# changelog

author: Aleš Kozumplík <ales@redhat.com> - 0.3.8-1.git046ab1c
changelog:
  - py: expose Subject.pattern (Ales Kozumplik)
  - doc: added the rootdir parameter to hy_sack_create(). (Ales Kozumplik)
  - sack: allow specifying a different rootdir (AKA "installroot") (Ales Kozumplik)
  - Forms recognized by ``Subject`` are no longer an instance-scope setting. (RhBug:903687) (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.3.9-1.gitc0c16c0
changelog:
  - refactoring: hy_sack_get_cache_path -> hy_sack_get_cache_dir. (Ales Kozumplik)
  - hy_sack_create() now accepts a flag to disable automatic cachedir creation. (Ales Kozumplik)
  - fix crashes when the logfile can not be initialized. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.3.11-1.gitffe0dac
changelog:
  - obsoletes: do not report obsoleted packages in hy_goal_list_erasures(). (Ales Kozumplik)
  - rename: goal: list_obsoletes -> list_obsoleted. (Ales Kozumplik)
  - rename: hy_goal_package_all_obsoletes() -> hy_goal_list_obsoleted_by_package(). (Ales Kozumplik)
  - apichange: remove: hy_goal_package_obsoletes(). (Ales Kozumplik)
  - tests: simplify test_goal_upgrade_all() somehwat. (Ales Kozumplik)
  - goal: add ability to list all of the package's and transaction's obsoletes. (Ales Kozumplik)
  - py: allow directly comparing NEVRAs by their EVRs. (RhBug:953203) (Ales Kozumplik)
  - add hy_sack_evr_cmp(). (Ales Kozumplik)
  - py: fix SIGSEGV in unchecked hy_goal_describe_problem() call. (Ales Kozumplik)
  - doc: update the Tutorial for the current version of the API. (Ales Kozumplik)
  - subject parsing: recognize "pyton-hawkey" is a name in "python-hawkey-0.3.10". (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.3.12-1.git60cc1cc
changelog:
  - goal: fix assertions about the job queue when translating selectors. (Ales Kozumplik)
  - SOLVER_NOOBSOLETES is SOLVER_MULTIVERSION. (Ales Kozumplik)
  - goal: testing number of requests and presence of certain kinds of requests. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.3.13-2.git15db39f
changelog:
  - goal: running the same Goal instance twice or more. (Ales Kozumplik)
  - sack._knows can now determine if a particular 'name-version' sounds familiar. (Ales Kozumplik)
  - Goal: do not set the 'keepexplicitobsoletes' flag. (Ales Kozumplik)
  - tests: fixtures for upgrade_all() with installonly packages. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.3.14-1.git78b3aa0
changelog:
  - tests: test_get_files(): test against a package with files outside /usr/bin and /etc. (Ales Kozumplik)
  - py: simplify exception throwing in load_system_repo(). (Ales Kozumplik)
  - Install stringarray.h so client programs can use hy_stringarray_free() (Richard Hughes)
  - py: bindings for package.files. (Ales Kozumplik)
  - add hy_package_get_files. (Ales Kozumplik)
  - Fix three trivial comment mis-spellings (Richard Hughes)
  - Set required python version to 2 (Richard Hughes)
  - Add a HY_VERSION_CHECK macro (Richard Hughes)
  - packaging: add license information to every file. (Ales Kozumplik)
  - py: add 'installed' property to hawkey.Package (Panu Matilainen)
  - tests: add test-case for hy_package_installed() (Panu Matilainen)
  - Add .baseurl getter to Python and C APIs. (Zdenek Pavlas)
  - tests: fix a memory leak revealed by libsolv commit 0804020. (Ales Kozumplik)
  - Return the installed size for installed packages in hy_package_get_size() (Panu Matilainen)
  - Add a function for determining whether HyPackage is installed or not (Panu Matilainen)


author: Aleš Kozumplík <ales@redhat.com> - 0.3.15-1.git996cd40
changelog:
  - py: fix memory leak in sack-py.c:new_package (Ales Kozumplik)
  - rebuild the package, the previous version does not correspond to an existing commit.


author: Aleš Kozumplík <ales@redhat.com> - 0.3.16-1.git4e79abc
changelog:
  - Correctly find the installed package when looking for updates (Richard Hughes)
  - Change the hy_package_get_update_severity() API to return an enum value (Richard Hughes)
  - Do not enforce all repos load all kinds of specified metadata (Richard Hughes)
  - Fix a tiny memory leak introduced in 68ebca4a80aec636d30a9fd4fb9aa2d9bf9a8eca (Richard Hughes)
  - Add methods to get details about package updates (Richard Hughes)
  - Add updateinfo support to hawkey, using the existing parser in libsolv (Richard Hughes)
  - Do not count updates when counting the number of packages in a sack (Richard Hughes)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.0-1.git0e5506a
changelog:
  - Detect the variant of armv7l. (RhBug:915269) (Ales Kozumplik)
  - add package.downloadsize and package.installsize. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.1-1.git6f35513
changelog:
  - spec file also generates python3-hawkey rpm (Jan Silhan)
  - fixed package object rich comparision (Jan Silhan)
  - Add libsolv-devel as a hard requires for hawkey-devel (Richard Hughes)
  - Python 3 bindings added (Jan Silhan)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.2-1.git4c51f65
changelog:
  - Goal: excluding and then installing results in incomprehenisble problem desc. (RhBug:995459) (Ales Kozumplik)
  - added support of cost option in repos (Jan Silhan)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.3-1
changelog:
  - methods get_delta_from_evr from package and add_cmdline_package from sack can take unicode string as argument (Jan Sil
  - tests: move TestSack out of the testing module into tests. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.4-1
changelog:
  - With the current libsolv there's no need to reinit solver for re-resolving. (Ales Kozumplik)
  - speedup fetching rpmdb a bit by reusing what we can from the old cache. (Ales Kozumplik)
  - adapt to libsolv 3b3dd72: obsoleting by an installonly package is erasing. (Ales Kozumplik)
  - tests: slim test_goal.c by using a testsys function instead of its reimplementation. (Ales Kozumplik)
  - tests: shave some lines off test_goal.c by using smarter Goal results assertion. (Ales Kozumplik)
  - installonlines: python bindings for installonly_limit. (Ales Kozumplik)
  - goal: when sorting the installonly candidates, consider the running kernel. (Ales Kozumplik)
  - Limit the number of installed installonlies. (RhBug:880524) (Ales Kozumplik)
  - iutil.c: dump_solvables_queue. (Ales Kozumplik)
  - refactor: concentrate all libsolv solver initialization into the static solve(). (Ales Kozumplik)
  - refactor: goal: reinit_solver() (Ales Kozumplik)
  - tests: dump_packagelist() can free the list too. (Ales Kozumplik)
  - iutil: running_kernel(). (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.5-1
changelog:
  - goal: installonly_limit = 0 means it is disabled. (Ales Kozumplik)
  - written API changes for Query filter latest option (RhBug:1025650) (Jan Silhan)
  - tests: superfluous query.run() calls. (Ales Kozumplik)
  - removed define PyString_AsString in pycomp.h (Jan Silhan)
  - replaced PyInt_FromLong with PyLong_FromLong (Jan Silhan)
  - replaced PyInt_AsLong with PyLongAs_Long (Jan Silhan)
  - added latest to query ignoring architectures (Jan Silhan)
  - renamed hy_query_filter_latest to hy_query_filter_latest_per_arch (Jan Silhan)
  - logging: additional logging output on repo loading errors. (Ales Kozumplik)
  - logging: refactor and add a loglevel. (Ales Kozumplik)
  - queries: allow glob matching in query. (Ales Kozumplik)
  - tests: slightly simplify test_subject.py. (Ales Kozumplik)
  - subject: yield correct results when globbing over a version. (Ales Kozumplik)
  - subject: globbing for sack._knows. (Ales Kozumplik)
  - py: subject: sack._knows doesn't need to take sack. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.6-1
changelog:
  - remove: packageDelta_new (Zdenek Pavlas)
  - get_delta_from_evr(): create the python object only when delta exists (Zdenek Pavlas)
  - fix pycomp_get_string(), pycomp_get_string_from_unicode() (Zdenek Pavlas)
  - fix get_str() in packagedelta-py (Zdenek Pavlas)
  - fix: spec: running tests in python3 after build (Jan Silhan)
  - tests: order packages in .repo files by name. (Ales Kozumplik)
  - fix: goal: reason for installing when more packages are available to a selector. (Ales Kozumplik)
  - tests: add a package that is not installed yet available in main, updates. (Ales Kozumplik)
  - add hy_packagedelta_get_chksum() (Zdenek Pavlas)
  - add hy_packagedelta_get_downloadsize() (Zdenek Pavlas)
  - add hy_packagedelta_get_baseurl() (Zdenek Pavlas)
  - test_query_provides_in: avoid ck_assert_int_eq() as it evaluates args twice (Zdenek Pavlas)
  - installonlies: fix sorting packages depending on the running kernel. (Ales Kozumplik)
  - use pool_lookup_deltalocation() (Zdenek Pavlas)
  - initialize _hawkey.PackageDelta type (Zdenek Pavlas)
  - delta_create(): fix the sizeof() (Zdenek Pavlas)
  - parse_reldep_str(): fix buffer overflow (Zdenek Pavlas)
  - string reldep parsing using parse_reldep_str (Jan Silhan)
  - added hy_query_filter_provides_in function (RhBug:1019168) (Jan Silhan)
  - added parse_reldep_str function (Jan Silhan)
  - fix: py: abort() from python when writing the system .solv cache fails. (Ales Kozumplik)
  - fix forgotten include causing a compiler warning in testsys.c. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.7-1
changelog:
  - Fix malfunction of Package.__lt__ and Package.__gt__ (RhBug:1014963) (Radek Holy)
  - Do not crash when querying provides that do not exist (Richard Hughes)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.8-1
changelog:
  - installonlies: erase packages depending on a kernel to be erased. (RhBug:1033881) (Ales Kozumplik)
  - fix: latest_per_arch on incompatible arches. (RhBug:1049226) (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.9-1
changelog:
  - selectors: allow selecting provides with full Reldep string. (Ales Kozumplik)
  - subject: work with full reldeps (containing the CMP flags). (Ales Kozumplik)
  - package: hy_package_get_hdr_end(). (Ales Kozumplik)
  - added subject C API (Jan Silhan)
  - added nevra C API (Jan Silhan)
  - fix not accepting numeric version in reldep (RhBug:1052961) (Jan Silhan)
  - fix Reldep inicialization without sack crash (RhBug:1052947) (Jan Silhan)
  - tests: make test_goal_selector_upgrade() less assuming. (Ales Kozumplik)


author: Radek Holý <rholy@redhat.com> - 0.4.10-1
changelog:
  - tests: add a negative test for reponame. (Radek Holy)
  - Add reponame into selector. (Radek Holy)
  - write_main() and write_ext(): even on error do not leave the temporary file behind. (Ales Kozumplik)
  - write_main() should do a better job erroring out on write errors. (Ales Kozumplik)
  - Fix vsnprintf SIGSEGV passing "%s" with no va_list args to pool_debug. (RhBug:1064459) (Ales Kozumplik)
  - Save the cache atomically. (RhBug:1047087) (Ales Kozumplik)
  - package: call repo_internalize_trigger in get_files() (RhBug:1062703) (Ales Kozumplik)
  - fixed reldep pointer NULL comparison (Jan Silhan)
  - fixed indentation in subject-py.c (Jan Silhan)
  - moved TEST_COND macro to iutil-py.h (Jan Silhan)
  - moved subject and nevra from python to C (Jan Silhan)
  - subject in C: work with full reldeps (Jan Silhan)


author: Aleš Kozumplik <akozumpl@redhat.com> - 0.4.11-1
changelog:
  - fixed typos in tutorial-py.rst (Jan Silhan)
  - added glob pattern search for arch to nevra_possibilities_real (RhBug:1048788) (Jan Silhan)
  - Left behind references to README.md from 3b47a13. (Ales Kozumplik)
  - Add Radek to AUTHORS. (Ales Kozumplik)
  - update the README. (Ales Kozumplik)
  - sack: write_*() should also check fclose(). (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.4.12-1
changelog:
  - Fix hy_stringarray_length. (Radek Holy)
  - tests: bring tests/repos/yum/recreate to a workable state again. (Ales Kozumplik)
  - added distupgrade function (Related:963710) (Jan Silhan)
  - remove: _HyPackageList.left. (Ales Kozumplik)
  - goal: track changes (as reinstalls) (RhBug:1068982) (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.4.13-1
changelog:
  - Add forgotten queue_free()s from bd3a2ae. (Ales Kozumplik)
  - cosmetic: some cleanups of 0e4327c. (Ales Kozumplik)
  - refactor rewrite_repos function (Michael Schroeder)
  - rewrite repos after calling addfileprovides (Michael Schroeder)
  - also set the repodata id if an extension is loaded from the cache (Michael Schroeder)
  - call hy_repo_link when setting the appdata of the system repo (Michael Schroeder)
  - use REPO_LOCALPOOL when loading the filelist extension (Michael Schroeder)
  - switch over to the written solv files to save memory (RhBug:1084174) (Michael Schroeder)
  - py: add downgradable and upgradable kwargs to _hawkey.Query.filter. (Radek Holy)
  - Fix comments in query.c (Radek Holy)
  - Add hy_query_filter_downgradable and hy_query_filter_upgradable. (Radek Holy)
  - tests: py: add tests for _hawkey.AdvisoryRef type. (Radek Holy)
  - tests: py: add tests for hawkey.Advisory type. (Radek Holy)
  - py: add _hawkey.Package.get_advisories method. (Radek Holy)
  - py: add _hawkey.Advisory type. (Radek Holy)
  - py: add _hawkey.AdvisoryRef type. (Radek Holy)
  - tests: add tests for advisoryref object. (Radek Holy)
  - tests: add tests for advisory object. (Radek Holy)
  - api change: deprecate hy_package_get_update_*. (Radek Holy)
  - Add hy_package_get_advisories method. (Radek Holy)
  - Add advisoryreflist object. (Radek Holy)
  - Add advisoryref object. (Radek Holy)
  - Add advisorylist object. (Radek Holy)
  - Add advisory object. (Radek Holy)
  - Rename SOLVABLE_NAME_UPDATE_PREFIX to SOLVABLE_NAME_ADVISORY_PREFIX. (Radek Holy)
  - sack: Also look in /usr/share/rpm for Packages (Colin Walters)
  - py: add load_updateinfo kwarg to _hawkey.Sack.load_yum_repo. (Radek Holy)
  - py: add _hawkey.Repo.updateinfo_fn getsetter. (Radek Holy)
  - py: more detailed error string in Sack.add_cmdline_package(). (Ales Kozumplik)
  - Fix hy_query_run to list only packages. (Radek Holy)
  - Fix goal to add only packages if name glob selector is given. (Radek Holy)
  - Fix hy_goal_run_all_flags to resolve only package installonlies. (Radek Holy)
  - Fix sack_knows to check packages only. (Radek Holy)
  - Add is_package function. (Radek Holy)
  - Fix typo in filter_rco_reldep's assertion. (Radek Holy)


author: Aleš Kozumplik <ales@redhat.com> - 0.4.14-1
changelog:
  - py: cosmetic: drop py_ prefixes from static functions in hawkeymodule.c. (Ales Kozumplik)
  - Expose hy_arch_detect(). (Ales Kozumplik)
  - fixed clang warning of uninitialized variable (Jan Silhan)
  - doc: fixed typo (Jan Silhan)
  - logging: log checksums of written/loaded repositories. (RhBug:1071404) (Ales Kozumplik)
  - logging hawkey version number. (Ales Kozumplik)
  - implement updateinfo caching (Michael Schroeder)
  - cosmetic: fixed sliced changelog lines in spec file (Jan Silhan)


author: Aleš Kozumplik <ales@redhat.com> - 0.4.16-1
changelog:
  - py3: use sphinx-build-3 (which doesn't encode the minor py version) (RhBug:1098098) (Ales Kozumplik)
  - tests: fix test_list_arches(), there's new architectures listed now. (Ales Kozumplik)
  - doc: packaging: add license block to each .rst. (Ales Kozumplik)
  - Subject: accepts/returns pattern in unicode (Related: RhBug:1092777) (Jan Silhan)
  - fix kernel detection by being more strict what we look for. (RhBug:1087534) (Ales Kozumplik)
  - [kernel] look for the installed kernel in @System. (Ales Kozumplik)
  - fix: sigsegv when wrong reldep is passed to selector as a provide. (Ales Kozumplik)
  - .gitignore: __pycache__ (Ales Kozumplik)
  - installonlies: log the discovered running kernel. (Ales Kozumplik)
  - py: Package: all string attributes are in Unicode (RhBug:1093887) (Jan Silhan)
  - py: fix: certain string assignments should raise TypeError, never SystemError. (Ales Kozumplik)
  - cleanup: tweak declarations in pycomp.h. (Ales Kozumplik)
  - goal: hy_goal_write_debugdata() takes target dir parameter. (Ales Kozumplik)
  - iutil.c: simplify queue2plist() implementation. (Ales Kozumplik)
  - Goal: listing unneeded packages. (Ales Kozumplik)
  - doc: make the documentation generation independent of hawkey the python module. (Ales Kozumplik)
  - removed unused imports (Jan Silhan)
  - distro-sync doesn't replace arch (RhBug:1054909) (Jan Silhan)
  - replaced deprecated fail_unless with ck_assert_int_eq (Jan Silhan)
  - added python bindings to nevra attribute filter (Jan Silhan)
  - added nevra filter flag to query C API (Jan Silhan)


author: Aleš Kozumplik <ales@redhat.com> - 0.4.17-1
changelog:
  - sack: add a public function to get the running kernel package. (Ales Kozumplik)
  - query: fix querying for string provides. (RhBug:1114483) (Ales Kozumplik)
  - fix: commandline RPMs do not provide their files (RhBug:1112810) (Ales Kozumplik)
  - tests: prevent automatic Python deps in tour.rpm. (Ales Kozumplik)
  - deepcopy of sack raises error (RhBug:1059149) (Jan Silhan)


author: Aleš Kozumplik <ales@redhat.com> - 0.4.18-1
changelog:
  - api change: py: deprecate _hawkey.Advisory.filenames. (Radek Holy)
  - api change: drop deprecated hy_package_get_update_*. (Radek Holy)
  - api change: deprecate hy_advisory_get_filenames. (Radek Holy)
  - tests: py: add tests for _hawkey.AdvisoryPkg type. (Radek Holy)
  - py: add _hawkey.Advisory.packages attribute. (Radek Holy)
  - py: add _hawkey.AdvisoryPkg type. (Radek Holy)
  - tests: add tests for advisorypkg object. (Radek Holy)
  - Add hy_advisory_get_packages method. (Radek Holy)
  - Add advisorypkglist object. (Radek Holy)
  - Add advisorypkg object. (Radek Holy)
  - selector: added file filter (Related: RhBug:1100946) (Jan Silhan)
  - priorities: change the meaning of the setting---lower number=better prio. (Ales Kozumplik)
  - py: better error checking in repo-py.c:set_int(). (Ales Kozumplik)
  - py: api: hawkey.Repo() does not accept cost keyword arg. (Ales Kozumplik)
  - fix: nevra: hy_nevra_cmp (Jan Silhan)
  - repos: priorities. (Ales Kozumplik)
  - py3: Sack: accepts unicoded cachedir (Related: RhBug:1108908) (Jan Silhan)


author: Aleš Kozumplik <ales@redhat.com> - 0.4.19-1
changelog:
  - packaging: bump the SONAME as there are dropped API calls. (Ales Kozumplik)
  - Support package splitting via obsoletes. (RhBug:1107973) (Ales Kozumplik)
  - api change: py: convert Advisory, AdvisoryRef and AdvisoryPkg attributes to Unicode. (Radek Holy)
  - hy_err_str: it's best to make it static. (Ales Kozumplik)
  - Hide hy_err_str from errno.h (Ales Kozumplik)
  - py: detailed error reporting. (Ales Kozumplik)
  - doc: deprecation policy. (Ales Kozumplik)


author: Aleš Kozumplik <ales@redhat.com> - 0.5.0-1
changelog:
  - sack: include directive support added (Related:RhBug:1055910) (Jan Silhan)
  - sack: using pool->considered instead of SOLVER_LOCK for excludes (RhBug:1099342) (Jan Silhan)
  - cosmetic: replaced fail_unless with ck_assert_int_eq (Jan Silhan)


author: Aleš Kozumplik <ales@redhat.com> - 0.5.1-1
changelog:
  - pool_split_evr() assert if we hit unexpected data. (Related:RhBug:1141634) (Ales Kozumplik)
  - README: changed references to new repo location (Jan Silhan)
  - iutil-py: removed pyseq_to_packagelist function (Jan Silhan)
  - improved performance of python sequence iteration (RhBug:1109554) (Jan Silhan)
  - reldep: constructor accepts unicode strings (RhBug:1124968) (Jan Silhan)
  - Fix pool_split_evr's handling of EVRs without releases. (Radek Holy)
  - added sha512 support (RhBug:1082658) (Jan Silhan)
  - cosmetic: removed unneeded semicolon (Jan Silhan)
  - goal: does not raise exception on empty selector (Related:RhBug:1127206) (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> - 0.5.3-1
changelog:
  - README: made readthedoc documentation official (Jan Silhan)
  - sack: deprecation of create_cmdline_repo (Jan Silhan)
  - does not break Sack.__init__ API from 8ce3ce7 (Jan Silhan)
  - doc: document the new logdir parameter of Sack.__init__. (Radek Holy)
  - New version: 0.5.3 (Jan Silhan)
  - apichange: sack: added optional param logdir (Related:RhBug:1175434) (Jan Silhan)
  - apichange: py: rename: Sack.cache_path -> Sack.cache_dir (Radek Holy)
  - doc: add Sack to the Python API reference manual. (Radek Holy)
  - cosmetic: autopep8 applied on __init__.py (Jan Silhan)
  - query: support multiple flags in filter (RhBug:1173027) (Jan Silhan)
  - packaging: make the spec file compatible with GitHub packaging guideliness. (Radek Holy)
  - New version: 0.5.2 (Michal Luscon)
  - hy_chksum_str() returns NULL in case of incorrect type (Michal Luscon)
  - Fix defects found by coverity scan (Michal Luscon)
  - selector: allow selecting provides with globs (RhBug: 1148353) (Michal Luscon)
  - py: nevra_init() references possibly uninitialized variable. (Ales Kozumplik)
  - package: add weak deps attributes. (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.5.3-2
changelog:
  - bumped release to be greater than f21 release
  - Add Peter to Authors (Peter Hjalmarsson)
  - Add support for armv6hl (Peter Hjalmarsson)


author: Michal Luscon <mluscon@redhat.com> 0.5.4-1
changelog:
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 0.5.5-1
changelog:
  - get rid of yum references (Jan Silhan)
  - sack: force recomputing excludes (Jan Silhan)
  - doc: cosmetic: made Sack headline more readable (Jan Silhan)
  - doc: sack: warning about using excludes, includes, disabling and enabling
    repos (Jan Silhan)
  - cosmetic: removed commented code (Jan Silhan)
  - sack: calls reinitiate provides after changing considered map (RhBug:1099342)
    (Jan Silhan)
  - fixed memleak from d8f2ca7 (Jan Silhan)
  - doc: add to CMDLINE_REPO_NAME and SYSTEM_REPO_NAME the Python API reference
    manual. (Radek Holy)
  - doc: add Repo to the Python API reference manual. (Radek Holy)
  - updated load_test_repo() to be able to load non-standard system repo (Michael
    Mraka)
  - python tests for goal.run(verify=True) (Michael Mraka)
  - test for HY_VERIFY flag (Michael Mraka)
  - introduced verify option for goal.run() (Michael Mraka)
  - AUTHORS: fixed name (Michael Mraka)
  - AUTHORS: added 3 Michaels (Jan Silhan)
  - Build for x86_64, correction for C++ (Michal Ruprich)


author: Michal Luscon <mluscon@redhat.com> 0.5.7-1
changelog:
  - spec: add a %{snapshot} macro for easier snapshot building (Radek Holy)
  - doc: sack: deep copy added to warning section (Jan Silhan)
  - doc: sack: warning about multiple Sack usage (Jan Silhan)
  - doc: sack: len(sack) -> method __len__ (Jan Silhan)
  - Package.files returns list of Unicode objects (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-1
changelog:
  - added implicit-function-declaration compile flag (Jan Silhan)
  - subject: Fix compiler warning introduced by previous commit (Colin Walters)
  - python: Verify that nosetest actually ran any tests (Colin Walters)
  - AUTHORS: updated (Jan Silhan)
  - subject: Remove internal header includes from public header (Colin Walters)
  - maintain result map in query (RhBug:1049205) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - package: Don't assume the same pool in hy_package_cmp() (Matthew Barnes)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-2
changelog:
  - tito: change vesiontagger to releasetagger (Jan Silhan)
  - don't require python3 in rhel (Jan Silhan)


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - default config tweaks:
   * harden httpd.conf w.r.t. .htaccess restriction (#591293)
   * load mod_substitute, mod_version by default
   * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
   * add commented list of shipped-but-unloaded modules
   * bump up worker defaults a little
   * drop KeepAliveTimeout to 5 secs per upstream
  - fix LSB compliance in init script (#522074)
  - bundle NOTICE in -tools
  - use init script in logrotate postrotate to pick up PIDFILE
  - drop some old Obsoletes/Conflicts


author: Joe Orton <jorton@redhat.com> - 2.2.17-7
changelog:
  - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
  - add man page stubs for httpd.event, httpd.worker
  - drop distcache support
  - add STOP_TIMEOUT support to init script


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.4.1-1
changelog:
  - update to 2.4.1
  - adopt upstream default httpd.conf (almost verbatim)
  - split all LoadModules to conf.modules.d/*.conf
  - include conf.d/*.conf at end of httpd.conf
  - trim %changelog


author: Joe Orton <jorton@redhat.com> - 2.4.1-2
changelog:
  - clean docroot better
  - ship proxy, ssl directories within /var/cache/httpd
  - default config:
   * unrestricted access to (only) /var/www
   * remove (commented) Mutex, MaxRanges, ScriptSock
   * split autoindex config to conf.d/autoindex.conf
  - ship additional example configs in docdir


author: Joe Orton <jorton@redhat.com> - 2.4.1-3
changelog:
  - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
  - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage


author: Joe Orton <jorton@redhat.com> - 2.4.2-4
changelog:
  - pull from upstream:
    * use TLS close_notify alert for dummy_connection (r1326980+)
    * cleanup symbol exports (r1327036+)


author: Joe Orton <jorton@redhat.com> - 2.4.2-15
changelog:
  - move tmpfiles.d fragment into /usr/lib per new guidelines
  - package /run/httpd not /var/run/httpd
  - set runtimedir to /run/httpd likewise


author: Joe Orton <jorton@redhat.com> - 2.4.2-18
changelog:
  - avoid use of "core" GIF for a "core" directory (#168776)
  - drop use of "syslog.target" in systemd unit file


author: Joe Orton <jorton@redhat.com> - 2.4.3-7
changelog:
  - use systemd scriptlets if available (#850149)
  - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists


author: Joe Orton <jorton@redhat.com> - 2.4.3-13
changelog:
  - filter mod_*.so auto-provides (thanks to rcollet)
  - pull in syslog logging fix from upstream (r1344712)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
changelog:
  - execute systemctl reload as result of apachectl graceful
  - mod_ssl: ignore SNI hints unless required by config
  - mod_cache: forward-port CacheMaxExpire "hard" option
  - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
    is not configured.


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
changelog:
  - htpasswd/htdbm: fix hash generation bug (#956344)
  - do not dump vhosts twice in httpd -S output (#928761)
  - mod_cache: fix potential crash caused by uninitialized variable (#954109)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Joe Orton <jorton@redhat.com> - 2.4.6-13
changelog:
  - mod_ssl: sanity-check use of "SSLCompression" (#1036666)
  - mod_proxy_http: fix brigade memory usage (#1040447)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1077907)
  - mod_log_config: add security fix for CVE-2014-0098 (#1077907)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18
changelog:
  - mod_cgid: add security fix for CVE-2014-0231 (#1120608)
  - mod_proxy: add security fix for CVE-2014-0117 (#1120608)
  - mod_deflate: add security fix for CVE-2014-0118 (#1120608)
  - mod_status: add security fix for CVE-2014-0226 (#1120608)
  - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19
changelog:
  - fix build on ppc64le by using configure macro (#1125545)
  - compile httpd with -O3 on ppc64le (#1123490)
  - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31
changelog:
  - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
    instead of hardcoding it (#1168050)
  - mod_proxy: support Unix Domain Sockets (#1168081)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32
changelog:
  - mod_authn_dbd: fix use-after-free bug with postgresql (#1188779)
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_status: honor remote_ip as documented (#1169081)
  - mod_deflate: fix decompression of files larger than 4GB (#1170214)
  - core: improve error message for inaccessible DocumentRoot (#1170220)
  - ab: try all addresses instead of failing on first one when not available (#1125276)
  - mod_proxy_wstunnel: add support for SSL (#1180745)
  - mod_proxy_wstunnel: load this module by default (#1180745)
  - mod_rewrite: add support for WebSockets (#1180745)
  - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1170206)
  - mod_ssl: fix memory leak on httpd reloads (#1181690)
  - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476)
  - mod_cgi: return error code 408 on timeout (#1162152)
  - mod_dav_fs: set default value of DAVLockDB (#1176449)
  - add Documentation= to the httpd.service and htcacheclean.service (#1184118)
  - do not display "bomb" icon for files ending with "core" (#1170215)
  - add missing Reason-Phrase in HTTP response headers (#1162159)
  - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625)
  - apachectl: ignore HTTPD variable from sysconfig (#1214401)
  - apachectl: fix "graceful" documentation (#1214398)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34
changelog:
  - mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328)
  - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820)
  - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219)
  - mod_ssl: do not send NPN extension with not configured (#1226015)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35
changelog:
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_dav: send complete response when resource is created (#1235383)
  - apachectl: correct the apachectl status man page (#1231924)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36
changelog:
  - Revert fix for #1162152, it is not needed in RHEL7
  - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)


author: CentOS Sources <bugs@centos.org> - 2.4.6-40.el7.centos
changelog:
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Mike A. Harris <mharris@redhat.com> 0.30-1
changelog:
  - Reconfigured Cards database to default to XFree86 4.x for ALL video
    hardware, since 3.3.6 support is being removed.  Video cards not
    supported natively by 4.x will be changed to use the vesa or vga
    driver, or completely removed as unsupported.


author: Mike A. Harris <mharris@redhat.com> 0.31-1
changelog:
  - Modified ATI entries in pcitable to be able to autodetect the FireGL 8700
    and FireGL 8800 which both have the same ID, but different subdevice ID's.
    Added entries to Cards database for the 8700/8800 as well.


author: Bill Nottingham <notting@redhat.com> 0.33-1
changelog:
  - Eizo monitor updates (#56080, <triad@df.lth.se>)
  - pci.ids updates, corresponding pcitable updates
  - pcilint for pcitable


author: Mike A. Harris <mharris@redhat.com> 0.35-1
changelog:
  - Updated Cards db for CT69000
  - Various ATI cleanups and additions to Cards and pcitable
  - Updated S3 Trio3D to default to "vesa" driver (#59956)


author: Mike A. Harris <mharris@redhat.com> 0.37-1
changelog:
  - Changed Matrox G450 driver default options to fix bug (#66697)
  - Corrected S3 Trio64V2 bug in Cards file (#66492)


author: Bill Nottingham <notting@redhat.com> 0.44-1
changelog:
  - fix some of the Dell entries
  - add cardbus controller id (#71198)
  - add audigy mapping
  - add NEC monitor (#71320)


author: Bill Nottingham <notting@redhat.com> 0.61-1
changelog:
  - move pcmcia config file here
  - sort MonitorsDB, add some entries, remove dups
  - switch some network driver mappings


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Complete reconstruction of all Neomagic hardware entries in Cards
    database to reflect current XFree86, as well as pcitable update,
    and submitted cleaned up entries to sourceforge


author: Mike A. Harris <mharris@redhat.com> 0.65-1
changelog:
  - Added Card:S3 Trio64V2 (Unsupported RAMDAC) entry to pcitable, pci.ids, and
    Cards database to default this particular variant to "vesa" driver (#81659)


author: Mike A. Harris <mharris@redhat.com> 0.68-1
changelog:
  - Massive update of all ATI video hardware PCI IDs in pcitable and a fair
    number of additions and corrections to the Cards database as well


author: Mike A. Harris <mharris@redhat.com> 0.73-1
changelog:
  - Updated pcitable and Cards database to fix Savage entries up a bit, and
    change default Savage/MX driver to 'vesa' as it is hosed and with no sign
    of working in time for 4.3.0.  Fixes (#72476,80278,80346,80423,82394)


author: Mike A. Harris <mharris@redhat.com> 0.88-1
changelog:
  - Update MonitorsDB for new IBM monitors from upstream XFree86 bugzilla:
    http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=459


author: Mike A. Harris <mharris@redhat.com> 0.99-1
changelog:
  - Added entries for Radeon 9600/9600Pro/9800Pro to Cards
  - Fixed minor glitch in pcitable for Radeon 9500 Pro


author: Bill Nottingham <notting@redhat.com> 0.105-1
changelog:
  - many monitor updates (#114260, #114216, #113993, #113932, #113782,
    - add some PCMCIA cards (#113006, #112505)


author: Mike A. Harris <mharris@redhat.com> 0.110-1
changelog:
  - Added 3Dfx Voodoo Graphics and Voodoo II entries to the Cards database, both
    pointing to Alan Cox's new "voodoo" driver which is now included in XFree86
    4.3.0-62 and later builds in Fedora development.  Mapped their PCI IDs to
    the new Cards entry in pcitable.
  - Updated the entries for 3Dfx Banshee


author: Bill Nottingham <notting@redhat.com> 0.116-1
changelog:
  - move updfstab.conf here
  - add wireless card (#116865)
  - add laptop display panel (#117385)
  - add clipdrive (#119928)
  - add travelling disk (#119143)
  - add NEXDISK (#106782)


author: Bill Nottingham <notting@redhat.com> - 0.120-1
changelog:
  - mainly:
    fix upgradelist module for CMPci cards (#123647)
  - also:
    add another wireless card (#122676)
    add wireless card (#122625)
    add 1280x800 (#121548)
    add 1680x1050 (#121148)
    add IntelligentStick (#124313)


author: Mike A. Harris <mharris@redhat.com> 0.151-1
changelog:
  - Added one hundred billion new nvidia PCI IDs to pcitable and Cards to
    synchronize it with X.Org X11 6.8.2.  (#140601)


author: Bill Nottingham <notting@redhat.com> 0.152-1
changelog:
  - fix qlogic driver mappings, add upgradelist mappings for the modules
    that changed names (#150621)


author: Bill Nottingham <notting@redhat.com> - 0.159-1
changelog:
  - pcitable: make branding happy (#160047)
  - Cards: add required blank line (#157972)
  - add some monitors
  - add JVC CD-ROM (#160907, <richard@rsk.demon.co.uk>)
  - add hisax stuff to blacklist (#154799, #159068)


author: Bill Nottingham <notting@redhat.com> - 0.160-1
changelog:
  - move blacklist to /etc/modprobe.d, require new module-init-tools
  - add LG monitors (#162466, #161734)
  - add orinoco card (#161696)
  - more mptfusion stuff (#107088)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - migrate mpt module names (#161420)
  - remove pcitable entries for drivers in modules.pcimap
  - switch lone remaining 'Server' entry - that can't work right


author: Jeremy Katz <katzj@redhat.com> - 0.171-1
changelog:
  - r128 -> ati.  should fix the unresolved symbol and kem says its more 
    generally the "right" thing to do


author: Adam Jackson <ajackson@redhat.com> - 0.181-1
changelog:
  - Updated videodrivers to mention i945
  - New monitors: Sony CPD-G420 (#145902), Compaq P1110 (#155120).


author: Adam Jackson <ajackson@redhat.com> - 0.182-1
changelog:
  - Added ast driver description to videodrivers
  - Numerous Dell monitor additions (#196734)
  - Numerous Belinea monitor additions (#198087)


author: Phil Knirsch <pknirsch@redhat.com> - 0.183-1
changelog:
  - Updated pci.ids before FC6 final (#198994)
  - Added several missing Samsung monitors (#197463)
  - Included a new inf2mondb.py from Matt Domsch (#158723)


author: Karsten Hopp <karsten@redhat.com> 0.194-1
changelog:
  - Update to latest pci.ids/usb.ids for RHEL5
  - Resolves: #220182
    Add some Dell monitors to MonitorDB


author: Karsten Hopp <karsten@redhat.com> 0.205-1
changelog:
  - really update pci.ids, update-pciids downloaded an old file
  - disable iwl4965 blacklist as it is not approved yet (#245379)


author: Karsten Hopp <karsten@redhat.com> 0.207-1
changelog:
  - pull new upstream pci.ids and rebuild
  - Resolves: bz #251732
  - Resolves: bz #251734
  - Resolves: bz #252195
  - Resolves: bz #252196
  - Resolves: bz #241274


author: Karsten Hopp <karsten@redhat.com> 0.212-1
changelog:
  - pull new upstream pci.ids, usb.ids
  - Resolves: #300831
  - added HP TFT5600 LCD Monitor
  - Resolves: #250569
  - added Acer AL1916W, Eizo L568/L568D, Samsung 795DF
  - Resolves: #250582
  - Add Samsung 205BW/206BW/225BW/226BW
  - Resolves: #250584
  - Add Samsung 931BF
  - Resolves: #250587


author: Karsten Hopp <karsten@redhat.com> 0.217-1
changelog:
  - update pci.ids, oui.txt
  - update usb.ids, fixes #439963
  - add HP w1907 LCD monitor, fixes #431359
  - fix many monitor entries (Stanislav Ievlev, #430276)


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - update pci.ids, usb.ids, oui.txt
  - MonitorsDB: add some Samsung monitors (Ronald Warsow)
  - MonitorsDB: add Dell E1609W (Matt Domsch)
  - MonitorsDB: add 7 Dell monitors (Matt Domsch)
  - MonitorsDB: add a bunch of Hyundai and ImageQuest monitors


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - add new monitor entries from Mandriva hardware database (Thierry Vignaud)
  - make generic entries have properly formated frequencies (Thierry Vignaud)
  - remove duplicate Dell monitor entries (Thierry Vignaud)
  - more vendor name fixes
  - fix extra field in 'Compudyne KD-1500N' definition (Thierry Vignaud)
  - make Dell monitors case consistent (Thierry Vignaud)
  - make all GoldStar monitors have the same vendor name (Thierry Vignaud)
  - add URL of git repository
  - fix spacing (Thierry Vignaud)
  - sort MonitorDB file with LANG=C sort -f -t ";" -k1,2
  - add Samsung SyncMaster 2443BWX (Marc van den Dikkenberg)
  - add some Lenovo monitors (Im Sza)


author: Karsten Hopp <karsten@redhat.com> 0.223-1
changelog:
  - update usb.ids pci.ids oui.txt
  - rename /etc/modprobe.d/blacklist to /etc/modprobe.d/blacklist.conf


author: Karsten Hopp <karsten@redhat.com> 0.232-1
changelog:
  - update usb.ids, out.txt and pci.ids (#550020, #611860)
  - fix incorrect syntax doc/comment in blacklist.conf (Ville Skyttä, #532802)
  - add Acer B243HL and BenQ G2420HDBL (Ville Skyttä, #590787)
  - add HP LP2475w and Samsung 2494HM (Ville Skyttä, #595059)


author: Karsten Hopp <karsten@redhat.com> 0.233-7
changelog:
  - bump release
  - update oui.txt URL
  - fix tarball name in spec file
  - update usb.ids, out.txt and pci.ids


author: Michal Minar <miminar@redhat.com> 0.247-1
changelog:
  - Moved blacklist.conf from /etc/modprobe.d to /usr/lib/modprobe.d.
  - Renamed it to dist-blacklist.conf.
  - Data files update


author: Michal Minar <miminar@redhat.com> 0.252-7.1
changelog:
  - Bumped release to reflect rhel version.
  - Fixed bogus dates in changelog.
  - Generate and install hwdb.d/* files.


