# changelog

author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-126
changelog:
  - Add lvm_read_metadata()
  - Allow auditadm to search /var/log/audit dir
  - Add lvm_read_metadata() interface
  - Allow confined users to run vmtools helpers
  - Fix userdom_common_user_template()
  - Generic systemd unit scripts do write check on /
  - Allow init_t to create init_tmp_t in /tmp.This is for temporary content created by generic unit files
  - Add additional fixes needed for init_t and setup script running in generic unit files
  - Allow general users to create packet_sockets
  - added connlcli port
  - Add init_manage_transient_unit() interface
  - Allow init_t (generic unit files) to manage rpc state date as we had it for initrc_t
  - Fix userdomain.te to require passwd class
  - devicekit_power sends out a signal to all processes on the message bus when power is going down
  - Dontaudit rendom domains listing /proc and hittping system_map_t
  - Dontauit leaks of var_t into ifconfig_t
  - Allow domains that transition to ssh_t to manipulate its keyring
  - Define oracleasm_t as a device node
  - Change to handle /root as a symbolic link for os-tree
  - Allow sysadm_t to create packet_socket, also move some rules to attributes
  - Add label for openvswitch port
  - Remove general transition for files/dirs created in /etc/mail which got etc_aliases_t label.
  - Allow postfix_local to read .forward in pcp lib files
  - Allow pegasus_openlmi_storage_t to read lvm metadata
  - Add additional fixes for pegasus_openlmi_storage_t
  - Allow bumblebee to manage debugfs
  - Make bumblebee as unconfined domain
  - Allow snmp to read etc_aliases_t
  - Allow lscpu running in pegasus_openlmi_storage_t to read /dev/mem
  - Allow pegasus_openlmi_storage_t to read /proc/1/environ
  - Dontaudit read gconf files for cupsd_config_t
  - make vmtools as unconfined domain
  - Add vmtools_helper_t for helper scripts. Allow vmtools shutdonw a host and run ifconfig.
  - Allow collectd_t to use a mysql database
  - Allow ipa-otpd to perform DNS name resolution
  - Added new policy for keepalived
  - Allow openlmi-service provider to manage transitient units and allow stream connect to sssd
  - Add additional fixes new pscs-lite+polkit support
  - Add labeling for /run/krb5kdc
  - Change w3c_validator_tmp_t to httpd_w3c_validator_tmp_t in F20
  - Allow pcscd to read users proc info
  - Dontaudit smbd_t sending out random signuls
  - Add boolean to allow openshift domains to use nfs
  - Allow w3c_validator to create content in /tmp
  - zabbix_agent uses nsswitch
  - Allow procmail and dovecot to work together to deliver mail
  - Allow spamd to execute files in homedir if boolean turned on
  - Allow openvswitch to listen on port 6634
  - Add net_admin capability in collectd policy
  - Fixed snapperd policy
  - Fixed bugsfor pcp policy
  - Allow dbus_system_domains to be started by init
  - Fixed some interfaces
  - Add kerberos_keytab_domain attribute
  - Fix snapperd_conf_t def


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-127
changelog:
  - Add snapperd_home_t for HOME_DIR/.snapshots directory
  - Make sosreport as unconfined domain
  - Allow sosreport to execute grub2-probe
  - Allow NM to manage hostname config file
  - Allow systemd_timedated_t to dbus chat with rpm_script_t
  - Allow lsmd plugins to connect to http/ssh/http_cache ports by default
  - Add lsmd_plugin_connect_any boolean
  - Allow mozilla_plugin to attempt to set capabilities
  - Allow lsdm_plugins to use tcp_socket
  - Dontaudit mozilla plugin from getattr on /proc or /sys
  - Dontaudit use of the keyring by the services in a sandbox
  - Dontaudit attempts to sys_ptrace caused by running ps for mysqld_safe_t
  - Allow rabbitmq_beam to connect to jabber_interserver_port
  - Allow logwatch_mail_t to transition to qmail_inject and queueu
  - Added new rules to pcp policy
  - Allow vmtools_helper_t to change role to system_r
  - Allow NM to dbus chat with vmtools
  - Fix couchdb_manage_files() to allow manage couchdb conf files
  - Add support for /var/run/redis.sock
  - dontaudit gpg trying to use audit
  - Allow consolekit to create log directories and files
  - Fix vmtools policy to allow user roles to access vmtools_helper_t
  - Allow block_suspend cap2 for ipa-otpd
  - Allow pkcsslotd to read users state
  - Add ioctl to init_dontaudit_rw_stream_socket
  - Add systemd_hostnamed_manage_config() interface
  - Remove transition for temp dirs created by init_t
  - gdm-simple-slave uses use setsockopt
  - sddm-greater is a xdm type program


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-128
changelog:
  - Make snapperd as unconfined domain and add additional fixes for it
  - Remove nsplugin.pp module on upgrade


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-129
changelog:
  - Allow block_suspend cap2 for systemd-logind and rw dri device
  - Add labeling for /usr/libexec/nm-libreswan-service
  - Allow locallogin to rw xdm key to make Virtual Terminal login providing smartcard pin working
  - Add xserver_rw_xdm_keys()
  - Allow rpm_script_t to dbus chat also with systemd-located
  - Fix ipa_stream_connect_otpd()
  - update lpd_manage_spool() interface
  - Allow krb5kdc to stream connect to ipa-otpd
  - Add ipa_stream_connect_otpd() interface
  - Allow vpnc to unlink NM pids
  - Add networkmanager_delete_pid_files()
  - Allow munin plugins to access unconfined plugins
  - update abrt_filetrans_named_content to cover /var/spool/debug
  - Label /var/spool/debug as abrt_var_cache_t
  - Allow rhsmcertd to connect to squid port
  - Make docker_transition_unconfined as optional boolean
  - Allow certmonger to list home dirs


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-130
changelog:
  - Change userdom_use_user_inherited_ttys to userdom_use_user_ttys for systemd-tty-ask
  - Add sysnet_filetrans_named_content_ifconfig() interface
  - Allow ctdbd to connect own ports
  - Fix samba_export_all_rw booleanto cover also non security dirs
  - Allow swift to exec rpm in swift_t and allow to create tmp files/dirs
  - Allow neutron to create /run/netns with correct labeling
  - Allow kerberos keytab domains to manage sssd/userdomain keys"
  - Allow to run ip cmd in neutron_t domain


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-131
changelog:
  - Added pcp rules
  - dontaudit openshift_cron_t searching random directories, should be back ported to RHEL6
  - clean up ctdb.te
  - Allow ctdbd to connect own ports
  - Fix samba_export_all_rw booleanto cover also non security dirs
  - Allow swift to exec rpm in swift_t and allow to create tmp files/dirs
  - Allow neutron to create /run/netns with correct labeling
  - Allow certmonger to list home dirs


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-132
changelog:
  - Modify xdm_write_home to allow create files/links in /root with xdm_home_
  - Allow virt domains to read network state
  Resolves:#1072019


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-133
changelog:
  - Allow numad to write scan_sleep_millisecs
  - Turn on entropyd_use_audio boolean by default
  - Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf.
  - Allow lscpu running as rhsmcertd_t to read /proc/sysinfo
  - Fix label on irclogs in the homedir
  - Allow kerberos_keytab_domain domains to manage keys until we get sssd fix
  - Allow postgresql to use ldap
  - Add missing syslog-conn port
  - Add support for /dev/vmcp and /dev/sclp
  Resolves:#1069310


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-134
changelog:
  - Allow unpriv SELinux users to dbus chat with firewalld
  - Add lvm_write_metadata()
  - Label /etc/yum.reposd dir as system_conf_t. Should be safe because system_conf_t is base_ro_file_type
  - Allow pegasus_openlmi_storage_t to write lvm metadata
  - Add hide_broken_symptoms for kdumpgui because of systemd bug
  - Make kdumpgui_t as unconfined domain
  Resolves:#1044299
  - Allow docker to connect to tcp/5000


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-137
changelog:
  - Allow vmtools_helper_t to execute bin_t
  - Add support for /usr/share/joomla
  - /var/lib/containers should be labeled as openshift content for now
  - Allow docker domains to talk to the login programs, to allow a process to login into the container
  - Allow install_t do dbus chat with NM
  - Fix interface names in anaconda.if
  - Add install_t for anaconda. A new type is a part of anaconda policy
  - sshd to read network sysctls


author: Lukas Vrabec <lvrabec@redhat.com> 3.12.1-138
changelog:
  - Make rtas_errd_t as unconfined domain for F20.It needs additional fixes. It runs rpm at least.
  - Allow net_admin cap for fence_virtd running as fenced_t
  - Make  abrt-java-connector working
  - Make cimtest script 03_defineVS.py of ComputerSystem group working
  - Fix git_system_enable_homedirs boolean
  - Allow munin mail plugins to read network systcl


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-139
changelog:
  - Allow collectd to talk to libvirt
  - Allow chrome_sandbox to use leaked unix_stream_sockets
  - Dontaudit leaks of sockets into chrome_sandbox_t
  - If you create a cups directory in /var/cache then it should be labeled cups_rw_etc_t
  - Run vmtools as unconfined domains
  - Allow snort to manage its log files
  - Allow systemd_cronjob_t to be entered via bin_t
  - Allow procman to list doveconf_etc_t
  - allow keyring daemon to create content in tmpfs directories
  - Add proper labelling for icedtea-web
  - vpnc is creating content in networkmanager var run directory
  - Label sddm as xdm_exec_t to make KDE working again
  - Allow postgresql to read network state
  - Allow java running as pki_tomcat to read network sysctls
  - Fix cgroup.te to allow cgred to read cgconfig_etc_t
  - Allow beam.smp to use ephemeral ports
  - Allow winbind to use the nis to authenticate passwords


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-140
changelog:
  - Allow docker to read tmpfs_t symlinks
  - Allow sandbox svirt_lxc_net_t to talk to syslog and to sssd over stream sockets


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-142
changelog:
  - Add support for /var/spool/rhsm/debug
  - Make virt_sandbox_use_audit as True by default
  - Allow svirt_sandbox_domains to ptrace themselves


author: Lukas Vrabec <lvrabec@redhat.com> 3.12.1-143
changelog:
  - Add additional fixes for rtas_errd
  - Fix transitions for tmp/tmpfs in rtas.te
  - Allow rtas_errd to readl all sysctls


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-144
changelog:
  - allow anaconda to dbus chat with systemd-localed
  - Add fixes for haproxy based on bperkins@redhat.com
  - Allow cmirrord to make dmsetup working
  - Allow NM to execute arping
  - Allow users to send messages through talk
  - Add userdom_tmp_role for secadm_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-145
changelog:
  - Allow also unpriv user to run vmtools
  - Allow secadm to read /dev/urandom and meminfo
  Resolves:#1079250
  - Add booleans to allow docker processes to use nfs and samba
  - Add mdadm_tmpfs support
  - Dontaudit net_amdin for /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51-2.4.5.1.el7.x86_64/jre-abrt/bin/java running as pki_tomcat_t
  - Allow vmware-user-sui to use user ttys
  - Allow talk 2 users logged via console too
  - Allow ftp services to manage xferlog_t
  - Make all pcp domanis as unconfined for RHEL7.0 beucause of new policies
  - allow anaconda to dbus chat with systemd-localed


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-146
changelog:
  - add gnome_append_home_config()
  - Allow thumb to append GNOME config home files
  - Allow rasdaemon to rw /dev/cpu//msr
  - fix /var/log/pki file spec
  - make bacula_t as auth_nsswitch domain
  - Identify pki_tomcat_cert_t as a cert_type
  - Define speech-dispater_exec_t as an application executable
  - Add a new file context for /var/named/chroot/run directory
  - update storage_filetrans_all_named_dev for sg* devices
  - Allow auditctl_t  to getattr on all removeable devices
  - Allow nsswitch_domains to stream connect to nmbd
  - Allow unprivusers to connect to memcached
  - label /var/lib/dirsrv/scripts-INSTANCE as bin_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-147
changelog:
  - Back port fixes for pegasus_openlmi_admin_t from rawhide
  Resolves:#1080973
  - Add labels for ostree
  - Add SELinux awareness for NM
  - Label /usr/sbin/pwhistory_helper as updpwd_exec_t


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-148
changelog:
  - Allow kdm to send signull to remote_login_t process
  - Add gear policy
  - Turn on gear_port_t
  - Allow cgit to read gitosis lib files by default
  - Allow vdagent to read xdm state
  - Allow NM and fcoeadm to talk together over unix_dgram_socket


author: Miroslav Grepl<mgrepl@redhat.com> 3.12.1-149
changelog:
  - Allow xauth_t to read user_home_dir_t lnk_file
  - Add labeling for lightdm-data
  - Allow certmonger to manage ipa lib files
  - Add support for /var/lib/ipa
  - Allow pegasus to getattr virt_content
  - Added some new rules to pcp policy
  - Allow chrome_sandbox to execute config_home_t
  - Add support for ABRT FAF


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-151
changelog:
  - varnishd wants chown capability
  - update ntp_filetrans_named_content() interface
  - Add additional fixes for neutron_t. #1083335
  - Dontaudit getattr on proc_kcore_t
  - Allow pki_tomcat_t to read ipa lib files
  - Allow named_filetrans_domain to create /var/cache/ibus with correct labelign
  - Allow init_t run /sbin/augenrules
  - Add dev_unmount_sysfs_fs and sysnet_manage_ifconfig_run interfaces
  - Allow unpriv SELinux user to use sandbox
  - Add default label for /tmp/hsperfdata_root


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-152
changelog:
  - Fix Multiple same specifications for /var/named/chroot/dev/zero
  - Add labels for /var/named/chroot_sdb/dev devices
  - Add support for strongimcv
  - Use kerberos_keytab_domains in auth_use_nsswitch
  - Update auth_use_nsswitch to make all these types as kerberos_keytab_domain to
  - Allow net_raw cap for neutron_t and send sigkill to dnsmasq
  - Fix ntp_filetrans_named_content for sntp-kod file
  - Add httpd_dbus_sssd boolean
  - Dontaudit exec insmod in boinc policy
  - Rename kerberos_keytab_domain to kerberos_keytab_domains
  - Add kerberos_keytab_domain()
  - Fix kerberos_keytab_template()
  - Make all domains which use kerberos as kerberos_keytab_domain
  Resolves:#1083670
  - Allow kill capability to winbind_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.12.1-154
changelog:
  - Add support for us_cli ports
  - Fix labeling for /var/run/user/<UID>/gvfs
  - add support for tcp/9697
  - Additional rules required by openstack,  needs backport to F20 and RHEL7
  - Additional access required by docker
  - ALlow motion to use tcp/8082 port
  - Allow init_t to setattr/relabelfrom dhcp state files
  - Dontaudit antivirus domains read access on all security files by default
  - Add missing alias for old amavis_etc_t type
  - Allow block_suspend cap for haproxy
  - Additional fixes for  instack overcloud
  - Allow OpenStack to read mysqld_db links and connect to MySQL
  - Remove dup filename rules in gnome.te
  - Allow sys_chroot cap for httpd_t and setattr on httpd_log_t
  - Allow iscsid to handle own unit files
  - Add iscsi_systemctl()
  - Allow mongod to create also sock_files in /run with correct labeling
  - Allow httpd to send signull to apache script domains and don't audit leaks
  - Allow rabbitmq_beam to connect to httpd port
  - Allow aiccu stream connect to pcscd
  - Allow dmesg to read hwdata and memory dev
  - Allow all freeipmi domains to read/write ipmi devices
  - Allow sblim_sfcbd to use also pegasus-https port
  - Allow rabbitmq_epmd to manage rabbit_var_log_t files
  - Allow chronyd to read /sys/class/hwmon/hwmon1/device/temp2_input
  - Allow docker to status any unit file and allow it to start generic unit files


