Releases

Releases from the SELinux userspace project are in the form of source tarballs. For binary packages please refer to your distribution. The sha256sum output for each tarball is provided below.

Release 2014-05-06

checkpolicy-2.3.tar.gz

90632d11afecb66997971d4c5c5d70dfb02d3969ec610ee2918ba6df99c8207b checkpolicy-2.3.tar.gz

libselinux-2.3.tar.gz

0b1e0b43ecd84a812713d09564019b08e7c205d89072b5cbcd07b052cd8e77b2 libselinux-2.3.tar.gz

libsemanage-2.3.tar.gz

03e09e35e611c286e446bef92b6023ef2623815996f5a53394bb02e49a312e4b libsemanage-2.3.tar.gz

libsepol-2.3.tar.gz

cc8d8642c3b7b95d6928d65dcbca2ab0627abc1c05166637851e63c1a6eae68f libsepol-2.3.tar.gz

policycoreutils-2.3.tar.gz

864cfaee58b5d2f15b140c354e59666e57143293c89f2b2e85bc0d0e4beefcd2 policycoreutils-2.3.tar.gz

sepolgen-1.2.1.tar.gz

438c246bdc6b3cf1b12116831f4c601aaae6e93decb007dddab212a3c88781b0 sepolgen-1.2.1.tar.gz

Release 2013-10-30

Updated on 2013-12-30 with libselinux-2.2.2 bug fix update.

Updated on 2013-12-09 with policycoreutils-2.2.5 bug fix update.

Updated on 2013-11-26 with policycoreutils-2.2.4 bug fix update.

Updated on 2013-11-13 with policycoreutils-2.2.3 bug fix update.

Updated on 2013-11-06 with policycoreutils-2.2.2 and libselinux-2.2.1 bug fix updates.

Updated on 2013-10-31 with policycoreutils-2.2.1 and sepolgen-1.2.1 bug fix updates.

Changes in this release include:

  • checkpolicy: Support space and colon in filenames.
  • libselinux: Add selinux_set_policy_root, selinux_systemd_contexts_path, selinux_current_policy_path interfaces.
  • libselinux: Fix avc_has_perm() returns -1 even when SELinux is permissive.
  • libselinux: Mount sysfs before trying to mount selinuxfs.
  • libselinux: Support udev-197 and higher.
  • libsemanage: Add audit support.
  • libsemanage: Apply a MAX_UID check for genhomedircon.
  • libsepol: Allow constraint denial cause to be determined (policy version 29).
  • policycoreutils: Extend audit2why to report constraint denial cause.
  • policycoreutils: Replace genhomedircon script with link to semodule.
  • policycoreutils: Add sepolicy and semanage tests.
  • policycoreutils: Many improvements to sepolicy, semanage, and gui.
  • sepolgen: Return constraint denial cause information, add support for file name transitions.
  • All: Man page fixes/updates and Makefile improvements.

checkpolicy-2.2.tar.gz

9ff6698f4d4cb59c9c916e348187d533ada4107f90c253ef7304905934e9adf8 checkpolicy-2.2.tar.gz

libselinux-2.2.2.tar.gz

30ab363416806da907b86b97f1d31c252473e3200358bb1570f563c8312b5a3e libselinux-2.2.2.tar.gz

libsemanage-2.2.tar.gz

11f60bfa0f1c6063cd9bd99ce0cb4acc9d6d9e9b8d7743d39e847bcd7803bd75 libsemanage-2.2.tar.gz

libsepol-2.2.tar.gz

77a4b27006295805bdbd7f240038cb32a49be1d60847d413899501702933fc0f libsepol-2.2.tar.gz

policycoreutils-2.2.5.tar.gz

bbf850a8c3c2f371f439d6525663eecdd3a737acd594d2f27f8d8f3a07830cc4 policycoreutils-2.2.5.tar.gz

sepolgen-1.2.1.tar.gz

438c246bdc6b3cf1b12116831f4c601aaae6e93decb007dddab212a3c88781b0 sepolgen-1.2.1.tar.gz

Release 2013-04-23

Changes in this release include:

  • Various fd leaks and memory leaks
  • Context function optimizations
  • New sepolicy tool to unify smaller utilities
  • setfiles progress estimation
  • Man page updates
  • Add support for setrans color in shell prompt

checkpolicy-2.1.12.tar.gz e6a0ac539b74859b4262b317eb90d9914deb15e7aa509659f47724d50fe2ecc6

libselinux-2.1.13.tar.gz 57aad47c06b7ec18a76e8d9870539277a84cb40109cfdcf70ed3260bdb04447a

libsemanage-2.1.10.tar.gz de2e8077245581e94576276f54e80a53c23c28d6961d2dfbe2f004eaba452e91

libsepol-2.1.9.tar.gz 290d17f583635a4a5d8a2141511272adf0571c4205cdea38b5a68df20d58a70b

policycoreutils-2.1.14.tar.gz b6881741f9f9988346a73bfeccb0299941dc117349753f0ef3f23ee86f06c1b5

sepolgen-1.1.9.tar.gz 8a1c6d3a78c9b6ad3555c74def555f65a62950bf21c111c585bfc382fec3a645

Release 2012-09-24

Changes in this release include:

  • Android/MacOS X build support
  • Boolean name substitution
  • PCRE for file_context labeling
  • Fix neverallow checking on attributes
  • Add always_check_network policy capability
  • Translations from the Fedora community
  • Various sandbox enhancements
  • Various bug fixes
  • Various man page updates

checkpolicy-2.1.11.tar.gz 06acbc776134464d133669de82b7f7c7ebca376c307a3a3478544a42c5d050f1

libselinux-2.1.12.tar.gz 8dad879380e0ce1e4ab67195a08f6052c1396493bcb12fe92a033f49f7dbca9e

libsemanage-2.1.9.tar.gz 6f01d17f9751412f7b76e6e7daafeb2faf301b9bfeea83506160c81becf035cc

libsepol-2.1.8.tar.gz 63eedd2e435658eedb14cf5eb803468b701f4a2404f1a4af4ab52858e9c068f0

policycoreutils-2.1.13.tar.gz 34040f06f3111d9ee957576e4095841d35b9ca9141ee8d80aab036cbefb28584

sepolgen-1.1.8.tar.gz b5f56130619672b782658c0c9e32d621a1dcaaa6f7d3cffc10f47c4e5a625aeb

Release 2012-02-16

Changes in this release include:

  • Various enhancements to dispol/dismod
  • Many man page cleanups and updates
  • Support for python3 in bindings
  • Many makefile cleanups
  • Support for tunables separate from booleans
  • Various bug fixes
  • Sandbox cgroup support
  • Various Sandbox enhancements
  • File context equivalence
  • Various semanage enhancements and bug fixes
  • Add semodule_unpackage

checkpolicy-2.1.8

libselinux-2.1.9

libsemanage-2.1.6

libsepol-2.1.4

policycoreutils-2.1.10

sepolgen-1.1.5

Release 2011-07-27

New features in this release include:

  • Add support for optional file name in type_transition rules by Eric Paris
  • Add class field in role_transition rules by Harry Ciao
  • Add role attribute support by Harry Ciao
  • Add file_context.subs_dist for distro specific filecon substitutions by Daniel Walsh
  • Give correct names to mount points in load_policy by Daniel Walsh
  • Make sure selinux state is reported correctly if selinux is disabled or fails to load by Daniel Walsh
  • Fix crash if selinux_key_create was never called by Daniel Walsh
  • Use correct color range in mcstrand by Richard Haines
  • Update man pages for selinux_color_* functions by Richard Haines
  • Add db_language object class support for selabel_lookup from KaiGai Kohei
  • Add selinux_status_* interfaces for /selinux/status from KaiGai Kohei
  • Allow filesystem names to start with a digit by James Carter
  • Allow single digit module versions by Daniel Walsh

checkpolicy-2.1.0

libselinux-2.1.0

libsemanage-2.1.0

libsepol-2.1.0

policycoreutils-2.1.0

sepolgen-1.1.0

Release 2010-12-21

New features in this release include:

  • Support for on-the-fly sandboxing of applications, including X applications
  • Support for MLS/MCS translations
  • Improved robustness in multithreaded processes
  • Support for building under GCC 4.6
  • Simplification of login context computation logic
  • newrole support for libcap-ng
  • Improved robustness in label computation

checkpolicy-2.0.23

libselinux-2.0.98

libsemanage-2.0.46

libsepol-2.0.42

policycoreutils-2.0.85

sepolgen-1.0.23

Release 2010-05-25

New features in this release include:

  • semodule enable/disable support
  • audit2allow support for generating dontaudit rules
  • Improved support across distributions
  • Improved man pages and help output
  • Improved handling of auditing in userspace object managers when dontaudit/auditallow rules are involved
  • Support for running genhomedircon without examining /etc/passwd

checkpolicy-2.0.21

libselinux-2.0.94

libsemanage-2.0.45

libsepol-2.0.41

policycoreutils-2.0.82

sepolgen-1.0.23

Release 2009-11-23

New features in this release include:

  • Configurable bzip behavior in libsemanage
  • semanage dontaudit support
  • Proper semodule upgrade support
  • setfiles support for labeling when SELinux is not enabled
  • Support for multiple target OSes

checkpolicy-2.0.20

libselinux-2.0.89

libsemanage-2.0.42

libsepol-2.0.41

policycoreutils-2.0.77

sepolgen-1.0.18

Release 2009-07-31

New features in this release include:

  • Label substitution
  • Virtual machine labeling
  • Per-service seuser support
  • Persistent dontaudit flag
  • Btrfs labeling support

checkpolicy-2.0.19

libselinux-2.0.85

libsemanage-2.0.33

libsepol-2.0.37

policycoreutils-2.0.69

sepolgen-1.0.17

Release 2009-04-03

This is primarily a bug fix release. New features included are:

  • Policy module compression (bzip2) support
  • AVC caching for compute_create results

Note: the 1.0 stable branch will no longer have releases.

checkpolicy-2.0.19

libselinux-2.0.79

libsemanage-2.0.31

libsepol-2.0.36

policycoreutils-2.0.62

sepolgen-1.0.16

Release 2008-09-09

This is primarily a bug fix release. New features included are:

  • Ruby bindings for libselinux
  • Group support in seuser files
  • semanage node support
  • semanage boolean file support (loading booleans from a file)
  • semanage permissive support

Development

checkpolicy-2.0.16

libsemanage-2.0.27

policycoreutils-2.0.55

libselinux-2.0.71

libsepol-2.0.32

sepolgen-1.0.13

Stable

checkpolicy-1.34.7

libsemanage-1.10.9

policycoreutils-1.34.16

libselinux-1.34.15

libsepol-1.16.14