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.1
changelog:
  - Remove build dependencies on libXNVCtrl-devel and w3m because RHEL
    does not have them (w3m is available on x86_64, but not s390).
    Resolves: rhbz978752


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.2
changelog:
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.
    Resolves: rhbz910165


author: Don Zickus <dzickus@redhat.com> - 1.7-4
changelog:
  - Fix dangling symlink for hwloc-ls manpage
    Resolves: rhbz1081236
    Add desktop entry for lstopo
    Resolves: rhbz1229313


author: Tomas Hozza <thozza@redhat.com> - 0-0.20.20130826git
changelog:
  - Build daemons only for x86_64 architecture (#1010220)
  - Bump release to 20 to prevent RHEL6 -> RHEL7 update path issues


author: Tomas Hozza <thozza@redhat.com> - 0-0.21.20130826git
changelog:
  - Use 'hypervkvpd' directory in libexec for KVP daemon scripts (#1010280)
  - daemons are now WantedBy multi-user.target instead of basic.target (#1010284)


author: Matej Muzila <mmuzila@redhat.com> - 0-0.25.20141008git
changelog:
  - Daemons updated to the last git snapshot
  - Use kernel-headers instead of kernel-devel to build
  - Added Hyper-V fcopy daemon as hypervfcopyd subpackage


author: Vitaly Kuznetsov <vkuznets@redhat.com> - 0-0.26.20150402git
changelog:
  - 2015-04-02 git snapshot
  - VSS: skip all readonly-mounted filesystems (#1160584)
  - VSS: support partitions mounted several times (#1169724)


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2
changelog:
  - Don't install the address file or config file, the config file isn't
    strictly needed and defaults will be used if it isn't installed, but
    with the address file we specifically need to build one based upon
    the machine where the program is installed, a default file is not only
    not helpful, but it messes up the daemon.
  - Related: bz700285


author: Doug Ledford <dledford@redhat.com> - 1.0.5-3
changelog:
  - Until the next upstream release, the pid file is in a wonky location.
    Make the init script know about that location so we can stop properly.
  - Resolves: bz808599


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.1.20150717git825da3ccd2
changelog:
  - Update to pre-release git snapshot of 1.0.10.
  - Adds libibacmp shared library.
  - Rebase coverity patch.
  - Minor spec file cleanup.
  - Resolves: bz1169952


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.3.20150717git825da3ccd2
changelog:
  - Put libibacmp.so in the main package, it's needed at runtime.
  - No need to run ldconfig, the .so is not in the linker path.
  - Filter the plugin from RPM provides.
  - Related: bz1169952


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-1
changelog:
  - Add --xim argument in xinput-ibus
  - Add Obsoletes:  ibus-qt <= 1.1.0
  - Move libibus.so.* to ibus-libs to make ibus multilib.
  - Update to 1.1.0.20090211.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-6
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - The new patch fixes ibus-x11 segfault (#485661).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-10
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Put 'Select an input method' in engine select combobox (#485861).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090225-1
changelog:
  - Update to ibus-1.1.0.20090225.
  - Fix problems in %post and %postun scripts.
  - Hide ibus & ibus preferences menu items.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-1
changelog:
  - Update to ibus-1.1.0.20090311.
  - Update setup ui follow GNOME Human Interface Guidelines 2.2 (#489497).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-2
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Fix bug 490009 - Deleting Next Engine shortcuts doesn't work
  - Fix bug 490381 - Change "Next/Previous engine" labels


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-3
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree
  - Fix bug 491999 - up/down arrow keys broken in xchat


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090331-1
changelog:
  - Update to ibus-1.1.0.20090331.
  - Fix bug 492956 - screws up keyboard input in firefox
  - Fix bug 490143 - ibus issue with gnome-keyring


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-1
changelog:
  - Update to ibus-1.1.0.20090407.
  - Fix bug 491042 - ibus default trigger hotkeys
  - Fix bug 492929 - ibus-hangul can cause gtk app to lockup
  - Fix bug 493701 -  (ibus) imsettings disconnect/reconnect kills gtk app
  - Fix bug 493687 -  ibus-hangul should default to vertical candidate selection
  - Fix bug 493449 -  ibus broke Alt-F2 command auto-completion


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-3
changelog:
  - Update the tarball.
  - Fix bug 494511 - ibus-gtk makes gnome-terminal abort 
    when a key is pressed


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-2
changelog:
  - Update ibus-HEAD.patch.
  - Change the mode of /tmp/ibus-$USER to 0700 to improve security
  - Change the mode of /tmp/ibus-$USER/socket-address to 0600 to improve security
  - Update as.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-3
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 495431 -  ibus Release modifier doesn't work with Alt
  - Fix bug 494445 -  ibus-hangul missing Hangul Han/En mode
    (and Alt_R+release hotkey)
  - Update te.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090417-1
changelog:
  - Update to ibus-1.1.0.20090417.
  - Fix bug 496199 -  cannot remove Ctrl+Space hotkey with ibus-setup


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-1
changelog:
  - Update to ibus-1.1.0.20090423.
  - Fix bug 497265 - [mai_IN] Maithili language name is not correct.
  - Fix bug 497279 - IBus does not works with evolution correctly.
  - Enhance authentication both in daemon & clients


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-2
changelog:
  - Fix bug 498141 - new ibus install needs gtk immodules
  - Separate ibus document from ibus-devel to ibus-devel-docs


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-1
changelog:
  - Update to 1.1.0.20090508
  - Fix bug 499533 - [Indic] ibus should allow input in KDE using all supported Indic locales
  - Fix bug 498352 - hotkey config table should list keys in same order as on main setup page
  - Fix bug 497707 - ibus French translation update


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-2
changelog:
  - Remove requires notification-daemon
  - Fix bug 500588 - Hardcoded requirement for notification-daemon


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-4
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 501211 - ibus-setup window should be raised if running or just stay on top/grab focus
  - Fix bug 501640 - ibus should adds new IMEs at end of engine list not beginning
  - Fix bug 501644 - [IBus] focus-out and disabled IME should hide language panel


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-5
changelog:
  - Update ibus-HEAD.patch.
  - Show the default input method with bold text
  - Add information text below input methods list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090609-1
changelog:
  - Update to Update to 1.1.0.20090609
  - Fix bug 502414 - Implemented on-screen help facility
  - Fix bug 502561 - iBus should show keymap name on iBus panel
  - Fix bug 498043 - ibus Alt-grave trigger conflicts with openoffice.org
  - Implemented API for setting labels for candidates in LookupTable


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090612-1
changelog:
  - Update to 1.1.0.20090612
  - Fix bug 504942 - PageUp and PageDown do not work in candidate list
  - Fix bug 491040 - Implememnt mouse selection in candidate list


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090828-1
changelog:
  - Update to 1.2.0.20090828
  - Change the icon on systray.
  - Fix segment fault in ibus_hotkey_profile_destroy
  - Fix some memory leaks.


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090915-1
changelog:
  - Update to 1.2.0.20090915
  - Fix bug 521591 - check if the icon filename is a real file before trying to open it
  - Fix bug 522310 - Memory leak on show/hide
  - Fix bug 509518 - ibus-anthy should only override to jp layout for kana input


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091124-1
changelog:
  - Update to 1.2.0.20091124
  - Update some translations.
  - Fix bug 538147 - [abrt] crash detected in firefox-3.5.5-1.fc12


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091204-1
changelog:
  - Update to 1.2.0.20091204
  - Fix Bug 529920 - language panel pops up on the wrong monitor
  - Fix Bug 541197 - Ibus crash


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091225-1
changelog:
  - Update to 1.2.0.20091225
  - Fix bug 513895 - new IME does not show up in ibus-setup
  - Fix bug 531857 - applet order should correspond with preferences order
  - Fix bug 532856 - should not list already added input-methods in Add selector


author: Peng Huang <phuang@redhat.com> - 1.3.0-3
changelog:
  - Update ibus-HEAD.patch
  - Fix bug - some time panel does not show candidates.
  - Update some po files


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.8-1
changelog:
  - Updated to 1.3.8
  - Added ibus-541492-xkb.patch
    Fixes Bug 541492 - ibus needs to support some xkb layout switching
  - Added ibus-435880-surrounding-text.patch
    Fixes Bug 435880 - ibus-gtk requires surrounding-text support
  - Added ibus-xx-workaround-gtk3.patch
    Workaround for f14 http://koji.fedoraproject.org/koji/taskinfo?taskID=2516604


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20101202-1
changelog:
  - Updated to 1.3.99.20101202
  - Added ibus-530711-preload-sys.patch
    Fixed Bug 530711 - Reload preloaded engines by login


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110117-1
changelog:
  - Updated to 1.3.99.20110117
  - Fixed Bug 666427 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110228-1
changelog:
  - Updated to 1.3.99.20110228
  - Integrated the part of gjs in Bug 657165 ibus for gnome-shell.
    Added ibus-657165-panel-libs.patch
    Added gnome-shell-ibus-plugins-20110304.tar.bz2
  - Fixed Bug 675503 - a regression in sync mode
    Added ibus-675503-gnome-shell-workaround.patch until gnome-shell is updated.
  - Fixed Bug 677856 - left ibus snooper when im client is switched.
  - Fixed Bug 673047 - abrt ibus_xkb_get_current_layout for non-XKB system
    Updated ibus-541492-xkb.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110408-1
changelog:
  - Updated to 1.3.99.20110408
    Fixed Bug 683484 - Timed out SetEngine when select an engine from panel.
    Fixed Bug 657165 - IBus for gnome-shell for Fedora 15.
  - Upstreamed ibus-657165-panel-libs.patch
  - Removed ibus-675503-gnome-shell-workaround.patch
  - Added ibus-xx-setup-frequent-lang.patch
  - Updated ibus-541492-xkb.patch
    Fixed Bug 696481 - no the variant maps without language codes
  - Added dependency of imsettings-gnome.
    Fixed Bug 696510 - need a dependency in ibus-gtk3 for imsettings-gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110419-1
changelog:
  - Updated to 1.3.99.20110419
  - Added ibus-HEAD.patch
    Fixed Bug 697471 - ibus-gconf zombie when restart ibus from ibus panel.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 701202 - us(dvorak) does not show up in list
    Updated ibus-1.0.pc for ibus-xkb
    Showed XKB variant descriptions only without layout descriptions.
  - Updated ibus-xx-setup-frequent-lang.patch
    Updated UI strings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-3
changelog:
  - Fixed Bug 700472 Use a symbol icon instead of an image icon.
  - Updated ibus-HEAD.patch for upstream.
  - Removed ibus-435880-surrounding-text.patch as upstream.
  - Added ibus-711632-fedora-fallback-icon.patch
    Fixed SEGV with no icon in oxygen-gtk icon theme.
  - Added ibus-xx-bridge-hotkey.patch
    Triaged Bug 707370 SetEngine timeout
    Fixed Bug 731610 Keep IM state when text input focus changes
  - Added transitional ibus-gnome3 package.
    Fixed Bug 718110 Use a shell icon instead of pygtk2 icon.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-4
changelog:
  - Updated ibus-gjs 3.1.91.20110908 and 3.0.2.20110908 for gnome-shell.
    Fixed preedit active segments on gnome-shell and X11 apps.
  - Added ibus-xx-g-s-disable-preedit.patch
    Disabled preedit on gnome-shell for a workaround.
  - Updated ibus.spec
    Fixed Bug 735879 pre/postun scripts


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-2
changelog:
  - Updated to 1.4.0
  - Updated ibus-gjs 3.0.2.20110928 for f15.
  - Updated ibus-gjs 3.2.0.20110928 for f16. (#740588)
  - Updated ibus-530711-preload-sys.patch
    Fixed not to show duplicated engine names in setup treeview (#740447)
  - Updated bus-gjs-xx-gnome-shell-3.1.4-build-failure.patch for f16.
  - Updated ibus-xx-bridge-hotkey.patch
    Fixed a XKB configuration without the input focus for f16 (#739165)
    Fixed not to show null strings in case of no variants (#738130)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-9
changelog:
  - Updated ibus-HEAD.patch
    Fixed prev/next keys without global engine.
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed Bug 747902 - mouse and ctrl+space not working
    Fixed Bug 749770 - IME hotkey after Control + Space
  - Updated ibus-711632-fedora-fallback-icon.patch
    Fixed Bug 717831 - use old icon for desktops other than gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-10
changelog:
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed no XKB languages from layout only. e.g. in(eng).
  - Updated ibus-541492-xkb.patch
    Fixed not to show 'eng' on GUI for in(eng).


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-11
changelog:
  - Updated ibus-541492-xkb.patch
    Fixed Bug 750484 - support reloading Xmodmap
  - Updated ibus-HEAD.patch
    Fixed Bug 753781 - ibus-x11 needs async for hangul ibus_commit_text.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-14
changelog:
  - Enabled dconf.
  - Updated ibus-HEAD.patch
    Fixed Bug 618229 - engine setup buton on ibus-setup.
  - Removed ibus-711632-fedora-fallback-icon.patch as upstreamed.
  - Updated ibus-xx-bridge-hotkey.patch
    Removed Enable/Disable buttons on ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-16
changelog:
  - Enhanced ibus-gnome3 shell lookup window.
  - Updated ibus-HEAD.patch from upstream
    Fixed Bug 769135 - ibus-x11 SEGV in _process_key_event_done.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 757889 - ibus-setup SEGV without active engine.
    Fixed Bug 760213 - ibus-setup saves XKB variants correctly.
    Fixed Bug 769133 - ibus-engine-xkb returns FALSE for ASCII typings.
  - Updated ibus-xx-bridge-hotkey.patch for an enhancement.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-17
changelog:
  - Added ibus-771115-property-compatible.patch for f16
    Fixed Bug 771115 - IBusProperty back compatibility.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-1
changelog:
  - Updated to 1.4.99.20120203
  - Removed ibus-xx-bridge-hotkey.patch
  - Updated ibus-541492-xkb.patch to use libgnomekbd.
  - Updated ibus-xx-setup-frequent-lang.patch for 1.4.99.20120203


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-3
changelog:
  - Fixed ibus-setup on C locale
  - Fixed to show no registered engines from g-c-c.
  - Enabled Alt_R keybinding on ko locales for ibus gtk only.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120303-3
changelog:
  - Bumped to ibus-gjs 3.3.90.20120308 to work with gnome-shell 3.3.90
  - Fixed Bug 786906 - Added ifnarch ppc ppc64 s390 s390x
  - Updated ibus-HEAD.patch
    Fixed Bug 800897 - After doing "ctrl+space", ibus tray icon freezes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120317-1
changelog:
  - Bumped to 1.4.99.20120317
    Fixed Bug 718668 - focus move is slow with ibus-gnome3
    Fixed Bug 749497 - Enhance IME descriptions in status icon active menu
  - Bumped to ibus-gjs 3.3.90.20120317
  - Added ibus-xx-no-use.diff
    Fixed Bug 803260 - Disable non-global input method mode
  - Updated ibus-HEAD.patch
    Fixed Bug 803250 - ibus lookup window font customization
    Fixed Bug 803177 - language id on ibus-ui-gtk3 switcher
  - Update ibus-530711-preload-sys.patch
    Fixed Bug 797023 - port preload engines


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-1
changelog:
  - Bumped to 1.4.99.20120428
    Fixed Bug 799571 - no IME list at the session login.
    Fixed Bug 810415 - ibus does not handle Ctrl+space with BUTTON_PRESS.
  - Bumped to ibus-gjs 3.4.1.20120428
    Fixed Bug 802052 - no modifiers trigger keys.
    Fixed Bug 803244 - IME switch Ctrl+space not working on shell text entry.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-2
changelog:
  - Updated ibus-HEAD.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-branding-switcher-ui.patch
    Fixed Bug 810211 - Cancel Control + space pressing Control key.
  - Updated ibus-xx-no-use.diff
    Enabled to customize trigger keys with non-modifier trigger keys.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-1
changelog:
  - Bumped to 1.4.99.20120822
  - Bumped to ibus-gjs 3.4.1.20120815
    Fixed Bug 845956 - ibus backward trigger key is not customized
    Fixed Bug 844580 - ibus-dconf does not load the system gvdb
  - Separated ibus-810211-no-switch-by-no-trigger.patch from ibus-HEAD.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-2
changelog:
  - Updated ibus-530711-preload-sys.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-no-use.diff
    Fixed Bug 854161 - not able to add keymap with ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20121109-1
changelog:
  - Bumped to 1.4.99.20121109
  - Removed im-chooser, imsettings-gnome, gnome-icon-theme-symbolic
    dependencies in f18 because ibus gnome integration is done.
    Use ibus-keyboard instead of input-keyboard-symbolic.
  - Disabled ibus-gjs build because of ibus gnome integration.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-1
changelog:
  - Bumped to 1.5.2
  - Created noarch packages for python files due to .pyc and .pyo.
  - Added man pages.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-4
changelog:
  - Updated ibus-HEAD.patch for upstream.
  - Added ibus-xx-1.5.2.patch until 1.5.3 will be released.
  - Added ibus-xx-ctrl-space.patch for back compatible triggers.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-1
changelog:
  - Bumped to 1.5.3
  - Deleted ibus-xx-g-s-disable-preedit.patch as EOL.
  - Deleted ibus-gjs as EOL.
  - Removed imsettings-gnome, im-chooser, libgnomekbd dependencies.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-6
changelog:
  - Resolves: #1051389, #1051391, #1051408, #1051397, #1051398, #1051415,
                Updated ibus-HEAD.patch for upstream
  - Resolves: #1050813
    Deleted notify-python in Requires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Deepak Bhole <dbhole@redhat.com> 1.0.2-2
changelog:
  - Fixed incorrect macro value for min_openjdk_version
  - Use posttrans instead of post, so that upgrade from old plugin works


author: Deepak Bhole <dbhole@redhat.com> 1.0.4-1
changelog:
  - Bump to 1.0.4
  - Fixed rhbz#718164: Home directory path disclosure to untrusted applications
  - Fixed rhbz#718170: Java Web Start security warning dialog manipulation


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-5
changelog:
  - Resolves: rhbz#875496
  - Build with $RPM_LD_FLAGS and %{_smp_mflags}.
  - Run unit tests during build.


author: Jiri Vanek <jvanek@redhat.com> 1.3.2-0
changelog:
  - Updated to latest ustream release of 1.3 branch - 1.3.2
   - Security Updates
    - CVE-2013-1927, RH884705: fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized.
   - NetX
    - PR580: http://www.horaoficial.cl/ loads improperly
   - Plugin
     PR1260: IcedTea-Web should not rely on GTK
     PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch to remove GTK dependency
    - icedtea-web-pr1260-remove-gtk-dep.patch


author: Jiri Vanek <jvanek@redhat.com> 1.4-0
changelog:
  - Updated to 1.4
  - See announcement for detail
   - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-May/023195.html
  - commented out check - some junit4  incompatibility


author: Jiri Vanek <jvanek@redhat.com> 1.4-1
changelog:
  - Adapted to latest openjdk changes
  - added build requires for autoconf and automake
  - minor clean up


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page (resolves 948443)
  - removed upstreamed  patch1 b25-appContextFix.patch
  - removed upstreamed  patch2 rhino-pac-permissions.patch
  - make check enabled again
  - should be build for non-standart archs !-)
  - removed unused multilib arches (yupii!)
  - Resolves: rhbz#1009820


author: Jiri Vanek <jvanek@redhat.com> 1.5-2
changelog:
  - add not yet upstreamed DE localisation of 1.5
   - patch0 DElocalizationforIcedTea-Web1.5-0001.patch
  - autoreconf gog  -vfi, see RH1077898
  - ./configure changed to %configure
  - Resolves: rhbz#1077287


author: Jiri Vanek <jvanek@redhat.com> 1.6.0-1
changelog:
  - update to upstream 1.6
  - made to use jdk8 (rh1184970)
  - it will be necessary for 1.6.1 anyway (rh1233687)
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-1
changelog:
  - updated to upstream release 1.6.1
  - metadata xml files enhanced for javaws
  - forced to use jdk8 by default
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-4
changelog:
  - added and and applied patch2 fileLogInitializationError-1.6.patch to prevent 
  consequences 1268909
  - Resolves: rhbz#1217153


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.6.1-0.fdr.3
changelog:
  - Partial fix for bad datadirs returned by icu-config (works as long as
    data packaging mode is not "common" or "dll").


author: Ville Skyttä <ville.skytta at iki.fi> - 0:3.0-0.fdr.1
changelog:
  - Update to 3.0, datadirs patch no longer needed.
  - Package data in shared libs, drop -locales subpackage.
  - Rename -docs subpackage to libicu-doc, and generate graphs with graphviz.


author: Ville Skyttä <ville.skytta at iki.fi> - 3.2-3
changelog:
  - Apply upstream case mapping mutex lock removal patch.
  - Build with gcc 3.2 as a temporary workaround for #152495.


author: Caolán McNamara <caolanm@redhat.com> - 3.6-0.1.d01
changelog:
  - rh#200728# update to prelease 3.6d01 to pick up on sinhala fixes
  - drop integrated rh190879.patch
  - drop integrated icu-3.4-sinhala1.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.6-2
changelog:
  - fix rh#205252#/icu#5365 (gnome#121882#/#icu#4026#) to make icu 
    like pango for multiple dependant vowels


author: Caolán McNamara <caolanm@redhat.com> - 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Caolán McNamara <caolanm@redhat.com> - 3.6-20
changelog:
  - Resolves: rhbz#243984 change the icu group as it is libicu 
    which is "System Environment/Libraries" not icu


author: Caolán McNamara <caolanm@redhat.com> - 3.8-0.1.d01
changelog:
  - 3.8 release candidate
  - drop integrated icu.icu5433.oriya.patch
  - drop integrated icu.icu5488.assamese.patch
  - drop integrated icu.icu5500.devicetablecrash.patch
  - drop integrated icu.icu5501.sinhala.biggerexpand.patch
  - drop integrated icu.icu5594.gujarati.patch
  - drop integrated icu.icu5465.telegu.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-2
changelog:
  - remove icu.icu5365.dependantvowels.patch and cleanup
    icu.icu5506.multiplevowels.patch as they patch and unpatch 
    eachother (thanks George Rhoten for pointing out that madness)


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-3
changelog:
  - CVE-2007-4770 CVE-2007-4771 add icu.regexp.patch
  - Resolves: rhbz#423211 fix malalayam stuff in light of syllable
    changes


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-5
changelog:
  - Resolves: rhbz#431401 split syllables on 1st 0d4d of a 0d4d + 
    (>= 0d15 && <= 0d39) + 0d4d + 0d30 sequence


author: Caolán McNamara <caolanm@redhat.com> - 4.0-2
changelog:
  - Resolves: rhbz#459698 drop Malayalam patches. Note test with Rachana/Meera
    instead of Lohit Malayalam before filing bugs against icu wrt.
    Malayalam rendering


author: Caolán McNamara <caolanm@redhat.com> - 4.2-0.1.d03
changelog:
  - 4.2 release candidate
  - drop resolved icu.icu6008.arm.padding.patch
  - drop resolved icu.icu6439.bare.elif.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.4-1
changelog:
  - latest version
  - drop integrated icu.6969.pkgdata.patch
  - drop integrated icu.icu7039.badextract.patch
  - drop integrated icu.XXXX.buildfix.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.4.1-2
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Caolán McNamara <caolanm@redhat.com> - 4.6-1
changelog:
  - latest version
  - upgrade includes a .pc now of its own, drop ours
  - drop integrated icu.6995.kannada.patch
  - drop integrated icu.7971.buildfix.patch
  - drop integrated icu.7972.buildfix.patch
  - drop integrated icu.7932.doublecompare.patch
  - drop integrated icu.8011.buildfix.patch


author: Eike Rathke <erack@redhat.com> - 4.8.1-3
changelog:
  - Resolves: rhbz#766542 CVE-2011-4599 Stack-based buffer overflow
  - add icu.8984.CVE-2011-4599.patch


author: Eike Rathke <erack@redhat.com> - 50.1.2-1
changelog:
  - Update to 50.1.2
  - Resolves: rhbz#856594 to-do add --disable-renaming on next soname bump
  - removed upstream applied icu.9283.regexcmp.crash.patch


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Hal Rosenstock <halr@voltaire.com> - 1.1.0-rc1
changelog:
  - OpenFabrics 1.1-rc1 release
  - Added man pages
  - Made diag command/script options more consistent
  - saquery tool added
  - dump_lft.sh script added
  - Renamed discover.pl to ibdiscover.pl


author: Hal Rosenstock <halr@voltaire.com> - 1.2.0
changelog:
  - OpenFabrics 1.2.0 release
  - Added brief option to ibcheckerrors and ibcheckerrs
  - Updated man pages
  - Added build version to saquery and updated build version tags of other tools
  - Added -N | nocolor to usage display of scripts
  - Fixed -nocolor and -G options on scripts 
  - Fixed error return status in ibchecknet
  - Added exit code to ibcheckerrors
  - Added nodename to output of ibcheckerrs
  - ibqueryerrors.pl fixes and improvements
  - Removed use of tmpfile for ibroute data in ibfindnodeusing.pl
  - Fixed undefined subroutine error in iblinkinfo.pl
  - Added switch-map option to ibtracert and ibnetdiscover
  - Cleaned up node descriptions before printing in saquery
  - Clarified --src-to-dst option in saquery
  - Added peer NodeDescription and LID to output of inbetdiscover
  - For grouping, ordered Spine and Line Nodes (for Voltaire chassis) in ibnetdiscover
  - Cleaned up node descriptions before printing in ibtracert and ibroute
  - Added additional sematics to -m option of saquery
  - Added dump_mfts.sh similar to dump_lfts.sh
  - ibnetdiscover improvements (memory leaks, ports moving, etc.)
  - Converted iblinkspeed.pl into iblinkinfo.pl and added additional capabilities
  - Added 0x in front of GUID printing of ibtracert
  - Fixed loopback handling in ibnetdiscover
  - Added support for querying Service Records to saquery
  - Added support for PerfMgt IsExtendedWidthSupported IBA 1.2 erratum in perfquery
  - For query operations, added peer port checking of linkwidth and speed
    active in ibportstate
  - Added support for DrSLID in smpquery
  - Added IB router support to ibnetdiscover and ibtracert
  - Added additional options to saquery
  - Added support to change LinkSpeedEnabled in ibportstate


author: Hal Rosenstock <halr@voltaire.com> - 1.2.4
changelog:
  - OpenFabrics 1.2.4 release
  - Fix diag rpmbuild from make dist
  - Include set_mthca_nodedesc.sh and dump_lfts.sh in the rpm


author: Hal Rosenstock <halr@voltaire.com> - 1.2.5
changelog:
  - Find perl modules in perl sitearch directory
  - Fix non standard prefix install for diag scripts
  - Clean gcc-4.1 warnings in saquery and ibdiag_common


author: Hal Rosenstock <halr@voltaire.com> - 1.3.0
changelog:
  - Add some extra debug information to IBswcountlimits.pm
  - Send normal output to stdout in ibtracert
  - Don't truncate NodeDescriptions containing ctl characters in ibdiag_common
  - Fix ibnetdiscover grouping for Cisco SFS7000
  - Add support to query the GUIDInfo table in smpquery
  - Allow user to specify a default switch map file


author: Hal Rosenstock <halr@voltaire.com> - 1.3.1
changelog:
  - Add link width and speed to topology file output in ibnetdiscover
  - Add support for -R(outer_list) in ibnetdiscover
  - Add script and man page for ibidsverify
  - Moved diags from bin to sbin
  - Add scripts and man pages for display on IB routers
  - Add GUID to output line for ports in ibqueryerrors.pl
  - Add ibdatacounts and ibdatacounters scripts and man pages
  - Add peer port link width and speed validation in iblinkinfo.pl
  - Display remote LID with peer port info in IBswcountlimits.pm
  - Handle peer ports at 1x that should be wider and 2.5 Gbps
    links that should be faster in ibportstate
  - Add LinkSpeed/Width components to output of ibportstate
  - Add support for IB routers 
  - Add grouping support for ISR2012 and ISR2004 in ibnetdiscover
  - Remove all uses of "/tmp" from perl scripts
  - Add switch map support for saquery -O and -U options
  - Add support for saquery -s (isSMdisabled)
  - Add name input checks to saquery (-O and -U)


author: Doug Ledford <dledford@redhat.com> - 1.5.3-1.el5
changelog:
  - Update to latest upstream version
  - Don't include the newly added devel stuff as it's likely only needed
    internally (and certainly not needed by anything we've supported before
    since we've never shipped it)
  - Related: bz518218


author: Jay Fenlason <fenlason@redhat.com> 1.5.3-3.el6
changelog:
  - Correct the perldir macro for rhel-6's perl.
  - Remove the unrecognized --with-node-name-map configure option.
  - reorganize the files section to use fewer globs, so that it's less likely
    to pick up files inappropriately.


author: Doug Ledford <dledford@redhat.com> - 1.5.5-1.el6
changelog:
  - Update and rebuild against latest opensm (which was needed for latest
    ibutils, which was needed for licensing issues resolved in new upstream
    tarball, which was needed for pkgwrangler review)
  - Related: bz555835


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.5.12-1
changelog:
  - Update to latest upstream release
  - Initial Fedora import
  - Add devel and devel static packages (review item)
  - Make etc file config(noreplace) (review item)
  - Remove no longer support scripts (review item)


author: Doug Ledford <dledford@redhat.com> - 1.6.2-1
changelog:
  - Update to latest upstream release (resolves bz998816)
  - Revive all_hcas patch (otherwise would be a regression)
  - Fix ibnodes -h output (another regression, bz1054545)
  - Resolves: bz998816, bz1054545


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Martin Sivak <msivak@euryale.brq.redhat.com> - 0.3-1
changelog:
  - Use updated Anaconda API
  - Fix systemd units
  - Add localization spokes to TUI
  - Write changes to disk
  - Conflict with old firstboot


author: Martin Sivak <msivak@euryale.brq.redhat.com> - 0.3.1-1
changelog:
  - Use updated Anaconda API
  - Request firstboot environment spokes
  - Initialize anaconda threading properly


author: Martin Sivak <msivak@euryale.brq.redhat.com> - 0.3.2-1
changelog:
  - Modify the ROOT_PATH properly
  - Do not execute old ksdata (from anaconda's ks file)
  - Save the resulting configuration to /root/initial-setup-ks.cfg


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.5-1
changelog:
  - Reference the new repository in the .spec file (vpodzime)
  - Prevent systemd services from running on live images (#962196) (awilliam)
  - Don't traceback if the expected kickstart file doesn't exist (#950796) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.6-1
changelog:
  - Make serial-getty wait for us as well (#970719) (vpodzime)
  - Disable the service only on successful exit (#967617) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.8-1
changelog:
  - Read /etc/os-release to get product title (#1000426) (vpodzime)
  - Don't let product_title() return None (vpodzime)
  - Apply the timezone and NTP configuration (#985566) (hdegoede)
  - Make handling translations easier (vpodzime)
  - Make translations work (vpodzime)
  - Prevent getty on various services killing us (#979174) (vpodzime)
  - Initialize network logging for the network spoke (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.1-1
changelog:
  - Yet another serial console in ARMs (vpodzime)
    Related: rhbz#1000409
  - Fix the base mask of initial_setup gui submodules (vpodzime)
    Related: rhbz#1000409
  - Specify and use environment of the main hub (vpodzime)
    Related: rhbz#1000409
  - EULA agreement spoke (#1000409) (vpodzime)
  - Require new version of anaconda with eula command support (vpodzime)
    Related: rhbz#1000409


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.2-1
changelog:
  - Put license view into a scrolled window (#1015005) (vpodzime)
  - Clear the default text before inserting the EULA (dshea)
    Related: rhbz#1015005


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.3-1
changelog:
  - Fix how spokes are collected for the I-S main hub
    Related: rhbz#1000409
  - Add TUI Eula spoke
    Related: rhbz#1000409
  - Reboot the system if EULA is not agreed
    Related: rhbz#1000409


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.4-1
changelog:
  - Read licence files as utf-8 encoded (vpodzime)
    Resolves: rhbz#1023052
  - Inform user that the system may be rebooted (vpodzime)
    Resolves: rhbz#1022040


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.6-1
changelog:
  - Ignore .po and generated files in po/ (dshea)
    Related: rhbz#1040240
  - Mark title strings in the initial-setup hub as translatable (dshea)
    Resolves: rhbz#1040240
  - Reword the EULA spokes' status messages (vpodzime)
    Resolves: rhbz#1039672
  - Cancel formatting of EULA when putting it into the text buffer (vpodzime)
    Resolves: rhbz#1039675


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.9-1
changelog:
  - Try to quit plymouth before running our X server instance
    Resolves: rhbz#1058329
  - Get rid of the empty debuginfo package
    Related: rhbz#1057590


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.12-1
changelog:
  - Set initial-setup translation domain for the hub and EULA spoke (mkolman)
    Resolves: rhbz#1040240


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.14-1
changelog:
  - Bump Anaconda version requirement for the GUI split (mkolman)
    Related: rhbz#999464
  - Split GUI code into a separate package (#999464) (vpodzime)
    Resolves: rhbz#999464


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.18-1
changelog:
  - Fix Initial Setup to correctly support the Anaconda built-in Help (#1072033) (mkolman)
    Related: rhbz#1072033


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.19-1
changelog:
  - Point to the new Initial Setup wiki page (#1154656) (mkolman)
    Resolves: rhbz#1154656
  - Add syslog logging support (#1153768) (mkolman)
    resolves: rhbz#1153768


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.20-1
changelog:
  - Explicitly require the main package in the GUI sub package (#1078917) (mkolman)
    Related: #1078917


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.21-1
changelog:
  - Move the firstboot(windowmanager) dependency to the GUI package (#999464) (mkolman)
    Related: rhbz#999464


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.23-1
changelog:
  - Redirect the EULA spoke help button to the Initial Setup hub help file (#1072033) (mkolman)
    Related: rhbz#1072033


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.24-1
changelog:
  - Make Initial Setup compatible with rebased Anaconda (#1229747) (mkolman)
    Resolves: rhbz#1229747
  - Log the reason if GUI import fails (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.25-2
changelog:
  - Don't show the EULA spoke in reconfig mode if license is already accepted (#1110439) (mkolman)
    Related: rhbz#1110439
  - Read the kickstart from previous IS run, if available (#1110439) (mkolman)
    Related: rhbz#1110439
  - Add support for externally triggered reconfig mode (#1110439) (mkolman)
    Resolves: rhbz#1110439


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.26-1
changelog:
  - Use systemd service status for run detection on the S390 console (#1181209) (mkolman)
    Resolves: rhbz#1181209
  - Bump the required Anaconda version (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.28-1
changelog:
  - Run the TUI service before hvc0.service (#1209731) (mmatsuya)
    Resolves: rhbz#1209731
  - Don't create /etc/sysconfig/initial-setup on s390 (#1181209) (mkolman)
    Related: rhbz#1181209
  - Setup the locale before starting the UI (dshea)
    Resolves: rhbz#1198642