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-2
changelog:
  - Allow locate to look at files/directories without labels, and chr_file and blk_file on non dev file systems
  - Label /usr/lib/erlang/erts.*/bin files as bin_t
  - Add files_dontaudit_access_check_home_dir() inteface.
  - Allow udev_t mounton udev_var_run_t dirs #(1128618)
  - Add systemd_networkd_var_run_t labeling for /var/run/systemd/netif and allow systemd-networkd to manage it.
  - Add init_dontaudit_read_state() interface.
  - Add label for ~/.local/share/fonts
  - Allow unconfined_r to access unconfined_service_t.
  - Allow init to read all config files
  - Add new interface to allow creation of file with lib_t type
  - Assign rabbitmq port.
  - Allow unconfined_service_t to dbus chat with all dbus domains
  - Add new interfaces to access users keys.
  - Allow domains to are allowed to mounton proc to mount on files as well as dirs
  - Fix labeling for HOME_DIR/tmp and HOME_DIR/.tmp directories.
  - Add a port definition for shellinaboxd
  - Label ~/tmp and ~/.tmp directories in user tmp dirs as user_tmp_t
  - Allow userdomains to stream connect to pcscd for smart cards
  - Allow programs to use pam to search through user_tmp_t dires (/tmp/.X11-unix)
  - Update to rawhide-contrib changes
  Resolves:#1123844


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-3
changelog:
  - Add back kill permisiion for system class
  - Allow iptables read fail2ban logs.
  - Fix radius labeled ports
  - Add userdom_manage_user_tmpfs_files interface
  - Allow libreswan to connect to VPN via NM-libreswan.
  - Label 4101 tcp port as brlp port
  - fix dev_getattr_generic_usb_dev interface
  - Allow all domains to read fonts
  - Make sure /run/systemd/generator and system is labeled correctly on creation.
  - Dontaudit aicuu to search home config dir. 
  - Make keystone_cgi_script_t domain. 
  Resolves:#1138424
  - Fix bug in drbd policy, 
  - Added support for cpuplug. 
  - ALlow sanlock_t to read sysfs_t.
  - Added sendmail_domtrans_unconfined interface
  - Fix broken interfaces
  - radiusd wants to write own log files.
  - Label /usr/libexec/rhsmd as rhsmcertd_exec_t
  - Allow rhsmcertd send signull to setroubleshoot. 
  - Allow rhsmcertd manage rpm db. 
  - Added policy for blrtty. 
  - Fix keepalived policy
  - Allow rhev-agentd dbus chat with systemd-logind.
  - Allow keepalived manage snmp var lib sock files.
  - Add support for /var/lib/graphite-web
  - Allow NetworkManager to create Bluetooth SDP sockets
  - It's going to do the the discovery for DUN service for modems with Bluez 5.
  - Allow swift to connect to all ephemeral ports by default.
  - Allow sssd to read selinux config to add SELinux user mapping.
  - Allow lsmd to search own plguins.
  - Allow abrt to read /dev/memto generate an unique machine_id and uses  sosuploader's algorithm based off dmidecode[1] fields.
  - ALlow zebra for user/group look-ups.
  - Allow nova domains to getattr on all filesystems.
  - Allow collectd sys_ptrace and dac_override caps because of reading of /proc/%i/io for several processes.
  - Allow pppd to connect to /run/sstpc/sstpc-nm-sstp-service-28025 over unix stream socket.
  - Allow rhnsd_t to manage also rhnsd config symlinks.
  - ALlow user mail domains to create dead.letter.
  - Allow rabbitmq_t read rabbitmq_var_lib_t lnk files. 
  - Allow pki-tomcat to change SELinux object identity.
  - Allow radious to connect to apache ports to do OCSP check
  - Allow git cgi scripts to create content in /tmp
  - Allow cockpit-session to do GSSAPI logins.
  - Allow sensord read in /proc 
  - Additional access required by usbmuxd


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-5
changelog:
  - Add back kill permisiion for service class
  Resolves:#1150011
  - Make rhsmcertd_t also as dbus domain.
  - Allow named to create DNS_25 with correct labeling.
  - Add cloudform_dontaudit_write_cloud_log()
  - Call auth_use_nsswitch to apache to read/write cloud-init keys.
  - Allow cloud-init to dbus chat with certmonger.
  - Fix path to mon_statd_initrc_t script.
  - Allow all RHCS services to read system state.
  - Allow dnssec_trigger_t to execute unbound-control in own domain.
  - kernel_read_system_state needs to be called with type. Moved it to antivirus.if.
  - Added policy for mon_statd and mon_procd services. BZ (1077821)
  - Allow opensm_t to read/write /dev/infiniband/umad1.
  - Allow mongodb to manage own log files.
  - Allow neutron connections to system dbus.
  - Add support for /var/lib/swiftdirectory.
  - Allow nova-scheduler to read certs.
  - Allow openvpn to access /sys/fs/cgroup dir.
  - Allow openvpn to execute  systemd-passwd-agent in  systemd_passwd_agent_t to make openvpn working with systemd.
  - Fix samba_export_all_ro/samba_export_all_rw booleans to dontaudit search/read security files.
  - Add auth_use_nsswitch for portreserve to make it working with sssd.
  - automount policy is non-base module so it needs to be called in optional block.
  - ALlow sensord to getattr on sysfs.
  - Label /usr/share/corosync/corosync as cluster_exec_t.
  - Allow lmsd_plugin to read passwd file. BZ(1093733)
  - Allow read antivirus domain all kernel sysctls.
  - Allow mandb to getattr on file systems
  - Allow nova-console to connect to mem_cache port.
  - Make sosreport as unconfined domain.
  - Allow mondogdb to  'accept' accesses on the tcp_socket port.
  - ALlow sanlock to send a signal to virtd_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-7
changelog:
  - Allow modemmanger to connectto itself
  Resolves:#1120152 
  - Allow pki_tomcat to create link files in /var/lib/pki-ca.
  Resolves:#1121744 
  - varnishd needs to have fsetid capability
  Resolves:#1125165
  - Allow snapperd to dbus chat with system cron jobs.
  Resolves:#1152447
  - Allow dovecot to create user's home directory when they log into IMAP 
  Resolves:#1152773   
  - Add labeling for /usr/sbin/haproxy-systemd-wrapper wrapper to make haproxy running haproxy_t.
  - ALlow listen and accept on tcp socket for init_t in MLS. Previously it was for xinetd_t. 
  - Allow nslcd to execute netstat.
  - Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
  - Allow nslcd to read /dev/urandom.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-8
changelog:
  - Allow guest to connect to libvirt using unix_stream_socket.
  - Allow all bus client domains to dbus chat with unconfined_service_t.
  - Allow inetd service without own policy to run in inetd_child_t which is unconfined domain.
  - Make opensm as nsswitch domain to make it working with sssd.
  - Allow brctl to read meminfo.
  - Allow winbind-helper to execute ntlm_auth in the caller domain.
  Resolves:#1160339
  - Make plymouthd as nsswitch domain to make it working with sssd.
  Resolves:#1160196
  - Make drbd as nsswitch domain to make it working with sssd.
  - Make conman as nsswitch domain to make ipmitool.exp runing as conman_t working.
  - Add support for /var/lib/sntp directory.
  - Add fixes to allow docker to create more content in tmpfs ,and donaudit reading /proc
  - Allow winbind to read usermodehelper
  - Allow telepathy domains to execute shells and bin_t
  - Allow gpgdomains to create netlink_kobject_uevent_sockets
  - Allow mongodb to bind to the mongo port and mongos to run as mongod_t
  - Allow abrt to read software raid state.
  - Allow nslcd to execute netstat.
  - Allow dovecot to create user's home directory when they log into IMAP.
  - Allow login domains to create kernel keyring with different level.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-9
changelog:
  - Dontaudit access check on setfiles/load_policy for sssd_t.
  Resolves:#1140106
  - Add kdump_rw_inherited_kdumpctl_tmp_pipes()
  Resolves:#1156442
  - Make linuxptp services as unconfined.
  - Added new policy linuxptp.
  Resolves:#1149693
  - Label keystone cgi files as keystone_cgi_script_exec_t.
  Resolves:#1138424
  - Make tuned as unconfined domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-10
changelog:
  - Label /etc/strongimcv as ipsec_conf_file_t.
  - Add support for /usr/bin/start-puppet-ca helper script
  Resolves:#1160727
  - Allow rpm scripts to enable/disable transient systemd units.
  Resolves:#1154613 
  - Make kpropdas nsswitch domain
  Resolves:#1153561
  - Make all glance domain as nsswitch domains
  Resolves:#1113281
  - Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active
  - Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t
  Resolves:#1140106


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-11
changelog:
  - Allow radius to bind tcp/1812 radius port.
  - Dontaudit list user_tmp files for system_mail_t.
  - Label virt-who as virtd_exec_t.
  - Allow rhsmcertd to send a null signal to virt-who running as virtd_t.
  - Add missing alias for _content_rw_t.
  Resolves:#1089177
  - Allow spamd to access razor-agent.log.
  - Add fixes for sfcb from libvirt-cim TestOnly bug.
  - Allow NetworkManager stream connect on openvpn.
  - Make /usr/bin/vncserver running as unconfined_service_t.
  - getty_t should be ranged in MLS. Then also local_login_t runs as ranged domain.
  - Label /etc/docker/certs.d as cert_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-12
changelog:
  - Add seutil_dontaudit_access_check_semanage_module_store() interface
  Resolves:#1140106
  - Update to have all _systemctl() interface also init_reload_services().
  - Dontaudit access check on SELinux module store for sssd.
  - Add labeling for /sbin/iw.
  - Allow named_filetrans_domain to create ibus directory with correct labeling.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-13
changelog:
  - Remove old pkcsslotd.pp from minimum package
  - Allow rlogind to use also rlogin ports.
  - Add support for /usr/libexec/ntpdate-wrapper. Label it as ntpdate_exec_t.
  - Allow bacula to connect also to postgresql.
  - Label /usr/libexec/tomcat/server as tomcat_exec_t
  - Add support for /usr/sbin/ctdbd_wrapper
  - Add support for /usr/libexec/ppc64-diag/rtas_errd
  - Allow rpm_script_roles to access system_mail_t
  - Allow brltty to create /var/run/brltty
  - Allow lsmd plugin to access netlink_route_socket
  - Allow smbcontrol to read passwd
  - Add support for /usr/libexec/sssd/selinux_child and create sssd_selinux_manager_t domain for it
  Resolves:#1140106
  - Allow osad to execute rhn_check
  - Allow load_policy to rw inherited sssd pipes because of selinux_child
  - Allow admin SELinux users mounting / as private within a new mount namespace as root in MLS
  - Add additional fixes for su_restricted_domain_template to make moving to sysadm_r and trying to su working correctly
  - Add additional booleans substitions


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-14
changelog:
  - Allow virt_qemu_ga_t to execute kmod.
  - Add missing files_dontaudit_list_security_dirs() for smbd_t in samba_export_all_ro boolean.
  - Add additionnal MLS attribute for oddjob_mkhomedir to create homedirs.
  Resolves:#1113725
  - Enable OpenStack cinder policy
  - Add support for /usr/share/vdsm/daemonAdapter
  - Add support for /var/run/gluster


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-15
changelog:
  - Fix bugs in interfaces discovered by sepolicy.
  - Allow slapd to read /usr/share/cracklib/pw_dict.hwm.
  - Allow lsm plugins to connect to tcp/18700 by default.
  - Allow brltty mknod capability to allow create /var/run/brltty/vcsa.
  - Fix pcp_domain_template() interface.
  - Fix conman.te.
  - Allow mon_fsstatd to read /proc/sys/fs/binfmt_misc
  - Allow glance-scrubber to connect tcp/9191.
  - Add missing setuid capability for sblim-sfcbd.
  - Allow pegasus ioctl() on providers.
  - Add conman_can_network.
  - Allow chronyd to read chrony conf files located in /run/timemaster/.
  - Allow radius to bind on tcp/1813 port.
  - dontaudit block suspend access for openvpn_t 
  - Allow conman to create files/dirs in /tmp.
  - Update xserver_rw_xdm_keys() interface to have 'setattr'.
  Resolves:#1172291 
  - Allow sulogin to read /dev/urandom and /dev/random.
  - Update radius port definition to have also tcp/18121
  - Label prandom as random_device_t.
  - Allow charon to manage files in /etc/strongimcv labeled as ipsec_conf_t.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-16
changelog:
  - Allow sssd to send dbus all user domains.
  Resolves:#1172291
  - Allow lsm plugin to read certificates.
  - Fix labeling for keystone CGI scripts.
  - Make snapperd back as unconfined domain.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-17
changelog:
  - Allow ipsec to execute _updown.netkey script to run unbound-control.
  - Allow neutron to read rpm DB.
  - Add additional fixes for hyperkvp
   * creates new ifcfg-{name} file
   * Runs hv_set_ifconfig.sh, which does the following
   * Copies ifcfg-{name} to /etc/sysconfig/network-scripts
  - Allow svirt to read symbolic links in /sys/fs/cgroups labeled as tmpfs_t
  - Add labeling for pacemaker.log.
  - Allow radius to connect/bind radsec ports.
  - Allow pm-suspend running as virt_qemu_ga to read /var/log/pm-suspend.log
  - Allow  virt_qemu_ga to dbus chat with rpm.
  - Update virt_read_content() interface to allow read also char devices.
  - Allow glance-registry to connect to keystone port.
  Resolves:#1181818


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-18
changelog:
  - Add auditing support for ipsec.
  Resolves:#1182524
  - Label /ostree/deploy/rhel-atomic-host/deploy directory as system_conf_t
  - Allow netutils chown capability to make tcpdump working with -w


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-21
changelog:
  - pkcsslotd_lock_t should be an alias for pkcs_slotd_lock_t.
  - Allow fowner capability for sssd because of selinux_child handling.
  - ALlow bind to read/write inherited ipsec pipes
  - Allow hypervkvp to read /dev/urandom and read  addition states/config files.
  - Allow gluster rpm scripletto create glusterd socket with correct labeling. This is a workaround until we get fix in glusterd.
  - Add glusterd_filetrans_named_pid() interface
  - Allow radiusd to connect to radsec ports.
  - Allow setuid/setgid for selinux_child
  - Allow lsmd plugin to connect to tcp/5988 by default.
  - Allow lsmd plugin to connect to tcp/5989 by default.
  - Update ipsec_manage_pid() interface.
  Resolves:#1184978


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-23
changelog:
  - Update seutil_manage_config() interface.
  Resolves:#1185962
  - Allow pki-tomcat relabel pki_tomcat_etc_rw_t.
  - Turn on docker_transition_unconfined by default


