visible per default in firewall-config
  - Install new fw_nm module
  - Do not fail if log file could not be opened
  - Fixed broken fr translation


author: Thomas Woerner <twoerner@redhat.com> - 0.4.2-1
changelog:
  - New module to search for and change ifcfg files for interfaces not under
    control of NM
  - firewall_config: Enhanced messages in status bar
  - firewall-config: New message window as overlay if not connected
  - firewall-config: Fix sentivity of option, view menus and main paned if not
    connected
  - firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls, some cleanup
  - firewall-[offline]cmd: Show target in zone information
  - D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  - Fixed log-denied rules for icmp-blocks
  - Keep sorting of interfaces, services, icmp-blocks and other settings in zones
  - Fixed runtime-to-permanent not to save interfaces under control of NM
  - New icmp-block-inversion flag in the zones
  - ICMP type filtering in the zones
  - New services: sip, sips, managesieve
  - rich rules: Allow destination action (RHBZ#1163428)
  - firewall-offline-cmd: New option -q/--quiet
  - firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  - firewall-[offline-]cmd: Fix option for setting the destination address
  - firewall-config: Fixed resizing behaviour
  - New transaction model for speed ups in start, restart, stop and other actions
  - firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  - Fixed memory leak in dbus_introspection_add_properties
  - Landscape.io fixes, pylint calm downs
  - New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  - ebtables-restore: No support for COMMIT command
  - Source port support in services, zones and rich rules
  - firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  - firewall-config: New active bindings side bar for simple binding changes
  - Reworked NetworkManager module
  - Proper default zone handling for NM connections
  - Try to set zone binding with NM if interface is under control of NM
  - Code cleanup and bug fixes
  - Include test suite in the release and install in /usr/share/firewalld/tests
  - New Travis-CI configuration file
  - Fixed more broken frensh translations
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.1-1
changelog:
  - New firewalld release 0.4.3.1
  - firewall.command: Fix python3 DBusException message not interable error
  - src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  - firewallctl: Do not trace back on list command without further arguments
  - firewallctl (man1): Added remaining sections zone, service, ..
  - firewallctl: Added runtime-to-permanent, interface and source parser,
    IndividualCalls setting
  - firewall.server.config: Allow to set IndividualCalls property in config
    interface
  - Fix missing icmp rules for some zones
  - runProg: Fix issue with running programs
  - firewall-offline-cmd: Fix issues with missing system-config-firewall
  - firewall.core.ipXtables: Split up source and dest addresses for transaction
  - firewall.server.config: Log error in case of loading malformed files in
    watcher
  - Install and package the firewallctl man page
  - New firewallctl utility (RHBZ#1147959)
  - doc.xml.seealso: Show firewalld.dbus in See Also sections
  - firewall.core.fw_config: Create backup on zone, service, ipset and icmptype
    removal (RHBZ#1339251)
  - {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  - firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  - firewall-cmd: Dropped duplicate setType call in --new-ipset
  - radius service: Support also tcp ports (RBZ#1219717)
  - xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset
    sources
  - config.xmlschema.service.xsd: Fix service destination conflicts
    (RHBZ#1296573)
  - firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  - firewall.command: Only print summary and description in print_X_info with
    verbose
  - firewall.command: print_msg should be able to print empty lines
  - firewall-config: No processing of runtime passthroughs signals in permanent
  - Landspace.io fixes and pylint calm downs
  - firewall.core.io.zone: Add zone_reader and zone_writer to __all__, pylint
    fixes
  - firewall-config: Fixed titles of command and context dialogs, also entry
    lenths
  - firewall-config: pylint calm downs
  - firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  - firewall-config: Use self.active_zoens in conf_zone_added_cb
  - firewall.command: New parse_port, extended parse methods with more checks
  - firewall.command: Fixed parse_port to use the separator in the split call
  - firewall.command: New [de]activate_exception_handler, raise error in parse_X
  - services ha: Allow corosync-qnetd port
  - firewall-applet: Support for kde5-nm-connection-editor
  - tests/firewall-offline-cmd_test.sh: New tests for service and icmptype
    modifications
  - firewall-offline-cmd: Use FirewallCommand for simplification and sequence
    options
  - tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  - firewall-cmd: Fixed set, remove and query destination options for services
  - firewall.core.io.service: Source ports have not been checked in _check_config
  - firewall.core.fw_zone: Method check_source_port is not used, removed
  - firewall.core.base: Added default to ZONE_TARGETS
  - firewall.client: Allow to remove ipv:address pair for service destinations
  - tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  - firewall-cmd: Landscape.io fixes, pylint calm downs
  - firewall-cmd: Use FirewallCommand for simplification and sequence options
  - firewall.command: New FirewallCommand for command line client simplification
  - New services: kshell, rsh, ganglia-master, ganglia-client
  - firewalld: Cleanup of unused imports, do not translate some deamon messages
  - firewalld: With fd close interation in runProg, it is not needed here anymore
  - firewall.core.prog: Add fd close iteration to runProg
  - firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface
    function
  - firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  - firewall-config: New add/remove ipset entries from file, remove all entries
  - firewall-applet: Fix tooltip after applet start with connection to firewalld
  - firewall-config: Select new zone, service or icmptype if the view was empty
  - firewalld.spec: Added build requires for iptables, ebtables and ipset
  - Adding nf_conntrack_sip module to the service SIP
  - firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  - Drop unneeded python shebangs
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - New service RH-Satellite-6
  - Fixed selinux-policy conflict version for RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.3-1
changelog:
  - Fix CVE-2016-5410: Firewall configuration can be modified by any logged in
    user
  - firewall/server/firewalld: Make getXSettings and getLogDenied CONFIG_INFO
  - Update AppData configuration file.
  - tests/firewalld_rich.py: Use new import structure and FirewallClient classes
  - tests/firewalld_direct.py: Use new import structure
  - tests: firewalld_direct: Fix assert to check for True instead of False
  - tests: firewalld_config: Fix expected value when querying the zone target
  - tests: firewalld_config: Use real nf_conntrack modules
  - firewalld.spec: Added comment about make call for %build
  - firewall-config: Use also width_request and height_request with default size
  - Updated firewall-config screenshot
  - firewall-cmd: Fixed typo in help output (RHBZ#1367171)
  - test-suite: Ignore stderr to get default zone also for missing firewalld.conf
  - firewall.core.logger: Warnings should be printed to stderr per default
  - firewall.core.fw_nm: Ignore NetworkManager if NM.Client connect fails
  - firewall-cmd, firewallctl: Gracefully fail if SystemBus can not be aquired
  - firewall.client: Generate new DBUS_ERROR if SystemBus can not be aquired
  - test-suite: Do not fail on ALREADY_ENABLED --add-destination tests
  - firewall.command: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings
  - doc/xml/firewalld.dbus.xml: Removed undefined reference
  - doc/xml/transform-html.xsl.in: Fixed references in the document
  - doc/xml/firewalld.{dbus,zone}.xml: Embed programlisting in para
  - doc/xml/transform-html.xsl.in: Enhanced html formatting closer to the man page
  - firewall: core: fw_nm: Instantiate the NM client only once
  - firewall/core/io/*.py: Do not traceback on a general sax parsing issue
  - firewall-offline-cmd: Fix --{add,remove}-entries-from-file
  - firewall-cmd: Add missing action to fix --{add,remove}-entries-from-file
  - firewall.core.prog: Do not output stderr, but return it in the error case
  - firewall.core.io.ifcfg.py: Fix ifcfg file reader and writer (RHBZ#1362171)
  - config/firewall.service.in: use KillMode=mixed
  - config/firewalld.service.in: use network-pre.target
  - firewall-config: Add missing gettext.textdomain call to fix translations
  - Add UDP to transmission-client.xml service
  - tests/firewall-[offline-]cmd_test.sh: Hide errors and warnings
  - firewall.client: Fix ALREADY_ENABLED errors in icmptype destination calls
  - firewall.client: Fix NOT_ENABLED errors in icmptype destination calls
  - firewall.client: Use {ALREADY,NOT}_ENABLED errors in icmptype destination
    calls
  - firewall.command: Add the removed FirewallError handling to the action
    (a17ce50)
  - firewall.command: Do not use query methods for sequences and also single
    options
  - Add missing information about MAC and ipset sources to man pages and help
    output
  - firewalld.spec: Add BuildRequires for libxslt to enable rebuild of man pages
  - firewall[-offline]-cmd, firewallctl, firewall.command: Use sys.{stdout,stderr}
  - firewallctl: Fix traceback if not connected to firewalld
  - firewall-config: Initialize value in on_richRuleDialogElementChooser_clicked
  - firewall.command: Convert errors to string for Python3
  - firewall.command: Get proper firewall error code from D-BusExceptions
  - firewall-cmd: Fixed traceback without args
  - Add missing service files to Makefile.am
  - shell-completion: Add shell completion support for
    --{get,set}--{description,short}
  - Updated RHEL-7 selinux-policy and squid conflict


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4-1
changelog:
  - Fix dist-check
  - src/Makefile.am: Install new helper files
  - config/Makefile.am: Install helpers
  - Merged translations
  - Updated translations from zanata
  - firewalld.spec: Adapt requires for PyQt5
  - firewall-applet: Fix fromUTF8 for python2 PyQt5 usage
  - firewall-applet: Use PyQt5
  - firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers D-Bus property
  - shell-completion/bash/firewall-cmd: Updates for helpers and also some fixes
  - src/tests/firewall-[offline-]cmd_test.sh: New helper tests, adapted module tests for services
  - doc/xml/seealso.xml: Add firewalld.helper(5) man page
  - doc/xml/seealso.xml: Add firewalld.ipset(5) man page
  - Fixed typo in firewalld.ipset(5) man page
  - Updated firewalld.dbus(5) man page
  - New firewalld.helper(5) man page
  - doc/xml/firewall-offline-cmd.xml: Updated firewall-offline-cmd man page
  - doc/xml/firewall-cmd.xml: Updated firewall-cmd man page
  - firewall-offline-cmd: New support for helpers
  - firewall-cmd: New support for helpers
  - firewall.command: New check_helper_family, check_module and print_helper_info methods
  - firewall.core.fw_test: Add helpers also to offline backend
  - firewall.server.config: New AutomaticHelpers property (rw)
  - firewall.server.config: Fix an dict size changed error for firewall.conf file changes
  - firewall.server.config: Make LogDenied property readwrite to be consistent
  - Some renames of nf_conntrack_helper* functions and structures, helpers is a dict
  - firewall.core.fw: Properly check helper setting in set_automatic_helpers
  - firewall.errors: Add missing BUILTIN_HELPER error code
  - No extra interface for helpers needed in runtime, dropped DBUS_INTERFACE_HELPER
  - firewall.server.firewalld: Drop unused queryHelper D-Bus method
  - New helpers Q.931 and RAS from nf_conntrack_h323
  - firewall.core.io.helper: Allow dots in helper names, remove underscore
  - firewall.core.io.firewalld_conf: Fixed typo in FALLBACK_AUTOMATIC_HELPERS
  - firewall-[offline-]cmd: Use sys.excepthook to force exception_handler usage always
  - firewall.core.fw_config: new_X methods should also check builtins
  - firewall.client: Set helper family to "" if None
  - firewall.client: Add missing module string to FirewallClientHelperSettings.settings
  - config/firewalld.conf: Add possible values description for AutomaticHelpers
  - helpers/amanda.xml: Fix typo in helper module
  - firewall-config: Added support for helper module setting
  - firewall.client: Added support for helper module setting
  - firewall.server.config_helper: Added support for helper module setting
  - firewall.core.io.service, firewall.server.config_service: Only replace underscore by dash if module start with nf_conntrack_
  - firewall.core.fw_zone: Use helper module instead of a generated name from helper name
  - helpers: Added kernel module
  - firewall.core.io.helper: Add module to helper
  - firewall-cmd: Removed duplicate --get-ipset-types from help output
  - firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  - firewall.core.ipXtables: Add PREROUTING default rules for zones in raw table
  - firewall-config: New support to handle helpers, new dialogs, new helper tab, ..
  - config/org.fedoraproject.FirewallConfig.gschema.xml.in: New show-helpers setting
  - firewall.client: New helper management for runtime and permanent configuration
  - firewall.server.firewalld: New runtime helper management, new nf_conntrack_helper property
  - firewall.server.config_service: Fix module name handling (no nf_conntrack_ prefix needed)
  - firewall.server.config: New permanent D-Bus helper management
  - New firewall.server.config_helper to provide the permanent D-Bus interface for helpers
  - firewall.core.fw_zone: Use helpers fw.nf_conntrack_helper for services using helpers
  - firewall.core.fw: New helper management, new _automatic_helpers and nf_conntrack_helper settings
  - firewall.core.fw_config: Add support for permanent helper handling
  - firewall.core.io.service: The module does not need to start with nf_conntrack_ anymore
  - firewall.functions: New functions to get and set nf_conntrack_helper kernel setting
  - firewall.core.io.firewalld_conf: New support for AutomaticHelpers setting
  - firewall.config.dbus: New D-Bus definitions for helpers, new DBUS_INTERFACE_REVISION 12
  - New firewall.core.fw_helper providing FirewallHelper backend
  - New firewall.core.helper with HELPER_MAXNAMELEN definition
  - config/firewalld.conf: New AutomaticHelpers setting with description
  - firewall.config.__init__.py.in: New helpers variables
  - firewalld.spec: Add new helpers directory
  - config/Makefile.am: Install new helpers
  - New helper configuration files for amanda, ftp, irc, netbios-ns, pptp, sane, sip, snmp and tftp
  - firewall.core.io.helper: New IO handler for netfilter helpers
  - firewall.errors: New INVALID_HELPER error code
  - firewall.core.io.ifcfg: Use .bak for save files
  - firewall-config: Set internal log_denied setting after changing
  - firewall.server.config: Copy props before removing items
  - doc/xml/firewalld.ipset: Replaced icmptype name remains with ipset
  - firewall.core.fw_zone: Fix LOG rule placement for LogDenied
  - firewall.command: Use "source-ports" in print_zone_info
  - firewall.core.logger: Use syslog.openlog() and syslog.closelog()
  - firewall-[offline-]cmd man pages: Document --path-{zone,icmptype,ipset,service}
  - firewall-cmd: Enable --path-{zone,icmptype,service} options again
  - firewall.core.{ipXtables,ebtables}: Copy rule before extracting items in set_rules
  - firewall.core.fw: Do not abort transaction on failed ipv6_rpfilter rules
  - config/Makefile.am: Added cfengine, condor-collector and smtp-submission services
  - Makefile.am: New dist-check used in the archive target
  - src/Makefile.am: Reordered nobase_dist_python_DATA to be sorted
  - config/Makefile.am: New CONFIG_FILES variable to contain the config files
  - Merge pull request #150 from hspaans/master
  - Merge pull request #146 from canvon/bugfix/spelling
  - Merge pull request #145 from jcpunk/condor
  - Command line tools man pages: New section about sequence options and exit codes
  - Creating service file for SMTP-Submission.
  - Creating service file for CFEngine.
  - Fix typo in documentation: iptables mangle table
  - Only use sort on lists of main items, but not for item properties
  - firewall.core.io.io_object: import_config should not change ordering of lists
  - firewall.core.fw_transaction: Load helper modules in FirewallZoneTransaction
  - firewall.command: Fail with NOT_AUTHORIZED if authorization fails (RHBZ#1368549)
  - firewall.command: Fix sequence exit code with at least one succeeded item
  - Add condor collector service
  - firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  - firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED sequences


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.1-1
changelog:
  - firewall-config: Use proper source check in sourceDialog (fixes issue#162)
  - firewallctl: New support for helpers
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-1
changelog:
  - New firewalld-selinux sub package delivering the SELinux policy module for
    firewalld (RHBZ#1396765) (RHBZ#1394625) (RHBZ#1394578) (RHBZ#1394573)
    (RHBZ#1394569)
  - New firewalld release 0.4.4.2:
    - firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
    - firewall.core.fw_nm: create NMClient lazily
    - Do not use hard-coded path for modinfo, use autofoo to detect it
    - firewall.core.io.ifcfg: Dropped invalid option warning with bad format
      string
    - firewall.core.io.ifcfg: Properly handle quoted ifcfg values
    - firewall.core.fw_zone: Do not reset ZONE with ifdown
    - Updated translations from zanata
    - firewall-config: Extra grid at bottom to visualize firewalld settings


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-2
changelog:
  - Dropping firewalld-selinux package again as the required fix made it into
    selinux-policy packages for F-23+, updated selinux-policy version conflicts


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.3-1
changelog:
  - Rebase to firewalld-0.4.4.3
    http://www.firewalld.org/2017/02/firewalld-0-4-4-3-release
  - Speed up of large file loading
  - Support for more ipset types
  - Speed up of adding or removing entries for ipsets from files
  - Support icmp-type usage in rich rules
  - Support for more icmp types
  - Support for h323 conntrack helper
  - New services
  - Code cleanup and several other bug fixes
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-1
changelog:
  - Rebase to firewalld-0.4.4.4
    http://www.firewalld.org/2017/03/firewalld-0-4-4-4-release
  - Drop references to fedorahosted.org from spec file and Makefile.am, use
    archive from github
  - Fix inconsistent ordering of rules in INPUT_ZONE_SOURCE (issue#166)
  - Fix ipset overloading from /etc/firewalld/ipsets
  - Fix permanent rich rules using icmp-type elements (RHBZ#1434594)
  - firewall-config: Deactivate edit, remove, .. buttons if there are no items
  - Check if ICMP types are supported by kernel before trying to use them
  - firewall-config: Show invalid ipset type in the ipset configuration dialog
    in a special label


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.5-1
changelog:
  - Rebase to firewalld-0.4.4.5
    http://www.firewalld.org/2017/06/firewalld-0-4-4-5-release
    - Fix build from spec
    - Fix –remove-service-from-zone option (RHBZ#1438127)
    - Support sctp and dccp in ports, source-ports, forward-ports, helpers and
      rich rules (RHBZ#1429808)
    - firewall-cmd: Fix –{set,get}-{short,description} for zone (RHBZ#1445238)
    - firewall.core.ipXtables: Use new wait option for restore commands if
      available
    - New services for oVirt:
      ctdb, ovirt-imageio, ovirt-storageconsole, ovirt-vmconsole and nrpe
    - Rename extension for policy choices (server and desktop) to .policy.choice
      (RHBZ#1449754)
    - D-Bus interfaces: Fix GetAll for interfaces without properties
      (RHBZ#1452017)
    - Load NAT helpers with conntrack helpers (RHBZ#1452681)
    - Translation updates
  - Additional upstream patches:
    - Rich-rule source validation (d69b7cb)
    - IPv6 ICMP type only rich-rule fix (cf50bd0)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.4.5-4
changelog:
  - Python 2 binary package renamed to python2-firewall
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Eric Garver <egarver@redhat.com> - 0.6.1-4
changelog:
  - backports for new failed state if startup fails
  - backports to use explicit RETURN on user defined ebtables chains
  - backports to fix nftables AUDIT log support


author: Eric Garver <egarver@redhat.com> - 0.6.1-5
changelog:
  - python3-firewalld can get by with python3-gobject-base
  - firewall-config can get by with python3-qt5-base


author: Eric Garver <egarver@redhat.com> - 0.6.3-4
changelog:
  - backport recent stable fixes
  - backport fix for lost NM interfaces during reload
  - backport rich rule priorities
  - backport fix for set entries not applied
  - update translations


author: Eric Garver <egarver@redhat.com> - 0.7.0-3
changelog:
  - backport patch to show service includes in service output
  - backport patches to fix dbus API break


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.7-1
changelog:
  - Update to 3.6.7 (rhbz#1627739)
  - Re-enable test_gdb (rhbz#1639536)
  - Re-enable test_faulthandler (rhbz#1640147)


author: Tomas Orsava <torsava@redhat.com> - 3.6.7-2
changelog:
  - Switch to requiring platform-python-pip/setuptools instead of the python3-
    versions
  - Resolves: rhbz#1638836


author: Patrick Uiterwijk (LOCAL) <puiterwijk@redhat.com> - 0.2-0.3.5e1faadgit
changelog:
  - Fixed license tag
  - Updated to new FSF address upstream
  - Removing libgsystem before build
  - Now claiming specific manpages
  - Made the config files noreplace
  - Removed the test assets
  - Put the web assets in a subpackage


author: Stef Walter <stefw@redhat.com> 0.18-1
changelog:
  - Update to 0.18 release
  - Add glib-networking build requirement
  - Let selinux-policy-targetted distribute selinux policy


author: Stef Walter <stefw@redhat.com> - 0.26-1
changelog:
  - Update to 0.26 release
  - Can see disk usage on storage page rhbz#1142459
  - Better order for lists of block devices rhbz#1142443
  - Setting container memory limit fixed rhbz#1142362
  - Can create storage volume of maximum capacity rhbz#1142259
  - Fix RAID device Bitmap enable/disable error rhbz#1142248
  - Docker page connects to right machine rhbz#1142229
  - Clear the format dialog label correctly rhbz#1142228
  - No 'Drop Privileges' item in menu for root rhbz#1142197
  - Don't flash 'Server has closed Connection on logout rhbz#1142175
  - Non-root users can manipulate user accounts rhbz#1142154
  - Fix strange error message when editing user accounts rhbz#1142154


author: Stef Walter <stefw@redhat.com> - 0.27-1
changelog:
  - Update to 0.27 release
  - Don't create cockpit-*-admin groups rhbz#1145135
  - Fix user management for non-root users rhbz#1140562
  - Fix 'out of memory' error during ssh auth rhbz#1142282


author: Peter <petervo@redhat.com> - 0.49-1
changelog:
  - Update to 0.49 release.
  - cockpitd was renamed to cockpit-wrapper the cockpit-daemon
    package was removed and is now installed with the
    cockpit-bridge package.


author: Peter <petervo@redhat.com> - 0.63-1
changelog:
  - Update to 0.63 release
  - Remove cockpit-docker for armv7hl while docker
    packages are being fixed


author: Stef Walter <stefw@redhat.com> - 0.73-1
changelog:
  - * Kubernetes UI can connect to non-local API server
  - * Automate Web Service container build on Docker Hub
  - * Add validation options to TLS client connections
  - * PAM pam_ssh_add.so module for loading SSH keys based on login password
  - * Build, testing and other fixes


author: Stef Walter <stefw@redhat.com> - 0.74-1
changelog:
  - * Display an intelligent message when password auth is not possible
  - * Correctly start terminal in home directory
  - * NetworkManager code is in a separate package
  - * PCP is an optional build dependency
  - * Lots of bugs, build and testing fixes


author: petervo <petervo@redhat.com> - 0.75-1
changelog:
  - New design for kubernetes listing pages
  - Namespace filter for kubernetes
  - Pretty http error pages
  - Lots of bugs, build and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.76-1
changelog:
  - * Fix displaying of network bonds
  - * Better Kubernetes filter bar, shell access
  - * Show some Openshift related objects
  - * Use patternfly v2.2


author: Stef Walter <stefw@redhat.com> - 0.77-1
changelog:
  - * Work better with multipath storage
  - * Deletion of kubernetes objects
  - * Cleaner URLs in the bookmark bar
  - * Show a warning when adding too many machines
  - * Make authentication work when embedding Cockpit
  - * Complete componentizing Cockpit