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.30-1
changelog:
  - Only root should be able to read the initial-setup-ks.cfg file (#1264336) (mkolman)
    Resolves: rhbz#1264336


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code
  - Added doexec and man page


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root
    filesystem -- it now happens when other filesystems are corrupt as well


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com>
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compresssion


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
    daemon(): avoid starting another bash
    killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't
    initialize them. This gave error messages during startup


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
    - no need to set NETWORKING=no, it is not used/exported
    - do not export BOOTUP
    - delete two "sleep 1" calls that wants to add time to go
      into confirmation mode. There is enough time to press a
      key anyway or use "confirm" in /proc/cmdline.
    - read /proc/cmdline into a variable
    - use strstr() to search in /proc/cmdline
    - add "forcefsck" as possible option in /proc/cmdline
    - while removing lock files, no need to call `basename`
    - add unamer=`uname -r` and reduce number of forks
    - do not fork new bash to create /var/log/ksyms.0


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
    - do not read udev.conf, this seems to be all in the start_udev script
    - fix detection of "nomodules" kernel command line option
    - read /proc/cmdline earlier and convert rhgb to use that, too
    - load_module(): change redirection to /dev/null
    - some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
    - remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
    - remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add a autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.21-1
changelog:
  - move handling of network hotplug events here, add appropriate udev
    rules, obsolete hotplug
  - get rid of some path lookups (#178321, <mclasen@redhat.com>)
  - get hwaddrs from sysfs as opposed to ip | sed
  - translation updates
  - lang.sh: don't run unicode_start for subshells (#176832)
  - halt: ignore sysfs but not /sys<otherstuff> (#177612, <bnocera@redhat.com>)
  - add service(8) man page (#44857) <mitr@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.22-1
changelog:
  - remove references to /usr/X11R6/bin (#177938)
  - rc.sysinit: fix SELinux message formatting (#178532)
  - rc.sysinit: clean cvs as well (#178539, <ville.skytta@iki.fi>)
  - init.d/halt: move halt.local so that it runs before /  is remounted r/o (#179314)
  - rc.sysinit: don't activate already active dmraids (<pjones@redhat.com>)
  - rc.sysinit: don't mount usbfs, libusb no longer uses it
  - init.d/functions: Add -p to status() (#134363, <mitr@redhat.com>)
  - init.d/functions: Separate /var/run/*.pid handling and pidof calls
    to private functions (#63440, <mitr@redhat.com>)
  - init.d/functions: update for current LSB, including -p pidfile
    (#99325, #134363, <mitr@redhat.com>, <tobias.burnus@physik.fu-berlin.de>)
  - getkey: various cleanups, add man page (#54481, <mitr@redhat.com>)
  - lang.sh: don't always call consoletype (<laroche@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.26-1
changelog:
  - revert "rc.sysinit: don't mount usbfs, libusb no longer uses it" change
  - add some ugly hacks to make sure net hotplug doesn't run after unclean
    shutdown (#177795)
  - don't mount /sys and /proc in rc.sysinit - the initrd already does
    (<pjones@redhat.com>)
  - halt: try to unmount tmpfs filesystems before swapoff (#174000,
    <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.27-1
changelog:
  - translation updates
  - lang.sh: revert fix for #176832, it's broken
  - ifup-aliases fixes (<pjones@redhat.com>,<mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.28-1
changelog:
  - kill nash-hotplug before starting udev (<pjones@redhat.com>)
  - silence warnings on /dev/pts remount (<pjones@redhat.com>)
  - more translation updates


author: Bill Nottingham <notting@redhat.com> 8.30-1
changelog:
  - hotplug: don't cause modules to be reloaded on ifdown/rmmod (#179809)
  - fix endless loops in ifup/ifdown (#177792, #182466)
  - fix enabling of enforcing SELinux mode after relabel (#181893)
  - remove debugging code from ifup-bnep
  - add /proc, /sys mounting back to rc.sysinit
    Note: booting without an initrd is deprecated
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.32-1
changelog:
  - netfs: fix redirect (#187505)
  - rc.sysinit add forcequotacheck (#168118, <mitr@redhat.com>)
  - functions/pidof: various fixes (#182623, others <mitr@redhat.com>)
  - add support for DHCP on bridges (#125259, <mitr@redhat.com>,
    anders@kaseorg.com>)
  - rc.sysinit: use pidof, not killall (#185429, <pjones@redhat.com>)
  - ppp fixes (#129195, #163950, #92023, <mitr@redhat.com>, <avi@argo.co.il>)
  - ifup/ifdown: unset $WINDOW (#174336, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.33-1
changelog:
  - support for readonly root
  - rc.sysinit: remove call to zfcpconf.sh - that should be udev rules
  - ifup*: add NETWORKDELAY and LINKDELAY (#176851, <mitr@redhat.com>)
  - rc.sysinit: remove obsolete initrd code (<pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.34-1
changelog:
  - link glib2 dynamically now that it's in /lib, conflict with older
    versions
  - handle cups specially when cleaning /var (#189168)
  - remove ifdown-aliases (<mitr@redhat.com>)
  - ifup-ipsec: fix key handling when only one of AH or ESP is used
    (#166257, <mituc@iasi.rdsnet.ro>)
  - IPv6 updates, including RFC 3041 support (<pb@bieringer.de>)
  - routing fixes, add METRIC support for default routes (#124045, <mitr@redhat.com>)
  - fix handling of mount points with white space (#186713, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.35-1
changelog:
  - readonly root enhancments (modified from <law@redhat.com>, #193164)
  - encrypted swap, non-root filesystem support (#127378, <mitr@redhat.com, <redhat@flyn.org>)
  - clarify killproc usage (#193711, <mitr@redhat.com>)
  - document BRIDGE= (#192576, <mitr@redhat.com>)
  - rc.sysinit: allow for sulogin instead of automatic relabeling (<dwalsh@rehdat.com>)


author: Bill Nottingham <notting@redhat.com> 8.36-1
changelog:
  - rework automatic swapon - only run if AUTOSWAP=yes, and fix errors
    (#198695, #196179, #196208)
  - redo single so it starts last in runlevel 1, and doesn't kill/start
    services itself
  - add configurable delay for killproc() (#198429, <jorton@redhat.com>)
  - fix loop in rename_device (#199242, <markmc@redhat.com>)
  - rc.sysinit: stateless updates (#197972, <law@redhat.com>)
  - support for copying dhcp leases from initramfs (#198601, <markmc@redhat.com>)
  - readonly-root: SELinux works now in the kernel, allow it
  - init.d/network: don't bring down network if root is on a network device
  - init.d/halt: don't use -i to halt; causes problems with iscsi
  - add support for routing rule-$device (#132252, <mitr@redhat.com>)
  - fix rhgb output (#192604, <tonynelson@georgeanelson.com>)
  - fix crypttab options for LUKS (#197656, <mitr@redhat.com>)
  - ipsec: various fixes & new features (#150682, #168972, <mitr@redhat.com>, <alex@milivojevic.org>)
  - ipsec: add check for IKE_METHOD (#197576, <john_smyth@mail.ru>)
  - rename_device: ignore alias devices, fix race (#186355)
  - ifup/ifdown: don't mark as %config
  - rwtab: some additions/cleanup


author: Bill Nottingham <notting@redhat.com> 8.38-1
changelog:
  - translation updates
  - bring down bonding slaves on ifdown (#199706)
  - support LINKDELAY for dhcp (#191137)
  - netfs: run multipath on netdev devices (#180977)
  - halt: use /proc/mounts instead of /etc/mtab (#198426, <mitr@redhat.com>)
  - rc.sysinit: fix getkey race (#191453, <mitr@redhat.com>)
  - spec cleanups (#188614, <kloczek@rudy.mif.pg.gda.pl>)
  - support aliases on vlan (#193133, <mitr@redhat.com>)
  - clean up ifcfg file handling (<mitr@redhat.com>, <michal@harddata.com>)
  - GRE and IPIP tunnel support (#168990, <mitr@redhat.com>,
    <razvan.vilt@linux360.ro>, <aaron.hope@unh.edu>, <sean@enertronllc.com>)
  - rc.sysinit: don't format encrypted swap always (#127378)
  - don't try to add routes to alias devices (#199825, #195656)


author: Bill Nottingham <notting@redhat.com> 8.39-1
changelog:
  - translation updates
  - Handle partitions on multipath/dmraid better (<pjones@redhat.com>)
  - make /dev/mapper/control ourselves (<pjones@redhat.com>)
  - init.d/network: simplify 'status' call
  - fix actual 169.254 networks (#203591)
  - rc.sysinit: don't run vgscan (#191879)
  - init.d/halt: don't umount /dev/root<foo> (<oblin@mandriva.com>)
  - rc.sysinit: catch more dmraid errors (#200683)
  - support 'tmp' option in /etc/crypttab (#201382, <mitr@redhat.com>,
    <lv@lekv.de>)
  - IPv6 updates (<pb@bieringer.de>, includes a fix for #143452)


author: Bill Nottingham <notting@redhat.com> 8.40-1
changelog:
  - translation updates
  - rename_device: use '__tmpXXXX' instead of 'devXXXX' as a temporary device
    name to avoid any realistic namespace clashes
  - rc.sysinit: set default affinity if specified on commandline (#203359)
  - always pass path to '.' (#206035)
  - run setsysfont, loadkeys always when /dev/tty{0,1} exist (#150769)
  - allow going to a shell when system is shut down cleanly (from <dwalsh@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.41-1
changelog:
  - fix network ipv6 hang (#207137, others)
  - rc.sysinit: change blkid.tab path to /etc/blkid/blkid.tab
  - rename_device: reset DEVPATH also when renaming (#206884, <phil@fifi.org>)
  - sysconfig.txt: clarify onboot/onparent usage


author: Bill Nottingham <notting@redhat.com> 8.42-1
changelog:
  - run rc.sysinit, /etc/rc in monitor mode (part of #184340)
  - use a better check for 'native' services (#190989, #110761, adapted
    from <matthias@rpmforge.net>)


author: Bill Nottingham <notting@redhat.com> 8.43-1
changelog:
  - move ccwgroup initialization to a udev rule (should fix #199139,
    - init.d/functions: don't write to gdmfifo
  - remove unused-since-RHL-7 consolechars code, update docs (#206106)
  - stateless updates (#206331, <law@redhat.com>)
  - translation updates (el, ms, hr, sl)


author: Bill Nottingham <notting@redhat.com> 8.44-1
changelog:
  - separate tmpfs-usage for state from readonly-root
  - set keymap correctly in non-utf8 locale (#167363)
  - setsysfont: run unicode_stop if in non-unicode locale
  - lang.csh/lang.sh: set iutf8 if appropriate (#186961)
  - lang.csh/lang.sh: handle non-utf8 locales correctly (#200100)
  - rc.sysinit: redirect stderr from setsysfont (#209204, indirectly)
  - rwtab: fix iscsi file location (#208864)
  - translation updates: el, da, as, or
  - fix stateless updates (#206331, <law@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45-1
changelog:
  - lang.csh/lang.sh - do *not* stty iutf8; too much chaos with SIGTTOU
    (reverts: #186961; fixes #209469)
  - translation updates: ms


author: Bill Nottingham <notting@redhat.com> 8.46-1
changelog:
  - ifup-eth: restorecon on moved lease file
  - rc.sysinit: handle "nodmraid" and "nompath" command line options (#209377, <pjones@redhat.com>)
  - revert early-login support (#210836, essentially)
  - blacklist CJKI on the virtual console (#120819)
  - rc.sysinit: use dmraid.static (#211297)
  - use sysfs interface for bonding (#202443, <agospoda@redhat.com>)
  - use /etc/statetab, /etc/statetab.d for local state (#211839, <markmc@redhat.com>)
  - fix or_IN and similar locales (#212219)
  - use SUBCHANNELS as the primary key for s390 network devices (#204803)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.47-1
changelog:
  - lang.{sh,csh}: handle sinhalese as well in CJKI clauses (#212438)
  - rc.sysinit: add '--auto=yes' to mdadm invocation (#213671)
  - rename_device: fix incorrect handling of .bak files
  - mount tmpfs with -n (#213132)
  - various SUBCHANNELS related s390 fixage (#204803)
  - lang.{sh,csh}: support iso-8859-8 (#212738, <matan@svgalib.org>)


author: Bill Nottingham <notting@redhat.com> 8.48-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #214817)
  - make sure network modules don't get accidentally reloaded (#211474)
  - rc.sysinit: fix dmraid test (#216334)
  - init.d/halt: don't unmount network filesystems
  - ipsec: Add a way to manually manage racoon.conf (#159343, <mitr@redhat.com>)
  - sysconfig.txt: Document ~/.i18n (#199323, <mitr@redhat.com>)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 8.49-1
changelog:
  - rc.sysinit: remove raidautorn (#219226)
  - ifup-eth: set MACADDR, MTU before initializing bonding slaves, etc (#218792)
  - translation updates: mr, ms, hi, te, ml


author: Bill Nottingham <notting@redhat.com> 8.50-1
changelog:
  - lang.csh, lang.sh: if $LANG is set, don't override it (#229102)
  - initlog.1: fix man page formatting (<esr@thyrsus.com>)
  - network-functions: simplify bonding test (#215887, <herbert.xu@redhat.com>)
  - fix ifup-post when lookup fails (#220318, <hiroshi.fujishima+redhat@gmail.com>)
  - add bridging docs (#221412, <markmc@redhat.com>)
  - release bonding slaves properly (#220525)
  - fix ppp-watch with ONBOOT=yes (#216749)
  - support VLAN_PLUS_VID_NO_PAD (#222975, #223011)
  - remove NETWORKING_IPV6; to disable, use a modprobe rule
  - translation updates: ms, de, el, pt_BR, fi, bs, sr, it, ko


author: Bill Nottingham <notting@redhat.com> 8.51-1
changelog:
  - fix 'Fedora Fedora' in rc.sysinit
  - halt: use kexec -x to not shut down network (#223932, <mchristi@redhat.com>)
  - network_functions: fix is_bonding_device logic (#229643)
  - translation updates: nb


author: Bill Nottingham <notting@redhat.com> 8.52-1
changelog:
  - lang.sh: fix locales where SYSFONT is not the default (#229996)
  - ifup-wireless: properly quote arguments (#234756)
  - readonly-root: add options for mounting state (#234916)
  - rwtab: updates (#219339, <law@redhat.com>)
  - add netconsole init script (#235952)
  - disable link checking when PERSISTENT_DHCLIENT is set (#234075)
  - restore file context on /etc/resolv.conf (#230776, <dwalsh@redhat.com>)
  - ifup-post: only use the first address (#230157, <michal@harddata.com>)
  - ifup-ipsec: allow overriding of my_identifier (#229343, <cmadams@hiwaay.net>)
  - ifup-wireless: set link up before itweaking wireless parameters (#228253)
  - rc.sysinit: restorecon on mount points when relabeling (#220322)
  - init.ipv6-global: cleanup & optimize sysctl usage (#217595)
  - ifup-eth: support ETHTOOL_OPTS on bridge devices (#208043, <bbaetz@acm.org>)
  - network-functions-ipv6: as we don't use NETWORKING_IPV6, silence errors (#195845)
  - fix description (#229919)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.53-1
changelog:
  - init.d/halt: use sound saving wrapper from alsa-utils, conflict with
    older versions (#236916)
  - usernetctl: drop user gid (#229372)
  - translation updates: ta, pt_BR, nb, as, hi, de


author: Bill Nottingham <notting@redhat.com> 8.54-1
changelog:
  - translation updates: as, bg, cs, ja, ms
  - redirect bogus errors from cryptsetup to /dev/null <karsten@redhat.com>


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - avoid calling unicode_start unnecessarily often during startup/shutdown which
    causes certain monitor/video card combos to flicker heavily (#237839)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add /etc/networks (#239602)
  - rc.sysinit: fix quotacheck, remove obsolete convertquota (#249003, <tometzky@batory.org.pl>)
  - rc.sysinit: add gfs2 to the 'don't mount here' list (#248985)
  - netfs: check for rpcbind, not portmap (#245595)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - translation updates: cy, en_GB, mk, ml, ms, pl, sk, ta, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.56-1
changelog:
  - rename_device: fix open() call
  - rc.sysinit: optimize out some excess greps (<harald@redhat.com>)
  - halt: support newer nut syntax, conflict with old versions (#252973, <tsmetana@redhat.com>)
  - fix buildreq from popt -> popt-devel
   - newer popt is in /lib|/lib64 - require it, and link dynamically
  - rc.sysinit: added support for cryptsetup-uuids (bug #242078, <harald@redhat.com>)
  - netconsole: fix status(), assorted other cleanups
  - translation updates: fr, ro, sk


author: Bill Nottingham <notting@redhat.com> - 8.57-1
changelog:
  - work around upstream bash changes (#220087, modified from <nvigier@mandriva.com>)
  - init.d/network: add Should-Start for firewall services
  - ifup-eth: handle arp_ip_target separately (#288151, <agospoda@redhat.com>)
  - rc.sysinit: remove rc.serial support - should be udev rules
  - rc.sysinit: remove acpi module loading - now supported by the kernel automatically
  - fix en_GB translation (#271201)
  - translation updates: as, bn_IN, bg, ca, cs, de, el, es, fi, gu, hi, it, ja, ko, kn, ml,
    mr, nb, nl, pa, pl, pt, pt_BR, ro, sl, sr, sr@Latn, sv, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.58-1
changelog:
  - revert kernel conflict so that xen can still work (#319401)
  - rename_device, 60-net.rules: only suggest an interface name (part of #264901)
  - require newer udev for persistent net rules (part of #264901)
  - don't hang if someone puts a dangling pipe in /etc/rhgb/temp (#251219)
  - genhostid: fix for 64-bit systems (#306811)
  - more bash matching fixes (#220087)
  - translation updates: is, nb


author: Bill Nottingham <notting@redhat.com> - 8.59-1
changelog:
  - rc.sysinit: fix rhgb check
  - prefdm: add wdm section (#248087)
  - init.d/functions, halt: clean up some extraneous delays (#219816)
  - ifup-wireless: set mode before bringing link up (#254046, <linville@redhat.com>)
  - translation updates: pt_BR, hr


author: Bill Nottingham <notting@redhat.com> - 8.61-1
changelog:
  - use lvm, not lvm.static (#429222)
  - ifup-eth: don't do something odd if we find a mac address that
    matches the user-set MACADDR (#251415)
  - rc.sysinit: fix root fs check to catch 'rw,ordered,noatime,etc.' properly
    (#334171)
  - rc.sysinit: Use proper invocations for authconfig, system-config-network
    (#426372, #428202)
  - service: handle unreadable scripts (#427767)
  - initscripts.spec: add requirements for stateless
  - fix perms on /etc/profile.d (#407531, <ville.skytta@iki.fi>)
  - rename_device: handle quoted HWADDR, etc. in ifcfg scripts (#351291)
  - minor stateless fixes
  - Makefile cleanups (from OLPC, <cscott@cscott.net>)
  - translation updates: fr, ru, nb
  - don't endelessly loop on ifdown (#390271)
  - rc.sysinit: - fix encrypted swap partitions with random key
    (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.63-1
changelog:
  - don't start RAID arrays in rc.sysinit, that's done by udev (corollary of #429604)
  - add a NetworkManager-dispatcher script that does netreport on interface changes
  - use udev rules to set the clock, avoiding issues with modular rtcs (#290731)


author: Bill Nottingham <notting@redhat.com> - 8.64-1
changelog:
  - Add a console_init udev helper to do console initialization
  - add /sbin/pidof requirement (#434863)


author: Bill Nottingham <notting@redhat.com> - 8.65-1
changelog:
  - Add a serial console udev/upstart handler (#434764, indirectly)
  - Add some upstart notification for sysv scripts (modified from <cjdahlin@ncsu.edu>, #431231)
  - Handle _rnetdev correctly (#435358, <pjones@redhat.com>)
  - various minor speedups (<arjan@infradead.org>)
  - translation updates: el, fr
  - disable network by default, in favor of NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.68-1
changelog:
  - netfs: umount 'ncp' filesystems as well (#437117)
  - improve performance of s390 ccw rules (#437110, <mernst@de.ibm.com>)
  - fix consoletype environment leak (#439546)
  - ifdown-eth: make sure NEWCONFIG exists before grepping for it (#390271, continued)
  - console_check: always open with NONBLOCK, clear the serial structs first,
    handle non-16550 ports (<dwmw2@infradead.org>)
  - halt: don't use /etc/sysconfig/clock (#438337)
  - ifup: don't attempt to re-enslave already-enslaved devices (#440077)
  - netfs: run as a NetworkManagerDispatcher script (#439242)
  - netfs: remove $local_fs from the list of provides (making it implicitly provided
    by booting)
  - serial: add a crude hack to wait for runlevels to finish (#437379)
  - serial: frob /etc/securetty when necessary (#437381)
  - add a upstart-specific inittab
  - translation updates: as, bn_IN, cs, de, es, fi, fr, gu, hi, it, ja, kn, ml, mr, nb,
    nl, pa, pl, pt_BR, ru, sk, sr, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.69-1
changelog:
  - Bring up lo whenever it shows up, not just in network/NM
  - fix shutdown-related oddities (#438444)
  - translation updates: el, sr, sr@latin, sv


author: Bill Nottingham <notting@redhat.com> - 8.70-1
changelog:
  - find is now in /bin. Use it. (#192991, #239914, #244941, #442178)
  - require event-compat-sysv for now (#442291)
  - fix serial event to wait properly
  - handle encrypted LVs properly (#441728)
  - add a sit tunnel type (#441635)
  - translation updates: ru


author: Bill Nottingham <notting@redhat.com> - 8.71-1
changelog:
  - adjust to gdm using LANG instead of GDM_LANG (#372151, <rstrode@redhat.com>)
  - rework netfs' check for networking availability to properly handle both network
    and NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.73-1
changelog:
  - move event-compat-sysv events here, obsolete it
  - fix ctrl-alt-del during rc.sysinit (#444050)
  - fix 'telinit X' from single-user mode (#444001)


author: Bill Nottingham <notting@redhat.com> - 8.74-1
changelog:
  - use full path to /sbin/ip in NetworkManagerDispatcher script (#444378)
  - lang.{sh,csh}: read only user customization if LANG is already set (#372151)


author: Bill Nottingham <notting@redhat.com> - 8.77-1
changelog:
  - NMDispatcher/05-netfs: fix check for default route (#445509)
  - service: don't set $LANG, rely on it to inherit from system locales (#422141)
  - init.d/functions: fix resolve_dm_raid() for older dmraid configs
  - Don't unmount sysfs in halt. (#446292)
  - rc.sysinit: don't try to startup crypto if we can't find the device
  - rc.sysinit: don't echo crypto stuff unless we're actually *doing* something
  - ifup: don't try to rename devices - udev rules are the way to go
  - rc.sysinit: fix typo, and don't restorecon on swap, etc. partitions (#448886)
  - set MALLOC_CHECK_ & MALLOC_PERTURB_ if configured (<pjones@redhat.com>)
  - console_init: support SYSFONTACM correctly, and support UNIMAP (#448704,
    <vvv+fedora@colocall.net>)
  - don't export GRAPHICAL - plymouth is for all modes. also, don't start rhgb
  - fix clock rules to properly handle old-style RTC devices (#447019)
  - translation updates: ko, or, pl


author: Bill Nottingham <notting@redhat.com> - 8.79-1
changelog:
  - fix mcheck stuff to be installed correctly
  - don't do an arping check for loopback interfaces
  - console_init: don't wait (<arjan@infradead.org>)
  - rc: clean up extraneous set -x noise
  - remove references to static dmraid/multipath binaries (#453987)
  - translation updates: lv


author: Bill Nottingham <notting@redhat.com> - 8.80-1
changelog:
  - Fix translation typo (#455804, <ruslanpisarev@gmail.com>)
  - Turn off syncookies
  - Cleanups for proper plymouth support
  - Move the mcheck code to a debugmode package, make it more generic


author: Bill Nottingham <notting@redhat.com> - 8.81-1
changelog:
  - rc.sysinit: Don't use -L in find (#458652, #458504, CVE-2008-3524)
  - ifup: kill more code from loopback bringup


author: Bill Nottingham <notting@redhat.com> - 8.82-1
changelog:
  - refresh translation strings
  - plymouth updates. (#460702, <rstrode@redhat.com>)
  - translation updates: fi, lv, no
  - remove duplicate dependency (#465182)
  - ifup-eth: Change how we set the zeroconf route. (#239609)
  - ifup*: Use 0.0.0.0/0, not 0/0. (#460580)


author: Bill Nottingham <notting@redhat.com> - 8.83-1
changelog:
  - various merge review fixes (#225900)
    Notably: init scripts/network scripts are no longer %config
  - remove some extraneous device-mapper initialization
  - use pidfile in status before calling pidof (#463205)
  - use plymouth directly, not the rhgb-client wrapper
  - move bridging after bonding (#449950, <djuran@redhat.com>)
  - use alsactl to save sound settings. (#462677, <jkysela@redhat.com>)
  - quit plymouth differently (<rstrode@redhat.com>)
  - make sure we don't try and spawn a repair shell when there's no
    tty (#463161)
  - move udev rules to /lib
  - stateless updates (#433702, <harald@redhat.com>)
  - call logger with a full path (#447928, <harald@redhat.com>)
  - translation updates: as, bn_IN, ca, cz, de, es, fi, fr, gu, it, ja,
    lv, mr, nl, or, pa, pl, pt_BR, ru, te, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.84-1
changelog:
  - override Arabic, Persian, and Hebrew on the console (<alsadi@ojuba.org>)
  - explicitly run mdadm on boot to catch degraded arrays. (<dledford@redhat.com>)
  - fix setting of console font/map (#458362, <ak@sensi.org>)
  - translations updates: hi, kn, nb, sk, sv, ta


author: Bill Nottingham <notting@redhat.com> - 8.85-1
changelog:
  - add some error handling/hiding to netfs NM dispatcher script (#469197)
  - halt: fix code that causes a syntax error on multiple sound cards (#469156)
  - require a new enough udev version to handle where we put the rules
  - exit 0 in /etc/rc.d/rc (#469050)
  - don't set up encrypted devices that have already been set up under different
    names (#462371, <wwoods@redhat.com>)
  - accept either the '+<addr>', or comma-separated addresses for arp_ip_target. (#467954,
    <darcy.sherwood@gmail.com>)
  - translation updates: hu, kn, ko, ml, sr, sr@latin


author: Bill Nottingham <notting@redhat.com> - 8.86-1
changelog:
  - stop plymouth before stopping the runlevel (#467207)
  - fix get_config_by_subchannel (#459044, <harald@redhat.com>)
  - use blkid -l to pick a single most appropriate device (#470027)
  - don't mkswap on halt, as it breaks swap-by-label/UUID (#469823)


author: Bill Nottingham <notting@redhat.com> - 8.87-1
changelog:
  - rename_device: be much faster in the presence of many devices (#480687, <danms@us.ibm.com>)
  - fix switching from targeted to MLS policy (#479054, <dwalsh@redhat.com>)
  - rc.sysinit: don't set $(uname -r) or $(uname -m); they're not used
  - network-functions-ipv6: set MTU correctly for 6to4. (#477976, <ackistler@yahoo.com>)
  - add more entries to rwtab (#476799, <harald@redhat.com>)
  - net.hotplug: Bail out sooner if the network service isn't running
  - init.d/halt: determine reboot/halt via existing INIT_HALT environment variable. (#475227)
  - event.d/serial: add some docs
  - init.d/functions: __pids_var_run: Handle multi-line pid files correctly (#473287)
  - remove support for no longer existing 'brctl setgcint' command. (#360471)
  - add %config back for ifcfg-lo (#472761)
  - rcS/rcS-sulogin: don't match commented lines when finding runlevel (#472717)
  - updated translations: de, sk


author: Bill Nottingham <notting@redhat.com> - 8.89-1
changelog:
  - use a leading path when sourcing files (#482826)
  - netfs: don't unmount nfsd filesystem by accident (#481794, <sprabhu@redhat.com>)
  - bring up ipsec interfaces last (#481733)
  - ifdown-eth: fix bridge + vlan (#481557, <danken@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.90-1
changelog:
  - init.d/functions: cgroup support (<jsafrane@redhat.com>)
  - fix various issues with dmraid handling (#485895, <hdegoede@redhat.com>)
  - rc.sysinit: fix typo. (#487926)
  - console_init: loadkeys has a -q option for silent running. Use it.
  - ifup-tunnel: add compatibility for openNHRP tunnels (#486559, <claude.tompers@ieee.lu>)
  - ccw_init: don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - netfs: use same kpartx arguments as rc.sysinit
  - don't list mtab in rwtab (#457941)
  - translation updates: fi, de, mai


author: Bill Nottingham <notting@redhat.com> - 8.91-1
changelog:
  - fix DHCP reading of options from ifcfg-XXX (#483257)
  - ifdown-eth: clean up bridges on ifdown (#463325, <sean@bruenor.org>)
  - support MD on iSCSI (#480627)
  - remove support for 'ifcfg-foo-bar' configurations that inherit from 'ifcfg-foo'
  - remove slip support
  - translation updates: es, pl, ca, sr, de, sv, pa, pt_BR


author: Bill Nottingham <notting@redhat.com> - 8.93-1
changelog:
  - rc.sysinit: add a disk synchronization point with scsi_wait_scan post-udev (#481470)
  - netfs: drop smbfs support, we don't even ship the module or tools any more
  - setsysfont: honor LC_CTYPE (#487133, <skasal@redhat.com>)
  - prefdm: do fallbacks based on provides of 'service(graphical-login)' (#485751)
  - rc.sysinit: handle multiple IP addresses without choking in the stateless code (#443945)
  - rc.sysinit: catch the right error code from checking for passphrases (#483269, <vladis.kletnieks@vt.edu>)
  - prefdm: handle empty /etc/sysconfig/desktop correctly (#480113)
  - ifup-ipsec: allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - ifup-eth: allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - ifup-eth: fix dhcpv6 when there is no IPv4 configuration (#486507)
  - ifup-ppp: avoid spurious SIGCHLD to pppd (#448881)
  - ifup-eth: add support for creating TUN/TAP devices on the fly (#453973, <scott@zahna.com>)
  - stop plymouth when starting single-user mode. (#491062)
  - add plymouth shutdown script (#473237, <jmccann@redhat.com>)
  - fix lang.sh/lang.sh/consoletype for execution with '-e'
  - ifdown-eth: remove arp_ip_target on ifdown for bonding devices. (#483711)
  - add vlan support for s390 HSI interfaces. (#490584)
  - ipcalc: support IPv6 (#464268, <dcantrell@redhat.com>)
  - translation updates: all


author: Bill Nottingham <notting@redhat.com> - 8.94-1
changelog:
  - prefdm: add simple fallbacks, sort rpmdb query for consistency (#494461)
  - translation updates; bn, de, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.95-1
changelog:
  - don't kill runlevel events on subsequent entering of the same runlevel (#498514)
  - lang.*sh: handle spaces in $HOME (#498482)
  - network-functions: explicitly source from the proper directory. (#496233)
  - remove persistent names on sys-unconfig. (#448322)
  - init.d/functions: cgexec has moved to /bin (#495715)
  - allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - translation updates: fr, ml, pt


author: Bill Nottingham <notting@redhat.com> - 8.96-1
changelog:
  - fix up upstart rules for s390(x). (#515222)
  - leave ChangeLog in the tarball only. (#515012)
  - disable netfilter on bridged interfaces. (#512206)
  - assorted shell-related cleanups to ipv6 and other code (<victor.lowther@gmail.com>)
  - use resolv.conf from dracut netboot before setting hostname. (#514801, <wtogami@redhat.com>)
  - ipcalc updates (<victor.lowther@gmail.com>)
  - only use ethtool for link checking; no more mii-tool
  - require /sbin/blkid directly, as it moves between packages (#508413)
  - redirect bash errors on 'unset' to /dev/null. (#482888)
  - fix dmraid partition naming (#501476, <hdegoede@redhat.com>)
  - don't quote upstart signals. (#501155)
  - translation updates: bn_IN, da, es, sk


author: Bill Nottingham <notting@redhat.com> - 8.97-1
changelog:
  - ipcalc: fix IPv6 address checking (#516319)
  - ifup-aliases: fix syntax error from earlier cleanups. (#515612, <jik@kamens.brookline.ma.us>)
  - translation updates: nb
  - rc.sysinit: remove useless call to pam_console_apply


author: Bill Nottingham <notting@redhat.com> - 8.98-1
changelog:
  - sysconfig.txt: doucment DHCP_HOSTNAME (#498052)
  - 88-clock.rules: Use --systz instead of --hctosys. (#517886, #489494)
  - Support rwtab and state passed from dracut initrd (#515771, <wtogami@redhat.com>)
  - restore context of *tmp files (#519748)
  - halt: don't try and save mixer settings if it's not writable. (#515771)
  - rwtab: add /var/spool, /var/lib/dbus, others (#494973, #515771)
  - sysconfig.txt: clarify docs (#518614)
  - rc.sysinit: don't pretend /selinux is configurable (#518164)
  - assorted ipv6 redundant code deletion
  - translation updates: bn, ca, de, es, fi, fr, gu, hi, it, ja, ko, ml, nb, nl, pl, pt, pt_BR, ru, sr, ta, zh_CN, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.99-1
changelog:
  - init.d/functions: add a '-l' option to status to pass lock file name (#521772)
  - tweak kernel conflict
  - translation updates: as, bn_IN, de, fr, hi, it, hu, kn, mr, or, pa, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 9.00-1
changelog:
  - halt: wrap /sbin/killall5 to catch some return codes (#526539)
  - netfs, netconsle, network: fix return codes to match LSB spec (#524489, #524480, #524486)
  - handle kernels compiled both with and without CONFIG_RTC_HCTOSYS
  - halt: use killall5's return code to avoid unncesssary sleeping (#524359, <hdegoede@redhat.com>)
  - halt: don't kill mdmon on shutdown. (#524357, <hdegoede@redhat.com>)
  - rc.sysinit: do not try and activate ISW raidsets, unless noiswmd is passed. (#524355, <hdegoede@redhat.com>)
  - translation updates: ca, cs, da, mai, po, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.01-1
changelog:
  - rc.sysinit: fix handling of dmraid output to avoid error messages (#527726, <mschmidt@redhat.com>)
  - rwtab: add /var/lib/xend (#526046)
  - translation updates: fi, nb, pl


author: Bill Nottingham <notting@redhat.com> - 9.02-1
changelog:
  - remove long-since deprecated initlog
  - remove IUCV support (#507217)
  - halt: put a wrapper around killall5 to account for retval 2 not being an error (#526539, <hdegoede@redhat.com>)
  - ifup-eth: honor DEFROUTE=yes|no for 'all' connection types. (#528822)
  - network-functions: load bonding driver if BONDING_OPTS is defined. (#516569)
  - rc.sysinit: put /dev/shm in mtab too, as dracut now mounts it. (#528667)


author: Bill Nottingham <notting@redhat.com> - 9.03-1
changelog:
  - migrate to upstart 0.6.x (<notting@redhat.com>, <plautrba@redhat.com>)
  -- jobs move to /etc/init
  -- collapse rcX and ttyX jobs into single job definitions
  -- jobs are no longer %config
  - remove obsolete doexec command
  - rc.sysinit: handle yet another random return string from dmraid
  - remove never-used 'sulogin' upstart event
  - fix time-setting udev rules for old-style RTC devices (#537595)
  - init.d/network: keep error codes limited to '1'. (#537841)
  - add initial ifup/ifdown man pages. (#529328, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.04-1
changelog:
  - various shell-related cleanups and optimizations <ville.skytta@iki.fi>
  - ifup-eth: use dhclient's -H option instead of munging dhclient config files
  - rc.sysinit: move mdadm after dmraid (#494821)
  - ifup-eth: use dhclient -6, not the no-longer-included dhcp6c
  - add more man pages (#529328, <plautrba@redhat.com>)
  - move is_wireless after MACADDR/MTU setting (#552638)
  - serial.conf: respawn correctly. (#552324, <zing@fastmail.fm>)
  - network-functions: use sysfs for wireless check (#551019, <adel.gadllah@gmail.com>)
  - reload init on started messagebus (<plautrba@redhat.com>)
  - honor HOTPLUG in ifdown (#547737)
  - network-functions: silence error. (#516569)


author: Bill Nottingham <notting@redhat.com> - 9.05-1
changelog:
  - network-functions: don't use ethtool for link state, assorted other cleanups
  - inittab: fix job paths in comments (<plautrba@redhat.com>)
  - init.d/functions: don't clear environment in runuser (#203010, #564093)
  - 88-clock.rules: use ATTR, not SYSFS (#560756)
  - init.d/network: don't quote regex argument to bash's =~ (<ville.skytta@iki.fi>)
  - network-functions: use HWADDR to determine DEVICE if DEVICE isn't set (#545597)
  - don't HUP init when messagebus starts (#557791)
  - setsysfont: use UNIMAP, not SYSFONTACM, when calling unicode_start (#557089)
  - ifup: don't leave the link down on link failure for DHCP (#462013, #491009)
  - translation updates: cs


author: Bill Nottingham <notting@redhat.com> - 9.06-1
changelog:
  - move ccw_init and ccw udev rules to s390utils (#539491)
  - rc.sysinit: suppress LVM2 warnings.  (#561938, <prajnoha@redhat.com>)
  - fix translated checks for user input (#566579)
  - refresh translations