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-24
changelog:
  - ALlow mongod execmem by default.
  - Update policy/mls for sockets. Rules were contradictory.
  Resolves:#1207133
  - Allow a user to login with different security level via ssh.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-25
changelog:
  - Label /usr/libexec/postgresql-ctl as postgresql_exec_t. 
  - Add more restriction on entrypoint for unconfined domains.
  - Only allow semanage_t to be able to setenforce 0, no all domains that use selinux_semanage interface
  - Allow all domains to read /dev/urandom. It is needed by all apps/services linked to libgcrypt. There is no harm to allow it by default.
  - Update policy/mls for sockets related to access perm. Rules were contradictory.
  - Add nagios_run_pnp4nagios and nagios_run_sudo booleans to allow r
  un sudo from NRPE utils scripts and allow run nagios in conjunction w
  ith PNP4Nagios.
  Resolves:#1201054
  - Don't use deprecated userdom_manage_tmpfs_role() interface calliing and use userdom_manage_tmp_role() instead.
  - Update virt_read_pid_files() interface to allow read also symlinks with virt_var_run_t type
  - Label /var/lib/tftpboot/aarch64(/.*)? and /var/lib/tftpboot/images2(/.*)?
  - Add support for iprdbg logging files in /var/log.
  - Add fixes to rhsmcertd_t
  - Allow puppetagent_t to transfer firewalld messages over dbus
  - Add support for /usr/libexec/mongodb-scl-helper RHSCL helper script.
  - Added label mysqld_etc_t for /etc/my.cnf.d/ dir.
  - Add support for mongod/mongos systemd unit files.
  - cloudinit and rhsmcertd need to communicate with dbus
  - Allow dovecot_t sys_resource capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-26
changelog:
  - Back port the latest F22 changes to RHEL7. It should fix most of RHEL7.2 bugs
  - Add cgdcbxd policy 
  Resolves:#1072493
  - Fix ftp_homedir boolean
  Resolve:#1097775
  - Dontaudit ifconfig writing inhertited /var/log/pluto.log.
  - Allow cluster domain to dbus chat with systemd-logind.
  Resolves:#1145215
  - Dontaudit write access to inherited kdumpctl tmp files
  Resolves:#1156442
  - Allow isnsd_t to communicate with sssd
  Resolves:#1167702
  - Allow rwho_t to communicate with sssd
  Resolves:#1167718
  - Allow sblim_gatherd_t to communicate with sssd
  Resolves:#1167732
  - Allow pkcs_slotd_t to communicate with sssd
  Resolves:#1167737
  - Allow openvswitch_t to communicate with sssd
  Resolves:#1167816
  - Allow mysqld_safe_t to communicate with sssd
  Resolves:#1167832
  - Allow sshd_keygen_t to communicate with sssd
  Resolves:#1167840
  - Add support for iprdbg logging files in /var/log.
  Resolves:#1174363
  - Allow tmpreaper_t to manage ntp log content
  Resolves:#1176965
  - Allow gssd_t to manage ssh keyring
  Resolves:#1184791
  - Allow httpd_sys_script_t to send system log messages
  Resolves:#1185231
  - Allow apcupsd_t to read /sys/devices
  Resolves:#1189185
  - Allow dovecot_t sys_resource capability
  Resolves:#1191143
  - Add support for mongod/mongos systemd unit files.
  Resolves:#1197038
  - Add bacula fixes
  - Added label mysqld_etc_t for /etc/my.cnf.d/ dir.
  Resolves:#1203991


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-27
changelog:
  - Calling cron_system_entry() in pcp_domain_template needs to be a part of optional_policy block.
  - Allow samba-net to access /var/lib/ctdbd dirs/files.
  - Allow glusterd to send a signal to smbd.
  - Make ctdbd as home manager to access also FUSE.
  - Allow glusterd to use geo-replication gluster tool.
  - Allow glusterd to execute ssh-keygen.
  - Allow glusterd to interact with cluster services.
  - Allow glusterd to connect to the system DBUS for service (acquire_svc).
  - Label /dev/log correctly.
  Resolves:#1230932


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-28
changelog:
  - Allow glusterd to send generic signals to systemd_passwd_agent processes.
  - Allow glusterd to access init scripts/units without defined policy
  - Allow glusterd to run init scripts.
  - Allow glusterd to execute /usr/sbin/xfs_dbin glusterd_t domain.
  Resolves:#1224879


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-29
changelog:
  - We allow can_exec() on ssh_keygen on gluster. But there is a transition defined by init_initrc_domain() because we need to allow execute unconfined services by glusterd. So ssh-keygen ends up with ssh_keygen_t and we need to allow to manage /var/lib/glusterd/geo-replication/secret.pem.
  - Allow sshd to execute gnome-keyring if there is configured pam_gnome_keyring.so.
  - Allow gnome-keyring executed by passwd to access /run/user/UID/keyring to change a password. 
  - Label gluster python hooks also as bin_t.
  - Allow glusterd to interact with gluster tools running in a user domain
  - Add glusterd_manage_lib_files() interface.
  - ntop reads /var/lib/ntop/macPrefix.db and it needs dac_override. It has setuid/setgid. 
  - Allow samba_t net_admin capability to make CIFS mount working.
  - S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
  Resolves:#1224879


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-30
changelog:
  - Allow iptables to read ctdbd lib files.
  Resolves:#1224879
  - Add systemd_networkd_t to nsswitch domains.
  - Allow drbd_t write to fixed_disk_device. Reason: drbdmeta needs write to fixed_disk_device during initialization. 
  Resolves:#1130675
  - Allow NetworkManager write to sysfs. 
  - Fix cron_system_cronjob_use_shares boolean to call fs interfaces which contain only entrypoint permission.
  - Add cron_system_cronjob_use_shares boolean to allow system cronjob to be executed from shares - NFS, CIFS, FUSE. It requires "entrypoint" permissios on nfs_t, cifs_t and fusefs_t SELinux types.
  - Allow NetworkManager write to sysfs. 
  - Allow ctdb_t sending signull to smbd_t, for checking if smbd process exists. 
  - Dontaudit apache to manage snmpd_var_lib_t files/dirs. 
  - Add interface snmp_dontaudit_manage_snmp_var_lib_files().
  - Dontaudit mozilla_plugin_t cap. sys_ptrace. 
  - Rename xodbc-connect port to xodbc_connect
  - Allow ovsdb-server to connect on xodbc-connect and ovsdb tcp ports. 
  - Allow iscsid write to fifo file kdumpctl_tmp_t. Appears when kdump generates the initramfs during the kernel boot. 
  - Dontaudit chrome to read passwd file. 
  - nrpe needs kill capability to make gluster moniterd nodes working. 
  Resolves:#1235587


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-31
changelog:
  - Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins
  Resolves:#1233550
  - Allow dnssec_trigger_t create dnssec_trigger_tmp_t files in /var/tmp/
  - Add support for oddjob based helper in FreeIPA.
  - Add new boolean - httpd_run_ipa to allow httpd process to run IPA helper and dbus chat with oddjob.
  - Add nagios_domtrans_unconfined_plugins() interface.
  - Update mta_filetrans_named_content() interface to cover more db files. 
  Resolves:#1167468
  - Add back ftpd_use_passive_mode boolean with fixed description.
  - Allow pmcd daemon stream connect to mysqld.
  - Allow pcp domains to connect to own process using unix_stream_socket. 
  Resolves:#1213709
  - Allow  abrt-upload-watch service to dbus chat with ABRT daemon and fsetid capability to allow run reporter-upload correctly.
  - Add new boolean - httpd_run_ipa to allow httpd process to run IPA helper and dbus chat with oddjob.
  - Add support for oddjob based helper in FreeIPA.
  - Allow dnssec_trigger_t create dnssec_trigger_tmp_t files in /var/tmp/


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-32
changelog:
  - Allow gluster to connect to all ports. It is required by random services executed by gluster.
  - Add interfaces winbind_signull(), samba_unconfined_net_signull().
  - Dontaudit smbd_t block_suspend capability. This is kernel bug.
  - Allow ctdbd sending signull to process winbind, samba_unconfined_net, to
      checking if processes exists.
  - Add tmpreaper booleans to use nfs_t and samba_share_t.
  - Fix path from /usr/sbin/redis-server to /usr/bin/redis-server
  - Allow connect ypserv to portmap_port_t
  - Fix paths in inn policy, Allow innd read innd_log_t dirs, Allow innd execute innd_etc_t files
  - Add support for openstack-nova-* packages
  - Allow NetworkManager_t send signull to dnssec_trigger_t.
  - Allow glusterd to execute showmount in the showmount domain.
  - Label swift-container-reconciler binary as swift_t.
  - Allow dnssec_trigger_t relabelfrom dnssec_trigger_var_run_t files.
  - Add cobbler_var_lib_t to "/var/lib/tftpboot/boot(/.*)?"
  Resolves:#1213540
  - Merge all nova_* labels under one nova_t.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-33
changelog:
  - Allow networkmanager read rfcomm port.
  Resolves:#1212498
  - Remove non exists label.
  - Fix *_admin intefaces where body is not consistent with header.
  - Label /usr/afs/ as afs_files_t, Allow afs_bosserver_t create afs_config_t and afs_dbdir_t dirs under afs_files_t, Allow afs_bosserver_t read kerberos config
  - Remove non exits nfsd_ro_t label.
  - Make all interfaces related to openshift_cache_t as deprecated.
  - Add rpm_var_run_t label to rpm_admin header
  - Add jabberd_lock_t label to jabberd_admin header.
  - Add samba_unconfined_script_exec_t to samba_admin header.
  - inn daemon should create innd_log_t objects in var_log_t instead of innd_var_run_t
  - Fix ctdb policy
  - Add samba_signull_winbind()
  - Add samba_signull_unconfined_net()
  - Allow ctdbd_t send signull to samba_unconfined_net_t.
  - Allow openshift_initrc_t to communicate with firewalld over dbus 
  Resolves:#1221326


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-34
changelog:
  - Allow glusterd to manage nfsd and rpcd services.
  - Allow networkmanager to  communicate via dbus with systemd_hostanmed. 
  Resolves: #1234954
  - Allow stream connect logrotate to prosody.
  - Add prosody_stream_connect() interface.
  -  httpd should be able to send signal/signull to httpd_suexec_t, instead of httpd_suexec_exec_t.
  - Allow prosody to create own tmp files/dirs.
  Resolves:#1212498


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-35
changelog:
  - gnome_dontaudit_search_config() needs to be a part of optinal_policy in pegasus.te
  - Allow pcp_pmcd daemon to read postfix config files.
  - Allow pcp_pmcd daemon to search postfix spool dirs.
  Resolves: #1213740
  - Added Booleans: pcp_read_generic_logs.
  Resolves: #1213740
  - Allow drbd to read configuration options used when loading modules.
  Resolves: #1134883
  - Allow glusterd to manage nfsd and rpcd services.
  - Allow glusterd to communicate with cluster domains over stream socket.
  - glusterd call pcs utility which calls find for cib.* files and runs pstree under glusterd. Dontaudit access to security files and update gluster boolean to reflect these changes.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-36
changelog:
  - Allow drbd to get attributes from filesystems.
  - Allow redis to read kernel parameters.
  Resolves: #1209518
  - Allow virt_qemu_ga_t domtrans to passwd_t
  - Allow audisp_remote_t to start power unit files domain to allow halt system.
  Resolves: #1186780
  - Allow audisp_remote_t to read/write user domain pty.
  Resolves: #1186780
  - Label /usr/sbin/chpasswd as passwd_exec_t.
  - Allow sysadm to administrate ldap environment and allow to bind ldap port to allow to setup an LDAP server (389ds).
  Resolves:#1221121


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-37
changelog:
  - Allow httpd_suexec_t to read and write Apache stream sockets 
  Resolves: #1243569
  - Allow qpid to create lnk_files in qpid_var_lib_t
  Resolves: #1247279


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-38
changelog:
  - Allow openhpid to use libsnmp_bc plugin (allow read snmp lib files).
    Resolves: #1243902
  - Allow lsm_plugin_t to read sysfs, read hwdata, rw to scsi_generic_device
    Resolves: #1238079
  - Allow lsm_plugin_t to rw raw_fixed_disk.
    Resolves:#1238079
  - Allow rhsmcertd to send signull to unconfined_service.


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-39
changelog:
  - Allow mdadm to access /dev/random and add support to create own files/dirs as mdadm_tmpfs_t.
  Resolves:#1073314
  - Allow udev, lvm and fsadm to access systemd-cat in /var/tmp/dracut if 'dracut -fv' is executed in MLS.
  - Allow admin SELinu users to communicate with kernel_t. It is needed to access /run/systemd/journal/stdout if 'dracut -vf' is executed. We allow it for other SELinux users.
  - Allow sysadm to execute systemd-sysctl in the sysadm_t domain. It is needed for ifup command in MLS mode.
  - Add fstools_filetrans_named_content_fsadm() and call it for named_filetrans_domain domains. We need to be sure that /run/blkid is created with correct labeling.
  Resolves:#1183503
  - Add support for /etc/sanlock which is writable by sanlock daemon.
  Resolves:#1231377
  - Allow useradd add homedir located in /var/lib/kdcproxy in ipa-server RPM scriplet.
  Resolves:#1243775 
  - Allow snapperd to pass data (one way only) via pipe negotiated over dbus
  Resolves:#1250550
  - Allow lsmd also setuid capability. Some commands need to executed under root privs. Other commands are executed under unprivileged user.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-40
changelog:
  - Add interface to read/write watchdog device
  - Add labels for /dev/memory_bandwith and /dev/vhci. Thanks ssekidde
  Resolves:#1210237
  - Allow apcupsd_t to read /sys/devices 
  Resolves:#1189185
  - Allow logrotate to reload services.
  Resolves: #1242453
  - Allow openhpid use libwatchdog plugin. (Allow openhpid_t rw watchdog device)
  Resolves: #1244260
  - Allow openhpid liboa_soap plugin to read generic certs.
  Resolves: #1244248
  - Allow openhpid liboa_soap plugin to read resolv.conf file.
  Resolves: #1244248
  - Label /usr/libexec/chrony-helper as chronyd_exec_t
  - Allow chronyd_t to read dhcpc state.
  - Allow chronyd to execute mkdir command.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-41
changelog:
  - Allow pcp_domain to manage pcp_var_lib_t lnk_files.
  Resolves: #1252341
  - Label /var/run/xtables.* as iptables_var_run_t
  Resolves: #1243403


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-42
changelog:
  - Fix label on /var/tmp/kiprop_0
  Resolves:#1220763
  - Allow lldpad_t to getattr tmpfs_t.
  Resolves: #1246220
  - Label /dev/shm/lldpad.* as lldapd_tmpfs_t
  Resolves: #1246220
  - Allow audisp client to read system state.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-43
changelog:
  - Allow openhpid_t to read system state.
  Resolves: #1244248
  - Added labels for files provided by rh-nginx18 collection
  Resolves: #1249945
  - Dontaudit block_suspend capability for ipa_helper_t, this is kernel bug. Allow ipa_helper_t capability net_admin. Allow ipa_helper_t to list /tmp. Allow ipa_helper_t to read rpm db.
  Resolves: #1252968
  - Allow rhsmcertd exec rhsmcertd_var_run_t files and rhsmcerd_tmp_t files. This rules are in hide_broken_sympthons until we find better solution.
  Resolves: #1243431
  - Allow abrt_dump_oops_t to read proc_security_t files.
  - Allow abrt_dump_oops to signull all domains Allow abrt_dump_oops to read all domains state Allow abrt_dump_oops to ptrace all domains
  - Add interface abrt_dump_oops_domtrans()
  - Add mountpoint dontaudit access check in rhsmcertd policy.
  Resolves: #1243431
  - Allow samba_net_t to manage samba_var_t sock files.
  Resolves: #1252937
  - Allow chrome setcap to itself.
  Resolves: #1251996
  - Allow httpd daemon to manage httpd_var_lib_t lnk_files.
  Resolves: #1253706
  - Allow chronyd exec systemctl
  Resolves: #1243764
  - Add inteface chronyd_signal Allow timemaster_t send generic signals to chronyd_t.
  Resolves: #1243764
  - Added interface fs_dontaudit_write_configfs_dirs
  - Add label for kernel module dep files in /usr/lib/modules
  Resolves:#916635
  - Allow kernel_t domtrans to abrt_dump_oops_t
  - Added to files_dontaudit_write_all_mountpoints intefface new dontaudit rule, that domain included this interface dontaudit capability dac_override.
  - Allow systemd-networkd to send logs to systemd-journald.
  Resolves: #1236616