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 0.77-1.1
changelog:
  - disable FMA support to get it pass all tests on secondary architectures
  - removed duplicated "global rel 1"


author: Stef Walter <stefw@redhat.com> - 0.78-1
changelog:
  - * Fix extreme CPU usage issue in 0.77 release
  - * Fix compatibility with older releases
  - * Offer to activate multipathd for multipath disks
  - * Guide now contains insight into feature internals
  - * Lots of other minor bug fixes


author: Stef Walter <stefw@redhat.com> - 0.79-1
changelog:
  - * Vagrant file for Cockpit development
  - * Use libvirt for testing
  - * Display only last lines of Kubernetes container logs


author: Stef Walter <stefw@redhat.com> - 0.80-1
changelog:
  - * UI for loading, viewing, changing Private SSH Keys
  - * Always start an ssh-agent in the cockpit login session
  - * New listing panel designs
  - * Lots of testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.81-1
changelog:
  - * Allow configuring NTP servers when used with timesyncd
  - * Fix regression in network configuration switches
  - * Make the various graphs look better
  - * Openshift Routes and Deployment Configs can be removed
  - * Run integration tests using TAP "test anything protocol"
  - * Lots of other bug fixes and cleanup


author: Stef Walter <stefw@redhat.com> - 0.82-1
changelog:
  - * Support certificate chains properly in cockpit-ws
  - * Rename the default self-signed certificate
  - * Implement distributed integration testing


author: Stef Walter <stefw@redhat.com> - 0.83-1
changelog:
  - * Fix NTP server configuration bugs
  - * Kubernetes dashboard topology icons don't leave the view
  - * Kubernetes dashboard uses shared container-terminal component
  - * Fix race when adding machine to Cockpit dashboard
  - * Updated documentation for running new distributed tests
  - * Lots of other bug and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.84-1
changelog:
  - * Add a cockpit manual page
  - * Set correct SELinux context for certificates
  - * Remove custom SELinux policy
  - * Testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.86-1
changelog:
  - * SOS report UI page
  - * Simpler way for contributors to build cockpit RPMs
  - * Infrastructure for implementing downloads


author: Stef Walter <stefw@redhat.com> - 0.87-1
changelog:
  - * Fix login on Windows, don't prompt for additional auth
  - * Use the machine host name in the default self-signed certificate
  - * Cockpit release tarballs are now distributed in tar-ustar format
  - * Allow overriding package manifests
  - * Testing and build fixes


author: Stef Walter <stefw@redhat.com> - 0.88-1
changelog:
  - * User interface for OSTree upgrades and rollbacks
  - * General reusable purpose angular kubernetes client code
  - * Allow custom login scripts for handling authentication
  - * A specific dashboards can now be the default destination after login
  - * Kill ssh-agent correctly when launched by cockpit-bridge
  - * Add a new cockpit-stub bridge for non-local access


author: Stef Walter <stefw@redhat.com> - 0.89-1
changelog:
  - * Start routine testing of Cockpit on Debian Unstable
  - * Make the config file case insensitive
  - * Reorder graphs on server summary page
  - * Don't suggest syncing users when adding a machine to dashboard
  - * Enable weak dependencies for F24+
  - * Show correct data in per interface network graphs
  - * Fix the Vagrantfile to pull in latest Cockpit
  - * Add Content-Security-Policy header support


author: Stef Walter <stefw@redhat.com> - 0.90-1
changelog:
  - * Fix Content-Security-Policy which broke loading in certain situations
  - * Deal correctly with failures trying to join unsupported domains
  - * Add documentation about Cockpit startup
  - * Better data in storage usage graphs
  - * Start creating debian source packages


author: Stef Walter <stefw@redhat.com> - 0.91-1
changelog:
  - * Fix computing of graph samples on 32-bit OS
  - * Distribute licenses of included components
  - * Distribute development dependencies
  - * Support 'make clean' properly in the tarball


author: Stef Walter <stefw@redhat.com> - 0.92-1
changelog:
  - * OAuth login support
  - * Update Patternfly
  - * Log to stderr when no journal
  - * Make sosreport work on RHEL and Atomic


author: Stef Walter <stefw@redhat.com> - 0.93-1
changelog:
  - * Set system performance profile via tuned
  - * Support for WebSocket client in cockpit-bridge
  - * Support using Nulecule with Openshift
  - * Actually exit cockpit-ws when it's idle


author: Stef Walter <stefw@redhat.com> - 0.94-1
changelog:
  - * Handle interruptions during cockpit-ws start while reading from /dev/urandom
  - * Remove BIOS display from Server Summary page
  - * Support tuned descriptions
  - * Fix Content-Security-Policy in example manifest.json files


author: Stef Walter <stefw@redhat.com> - 0.95-1
changelog:
  - * iSCSI initiator support on the storage page
  - * Page browser title now uses on operating system name
  - * Better look when Cockpit disconnects from the server
  - * Avoid use of NFS in the Vagrantfile
  - * Expand 'Tools' menu when navigating to one of its items
  - * Set a default $PATH in cockpit-bridge


author: Stef Walter <stefw@redhat.com> - 0.102-1
changelog:
  - * Can configure Docker restart policy for new containers
  - * Use a single dialog for creating logical volumes
  - * Package and test the storage UI on Debian
  - * Don't offer 'Computer OU' when joining IPA domains
  - * Don't distribute jshint build dependency due to its non-free license


author: Stef Walter <stefw@redhat.com> - 0.103-1
changelog:
  - * Strict Content-Security-Policy for subscriptions component
  - * New dialog for Kubernetes connection configuration
  - * Release to a cockpit-project Ubuntu PPA
  - * Remove jQuery usage from cockpit.js
  - * New styling for cluster dashboard
  - * Fix build issue on MIPS


author: Stef Walter <stefw@redhat.com> - 0.104-1
changelog:
  - * Show errors correctly when deleting or modifying user accounts
  - * Add support for iSCSI cluster volumes
  - * Strict Content-Security-Policy in the dashboard, sosreport and realmd code
  - * Better list expansion and navigation behavior across Cockpit
  - * Don't show 'Computer OU' field when leaving a domain
  - * Remove usage of bootstrap-select
  - * Show errors properly in performance profile dialog
  - * Fix Cluster sidebar to react to window size
  - * Allow specifying specific tags in registry image streams
  - * Make registry project access policy more visible


author: Stef Walter <stefw@redhat.com> - 0.105-1
changelog:
  - * Strict Content-Security-Policy in all shipped components of Cockpit
  - * Can now add and remove Openshift users to and from groups
  - * Add timeout setting for Cockpit authentication
  - * Registry interface now has checkbox for mirroring from insecure registries
  - * Kubernetes dashboard now allows deletion of Nodes


author: Stef Walter <stefw@redhat.com> - 0.106-1
changelog:
  - * Add namespaces to cockpit CSS classes
  - * Display container image layers in a simpler graph
  - * Hide actions in Cluster projects listing that are not accessible


author: Stef Walter <stefw@redhat.com> - 0.107-1
changelog:
  - * Display image stream import errors
  - * Add GlusterFS persistent volumes in Cluster dashboard
  - * Show a list of pending persistent volume claims
  - * jQuery Flot library is no longer part of the base1 package
  - * Fix Content-Security-Policy issues with jQuery Flot


author: Stef Walter <stefw@redhat.com> - 0.108-1
changelog:
  - * SELinux troubleshooting alerts can now be dismissed
  - * Show SELinux icon for critical alerts
  - * SELinux enforcing mode can be turned off and on with a switch
  - * Kubernetes Nodes are now include charts about usage data
  - * Fix Debian dependency on Docker
  - * Update the look and feel of the toggle switch
  - * Update ListenStream documentation to include address info


author: Dominik Perpeet <dperpeet@redhat.com> - 0.109-1
changelog:
  - * API stabilization, structural cleanup
  - * SELinux Troubleshooting: documentation, support latest API
  - * Update Patternfly
  - * Use CockpitLang cookie and Accept-Language for localization
  - * Can now click through to perform administration tasks on Nodes on the Cluster dashboard
  - * Cockpit terminal now supports shells like fish


author: Stef Walter <stefw@redhat.com> - 0.111-1
changelog:
  - * Tarball build issue in 0.110 is now fixed
  - * The Containers page layouts have been tweaked
  - * Make the Containers resource limits work again
  - * Registry image now have layers displayed correctly


author: Stef Walter <stefw@redhat.com> - 0.112-1
changelog:
  - * Don't show network interfaces where NM_CONTROLLED=no is set
  - * Add textual fields to container memory and CPU sliders
  - * Display contianer memory and CPU resources on Debian
  - * Disable tuned correctly when clearing a performance profile
  - * Fix SELinux enforcing toggle switch and status


author: Stef Walter <stefw@redhat.com> - 0.113-1
changelog:
  - * Show timer information for systemd timer jobs
  - * Use 'active-backup' as the default for new network bonds
  - * When changing system time check formats properly
  - * Hide the machine asset tag when no asset exists
  - * Disable the network on/off switch for unknown or unmanaged interfaces
  - * Show full string for system hardware info and operating system name


author: Stef Walter <stefw@redhat.com> - 0.114-1
changelog:
  - .104
  - * Network configuration of the Ethernet MTU
  - * Red Hat Subscriptions can now specify activation keys and orgs
  - * Start integration testing on CentOS
  - * SSH Host keys are show on system page
  - * Machine ID is shown on system page
  - * Show intelligent password score error messages


author: Stef Walter <stefw@redhat.com> - 0.115-1
changelog:
  - * Setup Docker container and image storage through the UI
  - * Use Webpack to build Cockpit UI packages
  - * Update the Cockpit Vagrant development box to use Fedora 24


author: Stef Walter <stefw@redhat.com> - 0.116-1
changelog:
  - * Support for volumes when starting a docker container
  - * Support for setting environment variables in a docker container
  - * Fix regressions that broke display of localized text


author: Stef Walter <stefw@redhat.com> - 0.117-1
changelog:
  - * Add support for network teams
  - * Select translations for complex language names
  - * Don't allow formating extended partitions
  - * Can configure Openshift Registry so anonymous users can pull images


author: Stef Walter <stefw@redhat.com> - 118-1
changelog:
  - Support PAM conversations on the Login screen
  - Users can create systemd timer jobs
  - Provide default names for volume groups and logical volumes
  - Make Docker graphs work on Debian
  - Only offer to format disks with supported file systems
  - Show all managed NetworkManager devices
  - Use webpack for building Cockpit javascript
  - Cockpit URLs can be proxied with a configured HTTP path prefix
  - Allow Cockpit packages to require a minimum version of Cockpit
  - Translations fixes


author: petervo <petervo@redhat.com> - 119-1
changelog:
  - Adds basic VM Management and Monitoring
  - MDRaid job improvements
  - Show unmanaged network devices
  - Better errors when formating storage devices
  - Updated VNC example
  - Port subscriptions package to react
  - Allow branding.css to overide shell css


author: Stef Walter <stefw@redhat.com> - 120-1
changelog:
  - New containers page layout
  - Quick filtering of containers and images on the container page
  - Added sidebar for phisical volumes in a volume group
  - Run a separate cockpit-ssh process when making SSH connections
  - Allow connecting to remote machines from the login page
  - Only connect to remote machines already known to Cockpit
  - Fix bugs preventing journal page from working on Firefox 49
  - Add tooltip describing group name in Roles list


author: Stef Walter <stefw@redhat.com> - 121-1
changelog:
  - Network Manager Checkpoints
  - Add Debian Branding
  - Fix GSSAPI login on Debian and Ubuntu
  - Generate map files for debugging Javascript and CSS


author: Stef Walter <stefw@redhat.com> - 122-1
changelog:
  - Works with UDisks in addition to storaged
  - Allow logging into other systems from login page
  - Explicitly specify javascript dependency versions


author: Stef Walter <<stefw@redhat.com>> - 123-1
changelog:
  - Release a second tarball with cached javascript dependencies
  - Start verifying that Cockpit works on Ubuntu 16.04
  - Enable and verify the network functionality on Debian
  - Integration tests now log core dumps for diagnosis


author: Stef Walter <<stefw@redhat.com>> - 124-1
changelog:
  - Build and test on Debian Jessie
  - Deprecate older javascript files
  - Properly terminate user sessions on the Accounts page
  - Fix regression on login screen in older Internet Explorer browsers
  - Fix regression where Date Picker was not shown in System Time dialog


author: Stef Walter <<stefw@redhat.com>> - 125-1
changelog:
  - Cockpit is now properly translatable
  - Display OSTree signatures
  - New expandable views for storage devices
  - No longer offer to format read-only block devices
  - Use stored passphrases for LUKS devices properly
  - Start testing on RHEL 7.3
  - More strict about transport channels a bridge accepts
  - System shutdown can be scheduled by date


author: Stef Walter <<stefw@redhat.com>> - 126-1
changelog:
  - Show security scan information about containers
  - Choose whether password is cached and reused on login screen
  - Allow renaming of active devices in networking interface
  - More clearly indicate when checking network connectivity
  - The remotectl command can now combine certificate and key files
  - Support Openshift's certificate autogeneration when used as a pod
  - The remotectl tool now checks for keys in certificate files
  - Domain join operations can now be properly cancelled
  - Make Kerberos authentication work even if gss-proxy is in use
  - Javascript code can now export DBus interfaces
  - When proxied, support X-Forwarded-Proto
  - Ignore block devices with a zero size in the storage interface


author: Stef Walter <<stefw@redhat.com>> - 129-1
changelog:
  - Diagnostic sosreport feature now works on RHEL Atomic again
  - The configure script has a --disable-ssh option to toggle libssh dep
  - The configure --disable-ws option has been replaced with above.
  - Unit tests have been fixed on recent GLib versions
  - Several Fedora and Debian packaging fixes


author: Stef Walter <<stefw@redhat.com>> - 130-1
changelog:
  - cockpit.file() can read non-memory-mappable file
  - Add kdump configuration user interface
  - Allow container Registry Console user names with '@' sign


author: Stef Walter <<stefw@redhat.com>> - 131-1
changelog:
  - Show session virtual machines on Machines page
  - Fix use of the TAB key on login page
  - Robust naming and detection of network bond master
  - Debian packaging fixes


author: Martin Pitt <<mpitt@redhat.com>> - 132-1
changelog:
  - Make basic SELinux functionality available without setroubleshootd
  - Allow changing the MAC address for ethernet adapters and see them for bonds
  - Hide "autoconnect" checkbox for network devices without settings
  - Support for external providers other than libvirt on Machines page
  - Some tooltip fixes
  - Add option to restrict max read size to the Cockpit file API
  - Relax dependencies on cockpit-bridge package on Debian/Ubuntu
  - Rename cockpit-test-assets package to cockpit-tests
  - When touching patched files handle case of only one file
  - Always build the cockpit-tests subpackage


author: Martin Pitt <<mpitt@redhat.com>> - 133-1
changelog:
  - Remotely managed machines are now configured in /etc/cockpit/machines.d/*.json
  - Fix NetworkManager's "MTU" dialog layout
  - Build the cockpit-tests package for releases too
  - Split translations into individual packages
  - Packages now configure alternate cockpit-bridge's to interact with the system


author: Martin Pitt <<mpitt@redhat.com>> - 134-1
changelog:
  - Show /etc/motd in the "System" task page
  - Drop "System" service actions which are intended for scripts
  - Make login page translatable
  - NetworkManager now activates slave interfaces by itself
  - Add call timeout option to the cockpit.dbus() API
  - The Debian packaging is now able to apply binary patches


author: Martin Pitt <<mpitt@redhat.com>> - 137-1
changelog:
  - Read ~/.ssh/known_hosts for connecting to remote machines with ssh
  - The Storage LVM setup can add unpartitioned free space as a physical volume
  - NetworkManager's Team plugin can be used on architectures other than x86_64
  - Cockpit's web server understands and properly responds to HTTP HEAD requests
  - Allow parameter substitution in manifest when spawning peer bridges


author: Stef Walter <<stefw@redhat.com>> - 138-1
changelog:
  - Only allow mdraid disk removal when it won't destroy data
  - Allow DN style usernames in the Kubernetes dashboard
  - Simplify protocol that cockpit talks to session authentication processes


author: Martin Pitt <<mpitt@redhat.com>> - 139-1
changelog:
  - Show more information about virtual machines, such as boot order
  - Fix enablement of timer systemd units created on Services page
  - Fix Storage crash on multiple iSCSI sessions
  - cockpit-docker is now installable with docker-ce or other alternatives
  - Hide docker push commands on Registry image pages for  "pull" roles


author: Martin Pitt <<martin@piware.de>> - 142-1
changelog:
  - Virtual machines display an interactive console, either in browser, or a popup viewer
  - Fix Virtual Machines operations on non-English locales
  - Add documentation explaining how to grant/restrict access via polkit rules


author: Martin Pitt <<martin@piware.de>> - 143-1
changelog:
  - Add "Software Updates" page for package (rpm/deb) based operating systems
  - Fix cockpit-machines package to make inline VNC console actually work
  - Fix Kubernetes authentication when Kubernetes configured for RBAC
  - Build Docker page for s390x architecture


author: Martin Pitt <martin@piware.de> - 145-1
changelog:
  - Resize the terminal dynamically to use all available space
  - Let the Machines page update immediately after changes
  - Add delete VM functionality to the Machines page
  - Retire support for external Machines provider API
  - Always recommend rebooting after applying Software Updates
  - Group D-Bus channels to avoid hitting connection limits
  - Fix building on Fedora Rawhide/glibc 2.25.90


author: Martin Pitt <martin@piware.de> - 146-1
changelog:
  - Show recent updates and live update log on Software Updates page
  - Improve available Software Updates table layout for small/mobile screens
  - Support OAuth Kubernetes logins to work with Google Compute Engine
  - Fix reporting ABRT crashes that are already known to the server
  - Scroll the virtual machine VNC console into view automatically


author: petervo <petervo@redhat.com> - 149-1
changelog:
  - Support sending non-maskable interrupt to VMs
  - Fix building on fedora 27
  - Add information about non-met conditions for systemd services
  - Clear cockpit cookie on logout


author: Martin Pitt <martin@piware.de> - 150-1
changelog:
  - Automatically enable and start newly created timers on the Services page
  - Support cockpit-dashboard installation into OSTree overlay on Atomic
  - Support Kubernetes basic auth with Google Compute Engine 1.7.x


author: Martin Pitt <martin@piware.de> - 151-1
changelog:
  - Support loading SSH keys from arbitrary paths
  - Support X-Forwarded-Proto HTTP header for Kubernetes
  - Fix Kubernetes connection hangs (regression in version 150)


author: Martin Pitt <martin@piware.de> - 152-1
changelog:
  - Add Applications page
  - Add automatic update configuration for dnf to Software Updates
  - Fix cockpit-bridge crash if /etc/os-release does not exist


author: Martin Pitt <martin@piware.de> - 153-1
changelog:
  - Add cockpit-ovirt package to control oVirt virtual machine clusters
  - Clean up rpmlint/lintian errors in the packages


author: Martin Pitt <martin@piware.de> - 154-1
changelog:
  - Center the "Disconnected" message in the content area
  - Fix two layout regressions on the Cluster page
  - Remove long-obsolete "./configure --branding" option


author: Martin Pitt <martin@piware.de> - 155-1
changelog:
  - Add NFS client support to the Storage page
  - Add "Maintenance" switch for oVirt hosts
  - Fix Terminal rendering issues in Chrome
  - Prevent closing Terminal with Ctrl+W when focused
  - Support the upcoming OpenShift 3.7 release


author: Martin Pitt <martin@piware.de> - 156-1
changelog:
  - Redesign navigation and support mobile browsing
  - Use /etc/cockpit/krb5.keytab if present to support alternate keytabs
  - Add project homepage link to Apps page
  - Maintain issue(5) file with current Cockpit status
  - Use event-driven refresh of oVirt data instead of polling


author: Martin Pitt <martin@piware.de> - 158-1
changelog:
  - Add check boxes for common NFS mount options
  - Clarify Software Update status if only security updates are available
  - Create self-signed certificates with SubjectAltName


author: Martin Pitt <martin@piware.de> - 159-1
changelog:
  - Configure data deduplication with VDO devices on Storage page
  - Add serial console to virtual Machines page and redesign the Consoles tab
  - Show more error message details for failures on virtual Machines page


author: Martin Pitt <martin@piware.de> - 160-1
changelog:
  - Add kubevirt Virtual Machines overview
  - Redesign package list on Software Updates page and show RHEL Errata
  - Install AppStream collection metadata packages on demand on Apps page
  - Add AppStream metadata to cockpit-sosreport for showing up on Apps page
  - Change CPU graphs to use "100%" for a fully loaded multi-processor system
  - Show storage, network, and other numbers with 3 digits of precision
  - Add an example bastion container


author: Martin Pitt <martin@piware.de> - 161-1
changelog:
  - New VMs can be created on Machines page
  - VMs running in Kubernetes can now be deleted
  - Improve LVM volume resizing
  - Add new Hardware Information page
  - Load Application metadata (Appstream) packages on demand on Debian/Ubuntu
  - Rename cockpit-ovirt package to cockpit-machines-ovirt
  - Stop advertising and supporting cockpit-bundled jQuery library


author: Martin Pitt <martin@piware.de> - 163-1
changelog:
  - Drop "Transfer data asynchronously" VDO option on Storage page
  - Hide Docker storage pool reset button when it cannot work properly
  - Update jQuery to version 3.3.1 (deprecated cockpit API!)


author: Martin Pitt <martin@piware.de> - 164-1
changelog:
  - Storage: Move NFS management into new details page
  - System: Show available package updates and missing registration
  - System: Fix inconsistent tooltips
  - Logs: Change severities to officially defined syslog levels
  - Machines: Add error notifications
  - Accessibility improvements
  - Reloading the page in the browser now reloads Cockpit package manifests


author: Martin Pitt <martin@piware.de> - 165-1
changelog:
  - Storage: Show more details of sessions and services that keep NFS busy
  - Machines: Detect if libvirtd is not running
  - Machines: Show virtual machines that are being created


author: Martin Pitt <martin@piware.de> - 166-1
changelog:
  - Kubernetes: Add creation of Virtual Machines
  - Realms: Automatically set up Kerberos keytab for Cockpit web server
  - Numbers now get formatted correctly for the selected language


author: Martin Pitt <martin@piware.de> - 169-1
changelog:
  - Storage: Offer installation of NFS client support
  - System: Request FreeIPA SSL certificate for Cockpit's web server
  - Services: Show unit relationships
  - Provide motd help about how to access cockpit


author: Martin Pitt <martin@piware.de> - 170-1
changelog:
  - Software Updates: Layout rework
  - oVirt: Use authenticated libvirt connection by default
  - Disable optional packages, they moved to cockpit-appstream source
  - Drop dashboard recommends from metapackage, not RHEL ready yet


author: Martin Pitt <martin@piware.de> - 171-1
changelog:
  - Machines: Add virtual CPU configuration
  - Kubernetes: Add KubeVirt pod metrics
  - Docker: Show container volumes
  - Fix broken actions for non-administrators
  - Networking: Handle non-running NetworkManager
  - Accounts: User role improvements
  - Localize times


author: Martin Pitt <mpitt@redhat.com> - 172-1
changelog:
  - System: Offer installation of PCP
  - Software Updates: Improve layout in mobile mode
  - Remove ability to drop privileges from navigation bar
  - API: Introduce flow control for all channels
  - Python 3 support rhbz#1561472


author: Marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 176-1
changelog:
  - Fix Cockpit activation message (/etc/issue.d) rhbz#1615316
  - Suggest other browsers when browser is unsupported rhbz#1619993


author: Martin Pitt <mpitt@redhat.com> - 177-1
changelog:
  - Support centrally-managed SSH known hosts rhbz#1622835
  - Drop support for Internet Explorer rhbz#1619993


author: Martin Pitt <mpitt@redhat.com> - 178-1
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627634
  - Fix large downloads stalling after a few megabytes rhbz#1626847
  - Recommend system-logos to ensure correct branding rhbz#1626066