author: Bill Nottingham <notting@redhat.com> - 9.07-1
changelog:
  - clean out some extraneous package requirements
  - fix dmraid error checking now that dmraid has return codes (#568790, others)
  - integrate with NetworkManager for ifup/ifdown (#523064)
  - translation updates: cs, da, de, en_GB, es, fi, nl, pl, pt_BR, ru, sr


author: Bill Nottingham <notting@redhat.com> - 9.08-1
changelog:
  - network-functions: redirect error messages when nmcli isn't installed (#570828, <zing@fastmail.fm>)
  - ifdown: use nmcli to get the device, if not specified
  - ifdown: fix typo
  - translation updates: fr


author: Bill Nottingham <notting@redhat.com> - 9.09-1
changelog:
  - rc.sysinit: change RAID handling (<dledford@redhat.com>)
  - fix german mistranslation (#575954, <pb@bierenger.de>)
  - init.d/functions: correct fix for environment with runuser. (#203010, #564093)
  - halt: fix mdmom pid handling for newer mdadm (#549726, <dledford@redhat.com>)
  - init.d/network: only blacklist the original loopback interface. (#579816, <evgsyr@gmail.com>
  - translation updates: de, ja, nb, pt, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.10-1
changelog:
  - fstab-decode.8: fix formatting (#586476)
  - prefdm: add --retain-splash for KDM as well (#585250)
  - init.d/functions: handle being unable to read a specified pid file. (#584575)
  - init/quit-plymouth.conf: use 'task' for stopping plymouth. (<rstrode@redhat.com>)
  - ifup-eth: run dhclient -6 similar to dhclient -4. (#585047)
  - net.hotplug: don't run on odd interfaces. (#584530)


author: Bill Nottingham <notting@redhat.com> - 9.14-1
changelog:
  - clean up plymouth shtudown splash (#590099, <rstrode@redhat.com>)
  - rc.sysinit: use lvm2 --sysinit option (#588777)
  - network-functions: behave sanely in the absence of $DEVICE (#589521)
  - sysconfig/debug: export debug variables (#589378)
  - netfs: check for NM to be connected, not just running (#589710)
  - rcS*.conf: check if /etc/inittab exists (#590703, <plautrba@redhat.com>)
  - port vlan code to /sbin/ip (#566485, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.15-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607764, #607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)
  - ifdown-ipsec: don't use a full path when killing racoon, so it works in MLS policy (#567295)
  - network-functions: check NM_CONTROLLED before deciding to use NM for a connection. (#599707, probably others.)
  - rc.sysinit: always reboot on autorelabel. (#595823)
  - init.d/functions: handle permission denied on reading PID file. (#595597)
  - clean up some deprecated items
  - translation updates: el, nl, or, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.16-1
changelog:
  - halt: don't umount cgroups (#612789)
  - rename_device: dequote DEVICE key, handle SUBCHANNELS (<harald@redhat.com>)
  - sysconfig.txt: document PREFIX/NETMASK (#617481, <jklimes@redhat.com>)
  - sysconfig.txt: document NETWORKWAIT (#595386)
  - remove support for hotkey interactive startup (#605016). Use 'confirm' on the commandline
    (but even that doesn't fully make sense in an upstart/systemd world)
  - don't directly execute bash for single-user mode (#540216, #584443, #585053)


author: Bill Nottingham <notting@redhat.com> - 9.17-1
changelog:
  - init.d/functions: redirect start/stop/condrestart/etc to systemctl in a systemd environment (#612728)
  - rc.sysinit: don't frob the console loglevel on boot (#621257, #626572)
  - service: use systemctl on systemd services
  - 10-console.rules: only init consoles on add, not change (<lennart@poettering.net>)
  - halt: fix unmounting bind mounts (#620461, <phr@doc.ic.ac.uk>)
  - killall: exit 0 (#605519)
  - translation updates: de, es, fi, fr, nl, pl, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.18-1
changelog:
  - fix for new cgroups location (#612789, others <plautrba@redhat.com>)
  - add in basic systemd units
  - translation updates: nb, pt, sv


author: Bill Nottingham <notting@redhat.com> - 9.19-1
changelog:
  - fix packaging of prefdm, rc-local systemd units (#630952)
  - systemd/single.service: conflict with shutdown.target (#630935)
  - translation updates: ja, pt_BR, ru


author: Bill Nottingham <notting@redhat.com> - 9.20-1
changelog:
  - use new pidof -m option to avoid false positives (#632321)
  - systemd/single: set $HOME for single-user mode. (#631590)
  - systemd/killal.service: require shutdown.target (#630935, #632198)


author: Bill Nottingham <notting@redhat.com> - 9.21-1
changelog:
  - build for systemd only
  - ship a default.target link in case the one in /etc gets deleted
  - rc.sysinit: reset btmp on boot if necessary (#633768, <dmach@redhat.com>)
  - single.service: fix invocation so that 'runlevel' works (#630914)


author: Bill Nottingham <notting@redhat.com> - 9.22-1
changelog:
  - merge in systemd-specific startup support; package a -legacy package
    (based on work by <harald@redhat.com>)
  - init-ipv6.global: don't load sit module on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - do not call rhgb-client
  - network-functions: add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown nmcli invocation (#612934, jklimes@redhat.com>)
  - *ipv6*: don't use obsolete /sbin/ip wrapper
  - sysconfig.txt: adjust clock docs (#637058)
  - lang.csh: fix tcsh + grep-2.7. (#636552)


author: Bill Nottingham <notting@redhat.com> - 9.23-1
changelog:
  - don't throw errors on unreadable /dev/stderr (#650103, <plautrba@redhat.com>)
  - support multiple ipv4 addresses, not just alias devices (#132912, #633984, <jklimes@redhat.com>)
  - properly handle /var/run on tmpfs (#656602, <plautrba@redhat.com>)
  - allow '0' as a vlan tag (#624704, #635360)
  - assorted systemd unit cleanup (<lennart@poettering.net>)


author: Bill Nottingham <notting@redhat.com> - 9.24-1
changelog:
  - ifup-eth/ifdown-eth: handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - tmpfiles.d: remove entries that exist in systemd
  - frob device when calling sysctl, in case of vlans. (#665601, #667211, <ossman@cendio.se>)
  - netfs: rework to handle bind-mounted cifs/ncpfs (#663140, <dmudrich@nospam.mudrichsystems.com>)
  - own /etc/crypttab (#664309)
  - init.d/network: add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - ifup-eth: fix routing regression (#660363)
  - sysctl.conf.s390 - system z optimized sysctl settings per default (#633323, <plautrba@redhat.com>)
  - serial.conf, tty.conf: stop tty and serial also on runlevel 's' (#629257, <plautrba@redhat.com>)
  - translation updates: bn_IN, es, gu, hi, nds, or, pa, uk, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.25-1
changelog:
  - remove 'Red Hat Linux' references from sysctl.conf* (<ville.skytta@iki.fi>)
  - rc.sysinit: add support for sysctl.d (#593211, <martin@laptop.org>)
  - console_check: support OMAP serial console (#678875, <ndevos@redhat.com>)
  - /sbin/service: accept --ignore-dependencies, --skip-redirect as options
  - /sbin/service: honor SYSTEMCTL_IGNORE_DEPENDENCIES (<lennart@poettering.net>)
  - translation updates: kn, pa, ta, uk


author: Bill Nottingham <notting@redhat.com> - 9.26-1
changelog:
  - network-functions: fix check for unmanaged devices (#670154)
  - ifup-eth: also check /dev/.run/initramfs (<harald@redhat.com>)
  - systemd: execute fedora-sysinit-unhack after sysinit.target (<arvidjaar@gmail.com>)
  - init.d/functions: don't do force/lazy umount for the first nfs umount. (#676851, <jlayton@redhat.com>)
  - further sysctl.d fixes (#593211)
  - init.d/functions: make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - ifup: add GVRP support (#597598, <tomek@jot23.org>)
  - init.d/functions: add support for noauto crypt devices, to mirror systemd
  - documentation updates
  - bash cleanups (<ville.skytta@iki.fi>)
  - ifup: remove network device naming requirement from VLAN devices (#462095, <Matt_Domsch@dell.com>)


author: Bill Nottingham <notting@redhat.com> - 9.27-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode. (#685137)
  - support ipv6 routing rules, merge route/rule code (#680872, <tobiasoed@hotmail.com>)
  - autorelabel.service, loadmodules.service: fix conditions so that they operate as OR, not AND. (#684125)


author: Bill Nottingham <notting@redhat.com> - 9.28-1
changelog:
  - add some generic network logging, port scripts to it (#507515, #653630)
  - add an error when setting the gateway fails (#672202)


author: Bill Nottingham <notting@redhat.com> - 9.29-1
changelog:
  - systemd: add a storage setup service after cryptsetup.target (#692198)
  - fix /.autorelabel handling (<mschimdt@redhat.com>)
  - don't explicitly disallow IPv6 aliases (#583409, #612877)
  - netfs: don't print errors if mdadm isn't installed. (#692187)
  - ifup-eth: use /run/initramfs rather then /dev/.run/initramfs (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.30-1
changelog:
  - ifup-eth: handle IPADDRx correctly for static addresses (#697838)
  - systemd: fix storage setup service after cryptsetup.target (#699918)
  - prefdm: tweak how plymouth is quit in the gdm/kdm case (<rstrode@redhat.com>)
  - support /etc/hostname as an override for hostname in /etc/sysconfig/network
  - init.d/single: only ship this in -legacy
  - network-functions: fix IPADDRx index handling (<jklimes@redhat.com>)
  - ifup/down-eth: properly handle apr_ip_target, when used with module options (#604669, <harald@redhat.com>)
  - ifup-eth: ensure bond exists before bringing up slaves (#694501)


author: Bill Nottingham <notting@redhat.com> - 9.31-1
changelog:
  - remove ifup/ifdown-ipsec; they're now in ipsec-tools
  - rc.sysinit: start udev by hand, start_udev is no more (#714531)
  - ifup-aliases: if IPv6 is configured on the alias, configure it. (#583409)
  - ifup-eth: ensure DHCP_HOSTNAME is a short hostname, seed it from HOSTNAME if needed. (#697877)
  - network-functions: override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - exclude single symlink from main package (#705457)
  - network: VLAN, etc. interfaces can be slaves; check for being a slave first. (#703475)
  - network: use LC_ALL=C when calling sed. (https://bugs.mageia.org/show_bug.cgi?id=1216, via <sander.lepik@eesti.ee>)
  - functions: (umount_loop) fuser -k defaults to -9; set the initial pass to kill -15. (#703457)
  - init.d/halt: don't match filesystem types in hostnames (#703203, <jmueller@data-tronics.com>)


author: Bill Nottingham <notting@redhat.com> - 9.32-1
changelog:
  - prefdm: if exec() of all DMs fails, call 'plymouth quit' (#735215)
  - %ghost rc.local (but leave it around on upgrade) (#734268)
  - ifup: support random bridging options via BRIDGING_OPTS (#734045, #665378)
  - selinuxfs moved to /sys/fs, handle it (#733759)
  - netfs/fedora-storage-init: call multipath and kpartx with -u (#733437)
  - plymouth lives in /bin (#702814)
  - drop fedora-autoswap
  - ifdown-eth: fix dhclient pid file for IPv6 (#729292, <daveg@dgit.ndo.co.uk>)
  - move some more things to the legacy subpackage
  - netfs: don't mount gfs2 here (#689593)
  - readonly-root: add an empty CLIENTSTATE definition (#725476)
  - drop sysinit hack/unhack
  - ifup-eth: allow more options in ETHTOOL_OPTS (#692410, #693583)
  - rwtab: update for systemd (#704783)
  - debug.csh: fix for latest csh
  - update translations: eu_ES, hy, ku, lo, my, wa


author: Bill Nottingham <notting@redhat.com> - 9.33-1
changelog:
  - netconsole: only use the first ARP response (#744309, <doug.knight@karmix.org>)
  - udev/rules.d/88-clock.rules: drop this entirely, as it causes issues in conjunction with systemd
  - init.d/network: be less picky about ifcfg file names. (#742276)
  - /sbin/service: do not check for the existence of a systemd unit before redirecting (<mschmidt@redhat.com>)
  - init.d/functions: only run consoletype if connected to something that's console-ish. (#657869)


author: Bill Nottingham <notting@redhat.com> - 9.34-1
changelog:
  - read locale.conf if it exists (#706756)
  - ifdown: fix logic error with removing arp_ip_target (#745681)


author: Bill Nottingham <notting@redhat.com> - 9.35-1
changelog:
  - use the same DHCP lease file names as NetworkManager, where appropriate
  - copy network state from initramfs with a systemd service, not inline (<wwoods@redhat.com>)
  - sysconfig.txt: clean up section on disabling IPv6
  - ifup: allow for ifup-$TYPE/ifdown-$TYPE
  - fedora-readonly.service: drop StandardInput=tty (#785662)
  - sysconfig.txt: document additional ETHTOOL_OPTS enhancements (<raghusiddarth@gmail.com>)
  - port assorted ancient ifup-XYZ scripts away from ifconfig
  - don't use ifconfig in ifup-aliases (#721010, 588993, based on <tgummels@redhat.com>)
  - fedora-storage-init: handle dmraid sets with spaces (#728795, <lnykryn@redhat.com>)
  - fedora-readonly: don't exit with an error if SEinux isn't active. (#768628)
  - init.d/network: fix checks for network filesystems (#760018)
  - fedora-wait-storage: drop stdin/stdout/stderr (#735867)
  - netfs: move to legacy package
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 9.36-1
changelog:
  - ifup-aliases: fix IFS usage mangling of device names (#802119)
  - ifup/ifdown: fix typo (#802055, <lubek@users.sourceforge.net>)


author: Bill Nottingham <notting@redhat.com> - 9.39-1
changelog:
  - assorted documentation cleanups
  - typo, spelling, licenese clean up (<ville.skytta@iki.fi>)
  - service: add support for legacy custom actions packaged in
    /usr/libexec/initscripts/legacy-actions/<script>/<action>
  - network-functions: handle quoted HWADDR (#835372)
  - allow bridge names that start with '-' (<danken@redhat.com>)
  - remove all non-legacy uses of /sbin/route (#682308)
  - move default sysctl.conf to /usr/lib/sysctl.d (#760254)


author: Bill Nottingham <notting@redhat.com> - 9.41-1
changelog:
  - debugmode: MALLOC_CHECK_ is not thread safe. Don't enable it by default (#853175)
  - Add support for 256 color terminals (<pbrady@redhat.com>)
  - ifdown-eth: be less strict about VLAN name (#505314, <vpavlin@redhat.com>)
  - drop prefdm
  - ifup-eth: allow duplicate address detection to be disabled (<bcodding@uvm.edu>)
  - process rule6-* for sit devices (#840009, <lnykryn@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.42-1
changelog:
  - Halloween release!
  - add a default /etc/sysctl.conf that describes how to change values, and where the defaults now live. (#760254)
  - translation updates
  - fedora-autorelabel: don't pass -F to fixfiles (#863662, <dwalsh@redhat.com>)
  - fix calling of firewall-cmd in ifup-post/ifdown-post (<jpopelka@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.43-1
changelog:
  - 60-net.rules: explicitly set the interface name (#870859)
  - ifup-eth: set firewall zone before ifup-ipv6 for DHCPv6 (#802415)
  - migrate to /etc/locale.conf, /etc/vconsole.conf (#881923)
  - rename_device: fix bogus locking
  - fix wireless device detection for kernel 3.6 (#875328)
  - drop fedora-storage-init, fedora-wait-storage (<prajinoha@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.44-1
changelog:
  - limit udev rule for network renaming (#907365, mschmidt@redhat.com)
  - fix path for arpwatch, seems to be in /var/lib on Fedora 18
  - fix the path for lvm cache, there is no file /etc/lvm/.cache ( but there is one /etc/lvm/cache )
  - fix path for dhcpd, is /var/lib/dhcpd since 2005 ( see 31cdb58df77 on the dhcp package git )
  - fix the patch for apache modules in rwtab, that are now in /var/cache/httpd
  - remove no longer used directory ( at least in Fedora ), hald is deprecated,
    /var/tux cannot be found and xend seems to use a subdirectory of /var/lib/xen
  - correct the path for puppet directory in /etc/rwtab, now use /var/lib/puppet by default
  - allow passing -F from /.autorelabel to fixfiles when relabeling system (#904279)
  - correctly detect Open vSwitch device types
  - clear DEVICE and TYPE variables before every iteration (#902463)
  - sets BONDING_OPTS before interface is brougth up
  - check an IP address for existence in ifup-alias (#852005)
  - sync FSF address with GPL 2 text.
  - fix rpmlint's spaces vs tabs warning.
  - fix bogus %changelog dates.
  - build with $RPM_LD_FLAGS.
  - use -sf, not -s. (#901827)
  - add /usr/libexec/initscripts to file list (#894475)
  - rename term256 to 256term (glob sort) (#849429)
  - readd missing shebang. (#885821)
  - migrate even further away from /etc/sysconfig/network for hostname, and /etc/sysconfig/i18n.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.45-1
changelog:
  - turn on symlink protections in sysctl (#922030)
  - add systemd-random-seed.service to  Before= in fedora-readonly.service (#888615)
  - mention rule6 files in sysconfig.txt
  - skip nmcli for wireless device (#863707)
  - remove config-noreplace from /etc/inittab (#627474)
  - remount-rootfs.service got renamed to systemd-remount-fs.service
  - compile netreport and usernetctl with full RELRO and PIE (#853178)
  - move stuff directly to /usr (#905492)
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - fix greps to correctly handle comments and quotation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.46-1
changelog:
  - add /var/lib/NetworkManager
  - add ipip6 tunneling support (#928232, raorn@raorn.name)
  - bonding: set master up before slaves
  - set net.ipv6.conf.SYSCTLDEVICE.autoconf in ifup-ipv6
  - ifdown: don't call nmcli on interface that is alread down
  - remove some defaults from sysctl.conf (move to systemd)
  - call flush addresses with scope global
  - service: action should not be empty when calling legacy-actions (#947817)
  - ifup-eth: ignore arping errors (#928379)
  - replace tunctl with ip tuntap (#947875)
  - reload sysctl settings for vlans on ifup
  - try dhcpv6 after v4 failed (#846618)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.47-1
changelog:
  - network-functions: to determine state of nscd check socket not lock (#960779)
  - sysconfig.txt advised saslauthd -a instad of -v
  - update translations from transifex
  - drop translation for other initscripts
  - tweak ifup/ifdown usage and man page (#961917)
  - ctrl-alt-delete.target is provided by systemd package
  - remove some defaults from arch specific sysctl.conf
  - readonly-root: remount rpc_pipefs if readonly-root is used
  - service: mention legacy actions and systemctl redirection in man page


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.48-1
changelog:
  - man: add systemd man pages to service.8 "see also" section
  - add possibility to set domainname through /etc/sysconfig/network
  - rename_device: don't wait for lock with lower permissions
  - 256term.csh: remove quotes around variable (#979796)
  - drop useless variables from /etc/sysconfig/init
  - readonly-root: rpcidmapd restart is not needed anymore
  - ifup-eth: print error only if arping is really called (#974603)
  - readonly-root: Add /var/lib/samba to rwtab


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.2-1
changelog:
  - symlink /etc/sysctl.conf -> /etc/sysctl.d/
  - man: only action specified in LSB are redirected to systemd
  - service: filter actions that are not supported by systemctl in service (#947823)
  - install_bonding_driver: drop check for existing device (#991335)
  - consider IPV6INIT undefined as YES
  - don't care about network filesystems


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.3-1
changelog:
  - update functions who call nmcli (#1002958)
  - create /var/log/dmesg for compatibility reasons (#854002)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.4-1
changelog:
  - ifdown: fix typo in nmcli call (#1006222)
  - ipcalc: support RFC3021 (#997271)
  - enable 'network' service at boot time for interfaces not supported by NetworkManager (#1003936)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.7-1
changelog:
  - readonly-root: Add /var/log/audit/audit.log to rwtab (#1026815)
  - brandot: fix posssible segfault (#1024922)


author: Václav Pavlín <vpavlin@redhat.com> - 9.49.8-1
changelog:
  - service: suggest using systemctl if unknown action is used (#1029350)
  - rename_device: remove comments and trailing whitespaces (#1027945)
  - readonly-root: restore selinux context after bind mount (#1029342)


author: Václav Pavlín <vpavlin@redhat.com> - 9.49.11-1
changelog:
  - Revert: provide KVM guest count and limit info message (#1014731)
  - add C implementation of reverted patch


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.12-1
changelog:
  - use iw instead of iwconfig and friends (#915343)
  - don't care about rc.local anymore (#1034156)
  - udev-kvm-check: simplify reading of threshold (#1031568)
  - brandbot: read only first line (#1031490)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.13-1
changelog:
  - delete IPX support
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - set shmmax and shmall defaults to match rhel6 values (#1056547)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.14-1
changelog:
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - service: fix action matching
  - service: add condrestart to allowed commands (#1069222)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.18-1
changelog:
  - is_available_wait: properly propage return value from is_available
  - man: update sys-unconfig.8
  - rename_devices: comments need to have a blank before them
  - add example ifcfg files
  - network-functions: improve bonding_masters grep
  - ifup: if we were unable to determine DEVICE always call nmcli up
  - ifup-tunnel: call ifup-ipv6 in the end
  - ifup: also set multicast_snooping after the bridge is up
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - custom naming for VLAN devices
  - ifup-wireless: add support for wowlan
  - vi.po: fix parentheses
  - network-functions: ETHTOOL_DELAY introduction patch
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - use pie and relro by default
  - sys-unconfig: use poweroff instead of halt
  - ifup-aliases: improve duplicate address detection
  - network-functions: handle BONDING_OPTS better
  - fedora-readonly: fix prefix detection (#1059749)
  - network: tell nm to wake the slaves
  - bridging: add possibility to set prio and ageing
  - network: add support for team devices
  - inittab: fix path and mention set-default
  - fedora-domainname: DefaultDependencies=no


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.25-1
changelog:
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - brandbot: move to /usr/libexec/initscripts
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - rename_device: allow non-channel nics for s390x machines
  - network-functions: fix check in install_bonding_driver
  - ifup-aliases: don't return with error when arping fails
  - network-functions: fix change_resolv_conf after grep update
  - clarify daemon() usage message
  - ifup: don't call NM for loopback
  - ifup: add missing quotes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.26-1
changelog:
  - import-state: don't run restorecon when it does not exist
  - network-functions: reeplace iwconfig with iw
  - fedora-readonly: use --make-slave with --bind mounts


author: P Linnell <scribusdocs at atlantictechsolutions.com> 0:0.37.0.fdr.1
changelog:
  - pgp'd tarball from inkscape.org
  - clean out the cvs tweaks in spec file
  - enable gnome-print
  - add the new tutorial files
  - make sure .mo file gets packaged
  - add provides: perlSVG
  - submit to Fedora QA


author: P Linnell <scribusdocs at atlantictechsolutions.com> 0:0.37.0.fdr.2
changelog:
  - add libsigc++-devel instead of add libsigc++ - duh
  - add BuildRequires:  perl-XML-Parser
  - fix package name to follow package naming guidelines


author: Jeremy Katz <katzj@redhat.com> - 0.41-4
changelog:
  - add patch for gcc4 problems (ignacio, #156228)
  - fix build on 64bit boxes.  sizeof(int) != sizeof(void*)


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.41-6
changelog:
  - remove explicit aclocal/autoconf calls in %build as they create a
    bad Makefile for FC4/i386, which causes build to fail (#156228),
    and no comment explains where they were added/needed


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.42-1
changelog:
  - update to 0.42 (also fixes #160326)
  - BR gnome-vfs2-devel
  - no files left in %_libdir/inkscape
  - include French manual page
  - GCC4 patch obsolete, 64-bit patch obsolete, dgettext patch split off


author: Denis Leroy <denis@poolshark.org> - 0.43-1
changelog:
  - Update to 0.43
  - Added 2 patches to fix g++ 4.1 compilation issues
  - Enabled new jabber/loudmouth-based inkboard feature


author: Denis Leroy <denis@poolshark.org> - 0.44-2
changelog:
  - Update to 0.44
  - Removed obsolete patches
  - Disabled experimental perl and python extensions
  - Added pstoedit, skencil, gtkspell and LittleCms support
  - Inkboard feature disabled pending further security tests


author: Denis Leroy <denis@poolshark.org> - 0.44.1-2
changelog:
  - Added patches to fix LaTex import (#217699)
  - Added patch to base postscript import on pstoedit plot-svg


author: Denis Leroy <denis@poolshark.org> - 0.45-1
changelog:
  - Update to 0.45
  - Enabled inkboard, perl and python extensions
  - Added patch for correct python autodetection
  - LaTex patch integrated upstreamed, removed
  - Some rpmlint cleanups


author: Lubomir Kundrak <lkundrak@redhat.com> - 0.45.1-2
changelog:
  - Use GTK print dialog
  - Added compressed SVG association (#245413)
  - popt headers went into popt-devel, post Fedora 7
  - Fix macro usage in changelog


author: Lubomir Kundrak <lkundrak@redhat.com> - 0.45.1+0.46pre1-1
changelog:
  - 0.46 prerelease
  - Minor cosmetic changes to satisfy the QA script
  - Dependency on Boost
  - Inkboard is not optional
  - Merge from Denis Leroy's svn16571 snapshot:
  - Require specific gtkmm24-devel versions
  - enable-poppler-cairo
  - No longer BuildRequire libsigc++20-devel


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.3.20090105svn
changelog:
  - Update to newer SVN
  - Drop upstreamed patches
  - Enable WordPerfect Graphics support
  - Enable embedded Perl scripting
  - Enable Imagemagick support
  - Disable OpenSSL due to licensing issues


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.3.20090227svn
changelog:
  - Past midnight! :)
  - More recent snapshot, our gcc44 fixes now upstream
  - One more gcc44 fix, it even compiles now
  - We install icons now, update icon cache
  - Disable inkboard, for it won't currently compile


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.4.20090301svn
changelog:
  - Bump to later SVN snapshot to fix inkscape/+bug/331864
  - Fix a startup crash when compiled with GCC 4.4
  - It even runs now! :)


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.16.pre3.20090925svn
changelog:
  - Move to a later snapshot
  - Drop debugging compiler flags, enable optimizations again
  - Make it build on everything since EL5 again


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.48.2-8
  - fix icon/desktop-file scriptlets (#739375)
  - drop .desktop vendor (f18+)
  - inkscape doesn't build with poppler-0.20.0 (#822413)


author: Rob Crittenden <rcritten@redhat.com> - 0.1.0-2
changelog:
  - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
  - Remove references to admin server in ipa-server-setupssl
  - Generate a client certificate for the XML-RPC server to connect to LDAP with
  - Create a keytab for Apache
  - Create an ldif with a test user
  - Provide a certmap.conf for doing SSL client authentication


author: Karl MacMillan <kmacmill@redhat.com> - 0.4.0-2
changelog:
  * Fri Sep 7 2007 Karl MacMillan <kmacmill@redhat.com> - 0.3.0-1
  - Added support for libipa-dna-plugin


author: Rob Crittenden <rcritten@redhat.com> - 0.4.1-2
changelog:
  - Broke invididual Requires and BuildRequires onto separate lines and
    reordered them
  - Added python-tgexpandingformwidget as a dependency
  - Require at least fedora-ds-base 1.1


author: Rob Crittenden <rcritten@redhat.com> 0.99-3
changelog:
  - Included LICENSE and README in all packages for documentation
  - Move user-modifiable content to /etc/ipa and linked back to
    /usr/share/ipa/html
  - Changed some references to /usr to the {_usr} macro and /etc
    to {_sysconfdir}
  - Added popt-devel to BuildRequires for Fedora 8 and higher and
    popt for Fedora 7
  - Package the egg-info for Fedora 9 and higher for ipa-python


author: Rob Crittenden <rcritten@redhat.com> 0.99-7
changelog:
  - Ensure that /etc/ipa exists before moving user-modifiable html files there
  - Put html files into /etc/ipa/html instead of /etc/ipa


author: Rob Crittenden <rcritten@redhat.com> 0.99-9
changelog:
  - Pull upstream changelog 641
  - Require minimum version of krb5-server on F-7 and F-8
  - Package some new files


author: Rob Crittenden <rcritten@redhat.com> 0.99-10
changelog:
  - Pull upstream changelog 678
  - Add new subpackage, ipa-server-selinux
  - Add Requires: authconfig to ipa-python (bz #433747)
  - Package i18n files


author: Rob Crittenden <rcritten@redhat.com> 0.99-11
changelog:
  - Pull upstream changelog 698
  - Fix ownership of /var/log/ipa_error.log during install (435119)
  - Add pwpolicy command and man page


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-2
changelog:
  - Fix Requires for krb5-server that was missing for Fedora versions > 9
  - Remove quotes around test for fedora version to package egg-info


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-4
changelog:
  - Add missing entry for /var/cache/ipa/kpasswd (444624)
  - Added patch to fix permissions problems with the Apache NSS database.
  - Added patch to fix problem with DNS querying where the query could be
    returned as the answer.
  - Fix spec error where patch1 was in the wrong section


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-5
changelog:
  - Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum
    version to 1.0.7-4 so we pick up the NSS fixes.
  - Add selinux-policy-base(post) to Requires (446496)


author: Rob Crittenden <rcritten@redhat.com> - 1.1.0-1
changelog:
  - Update to upstream version 1.1.0
  - Patch for indexing memberof attribute
  - Patch for indexing uidnumber and gidnumber
  - Patch to change DNA default values for replicas
  - Patch to fix uninitialized variable in ipa-getkeytab


author: Simo Sorce <ssorce@redhat.com> - 1.1.0-3
changelog:
  - Fix for CVE-2008-3274
  - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface
  - Add fix for bug #453185
  - Rebuild against openldap libraries, mozldap ones do not work properly
  - TurboGears is currently broken in rawhide. Added patch to not build
    the UI locales and removed them from the ipa-server files section.


author: Rob Crittenden <rcritten@redhat.com> - 1.2.0-1
changelog:
  - Update to upstream version 1.2.0
  - Set fedora-ds-base minimum version to 1.1.3 for winsync header
  - Set the minimum version for SELinux policy
  - Remove references to Fedora 7


author: Simo Sorce <ssorce@redhat.com> - 1.2.0-3
changelog:
  - Respin after the tarball has been re-released upstream
    New hash is 506c9c92dcaf9f227cba5030e999f177


author: Jason Gerard DeRose <jderose@redhat.com> - 1.99-8
changelog:
  - Removed python-cherrypy from BuildRequires and Requires
  - Added Requires python-assets, python-wehjit


author: Rob Crittenden <rcritten@redhat.com> - 1.99-23
changelog:
  - Change Requires from fedora-ds-base to 389-ds-base
  - Set minimum level of 389-ds-base to 1.2.6 for the replication
    version plugin.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-27
changelog:
  - Set minimum version of certmonger to 0.26 (to pck up #621670)
  - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm)
  - Set minimum version of pki-ca to 1.3.6
  - Set minimum version of sssd to 1.2.1


author: Rob Crittenden <rcritten@redhat.com> - 1.99-28
changelog:
  - Drop conflicts on mod_nss
  - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847)
  - Drop a slew of conditionals on older Fedora releases (< 12)
  - Add a few conditionals against RHEL 6
  - Add Requires of nss-tools on ipa-client


author: Rob Crittenden <rcritten@redhat.com> - 1.99-29
changelog:
  - Drop requires on python-configobj (not used any more)
  - Drop ipa-ldap-updater message, upgrades are done differently now


author: Simo Sorce <ssorce@redhat.com> - 1.99-39
changelog:
  - Remove dependency on nss_ldap/nss-pam-ldapd
  - The official client is sssd and that's what we use by default.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-41
changelog:
  - Re-arrange doc and defattr to clean up rpmlint warnings
  - Remove conditionals on older releases
  - Move some man pages into admintools subpackage
  - Remove some explicit Requires in client that aren't needed
  - Consistent use of buildroot vs RPM_BUILD_ROOT


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.2.beta.git80e87e7
changelog:
  - Remove unnecessary moving of v1 CA serial number file in post script
  - Add Obsoletes for server-selinxu subpackage
  - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.beta2
changelog:
  - Set min version of 389-ds-base to 1.2.8
  - Set min version of mod_nss 1.0.8-10
  - Set min version of selinux-policy to 3.9.7-27
  - Add dogtag themes to Requires
  - Update to upstream freeipa-2.0.0.pre2


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.rc1
changelog:
  - Set minimum version of sssd to 1.5.1
  - Update to upstream freeipa-2.0.0.rc1
  - Move server-only binaries from admintools subpackage to server


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.4.rc2
changelog:
  - Update to upstream freeipa-2.0.0.rc2
  - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in
  - Set minimum version of sssd to 1.5.1
  - Patch to include SuiteSpotGroup when setting up 389-ds instances
  - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled


author: Rob Crittenden <rcritten@redhat.com> - 2.0.1-1
changelog:
  - Update minimum selinux-policy to 3.9.16-18
  - Update minimum pki-ca and pki-selinux to 9.0.7
  - Update minimum 389-ds-base to 1.2.8.0-1
  - Update to upstream 2.0.1


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-6
changelog:
  - Introduce upgrade script to recover existing configuration after systemd migration
    as user has no means to recover FreeIPA from systemd migration
  - Upgrade script:
    - recovers symlinks in Dogtag instance install
    - recovers systemd configuration for FreeIPA's directory server instances
    - recovers freeipa.service
    - migrates directory server and KDC configs to use proper keytabs for systemd services


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-2
changelog:
  - Allow longer dirsrv startup with systemd:
    - IPAdmin class will wait until dirsrv instance is available up to 10 seconds
    - Helps with restarts during upgrade for ipa-ldap-updater
  - Fix pylint warnings from F16 and Rawhide


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-3
changelog:
  - Allow Web-based migration to work with tightened SE Linux policy (#769440)
  - Rebuild slapi plugins against re-enterant version of libldap


author: Martin Kosek <mkosek@redhat.com> - 2.1.4-4
changelog:
  - Fix ipa-replica-install crashes
  - Fix ipa-server-install and ipa-dns-install logging
  - Set minimum version of pki-ca to 9.0.17 to fix sslget problem
    caused by FEDORA-2011-17400 update (#771357)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-5
changelog:
  - Force to use 389-ds 1.2.10-0.8.a7 or above
  - Improve upgrade script to handle systemd 389-ds change
  - Fix freeipa to work with python-ldap 2.4.6


author: Rob Crittenden <rcritten@redhat.com> - 2.1.90-0.2
changelog:
  - Update to upstream 2.2.0 beta 1 (2.1.90.rc1)
  - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18.
  - Add Conflicts on mod_ssl
  - Update minimum n-v-r of 389-ds-base to 1.2.10.4
  - Update minimum n-v-r of sssd to 1.8.0
  - Update minimum n-v-r of slapi-nis to 0.38
  - Update minimum n-v-r of pki-* to 9.0.18
  - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1
  - Update conflicts on bind to < 9.9.0-1
  - Drop requires on krb5-server-ldap
  - Add patch to remove escaping arguments to pkisilent


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-1
changelog:
  - Updated to upstream 2.2.0 GA
  - Update minimum n-v-r of certmonger to 0.53
  - Update minimum n-v-r of slapi-nis to 0.40
  - Add Requires in client to oddjob-mkhomedir and python-krbV
  - Update minimum selinux-policy to 3.10.0-110


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.8
changelog:
  - Updated to upstream 3.0.0 rc 1
  - Update BR for 389-ds-base to 1.2.11.14
  - Update BR for krb5 to 1.10
  - Update BR for samba4-devel to 4.0.0-139 (rc1)
  - Add BR for python-polib
  - Update BR and Requires on sssd to 1.9.0
  - Update Requires on policycoreutils to 2.1.12-5
  - Update Requires on 389-ds-base to 1.2.11.14
  - Update Requires on selinux-policy to 3.11.1-21
  - Update Requires on dogtag to 10.0.0-0.33.a1
  - Update Requires on certmonger to 0.60
  - Update Requires on tomcat to 7.0.29
  - Update minimum version of bind to 9.9.1-10.P3
  - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1
  - Remove Requires on authconfig from python sub-package


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.10
changelog:
  - Updated to upstream 3.0.0 rc 2
  - Include new FF configuration extension
  - Set minimum Requires of selinux-policy to 3.11.1-33
  - Set minimum Requires dogtag to 10.0.0-0.43.b1
  - Add new optional strict sub-package to allow users to limit other
    package upgrades.