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-44
changelog:
  - Allow exec pidof under hypervkvp domain.
  Resolves: #1254870
  - Allow hypervkvp daemon create connection to the system DBUS
  Resolves: #1254870


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-45
changelog:
  - Fix postfix_spool_maildrop_t,postfix_spool_flush_t contexts in postfix.fc file.
  Resolves: #1252442


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-46
changelog:
  - Allow watchdog execute fenced python script. Resolves: #1255020
  - Added inferface watchdog_unconfined_exec_read_lnk_files()
  - Label /var/run/chrony-helper dir as chronyd_var_run_t. Resolves: #1243764
  - Allow dhcpc_t domain transition to chronyd_t Resolves: #1243764


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-47
changelog:
  - Fix regexp in chronyd.fc file
  Resolves: #1243764
  - Allow passenger to getattr filesystem xattr
  Resolves: #1196555
  - Label mdadm.conf.anackbak as mdadm_conf_t file.
  Resolves: #1088904
  - Revert "Allow pegasus_openlmi_storage_t create mdadm.conf.anacbak file in /etc."
  - Allow watchdog execute fenced python script.
  Resolves: #1255020
  - Added inferface watchdog_unconfined_exec_read_lnk_files()
  - Remove labeling for /var/db/.*\.db as etc_t to label db files as system_db_t.
  Resolves: #1230877


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-48
changelog:
  - Fix labeling for fence_scsi_check script
  Resolves: #1255020
  - Allow openhpid to read system state Allow openhpid to connect to tcp http port.
   Resolves: #1244248
  - Allow openhpid to read snmp var lib files.
   Resolves: #1243902
  - Allow openvswitch_t domains read kernel dependencies due to openvswitch run modprobe
  - Allow unconfined_t domains to create /var/run/xtables.lock with iptables_var_run_t
  Resolves: #1243403
  - Remove bin_t label for /usr/share/cluster/fence_scsi_check\.pl 
  Resolves: #1255020


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-49
changelog:
  - Allow systemd-udevd to access netlink_route_socket to change names for network interfaces without unconfined.pp module. It affects also MLS. 
  Resolves:#1250456


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-50
changelog:
  - Add labels for afs binaries: dafileserver, davolserver, salvageserver, dasalvager 
  Resolves: #1192338
  - Add lsmd_plugin_t sys_admin capability, Allow lsmd_plugin_t getattr from sysfs filesystem.
   Resolves: #1238079
  - Allow rhsmcertd_t send signull to unconfined_service_t domains. 
  Resolves: #1176078
  - Remove file transition from snmp_manage_var_lib_dirs() interface which created snmp_var_lib_t dirs in var_lib_t.
  - Allow openhpid_t daemon to manage snmp files and dirs. 
  Resolves: #1243902
  - Allow mdadm_t domain read/write to general ptys and unallocated ttys. 
  Resolves: #1073314
  - Add interface unconfined_server_signull() to allow domains send signull to unconfined_service_t
   Resolves: #1176078


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-51
changelog:
  - Label /etc/ipa/nssdb dir as cert_t
  Resolves:#1262718
  - Do not provide docker policy files which is shipped by docker-selinux.rpm
  Resolves:#1262812


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-52
changelog:
  - Allow dirsrv-admin script to read passwd file. Allow dirsrv-admin script to read httpd pid files. Label dirsrv-admin unit file and allow dirsrv-admin domains to use it.
  Resolves: #1230300
  - Allow qpid daemon to connect on amqp tcp port.
  Resolves: #1261805


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-53
changelog:
  - Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind. 
  Resolves: #1256459


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-54
changelog:
  - Add temporary fixes for sandbox related to #1103622. It allows to run everything under one sandbox type.
  Resolves:#1261938
  - Allow abrt_t domain to write to kernel msg device.
  Resolves: #1257828
  - Allow rpcbind_t domain to change file owner and group
  Resolves: #1265266


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-55
changelog:
  - We need to require sandbox_web_type attribute in sandbox_x_domain_template(). 
  Resolves: #1261938
  - ipsec: The NM helper needs to read the SAs
  Resolves: #1259786
  - ipsec: Allow ipsec management to create ptys
  Resolves: #1259786


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-56
changelog:
  - Remove labeling for modules_dep_t file contexts to have labeled them as modules_object_t.
  - Update files_read_kernel_modules() to contain modutils_read_module_deps_files() calling because module deps labeling could remain and it allows to avoid regressions.
  Resolves:#1266928


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-57
changelog:
  - Add missing labeling for /usr/libexec/abrt-hook-ccpp as a part of #1245477 and #1242467 bugs
  Resolves: #1254188
  - We need allow connect to xserver for all sandbox_x domain because we have one type for all sandbox processes.
  Resolves:#1261938


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-58
changelog:
  - Allow search dirs in sysfs types in kernel_read_security_state.
  Resolves: #1254188
  - Fix kernel_read_security_state interface that source domain of this interface can search sysctl_fs_t dirs.
  Resolves: #1254188


author: Miroslav Grepl <mgrepl@redhat.com> 3.13.1-60
changelog:
  Allow hypervvssd to list all mountpoints to have VSS live backup working correctly.
  Resolves:#1247880


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.


author: Rex Dieter <rdieter@fedoraproject.org> 3.0.45-2
changelog:
  - optimize/update scriptlets
  - don't own icons/hicolor
  - drop %config tag on applications/*.desktop

  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: Dan Walsh <dwalsh@redhat.com> - 3.1.1-1
changelog:
  - remove specific logging and move to syslog
  - Fix handling of AVC messages broken by fix for memory leaks


author: Dan Walsh <dwalsh@redhat.com> - 3.1.3-1
changelog:
  - Update to latest translations
  - Fix handling of avc messages, missing \n
  - Default to check for AVC's on login


author: Dan Walsh <dwalsh@redhat.com> - 3.1.16-1
changelog:
  - Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC
  - Update Translations
  - Fix hostname substitution to only effect hostnames


author: Dan Walsh <dwalsh@redhat.com> - 3.2.1-1
changelog:
  - Remove sesearch from package and start using sepolicy from policycoreutils-python
  - Fix retrieval of writable types to translate attributes into the group of types available, and not return non file types.


author: Dan Walsh <dwalsh@redhat.com> - 3.2.9-1
changelog:
  - On update cp instead of rename, since there could be a situation where
  someone has ~/.config on a different file sytem then ~.  It has happened.
  - Fix --password spelling error
  - Remove --quit option from sealert
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 3.2.24-1.1
changelog:
  - Stop sending syslog.LOG_DEBUG Messages unless loglevel is set to debug
  - Add the policy rpm string to the user comments of an already reported bug from jfilak@redhat.com
  - Remove at_console lines from policykit so cockpit can use dbus interfaces.
  - Fix handling of target paths that decode screws up
  - Provide the policy rpm in Bugzilla bug reports by jfilak@redhat.com
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  - translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: David Zeuthen <davidz@redhat.com> - 0.16-2
changelog:
  - Make Evince the default for application/pdf and application/postscript
  - Remove remaining references to gnome-ggv (application/x-gzpostscript and
    image/x-eps) as this is no longer in the distribution


author: Dan Williams <dcbw@redhat.com> - 0.16-3
changelog:
  - Update OpenOffice.org desktop file names. #155353
  - WordPerfect default now OOo Writer, since Abiword is in Extras


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-2
changelog:
  - Don't say that webcal files are handled by evolution-2.0, it can't
  - Disable vCard mapping as well, as evolution doesn't handle it
    (See http://bugzilla.gnome.org/show_bug.cgi?id=309073)


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-5
changelog:
  - Remove Totem as the default music/movie player, it will be the
    default for movies, as only it handles them, and Rhythmbox can
    handle missing plugins now


author: - Bastien Nocera <bnocera@redhat.com> - 0.23-5
changelog:
  - Make Totem the default for the mime-types it handles (#366101)
  - And make sure Rhythmbox is the second default only for the mime-types
    it handles


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Colin Walters <walters@verbum.org> - 0.71-3
changelog:
  - Requires(pre) on glib, since update-mime-database uses it
  - Remove /dev/null redirection, we should see future errors
    And really, RPM is dumb here - this stuff needs to go to
    log files.


author: Colin Walters <walters@verbum.org> - 0.71-4
changelog:
  - Fix previous change to be Requires(post); spotted by
    Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Bastien Nocera <bnocera@redhat.com> 0.90-2
changelog:
  - Update list of defaults, adding new mime-types for Totem,
    as well as scheme handlers, and install defaults for
    Evolution and Firefox


author: Bastien Nocera <bnocera@redhat.com> 0.90-4
changelog:
  - Update defaults.list and update for newer desktop names,
    with help from Edward Sheldrake (#659457)


author: Bastien Nocera <bnocera@redhat.com> 0.91-3
changelog:
  - Make shotwell the default for camera roll handling
  - Make shotwell-viewer the default image viewer (for the
    image types it handles)
  - Prefer Rhythmbox to Totem for music files


author: Matthias Clasen <mclasen@redhat.com> - 1.0-2
changelog:
  - Own/%ghost files generated by update-mime-database from
    freedesktop.org.xml (patch by Ville Skyttä, #716451))


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 1.0-4
  - defaults.list: s/mozilla-firefox/firefox/ (see #736558)
  - defaults.list: s/gpk-install-file/gpk-install-local-file/
  - defaults.list: application/x-catalog=gpk-install-catalog.desktop (#770019)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-5
changelog:
  - backport correction to the default settings for hosts.byname and
    hosts.byaddr NIS maps, so that their data items start with the host's
    address rather than a name (#1090948)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for IDM's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-2
changelog:
  - Complete ID views support to BIND operation
  - Ignore ID views outside schema-compat subtrees
  - Use 389-ds API compatible with RHEL 7.0
  - Resolves: #1151436


author: Ondrej Kozina <okozina@redhat.com> - 0.1.0-1.20121026git1aaa372
changelog:
  - removed python binding since python can use dbus interface instead
  - removed btrfs-progs and LVM dependecies (#852174)
  - patch: do not build zypp plugin
  - patch: avoid abrt when 'diff' command is executed without arguments
  - patch: do not check for btrfs-progs binary
  - patch: do not allow 'create-config' command on non-thin LVM volumes (#852174)
  - edit libtool script to link with: '-Wl, --as-needed'
  - spec file polishing


author: Ondrej Kozina <okozina@redhat.com> - 0.1.2-1.20130211git676556f
changelog:
  - updated to latest upstream version
  - fixed wrong include: "auto_ptr.h" -> <memory>
  - moved diffutils dependency to client


author: Ondrej Kozina <okozina@redhat.com> - 0.1.3-1.20130418git7ca81a2
changelog:
  - updatet to latest upstream version
  - add support to compare extended attributes ('xadiff' command)
  - add support to revert modificiations in file's extended attributes
  - patch: avoid useless build dependency on libattr-devel


author: Ondrej Kozina <okozina@redhat.com> - 0.1.5-1
changelog:
  - updated to latest upstream
  - allow whitespace in ALLOW_USERS and ALLOW_GROUPS in snapper's config
  - enable new pam module
  - patch: pam module installed in proper libdir


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-3
changelog:
  - enable btrfs compare using send/receive in libbtrfs
  - patch: adapt sources to change in libtrfs API (btrfs_read_and_process_send_stream)
  - Resolves: #1055579


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-5
changelog:
  - patch: Fix failure in invoking btrfs internal comparison of subvolumes
  - patch: Remove references to missing programs from man pages
  - Resolves: #1060806, #1063844


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-6
changelog:
  - patch: Add norecovery option mounting XFS read-only snapshot
  - patch: Fix ACL modification failure with XFS filesystem
  - patch: Sync SELinux context of .snapshots subvolume (btrfs only)
  - Resolves: #1064111, #1065969, #1069312


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-7
changelog:
  - patch: fix empty-pre-post cleanup algorithm
  - patch: add conditionals for btrfs library versions
  - Resolves: #1071973 #1142954


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-9
changelog:
  - patch: fix snapperd abort while passing large data over dbus
  - patch: workaround linkage issue on s390 and ppc64le
  - Resolves: #1229353


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
  - Add sssd plugin to collect configuration and logs
  - Collect /etc/anacrontab in system plugin
  - Correct handling of redhat-release for el6


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
  - Add support for collecting entitlement certificates in rhn.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
  - Collect /etc/dhcp in dhcp.py plugin
  - Collect dmsetup ls --tree output in devicemapper.py
  - Collect lsblk output in filesys.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
  - Add basic Infiniband plugin
  - Add plugin for scsi-target-utils iSCSI target
  - Fix autofs plugin LC_ALL usage
  - Fix collection of lsusb and add collection of -t and -v outputs
  - Extend data collection by qpidd plugin
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
  - Add /proc/vmmemctl collection to vmware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
  - Add support for collecting Red Hat Subscrition Manager configuration
  - Collect /etc/init on systems using upstart
  - Don't strip whitespace from output of external programs
  - Collect ipv6 neighbour table in network module
  - Collect basic cgroups configuration data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
  - Fix up2dateclient path in hardware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
  - Fix hardware plugin to support new lsusb path


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18
changelog:
  - Collect fence_virt.conf in cluster module
  - Fix collection of /proc/net directory tree
  - Gather output of cpufreq-info when present
  - Fix brctl showstp output when bridges contain multiple interfaces
  - Add /etc/modprobe.d to kernel module
  - Ensure relative symlink targets are correctly handled when copying
  - Fix satellite and proxy package detection in rhn plugin
  - Collect stderr output from external commands
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
  - Fix installed-rpms formatting for long package names
  - Add symbolic links for truncated log files
  - Collect non-standard syslog and rsyslog log files
  - Use correct paths for tomcat6 in RHN module
  - Obscure root password if present in anacond-ks.cfg
  - Do not accept embedded forward slashes in RHN usernames
  - Add new sunrpc module to collect rpcinfo for gluster systems


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19
changelog:
  - Collect additional diagnostic information for realtime systems
  - Improve sanitization of RHN user and case number in report name
  - Fix verbose output and debug logging
  - Add basic support for CloudForms data collection
  - Add support for Subscription Asset Manager diagnostics


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22
changelog:
  - Correct aeolus debug invocation in CloudForms module
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29
changelog:
  - Collect the swift configuration directory in gluster module
  - Update IPA module and related plug-ins