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Various crash fixes (coverity) rhbz#1635182
  - Updates for React 16 (for future backports) rhbz#1635182
  - Fix building with platform-python rhbz#1631174


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Kernel Dump: Support non-local targets rhbz#1651691
  - Fix firewall page oops when not selecting anything rhbz#1652207
  - Fix changing user's own password rhbz#1652304
  - Never send Content-Length with chunked encoding rhbz#1652511
  - Include "Web Console" in package description rhbz#1653617
  - Respect SSH configuration


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Integration of Cockpit pages on the desktop rhbz#1651264
  - Fix crash in Simplified Chinese locale rhbz#1653544
  - Update screenshots in AppStream data rhbz#1656982
  - Update translations from Zanata rhbz#1608292
  - Improve login error message if cockpit-system is not installed rhbz#1650467
  - Mark deleted cookie as HttpOnly to pacify security scanners rhbz#1656441


author: Jan Vcelak <jvcelak@redhat.com> 2.1.0-1
changelog:
  - new release:
    - daemon: allow running without selected profile
    - daemon: fix profile merging, allow only safe characters in profile names
    - daemon: implement missing methods in DBus interface
    - daemon: implement profile recommendation
    - daemon: improve daemonization, PID file handling
    - daemon: improved device matching in profiles, negation possible
    - daemon: various internal improvements
    - executables: check for EUID instead of UID
    - executables: run python with -Es to increase security
    - plugins: cpu - fix cpupower execution
    - plugins: disk - fix option setting
    - plugins: mounts - new, currently supports only barriers control
    - plugins: sysctl - fix a bug preventing settings application
    - powertop2tuned: speedup, fix crashes with non-C locales
    - powertop2tuned: support for powertop 2.2 output
    - profiles: progress on replacing scripts with plugins
    - tuned-adm: bash completion - suggest profiles from all supported locations
    - tuned-adm: complete switch to D-bus
    - tuned-adm: full control to users with physical access


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.1.2-1
changelog:
  - new release:
    - systemtap {disk,net}devstat: fix typo in usage
    - switched to configobj parser
    - latency-performance: disabled THP
    - fixed fd leaks on subprocesses


author: Jan Vcelak <jvcelak@redhat.com> 2.2.0-1
changelog:
  - new release:
    - remove nobarrier from virtual-guest (data loss prevention)
    - devices enumeration via udev, instead of manual retrieval
    - support for dynamically inserted devices (currently disk plugin)
    - dropped rfkill plugins (bluetooth and wifi), the code didn't work


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.1-1
changelog:
  - new release:
    - audio plugin: fixed error handling in _get_timeout
    - removed cpupower dependency, added sysfs fallback
    - powertop2tuned: fixed parser crash on binary garbage
      resolves: rhbz#914933
    - cpu plugin: dropped multicore_powersave as kernel upstream already did
    - plugins: options manipulated by dynamic tuning are now correctly saved and restored
    - powertop2tuned: added alias -e for --enable option
    - powertop2tuned: new option -m, --merge-profile to select profile to merge
    - prefer transparent_hugepage over redhat_transparent_hugepage
    - recommend: use recommend.conf not autodetect.conf
    - tuned.service: switched to dbus type service
      resolves: rhbz#911445
    - tuned: new option --pid, -P to write PID file
    - tuned, tuned-adm: added new option --version, -v to show version
    - disk plugin: use APM value 254 for cleanup / APM disable instead of 255
      resolves: rhbz#905195
    - tuned: new option --log, -l to select log file
    - powertop2tuned: avoid circular deps in include (one level check only)
    - powertop2tuned: do not crash if powertop is not installed
    - net plugin: added support for wake_on_lan static tuning
      resolves: rhbz#885504
    - loader: fixed error handling
    - spec: used systemd-rpm macros
      resolves: rhbz#850347


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.2-1
changelog:
  - new-release:
    - cpu plugin: fixed cpupower workaround
    - cpu plugin: fixed crash if cpupower is installed


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-1
changelog:
  - new-release
    resolves: rhbz#1020743
    - audio plugin: fixed audio settings in standard profiles
      resolves: rhbz#1019805
    - video plugin: fixed tunings
    - daemon: fixed crash if preset profile is not available
      resolves: rhbz#953128
    - man: various updates and corrections
    - functions: fixed usb and bluetooth handling
    - tuned: switched to lightweighted pygobject3-base
    - daemon: added global config for dynamic_tuning
      resolves: rhbz#1006427
    - utils: added pmqos-static script for debug purposes
      resolves: rhbz#1015676
    - throughput-performance: various fixes
      resolves: rhbz#987570
    - tuned: added global option update_interval
    - plugin_cpu: added support for x86_energy_perf_policy
      resolves: rhbz#1015675
    - dbus: fixed KeyboardInterrupt handling
    - plugin_cpu: added support for intel_pstate
      resolves: rhbz#996722
    - profiles: various fixes
      resolves: rhbz#922068
    - profiles: added desktop profile
      resolves: rhbz#996723
    - tuned-adm: implemented non DBus fallback control
    - profiles: added sap profile
    - tuned: lowered CPU usage due to python bug
      resolves: rhbz#917587


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-2
changelog:
  - fixed race condition in the start/stop code
    resolves: rhbz#1028119
  - improved tuned responsiveness
    resolves: rhbz#1028122


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.0-1
changelog:
  - new-release
    resolves: rhbz#1093883
    - fixed traceback if profile cannot be loaded
      related: rhbz#953128
    - powertop2tuned: fixed traceback if rewriting file instead of dir
      resolves: rhbz#963441
    - throughput-performance: altered dirty ratios for better performance
      resolves: rhbz#1043533
    - latency-performance: leaving THP on its default
      resolves: rhbz#1064510
    - used throughput-performance profile on server by default
      resolves: rhbz#1063481
    - network-latency: added new profile
      resolves: rhbz#1052418
    - network-throughput: added new profile
      resolves: rhbz#1052421
    - recommend.conf: fixed config file
      resolves: rhbz#1069123
    - systemd: added cpupower.service conflict
      resolves: rhbz#1073392
    - balanced: used medium_power ALPM policy
    - added support for >, < assignment modifiers in tuned.conf
    - handled root block devices
    - balanced: used conservative CPU governor
      resolves: rhbz#1124125
    - plugins: added selinux plugin
    - plugin_net: added nf_conntrack_hashsize parameter
    - profiles: added atomic-host profile
      resolves: rhbz#1091977
    - profiles: added atomic-guest profile
      resolves: rhbz#1091979
    - moved profile autodetection from post install script to tuned daemon
      resolves: rhbz#1144067
    - profiles: included sap-hana and sap-hana-vmware profiles
    - man: structured profiles manual pages according to sub-packages
    - added missing hdparm dependency
      resolves: rhbz#1144858
    - improved error handling of switch_profile
      resolves: rhbz#1068699
    - tuned-adm: active: detect whether tuned deamon is running
      related: rhbz#1068699
    - removed active_profile from RPM verification
      resolves: rhbz#1104126
    - plugin_disk: readahead value can be now specified in sectors
      resolves: rhbz#1127127
    - plugins: added bootloader plugin
      resolves: rhbz#1044111
    - plugin_disk: added error counter to hdparm calls
    - plugins: added scheduler plugin
      resolves: rhbz#1100826
    - added tuned-gui


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.1-1
changelog:
  - new-release
    - fixed return code of tuned grub template
      resolves: rhbz#1151768
    - plugin_bootloader: fix for multiple parameters on command line
      related: rhbz#1148711
    - tuned-adm: fixed traceback on "tuned-adm list"
      resolves: rhbz#1149162
    - plugin_bootloader is automatically disabled if grub2 is not found
      resolves: rhbz#1150047
    - plugin_disk: set_spindown and set_APM made independent
      resolves: rhbz#976725


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.0-1
changelog:
  - new-release
    resolves: rhbz#1155052
    - add support for ethtool -C to tuned network plugin
      resolves: rhbz#1152539
    - add support for ethtool -K to tuned network plugin
      resolves: rhbz#1152541
    - add support for calculation of values for the kernel command line
      resolves: rhbz#1191595
    - no error output if there is no hdparm installed
      resolves: rhbz#1191775
    - do not run hdparm on hotplug events if there is no hdparm tuning
      resolves: rhbz#1193682
    - add oracle tuned profile
      resolves: rhbz#1196298
    - fix bash completions for tuned-adm
      resolves: rhbz#1207668
    - add glob support to tuned sysfs plugin
      resolves: rhbz#1212831
    - add tuned-adm verify subcommand
      resolves: rhbz#1212836
    - do not install tuned kernel command line to rescue kernels
      resolves: rhbz#1223864
    - add variables support
      resolves: rhbz#1225124
    - add built-in support for unit conversion into tuned
      resolves: rhbz#1225135
    - fix vm.max_map_count setting in sap-netweaver profile
      resolves: rhbz#1228562
    - add tuned profile for RHEL-RT
      resolves: rhbz#1228801
    - plugin_scheduler: added support for runtime tuning of processes
      resolves: rhbz#1148546
    - add support for changing elevators on xvd* devices (Amazon EC2)
      resolves: rhbz#1170152
    - add workaround to be run after systemd-sysctl
      resolves: rhbz#1189263
    - do not change settings of transparent hugepages if set in kernel cmdline
      resolves: rhbz#1189868
    - add tuned profiles for RHEL-NFV
      resolves: rhbz#1228803
    - plugin_bootloader: apply $tuned_params to existing kernels
      resolves: rhbz#1233004


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-1
changelog:
  - new-release
    related: rhbz#1155052
    - plugin_scheduler: work with nohz_full
      resolves: rhbz#1247184
    - fixed realtime-virtual-guest/host profiles packaged twice
      resolves: rhbz#1249028
    - fixed requirements of realtime and nfv profiles
    - fixed tuned-gui not starting
    - various other minor fixes


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.0-1
changelog:
  - new-release
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are missing
    - plugin_sysctl: fixed quoting of sysctl values
      resolves: rhbz#1254538
    - tuned-adm: added log file location hint to verify command output
    - libexec: fixed listdir and isdir in defirqaffinity.py
      resolves: rhbz#1252160
    - plugin_cpu: save and restore only intel pstate attributes that were changed
      resolves: rhbz#1252156
    - functions: fixed sysfs save to work with options
      resolves: rhbz#1251507
    - plugins: added scsi_host plugin
    - tuned-adm: fixed restart attempt if tuned is not running
    - spec: fixed post scriptlet to work without grub
      resolves: rhbz#1265654
    - tuned-profiles-nfv: fix find-lapictscdeadline-optimal.sh for CPUS where ns > 6500
      resolves: rhbz#1267284
    - functions: fixed restore_logs_syncing to preserve SELinux context on rsyslog.conf
      resolves: rhbz#1268901
    - realtime: set unboud workqueues cpumask
      resolves: rhbz#1259043
    - spec: correctly remove tuned footprint from /etc/default/grub
      resolves: rhbz#1268845
    - gui: fixed creation of new profile
      resolves: rhbz#1274609
    - profiles: removed nohz_full from the realtime profile
      resolves: rhbz#1274486
    - profiles: Added nohz_full and nohz=on to realtime guest/host profiles
      resolves: rhbz#1274445
    - profiles: fixed lapic_timer_adv_ns cache
      resolves: rhbz#1259452
    - plugin_sysctl: pass verification even if the option doesn't exist
      related: rhbz#1252153
    - added support for 'summary' and 'description' of profiles,
      extended D-Bus API for Cockpit
      related: rhbz#1228356


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-1
changelog:
  - new-release
    - gui: fixed save profile
      resolves: rhbz#1242491
    - tuned-adm: added --ignore-missing parameter
      resolves: rhbz#1243807
    - plugin_vm: added transparent_hugepage alias
      resolves: rhbz#1249610
    - plugins: added modules plugin
      resolves: rhbz#1249618
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are
      missing
      resolves: rhbz#1254417
    - tuned-adm: fixed restart attempt if tuned is not running
      resolves: rhbz#1258755
    - nfv: avoided race condition by using synchronous mode
      resolves: rhbz#1259039
    - realtime: added check for isolcpus sanity
      resolves: rhbz#1264128
    - pm_qos: fixed exception if PM_QoS is not available
      resolves: rhbz#1296137
    - plugin_sysctl: reapply system sysctl after Tuned sysctl are applied
      resolves: rhbz#1302953
    - atomic: increase number of inotify watches
      resolves: rhbz#1322001
    - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
      resolves: rhbz#1334479
    - realtime: fixed kernel.sched_rt_runtime_us to be -1
      resolves: rhbz#1346715
    - tuned-adm: fixed detection of no_daemon mode
      resolves: rhbz#1351536
    - plugin_base: correctly strip assignment modifiers even if not used
      resolves: rhbz#1353142
    - plugin_disk: try to workaround embedded '/' in device names
      related: rhbz#1353142
    - sap-hana: explicitly setting kernel.numa_balancing = 0 for better performance
      resolves: rhbz#1355768
    - switched to polkit authorization
      resolves: rhbz#1095142
    - plugins: added scsi_host plugin
      resolves: rhbz#1246992
    - spec: fixed conditional support for grub2 to work with selinux
      resolves: rhbz#1351937
    - gui: added tuned icon and desktop file
      resolves: rhbz#1356369


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-2
changelog:
  - Fixed tuned-gui traceback (by tuned-gui-traceback-fix patch)
    Resolves: rhbz#1358846
  - Fixed 'tuned-adm list' traceback if daemon is not running
    (by tuned-adm-list-no-dbus-traceback-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-1
changelog:
  - New release
    Resolves: rhbz#1362481
  - Dropped tuned-gui-traceback-fix and tuned-adm-list-no-dbus-traceback-fix
    patches (both upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-3
changelog:
  - Fixed traceback when non-existent profile is queried through
    tuned-adm profile_info
    Resolves: rhbz#1385145


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-1
changelog:
  - new release
    - rebase tuned to latest upstream
      resolves: rhbz#1388454
    - cpu-partitioning: enabled timer migration
      resolves: rhbz#1408308
    - cpu-partitioning: disabled kvmclock sync and ple
      resolves: rhbz#1395855
    - spec: muted error if there is no selinux support
      resolves: rhbz#1404214
    - units: implemented instance priority
      resolves: rhbz#1246172
    - bootloader: added support for initrd overlays
      resolves: rhbz#1414098
    - cpu-partitioning: set CPUAffinity early in initrd image
      resolves: rhbz#1394965
    - cpu-partitioning: set workqueue affinity early
      resolves: rhbz#1395899
    - scsi_host: fixed probing of ALPM, missing ALPM logged as info
      resolves: rhbz#1416712
    - added new profile cpu-partitioning
      resolves: rhbz#1359956
    - bootloader: improved inheritance
      resolves: rhbz#1274464
    - units: mplemented udev-based regexp device matching
      resolves: rhbz#1251240
    - units: introduced pre_script, post_script
      resolves: rhbz#1246176
    - realtime-virtual-host: accommodate new ktimersoftd thread
      resolves: rhbz#1332563
    - defirqaffinity: fixed traceback due to syntax error
      resolves: rhbz#1369791
    - variables: support inheritance of variables
      resolves: rhbz#1433496
    - scheduler: added support for cores isolation
      resolves: rhbz#1403309
    - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
      resolves: rhbz#1413111
    - desktop: fixed typo in profile summary
      resolves: rhbz#1421238
    - with systemd don't do full rollback on shutdown / reboot
      resolves: rhbz#1421286
    - builtin functions: added virt_check function and support to include
      resolves: rhbz#1426654
    - cpulist_present: explicitly sorted present CPUs
      resolves: rhbz#1432240
    - plugin_scheduler: fixed initialization
      resolves: rhbz#1433496
    - log errors when applying a profile fails
      resolves: rhbz#1434360
    - systemd: added support for older systemd CPUAffinity syntax
      resolves: rhbz#1441791
    - scheduler: added workarounds for low level exceptions from
      python-linux-procfs
      resolves: rhbz#1441792
    - bootloader: workaround for adding tuned_initrd to new kernels on restart
      resolves: rhbz#1441797


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-6
changelog:
  - Dropped qemu-kvm-tools-rhev requirement, now satisfied by
    tuned-profiles-nfv-host-bin
    Related: rhbz#1504681


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1546598
    - script: show stderr output in the log
    - realtime-virtual-host: script.sh: add error checking
    - man: improved tuned-profiles-cpu-partitioning.7
    - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
    - plugin_scheduler: whitelist/blacklist processed also for thread names
    - bootloader: patch all GRUB2 config files
    - profiles: added mssql profile
    - tuned-adm: print log excerpt when changing profile
    - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
    - sysctl: support assignment modifiers as other plugins do
    - oracle: fixed ip_local_port_range parity warning
      resolves: rhbz#1527219
    - Fix verifying cpumask on systems with more than 32 cores
      resolves: rhbz#1528368
    - oracle: updated the profile to be in sync with KCS 39188
      resolves: rhbz#1447323


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1546598
    - IRQ affinity handled by scheduler plugin
      resolves: rhbz#1590937


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-9
changelog:
  - realtime-virtual-guest/host: start/stop rt-entsk daemon on
    initialization/shutdown
    resolves: rhbz#1619822


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.12.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1685585
    - sap-netweaver: changed values of kernel.shmall and kernel.shmmax to RHEL-8 defaults
      resolves: rhbz#1708418
    - sap-netweaver: changed value of kernel.sem to RHEL-8 default
      resolves: rhbz#1701394
    - sap-hana-vmware: dropped profile
      resolves: rhbz#1715541
    - s2kb function: fixed to be compatible with python3
      resolves: rhbz#1684122
    - do fallback to the powersave governor (balanced and powersave profiles)
      resolves: rhbz#1679205
    - added support for negation of CPU list
      resolves: rhbz#1676588
    - switched from sysctl tool to own implementation
      resolves: rhbz#1666678
    - realtime-virtual-host: added tsc-deadline=on to qemu cmdline
      resolves: rhbz#1554458
    - fixed handling of devices that have been removed and re-attached
      resolves: rhbz#1677730


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.13.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1738250
    - cpu: fixed checking if EPB is supported
      resolves: rhbz#1690929
    - scheduler: fixed IRQ SMP affinity verification to respect ignore_missing
      resolves: rhbz#1729936
    - realtime: enabled ktimer_lockless_check
      resolves: rhbz#1734096
    - plugins: support cpuinfo_regex and uname_regex matching
      resolves: rhbz#1748965
    - sysctl: made reapply_sysctl ignore configs from /usr
      resolves: rhbz#1759597
    - added support for multiple include directives
      resolves: rhbz#1760390
    - realtime: added nowatchdog kernel command line option
      resolves: rhbz#1767614


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.13.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1738250
    - sap-hana: updated tuning
      resolves: rhbz#1779821
    - latency-performance: updated tuning
      resolves: rhbz#1779759


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.4-3
changelog:
  - Python 2 binary package renamed to python2-chardet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-6
changelog:
  - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted
    font package as dependency. (#1321551)


author: Akira TAGOH <tagoh@redhat.com> - 2.13.1-3
changelog:
  - Stop cleaning up .uuid file even when a directory is empty.
    resolves: rhbz#1653171
  - Use Rachana instead of Meera for serif subsitution.
    resolves: rhbz#1650491


author: Richard Hughes <richard@hughsie.com> 0.7.8-1
changelog:
  - New upstream release
  - Add as_version_string() for fwupd
  - Add support for component agreements
  - Correctly compare version numbers like '1.2.3' and '1.2.3a'
  - Don't include the path component in the name when parsing the package filename
  - If the launchable is specified don't guess it when composing
  - Never add more than one component to the AppStream store when composing


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.12-6
changelog:
  - Python 2 binary package renamed to python2-pyyaml
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Miro Hrončok <mhroncok@redhat.com> - 3.12-12
changelog:
  - Rename python3-PyYAML to python3-pyyaml
  - Modernize spec
  - Fix python2 invocation

  - Cherry-picked from: https://src.fedoraproject.org/rpms/PyYAML/pull-request/2


author: Havoc Pennington <hp@redhat.com> 0.6.91-1
changelog:
  - disable qt for now because beehive hates me
  - pull a slightly newer cvs snap that creates socket directory
  - cat the make check log after make check fails


author: Havoc Pennington <hp@redhat.com> 0.6.93-1
changelog:
  - new cvs snap that actually forks to background and changes
    user it's running as and so forth
  - create our system user in pre


author: Havoc Pennington <hp@redhat.com> 0.11.91-3
changelog:
  - break the tiny dbus-launch that depends on X into separate package
    so a CUPS server doesn't need X installed


author: Havoc Pennington <hp@redhat.com> 0.13-2
changelog:
  - see if removing qt subpackage for now will get us through the build system,
    qt bindings not useful yet anyway


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with cups prior to configuration file change, so that the
    %postun service condrestart works.


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer, dbus-monitor and dbus-glib-tool
    into the dbus-glib package so that the main dbus
    package does not depend on glib (Bug #125285)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Added lib64 workaround for python bindings installing to
    the wrong lib directory on 64 bit archs


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
    no longer requires X or GTK libraries. (RH Bug #130029)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - reverting BuildRequires: redhat-release because of issues with build system
  - added precompiled version of the messagebus init script


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes
    messages getting lost in SE-Linux contexts


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been
    integrated upstream
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into %{_lib}/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: Ray Strode <rstrode@redhat.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Apply patch from Thiago Macieira <thiago@kde.org> to
    fix failed assertion in threading implementation
  - Drop some crazy looking build time speed optimization


author: David Zeuthen <davidz@redhat.com> - 1.1.2-2.el8
changelog:
  - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
    the correct mode and permissions.
  - Own the directory /usr/share/dbus-1/system-services
  - Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
  - Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
    system bus activation helper fails


author: Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el8
changelog:
  - Reverse we_were_root check to setpcap if we were root.  Also only init
  audit if we were root.  So error dbus message will not show up when policy
  reload happens.  dbus -session will no longer try to send audit message,
  only system will.