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-1
changelog:
  - Updated to upstream 3.0.0 GA
  - Set minimum for samba to 4.0.0-153.
  - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so
    plugin to /dev/null since they cannot be used when trusts are configured
  - Restrict krb5-server to 1.10.
  - Update BR for 389-ds-base to 1.3.0
  - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca
  - Add Requires on zip for generating FF browser extension


author: Rob Crittenden <rcritten@redhat.com> - 3.1.0-1
changelog:
  - Updated to upstream 3.1.0 GA
  - Set minimum for sssd to 1.9.2
  - Set minimum for pki-ca to 10.0.0-1
  - Set minimum for 389-ds-base to 1.3.0
  - Set minimum for selinux-policy to 3.11.1-60
  - Remove unneeded dogtag package requires


author: Martin Kosek <mkosek@redhat.com> - 3.1.0-2
changelog:
  - Remove redundat Requires versions that are already in Fedora 17
  - Replace python-crypto Requires with m2crypto
  - Add missing Requires(post) for client and server-trust-ad subpackages
  - Restart httpd service when server-trust-ad subpackage is installed
  - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes


author: Rob Crittenden <rcritten@redhat.com> - 3.1.2-1
changelog:
  - Update to upstream 3.1.2
  - CVE-2012-4546: Incorrect CRLs publishing
  - CVE-2012-5484: MITM Attack during Join process
  - CVE-2013-0199: Cross-Realm Trust key leak
  - Updated strict dependencies to 389-ds-base = 1.3.0.2 and
    pki-ca = 10.0.1


author: Martin Kosek <mkosek@redhat.com> - 3.2.0-0.1.pre1
changelog:
  - Update to upstream 3.2.0 Prerelease 1
  - Use upstream reference spec file as a base for Fedora spec file


author: Rob Crittenden <rcritten@redhat.com> - 3.2.0-0.3.beta1
changelog:
  - Add a Requires for java-atk-wrapper until we can determine which package
    should be pulling it in, dogtag or tomcat.


author: Rob Crittenden <rcritten@redhat.com> - 3.2.0-1
changelog:
  - Update to upstream 3.2.0 GA
  - ipa-client-install fails if /etc/ipa does not exist (#961483)
  - Certificate status is not visible in Service and Host page (#956718)
  - ipa-client-install removes needed options from ldap.conf (#953991)
  - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957)
  - Add triggerin scriptlet to support OpenSSH 6.2 (#953617)
  - Require nss 3.14.3-12.0 to address certutil certificate import
    errors (#953485)
  - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6
    environments. (#953464)
  - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453)
  - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432)
  - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for
    socket based connections (#960222)
  - Require libsss_nss_idmap-python
  - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to
    member is now done automatically and having it in the config file raises
    an error.
  - Add backup and restore tools, directory.
  - require at least systemd 38 which provides the journal (we no longer
    need to require syslog.target)
  - Update Requires on policycoreutils to 2.1.14-37
  - Update Requires on selinux-policy to 3.12.1-42
  - Update Requires on 389-ds-base to 1.3.1.0
  - Remove a Requires for java-atk-wrapper


author: Martin Kosek <mkosek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream 3.2.2
  - Drop ipa-server-selinux subpackage
  - Drop redundant directory /var/cache/ipa/sessions
  - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost
  - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency
    issues when there are still old parts of software (like entitlements plugin)


author: Martin Kosek <mkosek@redhat.com> - 3.3.0-2
changelog:
  - Remove ipa-server-selinux obsoletes as upgrades from version prior to
    3.3.0 are not allowed
  - Wrap server-trust-ad subpackage description better
  - Add (noreplace) flag for %{_sysconfdir}/tmpfiles.d/ipa.conf
  - Change permissions on default_encoding_utf8.so to fix ipa-python Provides


author: Martin Kosek <mkosek@redhat.com> - 3.3.0-4
changelog:
  - ipa-server-install fails if --subject parameter is other than default
    realm (#983075)
  - do not allow configuring bind-dyndb-ldap without persistent search (#967876)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-2
changelog:
  - Unable to remove replica by ipa-replica-manage (#1001662)
  - Before uninstalling a server, warn about active replicas (#998069)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-3
changelog:
  - Replica installation fails for RHEL 6.4 master (#1004680)
  - Server uninstallation crashes if DS is not available (#998069)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-5
changelog:
  - Remove dependency on python-paramiko (#1002884)
  - Broken redirection when deleting last entry of DNS resource
    record (#1006360)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-1
changelog:
  - Update to upstream 3.3.2 (#991064)
  - Add delegation info to MS-PAC (#915799)
  - Warn about incompatibility with AD when IPA realm and domain
    differs (#1009044)
  - Allow PKCS#12 files with empty password in install tools (#1002639)
  - Privilege "SELinux User Map Administrators" did not list
    permissions (#997085)
  - SSH key upload broken when client joins an older server (#1009024)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-2
changelog:
  - Deprecate --serial-autoincrement option (#1016645)
  - CA installation always failed on replica (#1005446)
  - Re-initializing a winsync connection exited with error (#994980)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-4
changelog:
  - Server install failure during client enrollment shouldn't
    roll back (#1023086)
  - nsds5ReplicaStripAttrs are not set on agreements (#1023085)
  - ipa-server conflicts with mod_ssl (#1018172)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-5
changelog:
  - Temporarily move ipa-backup and ipa-restore functionality
    back to make them available in public Beta (#1003933)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-3
changelog:
  - Installer did not detect different server and IPA domain (#1026845)
  - Allow kernel keyring CCACHE when supported (#1026861)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-5
changelog:
  - Trust add tries to add same value of --base-id for sub domain,
    causing an error (#1033068)
  - Improved error reporting for adding trust case (#1029856)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-6
changelog:
  - Remove "Listen 443 http" hack from deployed nss.conf (#1029046)
  - Re-adding existing trust fails (#1033216)
  - IPA uninstall exits with a samba error (#1033075)
  - Added RELRO hardening on /usr/libexec/ipa-otpd (#1026260)
  - Fixed ownership of /usr/share/ipa/ui/js (#1026260)
  - ipa-tests: support external names for hosts (#1032668)
  - ipa-client-install fail due fail to obtain host TGT (#1029354)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-8
changelog:
  - Fix status trust-add command status message (#910453)
  - NetBIOS was not trimmed at 15 characters (#1030517)
  - Harden CA subsystem certificate renewal on CA clones (#1040018)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-12
changelog:
  - Missing objectclasses when empty password passed to host-add (#1052979)
  - sudoOrder missing in sudoers (#1052983)
  - Missing examples in sudorule help (#1049464)
  - Client automount does not uninstall when fstore is empty (#910899)
  - Error not clear for invalid realm given to trust-fetch-domains (#1052981)
  - trust-fetch-domains does not add idrange for subdomains found (#1049926)
  - Add option to show if an AD subdomain is enabled/disabled (#1052973)
  - ipa-adtrust-install still failed with long NetBIOS names (#1030517)
  - Error not clear for invalid relam given to trustdomain-find (#1049455)
  - renewed client cert not recognized during IPA CA renewal (#1033273)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-13
changelog:
  - Do not add krbPwdPolicyReference for new accounts, hardcode it (#1045218)
  - Increase default timeout for IPA services (#1033273)
  - Error while running trustdomain-find (#1054376)
  - group-show lists SID instead of name for external groups (#1054391)
  - Fix IPA server NetBIOS name in samba configuration (#1030517)
  - dnsrecord-mod produces missing API version warning (#1054869)
  - Hide trust-resolve command as internal (#1052860)
  - Add Trust domain Web UI (#1054870)
  - ipasam cannot delete multiple child trusted domains (#1056120)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-16
changelog:
  - Fallback to global policy in ipa lockout plugin (#912725)
  - Migration does not add users to default group (#903232)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-18
changelog:
  - Display server name in ipa command's verbose mode (#1061703)
  - Remove sourcehostcategory from default HBAC rule (#1061187)
  - dnszone-add cannot add classless PTR zones (#1058688)
  - Move ipa-otpd socket directory to /var/run/krb5kdc (#1063850)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-20
changelog:
  - trustdomain-find with pkey-only fails (#1068611)
  - Invalid credential cache in trust-add (#1069182)
  - ipa-replica-install prints unexpected error (#1069722)
  - Too big font in input fields in details facet in Firefox (#1069720)
  - trust-add for POSIX AD does not fetch trustdomains (#1070925)
  - Misleading trust-add error message in some cases (#1070926)
  - Access is not rejected for disabled domain (#1070924)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-22
changelog:
  - ipa-replica-install never checks for 7389 port (#1075165)
  - Non-terminated string may be passed to LDAP search (#1075091)
  - ipa-sam may fail to translate group SID into GID (#1073829)
  - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-26
changelog:
  - When IdM server trusts multiple AD forests, IPA client returns invalid group
    membership info (#1079498)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-28
changelog:
  - ipa-client-automount fails with incompatibility error when installed against
    older IPA server (#1083108)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-29
changelog:
  - Server installation fails using external signed certificates with
    "IndexError: list index out of range" (#1111320)
  - Add rhino to BuildRequires to fix Web UI build error


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-4
changelog:
  - Update Requires on pki-ca to 10.1.2-4 (#1129558)
  - build: increase java stack size for all arches
  - Add ipaSshPubkey and gidNumber to the ACI to read ID user overrides (#891984)
  - Fix dns zonemgr validation regression (#1056202)
  - Handle profile changes in dogtag-ipa-ca-renew-agent (#886645)
  - Do not wait for new CA certificate to appear in LDAP in ipa-certupdate
    (#886645)
  - Add bind-dyndb-ldap working dir to IPA specfile
  - Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage
    (#886645)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - Deadlock in schema compat plugin (#1161131)
  - ipactl stop should stop dirsrv last (#1161129)
  - Upgrade 3.3.5 to 4.1 failed (#1161128)
  - CVE-2014-7828 freeipa: password not required when OTP in use (#1160877)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-5
changelog:
  - Update slapi-nis dependency to pull 0.54-2 (#891984)
  - ipa-restore: Don't crash if AD trust is not installed (#951581)
  - Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type (#1138791)
  - Trust setting not restored for CA cert with ipa-restore command (#1159011)
  - ipa-server-install fails when restarting named (#1162340)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-6
changelog:
  - Fix: DNS installer adds invalid zonemgr email (#1056202)
  - ipaplatform: Use the dirsrv service, not target (#951581)
  - Fix: DNS policy upgrade raises asertion error (#1161128)
  - Fix upgrade referint plugin (#1161128)
  - Upgrade: fix trusts objectclass violationi (#1161128)
  - group-add doesn't accept gid parameter (#1149124)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-7
changelog:
  - ipa-csreplica-manage connect fails (#1157735)
  - error message which is not understandable when IDNA2003 characters are
    present in --zonemgr (#1163849)
  - Fix warning message should not contain CLI commands (#1114013)
  - Renewing the CA signing certificate does not extend its validity period end
    (#1163498)
  - RHEL7.1 ipa-server-install --uninstall Could not set SELinux booleans for
    httpd (#1159330)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-8
changelog:
  - Improve otptoken help messages (#919228)
  - Ensure users exist when assigning tokens to them (#919228)
  - Enable QR code display by default in otptoken-add (#919228)
  - Show warning instead of error if CA did not start (#1158410)
  - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges (#1165774)
  - Traceback when adding zone with long name (#1164859)
  - Backup & Restore mechanism (#951581)
  - ignoring user attributes in migrate-ds does not work if uppercase characters
    are returned by ldap (#1159816)
  - Allow ipa-getkeytab to optionally fetch existing keys (#1007367)
  - Failure when installing on dual stacked system with external ca (#1128380)
  - ipa-server should keep backup of CS.cfg (#1059135)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - webui: use domain name instead of domain SID in idrange adder dialog
    (#891984)
  - webui: normalize idview tab labels (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-9
changelog:
  - schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1
    build fails (#1167196)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - "ipa trust-add ... " cmd says : (Trust status: Established and verified)
    while in the logs we see "WERR_ACCESS_DENIED" during verification step.
    (#1144121)
  - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server
    (#1156466)
  - Add support/hooks for a one-time password system like SecureID in IPA
    (#919228)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - ID Views: Support migration from the sync solution to the trust solution
    (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-11
changelog:
  - Throw zonemgr error message before installation proceeds (#1163849)
  - Winsync: Setup is broken due to incorrect import of certificate (#1169867)
  - Enable last token deletion when password auth type is configured (#919228)
  - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641)
  - add --hosts and --hostgroup options to allow/retrieve keytab methods
    (#1007367)
  - Extend host-show to add the view attribute in set of default attributes
    (#1168916)
  - Prefer TCP connections to UDP in krb5 clients (#919228)
  - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214)
  - webui: increase notification duration (#1171089)
  - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931)
  - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert
    (#1170003)
  - Improve validation of --instance and --backend options in ipa-restore
    (#951581)
  - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964)
  - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-12
changelog:
  - RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible
    (#1169591)
  - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression)
    (#1172578)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-13
changelog:
  - Expand the token auth/sync windows (#919228)
  - Access is not rejected for disabled domain (#1172598)
  - krb5kdc crash in ldap_pvt_search (#1170695)
  - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-14
changelog:
  - IPA Replicate creation fails with error "Update failed! Status: [10 Total
    update abortedLDAP error: Referral]" (#1166265)
  - running ipa-server-install --setup-dns results in a crash (#1072502)
  - DNS zones are not migrated into forward zones if 4.0+ replica is added
    (#1175384)
  - gid is overridden by uid in default trust view (#1168904)
  - When migrating warn user if compat is enabled (#1177133)
  - Clean up debug log for trust-add (#1168376)
  - No error message thrown on restore(full kind) on replica from full backup
    taken on master (#1175287)
  - ipa-restore proceed even IPA not configured (#1175326)
  - Data replication not working as expected after data restore from full backup
    (#1175277)
  - IPA externally signed CA cert expiration warning missing from log (#1178128)
  - ipa-upgradeconfig fails in CA-less installs (#1181767)
  - IPA certs fail to autorenew simultaneouly (#1173207)
  - More validation required on ipa-restore's options (#1176034)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-16
changelog:
  - PassSync does not sync passwords due to missing ACIs (#1181093)
  - ipa-replica-manage list does not list synced domain (#1181010)
  - Do not assume certmonger is running in httpinstance (#1181767)
  - ipa-replica-manage disconnect fails without password (#1183279)
  - Put LDIF files to their original location in ipa-restore (#1175277)
  - DUA profile not available anonymously (#1184149)
  - IPA replica missing data after master upgraded (#1176995)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-17
changelog:
  - Wrong directories created on full restore (#1186398)
  - ipa-restore crashes if replica is unreachable (#1186396)
  - idoverrideuser-add option --sshpubkey does not work (#1185410)


author: Martin Kosek <mkosek@redhat.com> - 4.1.0-18
changelog:
  - Fix ipa-pwd-extop global configuration caching (#1187342)
  - group-detach does not add correct objectclasses (#1187540)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.1
changelog:
  - "an internal error has occurred" during ipa host-del --updatedns (#1198431)
  - Renamed patch 1013 to 0114, as it was merged upstream
  - Fax number not displayed for user-show when kinit'ed as normal user.
    (#1198430)
  - Replication agreement with replica not disabled when ipa-restore done without
    IPA installed (#1199060)
  - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.1.0-18.2
changelog:
  - IPA extdom plugin fails when encountering large groups (#1193759)
  - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
    (#1202998)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.3
changelog:
  - [ipa-python] ipalib.errors.LDAPError: failed to decode certificate:
    (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.1.alpha1
changelog:
  - Resolves: #805188  [RFE] "ipa migrate-ds" ldapsearches with scope=1
  - Resolves: #1019272 With 20000+ users, adding a user to a group intermittently
    throws Internal server error
  - Resolves: #1035494 Unable to add Kerberos principal via kadmin.local
  - Resolves: #1045153 ipa-managed-entries --list -p <badpassword> still requires
    DM password
  - Resolves: #1125950 ipa-server-install --uinstall doesn't remove port 7389
    from ldap_port_t
  - Resolves: #1132540 [RFE] Expose service delegation rules in UI and CLI
  - Resolves: #1145584 ipaserver/install/cainstance.py creates pkiuser not
    matching uidgid
  - Resolves: #1176036 IDM client registration failure in a high load environment
  - Resolves: #1183116 Remove Requires: subscription-manager
  - Resolves: #1186054 permission-add does not prompt to enter --right option in
    interactive mode
  - Resolves: #1187524 Replication agreement with replica not disabled when
    ipa-restore done without IPA installed
  - Resolves: #1188195 Fax number not displayed for user-show when kinit'ed as
    normal user.
  - Resolves: #1189034 "an internal error has occurred" during ipa host-del
    --updatedns
  - Resolves: #1193554 ipa-client-automount: failing with error LDAP server
    returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled.
  - Resolves: #1193759 IPA extdom plugin fails when encountering large groups
  - Resolves: #1194312 [ipa-python] ipalib.errors.LDAPError: failed to decode
    certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments.
  - Resolves: #1194633 Default trust view can be deleted in lower case
  - Resolves: #1196455 ipa-server-install step [8/27]: starting certificate
    server instance - confusing CA staus message on TLS error
  - Resolves: #1198263 Limit deadlocks between DS plugin DNA and slapi-nis
  - Resolves: #1199527 [RFE] Use datepicker component for datetime fields
  - Resolves: #1200867 [RFE] Make OTP validation window configurable
  - Resolves: #1200883 [RFE] Switch apache to use mod_auth_gssapi
  - Resolves: #1202998 CVE-2015-1827 ipa: memory corruption when using
    get_user_grouplist() [rhel-7.2]
  - Resolves: #1204637 slow group operations
  - Resolves: #1204642 migrate-ds: slow add o users to default group
  - Resolves: #1208461 IPA CA master server update stuck on checking getStatus
    via https
  - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P)
  - Resolves: #1211708 ipa-client-install gets stuck during NTP sync
  - Resolves: #1215197 ipa-client-install ignores --ntp-server option during time
    sync
  - Resolves: #1215200 ipa-client-install configures IPA server as NTP source
    even if IPA server has not ntpd configured
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0.alpha1


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.2.alpha1
changelog:
  - Resolves: #1228671 pkispawn fails in ipa-ca-install and ipa-kra-install
  - Related:  #1204809 Rebase ipa to 4.2
    - Fix minimum version of slapi-nis
    - Require python-sss and python-sss-murmur (provided by sssd-1.13.0)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-1
changelog:
  - Resolves: #846033  [RFE] Documentation for JSONRPC IPA API
  - Resolves: #989091  Ability to manage IdM/IPA directly from a standard LDAP
    client
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
  - Resolves: #1115294 [RFE] Add support for DNSSEC
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
  - Resolves: #1199520 [RFE] Introduce single upgrade tool - ipa-server-upgrade
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
  - Resolves: #1200728 [RFE] Replicate PKI Profile information
  - Resolves: #1200735 [RFE] Allow issuing certificates for user accounts
  - Resolves: #1204054 SSSD database is not cleared between installs and
    uninstalls of ipa
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
  - Resolves: #1204504 [RFE] Add access control so hosts can create their own
    services
  - Resolves: #1206534 [RFE] Offer Kerberos over HTTP (kdcproxy) by default
  - Resolves: #1206613 [RFE] Configure IPA to be a trust agent by default
  - Resolves: #1209476 package ipa-client does not require package dbus-python
  - Resolves: #1211589 [RFE] Add option to skip the verify_client_version
  - Resolves: #1211608 [RFE] Generic support for unknown DNS RR types (RFC 3597)
  - Resolves: #1215735 ipa-replica-prepare automatically adds a DNS zone
  - Resolves: #1217010 OTP Manager field is not exposed in the UI
  - Resolves: #1222475 krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp
    00007fffd68b2340 error 6 in libc-2.17.so
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0
    - Move /etc/ipa/kdcproxy to the server subpackage


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-2
changelog:
  - Resolves: #1131907 [ipa-client-install] cannot write certificate file
    '/etc/ipa/ca.crt.new': must be string or buffer, not None
  - Resolves: #1195775 unsaved changes dialog internally inconsistent
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - Stageusedr-activate: show username instead of DN
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prevent to rename certprofile profile id
  - Resolves: #1222047 IPA to AD Trust: IPA ERROR 4016: Remote Retrieve Error
  - Resolves: #1224769 copy-schema-to-ca.py does not overwrites schema files
    - copy-schema-to-ca: allow to overwrite schema files
  - Resolves: #1241941 kdc component installation of IPA failed
    - spec file: Update minimum required version of krb5
  - Resolves: #1242036 Replica install fails to update DNS records
    - Fix DNS records installation for replicas
  - Resolves: #1242884 Upgrade to 4.2.0 fails when enabling kdc proxy
    - Start dirsrv for kdcproxy upgrade


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-3
changelog:
  - Resolves: #1170770 [AD TRUST]IPA should detect inconsistent realm domains
    that conflicts with AD DC
    - trusts: Check for AD root domain among our trusted domains
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - sysrestore: copy files instead of moving them to avoind SELinux issues
  - Resolves: #1196656 [ipa-client][rhel71] enable debugging for spawned
    commands / ntpd -qgc $tmpfile hangs
    - enable debugging of ntpd during client installation
  - Resolves: #1205264 Migration UI Does Not Work When Anonymous Bind is Disabled
    - migration: Use api.env variables.
  - Resolves: #1212719 abort-clean-ruv subcommand should allow
    replica-certifyall: no
    - Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand
  - Resolves: #1216935 ipa trust-add shows ipa: ERROR: an internal error has
    occurred
    - dcerpc: Expand explanation for WERR_ACCESS_DENIED
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1222778 idoverride group-del can delete user and user-del can
    delete group
    - dcerpc: Add get_trusted_domain_object_type method
    - idviews: Restrict anchor to name and name to anchor conversions
    - idviews: Enforce objectclass check in idoverride*-del
  - Resolves: #1234919 Be able to request certificates without certmonger service
    running
    - cermonger: Use private unix socket when DBus SystemBus is not available.
    - ipa-client-install: Do not (re)start certmonger and DBus daemons.
  - Resolves: #1240939 Please add dependency on bind-pkcs11
    - Create server-dns sub-package.
    - ipaplatform: Add constants submodule
    - DNS: check if DNS package is installed
  - Resolves: #1242914 Bump minimal selinux-policy and add booleans to allow
    calling out oddjobd-activated services
    - selinux: enable httpd_run_ipa to allow communicating with oddjobd services
  - Resolves: #1243261 non-admin users cannot search hbac rules
    - fix hbac rule search for non-admin users
    - fix selinuxusermap search for non-admin users
  - Resolves: #1243652 Client has missing dependency on memcache
    - do not import memcache on client
  - Resolves: #1243835 [webui] user change password dialog does not work
    - webui: fix user reset password dialog
  - Resolves: #1244802 spec: selinux denial during kdcproxy user creation
    - Fix selinux denial during kdcproxy user creation
  - Resolves: #1246132 trust-fetch-domains: Do not chown keytab to the sssd user
    - oddjob: avoid chown keytab to sssd if sssd user does not exist
  - Resolves: #1246136 Adding a privilege to a permission avoids validation
    - Validate adding privilege to a permission
  - Resolves: #1246141 DNS Administrators cannot search in zones
    - DNS: Consolidate DNS RR types in API and schema
  - Resolves: #1246143 User plugin - user-find doesn't work properly with manager
    option
    - fix broken search for users by their manager


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-4
changelog:
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
    - store certificates issued for user entries as
    - user-show: add --out option to save certificates to file
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
    - Fix upgrade of sidgen and extdom plugins
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - Use 'mv -Z' in specfile to restore SELinux context
  - Resolves: #1198796 Text in UI should describe differing LDAP vs Krb behavior
    for combinations of "User authentication types"
    - webui: add LDAP vs Kerberos behavior description to user auth
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - ULC: Fix stageused-add --from-delete command
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - certprofile-import: do not require profileId in profile data
    - Give more info on virtual command access denial
    - Allow SAN extension for cert-request self-service
    - Add profile for DNP3 / IEC 62351-8 certificates
    - Work around python-nss bug on unrecognised OIDs
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
    - Validate vault's file parameters
    - Fixed missing KRA agent cert on replica.
  - Resolves: #1225866 display browser config options that apply to the browser.
    - webui: add Kerberos configuration instructions for Chrome
    - Remove ico files from Makefile
  - Resolves: #1246342 Unapply idview raises internal error
    - idviews: Check for the Default Trust View only if applying the view
  - Resolves: #1248102 [webui] regression - incorrect/no failed auth messages
    - webui: fix regressions failed auth messages
  - Resolves: #1248396 Internal error in DomainValidator.__search_in_dc
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1249455 ipa trust-add failed CIFS server configuration does not
    allow access to \\pipe\lsarpc
    - Fix selector of protocol for LSA RPC binding string
    - dcerpc: Simplify generation of LSA-RPC binding strings
  - Resolves: #1250192 Error in ipa trust-fecth-domains
    - Fix incorrect type comparison in trust-fetch-domains
  - Resolves: #1251553 Winsync setup fails with unexpected error
    - replication: Fix incorrect exception invocation
  - Resolves: #1251854 ipa aci plugin is not parsing aci's correctly.
    - ACI plugin: correctly parse bind rules enclosed in
  - Resolves: #1252414 Trust agent install does not detect available replicas to
    add to master
    - adtrust-install: Correctly determine 4.2 FreeIPA servers


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-5
changelog:
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - user-undel: Fix error messages.
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prohibit deletion of predefined profiles
  - Resolves: #1232819 testing ipa-restore on fresh system install fails
    - Backup/resore authentication control configuration
  - Resolves: #1243331 pkispawn fails when migrating to 4.2 server from 3.0
    server
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1245225 Asymmetric vault drops traceback when the key is not
    proper
    - Asymmetric vault: validate public key in client
  - Resolves: #1248399 Missing DNSSEC related files in backup
    - fix typo in BasePathNamespace member pointing to ods exporter config
    - ipa-backup: archive DNSSEC zone file and kasp.db
  - Resolves: #1248405 PassSync should be disabled after ipa-winsync-migrate is
    finished
    - winsync-migrate: Add warning about passsync
    - winsync-migrate: Expand the man page
  - Resolves: #1248524 User can't find any hosts using "ipa host-find $HOSTNAME"
    - adjust search so that it works for non-admin users
  - Resolves: #1250093 ipa certprofile-import accepts invalid config
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1250107 IPA framework should not allow modifying trust on AD trust
    agents
    - trusts: Detect missing Samba instance
  - Resolves: #1250111 User lifecycle - preserved users can be assigned
    membership
    - ULC: Prevent preserved users from being assigned membership
  - Resolves: #1250145 Add permission for user to bypass caacl enforcement
    - Add permission for bypassing CA ACL enforcement
  - Resolves: #1250190 idrange is not added for sub domain
    - idranges: raise an error when local IPA ID range is being modified
    - trusts: harden trust-fetch-domains oddjobd-based script
  - Resolves: #1250928 Man page for ipa-server-install is out of sync
    - install: Fix server and replica install options
  - Resolves: #1251225 IPA default CAACL does not allow cert-request for services
    after upgrade
    - Fix default CA ACL added during upgrade
  - Resolves: #1251561 ipa vault-add Unknown option: ipavaultpublickey
    - validate mutually exclusive options in vault-add
  - Resolves: #1251579 ipa vault-add --user should set container owner equal to
    user on first run
    - Fixed vault container ownership.
  - Resolves: #1252517 cert-request rejects request with correct
    krb5PrincipalName SAN
    - Fix KRB5PrincipalName / UPN SAN comparison
  - Resolves: #1252555 ipa vault-find doesn't work for services
    - vault: Add container information to vault command results
    - Add flag to list all service and user vaults
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - Added CLI param and ACL for vault service operations.
  - Resolves: #1252557 certprofile: improve profile format documentation
    - certprofile-import: improve profile format documentation
    - certprofile: add profile format explanation
  - Resolves: #1253443 ipa vault-add creates vault with invalid type
    - vault: validate vault type
  - Resolves: #1253480 ipa vault-add-owner does not fail when adding an existing
    owner
    - baseldap: Allow overriding member param label in LDAPModMember
    - vault: Fix param labels in output of vault owner commands
  - Resolves: #1253511 ipa vault-find does not use criteria
    - vault: Fix vault-find with criteria
  - Resolves: #1254038 ipa-replica-install pk12util error returns exit status 10
    - install: Fix replica install with custom certificates
  - Resolves: #1254262 ipa-dnskeysync-replica crash cannot contact kdc
    - improve the handling of krb5-related errors in dnssec daemons
  - Resolves: #1254412 when dirsrv is off ,upgrade from 7.1 to 7.2 fails with
    starting CA and named-pkcs11.service
    - Server Upgrade: Start DS before CA is started.
  - Resolves: #1254637 Add ACI and permission for managing user userCertificate
    attribute
    - add permission: System: Manage User Certificates
  - Resolves: #1254641 Remove CSR allowed-extensions restriction
    - cert-request: remove allowed extensions check
  - Resolves: #1254693 vault --service does not normalize service principal
    - vault: normalize service principal in service vault operations
  - Resolves: #1254785 ipa-client-install does not properly handle dual stacked
    hosts
    - client: Add support for multiple IP addresses during installation.
    - Add dependency to SSSD 1.13.1
    - client: Add description of --ip-address and --all-ip-addresses to man page


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-6
changelog:
  - Resolves: #1249226 IPA dnssec-validation not working for AD dnsforwardzone
    - DNSSEC: fix forward zone forwarders checks
  - Resolves: #1250190 idrange is not added for sub domain
    - trusts: format Kerberos principal properly when fetching trust topology
  - Resolves: #1252334 User life cycle: missing ability to provision a stage user
    from a preserved user
    - Add user-stage command
  - Resolves: #1252863 After applying RHBA-2015-1554 errata, IPA service fails to
    start.
    - spec file: Add Requires(post) on selinux-policy
  - Resolves: #1254304 Changing vault encryption attributes
    - Change internal rsa_(public|private)_key variable names
    - Added support for changing vault encryption.
  - Resolves: #1256715 Executing user-del --preserve twice removes the user
    pernamently
    - improve the usability of `ipa user-del --preserve` command


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-7
changelog:
  - Resolves: #1256840 [webui] majority of required fields is no longer marked as
    required
    - fix missing information in object metadata
  - Resolves: #1256842 [webui] no option to choose trust type when creating a
    trust
    - webui: add option to establish bidirectional trust
  - Resolves: #1256853 Clear text passwords in KRA install log
    - Removed clear text passwords from KRA install log.
  - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be
    discouraged
    - vault: change default vault type to symmetric
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: prevent rename (modrdn)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-8
changelog:
  - Resolves: #1254689 Storing big file as a secret in vault raises traceback
    - vault: Limit size of data stored in vault
  - Resolves: #1255880 ipactl status should distinguish between different
    pki-tomcat services
    - ipactl: Do not start/stop/restart single service multiple times


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-9
changelog:
  - Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not
    tracked
    - cert renewal: Include KRA users in Dogtag LDAP update
    - cert renewal: Automatically update KRA agent PEM file
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: remove 'rename' option
  - Resolves: #1257968 kinit stop working after ipa-restore
    - Backup: back up the hosts file
  - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings
    - DNSSEC: remove "DNSSEC is experimental" warnings
  - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts
    - Installer: do not modify /etc/hosts before user agreement
  - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1
    zone
    - DNSSEC: backup and restore opendnssec zone list file
    - DNSSEC: remove ccache and keytab of ipa-ods-exporter
    - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart
    - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction
    - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC
      key master
    - DNSSEC: Fix key metadata export
    - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5.
  - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install
    - Using LDAPI to setup CA and KRA agents.
  - Resolves: #1259848 server closes connection and refuses commands after
    deleting user that is still logged in
    - ldap: Make ldap2 connection management thread-safe again
  - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute
    'ra_certprofile' while ipa-ca-install
    - load RA backend plugins during standalone CA install on CA-less IPA master


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-10
changelog:
  - Resolves: #1260663 crash of ipa-dnskeysync-replica component during
    ipa-restore
    - IPA Restore: allows to specify files that should be removed
  - Resolves: #1261806 Installing ipa-server package breaks httpd
    - Handle timeout error in ipa-httpd-kdcproxy
  - Resolves: #1262322 Failed to backup CS.cfg message in upgrade.
    - Server Upgrade: backup CS.cfg when dogtag is turned off


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-11
changelog:
  - Resolves: #1258965 ipa vault: set owner of vault container
    - baseldap: make subtree deletion optional in LDAPDelete
    - vault: add vault container commands
    - vault: set owner to current user on container creation
    - vault: update access control
    - vault: add permissions and administrator privilege
    - install: support KRA update
  - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses
    - config: allow user/host attributes with tagging options
  - Resolves: #1262315 Unable to establish winsync replication
    - winsync: Add inetUser objectclass to the passsync sysaccount


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-12
changelog:
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
    - winsync-migrate: Convert entity names to posix friendly strings
    - winsync-migrate: Properly handle collisions in the names of external groups
  - Resolves: #1261074 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Resolves: #1263337 IPA Restore failed with installed KRA
    - ipa-backup: Add mechanism to store empty directory structure
  - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate
    and private key in world readable file [rhel-7.2]
    - install: fix KRA agent PEM file permissions
  - Resolves: #1265086 Mark IdM API Browser as experimental
    - WebUI: add API browser is experimental warning
  - Resolves: #1265277 Fix kdcproxy user creation
    - install: create kdcproxy user during server install
    - platform: add option to create home directory when adding user
    - install: fix kdcproxy user home directory
  - Resolves: #1265559 GSS failure after ipa-restore
    - destroy httpd ccache after stopping the service


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-13
changelog:
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
    - Fix an integer underflow bug in libotp
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - install: always export KRA agent PEM file
    - vault: select a server with KRA for vault operations
  - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files
    - do not overwrite files with local users/groups when restoring authconfig
  - Renamed patch 1011 to 0138, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-14
changelog:
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - upgrade: make sure ldap2 is connected in export_kra_agent_pem
  - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by
    external CA
    - schema: do not derive ipaVaultPublicKey from ipaPublicKey


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15
changelog:
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - vault: fix private service vault creation


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to iproute2-2.2.4-now-ss001007.tar.gz 
  - bzip2 source tar file
  - "License" replaces "Copyright"
  - added "BuildPrereq: tetex-latex tetex-dvips psutils"
  - rebuilt for 7.2


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-3
changelog:
  - Fixed missing diffserv and atm support in config (#57278).
  - Fixed inconsistent numeric base problem for command line (#65473).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest version. Used by other distros, so seems stable. ;-)
  - Quite a few patches needed updating in that turn.
  - Added ss (#107363) and several other new nifty tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961). 
  - Added patch to initialize "default" rule as well (#60693).