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31
changelog:
  - Avoid calling volume status when collecting gluster statedumps
  - Use a default report name if --name is empty
  - Quote tilde characters passed to shell in RPM module
  - Collect KDC and named configuration in ipa module
  - Sanitize hostname characters before using as report path
  - Collect /etc/multipath in device-mapper module
  - New plug-in for PostgreSQL
  - Add OpenStack module
  - Avoid deprecated sysctls in /proc/sys/net
  - Fix error logging when calling external programs
  - Use ip instead of ifconfig to generate network interface lists


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32
changelog:
  - Collect /proc/pagetypeinfo in memory module
  - Strip trailing newline from command output
  - Add sanlock module
  - Do not collect archived accounting files in psacct module
  - Call spacewalk-debug from rhn module to collect satellite data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33
changelog:
  - Add Red Hat Update Infrastructure module
  - Collect /proc/iomem in hardware module
  - Collect subscription-manager output in general module
  - Collect rhsm log files in general module
  - Fix exception in gluster module on non-gluster systems
  - Fix exception in psql module when dbname is not given


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35
changelog:
  - Report --name and --ticket values as defaults
  - Fix device-mapper command execution logging
  - Fix data collection and rename PostreSQL module to pgsql


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-3
changelog:
  - Add crm_report support to cluster plug-in
    Resolves: bz839342
  - Fix rhel_version() usage in cluster and s390 plug-ins
    Resolves: bz916705
  - Strip trailing newline from command output
    Resolves: bz971420


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-4
changelog:
  - Do not attempt to read RPC pseudo files in networking plug-in
    Resolves: bz996992, bz996994
  - Restrict wbinfo collection to the current domain
    Resolves: bz997101
  - Add obfuscation of luci secrets to cluster plug-in
    Resolves: bz997090
  - Add XFS plug-in
    Resolves: bz997094
  - Fix policy class handling of --tmp-dir
    Resolves: bz997083
  - Do not set batch mode if stdin is not a TTY
    Resolves: bz1002943
  - Attempt to continue when reading bad input in interactive mode
    Resolves: bz1002943


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-5
changelog:
  - Include /etc/yaboot.conf in boot plug-in
    Resolves: bz1001966
  - Fix collection of brctl output in networking plug-in
    Resolves: bz1019235
  - Verify limited set of RPM packages by default
    Resolves: bz1019863
  - Do not strip newlines from command output
    Resolves: bz1019338
  - Limit default sar data collection
    Resolves: bz1001599


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-6
changelog:
  - Remove version checks in gluster plug-in
    Resolves: bz1015606
  - Check for usable temporary directory
    Resolves: bz1019517
  - Fix --alloptions command line option
    Resolves: bz1019356
  - Fix configuration fail regression
    Resolves: bz1019516


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-7
changelog:
  - Add domainname output to NIS plug-in
    Resolves: bz1026906
  - Collect /var/log/squid in squid plug-in
    Resolves: bz1026829
  - Collect mountstats and mountinfo in filesys plug-in
    Resolves: bz1026869
  - Add PowerPC plug-in from upstream
    Resolves: bz1025236


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-9
changelog:
  - Restore --build command line option
    Resolves: bz1015599
  - Collect saved vmcore-dmesg.txt files
    Resolves: bz1026959
  - Normalize temporary directory paths
    Resolves: bz829069


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-10
changelog:
  - Add nfs client plug-in
    Resolves: bz1028072
  - Fix traceback when sar module force-enabled
    Resolves: bz1028125


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-12
changelog:
  - Fix typo in yum plug-in add_forbidden_paths
    Resolves: bz829297
  - Add krb5 plug-in and drop collection of krb5.keytab
    Resolves: bz1028150


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-15
changelog:
  - Remove debug statements from logs plugin
    Resolves: bz1030042
  - Make ethernet interface detection more robust
    Resolves: bz1030824
  - Fix specifying multiple plugin options on the command line
    Resolves: bz1031124
  - Make log and message levels match previous versions
    Resolves: bz1031126
  - Log a warning message when external commands time out
    Resolves: bz1034956
  - Remove --upload command line option
    Resolves: bz1028484
  - Update sos UI text to match upstream
    Resolves: bz1034970


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-16
changelog:
  - Add new plugin to collect OpenHPI configuration
    Resolves: bz1028121
  - Fix cluster plugin crm_report support
    Resolves: bz1030553
  - Fix file postprocessing in ldap plugin
    Resolves: bz1030602
  - Remove collection of anaconda-ks.cfg from general plugin
    Resolves: bz1034865


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-17
changelog:
  - Fix get_option use in cluster plugin
    Resolves: bz1030553
  - Fix debug logging to file when given '-v'
    Resolves: bz1031126
  - Always treat rhevm plugin's vdsmlogs option as a string
    Resolves: bz1030617
  - Run the rhsm-debug script from yum plugin
    Resolves: bz1039036


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-18
changelog:
  - Prevent file descriptor leaks when using Popen
    Resolves: bz1051009
  - Disable zip archive creation when running rhsm-debug
    Resolves: bz1039036
  - Include volume geo-replication status in gluster plugin
    Resolves: bz1036752


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-19
changelog:
  - Fix generation of volume names in gluster plugin
    Resolves: bz1036752
  - Add distupgrade plugin
    Resolves: bz1059760


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
    Resolves: bz1127631
  - [postgresql] obtain db password from the environment
    Resolves: bz1126001
  - [pcp] add Performance Co-Pilot plugin
    Resolves: bz1119833
  - [nfsserver] collect /etc/exports.d
    Resolves: bz1118921
  - [sosreport] handle --compression-type correctly
    Resolves: bz1118152
  - [anaconda] redact passwords in kickstart configurations
    Resolves: bz1112175
  - [haproxy] add new plugin
    Resolves: bz1107865
  - [keepalived] add new plugin
    Resolves: bz1105247
  - [lvm2] set locking_type=0 when calling lvm commands
    Resolves: bz1102285
  - [tuned] add new plugin
    Resolves: bz1095447
  - [cgroups] collect /etc/sysconfig/cgred
    Resolves: bz1083677
  - [plugins] ensure doc text is always displayed for plugins
    Resolves: bz1065473
  - [sosreport] fix the distribution version API call
    Resolves: bz1028111
  - [docker] add new plugin
    Resolves: bz1084990
  - [openstack_*] include broken-out openstack plugins
    Resolves: bz1140756
  - [mysql] support MariaDB
    Resolves: bz1106600
  - [openstack] do not collect /var/lib/nova
    Resolves: bz1106423
  - [grub2] collect grub.cfg on UEFI systems
    Resolves: bz1086648
  - [sosreport] handle out-of-space errors gracefully
    Resolves: bz1087977
  - [firewalld] new plugin
    Resolves: bz1100505
  - [networking] collect NetworkManager status
    Resolves: bz1100505
  - [kpatch] new plugin
    Resolves: bz1110918
  - [global] update to upstream 3.2 release
    Resolves: bz1026962


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
    Resolves: bz1116349
  - [powerpc] allow PowerPC plugin to run on ppc64le
    Resolves: bz1140427
  - [package] add Obsoletes for sos-plugins-openstack
    Resolves: bz1140756


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
    Resolves: bz1087515
  - [ovirt_hosted_engine] fix exception when force-enabled
    Resolves: bz1148551


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
    Resolves: bz1148375
  - [mysql] obtain database password from the environment
    Resolves: bz1126001


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
    Resolves: bz1110918
  - [archive] drop support for Zip archives
    Resolves: bz1118152


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
    Resolves: bz1166039
  - [docs] update man page for new options
    Resolves: bz1171658
  - [sosreport] make all utf-8 handling user errors=ignore
    Resolves: bz1164267


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
    Resolves: bz1087977
  - [sosreport] catch OSError exceptions in SoSReport.execute()
    Resolves: bz1087977
  - [anaconda] make useradd password regex tolerant of whitespace
    Resolves: bz1112175


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
    Resolves: bz1026962
  - [squid] collect files from /var/log/squid
    Resolves: bz1026962
  - [sosreport] log plugin exceptions to a file
    Resolves: bz1026962
  - [ctdb] fix collection of /etc/sysconfig/ctdb
    Resolves: bz1026962
  - [sosreport] fix silent exception handling
    Resolves: bz1026962


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-17
changelog:
  - [openstack_neutron] neutron configuration and logs files not captured
    Resolves: bz1213315
  - [ovirt] remove ovirt-engine setup answer file password leak
    Resolves: bz1162788
  - [networking] network plugin fails if NetworkManager is disabled
    Resolves: bz1206633


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-20
changelog:
  - [cluster] crm_report fails to run because dir already exists
    Resolves: bz1200526
  - [foreman] Skip collection of generic resources
    Resolves: bz1135317
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
    Resolves: bz1183265
  - [pcp] collect /etc/pcp.conf
    Resolves: bz1183297
  - [puppet] adding new plugin for puppet
    Resolves: bz1183768
  - [block] Don't use parted human readable output
    Resolves: bz1183770
  - [general] Better handling --name and --ticket-number in
    Resolves: bz1185093
  - [networking] additional ip, firewall and traffic shaping
    Resolves: bz1194554
  - [infiniband] add opensm and infiniband-diags support
    Resolves: bz1194556
  - [plugins/rabbitmq] Added cluster_status command output
    Resolves: bz1197006
  - [networking] re-add 'ip addr' with a root symlink
    Resolves: bz1209454
  - [kimchi] add new plugin
    Resolves: bz1209840
  - [iprconfig] add plugin for IBM Power RAID adapters
    Resolves: bz1221932
  - [ovirt] Collect engine tunables and domain information.
    Resolves: bz1236101
  - [activemq] Honour all_logs and get config on RHEL
    Resolves: bz1236111
  - [cluster] Add luci to packages for standalone luci servers
    Resolves: bz1236124
  - [hpasm] hpasmcli commands hang under timeout
    Resolves: bz1214209
  - [mysql] Collect log file
    Resolves: bz1210906
  - [chrony] add chrony plugin
    Resolves: bz1165418


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-21
changelog:
  - [cluster] enable crm_report password scrubbing
    Resolves: bz1164864
  - [sosreport] fix command-line report defaults
    Resolves: bz1219720
  - [virsh] add new plugin, add listing of qemu
    Resolves: bz1195086
  - [sap*,vhostmd] new plugins for SAP
    Resolves: bz1195608


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-22
changelog:
  - [general] verify --profile contains valid plugins only
    Resolves: bz1184602
  - [kernel,mpt,memory] additional kernel-related diagnostics
    Resolves: bz1194159


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-23
changelog:
  - [ceph] add calamari and ragos logs and configs
    Resolves: bz1210527
  - [iprconfig] enable plugin for ppc64* architectures
    Resolves: bz1238726


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-25
changelog:
  - [openstack] New Openstack Trove (DBaaS) plugin
    Resolves: bz1238349
  - [services] Add more diagnostics to applications
    Resolves: bz1195087
  - [openstack_neutron] Obscure passwords and secrets
    Resolves: bz1240666


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-27
changelog:
  - [plugin] pass stderr through _collect_cmd_output
  - split dependencies of bz1185990 fix from bz1185990 patch
    Resolves: bz1185990


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-29
changelog:
  - [openvswitch] capture the logs, db and OVS bridges details
    Resolves: bz1242507
  - [logs] fix reference to missing 'rsyslog_conf' variable
    Resolves: bz1249705
  - [sapnw] Add check if saphostctrl is not present, dont use Set
    Resolves: bz1195608
  - [Plugin] fix handling of symlinks in non-sysroot environments
    Resolves: bz1248672


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-3
changelog:
  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-4
changelog:
  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)


author: Alon Levy <alevy@redhat.com>
changelog:
  - Fix mjpeg memory leak and bad behavior.
  - Add usbredir to list of channels for security purposes. (#819484)


author: Soren Sandmann <ssp@redhat.com> - 0.11.3-1
changelog:
  - Add capability patches
  - Add capability patches to the included copy of spice-protocol

      Please see the comment above Patch6 and Patch7
      regarding this situation.


author: Yonit Halperin <yhalperi@redhat.com> 0.12.4-1
changelog:
  - New upstream release 0.12.4
  - Require libjpeg-turbo-devel instead of libjpeg-devel
  - Remove "BuildRequires: spice-protocol" from spice-server
  - Add "Requires: spice-protocol" to spice-server-devel.


author: Hans de Goede <hdegoede@redhat.com> - 0.12.4-1
changelog:
  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Fix qemu crash during migration with reboot
    Resolves: rhbz#1016795
  - Monitor whether the client is alive
    Resolves: rhbz#1016790


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-7
changelog:
  - Fix assert in mjpeg_encoder_adjust_params_to_bit_rate()
    Resolves: rhbz#1086823
  - Fix "Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion
    `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed" assertion
    Resolves: rhbz#1058625
  - Lower a monitor-config warning to debug level
    Resolves: rhbz#1119220
  - mjpeg: Don't warn on unsupported image formats
    Resolves: rhbz#1070028


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix defects reported by Coverity
    Resolves: rhbz#885717
  - Validate surface bounding box sent from QXL driver
    Resolves: rhbz#1052856
  - Fix assertion sometimes happening during migration while a client is
    connected
    Resolves: rhbz#1035184
  - Fix crash when restarting VM with old client
    Resolves: rhbz#1145919


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-10
changelog:
  - Fix qemu segmentation fault (core dumped) when boot KVM guest with
    spice in FIPS enabled mode.
    Resolves: rhbz#1071176


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11
changelog:
  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443


author: Adam Jackson <ajax@redhat.com> 0.7.39-2
changelog:
  - Rebuild to break bogus libpng dependency
  - Fix summaries for gtk3 subpackages to not talk about gtk2


author: Hans de Goede <hdegoede@redhat.com> - 0.11-4
changelog:
  - Add missing BuildRequires: usbutils, so that we get proper USB device
    descriptions in the USB device selection menu


author: Christophe Fergeau <cfergeau@redhat.com> - 0.11-5
changelog:
  - Fix build on PPC
  - Remove ExclusiveArch. While spice-gtk will build on ARM and PPC, it
    hasn't been tested on these arch, so there may be some bugs.