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1
changelog:
  - new upstream version which obsoletes a number of our patches
  - doc section added for the devhelp docs


author: David Zeuthen <davidz@redhat.com> - 1.1.20-1.el8
changelog:
  - Update to latest upstream release. Includes fix for CVE-2008-0595.
  - Drop some patches that went upstream already


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1
changelog:
  - update to latest upstream
  - major version change is really a maint release for 1.1.20
    please read the NEWS file in the source for more information


author: Matthias Clasen <mclasen@redhat.com> - 1.2.1-6
changelog:
  - Add a patch from upstream git that adds a method
    for changing the activation environment on the session bus


author: Colin Walters <walters@redhat.com> - 1:1.2.16-1
changelog:
  - Upstream 1.2.16
  - Remove inotify patch, now upstreamed
  - Remove timeout patch, obsolete with upstream change to infinite
    timeout maximum by default


author: Colin Walters <walters@redhat.com> - 1:1.2.16-2
changelog:
  - Explicitly add a dbus group id, fixes dbus files getting a
    random group id in cases where the RPM install order varies.
    Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@verbum.org> - 1:1.2.16-11
changelog:
  - Drop dbus-libs requiring dbus; this was unnecessary for programs
    which happened to speak the dbus protocol but don't require
    the daemon.
    Note that libdbus does support autolaunching dbus-daemon in
    the session as an emergency fallback for legacy situations; however,
    these cases were likely to have dbus installed already (via comps).
    If they don't, well one turned to the wrong page in the choose your
    own adventure book.


author: Colin Walters <walters@verbum.org> - 1:1.2.18-1
changelog:
  - New upstream release
    Drop all upstreamed patches.
  - start-early.patch had both bindir changes and start-early; the
    latter was upstreamed, so start-early is now bindir.patch.
    Ideally later get this partial-bindir stuff upstream.


author: Colin Walters <walters@verbum.org> - 1:1.4.10-1
changelog:
  - New upstream version
  - Drop XML docs patch which is now upstream
  - Drop devhelp stuff; people should be using GDBus now.  If you
    don't, the raw doxygen is fine.


author: Lennart Poettering <lpoetter@redhat.com> - 1:1.4.10-3
changelog:
  - Don't restart D-Bus on upgrades, dont' enable D-Bus, since it is statically enabled.
  - https://bugzilla.redhat.com/show_bug.cgi?id=732426


author: Colin Walters <walters@verbum.org>
changelog:
  - Update to 1.4.20; closes #806082
  - Ensure /var/lib/dbus exists; this seems to have been
    dropped from upstream build rules.
  - Adapt to documentation actually being installed


author: Colin Walters <walters@verbum.org> - 1:1.6.12-2
changelog:
  - Enable all upstream tests
    Resolves: #955532
    This is fairly hacky; a much better replacement would be
    something like the InstalledTests system.  But we have to live
    with rpm and stuff for now...


author: Colin Walters <walters@verbum.org> - 1:1.6.18-1
changelog:
  - New upstream version
  - Added backported patch which should fix the test suite; thanks to
    Yanko Kaneti for the suggestion.


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.6.18-3
changelog:
  - Adapt to unversioned docdirs; don't ship all docs in main package.
  - Fix bogus dates in %changelog and tabs vs spaces warning.


author: Colin Walters <walters@verbum.org> - 1:1.8.4-2
changelog:
  - New upstream version:
  - Fixes CVE-2014-3477 (fd.o#78979): "local DoS in dbus-daemon"
  - Drop "make check" for now, per http://lists.freedesktop.org/archives/dbus/2014-June/016223.html
  - BR systemd-devel


author: David King <amigadave@amigadave.com> - 1:1.8.12-1
changelog:
  - Update to 1.8.12 (#1168438)
  - Fixes CVE-2014-3635 (fd.o#83622)
  - Fixes CVE-2014-3636 (fd.o#82820)
  - Fixes CVE-2014-3637 (fd.o#80559)
  - Fixes CVE-2014-3638 (fd.o#81053)
  - Fixes CVE-2014-3639 (fd.o#80919)
  - Fixes CVE-2014-7824 (fd.o#85105)


author: David King <amigadave@amigadave.com> - 1:1.8.12-2
changelog:
  - Drop bindir patch, and update to comply with UsrMove
  - Correct license description for multiple licenses
  - Use macroized systemd scriptlets (#850083)
  - Add some more documentation from the upstream tarball
  - Tighten subpackage dependencies by using %{?_isa}
  - Use --with-tests to conditionalize test dependencies
  - Use /run instead of /var/run
  - Remove obsolete dbus.target.wants (#1084087)


author: David King <amigadave@amigadave.com> - 1:1.9.14-1
changelog:
  - Update to 1.9.14
  - Update man page globs in files section
  - Build tests in a separate build directory
  - Enable installed tests, with new -tests subpackage
  - Allow extra dependencies for tests to be disabled independently of check


author: Adam Jackson <ajax@redhat.com> - 1:1.12.0-3
changelog:
  - Don't Require: xorg-x11-xinit. We don't actually need it, and newer
    filesystem packages own the directory for us.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Turn 'dbus' package into 'dbus-daemon' package, but keep 'dbus' for
    compatibility around and make it pull in the new 'dbus-daemon' package.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Extract 'dbus-common' package from 'dbus-daemon' to provide XML configuration
    and setup files as independent package ready for alternative Message Bus
    implementations to be used.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-2
changelog:
  - Extract 'dbus-tools' package from 'dbus-daemon' to provide all command-line
    utilities independent of the actual message bus. They are valid to be used
    with independent message-bus implementations, so they should not needlessly
    pull in dbus-daemon.


author: Martin Pitt <mpitt@redhat.com>
changelog:
  - Drop unpublished -doc package to fix FTBFS rhbz#1640736
  - Add dist-git smoketest rhbz#1625683
  - Move dbus system user creation to correct package rhbz#1634496


author: Marc Ewing <marc@redhat.com>
changelog:
  - started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu>
  - cleaned up file list
  - fixed up install-info support


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - include the private header file gmp-mparam.h because several
    apps seem to assume that they are building against the gmp
    source tree and require it.  Sigh.


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - merge in some debian gmp fixes
  - Ulrich Drepper's __gmp_scale2 fix
  - my mpf_set_q fix
  - sparc64 fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to the configure and makeinstall macros
  - FHS-compliance fixing
  - move docs to non-devel package


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not
  correctly identified as a 64 bit platform.


author: Trond Eivind Glomsrød <teg@redhat.com> 4.1-3
changelog:
  - Redefine the configure macro, the included configure 
    script isn't happy about the rpm default one (#68190). Also, make
    sure the included libtool isn't replaced,


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable mpfr  #104395
  - enable cxx  #80195
  - add COPYING.LIB
  - add fixes from gmp web-site
  - remove some cruft patches for older libtool releases


author: Jakub Jelinek <jakub@redhat.com> 4.1.4-11
changelog:
  - make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371)
  - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes


author: Karsten Hopp <karsten@redhat.com> 4.1.4-12
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/... requirements
  - use make install DESTDIR=...
  - replace tabs with spaces
  - convert changelog to utf-8


author: Ivana Varekova <varekova@redhat.com> 4.2.1-1
changelog:
  - update to 4.2.1
  - do some spec cleanups
  - fix 238794 - gmp-devel depends on {version} but not on 
    {version}-{release}
  - remove mpfr (moved to separate package)


author: Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1
changelog:
  - resolves: #702919
    update to 5.0.2
  - resolves: #738091
    removed unused direct shlib dependency on libm
    updated license in gmp.h and gmp-mparam.h files


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1
changelog:
  - rebase to 5.1.0, de-ansi patch no longer applicable
  - upstream dropped libmp.so (bsdmp-like interface)
  - silenced bogus date in changelog


author: Karsten Hopp <karsten@redhat.com> 6.0.0-3
changelog:
  - set default for BMOD_1_TO_MOD_1_THRESHOLD on ppc64, patch by 
    Torbjorn Granlund:
    https://gmplib.org/repo/gmp/rev/4a6d258b467f


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-13
changelog:
  - do not package sse2 variant, use --enable-fat instead (a bit dangerous, some low level routines will be skipped in `make check`)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-3
changelog:
  - Build process updated to correctly build .debug_info for i386
    and to correctly use hardening flags


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-8
changelog:
  - Missing fipschecks added into build process (bug #1553679)
  - --enable-fat option added to %configure (bug #1493218)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.1.2-9
changelog:
  - Add support for intel CET and -fcf-protection
  - Add missing compiler/linker flags
  Related: #1630567


author: Richard W.M. Jones <rjones@redhat.com> - 0.3-3
changelog:
  - Remove metric.dtd file from /etc (fixes rpmlint warning), but
    vhostmd.dtd has to remain because it is needed to validate the
    XML configuration file.
  - Remove ExclusiveArch, instead conditionally depend on xen-devel.
  - Use a better, less noisy, more minimal configuration file which
    doesn't depend on Xen.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.1.git326f0012172
changelog:
  - Move to pre-release of 0.4, self-built tarball.
  - Disable xenstore on non-x86 platforms.
  - Add patch to fix --without-xenstore option.
  - Use have_xen RPM macro.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.2.gitea2f772d
changelog:
  - New upstream based on git ea2f772d.
  - Update the configuration file based on upstream changes to how virsh
    has to be run.
  - vhostmd should run non-root as user 'vhostmd'.
  - Allow libvirt URI to be configured.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.5.gite9db007b
changelog:
  - New upstream based on git e9db007b.
  - Fix segfault in vm-dump-metrics (RHBZ#529348).
  - On error, vm-dump-metrics now exits with status code 1.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.6.gite9db007b
changelog:
  - Some changes to the default configuration file suggested by SAP to
    make it more CIM standards compliant.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-0.9.gite9db007b
changelog:
  - Add a timestamp to the metrics.
  - Fix a typo in MemoryAllocatedToVirtualServers metric
    (https://bugzilla.redhat.com/show_bug.cgi?id=532070#c7)
  - %{_sysconfdir}/sysconfig/vhostmd: Use libvirt default URI
    (https://bugzilla.redhat.com/show_bug.cgi?id=537828)
  - %{_sysconfdir}/init.d/vhostmd: If using libvirt's default URI, then pass
    the root URI to vhostmd (the default URI changes in some circumstances
    when vhostmd switches to the non-root user).


author: Richard W.M. Jones <rjones@redhat.com> - 0.4-2
changelog:
  - Fix the PagedOutMemory and PagedInMemory stats to report MB instead
    of pages (fixes supplied by Joachim Schneider).


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-6
changelog:
  - Completely disable Xen.  APIs seem to have changed incompatibly.
  - Add commits from upstream since 0.5.
  - Remove pagerate.pl when building on RHEL.
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-17
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7-12
changelog:
  - use %make_build %ldconfig_scriptlets %license
  - %build: --enable-shared=yes --enable-static=no --disable-silent-rules


author: Michal Sekletár <msekleta@redhat.com> - 0.7-19
changelog:
  - make sure we get compiled with -fstack-protector-strong (#1624099)
  - fix issues reported by coverity (#1602449)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.23-2.20081106gitbe42b4
changelog:
  - fix info uninstall
  - generate random command key in init script
  - support cyclelogs, online, offline commands in init script
  - add logrotate script


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-1
changelog:
  - update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294)
  - modify default config
    - step clock on start if it is off by more than 100 seconds
    - disable client log
  - build with -fPIE on sparc


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
changelog:
  - update to 20100428git73d775
  - replace initstepslew directive with makestep in default config
  - add NetworkManager dispatcher script
  - add dhclient script
  - retry server/peer name resolution at least once to workaround
    NetworkManager race condition on boot
  - don't verify chrony.keys


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.1.pre1
changelog:
  - update to 1.25-pre1
  - use iburst, four pool servers, rtcsync, stratumweight in default config
  - add systemd support
  - drop sysconfig file 
  - suppress install-info errors


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-0.1.pre1
changelog:
  - update to 1.26-pre1
  - fix service name in %triggerun
  - drop SysV init script
  - add chrony-wait service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-3.20110831gitb088b7
changelog:
  - update to git snapshot 20110831gitb088b7
  - on first start generate password with 16 chars
  - change systemd service type to forking
  - add forced-command to chrony-helper (#735821)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-5.20110831gitb088b7
changelog:
  - improve chrony-helper to keep track of servers added from DHCP (#787042)
  - fix dhclient script to always return with zero exit code (#767859)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844
changelog:
  - update to git snapshot 1ca844
  - update systemd integration (#846303)
  - use systemd macros if available (#850151)
  - use correct vendor pool.ntp.org zone on RHEL (#845981)
  - don't log output of chrony-wait service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-1
changelog:
  - update to 1.27
  - start chrony-wait service with chronyd
  - start chronyd service after sntp
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-2
changelog:
  - suppress error messages from tr when generating key (#907914)
  - fix delta calculation with extreme frequency offsets


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-3
changelog:
  - disable chrony-wait service by default (#961047)
  - drop old systemd scriptlets
  - don't own ntp-units.d directory
  - move files from /lib
  - remove unncessary dependency on syslog target


author: Miroslav Lichvar <mlichvar@redhat.com> 1.30-0.1.pre1
changelog:
  - update to 1.30-pre1
  - execute test suite
  - avoid calling systemctl in helper script
  - call chronyc directly from logrotate and NM dispatcher scripts
  - add conflict with systemd-timesyncd service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.31-1
changelog:
  - update to 1.31
  - add servers from DHCP with iburst option by default
  - use upstream configuration files and scripts
  - don't package configuration examples
  - compress chrony.txt


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1
  - extend chrony-helper to allow using servers from DNS SRV records (#1234406)
  - set random seed in testing to get deterministic results


author: Miroslav Lichvar <mlichvar@redhat.com> 2.2-0.1.pre1
changelog:
  - update to 2.2-pre1
  - enable seccomp support
  - use weak dependency for timedatex on Fedora 24 and later


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-4
changelog:
  - use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599)
  - fix seccomp filter for new glibc once again
  - don't drop PHC samples with zero delay


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
changelog:
  - fix chronyc getting stuck in infinite loop after clock step
  - don't allow packaging without vendor zone
  - suggest ntp-refclock
  - remove obsolete dependency
  - update description


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-2
changelog:
  - properly require install-info (patch by Ville Skyttä)
  - standard buildroot and use dist tag
  - add COPYING and README to doc


author: Tomas Mraz <tmraz@redhat.com> 2.4.1-1
changelog:
  - new upstream version
  - correct the license tag
  - explicit --with-included-opencdk not needed
  - use external lzo library, internal not included anymore


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage


author: Tomas Mraz <tmraz@redhat.com> 2.12.7-2
changelog:
  - fix problem when using new libgcrypt
  - split libgnutlsxx to a subpackage (#455146)
  - drop libgnutls-openssl (#460310)


author: Tomas Mraz <tmraz@redhat.com> 2.12.22-2
changelog:
  - rebuilt with new libtasn1
  - make guile bindings optional - breaks i686 build and there is
    no dependent package


author: Tomas Mraz <tmraz@redhat.com> 3.1.7-1
changelog:
  - new upstream version, requires rebuild of dependencies
  - this release temporarily includes old compatibility .so


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-1
changelog:
  - new upstream release
  - added dependency to autogen-libopts-devel to use the system's
    libopts library
  - added dependency to trousers-devel to enable TPM support


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-2
changelog:
  - Use the correct root key for unbound /var/lib/unbound/root.key (#1012494)
  - Pull asm fixes from upstream (#973210)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-2
changelog:
  - gnutls_global_deinit() will not do anything if the previous 
    initialization has failed (#1091053)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-4
changelog:
  - Replaced /etc/crypto-profiles/apps with /etc/crypto-policies/back-ends.
  - Added support for "very weak" profile.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.3-2
changelog:
  - Don't link against trousers but rather dlopen() it when available.
    That avoids a dependency on openssl by the main library.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.4-1
changelog:
  - new upstream release
  - no longer requires trousers patch
  - fixes issue in gnutls_x509_privkey_import (#1250020)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.6-1
changelog:
  - New upstream release (#1273672)
  - Enhances p11tool to write CKA_ISSUER and CKA_SERIAL_NUMBER (#1272178)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.7-1
changelog:
  - New upstream release (#1284300)
  - Documentation updates (#1282864)
  - Adds interface to set unique IDs in certificates (#1281343)
  - Allow arbitrary key sizes with ARCFOUR (#1284401)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.13-1
changelog:
  - New upstream release (#1343258)
  - Addresses issue with setuid programs introduced in 3.4.12 (#1343342)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-2
changelog:
  - Prevent the loading of all PKCS#11 modules on certificate verification
    but only restrict to p11-kit trust module (#1507402)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-3
changelog:
  - Corrected regression from 3.6.1-2 which prevented the loading of
    arbitrary p11-kit modules (#1507402)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-4
changelog:
  - Fixed support for ECDSA public keys (backported from Fedora)
  - Ensure that we do not cause issues with version rollback detection
    and TLS1.3.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.4-5
changelog:
  - Fix issue with GOST ciphers (#1644193)
  - Made gnutls-serv use the default priorities if none is specified (#1644243)


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-1
changelog:
  - Update to upstream 3.6.5 release
  - Fixes CVE-2018-16868 (#1655395)
  - Removed ldconfig scriptlet
  - Added explicit Requires for nettle >= 3.4.1


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-3
changelog:
  - Fixed CVE-2019-3829 (#1693285)
  - Fixed CVE-2019-3836 (#1693288)
  - Added explicit BuildRequires for nettle-devel >= 3.4.1


author: Daiki Ueno <dueno@redhat.com> - 3.6.8-6
changelog:
  - Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478)
  - Use deterministic ECDSA/DSA in FIPS selftests (#1716560)
  - Add gnutls_aead_cipher_{encrypt,decrypt}v2 functions (#1684461)


author: Peter Jones <pjones@redhat.com> - 2.3.0-2
changelog:
  - Once again, don't complain about compilers newer than tested with in the
    public headers.
  - Fix up bad %global vs %define directives
  - Fix up bad old changelog dates
  - Note there's a missing changelog here from the 2.3.0 rebase


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-1
changelog:
  - Update Source to upstream version 0.8.0
    * Previous patches 0001-0006 & 0015-0019 are included in this commit
  - Rename files
    * Previous patches 0007-0014 are now 0018-0025
    * Previous patches 0020-0023 are now 0001, 0006 & 0007
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
  - Add 0008-libmutipath-continue-to-use-old-state-on-PATH_PENDIN.patch
  - Add 0009-multipathd-use-update_path_groups-instead-of-reload_.patch
  - Add 0010-multipath.conf-add-missing-options-to-man-page.patch
  - Add 0011-libmultipath-add-get_uid-fallback-code-for-NVMe-devi.patch
  - Add 0012-libmulitpath-cleanup-uid_fallback-code.patch
  - Add 0013-multipathd-handle-changed-wwids-by-removal-and-addit.patch
    * Multipath will now automatically remove and re-add paths if
      their wwid changes
  - Add 0014-multipathd-remove-wwid_changed-path-attribute.patch
  - Add 0015-multipathd-ignore-disable_changed_wwids.patch
    * Since paths are now getting removed and re-added there is
      no need to disable them.
  - Add 0016-multipathd-Don-t-use-fallback-code-after-getting-wwi.patch
  - Add 0017-libmultipath-silence-dm_is_mpath-error-messages.patch
  - Add 0026-RH-Fix-nvme-compilation-warning.patch
  - Add 0027-Fix-systemd-version-detection.patch
    * The above 16 patches have been submitted upstream
  - Add 0028-RH-attempt-to-get-ANA-info-via-sysfs-first.patch
    * Red Hat has a sysfs method to access the ANA state, which isn't
      upstream, and will not be. This will probably go away in the
      future.
  - Resolves: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-2
changelog:
  - Add 0029-BZ-1700451-check-on-multipathd-without-starting-it.patch
  - Add 0030-BZ-1700451-test-socket-connection-in-non-blocking-mo.patch
    * the "multipath -u" call in 62-multipath.rules should no longer hang
      on multipathd startup.
  - Resolves: bz #1700451


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-3
changelog:
  - Add 0031-libmultipath-handle-clock_gettime-failures-in-tur-ch.patch
  - Add 0032-kpartx-fail-if-dup-of-dasd-file-descriptor-fails.patch
  - Add 0033-multipathd-fix-REALLOC_REPLY-with-max-length-reply.patch
  - Add 0034-multipathd-handle-NULL-return-from-genhelp_handler.patch
    * The above 4 patches have been submitted upstream
  - Related: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-4
changelog:
  - Add 0035-BZ-1700911-hwtable-add-Lenovo-DE-series.patch
  - Add 0036-libmultipath-make-vector_foreach_slot_backwards-work.patch
    * Fix for bz #1713459
  - Fixes for bz #1666322 and #1669097 were included in 0.8.0 upstream
    code
  - Resolves: bz #1666322, #1669097, #1700911, #1713459


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-436
changelog:
  - Update to new upstream snapshot with unbundled 3rd party software.
  - Follow upstream spec file changes.
  - Related: bz1173309


author: Honggang Li <honli@redhat.com> - 10.3.1.0-9
changelog:
  - Rebase to latest upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1382796


author: Ivana Varekova <varekova@redhat.com> - 3.04-1
changelog:
  - update to 3.04
  - remove mmap, sched_setaffinity, crypt and prctl patches
  - remove -f from rm commands
  - remove unnecessary/bogus rm commands


author: Ivana Hutarova Varekova <varekova@redhat.com> - 3.28-1
changelog:
  - update to 3.28
  - move all additional man-pages to one source
      (man-pages-additional-20101006.tar.bz2)
  - remove additional man-pages without the info about license


author: Ivana Hutarova Varekova <varekova@redhat.com> - 3.28-3
changelog:
  - don't remove numa_maps, now the man page is not in numactl
  - don't remove getipnodeby{name,addr}.3 and freehostent.3
    they are not more part of glibc-devel
  - fix typo in gai_{error,suspend,cancel} pages


author: Ivana Hutarova Varekova <varekova@redhat.com> - 3.31-5
changelog:
  - resolves: #672348
    problems with the encoding of characters set man-pages
    thanks Denis Barbier for a patch


author: Peter Schiffer <pschiffe@redhat.com> - 3.42-1
changelog:
  - resolves: #847941
    update to 3.42
  - updated additional man pages
  - cleaned patches
  - cleaned .spec file, fixed minor encoding issue
  - resolves: #837090
    updated example on inet(3) man page - use fprintf(stderr,..) instead of perror
  - resolves: #751429
    included initgroups database in the nsswitch.conf(5) man page
  - removed the sccs-related man pages (#203302)
  - added description of single-request-reopen to the resolv.conf(5) man page (#717770)
  - added missing EIDRM error code description to the shmop(2) man page (#800256)
  - added documentation of several source-specific multicast socket options to the ip(7) man page (#804003)
  - improved explanation about calling listen or connect on the ip(7) man page (#787567)
  - added information about incorrect use of getdents(2) call to the man page (#809490)
  - removed man-pages-3.22-sched_setaffinity.patch because the problem it describes was fixed in the kernel. see #533811 for more info
  - documented why to use shutdown() before close() when dealing with sockets on close(2) man page (#650985)
  - updated description of /proc/sys/fs/file-nr file in proc(5) man page (#497197)
  - updated zdump(8) man page to match current zdump usage (#517309)
  - fixed one incorrect error code on connect(2) man page (#392431)
  - fixed typo in sysconf(3) man page (#202092)
  - removed additional uuname(1) man page - was moved to the uucp package (#858642)
  - removed obsolete additional userisdnctl(8) man page


author: Peter Schiffer <pschiffe@redhat.com> - 3.43-1
changelog:
  - resolves: #866874
    updated to 3.43
  - added description of the TCP_CONGESTION on the tcp(7) man page
  - added description of the IP_MULTICAST_ALL on the ip(7) man page
  - updated additional man pages


author: Peter Schiffer <pschiffe@redhat.com> - 3.52-1
changelog:
  - resolves: #981385
    updated to 3.52
  - fixed broken sentence on the futex(7) man page
  - resolves: #885740
    documented O_PATH flag on the open(2) man page