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-2
changelog:
  - rebuild with fix tetex and linuxdoc-tools -> manual pdf
  - clean unnecessary patches
  - add into spec *.so objects, new BR linux-atm-libs-devel


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-3
changelog:
  - rebuild without tetex files. It isn't working in rawhide yet. Added
    new source for ps files. 
  - #431179 backward compatibility for previous iproute versions


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.27-1
changelog:
  - aead support was included into upstream version
  - patch for moving libs is now deprecated
  - update to 2.6.27


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.27-2
changelog:
  - 475130 - Negative preferred lifetimes of IPv6 prefixes/addresses
    displayed incorrectly
  - 472878 - “ip maddr show” in IB interface causes a stack corruption
  - both patches will be probably in iproute v2.6.28


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.28-2
changelog:
  - 483484 install distribution files into /usr/share and also fixed
   install paths in spec
  - add the latest change from git which add DRR support
   c86f34942a0ce9f8203c0c38f9fe9604f96be706


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-1
changelog:
  - update to 2.6.29
  - remove DDR patch which became part of sourc
  - add patch with correct headers 1957a322c9932e1a1d2ca1fd37ce4b335ceb7113


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-2
changelog:
  - c3651bf4763d7247e3edd4e20526a85de459041b ip6tunnel: Fix no default 
   display of ip4ip6 tunnels
  - e48f73d6a5e90d2f883e15ccedf4f53d26bb6e74 missing arpd directory


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-3
changelog:
  - new iptables (xtables) bring problems to tc, when ipt is used. 
    rhbz#497344 still broken. tc_modules.patch brings correct paths to
    xtables, but that doesn't fix whole issue.
  - 497355 ip should allow creation of an IPsec SA with 'proto any' 
    and specified sport and dport as selectors


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-2
changelog:
  - add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
  - kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
    are needed for macvlan features and probably for other added later.
  - fix number of release which contains 2.6.32 kernel headers and features
    but it was released as 2.6.31


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.33-2
changelog:
  - 578729 6rd tunnel correctly 3979ef91de9ed17d21672aaaefd6c228485135a2
  - change BR texlive to tex according to guidelines


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-2
changelog:
  - General cleanup
  - Use global instead of define
  - Buildroot removal
  - Correcting URL and Source links
  - Install genl, ifstat, routef, routel and rtpr (rhbz#697319)


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-3
changelog:
  - Install ctstat, rtstat and routef manpage symlinks
  - Install m_xt & m_ipt tc modules
  - Creating devel and virtual static subpackages with libnetlink


author: Petr Šabata <contyk@redhat.com> - 3.1.0-1
changelog:
  - 3.1.0 bump
  - Point URL and Source to the new location on kernel.org
  - Remove now obsolete defattr
  - Dropping various patches now included upstream
  - Dropping iproute2-2.6.25-segfault.patch; I fail to understand the reason for
    this hack


author: Petr Šabata <contyk@redhat.com> - 3.6.0-3
changelog:
  - Include section 7 manpages (#876857)
  - Fix ancient bogus dates in the changelog (correction based upon commits)
  - Explicitly require some TeX fonts no longer present in the base distribution


author: Petr Šabata <contyk@redhat.com> - 3.10.0-1
changelog:
  - 3.10.0 bump
  - Drop the SHAREDIR patch and revert to upstream ways (#966445)
  - Fix an XFRM regression with FORTIFY_SOURCE


author: Petr Šabata <contyk@redhat.com> - 3.10.0-6
changelog:
  - Fix lnstat -i (#1024426)
  - Support IPv6 peer addresses (#1017228)
  - Add the replace command to bridge fdb (#1024697)
  - Document link type vlan (#979326)


author: Pavel Šimerda <psimerda@redhat.com> - 3.10.0-19
changelog:
  - Resolves: #1081081 - lnstat man page references iproute-doc when it should
    reference iproute-<ver>


author: Phil Sutter - 3.10.0-47
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Related: #1219280 - backport: iproute2: vti6 support


author: Phil Sutter - 3.10.0-48
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Resolves: #1247315 - Fix limitation in iproute/ss regarding dual-stack sockets


author: Phil Sutter - 3.10.0-49
changelog:
  - Resolves: bz#1241486 - backport: tc: fq scheduler
  - Related: #1215006 - backport current version of the ss command


author: Phil Sutter - 3.10.0-50
changelog:
  - Resolves: #1244851 - vti tunnel does not work
  - Resolves: #1155116 - iproute2: implement "-d" option for "ip mon"


author: Phil Sutter - 3.10.0-51
changelog:
  - Resolves: bz#1251451 - can't change the remote/local address of tunnel
    interface to "any" in ipip mode
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features
  - Related: #1215006 - [RFE] backport current version of the ss command
  - Resolves: #1251070 - Fix multiple programming errors in iproute package
  - Related: #1198456 - backport: dynamic precision, human readable, and IEC
    output to ip stats
  - Related: #1210402 - [6wind 7.2 Feat]: backport: vxlan: unable to configure
    UDP checksums
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features


author: Phil Sutter - 3.10.0-52
changelog:
  - Resolves: #1254095 - bridge: Add master device name to bridge fdb show
  - Resolves: #1255316 - tc does not allow to attach pfifo_fast qdisc
  - Related: #1251070 - Fix multiple programming errors in iproute package


author: Phil Sutter - 3.10.0-53
changelog:
  - Related: #1212026 - [6wind 7.2 Feat]: backport: ipxfrm: unable to configure
    SPD hash table - reverted this backport due to unmet dependencies


author: Jeremy Katz <katzj@redhat.com> - 2.0.13.2-1
changelog:
  - update to 2.0.13.2 (#139083)
    - fix firmware upload for firmware in /lib instead of /usr/lib
    - fix sysfs race


author: Will Woods <wwoods@redhat.com> - 2.2.13-2
changelog:
  - Fix iprdump startup - #483340
  - iprutils-swab-moved.patch - fix compilation with 2.6.29 kernels (#483643)


author: Jakub Čajka <jcajka@redhat.com> - 2.4.2-1
changelog:
  - Resolves: #1088562 - [7.1 FEAT] iprutils package update - ppc64
  - Resolves: #1044679 - iprutils should use systemd
  - Resolves: #1092519 - iprutils - PIE and RELRO check


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 0.3.0-3
changelog:
  - Fix typo
  - Add comments on why the test suite is not in check
  - The subpackages require the base package
  - Add link to FPC ticket for bundling exception request


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-6
changelog:
  - Removed gpg key check during build RHBZ#1248529
  - Fixed the license tag to include external code RHBZ#1248538
  - Use full path url RHBZ#1251149


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-7
changelog:
  - Added dependency on python-requests for client RHBZ#1254644
  - Fixed possible XSS flaws CVE-2015-5215, CVE-2015-5216
  - Fixed permission check CVE-2015-5217


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-8
changelog:
  - Moved ipsilon-client-install man page to client subpackage RHBZ#1255103
  - Backported patch to count IPA as login plugin RHBZ#1256517
  - Backported patch to log error if nameid is invalid RHBZ#1256520
  - Backported patch to add city attribute RHBZ#1257213


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-9
changelog:
  - Backport database keys patch RHBZ#1252392
  - Backport SAML path check patch RHBZ#1253821
  - Backport database cleanup RHBZ#1256518


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.8-1
changelog:
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.9-1
changelog:
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type


author: Thomas Woerner <twoerner@redhat.com> 1.4.10-1
changelog:
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.11-1
changelog:
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
changelog:
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
changelog:
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1
changelog:
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
changelog:
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
changelog:
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
changelog:
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface


author: Thomas Woerner <twoerner@redhat.com> 1.4.14-1
changelog:
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-1
changelog:
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-2
changelog:
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
changelog:
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-9
changelog:
  - fixed missing system hang at shutdown if root device is network based
    (RHBZ#1007934)
  - Fixed iptables-save man page completely wrong (RHBZ#1054871)
  - Fixed missing reload action for iptables service (RHBZ#1066007)
  - Fixed regressions from RHEL-6 iptables services (RHBZ#1067670)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add remaining binaries.
  - casts to remove compilation warnings.
  - terminate if -w deadline is reached exactly (#8724).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include README.ifenslave doco.
  - "ping -i N" was broke for N >= 3 (#9929).
  - update to ss000121:
  -- clockdiff: preserve raw socket errno.
  -- ping: change error exit code to 1 (used to be 92,93, ...)
  -- ping,ping6: if -w specified, transmit until -c limit is reached.
  -- ping,ping6: exit code non-zero if some packets not received within deadline.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a bunch of compiler warnings (#37131)
  - Fixed wrong exit code for no packets and deadline (#40323)
  - Moved arping to /sbin from /usr/sbin due to ifup call (#45785). Symlink from
    /usr/sbin/ provided for backwards compatibility.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added a patch to activate the rdisc server (#64270).
  - Display the countermeasures warning only in verbose (#55236)


author: Phil Knirsch <pknirsch@redhat.com> 20020124-7
changelog:
  - Added new BuildPreReqs for docbook-utils and perl-SGMLSpm (#66661)
  - Fixed ipv6 error printing problem (#66659).


author: Phil Knirsch <pknirsch@redhat.com> 20020927-3
changelog:
  - Removed bonding tarball and replaced it with ifenslave.c and README
  - FHS compliance for all tools, now to be found in /bin with compat symlinks to
    old places.


author: Phil Knirsch <pknirsch@redhat.com> 20020927-4
changelog:
  - Fixed DNS lookup problems (#68212).
  - Added warning if binding problem failed on subinterface (#81640).


author: Martin Bacovsky <mbacovsk@redhat.com> - 20020927-40
changelog:
  - tracepath doesn't continue past destination host (#174032) 
    previous patch replaced by new one provided by <mildew@gmail.com>
    option -c added


author: Martin Bacovsky <mbacovsk@redhat.com>- 20020927-42
changelog:
  - Resolves: #218706 - now defines the destination address along RFC3484
  - Resolves: #229630 - ifenslave(8) man page added
  - Resolves: #213716 - arping doesn't work on InfiniBand ipoib interfaces


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-1
changelog:
  - upgarde to new upstream iputils-s20070202
  - Resolves: #229995
  - Resolves: #225909 - Merge Review: iputils
  - patches revision


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-2
changelog:
  - Resolves: #234060: [PATCH] IDN (umlaut domains) support for ping and ping6
    patch provided by Robert Scheck <redhat@linuxnetz.de>


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-4
changelog:
  - resolves: #236725: ping does not work for subsecond intervals for ordinary user
  - resolves: #243197: RFE: Please sync ifenslave with current kernel
  - resolves: #246954: Initscript Review
  - resolves: #251124: can't build rdisc - OPEN_MAX undeclared


author: Martin Nagy <mnagy@redhat.com> - 20070202-6
changelog:
  - fix absolute symlinks and character encoding for RELNOTES (#225909)
  - preserve file timestamps (#225909)
  - use %{?_smp_mflags} (#225909)
  - fix service rdisc stop removing of lock file


author: Martin Nagy <mnagy@redhat.com> - 20071127-3
changelog:
  - major patch cleanup so it will be easier to get patches upstream
  - fix for #68212, previous fix actually didn't work for ping6
  - renewed the ia64 align patches
  - update README.bonding
  - clear up the code from warnings
  - spec file cleanup


author: Jiri Skala <jskala@redhat.com> - 20101006-3
changelog:
  - applied patch dropping capabilities of Ludwig Nussel
  - fixes building ping, pinpg6 with -pie option
  - moves most CFLAGS options from spec to Makefile


author: Jan Synáček <jsynacek@redhat.com> 20101006-15
changelog:
  - Ping fixes:
    + enable marking packets when the correct capabilities are set (#802197)
    + integer overflow (#834661)
    + Fallback to numeric addresses while exiting (#834661)


author: Jan Synáček <jsynacek@redhat.com> - 20121112-1
changelog:
  - Update to iputils-s20121112 (#875767)
    + drop unnecessary patches
    + update patches
    + wrap SO_BINDTODEVICE with the correct capability
    + fix incorrect free (hits when -lidn is used)


author: Jan Synáček <jsynacek@redhat.com> - 20121121-1
changelog:
  - Update to iputils-s20121121, drop unnecessary patches
  - Add capabilities to clockdiff and arping
  - Renumber patches
  - Fix arping's default device search logic


author: Jan Synáček <jsynacek@redhat.com> - 20121125-2
changelog:
  - Comment patches and cleanup
  - Update ifaddrs patch
  - Call usage() before limiting capabilities
  - Correct ifaddrs patch
  - Drop corr_type patch (gcc 4.4 build hack)
  - Fix missing end tags in sgml documentation


author: Jan Synáček <jsynacek@redhat.com> - 20121207-1
changelog:
  - Update to iputils-s20121207 (#884983) - fixes a ping segfault introduced
    by the previous update
  - Update ninfod-minor patch
  - Renumber patches
  - Fix -F switch (flowlabel patch)


author: Jan Synáček <jsynacek@redhat.com> - 20121221-7
changelog:
  - ping returns odd results with options inet6 in resolv.conf (#1210331)
  - count of "back" is not correct in tracepath (#1208372)


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.9.9-1
changelog:
  - new upstream version 0.9.9
  -- plus patches from git up to 20090818 which fix build errors and
     other release-critical bugs.
  -- 0.9.9: added Attansic L1E and sis190/191 ethernet drivers.  Fixes
     and updates to e1000 and 3c90x drivers.
  -- 0.9.8: new commands: time, sleep, md5sum, sha1sum. 802.11 wireless
     support with Realtek 8180/8185 and non-802.11n Atheros drivers.
     New Marvell Yukon-II gigabet Ethernet driver.  HTTP redirection
     support.  SYSLINUX floppy image type (.sdsk) with usable file
     system.  Rewrites, fixes, and updates to 3c90x, forcedeth, pcnet32,
     e1000, and hermon drivers.


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.0.1-1
changelog:
  - New drivers: Intel e1000, e1000e, igb, EFI snpnet, JMicron jme,
    Neterion X3100, vxge, pcnet32.
  - Bug fixes and improvements to drivers, wireless, DHCP, iSCSI,
    COMBOOT, and EFI.


author: Daniel P. Berrange <berrange@redhat.com> - 20120319-2.git0b2c788
changelog:
  - Remove BuildRoot & rm -rf of it in install/clean sections
  - Remove defattr in file section
  - Switch to use global, instead of define for macros
  - Add note about Patch1 not going upstream
  - Split BRs across lines for easier readability


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-4.gitc4bce43
changelog:
  - ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
  - Resolves: bz#1062644
    (pxe boot fails if next-server details come from a different dhcp server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-5.gitc4bce43.el7
changelog:
  - ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
  - ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
  - ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
  - ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
  - ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
  - ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
  - ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
  - Resolves: bz#1031518
    (iPXE does not honor specified boot device)
  - Resolves: bz#857123
    (Guests never get an iPXE prompt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-delete-useless-editor-backup-of-spec.template.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-7.gitc4bce43.el7
changelog:
  - ipxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#1196352]
  - ipxe-Use-spec-compliant-timeouts.patch [bz#1196352]
  - Resolves: bz#1196352
    ([RFE] option to increase gpxe retry timeout)


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.3-5
changelog:
  - Make irqbalance scan for new irqs when it detects new irqs (bz832815)
  - Fixes SIGFPE crash for some banning configuration (bz849792)
  - Fixes affinity_hint values processing (bz832815)
  - Adds banirq and bansript options (bz837049)
  - imake isn't needed for building any more (bz844359)
  - Fixes clogging of syslog (bz837646)
  - Added IRQBALANCE_ARGS variable for passing arguments via systemd(bz837048)
  - Fixes --hint-policy=subset behavior (bz844381)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.6-5
changelog:
  - Fixed irqbalance web adresses in spec (bz1060810)
  - Default hintpolicy adjusted (bz1060814)
  - Missing autogen.sh call fixed


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - fixed unused variable revealed by covscan
  - fixed ignored pid argument (#1155632)
  - warning when irqbalance started under non-root (#1155799)
  - more robust signal handling (#1158937)
  - fixed hostname in manpage (#1162251)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-11
changelog:
  - Fix iscsid autostarting when upgrading from an older version
    (add iscsid.startup key to iscsid.conf on upgrade)
  - Fix printing of [ OK ] when successfully stopping iscsid
  - systemd related fixes:
   - Add Should-Start/Stop tgtd to iscsi init script to fix (re)boot from
     hanging when using locally hosted targets
   - %ghost /var/lock/iscsi and contents (#656605)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-12
changelog:
  - Change iscsi init scripts to check for networking being actually up, rather
    then for NetworkManager being started (#692230)


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.18
changelog:
  - 789683 Fix boot slow down when the iscsi service is started
    (regression added in 6.2.0.872.16 when the nm wait was added).


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - rebase to new upstream code
  - systemd conversion
  - 565245 Fix multilib issues caused by timestamp in doxygen footers


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-4
changelog:
  - build with libkmod support, instead of calling out to modprobe
  - enable socket activation by default


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-7
changelog:
  - Use the systemd tmpfiles service to recreate lockfiles in /var/lock
  - 955167 build as a position independent executable
  - 894576 fix order of setuid/setgid and drop additional groups


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-10
changelog:
  - sync with upstream git, minor context fixes after rebase of out-of-tree patches
  - iscsiuio is merged upstream, remove old source archive and patches
  - spec cleanups to fix rpmlint issues


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - iscsi boot related fixes
    make sure iscsid gets started if there are any boot sessions running
    add reload target to fix double session problem when restarting from NM
    don't rely on session list passed from initrd, never got fully implemented
    remove patches related to running iscsid from initrd, possible to revisit later


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-16
changelog:
  - fix iscsiuio socket activation
  - have systemd start socket units on iscsiadm use, if not already listening


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-19
changelog:
  - 1007388 fixes for iscsiadm to support qla4xxx
  - refresh boot session info patches to final version from upstream,
    fixes context issues with later patches
  - 1006156, 1006161 Add/Update entries in chap table through Open-iSCSI
  - 948134 extend support to set additional parameters for network configuration
  - 1049710 update open-iscsi to support host statistics
  - 1043019 iscsiuio fix for arp cache flush issue
  - 1059332 Fix broken discovery sessions over iser
  - 1017393 split out iscsiuio into a seperate sub-package


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-20
changelog:
  - 1049710 host0 being treated as an invalid in the host stats command
  - 1015563 revert change to return code when calling login_portal for sessions
    that already exist, as it impacts users scripting around iscsiadm


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1069825
  - boot session handling improvements
  - Fix iscsi-mark-root for changed iscsiadm output
  - Make sure iscsiuio is running for boot session recovery when using the
    bnx2i transport by forcing iscsiuio.service start
  - Make NM dispatch triggered re-check for autostart sessions async
  - Accept exit code 21, no records, from iscsiadm as success in
    iscsi.service


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-22
changelog:
  - 1081798 retry login on host not found error
  - 1111925 ignore iscsiadm return in iscsi.service
  - 1126524 make sure systemd order against remote mounts is correct
  - 963039 add discovery as a valid mode in iscsiadm.8
  - sync with upstream


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24
changelog:
  - 1040343 segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-29
changelog:
  - 1166713 1187792 add missing ExecStart, only newer systemd lets that be optional for oneshot services


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - use relative instead of absolute link in postinstall script
  - use only one patch-file for the config file
  - change from 0700 to 0755 perms
  - change Makefiles instead of moving things around in the spec file
  - include the manpages of the X11 progs only in the xisdnload rpm


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix compilation with kernel 2.4.x
  - rebuild with new ncurses and Tcl
  - enable building of eurofile and divertctl stuff


author: Than Ngo <than@redhat.de>
changelog:
  - rebuilt for 7.0
  - FHS fixes
  - fix dependencies problem with new tcltk
  - fix to built with kernel-2.4


author: Than Ngo <than@redhat.de>
changelog:
  - add more documents
  - and missing config files to isdnlog
  - some fixes in vbox, isdnlog, vboxgetty
  - mark ioptions as %config(noreplace)
  - add pppdcapiplugin
  - add missing /sbin/ldconfig in %post and %postun
  - fix to build on ia64


author: Than Ngo <than@redhat.com>
changelog:
  - split package into isdn4k-utils, isdn4k-utils-vboxgetty, xisdnload
  - convert old isdn configuration format into new format
  - add startup script for loading module and starting isdnlog


author: Than Ngo <than@redhat.com>
changelog:
  - make isdnctrl executable by normal users (Bug #30803)
  - fix a minor bug in triggerpostun
  - fix rebuild problem in beehive if kernel-source is missed


author: Than Ngo <than@redhat.com> 3.1-47
changelog:
  - fixed symlinks bugs (bug #55306)
  - fix a bug in converting of old isdn configuration (bug #55083)
  - some hacks for ASUS COM ISDNLink ISA PnP


author: Than Ngo <than@redhat.com> 3.1-48
changelog:
  - new upstream
  - remove some unused patch files
  - move pppcapiplugin to /usr/lib/pppd, The plugin option now looks in here
  - devel sub package
  - buildreqquires: linuxdoc-tools


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.1-50
changelog:
  - new upstream, needed to switch isdnlog to EUR currency for contries that
    have it
  - fix installation of pppcapiplugin man page
  - don't build against 2.4.5 kernel headers, they're not compatible with
    2.4.17.


author: Than Ngo <than@redhat.com> 3.2-10.p1
changelog:
  - fix build problem with new libpcap

  -* Wed Jan 14 2004 Than Ngo <than@redhat.com> 3.2-9.p1
  - fixed permission problem


author: Than Ngo <than@redhat.com> 3.2-16.p1.1
changelog:
  - fix build problem with gcc-3.4
  - fix typo bug in isdnlog, bug #120568
  - fix capiplugin for working with pppd 2.4.2, bug #125723


author: Than Ngo <than@redhat.com> - 3.2-62
changelog:
  - fix #398121, capiplugin.so uses non-existent libcapi20.so
  - fix CAPI overflow
  - fix #471712, add sh architecture support


author: Than Ngo <than@redhat.com> - 3.2-69
changelog:
  - fix quotation issue with autoconf-2.64
  - fix bz#556056, split off -static subpackage
  - fix bz#539020, FTBFS


author: Than Ngo <than@redhat.com> - 3.2-70
changelog:
  - enable capi.new
  - add 40-isdn.rules, it's dropped from udev in F14 and later
  - fix multilib issue
  - add subpackage doc


author: Than Ngo <than@redhat.com> - 3.2-71
changelog:
  - fix bz#566909, thanks to Louis Lagendijk
      - own LIBDIR/capi
      - fix loading of plugins
      - remove chkconfig capi off


author: Than Ngo <than@redhat.com> - 3.2-72
changelog:
  - bz#545469, put vboxgetty config file in correct directory
  - fix wrong exit status in startup scrripts


author: Than Ngo <than@redhat.com> - 3.2-75
changelog:
  - apply patch to fix man pages, thanks to John Bradshaw
    bz#673794, bz#665079, bz#663637, bz#675715, bz#669053, bz#675676, bz#669081,
    bz#675604, bz#675679, bz#664335, bz#674204, bz#669091


author: Than Ngo <than@redhat.com> - 3.2-94
changelog:
  - Resolves: bz#1060370
    update patch to handle all cases by recursing through fmtmsg
    instead of vfmtmsg directly which depends on va_list type.


author: Jeremy Katz <katzj@redhat.com> - 1:1.0.4-1
changelog:
  - Add man pages from Ryan Finnie (ryan AT finnie DOT org)
  - Use popt in checkisomd5 (Ryan Finnie)
  - Fix verbose/gauge interactions (Ryan Finnie)
  - A few other little janitorial things (Ryan Finnie)


author: Radek Vykydal <rvykydal@redhat.com> - 1:1.0.6-1
changelog:
  - Add abort check feature (#555107) (dpierce, rvykydal)
    Changes prototype of exported checkMediaFile function.
  - Fix exit value of checkisomd5 (rvykydal)
  - Remove output to stderr from library (#576251) (bcl)
  - Use separate return value for image not found (#578160) (bcl)


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Marek Goldmann <mgoldman@redhat.com> 1.1-2
changelog:
  - Updated summary
  - Removed debuginfo package
  - Added license to javadoc package
  - Fixed dependency on maven-hawtjni-plugin


author: Marek Goldmann <mgoldman@redhat.com> - 1.4-1
changelog:
  - Upstream release 1.4
  - Fixing "archiver requires 'AM_PROG_AR' in 'configure.ac'" error
  - FTBFS: config.status: error: cannot find input file: `Makefile.in' RHBZ#858377


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4-8
changelog:
  - Install attached artifacts for proper classifier provides
  - Enable aarch64 support
  - Resolves: rhbz#1028551


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.900.1-4
changelog:
  - -libs subpkg to be multilib friendlier
  - -utils subpkg for non-essential binaries jiv, tmrdemo (#244153)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws
    lead to arbitrary code execution (CERT VU#887409) (#765660)
  - Fixed problems found by static analysis of code (#761440)
  - spec file modernized


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Omair Majid <omajid@redhat.com> - 1.7.0.19-2.3.9.12.el7
changelog:
  - Allowed multiple OpenJDKs to be installed in parallel
  - Removed archname
  - Added arch to all, not only multilib arches
  - uniquesuffix is now holding fully versioned name
  - Intorduced source11 remove-buildids.sh


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.9.13.el7
changelog:
  - javadoc put into fully versioned directory, but without arch (to be kept noarch)
   - uniquejavadocdir
  - updated to latest 2.3.9 tarball - fixing the rhbz#967436


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.9.14.fc19
changelog:
  - Added client/server directories so they can be owned
  - Renamed patch 107 to 200
  - Added nss support from 6.5
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Removed ant-nodeps, should not be needed


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el7
changelog:
  - fixed RH972717 by enabling patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - temporarly swithced to intree lcms as it have security fixes (patch 500)
   - added  GENSRCDIR="$PWD/generated.build" to be able to
   - removed (build)requires  lcms2(-devel)
  - Updated to latest IcedTea7-forest 2.3.10


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el7
changelog:
  - update of IcedTea7-forest 2.3.10 tarball
  - removed patch1000 MBeanFix.patch to fix regressions caused by security patches


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.4.el7
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - all patch commands repalced by patch macro
    - updated java-1.7.0-openjdk-ppc-zero-hotspot.patch to pass without loose patching


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.11.0.el7
changelog:
  - added new alternatives jre-1.7.0-openjdk and java-1.7.0-openjdk 
  - finally merged arm and main source tarballs
  - updated to icedtea 2.3.11
   - http://blog.fuseyism.com/index.php/2013/07/25/icedtea-2-3-11-released/
  - added removal of new jre-1.7.0-openjdk and java-1.7.0-openjdk alternatives
  - removed patch 400, rhino for 2.1 and other 2.1 conditional stuff
  - removed patch 103 arm-fixes.patch
  - removed "dir" from files which was duplicating jre in sdk


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.12.2.el7
changelog:
  - refreshed icedtea7-forest 2.3.12
  - fix broken jre_exports alternatives links (thanx to orion bug #979128)


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.2.7.el7
changelog:
  - fixed incorrect  _jvmdir/jre-javaver_origin to  _jvmdir/jre-javaver-origin link
  - Resolves:rhbz#875408


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.2.fel7
changelog:
  - added and applied patch121, FixPPC64StackOverflow.patch
  - all redundant ppc64 strings replaced by power64 macro
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.3.fel7
changelog:
  - just bumped release, need to confirm, that   patch121, FixPPC64StackOverflow.patch
    really works
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.fel7
changelog:
  - Removed obsoletes for java-1.6.0-openjdk* ,  until decided its presence in el7
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el7
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
   - and so removed patch121 FixPPC64StackOverflow.patch
  - added patch412 zero-x32.diff to try to fix zero builds build
  - Resolves: rhbz#1053280


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.5.0.el7
changelog:
  - updated to icedtea 2.4.5 + sync with f21
   - http://blog.fuseyism.com/index.php/2014/01/29/icedtea-2-4-5-released/
  - removed buildRequires: pulseaudio >= 0.9.11, as not neccessary
   -  but kept libs-devel)
  - removed upstreamed or unwonted patches (thanx to gnu_andrew to pointing them out)
   - patch410 1015432.patch (upstreamed)
   - patch411 1029588.patch
   - patch412 zero-x32.diff
   - patch104 java-1.7.0-ppc-zero-jdk.patch
   - patch105 java-1.7.0-ppc-zero-hotspot.patch
  - patch402 gstackbounds.patch and patch403 PStack-808293.patch applied always
   (again thanx to gnu_andrew)
  - merged other gnu_andrew's changes
   - FT2_CFLAGS and FT2_LIBS hardoced values replaced by correct pkg-config calls 
   - buildver bumbed to 31
  - added build requires  nss-devel
  - removed build requires mercurial
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS into make call
  - Related: rhbz1038092


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el7
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed Requires: rhino, BuildRequires is enough
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.6 forward port)
  - nss enabled, but notused as default (6.6 forward port)
  - Resolves: rhbz#1099565


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1.7.0.55-2.4.7.2
changelog:
  - Remove NSS patches. Issues with PKCS11 provider mean it shouldn't be enabled.
  - Always setup nss.cfg and depend on nss-devel at build-time to do so.
  - This allows users who wish to use PKCS11+NSS to just add it to java.security.
  - Patches to PKCS11 provider will be included upstream in 2.4.8 (ETA July 2014)
  - Resolves: rhbz#1099565


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115877


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.1.5
changelog:
  - Add workaround to build on ppc64le where arch directory is still ppc64le, not ppc64
  - Resolves: rhbz#1125557


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.7
changelog:
  - added and applied patch666 stackoverflow-ppc32_64-20140828.patch
  - returned ppc (rebuild in brew must be done by 2.4.x)
  - Resolves: rhbz#1125557


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.65-2.5.1.10
changelog:
  - Add patches for PPC zero build.
  - Fixes stack overflow problem. See RHBZ#1015432.
  - Fixes missing memory barrier in Atomic::xchg*
  - Fixes missing PPC32/PPC64 defines for Zero builds on power.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.65-2.5.1.11
changelog:
  - Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in
    the bytecode verifier on ppc/ppc64.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.1
changelog:
  - Bump to 2.5.3 for latest security fixes.
  - Remove obsolete patches and CFLAGS which are now upstream.
  - Add hsbootstrap option to pre-build HotSpot when required.
  - Resolves: rhbz#1148894


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.3
changelog:
  - Set ENABLE_FULL_DEBUG_SYMBOLS=0 for aarch64 to retain debuginfo in files.
  - Resolves: rhbz#1148894


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.71-2.5.3.4
changelog:
  - aarch64 sources updated to most recent stable tag
  - adapted patch4030 PStack-808293-aarch64.patch
  - removed upstreamed CPU patches (patch500-509, 20141014*)
  - Resolves: rhbz#1125260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Bump AArch64 port to 2.6.0pre17.
  - Fix abrt_friendly_hs_log_jdk7.patch to apply again and enable on all archs.
  - Remove OpenJDK 8 / AArch64 version of PStack patch as this is no longer needed.
  - Resolves: rhbz#1180298


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.75-2.5.4.3
changelog:
  - removed source14 remove-origin-from-rpaths (1169097)
  - removed build requirement for chrpath
  - Resolves: rhbz#1180298


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.4
changelog:
  - Symlink ppc64 directory to ppc64le
  - Run test application to print architecture-specific paths stored in the JDK
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.5
changelog:
  - Fix patch for RH1191652 to override LIBARCH on ppc64le as there is no BUILDARCH
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.5
changelog:
  - Fix hsbootstrap option on ppc64le where JDK_TO_BUILD_WITH is changed.
  - Print uname to feedback to upstream OpenJDK.
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.0
changelog:
  - Bump to 2.5.5 using OpenJDK 7u79 b14.
  - Update OpenJDK tarball creation comments
  - Remove test case for RH1191652 now fix has been verified.
  - Drop AArch64 version of RH1191652 HotSpot patch as included upstream.
  - Resolves: rhbz#1209073


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers.
  - Resolves: rhbz#1194226


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Add GConf2-devel dependency for native proxy fallback support.
  - Remove libxslt dependency pulled in from IcedTea builds.
  - Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
  - Resolves: rhbz#1194226


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.1
changelog:
  - Pass SYSTEM_GSETTINGS="true" to the OpenJDK build to explicitly enable the GSettings API.
  - Resolves: rhbz#1194226


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.1
changelog:
  - Bump to 2.6.2 and u91b00.
  - Disable system LCMS 2 for now until security of it can be verified.
  - Drop patches for PR2560/RH1245855 as now applied upstream.
  - Sync minor changes from RHEL 6 spec file.
  - Resolves: rhbz#1271923


author: Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87
changelog:
  - Update to b87
  - Remove all rhino support; use nashorn instead
  - Remove upstreamed/unapplied patches


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89
changelog:
  - prelink dependence excluded also for aaech64
  - arm64 added to jitarches
  - added source100 config.guess to repalce the outdated one in-tree
  - added source101 config.sub  to repalce the outdated one in-tree
  - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent)
  - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent)
  - added gcc-c++ build depndece so builddep will  result to better situation


author: Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89
changelog:
  - Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch)
  - Added --disable-precompiled-headers for arm64 build


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129
changelog:
  - Add -headless subpackage based on java-1.7.0-openjdk
  - Add abrt connector support
  - Add -accessibility subpackage


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132
changelog:
  - updated to rc4 aarch64 tarball
  - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch
    patch2021 system-libpng-aarch64.patch


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132
changelog:
  - Include version information in desktop files
  - Move desktop files from tarball to top level source


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12
changelog:
  - backporting old fixes:
  - get rid of jre-abrt, uniquesuffix, parallel install, jsa files,
    config(norepalce) bug, -fstack-protector-strong, OrderWithRequires,
    nss config, multilib arches, provides/requires excludes
  - some additional cosmetic changes


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12
changelog:
  - bumped release to build by previous release.
  - forcing rebuild by jdk8
  - uncommenting forgotten comment on tzdb link


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12
changelog:
  - added build requires and requires for headles  _datadir/javazi-1.8/tzdb.dat
  - restriction of tzdata provider, so we will be aware of another possible failure


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01
changelog:
  - updated to u40-b01
  - adapted  java-1.8.0-openjdk-accessible-toolkit.patch
  - adapted  system-lcms.patch
  - removed patch8 set-active-window.patch
  - removed patch9 javadoc-error-jdk-8029145.patch
  - removed patch10 javadoc-error-jdk-8037484.patch
  - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02
changelog:
  - adapted aarch64 patch
  - removed upstreamed patch  0001-PPC64LE-arch-support-in-openjdk-1.8.patch
  - added patch666 stackoverflow-ppc32_64-20140828.patch
  - commented out patch2 1015432.patch (does nearly the same as new patch666)
  - Resolves: rhbz#1125260


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26
changelog:
  - Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK
  - Do not obsolete java-1.7.0-openjdk
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26
changelog:
  - moving all ppc64 to jit arches
  - using cpp interpreter for ppc64le
  - removing requirement on datadir/javazi-1.8/tzdb.dat
  - Resolves: rhbz#1125260


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26
changelog:
  - Update aarch64 hotspot to latest upstream version
  - Depend on java-1.7.0-openjdk to work around self-building issues
  - Resolves: rhbz#1125260


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26
changelog:
  - Add patches for PPC zero build.
  - Fixes stack overflow problem. See RHBZ#1015432.
  - Fixes missing memory barrier in Atomic::xchg*
  - Fixes missing PPC32/PPC64 defines for Zero builds on power.
  - Resolves: rhbz#1125260


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26
changelog:
  - Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in
    the bytecode verifier on ppc/ppc64.
  - Resolves: rhbz#1125260


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26
changelog:
  - Remove LIBDIR and funny definition of _libdir.
  - Fix rpmlint warnings about macros in comments.
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: rhbz#1125260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Fix configure script to use ppc64le, not ppc64.
  - Add ppc64le support to LIBJSOUND_CFLAGS.
  - Add a jvm.cfg for ppc64le
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Print contents of spec.gmk to see what is being passed to the HotSpot build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build.
  - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7.
  - Print contents of hotspot-spec.gmk
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build.
  - Add property test case from java-1.7.0-openjdk build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13
changelog:
  - Adjust ppc64le HotSpot patch for OpenJDK 8.
  - Enable AArch64 configure/JDK patch on all archs to minimise patching issues.
  - Adjust ppc64le patches to apply after the enableAArch64 patch.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Resolves: rhbz#1194378


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 7.2
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - family of 5XX patches renamed to 6XX
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209077


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13
changelog:
  - Omit jsa files from power64 file list as well, as they are never generated
  - Resolves: rhbz#1202726


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13
changelog:
  - Make use of system timezone data for OpenJDK 8.
  - moved to boot build by openjdk8
  - priority set  gcj < lengthOffFour < otherJdks (RH1175457)
  - misusing already fixed bug
  - Resolves: rhbz#1189530


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13
changelog:
  - Correctly fix system timezone data issue by depending on correct tzdata version.
  - Remove reference to tz.properties which is no longer used.
  - Resolves: rhbz#1212571


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16
changelog:
  - Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257657


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.6.0-1
changelog:
  - Update to upstream version 0.6.0
  - Make maven provides versioned
  - Add additional pom_ macros to simplify additional pom editing


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.7.0-1
changelog:
  - Update to latest upstream
  - Full support for compat depmap generation
  - Generate maven-files-%{name} with a list of files to package
  - Add support for maven repo generation (alpha version)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.9.0-1
changelog:
  - Update to latest upstream version
  - Enable maven requires generator for xmvn packages
  - Enable requires generator for javadoc packages


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.10.0-1
changelog:
  - Update to upstream version 0.10.0
  - Implement %xmvn_alias, %xmvn_file and %xmvn_package macros
  - Fix regex in osgi.attr
  - Add support for pre- and post-goals in mvn-build script


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.0-1
changelog:
  - Update to upstream version 0.12.0
  - Implement new pom macros: xpath_replace and xpath_set
  - Remove Support-local-depmaps.patch (accepted upstream)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.4-1
changelog:
  - Update to upstream version 0.12.4
  - Resolves: rhbz#913630 (versioned requires between subpackages)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.12.5-1
changelog:
  - Update to upstream version 0.12.5
  - Resolves problems with compat package provides and automatic requires


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.6-1
changelog:
  - Update to upstream version 0.12.6
  - Resolves: rhbz#917618 (remove jetty orbit provides)
  - Resolves: rhbz#917647 (system.bundle into autogenerated deps)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.15.0-1
changelog:
  - Update to upstream version 0.15.0
  - Added depmap for tools.jar
  - Added support for versioned autorequires
  - New plugin metadata from Maven Central


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.0-1
changelog:
  - Update to upstream version 2.0.0
  - Merge functionality of jpackage-utils
  - Provide and obsolete jpackage-utils
  - %add_maven_depmap macro now injects pom.properties to every JAR
  - %add_to_maven_depmap and %update_maven_depmap macros were removed
  - maven2jpp-mapdeps.xsl template has been removed
  - Macros related to installation of icons and desktop files were removed
  - 14 new manual pages were added
  - Documentation specific to JPackage was removed
  - Add BuildRequires: asciidoc, xmlto


author: Stanislav Ochotnicky <sochotnicky@redhat.com> 3.0.2-1
changelog:
  - Update to upstream version 3.0.2
  - Add separate python-javapackages subpackage
  - Add separate fedora-review-plugin-java subpackage
  - Enable part of unit tests


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.3.1-2
changelog:
  - Remove workaround for guice-no_aop
  - Remove fedora-review subpackage
  - Resolves: rhbz#1016667
  - Related: rhbz#1015158


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5-0.rc6a.2
changelog:
  - Include perlconnect.
  - Include readline support, rebuild using "--without readline" to disable.
  - Add libjs* provides for upstream compatibility.
  - Install header files in %{_includedir} instead of %{_includedir}/js.


author: Matthias Saou <http://freshrpms.net/> 1.5-1
changelog:
  - Update to 1.5.0 final.
  - Spec file cleanups.
  - Move docs from devel to main, since we need the license there.
  - Remove no longer needed js-perlconnect.patch.
  - Update js-1.5-va_copy.patch.
  - Include a pkgconfig file (#178993).


author: Matthias Saou <http://freshrpms.net/> 1.60-1
changelog:
  - Update to 1.60.
  - Rebuild in order to link against ncurses instead of termcap (#226773).
  - Add ncurses-devel build requirement and patch s/termcap/ncurses/ in.
  - Change mode of perl library from 555 to 755 (#224603).


author: Matthias Saou <http://freshrpms.net/> 1.70-1
changelog:
  - Update to 1.7.0, as 1.70 to avoid introducing an epoch for now...
  - Remove no longer provided perlconnect parts.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.70-8
changelog:
  - Reformat spec with tabs.
  - By report of Thomas Sondergaard (BZ#511162) Add -DXP_UNIX=1 -DJS_THREADSAFE=1 flags and nspr requires into libjs.pc


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.8.5-0.hg51702867d932
changelog:
  - Build version 1.8.5 by update request - BZ#676441 from Firefox 4.0 mercurial repository.
  - Gone -DJS_C_STRINGS_ARE_UTF8
  - Add BR autoconf213, change build system to use configure.
  - Adopt patch0 (js-1.7.0-make.patch -> js-1.8.5-make.patch)
  - Adopt patch1 (js-shlib.patch -> js-1.8.5-shlib.patch)
  - Remove Patch2 (js-1.5-va_copy.patch) and Patch3 (js-ldflags.patch)
  - Add BR python, zip.


author: Colin Walters <walters@verbum.org> - 1:1.8.5-6
changelog:
  - Include mozjs185.pc, clean up build
  - Based on work from Christopher Aillon <caillon@redhat.com>
  - Switch to using make install DESTDIR=, instead of hardcoding build rules.
  - Add DESTDIR= patch from GNOME 3.2 jhbuild
  - Make mozjs185 the canonical target for both libmozjs and libmozjs185.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Rob Crittenden <rcritten@redhat.com> 4.2.4-5
changelog:
  - Include the 3 license files
  - Remove Requires for nss and nspr. These libraries have versioned symbols
    so BuildRequires is enough to set the minimum.
  - Add sparc64 for the 64-bit list


author: Rob Crittenden <rcritten@redhat.com> 4.2.4-6
changelog:
  - Use _jnidir macro instead of _javadir for the jar files. This will break
    multilib installs but adheres to the jpackage spec.