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-1
changelog:
  - Rebase to 0.22
    Resolves: rhbz#1109397
  - Fix screenshot of secondary displays
    Resolves: rhbz#1029761
  - Fix potential crash when freeing primary surface.
    Resolves: rhbz#1082555
  - Add RHEL-only SPICE_NOSCALE to disable display scaling.
    Resolves: rhbz#1067346
  - Fix connection to RHEL5 Spice server
    Resolves: rhbz#1017862
  - Fix coroutine leak
    Resolves: rhbz#1007841
  - Fix clipboard hang on clipboard loop
    Resolves: rhbz#1073364


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.22-2
changelog:
  - Additional display pop out when restarting service spice-vdagentd in guest
    Resolves: rhbz#1043782
  - Coverity scan fixes
    Resolves: rhbz#885719
  - Send data message for file copy of 0 size
    Resolves: rhbz#1135104
  - add spice_channel_get_error()
    Resolves: rhbz#1116048
  - Prefix proxy lookup errors
    Resolves: rhbz#1116048


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.26-1
changelog:
  - Rebase to 0.26
    Resolves: rhbz#1214101
  - Allow to transfer multiple files at once
    Resolves: rhbz#1167829
  - Fix smartcard cannot work after restart guest
    Resolves: rhbz#1205548


author: Fabiano Fidêncio <fidencio@redhat.com> - 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242602
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247907
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1244878
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1235442
  - Print file transfer summary to the log
    Resolves: rhbz#1140512
  - Enable proxy when requested
    Related: rhbz#1182252


author: Hans de Goede <hdegoede@redhat.com> 0.8.0-2
changelog:
  - Make the per session agent process automatically reconnect to the system
    spice-vdagentd when the system daemon gets restarted


author: Hans de Goede <hdegoede@redhat.com> - 0.10.0-1
changelog:
  - New upstream release 0.10.0
  - This supports using systemd-logind instead of console-kit (rhbz#756398)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
  - This moves the tmpfiles.d to /usr/lib/tmpfiles.d (rhbz#840194)
  - This adds a systemd .service file (rhbz#848102)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-2
changelog:
  - Fix setting of mode on non arbitrary resolution capable X driver
  - Fix wrong mouse coordinates on vms with multiple qxl devices


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.23-1
changelog:
  - update to 3.6.23 (http://www.sqlite.org/releaselog/3_6_23.html)
  - drop the lemon sprintf patch, upstream doesn't want it
  - make test-suite errors fail build finally


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.4-1
changelog:
  - update to 3.7.4 (http://www.sqlite.org/releaselog/3_7_4.html)
  - deal with upstream source naming, versioning and format changing
  - fixup wal2-test expections wrt SQLITE_DISABLE_DIRSYNC use


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.7.1-1
changelog:
  - update to 3.7.7.1 (http://www.sqlite.org/releaselog/3_7_7_1.html)
  - autoconf no longer needed for build, libdl check finally upstreamed


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.13-1
changelog:
  - update to 3.7.13 (http://www.sqlite.org/releaselog/3_7_13.html)
  - drop no longer needed savepoint relase patch


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.15-1
changelog:
  - update to 3.7.15 (http://www.sqlite.org/releaselog/3_7_15.html)
  - fix an old incorrect date in spec changelog


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1
changelog:
  - Update to latest upstream version 3.3.8
  - Fixed: active ftp crashing
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-22
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to service file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-23
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to tmpfiles.d conf file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-24
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of /var/run/squid was also needed to be in SPEC file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-25
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Squid needs write access to /var/run/squid.


author: Doug Ledford <dledford@redhat.com> - 0.0.4-8.el6
changelog:
  - Update to latest upstream version so we can have an actual URL that works
  - Fix ups for pkgwrangler import and also fix bug reported against rhel5
    version of package (552915)
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 0.0.4-13
changelog:
  - Further tweaks to LSB init script headers
  - Add a %post and %preun scriptlets to add/remove the init script


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-2
changelog:
  - Apply several important fixes from upstream 1.10 branch
  - Related: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-3
changelog:
  - Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names'
                        setting


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-4
changelog:
  - Resolves: #983587 - sss_debuglevel did not increase verbosity in
                        sssd_pac.log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-5
changelog:
  - Resolves: #906427 - Do not use lib64 in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
changelog:
  - New upstream release 1.11 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
  - Related: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
changelog:
  - New upstream release 1.11.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
changelog:
  - New upstream release 1.11.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
  - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
changelog:
  - Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with
                             sssd_be crash
  - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is
                             from different domain than group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-2
changelog:
  - Skip netgroups that don't provide well-formed triplets
  - Related: rhbz#991549 -  sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-3
changelog:
  - Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-4
changelog:
  - Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad
                             manpage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-5
changelog:
  - Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved
                             using ad_matching_rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-6
changelog:
  - Resolves: rhbz#1028057 - Improve detection of the right domain when
                             processing group with members from several domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-7
changelog:
  - Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the
                             "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-9
changelog:
  - Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when
                             using id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-10
changelog:
  - Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext
                             password to ldap_default_authtok


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-11
changelog:
  - Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is
                             never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-13
changelog:
  - Resolves: rhbz#1023409 - Valgrind sssd "Syscall param
                             socketcall.sendto(msg) points to uninitialised
                             byte(s)"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-14
changelog:
  - Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups
                             are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-15
changelog:
  - Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global
                             Catalog
  - Resolves: rhbz#1030483 - Individual group search returned multiple
                             results in GC lookups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-16
changelog:
  - The AD provider is able to resolve group memberships for groups with
    Global and Universal scope
  - Related: rhbz#1033096 - tokenGroups do not work reliable with Global
                            Catalog


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-17
changelog:
  - Re-initialize subdomains after provider startup
  - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is
                            never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-21
changelog:
  - Resolves: rhbz#1048184 - Group lookup does not return member with multiple
                             names after user lookup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-22
changelog:
  - Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses
                             FOREST keyword.
  - Fix two memory leaks in the PAC responder (Related: rhbz#991065)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-23
changelog:
  - Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter
                              is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-25
changelog:
  - Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit
                             fallbacks and overrides settings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-26
changelog:
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-28
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain
  - Fix return value when searching for AD domain flat names
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-29
changelog:
  - Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when
                             ldap_search_base cannot be parsed.
  - Fix a typo in the man page
  - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-30
changelog:
  - Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude
                             uidNumber in filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-31
changelog:
  - Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud
                             DEBUG message in case Kerberos authentication
                             times out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-32
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-34
changelog:
  - Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd
                            sudoers plugin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-35
changelog:
  - Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while
                             regular lookups connect to GC


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-36
changelog:
  - Resolves: rhbz#1059253 - Man page states default_shell option supersedes
                             other shell options but in fact override_shell does.
  - Use the right domain for AD site resolution
  - Related: rhbz#743503 -  [RFE] sssd should support DNS sites


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-38
changelog:
  - Resolves: rhbz#1059753 - Warn with a user-friendly error message when
                             permissions on sssd.conf are incorrect


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-39
changelog:
  - Resolves: rhbz#872177 - [RFE] subdomain homedir template should be
                            configurable/use flatname by default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-40
changelog:
  - Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes
                             have been replicated to the Global Catalog or not


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-41
changelog:
  - Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE
                             attribute when expiring users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-43
changelog:
  - Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send'
                             should be added to RHEL7


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-44
changelog:
  - Resolves: rhbz#1033069 - Configuring two different provider types might
                             start two parallel enumeration tasks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-45
changelog:
  - Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading
                             spaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-48
changelog:
  - Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from
                             ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-49
changelog:
  - Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                             manually, if ID mapping configuration changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-50
changelog:
  - Pull some follow up man page fixes from upstream
  - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                            manually, if ID mapping configuration changes
  - Related: rhbz#1064908 - MAN: Remove misleading memberof example from
                            ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-51
changelog:
  - Fix idmap documentation
  - Bump idmap version info
  - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-52
changelog:
  - Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together
                             with the AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-53
changelog:
  - Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name
                             component in home dir path


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-54
changelog:
  - Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA
                             correctly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-55
changelog:
  - Resolves: rhbz#1073631 - sssd fails to handle expired passwords
                             when OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-56
changelog:
  - Related: rhbz#1072995 -  AD group inconsistency when using AD provider
                             in sssd-1.11-40


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-57
changelog:
  - Related: rhbz#1066096 - not retrieving homedirs of AD users with
                            posix attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-58
changelog:
  - Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong
                            sysdb subdir when a trusted user logs in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-59
changelog:
  - Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA
                            password migration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-60
changelog:
  - Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file
                             with format expected by pam_selinux


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68
changelog:
  - Resolves: rhbz#1097286 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-69
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-70
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-2
changelog:
  - Use libsemanage for SELinux label changes
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-3
changelog:
  - Add the low-level server changes for running as unprivileged user
  - Package the libsss_semange library needed for SELinux label changes
  - Related: rhbz#1113783 - sssd should run under unprivileged user 
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-4
changelog:
  - Fix regressions caused by views patches when SSSD is connected to a
    pre-4.0 IPA server
  - Related: rhbz#1109756 - Rebase SSSD to 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-5
changelog:
  - Amend the sssd-ldap man page with info about lockout setup
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137014 - Shell fallback mechanism in SSSD 
  - Resolves: rhbz#790854 - 4 functions with reference leaks within sssd (src/python/pyhbac.c)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-6
changelog:
  - Include the responder and packaging patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1153518 - service lookups returned in lowercase with
                             case_sensitive=preserving
  - Resolves: rhbz#1158809 - Enumeration shows only a single group multiple
                             times


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-8
changelog:
  - Support overriding SSH public keys with views
  - Support extended attributes via the extop plugin
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137010 - disable midpoint refresh for netgroups if ptask
                             refresh is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-9
changelog:
  - Include the ldap_child and selinux_child patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-10
changelog:
  - Fix two regressions in the new selinux_child process
  - Related: rhbz#1113783 - sssd should run under unprivileged user
  - Resolves: rhbz#1132365 - Remove password from the PAM stack if OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-12
changelog:
  - Move adding the user from pretrans to pre, copy adding the user to
    sssd-krb5-common and sssd-ipa as well in order to work around yum
    ordering issue
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-15
changelog:
  - Resolves: rhbz#1153603 - Proxy Provider: Fails to lookup case sensitive
                             users and groups with case_sensitive=preserving


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-16
changelog:
  - Use upstreamed patches for the rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-17
changelog:
  - Update man page to clarify TGs should be disabled with a custom search base
  - Related: rhbz#1161741 - TokenGroups for LDAP provider breaks in corner cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-18
changelog:
  - Support views for IPA users
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-19
changelog:
  - Resolves: rhbz#1153593 - Manpage description of case_sensitive=preserving
                            is incomplete


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-20
changelog:
  - Resolves: rhbz#1163742 - "debug_timestamps = false" and "debug_microseconds
                             = true" do not work after enabling journald
                             with sssd.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-22
changelog:
  - Handle IPA group names returned from the extop plugin
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-23
changelog:
  - Add an option that describes where to put generated krb5 files to
  - Related: rhbz#1135043 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-24
changelog:
  - Resolves: rhbz#1165794 - sssd does not work with custom value of option
                             re_expression


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-25
changelog:
  - Use alternatives for libwbclient
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-26
changelog:
  - Handle migrating clients between views
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-27
changelog:
  - Resolves: rhbz#1166727 - pam_sss domains option: Untrusted users from
                             the same domain are allowed to auth.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-28
changelog:
  - Fix typo in libwbclient-devel alternatives invocation
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-30
changelog:
  - krb5_child and ldap_child do not call Kerberos calls as root
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-31
changelog:
  - Resolves: rhbz#1169739 - selinuxusermap rule does not apply to trusted
                             AD users
  - Enable running unit tests without cmocka
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-32
changelog:
  - Resolves: rhbz#1124320 - [FJ7.0 Bug]: getgrent returns error because sss
                             is written in nsswitch.conf as default.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-34
changelog:
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Remove Coverity warnings in krb5_child code
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Rebuild to add several forgotten Patch entries
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Sumit Bose <sbose@redhat.com> - 1.12.2-37
changelog:
  - Resolves: rhbz#1169459 - sssd-ad: The man page description to enable GPO HBAC
                             Policies are unclear
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Sumit Bose <sbose@redhat.com> - 1.12.2-38
changelog:
  - Resolves: rhbz#1171215 - Crash in function get_object_from_cache
  - Resolves: rhbz#1171383 - getent fails for posix group with AD users after
                             login
  - Resolves: rhbz#1171382 - getent of AD universal group fails after group users
                             login
  - Resolves: rhbz#1170300 - Access is not rejected for disabled domain
  - Resolves: rhbz#1162486 - Error processing external groups with
                             getgrnam/getgrgid in the server mode
  - Resolves: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-39
changelog:
  - Resolves: rhbz#1175408 - SSSD should not fail authentication when only allow
                             rules are used
  - Resolves: rhbz#1175705 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-40
changelog:
  - Resolves: rhbz#1177140 - gpo_child fails if "log level" is enabled in smb.conf
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-43
changelog:
  - Resolves: rhbz#1182183 - pam_sss(sshd:auth): authentication failure with
                             user from AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-44
changelog:
  - Resolves: rhbz#1184140 - Users saved throug extop don't have the
                             originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-45
changelog:
  - Open socket to the PAC responder in krb5_child before dropping root
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-46
changelog:
  - Handle GID override in MPG domains
  - Handle views with mixed-case domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-55
changelog:
  - Fix endianess bug in fill_id()
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-57
changelog:
  - Run the restart in sssd-common posttrans
  - Explicitly require libwbclient
  - Resolves: rhbz#1187113 - sssd deamon was not running after RHEL 7.1 upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.2
changelog:
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.3
changelog:
  - Set a pointer in ldap_child to NULL to avoid warnings
  - Related: rhbz#1198759 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.4
changelog:
  - Handle case where there is no default and no rules
  - Resolves: rhbz#1192314 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.5
changelog:
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.6
changelog:
  - Initialize variable in the views code in one success and one failure path
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-59
changelog:
  - Resolves: rhbz#1201840 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-60
changelog:
  - Filter out domain-local groups during AD initgroups operation
  - Related: rhbz#1201840 - SSSD downloads too much information when fetching
                            information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0.1alpha
changelog:
  - Resolves: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Relax the libldb requirement
  - Resolves: rhbz#1221992 - sssd_be segfault at 0 ip sp error 6 in
                             libtevent.so.0.9.21
  - Resolves: rhbz#1221839 - SSSD group enumeration inconsistent due to
                             binary SIDs
  - Resolves: rhbz#1219285 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Resolves: rhbz#1217559 - [RFE] Support GPOs from different domain controllers
  - Resolves: rhbz#1217350 - ignore_group_members doesn't work for subdomains
  - Resolves: rhbz#1217127 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1216285 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set
  - Resolves: rhbz#1214719 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1214718 - Overridde with --login fails trusted adusers
                             group membership resolution
  - Resolves: rhbz#1214716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1214337 - Overrides with --login work in second attempt
  - Resolves: rhbz#1212489 - Disable the cleanup task by default
  - Resolves: rhbz#1211830 - external users do not resolve with
                             "default_domain_suffix" set in IPA server sssd.conf
  - Resolves: rhbz#1210854 - Only set the selinux context if the context
                             differs from the local one
  - Resolves: rhbz#1209483 - When using id_provider=proxy with
                             auth_provider=ldap, it does not work as expected
  - Resolves: rhbz#1209374 - Man sssd-ad(5) lists Group Policy Management
                             Editor naming for some policies but not for all
  - Resolves: rhbz#1208507 - sysdb sudo search doesn't escape special characters
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface
  - Resolves: rhbz#1206566 - SSSD does not update Dynamic DNS records if
                             the IPA domain differs from machine hostname's
                             domain
  - Resolves: rhbz#1206189 - [bug] sssd always appends default_domain_suffix
                             when checking for host keys
  - Resolves: rhbz#1204203 - sssd crashes intermittently
  - Resolves: rhbz#1203945 - [FJ7.0 Bug]: getgrent returns error because
                             sss is written in nsswitch.conf as default
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only
  - Resolves: rhbz#1202245 - SSSD's HBAC processing is not permissive enough
                             with broken replication entries
  - Resolves: rhbz#1201271 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything
  - Resolves: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                             user logs in with password and token code from IPA
  - Resolves: rhbz#1199541 - Read and use the TTL value when resolving a
                             SRV query
  - Resolves: rhbz#1199533 - [RFE] Implement background refresh for users,
                             groups or other cache objects
  - Resolves: rhbz#1199445 - Does sssd-ad use the most suitable attribute
                             for group name?
  - Resolves: rhbz#1198477 - ccname_file_dummy is not unlinked on error
  - Resolves: rhbz#1187103 - [RFE] User's home directories are not taken
                             from AD when there is an IPA trust with AD
  - Resolves: rhbz#1185536 - In ipa-ad trust, with 'default_domain_suffix' set
                             to AD domain, IPA user are not able to log unless
                             use_fully_qualified_names is set
  - Resolves: rhbz#1175760 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires
  - Resolves: rhbz#1163806 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1205160 - Complain loudly if backend doesn't start due
                             to missing or invalid keytab