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Lukas Nykryn <lnykryn@redhat.com> - 049-60.git20191129
changelog:
  - 99squash: Only start the cleaner on switch-root
  - net-lib: check if addr exists before checking for dad state
  - always include sg module


author: Lukas Nykryn <lnykryn@redhat.com> - 049-63.git20200114
changelog:
  - network-legacy/ifup: fix typo when calling dhclient --timeout
  - network-legacy/ifup: dhclient should be started in oneshot mode
  - modules/network-manager: Install `ip`


author: Lukas Nykryn <lnykryn@redhat.com> - 049-68.git20200211
changelog:
  - Revert "wait for IPv6 RA if using none/static IPv6 assignment"
  - dhclient-script: ipv6 uses different variables for nameservers
  - 40network: bump rd.net.timeout.carrier to 10 seconds


author: Ian Kent <ian.kent@pobox.com>
changelog:
  - Add patch to implement directory ghosting and direct mounts
  - Add patch to for autofs4 module to support ghosting


author: Ian Kent <raven@themaw.net>
changelog:
  - Cleaned up an restructured my added code
  - Corrected ghosting problem with 2.4.19 and above
  - Added autofs4 ghosting patch for 2.4.19 and above
  - Implemented HUP signal to force update of ghosted maps


author: Ian Kent <raven@themaw.net>
changelog:
  - Implemented LDAP direct map handling for nisMap and automountMap schema
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Added locking to fix overlapping internal calls to (u)mount 
  - Added wait for mtab~ to improve tolerance of overlapping external calls to (u)mount
  - Fixed ghosted directory removal after failed mount attempt


author: Ian Kent <raven@themaw.net>
changelog:
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Fixed autofs directory removal on failure of autofs mount
  - Fixed lock file wait function overlapping calls to (u)mount


author: Ian Kent <raven@themaw.net>
changelog:
  - Removed ineffective lock stuff
  - Added -n to bind mount to prevent mtab update error
  - Added retry to autofs umount to clean matb after fail
  - Redirected messages from above to debug log and added info message
  - Fixed autofs4 module reentrancy, pwd and chroot handling


author: Ian Kent <raven@themaw.net>
changelog:
  - Checked and merged most of the RedHat v3 patches
  - Fixed kernel module handling wu-ftpd login problem (again)


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-3
changelog:
  - Ported forward Red Hat's patches from 3.1.7 that were not already present
    in 4.1.0.
  - Moving autofs from version 3.1.7 to 4.1.0


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-4
changelog:
  - comment out /net and /misc from the default auto.master.  /net is important
    since in a default shipping install, we can neatly co-exist with amd.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-5
changelog:
  - make the init script only recognize redhat systems.  Nalin seems to remember
    some arcane build system error that can be caused if we don't do this.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.0-7
changelog:
  - Moved the freeing of ap.path to cleanup_exit, as we would otherwise 
    reference an already-freed variable.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-3
changelog:
  - Fix bug in get_best_mount, whereby if there is only one option, we 
    choose nothing.  This is primarily due to the fact that we pass 0 in to
    the get_best_mount function for the long timeout parameter.  So, we
    timeout trying to contact our first and only server, and never retry.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-5
changelog:
  - Clarify documentation on direct maps.
  - Send automount daemons a HUP signal during reload.  This tells them to 
    re-read maps (otherwise they use a cached version.  Patch from the autofs
    maintainer.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-6
changelog:
  - Add the /etc/sysconfig/autofs file, and supporting infrastructure in 
    the init script.
  - Add support for UNDERSCORE_TO_DOT for those who want it.
  - We no longer own /net.  Move it to the filesystem package.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-1
changelog:
  - Change hard-coded paths in the spec file to the %{_xxx} variety.
  - Update to upstream 4.1.2.
  - Add a STRIPDASH option to /etc/sysconfig/autofs which allows for
    compatibility with the Sun automounter options specification syntax in
    auto.master.  See /etc/sysconfig/autofs for more information.  Addresses
    bug 113950.


author: <jmoyer@redhat.com> - 1:4.1.2-2
changelog:
  - Pass --libdir= to ./configure so we get this right on 64 bit platforms that 
    support backwards compat.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-5
changelog:
  - Ian has a new fix for replicated server and multi-mounts.  Updated the 
    patch for testing.  Still beta.  (Ian Kent)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-6
changelog:
  - The lookup_yp module only dealt with YPERR_KEY, all other errors were 
    treated as success.  As a result, if the ypdomain was not bound, the 
    subprocess that starts mounts would SIGSEGV.  This is now fixed.
  - Option parsing in the init script was not precise enough, sometimes matching
    filesystem options to one of --ghost, --timeout, --verbose, or --debug.  
    The option-parsing patch addresses this issue by making the regexp's much
    more precise.
  - Ian has rolled a third version of the replicated mount fixes.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-2
changelog:
  - Incorporate patch from Ian which fixes an infinite loop seen by those
    running older versions of the kernel patches (triggered by non-strict mounts
    being the default).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-4
changelog:
  - Perform an icmp ping request before rpc_pings, since the rpc clnt_create
    function has a builtin default timeout of 60 seconds.  This could result
    in a long delay when a server in a replicated mount setup is down.
  - For non-replicated server entries, ping a host before attempting to mount.
    (Ian Kent)
  - Change to %configure.
  - Put version-release into .version to allow for automount --version to
    print exact info.
  - Nuke my get-best-mount patch which always uses the long timeout.  This
    should no longer be needed.
  - Put name into changelog entries to make them consistent.  Add e:n-v-r
    into Florian's entry.
  - Stop autofs before uninstalling


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-8
changelog:
  - Change icmp ping to an rpc ping.  (Ian Kent)
  - Fix i18n patch
    o Remove the extra \" from one echo line.
    o Use echo -e if we are going to do a \n in the echo string.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-10
changelog:
  - Add bad chdir patch from Ian Kent.
  - Add a typo fix for the mtab lock file.
  - Nuke the stripdash patch.  It didn't solve a problem.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-11
changelog:
  - Add beta map expiry code for wider testing. (Ian Kent)
  - Fix check for ghosting option.  I forgot to check for it in DAEMONOPTIONS.
  - Remove STRIPDASH from /etc/sysconfig/autofs


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-12
changelog:
  - Add a sysconfig entry to disable direct map support, and set this to 
    1 by default.
  - Disable the beta map expiry logic so I can build into a stable distro.
  - Add defaults for all of the sysconfig variables to the init script so 
    we don't trip over user errors (i.e. deleting /etc/sysconfig/autofs).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-13
changelog:
  - Only read one auto.master map (instead of concatenating all found sources).
  - Uncomment Ian's experimental mount expiry patch.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-14
changelog:
  - New map expiry patch from Ian.
  - Fix a couple signal races.  No known problem reports of these, but they
    are holes, none-the-less.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-15
changelog:
  - Fix a socket leak in the rpc_subs, causing mounts to fail since we are 
    running out of port space fairly quickly.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-17
changelog:
  - Add patch to support parsing nsswitch.conf to determine map sources.
  - Disable this patch, and Ian's map expiry patch for a FC build.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-18
changelog:
  - Umount loopback filesystems under automount points when stopping the 
    automounter.
  - Uncomment the map expiry patch.
  - change a close to an fclose in lookup_file.c


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-20
changelog:
  - Merged my and Ian's socket leak fixes into one, smaller patch. Only
    partially addresses bz #128966.
  - Fix some more echo lines for internationalization. bz #77820
  - Revert the only one auto.master patch until we implement the +auto_master
    syntax.  Temporarily addresses bz #133055.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-27
changelog:
  - Fixed an error in the init script which caused duplicate entries to be
    displayed when asking for autofs status.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-29
changelog:
  - Fixed a problem with backwards compatability. Specifying local
    maps without '/etc/' prepended to them now works. (bz #136038)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-32
changelog:
  - Fixed the use of +ypmapname so the maps included with +ypmapname
    are used in the correct order.  (In the past the '+' entries
    were always processed after local entries.)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-34
changelog:
  - Added a patch to fix the automounter failing on ldap maps
    when it couldn't get the whole map.  (ie. when the search
    limit was lower than the number of results)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-55
changelog:
  - Fix program maps so that they can have gt 4k characters. (Neil Horman)
    Addresses bz #138994.
  - Add a space after the colon here "Starting automounter:" in init script.
    Fixes bz #138513.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-57
changelog:
  - Pass a socket into clntudp_bufcreate so that we don't use up additional 
    reserved ports.  This patch, along with the socket leak fix, addresses
    bz #128966.


author: <jmoyer@redhat.com> - 1:4.1.3-74
changelog:
  - Add in the map expiry patch
  - Bring in other patches that have been committed to other branches. This 
    version should now contain all fixes we have to date
  - Merge conflicts due to map expiry changes


author: Chris Feist <cfeist@redhat.com> - 1:4.3-80
changelog:
  - Added a variable to determine if we created the directory or not
    so we don't accidently remove a directory that we didn't create when
    we stop autofs.  (bz #134399)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-90
changelog:
  - Fix potential double free in cache_release.  This bug showed up in a
    multi-map setup.  Two calls to cache_release would result in a SIGSEGV,
    and the automount process would never exit.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-98
changelog:
  - Program maps can repeat the last character of output.  Fix this.  
    Addresses bz #138606
  - Return first entry when there are duplicate keys in a map.  Addresses
    bz #140108.
  - Propagate custom map variables to submounts.  Fixes bz #143074.
  - Create a sysconfig variable to control whether we source only one master
    map (the way sun does), or source all maps found (which is the default for
    backwards compatibility).  Addresses bz #143126.
  - Revised version of the get_best_mount patch. (#146887) cfeist@redhat.com
    The previous patch introduced a regression.  Non-replicated mounts would
    not have the white space stripped from the entry and the mount would fail.
  - Handle comment characters in the middle of the automount line in
    /etc/nsswitch.conf.  Addresses bz #127457.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-100
changelog:
  - When using ldap if auto.master doesn't exist we now check for auto_master.
    Addresses bz #130079
  - When using an auto.smb map we now remove the leading ':' from the path which
    caused mount to fail in the past.  Addresses bz #147492
  - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis
    are checked when looking up autofs submount maps which don't specify a
    maptype.  Addresses IT #57612.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-111
changelog:
  - Fixed one off bug in the submount-variable-propagation patch.
    (bz #143074)
  - Fixed a bug in the init script which wouldn't find the -browse
    option if it was preceded by another option. (fz #113494)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-115
changelog:
  - Fixed regression causing any entries after a wildcard in an
    indirect map to be ignored. (bz #151668).
  - Fixed regression which caused local hosts to be mount instead
    of --bind local directories. (bz #146887)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-119
changelog:
  - Merge in the multi-over patch.  This resolves an issue whereby multimounts
    (such as those used for /net) could be processed in the wrong order,
    resulting in directories not showing up in a multimount tree.  The fix
    is to process these directories in order, shortest to longer path.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-123
changelog:
  - Add in an error case that was omitted in the multi-over patch.
  - Update our auto.net to reflect the changes that went into 4.1.4_beta2.
    This fixes a problem seen by at least one customer where a malformed entry
    appeared first in the multimount list, thus causing the entire multimount
    to be ignored.  This new auto.net places that entry at the end, purely by
    luck, but it fixes the problem in this one case.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-4
changelog:
  - Finish up with the merge breakage.
  - Temporary fix for the multimount detection code.  It seems half-baked.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-6
changelog:
  - Fix a race between mounting a share and updating the cache in the parent
    process.  If the mount completed first, the parent would not expire the
    stale entry, leaving it first on the list.  This causes map updates to not
    be recognized (well, worse, they are recognized after the first expire, but
    not subsequent ones).  Fixes a regression, bug #137026 (rhel3 bug).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-7
changelog:
  - I reversed the checking for multimount entries, breaking those configs!
    This update puts the code back the way it was before I broke it.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-8
changelog:
  - Add in the deferred syslog patch.  This fixes a hung automounter issue
    related to unsafe calls to syslog in signal handler context.


author: <jmoyer@redhat.com> - 1:4.1.4-10
changelog:
  - Fix some bugs in the parser
  - allow -net instead of /etc/auto.net
  - Fix a buffer overflow with large key lengths
  - Don't allow autofs to unlink files, only to remove directories
  - change to the upstream reentrant syslog patch from the band-aid deferred
    syslog patch.
  - Get rid of the init script patch that hard-coded the release to redhat.
    This should be handled properly by all red hat distros.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-12
changelog:
  - The sort command no longer accepts options of the form "+0".  This broke
    auto.net, so the option was removed.  Fixes bz #172111.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-14
changelog:
  - Removed the /misc entry from the default auto.master.  auto.misc has
    an entry for the cdrom device, and the preferred method of mounting the
    cd is via udev/hal.


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-16
changelog:
  - Replace check-is-multi with more general multi-parse-fix.
  - Add fix for premature return when waiting for lock file.
  - Update copyright declaration for reentrant-syslog source.
  - Add patch for configure option to disable locking during mount.
    But don't disable locking by default.
  - Add ability to handle automount schema used in Sun directory server.
  - Quell compiler warning about getsockopt parameter.
  - Quell compiler warning about yp_order parameter.


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-18
changelog:
  - Add patch to allow customization of arguments to the
    autofs-ldap-auto-master program (bz #187525).
  - Add patch to escap "#" characters in exports from auto.net
    program mount (bz#178304).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-20
changelog:
  - add patch to use "cifs" instead of smbfs and escape speces
    in share names (bz #163999, #187732).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-23
changelog:
  - add patch to ignore the "bg" and "fg" mount options as they
    aren't relevant for autofs mounts (bz #184386).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-1
changelog:
  - update source to version 5.0.0_beta3.
  - add patch to remove extra debug print.
  - add patch to
    - fix memory alloc error in nis lookup module.
    - add "_" to "." mapname translation to nis lookup module.
  - add patch to add owner pid to mount list struct.
  - add patch to disable NFSv4 when probing hosts (at least foe now).
  - add patch to fix white space handling in replicated server selection code.
  - add patch to prevent striping of debug info macro patch (Jeff Moyer).
  - add patch to add sanity checks on rmdir_path and unlink (Jeff Moyer).
  - add patch to fix e2fsck error code check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-3
changelog:
  - update hesiod module (Jeff Moyer).
    - add mutex to protect against overlapping mount requests.
    - update return from mount request to give more sensible NSS_*
      values.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-6
changelog:
  - add back test for nested mount in program map lookup.
    - I must have commented this out for a reason. I guess we'll
      find out soon enough.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-2
changelog:
  - re-instate v4 directory cleanup (bz# 193832 again).
  - backout master map lookup changes made to beta3.
  - change default master map from /etc/auto.master to auto.master
    so that we always use nsswitch to locate master map.
  - change default installed master map to include "+auto.master"
    to pickup NIS master map (all bz# 193831 again).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-4
changelog:
  - check base of offset mount tree is not a mount before umounting
    its offsets.
  - fix replicated mount parse for case where last name in list
    fails lookup.
  - correct indirect mount expire broken by the wildcard lookup fix.
  - fix up multi-mount handling when wildcard map entry present.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-6
changelog:
  - add free for working var in get_default_logging.
  - add inialisation for kver in autofs_point struct.
  - fix sources list corruption in check_update_map_sources.
  - fix memory leak in walk_tree.
  - fix memory leak in rpc_portmap_getport and rpc_ping_proto.
  - fix memory leak in initialisation of lookup modules.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-8
changelog:
  - fix handling of master map entry update (bz # 193718).
  - fix program map handling of invalid multi-mount offsets.


author: Jeff Moyer <jmoyer@redhat.com> - 5.0.0_beta4-12
changelog:
  - Change BuildPrereq to BuildRequires as per the package guidelines.
  - Add libxml2-devel to the BuildRequires, as it is needed for the LDAP
    authentication bits.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-13
changelog:
  - Change LDAP message severity from crit to degug (bz# 183893).
  - Corrections to INSTALL and README.v5.release.
  - Add patch to fix segv on overlength map keys in file maps (Jeff Moter).
  - Add patch to restrict scanning of /proc to pid directories only (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-3
changelog:
  - lookup_init cleanup and fix missed memory leak.
  - use nis map order to check if update is needed.
  - fix couple of memory leaks in lookup_yp.c.
  - fix pasre error in replicated server module.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-4
changelog:
  - correct spelling error in default config.
  - fix default auth config not being installed.
  - change LDAP query method as my test db was incorrect.
  - change ldap defaults code to handle missing auth config.
  - fix mistake in parsing old style LDAP specs.
  - update LDAP so that new query method also works for old syntax.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-5
changelog:
  - allow global macro defines to override system macros.
  - correct spelling error in default config files missed by
    previous update.
  - misc correctness and a memory leak fix.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-1
changelog:
  - consolidate to beta6, including:
    - mode change update for config file.
    - correction to get_query_dn fix from beta5-4.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-2
changelog:
  - merge LDAP authentication update for GSSAPI (Jeff Moyer).
  - update default auth config to add options documenetation (Jeff Moyer).
  - workaround segfaults at exit after using GSSAPI library.
  - fix not checking return in init_ldap_connection (jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-7
changelog:
  - correct directory cleanup in mount modules.
  - merge key and wildcard LDAP query for lookups (bz 197746).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.6
changelog:
  - cthon more parser corrections and attempt to fix multi-mounts
    with various combinations of submounts (still not right).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.14
changelog:
  - remove SIGCHLD handler because it is no longer needed and was
    causing expire problems.
  - alter expire locking of multi-mounts to lock sub-tree instead of
    entire tree.
  - review verbose message feedback and update.
  - correction for expire of multi-mounts.
  - spelling corrections to release notes (Jeff Moyer).
  - add back sloppy mount option, removed for Connectathon testing.
  - disable mtab locking again.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.15
changelog:
  - expire individual submounts.
  - add ino_index locking.
  - fix nested submount expiring away when pwd is base of submount.
  - more expire re-work to cope better with shutdown following cthon tests.
  - allow hostname to start with numeric when validating.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.16
changelog:
  - fix included map lookup.
  - fix directory cleanup on expire.
  - fix task cancelation at shutdown.
  - fix included map wild card key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.17
changelog:
  - fix task cancelation at shutdown (more)
  - fix concurrent mount and expire race with nested submounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.1
changelog:
  - consolidate to rc2.
  - fix colon escape handling.
  - fix recusively referenced bind automounts.
  - update kernel patches.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.5
changelog:
  - fix LDAP lookup delete cache entry only if entry doesn't exist.
  - add missing socket close in replicated host check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.7
changelog:
  - make default installed master map for /net use "-hosts" instead
    of auto.net.
  - fix included map recursive map key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.10
changelog:
  - fix get_query_dn not looking in subtree for LDAP search.
  - allow syntax "--timeout <secs>" for backward compatibility
    (bz 193948).
  - make masked_match independent of hostname for exports comparison
    (bz 209638).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.11
changelog:
  - fix file handle leak in nsswitch parser (bz 207678).
  - fix memory leak in mount and expire request processing (bz 207678).
  - add additional check to prevent running of cancelled tasks.
  - fix potential file handle leakage in rpc_subs.c for some failure
    cases (bz 207678).
  - fix file handle leak in included map lookup (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.12
changelog:
  - fix "-fstype=nfs4" server probing (part 2 of bz 208757).
  - set close-on-exec flag on open files where possible (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.16
changelog:
  - fix get_query_dn not looking in subtree for LDAP search (missed
    econd occurance).
  - allow additional common LDAP attributes in map dn.
  - Resolves: rhbz#205997


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.20
changelog:
  - Update patch for changed semantics of mkdir in recent kernels.
  - fix macro table locking (bz 208091).
  - fix nsswitch parser locking (bz 208091).
  - allow only one master map read task at a time.
  - fix misc memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.21
changelog:
  - mitigate manual umount of automounts where possible.
  - fix multiply recursive bind mounts.
  - check kernel module version and require 5.00 or above.
  - fix expire regression introduced in the "mitigate manual umount" patch.
  - still more on multiply recursive bind mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.23
changelog:
  - fix tokenizer to distinguish between global option and dn string (bz 214684).
  - fix incorrect return from spawn.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.26
changelog:
  - fix parsing of bad mount mount point in master map (bz 215620).
  - fix use after free memory access in cache.c and lookup_yp.c (bz 208091).
  - eliminate use of pthread_kill to detect task completion (bz 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.29
changelog:
  - alter nfs4 host probing to not use portmap lookup and add options
    check for "port=" parameter (bz 208757).
  - correct semantics of "-null" map handling (bzs 214800, 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.33
changelog:
  - expand export access checks to include missing syntax options.
  - make "-hosts" module try to be sensitive to exports list changes.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.34
changelog:
  - change mount "device" from "automount" to the map name.
  - check for buffer overflow in mount_afs.c.
  - replace tempnam with mkdtemp.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.38
changelog:
  - update master map tokenizer to admit "slasify-colons" option.
  - update location validation to accept "_" (bz 219445).
  - set close-on-exec flag on open sockets (bz 215757).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.41
changelog:
  - fix nonstrict multi-mount handling (bz 219383).
  - correct detection of duplicate indirect mount entries (bz 220799).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.5
changelog:
  - remove fullstop from Summary tag.
  - change Buildroot to recommended form.
  - replace Prereq with Requires.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.13
changelog:
  - make double quote handing consistent (at least as much as we can).
  - fix handling of trailing white space in wildcard lookup (forward port bz 199720).
  - check fqdn of each interface when matching export access list (bz 213700).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.17
changelog:
  - make use of spaces and tabs in spec file consistent.
  - escape embedded macro text in %changelog.
  - eliminate redundant %version and %release.
  - remove redundant conditional check from %clean.
  - remove redundant exit from %preun.
  - correct %defattr spec.
  - remove empty %doc and redundant %dir misc lines.
  - combine program module spec lines into simpler one line form.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.18
changelog:
  - update the "task done race" patch to fix a deadlock.
  - added URL tag.
  - removed obsoletes autofs-ldap.
  - replaced init directory paths with %{_initrddir} macro.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.24
changelog:
  - add "condrestart" to init script (bz 228860).
  - add "@network" and .domain.name export check.
  - fix display map name in mount entry for "-hosts" map.


author: Ian Kent <ikent@redhat.com> - 5.0.1-1
changelog:
  - update to release tar.
  - fix return check for getpwuid_r and getgrgid_r.
  - patch to give up trying to update exports list while host is mounted.
  - fix to "@network" matching. 
  - patch to check for fstab update and retry if not updated.


author: Ian Kent <ikent@redhat.com> - 5.0.1-5
changelog:
  - drop "DEFAULT_" prefix from configuration names.
  - add option to select replicated server at random (instead of
    ping response time) (bz 227604).
  - fix incorrect cast in directory cleanup routines (bz 231864).


author: Ian Kent <ikent@redhat.com> - 5.0.1-6
changelog:
  - fix directory creation for browse mounts.
  - fix wildcard map handling and improve nsswitch source map update.


author: Ian Kent <ikent@redhat.com> - 5.0.1-8
changelog:
  - add configuration variable to control appending of global options (bz 214684).
  - add command option to set a global mount options string (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-9
changelog:
  - upstream fix for filesystem is local check.
  - disable exports access control check (bz 203277).
  - fix patch to add command option for set a global mount options (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-16
changelog:
  - add ldaps support.
    - note: it's no longer possible to have multiple hosts in an ldap map spec.
    - note: to do this you need to rely on the ldap client config.


author: Ian Kent <ikent@redhat.com> - 5.0.2-2
changelog:
  - include krb5.h in lookup_ldap.h (some openssl doesn't implicitly include it).
  - correct initialization of local var in parse_server_string.


author: Ian Kent <ikent@redhat.com> - 5.0.2-5
changelog:
  - fix mount point directory creation for bind mounts.
  - add quoting for exports gathered by hosts map.


author: Ian Kent <ikent@redhat.com> - 5.0.2-10
changelog:
  - mark map instances stale so they aren't "cleaned" during updates.
  - fix large file compile time option.