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-1
changelog:
  - Resolves: bug 455305 - <cfu@redhat.com>
    CA ECC Signing Key Failure
  - Resolves: bug 502111 - <cfu@redhat.com>
    Need JSS interface for NSS's PK11_GenerateKeyPairWithOpFlags() function
  - Resolves: bug 503809 - <mharmsen@redhat.com>
    Update JSS version to 4.2.6
  - Resolves: bug 503817 - <mharmsen@redhat.com>
    Create JSS Javadocs as their own RPM


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-4
changelog:
  - Resolves: bug 224688 - <cfu@redhat.com>
    Support ECC POP on the server
  - Resolves: bug 469456 - <jmagne@redhat.com>
    Server Sockets are hard coded to IPV4
  - Resolves: bug 509183 - <mharmsen@redhat.com>
    Set NSS dependency >= 3.12.3.99


author: John Dennis <jdennis@redhat.com> - 4.2.6-10
changelog:
  - Resolves: bug 656094 - <jdennis@redhat.com>
    Rebase jss to at least jss-4.2.6-9
  - <jdennis@redhat.com>
    merge in updates from Fedora
    move jar location to %{_libdir}/jss and provide symlinks, on 32bit looks like this:
      /usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar
      /usr/lib/jss/jss4-<version>.jar
      /usr/lib/jss/jss4.jar -> jss4-<version>.jar
      /usr/lib/jss/libjss4.so
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 647364 - <cfu@redhat.com>
    Expose updated certificate verification function in JSS
  - bug 529945 - <cfu@redhat.com>
    expose NSS calls for OCSP settings
  - bug 638833 - <cfu@redhat.com>
    rfe ecc - add ec curve name support in JSS and CS
  - <rcritten@redhat.com>
    Need to explicitly catch UnsatisfiedLinkError exception for System.load()
  - bug 533304 - <rcritten@redhat.com>
    Move location of libjss4.so to subdirectory and use System.load() to
    load it instead of System.loadLibrary() for Fedora packaging compliance


author: Christina Fu <cfu@redhat.com> - 4.2.6-11
changelog:
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 661142 - <cfu@redhat.com>
    Verification should fail when a revoked certificate is added


author: Jack Magne <jmagne@redhat.com> - 4.2.6-15.99
changelog:
  - bug 694661 - TKS instance crash during token enrollment.
    Back out of previous patch for #676083.


author: Christina Fu <cfu@redhat.com> - 4.2.6-17
changelog:
  - Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode
    and ECC algorithms (support tokens that don't do ECDH)


author: Christina Fu <cfu@redhat.com> - 4.2.6-21
changelog:
  - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - support for PKCS5v2; support for secure PKCS12
  - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
    in-place upgrade( CS 8.0->8.1)


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #797351 - JSS - HSM token name was mistaken for manufacturer
    identifier (cfu)
  - Bugzilla Bug #804840 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)
  - Dogtag TRAC Task #109 (https://fedorahosted.org/pki/ticket/109) - add
    benign JNI jar file symbolic link from JNI libdir to JNI jar file (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-2
changelog:
  - BR: libXxf86misc-devel
  - BR: libXxf86misc-devel
  - BR: libXcomposite-devel
  - BR: bluez-libs-devel
  - BR: libxklavier-devel
  - BR: pam-devel
  - BR: lm_sensors-devel
  - BR: libXdamage-devel
  - BR: libXv-devel
  - BR: libXres-devel


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-3
changelog:
  - own some more directories
  - add %defattr to package devel
  - some spec cleanups
  - -R: kdepimlibs-devel
  - +BR: libXpm-devel
  - +BR: glib2-devel (do we really need this?)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-7
changelog:
  - use kde.desktop from /usr/share/apps/kdm/sessions/kde.desktop
  - use %config(noreplace) for /etc/ksysguarddrc
  - Requires: kdebase, kdebase-runtime, oxygen-icon-theme
  - fix url


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.1-2
changelog:
  - %doc README COPYING
  - -libs subpkg
  - -libs: Requires: kdelibs4
  - don't remove libplasma.so from %{_kde4_libdir}
  - %files: use %_datadir for dbus-1/interfaces,xsessions


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.96.1-3
changelog:
  - update and apply redhat-startkde patch
  - update and apply KDM ConsoleKit patch (#228111, kde#147790)
  - ConsoleKit patch also includes xdmcp fixes from Mandriva (#243560)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.2-2
changelog:
  - BR: dbus-devel
  - crystalsvg icons are not part of kdebase-workspace anymore
  - make sure libkdeinit_plasma.so is in normal package


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.97.0-3
changelog:
  - Requires: coreutils dbus-x11 xorg-x11-apps xorg-x11-utils
              xorg-x11-server-utils (used in startkde)
  - drop pam configs that were previously moved to kde-settings


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.0-1
changelog:
  - update to 4.0.0
  - drop upstreamed creategtkrc-gtk212 patch
  - update redhat-startkde and consolekit-kdm patches


author: Than Ngo <than@redhat.com> 4.0.2-7
changelog:
  - apply upstream patch to fix changing wallpaper causes desktop to go white
  - apply upstream patch to check whether the to-be-embedded window has been destroyed, (bz#437058)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.0.3-15
changelog:
  - workaround #434824: KDE4 System Settings - No Method To Enter Administrative Mode
  - fix #441062: packagekit tools do not show icons correctly on KDE


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - update file list (Lorenzo Villani)
  - port plasma-konsole, ck-shutdown, rootprivs, plasma-default-wallpaper patches
  - remove NoDisplay=true in systemsettings onlyshowkde patch (still add
    OnlyShowIn=KDE), rename to show-systemsettings
  - drop upstreamed suspend patch
  - drop backported kde#155362 and menu-switch patches
  - drop rh#443610 patch, "Zoom Out" should be working in 4.1
  - disable kde#158301 patch for now (fails to apply, looks hard to port)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.85-3
changelog:
  - rewrite and reapply plasma-default-wallpaper patch
  - (no more separate plasma-default-wallpaper-config part)
  - rediff kde#154119 patch one last time


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-2
changelog:
  - backport Plasma tooltip manager from KDE 4.2 (fixes regression from 4.0)
    WARNING: Adds some new APIs from 4.2 (Plasma::popupPosition, Plasma::viewFor,
             Plasma::ToolTip*), use at your own risk, we have no control to
             guarantee that they will not change!


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-5
changelog:
  - F10+: fix circular kdebase<->kdebase-workspace dependency: don't Obsolete or
    Require kdebase, as kdebase now requires kdebase-workspace, obviating the
    upgrade path hack


author: Lukáš Tinkl <ltinkl@redhat.com> 4.1.0-5
changelog:
  - fix 457479: "Run as root" dialog of kdm system settings is shown twice
    (due to activated signal being connected to twice)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-6
changelog:
  - reenable panel-autohide-fix-flicker patch
  - backport revision 866998 to fix the CPU consumption problem (kde#172549)
  - backport panelview.cpp coordinate fixes (revisions 869882, 869925, 870041)
  - backport revision 871058 (request config sync when panel controller goes away)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-10
changelog:
  - never touch PATH in startkde, prepending $QTDIR/bin is unnecessary on Fedora
    and breaks locating Qt 3 Assistant and other Qt 3 stuff (startkde gets run
    with a full path by KDM)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - BR cmake >= 2.6.2
  - make install/fast
  - drop _default_patch_fuzz 2
  - rebase startkde patch
  - rebase plasma-konsole patch
  - rebase ck-shutdown patch
  - add PyKDE4-devel, python-devel and PyQt4-devel to build plasma's python
    scripting interface
  - BR google-gadgets-devel for google gadgets scriptengine
  - BR libusb-devel for Logitech USB support in KControl


author: Than Ngo <than@redhat.com> 4.1.80-2
changelog:
  - merged
  - drop kdebase-workspace-4.1.2-kdm-i18n.patch, it's included in upstream
  - drop kdebase-workspace-4.0.85-plasma-default-wallpaper.patch, it's included in upstream
  - drop kdebase-workspace-4.1.65-consolekit-kdm.patch
  - add kdebase-workspace-4.1.80-session-button.patch
  - add kdebase-workspace-4.1.2-ldap.patch


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-3
changelog:
  - rebase kdebase-workspace-4.1.1-show-systemsettings.patch
  - new library: Kephal -> adapt file lists


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-5
changelog:
  - use python_sitearch for x86_64 systems
  - kephal seems to be disabled/removed, re-adapted file lists


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.85-5
changelog:
  - drop BR edje-devel, we need QEdje instead, which we don't have yet
  - comment out BR google-gadgets-* for now, need 0.10.4, have 0.10.3


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-3
changelog:
  - Requires: PyKDE4 (for plasmascript bits)
  - solid-bluetoothTrunkTo42.diff (bug #481801), and 
    +Provides: solid-bluetooth(-devel) = 4.3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.0-4.1
changelog:
  - conditionalize bluetooth backport on F10+
  - F9: revert solid-bluetooth to the version from KDE 4.1.4


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.1-9
changelog:
  - kdm subpkg
  - -devel: move cmake modules here
  - Requires: kdelibs4%{?_isa} ..
  - BR: libutempter-devel (drops need for kwrited helper)


author: Rex Dieter <rdieter@fedoraproject.org> 4.2.85-2
changelog:
  - upgrade path broken (F-11+), Obsoletes: guidance-power-manager (#502892)
  - drop < F-10 crud, have_bluez3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.95-2
changelog:
  - port and reapply rootprivs (#434824) patch (#508593)
  - fix internal version number (otherwise it mismatches with our file list)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-2
changelog:
  - move designer plugins to -libs, fixes
    Multilib conflicts for index.cache.bz2 (#515088)
  - tighten -libs deps, using %{?_isa}
  - %check: desktop-file-validate


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-101
changelog:
  - inflate Release tag, avoiding possible upgrade/obsoletes pain 
  - -devel: drop Provides: PolicyKit-kde-devel, bump Obsoletes


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-3
changelog:
  - -python-applet: Provides: plasma-scriptengine-python
  - Requires: system-ksplash-theme (f12+,rhel6+)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.75-0.4.svn1048496
changelog:
  - backport battery plasmoid from current pre-4.3.80 trunk for showremainingtime
  - rebase battery-plasmoid-showremainingtime patch
  - rebase brightness-keys patch for the above backport


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.85-3
changelog:
  - F13+: don't Obsoletes: PolicyKit-kde, let polkit-kde obsolete it
  - F13+: explicitly require polkit-kde instead of PolicyKit-authentication-agent


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-5
changelog:
  - do not link calendar dataengine with Akonadi (kde#215150, rh#552473)
  - s/plasma-engine/plasma-dataengine/


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-8
changelog:
  - SELinux is preventing /sbin/setfiles "read" access on
    /var/spool/gdm/force-display-on-active-vt (deleted) (#556643)


author: Than Ngo <than@redhat.com> - 4.4.0-4
changelog:
  - move xsession desktop files to main package
    (cannot start kde from gdm if kdm not installed)
  - Desktop locking crashes (kde#217882#16)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.2-2
changelog:
  - try to workaround "X server hogs the CPU (#577482)" by letting X
    choose vt itself
  - include (but not yet apply) kubuntu_34_kdm_plymouth_transition.diff


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.2-3
changelog:
  - rip out bulletproof X changes (cf. kubuntu_33_kdm_bulletproof_x.diff) from
    our copy of kubuntu_34_kdm_plymouth_transition.diff
  - drop experimental novt patch, should not be needed with the working Plymouth
    integration and may have side effects (can readd it later if really needed)
  - fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.85-2
changelog:
  - Adding "Enable networking" button to knetworkmanager (rh#598765, kde#238325)
  - drop < f12 conditionals
  - pciutils, raw1394 & qualculate BRs
  - added kcmkdm helper and policy (from kdelibs)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-2
changelog:
  - include better, upstream fix for: krandr: Display Settings are Lost
    on Logout (kdebug183143, rh#607180)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-5
changelog:
  - use upstream ck-shutdown patch from 4.6 trunk (instead of my old one),
    supports GDM session switching (#560511, kde#186198)
  - drop old F11- version of the ck-shutdown patch, F11 is EOL


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.3-2
changelog:
  - drop classicmenu-games patch, upstream fixed the same issue differently and
    now the 2 fixes conflict (classic menu confuses Name and Description)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.80-7
changelog:
  - -googlegadgets => plasma-scriptengine-googlegaddgets
  - -python-applet => plasma-scriptengine-python
  - (new) plasma-scriptengine-ruby


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.1-2
changelog:
  - use system-kde-theme again (ie, lovelock-kde-theme on f15)
  - -Requires: system-backgrounds-kde
  - +Requires: system-plasma-desktoptheme 
  - -ksplash-themes: move Default (Air+Horos) ksplash theme here


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.6.1-7
changelog:
  - Restore lost hunks from redhat_startkde patch, fixes regressions with running
    Qt 3 binaries (Qt 3 Assistant etc.) and with the initial background color
  - Fix incorrectly rebased hunk from redhat_startkde patch, fixes regression with
    language setting


author: Lukas Tinkl <ltinkl@redhat.com> - 4.6.2-2
changelog:
  - #694222 - Brightness controls no longer work
  - kdebug#257948 - Powerdevil can no longer control brightness
  - drop obsolete HAL backlight patch


author: Jaroslav Reznik <jreznik@redhat.com> 4.7.0-1
changelog:
  - 4.7.0
  - kde4workspace_version is not needed anymore
  - Provides: kde-workspace kde-wallpapers (to match new upstream tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.1-2
changelog:
  - upstream kwin_performance patch
  - Use /etc/login.defs to define a 'system' account instead of hard-coding 500 (#732830)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - Crash in TaskManager::TaskItem::task (kde#272495)
  - Crashes When Adding Weather Widgets (Geolocation) (kde#277036)


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-3
changelog:
  - Fixed file listed twice
  - Remove big cursors from files (they are no longer in upstream tarball)
  - Add new files: libkwinglutils.so*, liboxygenstyleconfig.so*
    libpowerdevilconfigcommonprivate.so*, kfontinst.knsrc
  - New ksplash theme Minimalistic
  - patch: don't use INSTALL to copy file to current binary dir


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-4
changelog:
  - Respin with new upstream tarball
  - Drop patch: don't use INSTALL to copy file to current binary dir


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.95-3
changelog:
  - kdm overwrites ~/.Xauthority with wrong SELinux context on logout (#567914,kde#242065)
  - gcc47 fixes


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.0-2
changelog:
  - kcm_colors subpkg (#761184)
  - kdm-themes: Requires: kde-wallpapers unconditionally (#784389)
  - s/kdebase-runtime/kde-runtime/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8.0-5
changelog:
  - kde-workspace: Requires: ConsoleKit (shutdown/restart, works around #788171)
  - kdm: Requires: ConsoleKit (works around #787855, nasty error message on login)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.8.80-2
changelog:
  - new showremainingtime patch, now just defaults the option to true
    (It doesn't have ugly side effects anymore with the rewritten plasmoid.)


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.95-3
changelog:
  - Battery Monitor widget stops tracking charging state changes after suspend/resume cycle (#837345, kde#287952)


author: Than Ngo <than@redhat.com> - 4.8.97-2
changelog:
  - remove obsolete stuffs in startkde, kde-4.6.x already uses QLocale
    to try obtain a default country.


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.0-2
changelog:
  - kcm_fonts should use $XDG_CONFIG_HOME/fontconfig/fonts.conf for storage settings for fontconfig > 2.10.0 (kde#304317)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.9.1-6
changelog:
  - update the systemd PowerDevil Policy Agent patch to match the upstream
    version (part of KDE 4.9.2)
  - update clock applets on system date/time changes


author: Martin Briza <mbriza@redhat.com> - 4.9.3-3
changelog:
  - user switching dialog now doesn't list inactive (closing) sessions and more information is retrieved from logind


author: Martin Briza <mbriza@redhat.com> 4.9.90-2
changelog:
  - Merged and cleaned the systemd shutdown and logout patches.
  - It is possible to use systemd and/or CK without defining it at compile time


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-3
changelog:
  - hack to use org.freedesktop.login1 to handle suspend (instead of upower),
    seems to help avoid double-sleep (#859227)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.0-6
changelog:
  - tweak fedora-plasma-cache.sh for plasma-svgelements*, Trolltech.conf too
  - enable powerdevil-login1 support on f18


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - PowerDevil should use upower to suspend on F17 (#920874)
  - other small upstream fixes (xrandrbrightness, login1 leak, stop screensaver)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.2-5
changelog:
  - drop LD_BIND_NOW from startkde (#908380)
  - fold all startkde-related patches into redhat_startkde.patch


author: Martin Briza <mbriza@redhat.com> 4.10.2-9
changelog:
  - regenerated the systemd-displaymanager patch against latest upstream master
  - worked around #955374 before I fix it clean upstream


author: Than Ngo <than@redhat.com> - 4.10.5-3
changelog:
  - CVE-2013-4132, backport systray icons memleak fix
  - CVE-2013-4133, backport potential kcheckpass security issue


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.2-2
changelog:
  - build apidocs and put them into an -apidocs subpackage (can be turned off)
  - BR doxygen, graphviz and qt4-doc when building apidocs


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.82-2
changelog:
  - add --debug-output to our cmake call, that should fix a reproducible
    bug with cmake and ppc builds (this work-around should be
    removed anyway)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.2-2
changelog:
  - pkgconfig-style deps
  - "Mimetype tree is not a DAG!" errors + crashes when using SMI 0.91 (#749618)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.9.1-3
changelog:
  - Update holiday_sg_en-gb (#857877, kde#306924)
  - Update Argentina holidays rule file (kde#306347)
  - kmail cannot display html messages with images refered (kde#205791)
  - transportlistview: resize to content


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-0.1.20080506svn804581
changelog:
  - update to revision 804581 from KDE SVN (to match KDE 4.0.72)
  - add COPYING and COPYING.LIB as %doc
  - update file list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.80-3
changelog:
  - BR plasma-devel
  - add Provides: kde-plasma-lancelot
  - fix file list
  - BR libkexiv2-devel >= 0.4.0 on F10+


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.1-2
changelog:
  - fix Lancelot rendering issues with Qt 4.5 (F11+ only, as the effect of that
    patch with 4.4.3 is unknown)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.1-3
changelog:
  - make bball applet work, ship .svg instead of .svgz (kdebug#185568)
  - use new %_qt45 macro
  - spec housecleaning


author: Radek Novacek <rnovacek@redhat.com> 4.7.0-2
changelog:
  - Fix crash with Group Desktop plasma option (fixed upstream)
  - https://bugs.kde.org/show_bug.cgi?id=278222#c16


author: Rex Dieter <rdieter@fedoraproject.org> - 4.7.97-1
changelog:
  - 4.7.97
  - kimpanel: omit ibus backend on f17+ FTBFS (#771115)
  - add patch that fix shadowning variable


author: Matthias Saou <http://freshrpms.net/> 1.1.13-1
changelog:
  - Update to 1.1.13.
  - Change mode of configuration file to 0600.
  - Don't include all of "doc" since it meant re-including all man pages.
  - Don't include samples in the main configuration path, they're in %doc.
  - Include patch to add an optional label to interfaces.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-4
changelog:
  - Add missing \n to the kernel define, for when multiple kernels are installed.
  - Pass STRIP=/bin/true to "make" in order to get a useful debuginfo package.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-5
changelog:
  - Include types patch to fix compile on F7 (David Woodhouse).
  - Fix up file modes (main binary 700 -> 755 and config 600 -> 640).


author: Matthias Saou <http://freshrpms.net/> 1.1.14-1
changelog:
  - Update to 1.1.14.
  - Remove all upstreamed patches.
  - Remove our init script and sysconfig files, use the same now provided by the
    upstream package (will need to patch for LSB stuff soonish).
  - Include new goodies/arpreset.pl in %doc.
  - Add missing scriplet requirements.


author: Matthias Saou <http://freshrpms.net/> 1.1.14-2
changelog:
  - Include patch from Shinji Tanaka to fix conf include from inside some
    directives like vrrp_instance.


author: Matthias Saou <http://freshrpms.net/> 1.1.19-3
changelog:
  - Update init script to have keepalived start after the local MTA (#526512).
  - Simplify the kernel source detection, to avoid running rpm from rpmbuild.


author: Matthias Saou <http://freshrpms.net/> 1.1.20-1
changelog:
  - Update to 1.1.20 (#589923).
  - Update BR conditional for RHEL6.
  - No longer include goodies/arpreset.pl, it's gone from the sources.


author: Ryan O'Hara <rohara@redhat.com> - 1.2.7-3
changelog:
  - Update spec file.
  - Add option to prevent respawn of child processes.
  - Remove duplicate command-line option code.
  - Use popt to generate usage message.
  - Fix pointer arithmetic for VRRP packets.
  - Fix comparison of primary IP address.
  - Fix loading of SSL certificate.
  - Fix typo in error message.
  - Update FSF address in GPLv2 license.
  - Remove debug message from if_get_by_ifname.


author: Jarod Wilson <jarod@redhat.com> [3.10.0-1.el7]
changelog:
  - [x86] fix !CONFIG_HYPERVISOR_GUEST compile (Andrew Jones)
  - [s390x] crash: Fuzzy live dump for Linux on System z (Hendrik Brueckner) [805120]
  - [xen] xenfv: fix hangs when kdumping (Andrew Jones) [845471]
  - [libata] export ata_port port_no attribute via /sys (David Milburn) [951181]
  - [s390x] kdump: Use 4 GiB for KEXEC_AUTO_THRESHOLD (Hendrik Brueckner) [953044]
  - [x86] hpet: allow user controlled mmap for user processes (Prarit Bhargava) [788727]
  - [mm] add memory tracking hooks (James Paradis) [725860]
  - [kernel] clocksource, fix !CONFIG_CLOCKSOURCE_WATCHDOG compile (Prarit Bhargava) [914709]
  - [x86] disable clocksource watchdog (Prarit Bhargava) [914709]
  - [kdump] x86, fix kdump and unsupported HW check (Prarit Bhargava) [923256]
  - [x86] support single cpu on guests only (Prarit Bhargava) [873806]
  - [kernel] Mark power5, power6, !Intel, and !AMD systems as unsupported (Prarit Bhargava) [870129]
  - [kernel] Backport RH specific TAINT flags (Prarit Bhargava) [870129]
  - [s390x] zfcpdump: Add user space tool (Hendrik Brueckner) [825189]
  - [kdump] crashkernel=auto fixes and cleanup (Dave Young) [804077]
  - [fedora] /dev/crash driver (Kyle McMartin) [808839]
  - [kdump] forward port crashkernel auto reservation code (Dave Young) [804077]
  - [block] Change scheduler to CFQ for ATA/SATA (Vivek Goyal) [811016]
  - [kernel] kbuild: AFTER_LINK (Roland McGrath)
  - [ppc64] disable INFINIBAND_EHCA temporarily, it ftbfs (Kyle McMartin)
  - [kernel] Add RHEL_{MAJOR,MINOR,RELEASE} to top level Makefile (Kyle McMartin)