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 upstream
  - Related: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Resolves: rhbz#910187 - [RFE] authenticate against cache in SSSD
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-3
changelog:
  - Add support for InfoPipe wildcard requests
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1206565 - [RFE] Add dualstack and multihomed support
  - Resolves: rhbz#1187146 - If v4 address exists, will not create nonexistant
                             v6 in ipa domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-8
changelog:
  - Remove OTP from PAM stack correctly
  - Related: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                            user logs in with password and token code from IPA
  - Handle sssd-owned keytabs when sssd runs as root
  - Related: rhbz#1205144 - RFE: Support one-way trusts for IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-9
changelog:
  - Fix memory cache integration tests
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups
  - Resolves: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-10
changelog:
  - Resolves: rhbz#1244949 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-11
changelog:
  - Remove binary blob from SC patches as patch(1) can't handle those
  - Related: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-12
changelog:
  - More memory cache related fixes
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-13
changelog:
  - Fix missing dependency of sssd-tools
  - Resolves: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                             named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-14
changelog:
  - Bump release number
  - Related: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                            named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-15
changelog:
  - Resolves: rhbz#1249015 - KDC proxy not working with SSSD krb5_use_kdcinfo
                             enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-16
changelog:
  - Fix race condition in invalidating the memory cache
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-19
changelog:
  - Resolves: rhbz#1202724 - [RFE] Add a way to lookup users based on CAC
                             identity certificates


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-20
changelog:
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA
                            subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-22
changelog:
  - Resolves: rhbz#1244950 - Add index for 'objectSIDString' and maybe to
                             other cache attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-23
changelog:
  - Support import/export for local overrides
  - Support FQDNs for local overrides
  - Resolves: rhbz#1254184 - sss_override does not work correctly when
                             'use_fully_qualified_names = True'


author: Martin Kosek <mkosek@redhat.com> - 1.13.0-25
changelog:
  - Resolves: rhbz#1254189 - sss_override contains an extra parameter --debug
                             but is not listed in the man page or in
                             the arguments help


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-26
changelog:
  - Resolves: rhbz#1256398 - sssd cannot resolve user names containing
                             backslash with ldap provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-29
changelog:
  - Resolves: rhbz#1263587 - sss_override --name doesn't work with RFC2307
                             and ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-30
changelog:
  - Patches required for better handling of failover with one-way trusts
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA subdomain
                            code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-31
changelog:
  - Remove -d from sss_override manpage
  - Related: rhbz#1259512 - sss_override : The local override user is not found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-33
changelog:
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-34
changelog:
  - Fix a Coverity warning in dyndns code
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-35
changelog:
  - Resolves: rhbz#1250135 - Detect re-established trusts in the IPA
                             subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-36
changelog:
  - Resolves: rhbz#1266107 - AD: Conditional jump or move depends on
                             uninitialised value


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40
changelog:
  - Resolves: rhbz#1270827 - local overrides: don't contact server with
                             overridden name/id