author: Ian Kent <ikent@redhat.com> - 5.0.2-11
changelog:
  - don't fail on empty master map.
  - add support for the "%" hack for case insensitive attribute schemas.


author: Ian Kent <ikent@redhat.com> - 5.0.2-14
changelog:
  - update patch to prevent failure on empty master map.
  - if there's no "automount" entry in nsswitch.conf use "files" source.
  - add LDAP schema discovery if no schema is configured.


author: Ian Kent <ikent@redhat.com> - 5.0.2-16
changelog:
  - add descriptive comments to config about LDAP schema discovery.
  - work around segfault at exit caused by libxml2.
  - fix foreground logging (also fixes shutdown needing extra signal bug).


author: Ian Kent <ikent@redhat.com> - 5.0.2-18
changelog:
  - fix schema selection in LDAP schema discovery.
  - check for "*" when looking up wildcard in LDAP.
  - fix couple of edge case parse fails of timeout option.
  - add SEARCH_BASE configuration option.
  - add random selection as a master map entry option.
  - re-read config on HUP signal.
  - add LDAP_URI, LDAP_TIMEOUT and LDAP_NETWORK_TIMEOUT configuration options.
  - fix deadlock in submount mount module.
  - fix lack of ferror() checking when reading files.
  - fix typo in autofs(5) man page.
  - fix map entry expansion when undefined macro is present.
  - remove unused export validation code.
  - add dynamic logging (adapted from v4 patch from Jeff Moyer).
  - fix recursive loopback mounts (Matthias Koenig).
  - add map re-load to verbose logging.
  - fix handling of LDAP base dns with spaces.
  - handle MTAB_NOTUPDATED status return from mount.
  - when default master map, auto.master, is used also check for auto_master.
  - update negative mount timeout handling.
  - fix large group handling (Ryan Thomas).
  - fix for dynamic logging breaking non-sasl build (Guillaume Rousse).
  - eliminate NULL proc ping for singleton host or local mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.2-21
changelog:
  - Bug 421371: CVE-2007-5964 autofs defaults don't restrict suid in /net [rawhide]
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.2-23
changelog:
  - Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
    - prevent fork between fd open and setting of FD_CLOEXEC.


author: Ian Kent <ikent@redhat.com> - 5.0.2-25
changelog:
  - Bug 426401: CVE-2007-6285 autofs default doesn't set nodev in /net [rawhide]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.3-3
changelog:
  - catch "-xfn" map type and issue "no supported" message.
  - another correction for handling of LDAP base dns with spaces.


author: Ian Kent <ikent@redhat.com> - 5.0.3-4
changelog:
  - correction to the correction for handling of LDAP base dns with spaces.
  - avoid using UDP for probing NFSv4 mount requests.
  - use libldap instead of libldap_r.


author: Ian Kent <ikent@redhat.com> - 5.0.3-6
changelog:
  - fix expire calling kernel more often than needed.
  - fix unlink of mount tree incorrectly causing autofs mount fail.
  - add miscellaneous device node interface library.
  - use miscellaneous device node, if available, for active restart.
  - device node and active restart fixes.
  - update is_mounted to use device node ioctl, if available.


author: Ian Kent <ikent@redhat.com> - 5.0.3-8
changelog:
  - revert miscellaneous device node related patches.
  - add missing check for zero length NIS key.
  - fix incorrect match of map type name when included in map name.
  - update rev 7 sasl callbacks patch.


author: Ian Kent <ikent@redhat.com> - 5.0.3-18
changelog:
  - don't abuse the ap->ghost field on NFS mount.
  - multi-map doesn't pickup NIS updates automatically.
  - eliminate redundant DNS name lookups.
  - mount thread create condition handling fix.
  - allow directory create on NFS root.
  - check direct mount path length.
  - fix incorrect in check in get user info.
  - fix a couple of memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.3-21
changelog:
  - add upstream bug fix patches
    - add command line option to override is running check.
    - don't use proc fs for is running check.
    - fix fail on included browse map not found.
    - fix incorrect multi source messages.
    - clear stale flag on map read.
    - fix proximity other rpc ping timeout.
    - refactor mount request vars code.
    - make handle_mounts startup condition distinct.
    - fix submount shutdown handling.
    - try not to block on expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - fix nfs4 colon escape handling.
    - check replicated list after probe.
    - add replicated server selection debug logging.
    - update replicated server selection documentation.
    - use /dev/urandom instead of /dev/random.
    - check for mtab pointing to /proc/mounts.
    - fix interface config buffer size.
    - fix percent hack heap corruption.


author: Ian Kent <ikent@redhat.com> - 5.0.3-23
changelog:
  - add upstream bug fixes
    - bug fix for mtab check.
    - bug fix for zero length nis key.
    - update for ifc buffer handling.
    - bug fix for kernel automount handling.
  - warning: I found a bunch of patches that were present but not
    being applied.


author: Ian Kent <ikent@redhat.com> - 5.0.3-25
changelog:
  - fix fd leak at multi-mount non-fatal mount fail.
  - fix incorrect multi-mount mountpoint calcualtion.


author: Ian Kent <ikent@redhat.com> - 5.0.3-26
changelog:
  - add map-type-in-map-name fix patch to sync with upstream and RHEL.
  - don't readmap on HUP for new mount.
  - add NIS_PARTIAL to map entry not found check and fix use after free bug.


author: Ian Kent <ikent@redhat.com> - 5.0.3-28
changelog:
  - don't close file handle for rootless direct mounti-mount at mount.
  - wait submount expire thread completion when expire successful.
  - add inadvertantly ommitted server list locking in LDAP module.


author: Ian Kent <kent@redhat.com> - 5.0.3-30
changelog:
  - fix segv during library re-open.
  - fix incorrect pthreads condition handling for expire requests.
  - fix master map lexer eval order.
  - fix bad alloca usage.


author: Ian Kent <kent@redhat.com> - 5.0.4-5
changelog:
  - fix negative caching of non-existent keys.
  - fix ldap library detection in configure.
  - use CLOEXEC flag functionality if present.
  - fix select(2) fd limit.
  - make hash table scale to thousands of entries.


author: Ian Kent <ikent@redhat.com> - 5.0.4-8
changelog:
  - rename program map parsing bug fix patch.
  - use CLOEXEC flag functionality for setmntent also, if present.


author: Ian Kent <ikent@redhat.com> - 5.0.4-9
changelog:
  - fix hosts map use after free.
  - fix uri list locking (again).
  - check for stale SASL credentials upon connect fail.
  - add "forcestart" and "forcerestart" init script options to allow
    use of 5.0.3 strartup behavior if required.
  - always read entire file map into cache to speed lookups.
  - make MAX_ERR_BUF and PARSE_MAX_BUF use easier to audit.
  - make some easy alloca replacements.
  - update to configure libtirpc if present.
  - update to provide ipv6 name and address support.
  - update to provide ipv6 address parsing.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-15
changelog:
  - fix array out of bounds accesses and cleanup couple of other alloca() calls.
  - Undo mistake in copy order for submount path introduced by rev 11 patch.
  - add check for alternate libxml2 library for libxml2 tsd workaround.
  - add check for alternate libtirpc library for libtirpc tsd workaround.
  - cleanup configure defines for libtirpc.
  - add WITH_LIBTIRPC to -V status report.
  - add libtirpc-devel to BuildRequires.
  - add nfs mount protocol default configuration option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-21
changelog:
  - fix file map lookup when reading included or nsswitch sources.
    - a regression introduced by file map lookup optimisation in rev 9.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-26
changelog:
  - fix lsb init script header.
  - fix memory leak reading ldap master map.
  - fix st_remove_tasks() locking.
  - reset flex scanner when setting buffer.
  - zero s_magic is valid.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-28
changelog:
  - use intr option as hosts mount default.
  - sync kernel includes with upstream kernel.
  - dont umount existing direct mount on master re-read.
  - fix incorrect shutdown introduced by library relaod fixes.
  - improve manual umount recovery.
  - dont fail on ipv6 address when adding host.
  - always read file maps multi map fix.
  - always read file maps key lookup fixes.
  - add support for LDAP_URI="ldap:///<domain db>" SRV RR lookup.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-30
changelog:
  - fix incorrect dclist free.
  - srv lookup handle endianness.
  - fix bug introduced by library reload changes which causes autofs to
    not release mount thread resources when using submounts.
  - fix notify mount message path.
  - try harder to work out if we created mount point at remount.
  - fix double free in do_sasl_bind().
  - manual umount recovery fixes.
  - fix map type info parse error.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-32
changelog:
  - fix an RPC fd leak.
  - don't block signals we expect to dump core.
  - fix pthread push order in expire_proc_direct().


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-39
changelog:
  - fix libxml2 non-thread-safe calls.
  - fix direct map cache locking.
  - fix patch "dont umount existing direct mount on reread" deadlock.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-1
changelog:
  - update source to latest upstream version.
    - this is essentially a consolidation of the patches already in this rpm.
  - add dist tag to match latest RHEL-5 package tag format.


author: Ian Kent <kent@redhat.com> - 1:5.0.5-2
changelog:
  - fix included map read fail handling.
  - refactor ldap sasl authentication bind to eliminate extra connect
    causing some servers to reject the request. 
  - add mount wait parameter to allow timeout of mount requests to
    unresponsive servers.
  - special case cifs escape handling.
  - fix libxml2 workaround configure.
  - more code analysis corrections (and fix a typo in an init script).
  - fix backwards #ifndef INET6.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-6
changelog:
  - don't use master_lex_destroy() to clear parse buffer.
  - make documentation for set-log-priority clearer.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-17
changelog:
  - dont connect at ldap lookup module init.
  - fix random selection option.
  - fix disable timeout.
  - fix strdup() return value check.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-22
changelog:
  - fix get query dn failure.
  - fix ampersand escape in auto.smb.
  - add locality as valid ldap master map attribute.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-25.fc14
changelog:
  - make nfs4 default for replicated selection configuration (bz579949).
  - add simple bind authentication option (bz579951).


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-27.fc14
changelog:
  - fix master map source server unavailable handling.
  - add autofs_ldap_auth.conf man page.
  - fix random selection for host on different network.
  - make redhat init script more lsb compliant.
  - don't hold lock for simple mounts.
  - fix remount locking.
  - fix wildcard map entry match.
  - fix parse_sun() module init.
  - dont check null cache on expire.
  - fix null cache race.
  - fix cache_init() on source re-read.
  - fix mapent becomes negative during lookup.
  - check each dc server individually.
  - fix negative cache included map lookup.
  - remove state machine timed wait.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-28
changelog:
  - remove extra read master map call.
  - remove extra cache create call in master_add_map_source().
  - fix error handing in do_mount_indirect().
  - expire thread use pending mutex.
  - explicity link against the Kerberos library.
  - remove some log message duplication for verbose logging.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-32.fc15
changelog:
  - always read file maps mount lookup map read fix.
  - fix direct map not updating on reread.
  - add external bind method.
  - fix add simple bind auth.
  - add option to dump configured automount maps.
  - wait for master map to be available at start.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-36
changelog:
  - use weight only for server selection.
  - fix isspace() wild card substition.
  - auto adjust ldap page size.
  - fix prune cache valid check.
  - fix mountd vers retry.
  - fix expire race.
  - add lsb force-reload and try-restart.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-3
changelog:
  - improve mount location error reporting.
  - fix paged query more results check.
  - fix dumpmaps not reading maps.
  - fix result null check in read_one_map().
  - Fix LDAP result leaks on error paths.
  - code analysis fixes 1.
  - fix not bind mounting local filesystem.
  - update dir map-type patch for changed patch order.
  - fix wait for master source mutex.
  - fix submount shutdown race
  - fix fix map source check in file lookup.
  - add disable move mount configure option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-5
changelog:
  - fix ipv6 name lookup check.
  - fix ipv6 rpc calls.
  - fix ipv6 configure check.
  - add piddir to configure.
  - add systemd unit support.
  - fix MNT_DETACH define.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-9
changelog:
  - add correct patch for "fix improve mount location error reporting".
  - add correct patch for "fix fix wait for master source mutex".


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-12
changelog:
  - ignore duplicate exports in auto.net.
  - add kernel verion check function.
  - add function to check mount.nfs version.
  - reinstate singleton mount probe.
  - rework error return handling in rpc code.
  - catch EHOSTUNREACH and bail out early.
  - systemd support fixes.
  - fix segmentation fault in do_remount_indirect().


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-15
changelog:
  - fix typo in libtirpc file name.
  - fix rework error return handling in rpc code.
  - allow MOUNT_WAIT to override probe.
  - improve UDP RPC timeout handling.
  - fix segfault in get_query_dn().
  - use strtok_r() in linux_version_code().
  - fix sss wildcard match.
  - fix dlopen() error handling in sss module.
  - fix configure string length tests for sss library.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix fix LDAP result leaks on error paths.
  - report map not read when debug logging.
  - duplicate parent options for included maps.
  - update ->timeout() function to not return timeout.
  - move timeout to map_source.
  - fix kernel verion check of version components.
  - dont retry ldap connect if not required.
  - check if /etc/mtab is a link to /proc/self/mounts.
  - fix nfs4 contacts portmap.
  - make autofs wait longer for shutdown.
  - fix sss map age not updated.
  - fix remount deadlock.
  - fix umount recovery of busy direct mount.
  - fix offset mount point directory removal.
  - remove move mount code and configure option.
  - fix remount of multi mount.
  - fix devce ioctl alloc path check.
  - refactor hosts lookup module.
  - remove cache update from parse_mount().
  - add function to delete offset cache entry.
  - allow update of multi mount offset entries.
  - add hup signal handling to hosts map.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix systemd argument passing.
  - fix get_nfs_info() can incorrectly fail.
  - fix offset directory removal.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-3
changelog:
  - fix nobind sun escaped map entries.
  - fix use cache entry after free mistake.
  - fix ipv6 proximity calculation.
  - fix parse buffer initialization.
  - fix typo in automount(8).


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-4
changelog:
  - include usage in usage message.
  - dont wait forever to restart.
  - add option description to man page.
  - fix null map entry order handling.
  - make description of default MOUNT_WAIT setting clear.
  - configure.in: allow cross compilation.
  - README: update mailing list subscription info.
  - allow non root user to check status.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-6
changelog:
  - fix recursive mount deadlock.
  - increase file map read buffer size.
  - handle new location of systemd.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-8
changelog:
  - fix map entry duplicate offset detection.
  - Allow nsswitch.conf to not contain "automount:" lines.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-10
changelog:
  - fix submount offset delete.
  - fix init script status return.
  - fix use get_proximity() without libtirpc.
  - don't use dirent d_type to filter out files in scandir().
  - don't schedule new alarms after readmap.
  - use numeric protocol ids instead of protoent structs.
  - lib/defaults.c: use WITH_LDAP conditional around LDAP types.
  - make yellow pages support optional.
  - modules/replicated.c: use sin6_addr.s6_addr32.
  - workaround missing GNU versionsort extension.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-12
changelog:
  - dont fail on master map self include.
  - fix wildcard multi map regression.
  - fix file descriptor leak when reloading the daemon.
  - depricate nosymlink pseudo option.
  - add symlink pseudo option.
  - update kernel include files.
  - fix requires in spec file.
  - fix libtirpc build option.
  - fix systemd unidir in spec file.
  - document browse option in man page.
  - fix automounter support on parisc.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-16
changelog:
  - make dump maps check for duplicate indirect mounts (bz961312).
  - document allowed map sources in auto.master(5) (bz961312).
  - add enable sloppy mount option to configure.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-20
changelog:
  - fix master map mount options matching.
  - fix master map bogus keywork match.
  - fix fix map entry duplicate offset detection.
  - add a number of fixes based on a Covarity report.


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-3
changelog:
  - fix undefined authtype_requires_creds err if ldap enabled but without sasl.
  - fix master map type check.
  - fix task manager not getting signaled.


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-4
changelog:
  - allow --with-systemd to take a path arg.
  - fix WITH_LIBTIRPC function name.
  - fix ipv6 libtirpc getport (bz1033918).


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-5
changelog:
  - fix ipv6 link local address handling.
  - fix fix ipv6 libtirpc getport.
  - get_nfs_info() should query portmapper if port is not given.
  - fix rpc_portmap_getport() proto not set.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-0.beta1.1
changelog:
  - amd lookup update lookup ldap to handle amd keys
    - inadvertantly drop from initial series.
  - amd lookup update lookup hesiod to handle amd keys
    - inadvertantly drop from initial series.
  - fix wildcard key lookup.
  - check for non existent negative entries in lookup_ghost().


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-1
changelog:
  - update to upstream release, 5.1.0.
    - fix reset flex scan buffer on init.
    - fix fix negative status being reset on map read.
    - fix out of order amd timestamp lookup.
    - fix ldap default schema config.
    - fix ldap default master map name config.
    - fix map format init in lookup_init().
    - fix incorrect max key length in defaults get_hash().
    - fix xfn sets incorrect lexer state.
    - fix old style key lookup.
    - fix expire when server not responding.
    - fix ldap_uri config update.
    - fix typo in conf_load_autofs_defaults().
    - fix hash on confg option add and delete.
    - add plus to path match pattern.
    - fix multi entry ldap option handling.
    - cleanup options in amd_parse.c.
    - allow empty value for some map options.
    - allow empty value in macro selectors.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-3
changelog:
  - fix compile error in defaults.c.
  - add serialization to sasl init.
  - dont allocate dev_ctl_ops too early.
  - fix incorrect round robin host detection.
  - fix race accessing qdn in get_query_dn().
  - fix leak in cache_push_mapent().
  - fix config entry read buffer not checked.
  - fix FILE pointer check in defaults_read_config().
  - fix memory leak in conf_amd_get_log_options().
  - fix signed comparison in inet_fill_net().
  - fix buffer size checks in get_network_proximity().
  - fix leak in get_network_proximity().
  - fix buffer size checks in merge_options().
  - check amd lex buffer len before copy.
  - add return check in ldap check_map_indirect().
  - check host macro is set before use.
  - check options length before use in parse_amd.c.
  - fix some out of order evaluations in parse_amd.c.
  - fix copy and paste error in dup_defaults_entry().


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-7
changelog:
  - force disable browse mode for amd format maps.
  - fix hosts map options check in lookup_amd_instance().
  - fix memory leak in create_client().
  - fix memory leak in get_exports().
  - fix memory leak in get_defaults_entry().
  - fix out of order clearing of options buffer.
  - fix reset amd lexer scan buffer.
  - ignore multiple commas in options strings.
  - fix typo in flagdir configure option.
  - clarify multiple mounts description.
  - gaurd against incorrect umount return.
  - update man page autofs(8) for systemd.
  - remove ancient kernel Requires.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-9
changelog:
  - fix custom autofs.conf not being installed.
  - init qdn before use in get_query_dn().
  - fix typo in update_hosts_mounts().
  - fix hosts map update on reload.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-10
changelog:
  - make negative cache update consistent for all lookup modules.
  - ensure negative cache isn't updated on remount.
  - dont add wildcard to negative cache.
  - make service want network-online (bz1071591).


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-5
changelog:
  - actually apply fix use after free in do_master_list_reset().
  - fix deadlock in dumpmaps.
  - fix rpcgen dependency problem.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-6
changelog:
  - dont use array for path when not necessary.
  - fix prefix option handling in expand_entry().
  - fix sublink option not set from defaults.
  - fix error return in do_nfs_mount().


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-7
changelog:
  - add error handling for ext_mount_add().
  - account for recent libnsl changes.
  - use_hostname_for_mounts shouldn't prevent selection among replicas.
  - fix monotonic_elapse.
  - Makefiles.rules: remove 'samples' from SUBDIRS.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-12
changelog:
  - dont allow trailing slash in master map mount points.
  - fix libresolv configure check.
  - add fedfs-getsrvinfo.c.
  - add mount.fedfs.c.
  - add fedfs-map-nfs4.c
  - add conditional inclusion of fedfs binaries.
  - add an example fedfs master map entry to the installed master map.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-16
changelog:
  - tiny patch for autofs typo and possible bug.
  - add units After line to include statd service.
  - use systemd sd_notify() at startup.
  - add "BuildRequires: systemd-devel".
  - fix NFS version mask usage.
  - fix incorrect date in changelog.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-17
changelog:
  - bz1577700 - automount leaves FDs in half-open state
    - fix fd leak in rpc_do_create_client().
  - Resolves: rhbz#1577700


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-18
changelog:
  - bz1593492 - Ignore trailing slashes at the end of executable maps in
    auto.master config file
    - add-man page note about extra slashes in paths
  - Resolves: rhbz#1593492


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-19
changelog:
  - bz1602447 - Please review important issues found by covscan in
    "autofs-5.1.4-18.el8+7"
    - covarity fixes.
  -Resolves: rhbz#1602447


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-20
changelog:
  - bz1612565 - Man page scan results for autofs
    - fix program usage message.
  - Resolves: rhbz#1612565