author: Jarod Wilson <jarod@redhat.com> [3.10.0-2.el7]
changelog:
  - [scsi] sd: fix crash when UA received on DIF enabled device (Ewan Milne) [979440]
  - [md] dm-cache: add call to mark_tech_preview (Mike Snitzer) [982752]
  - [fs] nfs: have NFSv3 try server-specified auth flavors in turn (Jeff Layton) [977649]
  - [fs] nfs: have nfs_mount fake up a auth_flavs list when the server didn't provide it (Jeff Layton) [977649]
  - [fs] nfs: move server_authlist into nfs_try_mount_request (Jeff Layton) [977649]
  - [fs] nfs: refactor "need_mount" code out of nfs_try_mount (Jeff Layton) [977649]
  - [pci] ear: Reset link for devices below Root Port or Downstream Port (Myron Stowe) [797485]
  - [acpi] apei: Force fatal AER severity when component has been reset (Myron Stowe) [797485]
  - [pci] aer: Remove "extern" from function declarations (Myron Stowe) [797485]
  - [pci] aer: Move AER severity defines to aer.h (Myron Stowe) [797485]
  - [pci] aer: Set dev->__aer_firmware_first only for matching devices (Myron Stowe) [797485]
  - [pci] aer: Factor out HEST device type matching (Myron Stowe) [797485]
  - [pci] aer: Don't parse HEST table for non-PCIe devices (Myron Stowe) [797485]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-3.el7]
changelog:
  - [powerpc] mm/numa: Do not update sysfs cpu registration from invalid context (Steve Best) [967447]
  - [misc] MAINTAINERS: Add ACPI folks for ACPI-related things under drivers/pci (Myron Stowe) [984759]
  - [pci] Add CircuitCo vendor ID and subsystem ID (Myron Stowe) [984759]
  - [pci] Use pdev->pm_cap instead of pci_find_capability(.., PCI_CAP_ID_PM) (Myron Stowe) [984759]
  - [pci] Return early on allocation failures to unindent mainline code (Myron Stowe) [984759]
  - [pci] Simplify IOV implementation and fix reference count races (Myron Stowe) [984759]
  - [pci] Drop redundant setting of bus->is_added in virtfn_add_bus() (Myron Stowe) [984759]
  - [pci] pci-acpi: Use correct power state strings in messages (Myron Stowe) [984759]
  - [pci] Fix comment typo for pcie_pme_remove() (Myron Stowe) [984759]
  - [pci] Rename pci_release_bus_bridge_dev() to pci_release_host_bridge_dev() (Myron Stowe) [984759]
  - [pci] Fix refcount issue in pci_create_root_bus() error recovery path (Myron Stowe) [984759]
  - [pci] Convert alloc_pci_dev(void) to pci_alloc_dev(bus) (Myron Stowe) [984759]
  - [pci] Hide remove and rescan sysfs interfaces for SR-IOV virtual functions (Myron Stowe) [984759]
  - [pci] Add pcibios_release_device() (Myron Stowe) [984759]
  - [iommu] irq_remapping: Conserve interrupt resources when using multiple-MSIs (Myron Stowe) [984759]
  - [i2c] i2c-piix4: Add AMD CZ SMBus device ID (Myron Stowe) [984759]
  - [ata] ahci: Add AMD CZ SATA device ID (Myron Stowe) [984759]
  - [pci] Put Hudson-2 device IDs together (Myron Stowe) [984759]
  - [pci] Replace strict_strtoul() with kstrtoul() (Myron Stowe) [984759]
  - [pci] Finish SR-IOV VF setup before adding the device (Myron Stowe) [984759]
  - [pci] Fix comment typo for PCI_EXP_LNKCAP_CLKPM (Myron Stowe) [984759]
  - [acpi] pci_root: Use dev_printk(), acpi_handle_print(), pr_xxx() when possible (Myron Stowe) [984759]
  - [acpi] pci_root: Remove unused global list acpi_pci_roots (Myron Stowe) [984759]
  - [acpi] pci_root: Introduce "handle" local for economy of expression (Myron Stowe) [984759]
  - [acpi] pci_root: Combine duplicate adjacent "if" tests (Myron Stowe) [984759]
  - [pci] Allocate only as many MSI vectors as requested by driver (Myron Stowe) [984759]
  - [pci] Replace printks with appropriate pr_*() (Myron Stowe) [984759]
  - [pci] Fix kerneldoc for pci_disable_link_state() (Myron Stowe) [984759]
  - [x86] pci: Increase info->res_num before checking pci_use_crs (Myron Stowe) [984759]
  - [pci] Fix INTC comment typo for pci_swizzle_interrupt_pin() (Myron Stowe) [984759]
  - [pci] Convert ioapic.c to module_pci_driver (Myron Stowe) [984759]
  - [pci] Introduce pci_alloc_dev(struct pci_bus*) to replace alloc_pci_dev() (Myron Stowe) [984759]
  - [pci] Introduce pci_bus_{get|put}() to manage PCI bus reference count (Myron Stowe) [984759]
  - [pci] Unset resource if initial BAR value is invalid (Myron Stowe) [984759]
  - [pci] Consolidate calls to pcibios_bus_to_resource() in __pci_read_base() (Myron Stowe) [984759]
  - [pci] Add 0x prefix to BAR register position in __pci_read_base() (Myron Stowe) [984759]
  - [pci] aspm: Warn when driver asks to disable ASPM, but we can't do it (Myron Stowe) [984759]
  - [powerpc] pci: Use PCI_UNKNOWN for unknown power state (Myron Stowe) [984759]
  - [acpi] pci_root: Check acpi_resource_to_address64() return value (Myron Stowe) [984759]
  - [pci] Work around Ivytown NTB BAR size issue (Myron Stowe) [984759]
  - [net] sunrpc: Fix another issue with rpc_client_register() (Jeff Layton) [924649]
  - [net] sunrpc: Fix a deadlock in rpc_client_register() (Jeff Layton) [924649]
  - [net] sunrpc: PipeFS MOUNT notification optimization for dying clients (Jeff Layton) [924649]
  - [net] sunrpc: split client creation routine into setup and registration (Jeff Layton) [924649]
  - [net] sunrpc: fix races on PipeFS UMOUNT notifications (Jeff Layton) [924649]
  - [net] sunrpc: fix races on PipeFS MOUNT notifications (Jeff Layton) [924649]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-4.el7]
changelog:
  - [x86] signals: Merge EFLAGS bit clearing into a single statement (Jiri Olsa) [986216]
  - [x86] signals: Clear RF EFLAGS bit for signal handler (Jiri Olsa) [986216]
  - [x86] signals: Propagate RF EFLAGS bit through the signal restore call (Jiri Olsa) [986216]
  - [kernel] perf: Fix perf_lock_task_context() vs RCU (Jiri Olsa) [986216]
  - [kernel] perf: Remove WARN_ON_ONCE() check in __perf_event_enable() for valid scenario (Jiri Olsa) [986216]
  - [kernel] perf: Clone child context from parent context pmu (Jiri Olsa) [986216]
  - [kernel] perf: Fix interrupt handler timing harness (Jiri Olsa) [986216]
  - [kernel] perf: Drop sample rate when sampling is too slow (Jiri Olsa) [986216]
  - [kernel] hw_breakpoint: Introduce "struct bp_cpuinfo" (Jiri Olsa) [986216]
  - [kernel] hw_breakpoint: Simplify *register_wide_hw_breakpoint() (Jiri Olsa) [986216]
  - [kernel] hw_breakpoint: Introduce cpumask_of_bp() (Jiri Olsa) [986216]
  - [kernel] hw_breakpoint: Simplify the "weight" usage in toggle_bp_slot() paths (Jiri Olsa) [986216]
  - [kernel] hw_breakpoint: Simplify list/idx mess in toggle_bp_slot() paths (Jiri Olsa) [986216]
  - [kernel] perf: Add simple Haswell PMU support (Jiri Olsa) [986216]
  - [kernel] perf: Add const qualifier to perf_pmu_register's 'name' arg (Jiri Olsa) [986216]
  - [kernel] perf: Fix hypervisor branch sampling permission check (Jiri Olsa) [986216]
  - [kernel] perf: Check branch sampling priv level in generic code (Jiri Olsa) [986216]
  - [kernel] perf: Add sysfs entry to adjust multiplexing interval per PMU (Jiri Olsa) [986216]
  - [kernel] perf: Use hrtimers for event multiplexing (Jiri Olsa) [986216]
  - [kernel] perf: Fix hw breakpoints overflow period sampling (Jiri Olsa) [986216]
  - [tools] perf/tests: Check proper prev_state size for sched_switch tp (Jiri Olsa) [984998]
  - [tools] perf/tests: Omit end of the symbol check failure for test 1 (Jiri Olsa) [984998]
  - [tools] perf/script: Fix broken include in Context.xs (Jiri Olsa) [984998]
  - [tools] perf: Fix -ldw/-lelf link test when static linking (Jiri Olsa) [984998]
  - [tools] perf: Fix perf version generation (Jiri Olsa) [984998]
  - [tools] perf/stat: Fix per-socket output bug for uncore events (Jiri Olsa) [984998]
  - [tools] perf/symbols: Fix vdso list searching (Jiri Olsa) [984998]
  - [tools] perf/evsel: Fix missing increment in sample parsing (Jiri Olsa) [984998]
  - [tools] perf: Update symbol_conf.nr_events when processing attribute events (Jiri Olsa) [984998]
  - [tools] perf: Fix new_term() missing free on error path (Jiri Olsa) [984998]
  - [tools] perf: Fix parse_events_terms() segfault on error path (Jiri Olsa) [984998]
  - [tools] perf/evsel: Fix count parameter to read call in event_format__new (Jiri Olsa) [984998]
  - [tools] perf: Fix -x/--exclude-other option for report command (Jiri Olsa) [984998]
  - [tools] perf/evlist: Enhance perf_evlist__start_workload() (Jiri Olsa) [984998]
  - [tools] perf/record: Remove -f/--force option (Jiri Olsa) [984998]
  - [tools] perf/record: Remove -A/--append option (Jiri Olsa) [984998]
  - [tools] perf/stat: Avoid sending SIGTERM to random processes (Jiri Olsa) [984998]
  - [tools] perf: Include termios.h explicitly (Jiri Olsa) [984998]
  - [tools] perf/bench: Fix memory allocation fail check in mem{set, cpy} workloads (Jiri Olsa) [984998]
  - [tools] perf: Fix build errors with O and DESTDIR make vars set (Jiri Olsa) [984998]
  - [tools] perf: Fix output directory of Documentation/ (Jiri Olsa) [984998]
  - [tools] perf: Get only verbose output with V=1 (Jiri Olsa) [984998]
  - [tools] perf: Add missing liblk.a dependency for python/perf.so (Jiri Olsa) [984998]
  - [tools] perf: Remove '?=' Makefile STRIP assignment (Jiri Olsa) [984998]
  - [tools] perf: Replace multiple line assignment with multiple statements (Jiri Olsa) [984998]
  - [tools] perf: Replace tabs with spaces for all non-commands statements (Jiri Olsa) [984998]
  - [tools] perf: Add NO_BIONIC variable to confiure bionic setup (Jiri Olsa) [984998]
  - [tools] perf: Switch to full path C include directories (Jiri Olsa) [984998]
  - [tools] perf: Merge all *LDFLAGS* make variable into LDFLAGS (Jiri Olsa) [984998]
  - [tools] perf: Merge all *CFLAGS* make variable into CFLAGS (Jiri Olsa) [984998]
  - [tools] perf/evlist: Reset SIGTERM handler in workload child process (Jiri Olsa) [984998]
  - [tools] perf: Remove cwdlen from struct perf_session (Jiri Olsa) [984998]
  - [tools] perf: Remove frozen from perf_header struct (Jiri Olsa) [984998]
  - [tools] perf/tests: Fix exclude_guest|exclude_host checking for attr tests (Jiri Olsa) [984998]
  - [tools] perf/tests: Fix attr test for record -d option (Jiri Olsa) [984998]
  - [tools] perf: Final touches for CHK config move (Jiri Olsa) [984998]
  - [tools] perf: Move paths config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libnuma check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move stdlib check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libbfd check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libpython check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libperl check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move gtk2 check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move slang check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libaudit check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libunwind check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libdw check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move libelf check config into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move compiler and linker flags check into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move programs check into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Move arch check into config/Makefile (Jiri Olsa) [984998]
  - [tools] perf: Add automated make test suite (Jiri Olsa) [984998]
  - [tools] perf: Save parent pid in thread struct (Jiri Olsa) [984998]
  - [tools] perf/stats: Fix divide by 0 in variance (Jiri Olsa) [984998]
  - [tools] perf/kvm: Handle realloc failures (Jiri Olsa) [984998]
  - [tools] perf/evsel: Fix printing of perf_event_paranoid message (Jiri Olsa) [984998]
  - [tools] perf/test: Fix typo (Jiri Olsa) [984998]
  - [tools] perf/hists: Rename hist_entry__add_pair arguments (Jiri Olsa) [984998]
  - [tools] perf/diff: Use internal rb tree for hists__precompute (Jiri Olsa) [984998]
  - [tools] perf/report: Add report.percent-limit config variable (Jiri Olsa) [984998]
  - [tools] perf/top: Add --percent-limit option (Jiri Olsa) [984998]
  - [tools] perf/report: Add --percent-limit option (Jiri Olsa) [984998]
  - [tools] perf/report: Don't bother locking when adding hist entries (Jiri Olsa) [984998]
  - [tools] perf/hists: Move locking to its call-sites (Jiri Olsa) [984998]
  - [tools] perf/top: Get rid of *_threaded() functions (Jiri Olsa) [984998]
  - [tools] perf/top: Fix percent output when no samples collected (Jiri Olsa) [984998]
  - [tools] perf/top: Fix -E option behavior (Jiri Olsa) [984998]
  - [tools] perf/record: handle death by SIGTERM (Jiri Olsa) [984998]
  - [tools] perf: Handle JITed code in shared memory (Jiri Olsa) [984998]
  - [tools] perf/tests: Fix compile errors in bp_signal files (Jiri Olsa) [984998]
  - [tools] perf: Fix tab vs spaces issue in Makefile ifdef/endif (Jiri Olsa) [984998]
  - [tools] perf/hists browser: Use sort__has_sym (Jiri Olsa) [984998]
  - [tools] perf/top: Use sort__has_sym (Jiri Olsa) [984998]
  - [tools] perf/sort: Cleanup sort__has_sym setting (Jiri Olsa) [984998]
  - [tools] perf/sort: Reorder HISTC_SRCLINE index (Jiri Olsa) [984998]
  - [tools] perf/archive: Fix typo on Documentation (Jiri Olsa) [984998]
  - [tools] perf/sort: Consolidate sort_entry__setup_elide() (Jiri Olsa) [984998]
  - [tools] perf/sort: Separate out memory-specific sort keys (Jiri Olsa) [984998]
  - [tools] perf/sort: Factor out common code in sort_dimension__add() (Jiri Olsa) [984998]
  - [tools] perf/sort: Introduce sort__mode variable (Jiri Olsa) [984998]
  - [tools] perf/report: Fix alignment of symbol column when -v is given (Jiri Olsa) [984998]
  - [tools] perf/hists: Free unused mem info of a matched hist entry (Jiri Olsa) [984998]
  - [tools] perf/hists: Fix an invalid memory free on he->branch_info (Jiri Olsa) [984998]
  - [tools] perf: Fix bug in isupper() and islower() (Jiri Olsa) [984998]
  - [mm] thp: define HPAGE_PMD_* constants as BUILD_BUG() if !THP (Steve Best) [947166]
  - [powerpc] mm: Fix build warnings with CONFIG_TRANSPARENT_HUGEPAGE disabled (Steve Best) [947166]
  - [powerpc] mm: Optimize hugepage invalidate (Steve Best) [947166]
  - [powerpc] thp: Enable THP on PPC64 (Steve Best) [947166]
  - [powerpc] mm: split hugepage when using subpage protection (Steve Best) [947166]
  - [powerpc] mm: disable assert_pte_locked for collapse_huge_page (Steve Best) [947166]
  - [powerpc] mm: Prevent gcc to re-read the pagetables (Steve Best) [947166]
  - [powerpc] mm: Make linux pagetable walk safe with THP enabled (Steve Best) [947166]
  - [powerpc] thp: Add code to handle HPTE faults for hugepages (Steve Best) [947166]
  - [powerpc] mm: Update gup_pmd_range to handle transparent hugepages (Steve Best) [947166]
  - [powerpc] kvm: Handle transparent hugepage in KVM (Steve Best) [947166]
  - [powerpc] mm: Replace find_linux_pte with find_linux_pte_or_hugepte (Steve Best) [947166]
  - [powerpc] mm: Update find_linux_pte_or_hugepte to handle transparent hugepages (Steve Best) [947166]
  - [powerpc] mm: move find_linux_pte_or_hugepte and gup_hugepte to common code (Steve Best) [947166]
  - [powerpc] thp: Implement transparent hugepages for ppc64 (Steve Best) [947166]
  - [powerpc] thp: Double the PMD table size for THP (Steve Best) [947166]
  - [powerpc] mm: handle hugepage size correctly when invalidating hpte entries (Steve Best) [947166]
  - [mm] thp: deposit the transpare huge pgtable before set_pmd (Steve Best) [947166]
  - [mm] thp: don't use HPAGE_SHIFT in transparent hugepage code (Steve Best) [947166]
  - [mm] thp: withdraw the pgtable after pmdp related operations (Steve Best) [947166]
  - [mm] thp: add pmd args to pgtable deposit and withdraw APIs (Steve Best) [947166]
  - [mm] thp: use the correct function when updating access flags (Steve Best) [947166]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-5.el7]
changelog:
  - [fs] cifs: fix bad error handling in crypto code (Jeff Layton) [988398]
  - [fs] cifs: Fix a deadlock when a file is reopened (Sachin Prabhu) [988398]
  - [fs] cifs: Reopen the file if reconnect durable handle failed (Sachin Prabhu) [988398]
  - [fs] cifs: Fix minor endian error in durable handle patch series (Sachin Prabhu) [988398]
  - [fs] cifs: Reconnect durable handles for SMB2 (Sachin Prabhu) [988398]
  - [fs] cifs: Make SMB2_open use cifs_open_parms struct (Sachin Prabhu) [988398]
  - [fs] cifs: Introduce cifs_open_parms struct (Sachin Prabhu) [988398]
  - [fs] cifs: Request durable open for SMB2 opens (Sachin Prabhu) [988398]
  - [fs] cifs: Simplify SMB2 create context handling (Sachin Prabhu) [988398]
  - [fs] cifs: Simplify SMB2_open code path (Sachin Prabhu) [988398]
  - [fs] cifs: Respect create_options in smb2_open_file (Sachin Prabhu) [988398]
  - [fs] cifs: Fix lease context buffer parsing (Sachin Prabhu) [988398]
  - [fs] cifs: use sensible file nlink values if unprovided (Sachin Prabhu) [988398]
  - [fs] cifs: Limit allocation of crypto mechanisms to dialect which requires (Sachin Prabhu) [988398]
  - [fs] cifs: Don't pass inode to ->d_hash() and ->d_compare() (Sachin Prabhu) [988398]
  - [fs] cifs: fill TRANS2_QUERY_FILE_INFO ByteCount fields (Sachin Prabhu) [988398]
  - [fs] cifs: fix SMB2 signing enablement in cifs_enable_signing (Sachin Prabhu) [988398]
  - [fs] cifs: Fix build warning (Sachin Prabhu) [988398]
  - [fs] cifs: SMB3 Signing enablement (Sachin Prabhu) [988398]
  - [fs] cifs: Do not set DFS flag on SMB2 open (Sachin Prabhu) [988398]
  - [fs] cifs: fix static checker warning (Sachin Prabhu) [988398]
  - [fs] cifs: try to handle the MUST SecurityFlags sanely (Sachin Prabhu) [988398]
  - [fs] cifs: When server doesn't provide SecurityBuffer on SMB2Negotiate pick default (Sachin Prabhu) [988398]
  - [fs] cifs: Handle big endianness in NTLM (ntlmv2) authentication (Sachin Prabhu) [988398]
  - [fs] cifs: revalidate directories instiantiated via FIND_* in order to handle DFS referrals (Sachin Prabhu) [988398]
  - [fs] cifs: SMB2 FSCTL and IOCTL worker function (Sachin Prabhu) [988398]
  - [fs] cifs: Charge at least one credit, if server says that it supports multicredit (Sachin Prabhu) [988398]
  - [fs] cifs: Remove typo (Sachin Prabhu) [988398]
  - [fs] cifs: Some missing share flags (Sachin Prabhu) [988398]
  - [fs] cifs: using strlcpy instead of strncpy (Sachin Prabhu) [988398]
  - [fs] cifs: Update headers to update various SMB3 ioctl definitions (Sachin Prabhu) [988398]
  - [fs] cifs: Update cifs version number (Sachin Prabhu) [988398]
  - [fs] cifs: Add ability to dipslay SMB3 share flags and capabilities for debugging (Sachin Prabhu) [988398]
  - [fs] cifs: Add some missing SMB3 and SMB3.02 flags (Sachin Prabhu) [988398]
  - [fs] cifs: Add SMB3.02 dialect support (Sachin Prabhu) [988398]
  - [fs] cifs: Fix endian error in SMB2 protocol negotiation (Sachin Prabhu) [988398]
  - [fs] cifs: clean up the SecurityFlags write handler (Sachin Prabhu) [988398]
  - [fs] cifs: update the default global_secflags to include "raw" NTLMv2 (Sachin Prabhu) [988398]
  - [fs] move sectype to the cifs_ses instead of TCP_Server_Info (Sachin Prabhu) [988398]
  - [fs] cifs: track the enablement of signing in the TCP_Server_Info (Sachin Prabhu) [988398]
  - [fs] add new fields to smb_vol to track the requested security flavor (Sachin Prabhu) [988398]
  - [fs] cifs: add new fields to cifs_ses to track requested security flavor (Sachin Prabhu) [988398]
  - [fs] cifs: track the flavor of the NEGOTIATE reponse (Sachin Prabhu) [988398]
  - [fs] cifs: add new "Unspecified" securityEnum value (Sachin Prabhu) [988398]
  - [fs] cifs: factor out check for extended security bit into separate function (Sachin Prabhu) [988398]
  - [fs] cifs: move handling of signed connections into separate function (Sachin Prabhu) [988398]
  - [fs] cifs: break out lanman NEGOTIATE handling into separate function (Sachin Prabhu) [988398]
  - [fs] cifs: break out decoding of security blob into separate function (Sachin Prabhu) [988398]
  - [fs] cifs: remove the cifs_ses->flags field (Sachin Prabhu) [988398]
  - [fs] cifs: throw a warning if negotiate or sess_setup ops are passed NULL server or session pointers (Sachin Prabhu) [988398]
  - [fs] cifs: make decode_ascii_ssetup void return (Sachin Prabhu) [988398]
  - [fs] cifs: remove useless memset in LANMAN auth code (Sachin Prabhu) [988398]
  - [fs] cifs: remove protocolEnum definition (Sachin Prabhu) [988398]
  - [fs] cifs: add a "nosharesock" mount option to force new sockets to server to be created (Sachin Prabhu) [988398]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988312]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988312]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988312]
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988312]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988312]
  - [powerpc] hw_brk: Fix off by one error when validating DAWR region end (Steve Best) [843485]
  - [powerpc] hw_brk: Fix clearing of extraneous IRQ (Steve Best) [843485]
  - [powerpc] hw_brk: Fix setting of length for exact mode breakpoints (Steve Best) [843485]
  - [powerpc] perf: Add power8 EBB support (Steve Best) [969176]
  - [powerpc] perf: Core EBB support for 64-bit book3s (Steve Best) [969176]
  - [powerpc] perf: Don't enable if we have zero events (Steve Best) [969176]
  - [powerpc] powerpc/perf: Use existing out label in power_pmu_enable() (Steve Best) [969176]
  - [powerpc] perf: Freeze PMC5/6 if we're not using them (Steve Best) [969176]
  - [powerpc] powerpc/perf: Rework disable logic in pmu_disable() (Steve Best) [969176]
  - [powerpc] perf: Check that events only include valid bits on Power8 (Steve Best) [969176]
  - [ipc] sem: rename try_atomic_semop() to perform_atomic_semop(), docu update (Rik van Riel) [881820]
  - [ipc] sem: replace shared sem_otime with per-semaphore value (Rik van Riel) [881820]
  - [ipc] sem: always use only one queue for alter operations (Rik van Riel) [881820]
  - [ipc] sem: separate wait-for-zero and alter tasks into seperate queues (Rik van Riel) [881820]
  - [ipc] sem: cacheline align the semaphore structures (Rik van Riel) [881820]
  - [fs] gfs2: Add atomic_open support (Steven Whitehouse) [983098]
  - [fs] gfs2: Only do one directory search on create (Steven Whitehouse) [983098]
  - [fs] pstore: Add hsize argument in write_buf call of pstore_ftrace_call (Steve Best) [947161]
  - [powerpc] pseries: Support compression of oops text via pstore (Steve Best) [947161]
  - [powerpc] pseries: Re-organise the oops compression code (Steve Best) [947161]
  - [powerpc] pstore: Pass header size in the pstore write callback (Steve Best) [947161]
  - [powerpc] pseries: Read common partition via pstore (Steve Best) [947161]
  - [powerpc] pseries: Read of-config partition via pstore (Steve Best) [947161]
  - [powerpc] pseries: Distinguish between a os-partition and non-os partition (Steve Best) [947161]
  - [powerpc] pseries: Read rtas partition via pstore (Steve Best) [947161]
  - [powerpc] pseries: Read/Write oops nvram partition via pstore (Steve Best) [947161]
  - [powerpc] pseries: Introduce generic read function to read nvram-partitions (Steve Best) [947161]
  - [powerpc] pseries: Add version and timestamp to oops header (Steve Best) [947161]
  - [powerpc] pseries: Remove syslog prefix in uncompressed oops text (Steve Best) [947161]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-6.el7]
changelog:
  - [fs] locks: move file_lock_list to a set of percpu hlist_heads and convert file_lock_lock to an lglock (Jeff Layton) [976876]
  - [fs] seq_file: add seq_list_*_percpu helpers (Jeff Layton) [976876]
  - [fs] locks: give the blocked_hash its own spinlock (Jeff Layton) [976876]
  - [fs] locks: add a new "lm_owner_key" lock operation (Jeff Layton) [976876]
  - [fs] locks: turn the blocked_list into a hashtable (Jeff Layton) [976876]
  - [fs] locks: convert fl_link to a hlist_node (Jeff Layton) [976876]
  - [fs] locks: avoid taking global lock if possible when waking up blocked waiters (Jeff Layton) [976876]
  - [fs] locks: protect most of the file_lock handling with i_lock (Jeff Layton) [976876]
  - [fs] locks: encapsulate the fl_link list handling (Jeff Layton) [976876]
  - [fs] locks: make "added" in __posix_lock_file a bool (Jeff Layton) [976876]
  - [fs] locks: comment cleanups and clarifications (Jeff Layton) [976876]
  - [fs] locks: make generic_add_lease and generic_delete_lease static (Jeff Layton) [976876]
  - [fs] cifs: use posix_unblock_lock instead of locks_delete_block (Jeff Layton) [976876]
  - [fs] locks: drop the unused filp argument to posix_unblock_lock (Jeff Layton) [976876]
  - [scsi] ipr: IOA Status Code(IOASC) update (Steve Best) [731129]
  - [scsi] ipr: qc_fill_rtf() method should not store alternate status register (Steve Best) [731129]
  - [scsi] ipr: possible irq lock inversion dependency detected (Steve Best) [731129]
  - [fs] nfsd: when dentry_open returns an error do not propagate as struct file (Steve Dickson) [987090]
  - [net] sunrpc: underflow issue in decode_write_list() (Steve Dickson) [987090]
  - [fs] nfsd: fix minorversion support interface (Steve Dickson) [987090]
  - [fs] lockd: protect nlm_blocked access in nlmsvc_retry_blocked (Steve Dickson) [987090]
  - [fs] nfsd: support minorversion 1 by default (Steve Dickson) [987090]
  - [fs] nfsd: allow destroy_session over destroyed session (Steve Dickson) [987090]
  - [net] sunrpc: fix failures to handle -1 uid's (Steve Dickson) [987090]
  - [net] sunrpc: Don't schedule an upcall on a replaced cache entry (Steve Dickson) [987090]
  - [net] sunrpc: xpt_auth_cache should be ignored when expired (Steve Dickson) [987090]
  - [net] sunrpc/cache: ensure items removed from cache do not have pending upcalls (Steve Dickson) [987090]
  - [net] sunrpc/cache: use cache_fresh_unlocked consistently and correctly (Steve Dickson) [987090]
  - [net] sunrpc/cache: remove races with queuing an upcall (Steve Dickson) [987090]
  - [fs] nfsd: return delegation immediately if lease fails (Steve Dickson) [987090]
  - [fs] nfsd: do not throw away 4.1 lock state on last unlock (Steve Dickson) [987090]
  - [fs] nfsd: delegation-based open reclaims should bypass permissions (Steve Dickson) [987090]
  - [net] sunrpc: don't error out on small tcp fragment (Steve Dickson) [987090]
  - [net] sunrpc: fix handling of too-short rpc's (Steve Dickson) [987090]
  - [fs] nfsd: minor read_buf cleanup (Steve Dickson) [987090]
  - [fs] nfsd: fix decoding of compounds across page boundaries (Steve Dickson) [987090]
  - [fs] nfsd: clean up nfs4_open_delegation (Steve Dickson) [987090]
  - [fs] nfsd: Don't give out read delegations on creates (Steve Dickson) [987090]
  - [fs] nfsd: allow client to send no cb_sec flavors (Steve Dickson) [987090]
  - [fs] nfsd: fail attempts to request gss on the backchannel (Steve Dickson) [987090]
  - [fs] nfsd: implement minimal SP4_MACH_CRED (Steve Dickson) [987090]
  - [net] sunrpc: store gss mech in svc_cred (Steve Dickson) [987090]
  - [net] sunrpc: introduce init_svc_cred (Steve Dickson) [987090]
  - [fs] nfsd: avoid undefined signed overflow (Steve Dickson) [987090]
  - [net] sunrpc: the cache_detail in cache_is_valid is unused any more (Steve Dickson) [987090]
  - [net] sunrpc: server back channel needs no rpcbind method (Steve Dickson) [987090]
  - [fs] nfsd: fix compile in !CONFIG_NFSD_V4_SECURITY_LABEL case (Steve Dickson) [987090]
  - [fs] nfsd: Server implementation of MAC Labeling (Steve Dickson) [987090]
  - [fs] nfsd: Add NFS v4.2 support to the NFS server (Steve Dickson) [987090]
  - [security] fix cap_inode_getsecctx returning garbage (Steve Dickson) [987090]
  - [fs] nfsd: store correct client minorversion for >=4.2 (Steve Dickson) [987090]
  - [fs] nfsd: get rid of the unused functions in vfs (Steve Dickson) [987090]
  - [fs] nfs: Fix brainfart in attribute length calculation (Steve Dickson) [987090]
  - [fs] nfs: Fix a regression against the FreeBSD server (Steve Dickson) [987090]
  - [net] sunrpc/rpc_pipe: rpc_dir_inode_operations can be static (Steve Dickson) [987090]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Steve Dickson) [987090]
  - [fs] nfs: Make nfs_readdir revalidate less often (Steve Dickson) [987090]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Steve Dickson) [987090]
  - [net] sunrpc/rpc_pipe: set dentry operations at d_alloc time (Steve Dickson) [987090]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Steve Dickson) [987090]
  - [fs] nfs: Set NFS_CS_MIGRATION for NFSv4 mounts (Steve Dickson) [987090]
  - [fs] nfs: Refactor nfs4_init_session and nfs4_init_channel_attrs (Steve Dickson) [987090]
  - [fs] nfs: use pnfs_device maxcount for the objectlayout gdia_maxcount (Steve Dickson) [987090]
  - [fs] nfs: use pnfs_device maxcount for the blocklayout gdia_maxcount (Steve Dickson) [987090]
  - [fs] nfs: Fix gdia_maxcount calculation to fit in ca_maxresponsesize (Steve Dickson) [987090]
  - [fs] nfs: Improve legacy idmapping fallback (Steve Dickson) [987090]
  - [fs] nfs: end back channel session draining (Steve Dickson) [987090]
  - [fs] nfs: Apply v4.1 capabilities to v4.2 (Steve Dickson) [987090]
  - [fs] nfs: Clean up layout segment comparison helper names (Steve Dickson) [987090]
  - [fs] nfs: layout segment comparison helpers should take 'const' parameters (Steve Dickson) [987090]
  - [fs] nfs: Move the DNS resolver into the NFSv4 module (Steve Dickson) [987090]
  - [net] sunrpc/rpc_pipefs: only set rpc_dentry_ops if d_op isn't already set (Steve Dickson) [987090]
  - [fs] nfs: SETCLIENTID add the format string for the NETID (Steve Dickson) [987090]
  - [fs] nfs: Add in v4.2 callback operation (Steve Dickson) [987090]
  - [fs] nfs: Make callbacks minor version generic (Steve Dickson) [987090]
  - [fs] nfs: Add Kconfig entry for Labeled NFS V4 client (Steve Dickson) [987090]
  - [fs] nfs: Extend NFS xattr handlers to accept the security namespace (Steve Dickson) [987090]
  - [fs] nfs: Client implementation of Labeled-NFS (Steve Dickson) [987090]
  - [fs] nfs: Add label lifecycle management (Steve Dickson) [987090]
  - [fs] nfs: Add labels to client function prototypes (Steve Dickson) [987090]
  - [fs] nfs: Extend fattr bitmaps to support all 3 words (Steve Dickson) [987090]
  - [fs] nfs: Introduce new label structure (Steve Dickson) [987090]
  - [fs] nfs: Add label recommended attribute and NFSv4 flags (Steve Dickson) [987090]
  - [fs] nfs: Added NFS v4.2 support to the NFS client (Steve Dickson) [987090]
  - [security] selinux: Add new labeling type native labels (Steve Dickson) [987090]
  - [security] lsm: Add flags field to security_sb_set_mnt_opts for in kernel mount data (Steve Dickson) [987090]
  - [security] Add Hook to test if the particular xattr is part of a MAC model (Steve Dickson) [987090]
  - [security] Add hook to calculate context based on a negative dentry (Steve Dickson) [987090]
  - [fs] nfs: Close another NFSv4 recovery race (Steve Dickson) [987090]
  - [fs] nfs: Move dentry instantiation into the NFSv4-specific atomic open code (Steve Dickson) [987090]
  - [fs] nfs: Refactor _nfs4_open_and_get_state to set ctx->state (Steve Dickson) [987090]
  - [fs] nfs: pass the nfs_open_context to nfs4_do_open (Steve Dickson) [987090]
  - [fs] nfs: Remove redundant check for FMODE_EXEC in nfs_finish_open (Steve Dickson) [987090]
  - [net] sunrpc: Remove redundant call to rpc_set_running() in __rpc_execute() (Steve Dickson) [987090]
  - [net] sunrpc: Remove unused functions rpc_task_set/has_priority (Steve Dickson) [987090]
  - [net] sunrpc: Remove the unused helpers task_for_each() and task_for_first() (Steve Dickson) [987090]
  - [net] sunrpc: Remove unused function rpc_queue_empty (Steve Dickson) [987090]
  - [net] sunrpc: Fix a potential race in rpc_execute (Steve Dickson) [987090]
  - [fs] nfs: Simplify setting the layout header credential (Steve Dickson) [987090]
  - [fs] nfs: Enable state protection (Steve Dickson) [987090]
  - [fs] nfs: Use layout credentials for get_deviceinfo calls (Steve Dickson) [987090]
  - [fs] nfs: Ensure that test_stateid and free_stateid use correct credentials (Steve Dickson) [987090]
  - [fs] nfs: Ensure that reclaim_complete uses the right credential (Steve Dickson) [987090]
  - [fs] nfs: Ensure that layoutreturn uses the correct credential (Steve Dickson) [987090]
  - [fs] nfs: Ensure that layoutget is called using the layout credential (Steve Dickson) [987090]
  - [fs] nfs: Add NFSv4.2 protocol constants (Steve Dickson) [987090]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-7.el7]
changelog:
  - [vfio] type1: Fix leak on error path (Alex Williamson) [984081]
  - [vfio] Limit group opens (Alex Williamson) [984081]
  - [vfio] type1: Fix missed frees and zero sized removes (Alex Williamson) [984081]
  - [vfio] Provide module option to disable vfio_iommu_type1 hugepage support (Alex Williamson) [984081]
  - [vfio] hugepage support for vfio_iommu_type1 (Alex Williamson) [984081]
  - [vfio] Convert type1 iommu to use rbtree (Alex Williamson) [984081]
  - [iommu] Use pa and zx instead of casting (Alex Williamson) [984081]
  - [iommu] amd: Only unmap large pages from the first pte (Alex Williamson) [984081]
  - [iommu] Fix compiler warning on pr_debug (Alex Williamson) [984081]
  - [iommu] amd: Fix memory leak in free_pagetable (Alex Williamson) [984081]
  - [iommu] Split iommu_unmaps (Alex Williamson) [984081]
  - [iommu] intel, amd: Remove multifunction assumption around grouping (Alex Williamson) [984081]
  - [x86] spinlock: make ticket lock increment 2, unconditionally (Rik van Riel) [970737]
  - [virt] pvticketlock: When paravirtualizing ticket locks, increment by 2 (Rik van Riel) [970737]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990201]
  - [netdrv] bnx2x: Wait for MCP validity during AER (Michal Schmidt) [797460]
  - [virt] virtio_scsi: Fix virtqueue affinity setup (Asias He) [971826]
  - [fs] nfs: fix open(O_RDONLY|O_TRUNC) in NFS4.0 (Jeff Layton) [987615]
  - [watchdog] hpwdt: Add check for UEFI bits (Linda Knippers) [985195]
  - [powerpc] mm/numa: VPHN topology change updates all siblings (Steve Best) [973594]
  - [powerpc] powernv: Fix iommu initialization again (Steve Best) [979523]
  - [firmware] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [983597]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [983597]
  - [fs] pstore: Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [983597]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-8.el7]
changelog:
  - [net] ipv6: ip6_append_data_mtu did not care about pmtudisc and frag_size (Francesco Fusco) [994346] {CVE-2013-4163}
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Francesco Fusco) [988355] {CVE-2013-4162}
  - [kernel] sysctl: range checking in do_proc_dointvec_ms_jiffies_conv (Francesco Fusco) [972393]
  - [net] neigh: prevent overflowing params in /proc/sys/net/ipv4/neigh/ (Francesco Fusco) [972393]
  - [net] vhost-net: fix use-after-free in vhost_net_flush (Thomas Graf) [984723] {CVE-2013-4127}
  - [powerpc] tm: Fix return of active 64bit signals (Steve Best) [731886]
  - [powerpc] tm: Fix return of 32bit rt signals to active transactions (Steve Best) [731886]
  - [powerpc] tm: Fix restoration of MSR on 32bit signal return (Steve Best) [731886]
  - [powerpc] tm: Fix 32 bit non-rt signals (Steve Best) [731886]
  - [powerpc] tm: Fix writing top half of MSR on 32 bit signals (Steve Best) [731886]
  - [fs] nfs: verify open flags before allowing an atomic open (Jeff Layton) [984823]
  - [s390] zfcp: module parameter dbflevel for early debugging (Hendrik Brueckner) [994597]
  - [virt] virtio_net: fix the race between channels setting and refill (Jason Wang) [978153]
  - [kernel] audit: restore order of tty and ses fields in log output (Richard Guy Briggs) [983157]
  - [kernel] time/tick: Make oneshot broadcast robust vs. CPU offlining (Prarit Bhargava) [967464]
  - [virt] virtio_net: fix race in RX VQ processing (Jason Wang) [989409]
  - [virt] virtio: support unlocked queue poll (Jason Wang) [989409]
  - [powerpc] mm: Use the correct SLB(LLP) encoding in tlbie instruction (Steve Best) [993448]
  - [net] tuntap: do not zerocopy if iov needs more pages than MAX_SKB_FRAGS (Jason Wang) [982513]
  - [net] tuntap: correctly linearize skb when zerocopy is used (Jason Wang) [982513]
  - [virt] macvtap: do not zerocopy if iov needs more pages than MAX_SKB_FRAGS (Jason Wang) [990786]
  - [virt] macvtap: do not assume 802.1Q when send vlan packets (Jason Wang) [990786]
  - [virt] macvtap: fix the missing ret value of TUNSETQUEUE (Jason Wang) [990786]
  - [virt] macvtap: correctly linearize skb when zerocopy is used (Jason Wang) [982513]
  - [virt] macvtap: Perform GSO on forwarding path (Jason Wang) [895484]
  - [virt] macvtap: Let TUNSETOFFLOAD actually controll offload features (Jason Wang) [895484]
  - [virt] macvtap: Consistently use rcu functions (Jason Wang) [895484]
  - [virt] macvtap: Convert to using rtnl lock (Jason Wang) [895484]
  - [virt] macvtap: fix uninitialized return value macvtap_ioctl_set_queue() (Jason Wang) [731550]
  - [virt] macvtap: slient sparse warnings (Jason Wang) [731550]
  - [virt] macvtap: enable multiqueue flag (Jason Wang) [731550]
  - [virt] macvtap: add TUNSETQUEUE ioctl (Jason Wang) [731550]
  - [virt] macvtap: eliminate linear search (Jason Wang) [731550]
  - [virt] macvtap: introduce macvtap_get_vlan() (Jason Wang) [731550]
  - [virt] macvtap: do not add self to waitqueue if doing a nonblock read (Jason Wang) [731550]
  - [virt] macvtap: fix a possible race between queue selection and changing queues (Jason Wang) [731550]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-9.el7]
changelog:
  - [kernel] sched: disable autogroups by default (Josh Poimboeuf) [989741]
  - [powerpc] pseries: Add backward compatibilty to read old kernel oops-log (Steve Best) [991831]
  - [powerpc] pseries: Fix buffer overflow when reading from pstore (Steve Best) [991831]
  - [crypto] nx: saves chaining value from co-processor (Steve Best) [972656]
  - [crypto] nx: fix limits to sg lists for SHA-2 (Steve Best) [972656]
  - [crypto] nx: fix physical addresses added to sg lists (Steve Best) [972656]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-10.el7]
changelog:
  - [block] blk-mq: blk-mq should free bios in pass through case (Mike Snitzer) [960150]
  - [block] blk-mq: add missing percpu_counter_destroy for mq_usage_counter (Mike Snitzer) [960150]
  - [fs] direct-io: only inc_dec inode->i_dio_count for file systems (Mike Snitzer) [960150]
  - [lib] percpu_counter: make APIs irq safe (Mike Snitzer) [960150]
  - [block] null_blk: multi queue aware block test driver (Mike Snitzer) [960150]
  - [kernel] smp: Export __smp_call_function_single() (Mike Snitzer) [960150]
  - [block] blk-mq: change sw <-> hw queue mappings on hotplug events (Mike Snitzer) [960150]
  - [block] blk-mq: re-initialize queue data structure after CPU hotplug (Mike Snitzer) [960150]
  - [block] blk-mq: add queue freeze/unfreeze support (Mike Snitzer) [960150]
  - [block] blk-mq: fix timer infinite loop after first timeout event (Mike Snitzer) [960150]
  - [block] blk-mq: timeout fixes (Mike Snitzer) [960150]
  - [block] blk-mq: cpu hot plug_unplug fixes (Mike Snitzer) [960150]
  - [block] blk-mq: flush handling (Mike Snitzer) [960150]
  - [block] blk-mq: new multi-queue block IO queueing mechanism (Mike Snitzer) [960150]
  - [block] make rq->cmd_flags be 64-bit (Mike Snitzer) [960150]
  - [kernel] smp: don't warn about csd->flags having CSD_FLAG_LOCK cleared for !wait (Mike Snitzer) [960150]
  - [mm] sched: Allow uaccess in atomic with pagefault_disable() (Michael S. Tsirkin) [988029]
  - [mm] sched: Drop voluntary schedule from might_fault() (Michael S. Tsirkin) [988029]
  - [x86] uaccess s/might_sleep/might_fault/ (Michael S. Tsirkin) [988029]
  - [powerpc] uaccess s/might_sleep/might_fault/ (Michael S. Tsirkin) [988029]
  - [misc] asm-generic: uaccess s/might_sleep/might_fault/ (Michael S. Tsirkin) [988029]
  - [x86] efi: Disable secure boot if shim is in insecure mode (Lenny Szubowicz) [903815]
  - [kernel] modsign: Import certificates from UEFI Secure Boot (Lenny Szubowicz) [903815]
  - [kernel] keys: Add a system blacklist keyring (Lenny Szubowicz) [903815]
  - [crypto] asymmetric_keys: Add an EFI signature blob parser and key loader (Lenny Szubowicz) [903815]
  - [kernel] modsign: Fix including certificate twice when the signing_key.x509 already exists (Lenny Szubowicz) [903815]
  - [kernel] keys: Add a 'trusted' flag and a 'trusted only' flag (Lenny Szubowicz) [903815]
  - [kernel] modsign: Separate the kernel signature checking keyring from module signing (Lenny Szubowicz) [903815]
  - [kernel] modsign: Load *.x509 files into kernel keyring (Lenny Szubowicz) [903815]
  - [efi] Add EFI signature data types (Lenny Szubowicz) [903815]
  - [kernel] modsign: Always enforce module signing in a Secure Boot environment (Lenny Szubowicz) [903815]
  - [kernel] hibernate: Disable in a Secure Boot environment (Lenny Szubowicz) [903815]
  - [kernel] kexec: Disable in a secure boot environment (Lenny Szubowicz) [903815]
  - [x86] Lock down MSR writing in secure boot (Lenny Szubowicz) [903815]
  - [acpi] Ignore acpi_rsdp kernel parameter in a secure boot environment (Lenny Szubowicz) [903815]
  - [char] mem: Restrict /dev/mem and /dev/kmem in secure boot setups (Lenny Szubowicz) [903815]
  - [platform] asus-wmi: Restrict debugfs interface (Lenny Szubowicz) [903815]
  - [acpi] Limit access to custom_method (Lenny Szubowicz) [903815]
  - [x86] Lock down IO port access in secure boot environments (Lenny Szubowicz) [903815]
  - [pci] Lock down BAR access in secure boot environments (Lenny Szubowicz) [903815]
  - [x86] efi: Enable secure boot lockdown automatically when enabled in firmware (Lenny Szubowicz) [903815]
  - [kernel] Add a kernel parameter that will force on Secure Boot mode (Lenny Szubowicz) [903815]
  - [security] selinux: define mapping for new Secure Boot capability (Lenny Szubowicz) [903815]
  - [uapi] Add new secure boot capability (Lenny Szubowicz) [903815]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Jeff Layton) [908885 953186]
  - [kernel] audit: log the audit_names record type (Jeff Layton) [908885 953186]
  - [kernel] audit: add child record before the create to handle case where create fails (Jeff Layton) [908885 953186]
  - [md] dm-raid: silence compiler warning on rebuilds_per_group (Jonathan E Brassow) [970782]
  - [md] dm-raid: Fix raid_resume not reviving failed devices in all cases (Jonathan E Brassow) [970782]
  - [md] dm-raid: Break-up untidy function (Jonathan E Brassow) [970782]
  - [s390] zfcp: block queue limits with data router (Hendrik Brueckner) [976657]
  - [scsi] scsi_lib: Fix race between starved list and device removal (Ewan Milne) [986037]
  - [md] dm-switch: add switch target (Mike Snitzer) [983188]
  - [wireless] disable WiMAX support (John Linville) [915650]
  - [fs] gfs2: don't overrun reserved revokes (Benjamin Marzinski) [950622]
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [979131]
  - [x86] setup: Add cpu_has_hypervisor check to rh_check_supported() (Prarit Bhargava) [986048]
  - [x86] sched: Optimize switch_mm() for multi-threaded workloads (Rik van Riel) [990747]
  - [crypto] nx: fix concurrency issue (Steve Best) [996565]
  - [powerpc] mm: Fix fallthrough bug in hpte_decode (Steve Best) [993326]
  - [misc] Kconfig: enable building user namespace with xfs (Dave Chinner) [987255]
  - [fs] xfs: add capability check to free eofblocks ioctl (Dave Chinner) [987255]
  - [fs] xfs: create internal eofblocks structure with kuid_t types (Dave Chinner) [987255]
  - [fs] xfs: convert kuid_t to/from uid_t for internal structures (Dave Chinner) [987255]
  - [fs] xfs: ioctl check for capabilities in the current user namespace (Dave Chinner) [987255]
  - [fs] xfs: convert kuid_t to/from uid_t in ACLs (Dave Chinner) [987255]
  - [fs] xfs: create wrappers for converting kuid_t to/from uid_t (Dave Chinner) [987255]
  - [md] raid5: fix interaction of 'replace' and 'recovery' (Jes Sorensen) [978055]
  - [md] raid10: remove use-after-free bug (Jes Sorensen) [978055]
  - [md] raid1: fix bio handling problems in process_checks() (Jes Sorensen) [978055]
  - [md] Remove recent change which allows devices to skip recovery (Jes Sorensen) [978055]
  - [md] raid10: fix two problems with RAID10 resync (Jes Sorensen) [978055]
  - [md] raid10: fix bug which causes all RAID10 reshapes to move no data (Jes Sorensen) [978055]
  - [md] raid5: allow 5-device RAID6 to be reshaped to 4-device (Jes Sorensen) [978055]
  - [md] raid10: fix two bugs affecting RAID10 reshape (Jes Sorensen) [978055]
  - [md] Remember the last sync operation that was performed (Jes Sorensen) [978055]
  - [md] raid0: fix buglet in RAID5 -> RAID0 conversion (Jes Sorensen) [978055]
  - [md] raid10: check In_sync flag in 'enough()' (Jes Sorensen) [978055]
  - [md] raid10: locking changes for 'enough()' (Jes Sorensen) [978055]
  - [md] replace strict_strto*() with kstrto*() (Jes Sorensen) [978055]
  - [md] Wait for md_check_recovery before attempting device removal (Jes Sorensen) [978055]
  - [md] dm-raid: Add ability to restore transiently failed devices on resume (Jes Sorensen) [978055]
  - [net] ipv6: resend MLD report if a link-local address completes DAD (Flavio Leitner) [889455]
  - [net] ipv6: introduce per-interface counter for dad-completed ipv6 addresses (Flavio Leitner) [889455]
  - [net] ipv6: split duplicate address detection and router solicitation timer (Flavio Leitner) [889455]
  - [net] tcp: introduce a per-route knob for quick ack (Amerigo Wang) [984504]
  - [net] nlmon: use standard rtnetlink link api for add/del devices (Daniel Borkmann) [957721]
  - [net] nlmon: fix comparison in nlmon_is_valid_mtu (Daniel Borkmann) [957721]
  - [net] packet: nlmon: virtual netlink monitoring device for packet sockets (Daniel Borkmann) [957721]
  - [net] netlink: virtual tap device management (Daniel Borkmann) [957721]
  - [net] if_arp: add ARPHRD_NETLINK type (Daniel Borkmann) [957721]