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-21
changelog:
  - bz1611866 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - bz1613621 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1611866 rhbz#1613621


author: Ian Kent <ikent@redhat.com> - 5.1.4-22
changelog:
  - bz1613630 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1613630


author: Ian Kent <ikent@redhat.com> - 5.1.4-23
changelog:
  - bz1615782 - autofs master map age is incorrectly set
    - fix age setting at startup.
  - Resolves: rhbz#1615782


author: Ian Kent <ikent@redhat.com> - 5.1.4-24
changelog:
  - bz1621938 - autofs can no longer get maps from IPA server
    - fix use after free in parse_ldap_config().
  - Resolves: rhbz#1621938


author: Ian Kent <ikent@redhat.com> - 5.1.4-26
changelog:
  - bz1630190 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  - bz1630194 - after upgrading to autofs-5.0.7-83.el7.x86_64 on
    RHEL 7 clients, amd maps /defaults key mount options are no
    longer working
    - fix amd parser opts option handling.
  - Resolves: rhbz#1630190 rhbz#1630194


author: Ian Kent <ikent@redhat.com> - 5.1.4-27
changelog:
  - bz1638487 - Drop dependency on hesiod
    - better handle hesiod support not built in.
    - exclude hesiod support from configure options
    - remove hesiod depends.
  - Resolves: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-28
changelog:
  - bz1638487 - Drop dependency on hesiod
    - actually update the spec file with the hesiod removal.
  - Related: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-29
changelog:
  - bz1654541 - autofs crash when parsing master map
    - fix hesiod string check in master_parse().
  - Resolves: rhbz#1654541


author: Ian Kent <ikent@redhat.com> - 5.1.4-30
changelog:
  - bz1689469 - [autofs] The log no longer print PID of automount process
    - remove autofs4 module load code.
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1689469


author: Ian Kent <ikent@redhat.com> - 5.1.4-31
changelog:
  - bz1689467 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1689467


author: Ian Kent <ikent@redhat.com> - 5.1.4-32
changelog:
  - bz1703876 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1703876


author: Ian Kent <ikent@redhat.com> - 5.1.4-33
changelog:
  - bz1689466 - Sanitize autofs logging
    - make expire remaining log level debug.
  - bz1685805 - autofs doesn't expand macros in amd map selectors
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1689466 rhbz#1685805


author: Ian Kent <ikent@redhat.com> - 5.1.4-34
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - add gating.yaml for manual gate testing.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-35
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - correct test name in gating.yaml.
  - Related: rhbz#1681956


author: Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-2
changelog:
  - split from tcpdump package (#193657)
  - update to 2.1a15
  - clean up files in /var
  - force linking with system libpcap


author: Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-6
changelog:
  - improve init script (#246869)
  - allow -n 0/32 to disable reporting bogons from 0.0.0.0 (#244606)
  - update license tag
  - update ethercodes.dat


author: Miroslav Lichvar <mlichvar@redhat.com> 14:2.1a15-13
changelog:
  - update ethercodes.dat (#577552)
  - mark ethercodes.dat as noreplace
  - fix init script LSB compliance
  - include Debian arp2ethers and massagevendor man pages (#526160)
  - don't include massagevendor-old script anymore


author: Ales Ledvinka <aledvink@redhat.com> - 14:2.1a15-26
changelog:
  - fix permissions related to collected database
  - update ethcodes defaults to current public IEEE OUI-32


author: Charles R. Anderson <cra@wpi.edu> - 2008_10_13-10
changelog:
  - Patch to apply CFLAGS/LDFLAGS to final link so RPM_OPT_FLAGS are picked up (rhbz#1548426)
  - Use CC=gcc explicitly
  - Regenerate fxload-noa3load.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.3.1-1
changelog:
  - New version
    Resolves: rhbz#1548222
  - Updated libnsl2 library and header paths
    Resolves: rhbz#1543928
  - Updated license for dual licensing


author: Hans de Goede <hdegoede@redhat.com> - 1.0.21-0.1.git448584a
changelog:
  - Update to a pre 1.0.21 git snapshot to bring in libusb_interrupt_event_handler
    which chromium needs (rhbz#1270324)


author: Ben Skeggs <bskeggs@redhat.com> 20090106-2
changelog:
  - Add firmware needed for nouveau to operate correctly (this is Fedora
    only - do not upstream yet - we just moved it here from Fedora kernel)


author: Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954
changelog:
  - Fix location of BuildRequires so git is inclued in the buildroot
  - Create iwlXXXX-firmware subpackages (rhbz 828050)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959)
  - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)


author: Kyle McMartin <kyle@redhat.com> - 20130418-0.2.gitb584174
changelog:
  - UsrMove: move firmware to /usr/lib/firmware
  - Remove duplicate /usr/lib/firmware/updates entry (already in linux-firmware.dirs)
  - Simplify sed by using '!' instead of '/' as regexp delimiter
  - Fix date error (commited on Mon Feb 04, so change that entry)


author: Kyle McMartin <kyle@redhat.com> - 20130418-25.gitb584174
changelog:
  - Use a common version number for both the iwl*-firmware packages and
    linux-firmware itself.
  - Don't reference old kernel-firmware package in %description


author: Josh Boyer <jwboyer@redhat.com> - 20130724-28.git31f6b30
changelog:
  - Temporarily remove AMD microcode (rhbz 988263)
  - Remove Creative CA0132 HD-audio files as they're in alsa-firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20140131-35.gitd7f8a7c8
changelog:
  - Update to new snapshot
  - Updates for Intel 3160/7260, radeon HAWAII GPUs, and some rtlwifi chips
  - Fixes bugs 815579 1046935


author: Josh Boyer <jwboyer@fedoraproject.org> - 20140605-38.gita4f3bc03
changelog:
  - Updates for Intel 3160/7260/7265 firmware (1087717)
  - Add firmware for rtl8723be (rhbz 1091753)
  - Updates for radeon CIK, SI/CI, and Mullins/Beema GPUs (rhbz 1094153)
  - Various other firmware updates


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Update to latest upstream git snapshot for new radeon firmware (rhbz 1130738)
  - Fix versioning after mass rebuild and for iwl5000-firmware (rhbz 1130979)


author: Josh Boyer <jwboyer@fedoraproject.org> 20150521-52.git3161bfa4
changelog:
  - Update to latest upstream git snapshot
  - Updated iwlwifi 316x/726x firmware
  - Add cx18-firmware Obsoletes from David Ward (rhbz 1222164)


author: Josh Boyer <jwboyer@fedoraproject.org> 20150715-54.git69640304
changelog:
  - Update to latest upstream git snapshot
  - New iwlwifi firmware for 726x/316x/8000 devices
  - New firmware for i915 skylake and radeon devices
  - Various other updates


author: Josh Boyer <jwboyer@fedoraproject.org> 20151130-59.gita109a8ff
changelog:
  - Update to latest upstream snapshot
  - Includes -16 ucode for iwlwifi, skylake dmc and audio updates, brcm updates
    bnx2x, and others


author: Josh Boyer <jwboyer@fedoraproject.org> 20160316-62.gitdeb1d836
changelog:
  - Update to latest upstream snapshot
  - New firmware for iwlwifi 3168, 7265D, 8000C, and 8265 devices


author: Josh Boyer <jwboyer@fedoraproject.org> 20160609-66.gita4bbc811
changelog:
  - Update to the latest upstream snapshot
  - Intel bluetooth, radeon smc, Intel braswell/broxton audio, cxgb4 updates


author: Josh Boyer <jwboyer@fedoraproject.org> 20160816-67.git7c3dfc0b
changelog:
  - Update to the latest upstream snapshot (rhbz 1367203)
  - Intel audio, rockchip, amdgpu, iwlwifi, nvidia pascal updates


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170313-72.git695f2d6d
changelog:
  - Update to the latest upstream snapshot
  - New nvidia, AMD, and i915 GPU firmware
  - Updated iwlwifi and intel bluetooth firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170419-73.gitb1413458
changelog:
  - Update to the latest upstream snapshot
  - New nvidia, netronome, and marvell firmware
  - Updated intel audio firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170828-76.gitb78acc9
changelog:
  - Update to latest upstream snapshot
  - ath10k, iwlwifi, kabylake, liquidio, amdgpu, and cavium crypot updates


author: Peter Robinson <pbrobinson@fedoraproject.org> 20171009-78.gitbf04291
changelog:
  - Updated cxgb4, QCom gpu, Intel OPA IB, amdgpu, rtlwifi
  - Ship the license in %license for all sub packages
  - Modernise spec


author: Peter Robinson <pbrobinson@fedoraproject.org> 20171123-79.git90436ce
changelog:
  - Updated Intel GPU, amdgpu, iwlwifi, mvebu wifi, liquidio, QCom a530 & Venus, mlxsw, qed
  - Add iwlwifi 9000 series


author: Josh Boyer <jwboyer@fedoraproject.org> 20171126-80.git17e62881
changelog:
  - Updated bcm 4339 4354 4356 4358 firmware, new bcm 43430
  - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417


author: Josh Boyer <jwboyer@fedoraproject.org> 20171215-81.git2451bb22
changelog:
  - Updated skl DMC, cnl audio, netronome SmartNIC, amdgpu vega10 and raven,
    intel bluetooth, brcm CYW4373, and liquidio vswitch firmwares


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-84.git2a9b2cf5
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update Intel Omni-Path Architecture (OPA) Firmware (rhbz 1483737)
  - Drop separate microcode_amd_fam17h.bin, same file is now included in linux-firmware
    upstream


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-85.git2a9b2cf5
changelog:
  - Add Obsoletes for conflicting ivtv-firmware versions (rhbz 1589055)
  - Add Obsoletes for iwl7265-firmware which is shipped with RHEL 7 (rhbz 1589056)


author: Herton R. Krzesinski <herton@redhat.com> - 20180706-86.gitd1147327
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - qed: Add firmware 8.37.2.0 (rhbz 1584853)


author: Herton R. Krzesinski <herton@redhat.com> - 20180717-87.git8d69bab7
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.20.8.0 (rhbz 1503622)


author: Herton R. Krzesinski <herton@redhat.com> - 20181011-88.gitc6b6265d
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include latest firmware for Nvidia Graphics (rhbz 1504667)


author: Herton R. Krzesinski <herton@redhat.com> - 20181015-89.gitc6b6265d
changelog:
  - Remove liquidio/lio_23xx_vsw.bin from linux-firmware until GPL violation is
    fully resolved (rhbz 1637694)


author: Herton R. Krzesinski <herton@redhat.com> - 20181109-90.git1baa3486
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include BPF version of Netronome firmware (rhbz 1637558)


author: Herton R. Krzesinski <herton@redhat.com> - 20190516-94.git711d3297
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
  - Pull new version of Netronome firmware (rhbz 1663989)
  - Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
  - Update Netronome firmware that include bug fixes (rhbz 1673890)
  - Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)


author: Bruno Meneguele <bmeneg@redhat.com> - 20191202-95.gite8a0f4c9
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
  - Update bnx2x firmware to latest upstream (rhbz 1720395)
  - AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
  - Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
  - Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
  - DDP Package to support Columbiaville NIC (rhbz 1726454)
  - Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
  - Change install section to use usptream installation process


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Josef Ridky <jridky@redhat.com> - 1:5.8-12.1
changelog:
  - fix double free or corruption error caused by freeing security context (#1802055)
  - remove deprecated CFLAG


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Karsten Hopp <karsten@redhat.com> 0.2.1-7.1
changelog:
  - replace Requires(devel) with a simple Requires as the new rpm
    aborts otherwise with "Bad Requireflags: qualifiers: Requires(devel)"


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - Enable gating using reverse dependency testing of nfs-utils (bz 1681965)
  - Updated the URL (bz 1638671)
  - Fix EOF detection on non-blocking socket (bz 1641875)


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-1
changelog:
  - Update to cryptsetup 2.0.4.
  - patch: Add RHEL system library paths in configure.
  - patch: Increase default LUKS2 header size to 8 MiBs.
  - patch: update tests to be compatible with larger headers.
  - Set default format to LUKS2.
  - Cleanup changelog.
  - Resolves: #1564540 #1595257 #1595266 #1595881 #1600164


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-2
changelog:
  - patch: fix device alignment bug when processing hinted
    value by device topology info.
  - Resolves: #1614219


author: Ondrej Kozina <okozina@redhat.com> - 2.0.6-1
changelog:
  - Update to cryptsetup 2.0.6
  - Enables all supported metadata sizes in LUKS2 validation code.
  - Resolves: #1653383


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-1mdk
changelog:
  - initial release (merge fileutils, sh-utils & textutils)
  - obsoletes/provides: sh-utils/fileutils/textutils
  - fileutils stuff go in 1xx range
  - sh-utils stuff go in 7xx range
  - textutils stuff go in 5xx range
  - drop obsoletes patches 1, 2, 10 (somes files're gone but we didn't ship
    most of them)
  - rediff patches 103, 105, 111, 113, 180, 706
  - temporary disable patch 3 & 4
  - fix fileutils url


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-2mdk
changelog:
  - fix build
  - don't chmode two times su
  - build with large file support
  - fix description
  - various spec cleanups
  - fix chroot installation
  - fix missing /bin/env
  - add old fileutils, sh-utils & textutils ChangeLogs


author: Tim Waugh <twaugh@redhat.com> 4.5.3-3
changelog:
  - Adapted for Red Hat Linux.
  - Self-host for help2man.
  - Don't ship readlink just yet (maybe later).
  - Merge patches from fileutils and sh-utils (textutils ones are already
    merged it seems).
  - Keep the binaries where the used to be (in particular, id and stat).


author: Tim Waugh <twaugh@redhat.com> 4.5.3-4
changelog:
  - Fix scriplets.
  - Fix i18n patch so it doesn't break uniq.
  - Fix several other patches to either make the test suite pass or
    not run the relevant tests.
  - Run 'make check'.
  - Fix file list.


author: Tim Waugh <twaugh@redhat.com> 4.5.10-1
changelog:
  - 4.5.10.
  - Update lug, touch_errno, acl, utmp, printf-ll, i18n, test-bugs patches.
  - Drop fr_fix, LC_TIME, preserve, regex patches.


author: Tim Waugh <twaugh@redhat.com> 5.0-5
changelog:
  - Both kon and kterm support colours (bug #83701).
  - Fix 'ls -l' alignment in zh_CN locale (bug #88346).


author: Tim Waugh <twaugh@redhat.com> 5.0-12
changelog:
  - Don't run 'make check' for this build (build environment problem).
  - Another uninitialized variable in i18n (from bug #98683).


author: Tim Waugh <twaugh@redhat.com> 5.0-13
changelog:
  - Made su use pam again (oops).
  - Fixed another i18n bug causing sort --month-sort to fail.
  - Don't run dubious stty test, since it fails when backgrounded
    (bug #102033).
  - Re-enable make check.


author: Tim Waugh <twaugh@redhat.com> 5.0-20
changelog:
  - Restrict ACL support to only those programs needing it (bug #106141).
  - Fix default PATH for LSB (bug #102567).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Stop 'sort -g' leaking memory (i18n patch bug #115620).
  - Don't ship kill, since util-linux already does.
  - Tidy AFS patch.


author: Tim Waugh <twaugh@redhat.com> 5.2.0-6
changelog:
  - Apply Paul Eggert's chown patch (bug #116536).
  - Merged chdir patch into pam patch where it belongs.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-9
changelog:
  - Mention pam in the info for su (bug #122592).
  - Remove wheel group rant again (bug #122886).
  - Change default behaviour for chgrp/chown (bug #123263).  Patch from
    upstream.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-19
changelog:
  - Added 'gnome' TERM to DIR_COLORS (bug #129112).
  - Worked around a bash bug #129128.
  - Fixed an i18n patch bug in cut (bug #129114).


author: Tim Waugh <twaugh@redhat.com> 5.2.1-21
changelog:
  - Apply upstream patch to fix 'cp -a' onto multiply-linked files (bug #128874).
  - SELinux patch fix: don't error out if lgetfilecon() returns ENODATA.


author: Dan Walsh <dwalsh@redhat.com> 5.2.1-53
changelog:
  - Allow id to run even when SELinux security context can not be run
  - Change chcon to use raw functions.


author: Tim Waugh <twaugh@redhat.com> 5.92-0.1
changelog:
  - 5.92.
  - No longer need afs, dircolors, utmp, gcc4, brokentest, dateseconds,
    chown, rmaccess, copy, stale-utmp, no-sign-extend, fchown patches.
  - Updated acl, dateman, pam, langinfo, i18n, getgrouplist, selinux patches.
  - Dropped printf-ll, allow_old_options, jday, zh_CN patches.
  - NOTE: i18n patch not ported for sort(1) yet.


author: Tim Waugh <twaugh@redhat.com> 5.93-2
changelog:
  - Call setsid() in su under some circumstances (bug #173008).
  - Prevent runuser operating when setuid (bug #173113).


author: Tim Waugh <twaugh@redhat.com> 5.93-4
changelog:
  - Rebuild to pick up new glibc *at functions.
  - Apply runuser PAM patch from bug #173807.  Ship runuser PAM file.


author: Dan Walsh <dwalsh@redhat.com> 5.93-6
changelog:
  - Remove pam_selinux.so from su.pamd, not needed for targeted and Strict/MLS 
    will have to newrole before using.


author: Tim Waugh <twaugh@redhat.com> 5.96-4
changelog:
  - Include new hashes (bug #196369).  Patch from upstream.
  - Build at -O1 on s390 for the moment (bug #196369).


author: David Howells <dhowells@redhat.com> 5.97-4
changelog:
  - split the PAM scripts for "su -l"/"runuser -l" from that of normal "su" and
    "runuser" (#198639)
  - add keyinit instructions to PAM scripts


author: Tim Waugh <twaugh@redhat.com> 5.97-6
changelog:
  - Added runuser '-g' and '-G' options (bug #199344).
  - Added su '--session-command' option (bug #199066).


author: Tim Waugh <twaugh@redhat.com> 5.97-10
changelog:
  - Ignore 'cifs' filesystems for 'df -l' (bug #183703).
  - Include -g/-G in runuser man page (part of bug #199344).
  - Corrected runuser man page (bug #200620).


author: Tim Waugh <twaugh@redhat.com> 5.97-15
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Tim Waugh <twaugh@redhat.com> 6.7-1
changelog:
  - 6.7.  No longer need sort-compatibility, rename, newhashes, timestyle,
    acl, df-cifs, afs or autoconf patches.


author: Tim Waugh <twaugh@redhat.com> 6.7-4
changelog:
  - Ship COPYING file (bug #225655).
  - Use datadir and infodir macros in %pre scriptlet (bug #225655).
  - Use spaces not tabs (bug #225655).
  - Fixed build root.
  - Change prereq to requires (bug #225655).
  - Explicitly version some obsoletes tags (bug #225655).
  - Removed obsolete pl translation fix.


author: Tim Waugh <twaugh@redhat.com> 6.7-5
changelog:
  - Removed unnecessary stuff in pre scriptlet (bug #225655).
  - Prefix sources with 'coreutils-' (bug #225655).
  - Avoid %makeinstall (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-7
changelog:
  - Better Obsoletes/Provides versioning (bug #225655).
  - Use better defattr (bug #225655).
  - Be info file compression tolerant (bug #225655).
  - Moved changelog compression to %install (bug #225655).
  - Prevent upstream changes being masked (bug #225655).
  - Added a comment (bug #225655).
  - Use install -p for non-compiled files (bug #225655).
  - Use sysconfdir macro for /etc (bug #225655).
  - Use Requires(pre) etc for install-info (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-8
changelog:
  - Don't mark profile scripts as config files (bug #225655).
  - Avoid extra directory separators (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-9
changelog:
  - Use sed instead of perl for text replacement (bug #225655).
  - Use install-info scriptlets from the guidelines (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.9-3
changelog:
  - Fixed 'ls -x' output (bug #240298).
  - Disambiguate futimens() from the glibc implementation (bug #242321).


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-10
changelog:
  - modified coreutils-i18n.patch because of sort -R in
    a non C locales(fix by Andreas Schwab) (#249315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-12
changelog:
  - added some upstream supported dircolors TERMs(#239266)
  - fixed du output for unaccesible dirs(#250089)
  - a bit of upstream tunning for symlinks


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-17
changelog:
  - added several missing colored TERMs(including rxvt-unicode,
    screen-256color and xterm-256color) to DIR_COLORS and
    DIR_COLORS.xterm(#239266)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-1
changelog:
  - New upstream release(changed %prep because of lack of lzma
    support in %setup macro)
  - License GPLv3+
  - removed patches cp-i-u,du-ls-upstream,statsecuritycontext,
    futimens,getdateYYYYMMDD,ls-x
  - modified patches to be compilable after upstream changes
  - selinux patch reworked to have backward compatibility with
    F8(cp,ls and stat behaviour differ from upstream in SELinux
    options)
  - su-l/runuser-l pam file usage a bit documented(#368721)
  - more TERMs for DIR_COLORS, added colors for audio files,
    more image/compress file types(taken from upstream 
    dircolors.hin)
  - new file DIR_COLORS.256color which takes advantage from 
    256color term types-not really used yet(#429121)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-3
changelog:
  - fix unability of echo to display certain strings(added --
    separator, #431005)
  - do not require only one long_opt for certain commands 
    e.g. sleep, yes - but use first usable (#431005)
  - do not override userspecified LS_COLORS variable, but
    use it for colored ls(#430827)
  - discard errors from dircolors to /dev/null + some tuning 
    of lscolor sh/csh scripts(#430823)
  - do not consider files with SELinux security context as
    files having ACL in ls long format(#430779)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-5
changelog:
  - enabled 256-color support in colorls shell scripts(#429121)
  - fixed syntax error in csh script(#431315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-8
changelog:
  - use default security context in install - broken by 
    coreutils-6.10 update(#319231)
  - some sh/csh scripts optimalizations(by ville.skytta@iki.fi,
    - #433189, #433190)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-13
changelog:
  - disable echo option separator behavior(added by #431005,
    request for removal #437653 + upstream)
  - temporarily disabled longoptions change until full 
    clarification upstreamery (#431005)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-15
changelog:
  - covered correct handling for some test conditions failures
    e.g. root build+selinux active and not running mcstrans(d)
    or selinux enforcing (#436717)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-16
changelog:
  - keep LS_COLORS when USER_LS_COLORS defined
  - someupstream fixes:
  - mkdir -Z invalid-selinux-context dir no longer segfaults
  - ptx with odd number of backslashes no longer leads to buffer
    overflow
  - paste -d'\' file" no longer ovveruns memory


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-17
changelog:
  - better workaround of glibc getoptc change(factor test)
  - don't segfault mknod, mkfifo with invalid-selinux-context


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-18
changelog:
  - fix colorls.sh syntax with Zsh (#440652)
  - mention that cp -a includes -c option + mention cp -c 
    option in manpages (#440056)
  - fix typo in runuser manpages (#439410)


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-2
changelog:
  - Do not show misleading scontext in id command when user
    is specified (#443485)
  - Avoid possible test failures on non-english locales


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-3
changelog:
  - added arch utility (from util-linux-ng)
  - do not show executable file types without executable bit
    in colored ls as executable


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-2
changelog:
  - workaround for strange koji failures(#449910,#442352)
  - fixed ls -ZC segfault(#449866, introduced by 6.10-1 
    SELinux patch reworking)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-3
changelog:
  - workaround for koji failures(#449910, #442352) now 
    preserves timestamps correctly - fallback to supported
    functions, added test case
  - runuser binary is no longer doubled in /usr/bin/runuser


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-5
changelog:
  - fix authors for basename and echo
  - fix who info pages, print last runlevel only for printable
    chars


author: Kamil Dudka <kdudka@redhat.com> - 6.12-7
changelog:
  - dd: iflag=fullblock now read full blocks if possible
    (#431997, #449263)
  - ls: --color now highlights files with capabilities (#449985)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-10
changelog:
  - seq should no longer fail to display final number of some
    float usages of seq with utf8 locales(#463556)


author: Jarod Wilson <jarod@redhat.com> - 6.12-12
changelog:
  - fix up potential test failures when building in certain
    slightly quirky environments (part of bz#442352)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-13
changelog:
  - remove unimplemented (never accepted by upstream) option
    for chcon changes only. Removed from help and man.
  - remove ugly lzma hack as lzma is now supported by setup
    macro


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-14
changelog:
  - cp -Z now correctly separated in man page (#466646)
  - cp -Z works again (#466653)
  - make preservation of SELinux CTX non-mandatory for
    preserve=all cp option


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-15
changelog:
  - fix several date issues(e.g. countable dayshifts, ignoring
    some cases of relative offset, locales conversions...)
  - clarify ls exit statuses documentation (#446294)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-16
changelog:
  - make possible to disable capability in ls due to
    performance impact when not cached(#467508)
  - do not patch generated manpages - generate them at build
    time
  - do not mistakenly display -g and -G runuser option in su
    --help output


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-1
changelog:
  - new upstream release
  - modification/removal of related patches
  - use automake 1.10.1 instead of 1.10a
  - temporarily skip df --total tests (failures),
    timeout-paramaters (failure on ppc64)


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-2
changelog:
  - added requirements for util-linux-ng >= 2.14
    because of file conflict in update from F-8/F-9(#472445)
  - some sed cleanup, df totaltests patch changes (not working
    correctly yet :( )


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-4
changelog:
  - fixed syntax error w/ "expr" command using negative
    string/integer as first (i.e expr -125) - due to
    complexity of changes used diff against upstream git-head
    (#474434)
  - enable total-awk test again (and skip it when df not working)


author: Ondrej Vasik <ovasik@redhat.com> - 7.1-1
changelog:
  - New upstream release 7.1 (temporarily using tar.gz tarball
    as there are no xz utils in Fedora), removed applied
    patches, amended patches and LS_COLORS files


author: Ondrej Vasik <ovasik@redhat.com> 7.1-2
changelog:
  - workaround libcap issue with broken headers (#483548)
  - fix gnulib testsuite failure (4x77 (skip) is not
    77(skip) ;) )


author: Ondrej Vasik <ovasik@redhat.com> 7.1-7
changelog:
  - do not ship /etc/DIR_COLORS.xterm - as many terminals
    use TERM xterm and black background as default - making
    ls color output unreadable
  - shipping /etc/DIR_COLORS.lightbgcolor instead of it for
    light(white/gray) backgrounds
  - try to preserve xattrs in cp -a when possible


author: Ondrej Vasik <ovasik@redhat.com> 7.2-1
changelog:
  - New upstream bugfix release 7.2
  - removed applied patches
  - temporarily disable strverscmp failing gnulib test


author: Kamil Dudka <kdudka@redhat.com> - 7.4-5
changelog:
  - ls -1U with two or more arguments (or with -R or -s) works properly again
  - install runs faster again with SELinux enabled (#479502)


author: Ondrej Vasik <ovasik@redhat.com> - 7.4-6
changelog:
  - do process install-info only with info files present(#515970)
  - BuildRequires for xz, use xz tarball


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-1
changelog:
  - New upstream release 7.5, remove already applied patches,
    defuzz few others, xz in default set(by dependencies),
    so no explicit br required
  - skip two new tests on system with insufficient utimensat
    support(e.g. koji)
  - libstdbuf.so in separate coreutils-libs subpackage
  - update /etc/DIRCOLORS*


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-2
changelog:
  - Better fix than workaround the koji insufficient utimensat
    support issue to prevent failures in other packages


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-4
changelog:
  - fixed regression where df -l <device> as regular user
    cause "Permission denied" (#520630, introduced by fix for
    rhbz #497830)


author: Ondrej Vasik <ovasik@redhat.com> - 7.6-6
changelog:
  - ls -LR exits with status 2, not 0, when it encounters
    a cycle(#525402)
  - ls: print "?", not "0" as inode of dereferenced dangling
    symlink(#525400)
  - call the install-info on .gz info files


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-1
changelog:
  - new upstream release 8.1
  - fix build under koji (no test failures with underlying
    RHEL-5 XEN kernel due to unsearchable path and lack of
    futimens functionality)


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-1
changelog:
  - new upstream release 8.2
  - removed applied patches, temporarily do not run dup_cloexec()
    dependent gnulib tests failing in koji


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-3
changelog:
  - use grep instead of deprecated egrep in colorls.sh script
    (#548174)
  - remove unnecessary versioned requires/conflicts
  - remove non-upstream hack for uname -p


author: Ondrej Vasik <ovasik@redhat.com> - 8.5-2
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586029)
  - add patch for mkstemp on sparc64(Dennis Gilmore)
  - update /etc/DIR_COLORS* files


author: Dan Horák <dan[at]danny.cz> - 8.5-3
changelog:
  - rebuilt with the updated configuration patch
  - drop the old -O1 exception for s390(x)
  - updated the getgrouplist patch (Kamil Dudka)


author: Ondrej Vasik <ovasik@redhat.com> - 8.5-8
changelog:
  - change assertion failure for invalid multibyte input
    in sort to less confusing error message(#591352)


author: Ondrej Vasik <ovasik@redhat.com> - 8.6-1
changelog:
  - new upstream release 8.6
  - remove applied patches, temporarily disable sort
    debug-keys test for multibyte locales (failing
    because of i18n patch)


author: Ondrej Vasik <ovasik@redhat.com> - 8.12-4
changelog:
  - deprecate non-upstream cp -Z/--context (install should be
    used instead of it), make it working if destination exists
    (#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.12-7
changelog:
  - incorporate some i18n patch fixes from OpenSUSE:
    - fix cut output-delimiter option
    - prevent infinite loop in sort when ignoring chars
    - prevent using unitialized variable in cut


author: Ondrej Vasik <ovasik@redhat.com> - 8.13-1
changelog:
  - new upstream release 8.13
  - temporarily disable recently added multibyte checks in
    misc/cut test
  - fix the SUSE fix for cut output-delimiter
  - drop coreutils-libs subpackage, no longer needed


author: Ondrej Vasik <ovasik@redhat.com> 8.20-1
changelog:
  - new upstream release 8.20
  - Temporarily require util-linux >= 2.22.1-3 (to prevent missing
    su/runuser on system)


author: Ondrej Vasik <ovasik@redhat.com> 8.21-18
changelog:
  - pr -e, with a mix of backspaces and TABs, could corrupt the heap
    in multibyte locales (analyzed by J.Koncicky)


author: Ondrej Vasik <ovasik@redhat.com> 8.21-20
changelog:
  - fix possible colorls.csh script errors for tcsh with
    noclobber set and entered include file (#1027279)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-3
changelog:
  - reset buffer before copying to prevent some rare cases of
    invalid output in join and uniq(#1036289)


author: Ondrej Oprala <ooprala@redhat.com> 8.22-5
changelog:
  - reverted an old change and constricted it's condition
  - turned off two multibyte tests (wrong strcoll return value)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-6
changelog:
  - do not modify SELinux contexts of existing parent
    directories when copying files (fix by P.Brady, #1045122)


author: Ondrej Oprala <ooprala@redhat.com> 8.22-8
changelog:
  - Don't use cut mb path if not necessary (#1021403, #499220)
  - several i18n patch improvements merged from OpenSUSE (fixed
    compilation warnings, simplify mb handling in uniq)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-10
changelog:
  - unset the unnecessary envvars after colorls scripts(#1051703)
  - improve the limitation (check for both utf8 and utf-8)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-13
changelog:
  - drop the util-linux requirements (smaller docker images),
    drop ancient obsoletes of -libs subpackage


author: Ondrej Vasik <ovasik@redhat.com> - 8.23-1
changelog:
  - new upstream release 8.23
  - synchronize the old differences in ls SELinux options
    with upstream
  - skip df/skip-duplicates.sh test for now (passing locally, failing in koji)


author: Ondrej Vasik <ovasik@redhat.com> - 8.23-4
changelog:
  - fix the sorting in multibyte locales (NUL-terminate sort keys)
    - patch by Andreas Schwab (#1146185)


author: Kamil Dudka <kdudka@redhat.com> - 8.25-7
changelog:
  - handle info doc in RPM scriptlets of coreutils-common, which provides it
  - make sure that the license file is installed, even if coreutils-common is not


author: Kamil Dudka <kdudka@redhat.com> - 8.25-9
changelog:
  - add BR for glibc-langpack-en to prevent the expand/mb test from failing
  - do not use /bin/mv in %post to avoid a circular dependency (#1348043)


author: Jakub Martisko <jamartis@redhat.com> - 8.25-11
changelog:
  - switch to UTF8 locale when (un)expand input contains BOM header
    (#1158494)
  - fixed regression where (un)expand would end with "long input line"
    error when BOM header is present


author: Kamil Dudka <kdudka@redhat.com> - 8.25-12
changelog:
  - install -Z now sets default SELinux context for created directories (#1339135)
  - drop the %pre scriptlet, which is no longer needed (#1354078)
  - clarify recognition of "^COLOR.*none" in /etc/DIR_COLORS (#1349579)


author: Kamil Dudka <kdudka@redhat.com> - 8.25-14
changelog:
  - run autoreconf in %prep
  - drop post-install fix for Japanese locales that no longer applies
  - fix 'sort -h -k' in locales that use blank as thousands separator (#1355780)


author: Kamil Dudka <kdudka@redhat.com> - 8.27-6
changelog:
  - do not mention a deprecated option in localized man pages
  - drop workaround no longer needed for 10 years old rpm-build bug (#246729)
  - drop unnecessary uses of %defattr


author: Kamil Dudka <kdudka@redhat.com> - 8.29-2
changelog:
  - doc: warn about following symlinks recursively in chown/chgrp (CVE-2017-18018)
  - mv -n: do not overwrite the destination


author: Kamil Dudka <kdudka@redhat.com> - 8.29-5
changelog:
  - drop BR for bison, which is not used during the build
  - make sure that parse-datetime.{c,y} ends up in debuginfo (#1555079)
  - fix build failure with glibc-2.28


author: Kamil Dudka <kdudka@redhat.com> - 8.29-7
changelog:
  - add provides to coreutils-single to make it a drop-in replacement (#1572693)
  - reintroduce very old Provides (mktemp, sh-utils, textwrap, fileutils, stat)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-8
changelog:
  - ls: increase the allowed abmon width from 5 to 12 (#1577872)
  - date, ls: pick strftime fixes from glibc to improve locale support (#1577872)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-5
changelog:
  - sync: fix open() fallback bug (#1602463)
  - fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)


author: Gang Wei <gang.wei@intel.com> - 1:1.8.2-1
changelog:
  - Upgrade to latest upstream version which provided security fix for:
    tboot:argument measurement vulnerablity for GRUB2+ELF kernels


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.6-3
changelog:
  - Incorporate latest upstream patches, including a newer version
    of the OpenSSL patch in 1.9.6-2
    Resolves: rhbz#1492771
    Resolves: rhbz#1499435


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.7-1
changelog:
  - Rebase to the latest upstream version.
    Resolves: rhbz#1511799
  - Do not override OPTFLAGS in the make
    Resolves: rhbz#1620070


author: Arun SAG <sagarun@gmail.com> - 0.5.1-2
changelog:
  - Remove OPT_FLAGS from build section since it is a noarch package
  - Fix use of mixed tabs and space
  - Remove extra space around the word cumbersome in description


author: Arun SAG <sagarun@gmail.com> - 0.9.3-1
changelog:
  - Updated to new upstream version 0.9.3
  - Include python-gevent as a dependency for requests.async
  - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py


author: Arun S A G <sagarun@gmail.com> 0.13.1-1
changelog:
  - Updated to latest upstream release 0.13.1
  - Use system provided ca-certificates
  - No more async requests use grrequests https://github.com/kennethreitz/grequests
  - Remove gevent as it is no longer required by requests


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.14.1-4
changelog:
  - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules
    by removing them from the python{,3}-requests package that they did not belong
    in.
  - Use the certificates in the ca-certificates package instead of the bundled one
    + https://bugzilla.redhat.com/show_bug.cgi?id=904614
  - Fix a problem with cookie handling
    + https://bugzilla.redhat.com/show_bug.cgi?id=906924


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Ralph Bean <rbean@redhat.com> - 2.0.0-1
changelog:
  - Latest upstream.
  - Add doc macro to the python3 files section.
  - Require python-urllib3 greater than or at 1.7.1.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-3
changelog:
  - Lock down the python-urllib3 version to the specific version we unbundled.
    https://bugzilla.redhat.com/show_bug.cgi?id=1253823


author: Ralph Bean <rbean@redhat.com> - 2.7.0-6
changelog:
  - Replace the provides macro with a plain provides field for now until we can
    re-organize this package into two different subpackages.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Charalampos Stratakis <cstratak@redhat.com> - 0.6-10
changelog:
  - SPEC file cleanup
  - Added licence tag
  - Removal of old and unneeded macros
  - Use of newest python macros
  - Removed Python 2 dependency
  - Added patch for Python 3 build


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-1
changelog:
  - Update Source to upstream version 0.8.3
    * This version includes the fixes for bz #1690515, #1703439,
        * Previous patches 0001-0017 & 0031-0036 are included in this version
  - Rename files
    * Previous patches 0018-0026 & 0028 are now 0004-0013
    * 0008-RH-add-mpathconf.patch has been modified to add a
      --property_blacklist option to fix bz #1753729
  - Add 0001-multipathd-warn-when-configuration-has-been-changed.patch
    * Multipath now logs a warning message when the configuration file
      has been changed to fix bz #1750594
  - Add 0002-libmultipath-fix-leak-in-foreign-code.patch
  - Add 0003-Fix-leak-in-mpathpersist.patch
    * The above 3 patches have been submitted upstream
  - Resolves: bz #1690515, #1703439, #1719562, #1747534, #1750594, #1753729


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3
changelog:
  - Rename files
    * Previous patches 0004-0013 are now 0010-0019
    * 0014-RH-add-mpathconf.patch now makes mpathconf default to not
      printing foreign devices (bz #1760709)
  - Add 0004-libmultipath-remove-unused-path-prio_args.patch
  - Add 0005-libmultipath-constify-get_unaligned_be.patch
  - Add 0006-libmultipath-add-missing-hwe-mpe-variable-merges.patch
  - Add 0007-libmultipath-fix-sgio_get_vpd-looping.patch
  - Add 0008-libmultipath-add-vend_id-to-get_vpd_sgio.patch
  - Add 0009-libmultipath-add-code-to-get-vendor-specific-vpd-dat.patch
    * Add the '%g' maps and paths format wildcard, and the vpd_vendor
      multipath.conf devices section parameter. (bz #1527212)
  - Resolves: bz #1527212, #1760709


author: Ondrej Kozina <okozina@redhat.com> - 2.2.0-2
changelog:
  - patch: Fix mapped segments overflow on 32bit architectures.
  - patch: Take optimal io size in account with LUKS2 reencryption.
  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399

  - Resolves: #1742815 #1746532


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup8.1-1
changelog:
  - 9158390ccae759c2c0221de6e0c9541375a480f6
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1802054


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-2
changelog:
  - Split out the modules as a subpackage to allows us to depend on the core
    library on the cloud image and not drag every image loader known to man.


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-3
changelog:
  - Split out the xlib code as a subpackage to allows us to depend on the core
    library on the cloud image and not depends on half of Xorg.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Cleaned up listbox
  - Added whiptail
  - Added newtButtonCompact button type and associated colors
  - Added newtTextboxGetNumLines() and newtTextboxSetHeight()


author: Erik Troan <ewt@redhat.com>
changelog:
  - added changes from Bruce Perens
      - small cleanups
      - lets whiptail automatically resize windows
  - the order of placing a grid and adding components to a form no longer
    matters
  - added newtGridAddComponentsToForm()


author: Matt Wilson <msw@redhat.com>
changelog:
  - Added GPM mouse support
  - Moved to autoconf to allow compiling without GPM support
  - Changed revision to 0.40


author: Matt Wilson <msw@redhat.com>
changelog:
  - Function to set checkbox flags.  This will go away later when I have
    a generic flag setting function and signals to comps to go insensitive.


author: Matt Wilson <msw@redhat.com>
changelog:
  - added snack bindings for setting current listbox selection
  - added argument to set default selection in snack ListboxChoiceWindow


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed snack callback function refcounts, as well as optional data args
  - fixed suspend callback ref counts


author: Preston Brown <pbrown@redhat.com>
changelog:
  - explicit requirement of devel subpackage on same version of main package
    so that .so file link doesn't break


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bytecompile the snack python module
  - move the libnewt.so symlink to the devel package
  - include popcorn.py and peanuts.py in the devel package,
    so we have some documentation of the snack module


author: Erik Troan <ewt@redhat.com>
changelog:
  - gave up on separate CHANGES file
  - added newtCheckboxTreeSetCurrent() and snack binding
  - don't require python2 anymore


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't blow the stack if we push a help line that is longer than the
    curret number of columns
  - clip window to screen bounds so that if we get a window that is
    larger than the screen we can still redraw the windows behind it
    when we pop


author: Elloit Lee <sopwith@redhat.com>
changelog:
  - Allow python scripts to watch file handles
  - Fix 64-bit warnings in snackmodule
  - Misc snack.py cleanups
  - Add NEWT_FD_EXCEPT to allow watching for fd exceptions
  - In newtExitStruct, return the first file descriptor that an event occurred on


author: Matt Wilson <msw@redhat.com>
changelog:
  - redraw the screen in certain situations when LANG=ja_JP.eucJP to
    prevent corrupting kanji characters (#34362)


author: Matt Wilson <msw@redhat.com>
changelog:
  - change from using SLsmg_touch_screen to SLsmg_touch_lines to prevent
    excessive flashing due to screen clears when using touch_screen (more
    Japanese handling)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - added python binding for newtListboxClear() for Listbox and CListBox
  - let ButtonBars optionally be made of CompactButtons


author: Crutcher Dunnavant <crutcher@redhat.com> 0.50.31-1
changelog:
  - right anchor the internal Listbox of CListboxes, so that empty
  - scrollable CListboxes do not look like crape.


author: Joe Orton <jorton@redhat.com> 0.50.36-1
changelog:
  - add newtListboxGetItemCount() API call
  - include numeric percentage in scale widget appearace
  - add support for ESC key using NEWT_KEY_ESCAPE


author: Bill Nottingham <notting@redhat.com> 0.51.0-1
changelog:
  - changes for element width calculation for UTF-8
  - fix textwrap for UTF-8 in general
  - bump soname to avoid shared library collisions with slang


author: Matt Wilson <msw@redhat.com> 0.51.2-1
changelog:
  - fixed wstrlen() it was calculating wcwidth(first wide char in
    string) * strlen(str) instead of the actual width of the whole
    string
  - fixed newtRedrawHelpLine() to copy all the bytes from a multibyte
    string


author: Adrian Havill <havill@redhat.com> 0.51.3-1
changelog:
  - cleaned up const qualifiers in interfaces
  - added Ctrl-L screen refresh
  - fixed segfault in test.c when listbox items are selected
  - accessibility: made newt useable with monochrome terms (#60931)
  - leave the symbols in the libs (#60400)
  - fixed grammar in tutorial (#63496)
  - error checking (curcomp exists) for formEvent, newtFormGetCurrent,
    removed fifty button limit (#59027)


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Petr Rockai <prockai@redhat.com>
changelog:
  - use versioned symbols, patch by Alastair McKinstry, mckinstry at
    debian dot org, thanks
  - need private wstrlen due to versioned syms, patch from debian
    package of newt
  - both of the above needed to be forward-ported


author: Petr Rockai <prockai@redhat.com> - 0.52.1-0
changelog:
  - revert bidi patch, objections by Jeremy Katz about
    anaconda breaking
  - this version still only exists as a "ghastly" upstream tarball;
    the patches are now cleaned up and will be integrated into
    rhlinux cvs unless some more breakage akin to bidi occurs
  - the if1close patch is now part of upstream tarball too


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = %{version} instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -%{release} to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.4-1
changelog:
  - fix entry corruption when reading multibyte characters
    and double width character handling
  - avoid overflow/crash in scale
  - patches from debian
    - fix crash of snack in EntryWindow when prompts is list of tuples
    - put cursor at beginning of text for better accessibility
      in button, scale and textbox
    - add topleft option to whiptail


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.5-1
changelog:
  - provide option to change text of buttons (#126768)
  - don't add escape key to hot keys by default (#216157)
  - fix cursor position in checkboxtree, radio button and checkbox
  - don't force monochrome terminals to output colors
  - highlight active compact button on monochrome terminals
  - update translations from debian


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-1
changelog:
  - add newtSetColor() to allow changing individual colors
  - add newtPopWindowNoRefresh() (patch by Forest Bond)
  - move static library to -static subpackage, spec cleanup (#226195)
    (patch by Jason Tibbitts)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-3
changelog:
  - fix cursor positioning when setting entry or checkbox flags
  - fix counting of items in checkboxtree
  - fix some memory leaks


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-1
changelog:
  - add support to snack for multiple selection and border in listbox
    and cursorAtEnd in entry (patch by Shawn Starr)
  - fix scrollbar positioning in listbox
  - cope with backward system time jumps (#240691)
  - free helplines and windows in newtFinished, check for overflow (#239992)
  - add release to -devel and -static requires (#238784)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-2
changelog:
  - add back support for list of Entries in EntryWindow prompts in snack
    (#248878)
  - update license tag
  - split python module to -python subpackage (patch by Yanko Kaneti)
  - fix summary


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Hans de Goede <hdegoede@redhat.com> - 0.52.11-2
changelog:
  - Change python_sitearch macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.12-1
changelog:
  - fix whiptail --gauge and its description in man page (#620083)
  - remove space after \n in whiptail texts (#620083)
  - remove NLS code from snack (#599608)
  - expose more keys to python as shortcuts in dialogs (Jakob Kemi)
  - release python global-thread-lock during dialog displays (Jakob Kemi)
  - fix warnings in whiptcl.c and include Tcl_PkgProvide() call (Mikhail T.)
  - don't NULL deref when an invalid array is specified in checkboxtree
    (Arnaldo Carvalho de Melo)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets 
  - add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
  - allow resizing of form
  - fix errors found by coverity
  - fix va_list usage (Gwenole Beauchesne)
  - fix building and installing on Mac OS X (#652479)
  - check for slang.h header, support DESTDIR variable, add --without-python
    option (Otavio Salvador)
  - add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
  - fix returning strings in whiptail and whiptcl (#752818)
  - fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
  - fix errors found by gcc-with-cpychecker (#800075)
  - fix building with tcl8.6 (#902561)
  - add fallback to python-config (#783627)
  - replace tabs in snack.py (#870647)
  - compile snackmodule.c with flag -fPIC (Kang Kai)
  - include new translations from transifex
  - allow newtWinMenu and newtWinEntries with no buttons or items
  - don't draw scale when not mapped
  - build with large-file support for stat64
  - remove unused variables in test code
  - update FSF address
  - remove obsolete macros
  - make some dependencies arch-specific


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.16-1
changelog:
  - add newtComponentGetSize and newtComponentGetPosition (#987596)
  - modify Makefile to use SOEXT (#971168)
  - free gpm socket name and unlink gpm socket on form exit
  - fix memory leaks in whiptail
  - fix weekdays in spec changelog


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.16-2
changelog:
  - add python3 support (Matthias Klose) (#963839)
  - build python3 subpackage (Miro Hrončok) (#963839)
  - rename snackmodule to snack (#963839)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-10
changelog:
  - move snack provides to python3-newt subpackage (#1640153)
  - fix radio button selection check in snack (#1714517)


author: Tony Asleson <tasleson@redhat.com> 0.0.3-1
changelog:
  - Changes to installer, daemon uid, gid, /var/run/lsm/*
  - NFS improvements and bug fixes
  - Python library clean up (rpmlint errors)


author: Tony Asleson <tasleson@redhat.com> 0.0.5-1
changelog:
  - Spec file clean-up improvements
  - Async. operation added to lsmcli and ability to check on job status
  - Sub volume replication support
  - Ability to check for child dependencies on VOLUMES, FS and files
  - SMI-S Bug fixes and improvements


author: Tony Asleson <tasleson@redhat.com> 0.0.6-1
changelog:
  - Documentation improvements (man & source code)
  - Support for access groups
  - Unified spec files Fedora/RHEL
  - Package version auto generate
  - Rpm target added to make
  - Bug fix for missing optional property on volume retrieval (smispy plug-in)


author: Tony Asleson <tasleson@redhat.com> 0.0.7-1
changelog:
  - Bug fix for smi-s constants
  - Display formatting improvements
  - Added header option for lsmcli
  - Improved version handling for builds
  - Made terminology consistent
  - Ability to list visibility for access groups and volumes
  - Simulator plug-in fully supports all block operations
  - Added support for multiple systems with a single plug-in instance


author: Tony Asleson <tasleson@redhat.com> 0.0.8-1
changelog:
  - Make building of SMI-S CPP plugin optional
  - Add pkg-config file
  - SMIS: Fix exception while retrieving Volumes
  - SMIS: Fix exception while retrieving Volumes
  - lsm: Add package imports
  - Make Smis class available in lsm python package
  - Add option to disable building C unit test
  - Make simulator classes available in lsm python package
  - Make ontap class available in lsm python package
  - Changes to support building on Fedora 17 (v2)
  - Spec. file updates from feedback from T. Callaway (spot)
  - F17 linker symbol visibility correction
  - Remove unneeded build dependencies and cleaned up some warnings
  - C Updates, client C library feature parity with python