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: William Poteat <wpoteat@redhat.com> 0.98.4-1
changelog:
  - 740788: Getting error with quantity subscribe using subscription-assitance
    page. (wpoteat@redhat.com)
  - 755130: add extra whitespace to classic warning (cduryee@redhat.com)
  - 759199: rhsmcertd is logging the wrong value for certFrequency
    (cduryee@redhat.com)
  - 758471: install-num-migrate-to-rhsm threw traceback when no instnum was
    found. (awood@redhat.com)
  - 752572: add interval logging statements back in on rhsmcertd startup
    (cduryee@redhat.com)
  - 756507: do not use output from "getlocale" as input for "setlocale"
    (cduryee@redhat.com)
  - 746259: Don't allow the user to pass in an empty string as an activation key
    (awood@redhat.com)
  - 705883: Fix error dialog modal issues. (dgoodwin@redhat.com)
  - 756173: Unexpected behavoir change in subscription-manager unregister
    (wpoteat@redhat.com)
  - 746732: Only use fallback locales for dates we need to parse
    (alikins@redhat.com)
  - 753093: The available subscriptions count does not show correctly in
    Subscription Manager GUI (wpoteat@redhat.com)
  - 749636: Client should not support users entering activation keys and existing
    consumer ids (bkearney@redhat.com)
  - 719743: Improved text output for successful pool subscription
    (bkearney@redhat.com)
  - 755541: Enhanced the message in the katello plugin to debug when the backend
    system does not support environments. (bkearney@redhat.com)
  - 755035: Migration script should work on RHEL 5.7 and up. (awood@redhat.com)
  - 749332: Normalize the error messages for not being registered
    (bkearney@redhat.com)
  - 754821: Default org of "Unknown" was not marked for gettext
    (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.6-1
changelog:
  - 755031: Update to Subscription Assistant quantity check in unlimited pool
    case. (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.98.8-1
changelog:
  - 755861: Fixed quantity selection issue due to older version of pygtk on 5.8.
    (mstead@redhat.com)
  - 765905: add man pages for subscription-manager-migration (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.99.2-1
changelog:
  - Initial Fedora build. (dgoodwin@redhat.com)
  - 754425: Remove grace period logic (jbowes@redhat.com)
  - 766577: Fix error on "redeem" with multibyte lang (alikins@redhat.com)
  - Add README.Fedora to Fedora builds (cduryee@redhat.com)
  - 757697: report xen dom0 as host, not guest (cduryee@redhat.com)
  - 747014: Help icon was not working in RHEL 5. (awood@redhat.com)
  - 767754: Invalid certificate status when stacked entitlements have overlapping
    dates (wpoteat@redhat.com)
  - 745995: Ensure default quantity calc does not include future entitlements.
    (mstead@redhat.com)
  - 760017: Display a friendly message when an invalid installation number is
    encountered. (awood@redhat.com)
  - 758162: allow --force to override missing mappings (cduryee@redhat.com)
  - 759069: catch exception when enabling invalid repositories
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.3-1
changelog:
  - 768983: don't purge future dated entitlements (jbowes@redhat.com)
  - 769642: confusing output from rhn-migrate-to-rhsm when autosubscribe fails
    (cduryee@redhat.com)
  - 769433: make rhel5 firstboot modules use bound gettext (alikins@redhat.com)
  - Custom facts should be loaded after hardware facts. (awood@redhat.com)
  - 745973: Fixed missing product icons for partially stacked future entitlement.
    (mstead@redhat.com)
  - 769433: Tag the module names as gettext (alikins@redhat.com)
  - 761478: Facts viewed in the GUI were getting out of date when system
    entitlement status changed. (awood@redhat.com)
  - 761133: Support fixing yellow state in compliance assistant.
    (dgoodwin@redhat.com)
  - 766577: use unicode strings for possible server errors (alikins@redhat.com)
  - 768415: remove hardcoded reference to x86_64 for extra channel enablement
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.4-1
changelog:
  - 766778: Improvements on quantity spinner max value entry. (mstead@redhat.com)
  - 736465: "Product's Subscription Details" in the gui is neglecting stack
    subscriptions (wpoteat@redhat.com)
  - 772209: install-num-migrate-to-rhsm does not work on x86 arch
    (cduryee@redhat.com)
  - 761140: enable the help button in firstboot (jbowes@redhat.com)
  - 771726: Rename man manpage for rhsm-compliance-icon to rhsm-icon.
    (bkearney@redhat.com)
  - 758038: Guest's system facts displays "virt.uuid: Unknown"
    (wpoteat@redhat.com)
  - 767265: Always send up the list of packages on registration.
    (awood@redhat.com)
  - 768983: show future subs in list --consumed (jbowes@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.5-1
changelog:
  - Updated releasers.conf for rhel-6.3 (mstead@redhat.com)
  - Making return code from subscribe --pool consistent with subscribe --auto
    (awood@redhat.com)
  - 785018: Corrected help text for --no-auto. (awood@redhat.com)
  - 656944: List IPv6 information in facts. (awood@redhat.com)
  - 689608: Subscription failure should result in a return code of 1.
    (awood@redhat.com)
  - 772921: Do not show message dialog when multiple sub-man launches detected.
    (mstead@redhat.com)
  - 772921: Clicking notification icon shuts down subscription manager.
    (mstead@redhat.com)
  - 734533: Failure to import should result in a return code of 1.
    (awood@redhat.com)
  - 782549: Subscription manager throws exception when an expired cert exists.
    (mstead@redhat.com)
  - 772338: Subscription-manager-gui help documentation review
    (wpoteat@redhat.com)
  - 772338: subscription-manager-gui Help documentation needs a review
    (wpoteat@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 781510: 'subscription-manager clean' should delete redhat.repo
    (awood@redhat.com)
  - 771726: Man page for rhsm-compliance-icon should be re-authored to rhsm-icon
    (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.6-1
changelog:
  - 783542: Return code for bad input to install-num-migrate-to-rhsm should be 1.
    (awood@redhat.com)
  - 773707: remove hard coded reference to /etc/pki/product (cduryee@redhat.com)
  - 783278: do not alter system facts on dry run (cduryee@redhat.com)
  - IPv4 and IPv6 facts that are undefined should return 'Unknown' instead of
    'None'. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.7-1
changelog:
  - Improve relevancy of details on my installed products tab.
    (dgoodwin@redhat.com)
  - 719743: Added better punctuation to one status message (bkearney@redhat.com)
  - Have client check sockets on non-stacked entitlements as well.
    (dgoodwin@redhat.com)
  - New date compare implemetation for determining start/end dates
    (mstead@redhat.com)
  - Add "zanata-pull" and "zanata-push" makefile targets (alikins@redhat.com)
  - as_IN seems busted on RHEL6, so skip it (alikins@redhat.com)
  - pep8/make stylish cleanups (alikins@redhat.com)
  - 741155: Fixed start/end date calculations for My Installed Software tab
    (mstead@redhat.com)
  - fixes for po files from zanata (alikins@redhat.com)
  - new po files from zanata (alikins@redhat.com)
  - 767620: Add manage_repos config option. (dgoodwin@redhat.com)
  - 784031: remove katello plugin (cduryee@redhat.com)
  - Make return code from import consistent with subscribe. (awood@redhat.com)
  - Add Fedora release target. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.8-1
changelog:
  - 790205: do not lay down install-num-migrate-to-rhsm on rhel6 systems
    (cduryee@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 795541: Change the environment filtering which is being done on the client
    side (bkearney@redhat.com)
  - Add consumer deleted on server detection. (jbowes@redhat.com)
  - Fix spec for both Fedora 15+ and RHEL 7+. (dgoodwin@redhat.com)
  - Fix Makefile for both Fedora 15+ and RHEL 7+. (dgoodwin@redhat.com)
  - Add service level to register and subscribe CLI commands.
    (dgoodwin@redhat.com)
  - Add service-level CLI command. (dgoodwin@redhat.com)
  - delete consumer on rhsmcertd checkin (jbowes@redhat.com)
  - pull out rhsmcertd python worker to its own file (jbowes@redhat.com)
  - clean up some compiler warnings in rhsmcertd (jbowes@redhat.com)
  - String cleanups (alikins@redhat.com)
  - 790217: install-num-migrate-to-rhsm shouldn't copy both Desktop and
    Workstation product certs. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.9-1
changelog:
  - Updating required version of python-rhsm (mstead@redhat.com)
  - fixes for po files (alikins@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 799394: Do not attempt to remove redhat.repo if it does not exist.
    (awood@redhat.com)
  - 800121: do not attempt to call UEP when system is unregistered
    (cduryee@redhat.com)
  - 799271: The usage string for service-levels contained the incorrect command
    name (bkearney@redhat.com)
  - 799271: The usage string for service-levels contained the incorrect command
    name (bkearney@redhat.com)
  - 704408: date field patch fixes per jbowes (cduryee@redhat.com)
  - 797243: make unregister finish updating repos (alikins@redhat.com)
  - 704408: allow users to clear the date box for contract searches
    (cduryee@redhat.com)
  - 799316: Re-add librsvg2 dependency (dgoodwin@redhat.com)
  - 797996: Add manage_repos setting to default rhsm.conf (dgoodwin@redhat.com)
  - 795564: Add a newline at the end of the options error (bkearney@redhat.com)
  - 752756: Cache the facts, and refresh the validity facts whenever they change.
    (bkearney@redhat.com)
  - Return a consistent scope for public IPv6 addresses across EL5 and EL6.
    (awood@redhat.com)
  - 737773: Do not show the forgotten password url as a link.
    (bkearney@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Explicitly define el5 macro in spec file. (dgoodwin@redhat.com)
  - 796730: Improve the clarity of the usage statement (bkearney@redhat.com)
  - 767790: Improve the messaging when a system is not registered.
    (bkearney@redhat.com)
  - 797294: Typo in commit caused execution error. (bkearney@redhat.com)
  - 796756: use only the basename for the usage string (bkearney@redhat.com)
  - 796756: The usage string should be less verbose to be more consistent with
    the other executable files (bkearney@redhat.com)
  - CLI service-levels touchups. (dgoodwin@redhat.com)
  - 656896: remove attribute 'swapped' (msuchy@redhat.com)
  - Release to Fedora 17 branch as well. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.10-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 801434: Add at-spi accessibility name to calendar selection widget.
    (awood@redhat.com)
  - 800917: Display service level and type in All Subs tab (dgoodwin@redhat.com)
  - Add support for "release" command (alikins@redhat.com)
  - 801517: Missed translating a label during the registration process
    (bkearney@redhat.com)
  - 801513: One translation had a copy/paste error (bkearney@redhat.com)
  - The migration script should write default proxy auth settings.
    (awood@redhat.com)
  - Revert "801513: A replacement variable was used in a translation file where
    it was not needed" (dgoodwin@redhat.com)
  - 801545: Break apart the string to make them easier for the translators
    (bkearney@redhat.com)
  - 801513: A replacement variable was used in a translation file where it was
    not needed (bkearney@redhat.com)
  - 798015: Migration script should play nicely with proxies. (awood@redhat.com)
  - 742033: Unsubscribe button is not greyed out when nothing is selected
    (wpoteat@redhat.com)
  - 783990: Handle network errors when migrating. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.11-1
changelog:
  - 805906: fix missing imports for firstboot (jbowes@redhat.com)
  - Fix RHEL6 firstboot attribute error (dgoodwin@redhat.com)
  - 772218: throw an error if unparsed command line options exist
    (cduryee@redhat.com)
  - Add missing imports to rhsm_login for error dialogs (jbowes@redhat.com)
  - 803386: Display product ID in GUI and CLI. (awood@redhat.com)
  - Fix specfile for el5 firstboot (jbowes@redhat.com)
  - 804227,804076,804228: Handle 404's from old candlepin servers without
    /release (alikins@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for subscribe
    command (mstead@redhat.com)
  - 803778: Updated the --servicelevel not supported messages for register
    command (mstead@redhat.com)
  - 803756,803762: Updated error message for service-level command
    (mstead@redhat.com)
  - fixups for strings from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - 789007: Migration should fail early when attempted with non org admin user.
    (awood@redhat.com)
  - 805024: Hide extra separator along with redeem button. (awood@redhat.com)
  - 800999: Added --servicelevel arg to CLI list command (mstead@redhat.com)
  - 804227: Fix issues with repos --list (alikins@redhat.com)
  - Add proper back/forward logic for firstboot sla subscribe (jbowes@redhat.com)
  - 800933: Display service level and type in CLI list commands.
    (dgoodwin@redhat.com)
  - 789008: Print a more specific error message when Candlepin calls fail.
    (awood@redhat.com)
  - hook up sla firstboot to more registration cases (jbowes@redhat.com)
  - Define globals at module scope. (awood@redhat.com)
  - Remove firstboot subscriptions module (jbowes@redhat.com)
  - Fix broken tests for DST. Stop using time.time() (alikins@redhat.com)
  - Add error cases for firstboot autobind (jbowes@redhat.com)
  - Perform the actual entitlement bind on confirm subs screen
    (jbowes@redhat.com)
  - Set up shared state for AutobindController in firstboot (jbowes@redhat.com)
  - Extract a controller class for sla select logic (jbowes@redhat.com)
  - Break apart autobind first boot module (jbowes@redhat.com)
  - Add some autobind wizard button spacing. (dgoodwin@redhat.com)
  - Always update the icon and notification details on status change.
    (mstead@redhat.com)
  - Only add icon click listeners once. (mstead@redhat.com)
  - Adding notification nag icon support for Registration Required
    (mstead@redhat.com)
  - add firstboot rhsm_autobind to spec file (jbowes@redhat.com)
  - Autobind cancel during registration will now unregister you.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Move back/forward/cancel buttons in sla selection to parent
    (jbowes@redhat.com)
  - Revert "Update CLI to handle server that doesn't support service levels."
    (dgoodwin@redhat.com)
  - Update GUI to handle server that does not support service levels.
    (dgoodwin@redhat.com)
  - Update CLI to handle server that doesn't support service levels.
    (dgoodwin@redhat.com)
  - Add autobind screen to firstboot (jbowes@redhat.com)
  - Fix firstboot unregister import error. (dgoodwin@redhat.com)
  - Add missing spacers to main window toolbar. (dgoodwin@redhat.com)
  - Fix an error handling bug. (dgoodwin@redhat.com)
  - Get register screen working in el6 firstboot (jbowes@redhat.com)
  - Center wizard's error dialog on main window (mstead@redhat.com)
  - Removing commented out code in register dialog (mstead@redhat.com)
  - Add skip option instead of autobind in register dialog. (mstead@redhat.com)
  - Fix preferences dialog error when not registered. (dgoodwin@redhat.com)
  - Improved error handling for autobind wizard. (dgoodwin@rm-rf.ca)
  - Fix message window warnings. (dgoodwin@rm-rf.ca)
  - Fix alignment on select SLA screen. (dgoodwin@redhat.com)
  - Display the service level selected when confirming autobind subs (dgoodwin
    @rm-rf.ca)
  - Implement Cancel button on autobind wizard screens. (dgoodwin@redhat.com)
  - Allow setting service level from preferences dialog. (dgoodwin@redhat.com)
  - First cut at a preferences dialog. (dgoodwin@redhat.com)
  - Pack SLA's into a scrolled window. (dgoodwin@rm-rf.ca)
  - Handle any exception that happens when the autobind wizard is loaded.
    (mstead@redhat.com)
  - Setting parent window on AutobindDialog and add titles to screens.
    (mstead@redhat.com)
  - Integrating autobind wizard with register gui. (mstead@redhat.com)
  - Fix autobind wizard disappearing on window switch. (dgoodwin@redhat.com)
  - Do not set SLA until user hit's subscribe button. (dgoodwin@redhat.com)
  - Polish autobind glade UI (dgoodwin@redhat.com)
  - Set and use the system's service level. (dgoodwin@redhat.com)
  - Cleaning up Select SLA screen (mstead@redhat.com)
  - Added framework for back button support (mstead@redhat.com)
  - Handle no SLAs cover all installed products. (dgoodwin@rm-rf.ca)
  - Handle launching autobind when no entitlements needed. (dgoodwin@rm-rf.ca)
  - Set detected prod list in Select SLA screen (mstead@redhat.com)
  - Close autobind wizard once complete. (dgoodwin@redhat.com)
  - Hookup actual bind in autobind wizard. (dgoodwin@redhat.com)
  - SelectSLA now keeps track of selected SLA and pass to confirm dialog.
    (mstead@redhat.com)
  - Load the autobind glade file on wizard creation. (mstead@redhat.com)
  - Switch to more explicit screen switching. (dgoodwin@redhat.com)
  - Set screen title when screen is changed. (mstead@redhat.com)
  - Allow screens to pass custum data during wizard screen change.
    (mstead@redhat.com)
  - Hooking up button signals for selectsla (mstead@redhat.com)
  - Add callback to allow screen change in wizard (mstead@redhat.com)
  - Fixing broken tests due to leap year. (mstead@redhat.com)
  - Attempt to keep button bar right aligned. (mstead@redhat.com)
  - Removed the button bar form the wizard. (mstead@redhat.com)
  - Created AutobindWizardScreen to provide contract for AutobindWizard
    (mstead@redhat.com)
  - Display appropriate screen in SLA wizard. (mstead@redhat.com)
  - Fixed GtkWarning: IA__gtk_widget_reparent error when launchig dialog
    (mstead@redhat.com)
  - First cut at adding the Select SLA screen. (mstead@redhat.com)
  - Check if dry-run results cover required products. (dgoodwin@redhat.com)
  - Check dry run autobind results for each service level. (dgoodwin@redhat.com)
  - Sketch out an autobind wizard class. (dgoodwin@redhat.com)
  - Start sketching out the confirm subscriptions screen. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.12-1
changelog:
  - Don't skip past firstboot login page on invalid user/pass (jbowes@redhat.com)
  - 805690: Turn repo gpgcheck off if no gpgkey specified. (dgoodwin@redhat.com)
  - 795552: Put safe int conversions around certain fact checks.
    (bkearney@redhat.com)
  - 804100: display an error when candlepin doesn't support release
    (jbowes@redhat.com)
  - 804227: expect a Release object instead of a bare string (alikins@redhat.com)
  - Latest string files from zanata (bkearney@redhat.com)
  - 805450: display better error message when autosubscribing
    (cduryee@redhat.com)
  - 805594: Give each "Subscribe" button in the GUI a unique at-spi name.
    (awood@redhat.com)
  - 803374: Provide unambiguous at-spi names for widgets. (awood@redhat.com)
  - 805353: subscription-manager list --help should use consistent wording for
    servicelevel option. (awood@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.13-1
changelog:
  - latest strings into keys.pot and updated from zanata (alikins@redhat.com)
  - 809611: Fix undefined variable in installedtab for expired
    (alikins@redhat.com)
  - pep8/pyflakes cleanups (alikins@redhat.com)
  - Repolib now requires a UEP connection. (awood@redhat.com)
  - Use numeric index to access portion of URL. (awood@redhat.com)
  - 807785: use a better title on the autobind wizard (jbowes@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Add release selection to preferences dialog (alikins@redhat.com)
  - 805415: handle entitlements for socket count of 0 (alikins@redhat.com)
  - 804201: Fix sla select in firstboot after back button (jbowes@redhat.com)
  - 807477: Delay attempt to connect to RHN until after basic error checks.
    (awood@redhat.com)
  - 803374: Change the 'Subscribe' button to read 'Auto-subscribe.'
    (awood@redhat.com)
  - 808217: Add a header to the release list (bkearney@redhat.com)
  - 807153: Provide a more informative error message when encountering repodata
    errors. (awood@redhat.com)
  - 807822: Allow setting release to '' (mstead@redhat.com)
  - 807036: Instruct users to go to All Subscriptions for all SLA failures
    (bkearney@redhat.com)
  - 807407: Subscripton Manager substitutes "" for $releasever when releaseVer
    not set on consumer (wpoteat@redhat.com)
  - 803756: Trap RemoteServerException as well as RestLibException (404) for
    service-level command (mstead@redhat.com)
  - 806941: Removed unknown swapped attribute from autobind.glade.
    (mstead@redhat.com)
  - 807360: Allow the repos command to work without being registered
    (bkearney@redhat.com)
  - 806457: Fix deletion of productids with yum localinstall (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.0.1-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - add test cases for autobind.py (alikins@redhat.com)
  - pep8 and pyflakes cleanups (jbowes@redhat.com)
  - 815563: Remove incorrect at-spi locators. (awood@redhat.com)
  - 795541: Environment command should omit the Library from katello
    (bkearney@redhat.com)
  - 806993: Tolerate the provision of a scheme with the proxy string.
    (awood@redhat.com)
  - remove remnants of subscription_assistant.py (alikins@redhat.com)
  - 811952: Don't try to unsubscribe old ents if we register (alikins@redhat.com)
  - 811952: Handle errors on unsubscribing ent certs (alikins@redhat.com)
  - 812929: Fix issue with selected sla not being in suitable_slas
    (mstead@redhat.com)
  - 812897: Use consistent casing for the word "Error" (awood@redhat.com)
  - Improve preferences dialog error message. (dgoodwin@redhat.com)
  - 811863: Handle unforseen errors in preferences dialog. (dgoodwin@redhat.com)
  - 811340: Select the first product in My Installed Software table by default.
    (awood@redhat.com)
  - 811594: The config, repos, and facts commands should default to --list if no
    options are provided. (awood@redhat.com)
  - 812104: add "release" and "service-level" to completion (alikins@redhat.com)
  - 801434: Add at-spi accessibility name to calendar widget. (awood@redhat.com)
  - updates to man pages (deon@deonlackey.com)
  - 811591: Use consistent messages for not being registered
    (bkearney@redhat.com)
  - Updated the --servicelevel option description (deon@deonlackey.com)
  - Use numeric index to access value returned by urlparse. (awood@redhat.com)
  - 790579: Show translations for errors thrown by installation number parsing.
    (awood@redhat.com)
  - adding --servicelevel option to list command (deon@deonlackey.com)
  - 810306: Improved messaging in firstboot (mstead@redhat.com)
  - 811337: unregister any time we return to rhsm_login (jbowes@redhat.com)
  - 807153: Allow more aggressive deletion of product certs. (awood@redhat.com)
  - 810399: require the latest rhn-setup-gnome for firstboot (alikins@redhat.com)
  - 810290: use correct calculation for "Next update" time in sm-gui
    (cduryee@redhat.com)
  - 810363: handle socket errors for bad proxy host in firstboot
    (alikins@redhat.com)
  - Latest man page and documentation (dlackey@redhat.com)
  - 809989: Add the shortened password url to the strings files.
    (bkearney@redhat.com)
  - 809989: Add a shorter URL to the registration screen (bkearney@redhat.com)
  - rev the zanata version to 1.0.X (alikins@redhat.com)
  - Incrementing version number after 6.3 branch. (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.0.2-1
changelog:
  - Updating strings from zanata (mstead@redhat.com)
  - Add new server setup GUI screen. (dgoodwin@redhat.com)
  - Add new server setup CLI options. (alikins@redhat.com)
  - 813296: Remove check for candlepin_version (jbowes@redhat.com)
  - Allow importing multiple subscriptions at once (jbowes@redhat.com)
  - 820170: Subscription Manager release --list should display "not supported"
    message for older candlepin. (wpoteat@redhat.com)
  - 817938: Make columns in subscription-manager tables sortable.
    (awood@redhat.com)
  - 812153: Release command should have a --show command which is the default.
    (wpoteat@redhat.com)
  - 820080: Fix "Configuration" spelling on firstboot page (alikins@redhat.com)
  - Set the parent window for the about dialog (mstead@redhat.com)
  - removing a sentence from the manpage about working on RHEL 5.8 and later,
    bz820765 (deon@deonlackey.com)
  - 821024: Properly handle ESC on preferences dialog (mstead@redhat.com)
  - Replaced toolbar with menubar. (mstead@redhat.com)
  - 820040,820037,820030: don't break multibyte help blurbs (alikins@redhat.com)
  - 817036: Add a version command to subscription-manager. (awood@redhat.com)
  - The unbindAll command now returns JSON. (awood@redhat.com)
  - Explain the conditional imports more accurately. (alikins@redhat.com)
  - Print different message when subscribing to no service level.
    (awood@redhat.com)
  - remove deprecated use of "md5" module (alikins@redhat.com)
  - Enable and disable available repos on client machine from Subscription
    Manager CLI (wpoteat@redhat.com)
  - 790939: Add SLA to rhn-migrate-classic-to-rhsm. (awood@redhat.com)
  - 812388: Show the number of entitlements unsubscribed from. (awood@redhat.com)
  - 818298: release --list should not display rhel-5 when only rhel-6 product is
    installed (wpoteat@redhat.com)
  - 810236: Update facts after registering with --consumerid.
    (dgoodwin@redhat.com)
  - 818461: invalid date format error when using or_IN.UTF-8 (cduryee@redhat.com)
  - Store date of migration in migration facts for rhn-migrate-classic-to-rhsm.
    (awood@redhat.com)
  - Unify our el5 and el6 firstboot modules (jbowes@redhat.com)
  - add a gconf setting for users who do not want to use the icon
    (cduryee@redhat.com)
  - do not use the gui by default when migrating (cduryee@redhat.com)
  - Allow service level change for consumer via CLI independent of other calls.
    (wpoteat@redhat.com)
  - 815479: Incorrect owner should be relayed on service level list call.
    (wpoteat@redhat.com)
  - 817390: add completion support for servicelevel (alikins@redhat.com)
  - 817117: fix completion of environment command (alikins@redhat.com)
  - 816377: handle cert migration data being missing (alikins@redhat.com)
  - Store date of migration and installation number in migration facts.
    (awood@redhat.com)
  - Fixing registration error when loading SlaWizard (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.3-1
changelog:
  - 817938: Add sorting to the contract selection table. (awood@redhat.com)
  - 822706: gtk widget visibility toggle compat for el5 (jbowes@repl.ca)
  - 822706: Display Register button on Installed Product tab if not registered.
    (mstead@redhat.com)
  - 825286: Handle unset service levels in a manner similar to unset release
    versions. (awood@redhat.com)
  - 826735: Merge start/end date sub details into one row. (dgoodwin@redhat.com)
  - fix make stylish (jbowes@repl.ca)
  - 811593: Feedback when not providing command options is not consistent.
    (wpoteat@redhat.com)
  - 806986: Subscription-Manager should refer to subscription name and product
    name. (wpoteat@redhat.com)
  - 825737: Service-level --set should configure proper value for GUI
    (wpoteat@redhat.com)
  - 817901: Disable the match installed products filter. (dgoodwin@redhat.com)
  - Remove unecessary use of lambda. (dgoodwin@redhat.com)
  - 818282: Sort virtual subscriptions to the top of contract selector.
    (dgoodwin@redhat.com)
  - 818383: display better messages for yum plugin usage (cduryee@redhat.com)
  - Fix logging of deleted expired certs (jbowes@repl.ca)
  - Remove the constants module (jbowes@repl.ca)
  - Remove useless format specifier (jbowes@repl.ca)
  - 801187: condense list --consumed output (jbowes@repl.ca)
  - Don't use kwargs for cli subclasses; it makes things shorter (jbowes@repl.ca)
  - Remove desc cli argument, no module used it (jbowes@repl.ca)
  - Use super for cli module init (jbowes@repl.ca)
  - Clean up rpmlint messages (jbowes@repl.ca)
  - Autogenerate the cli usage message (jbowes@repl.ca)
  - Remove obsolete nose tests (jbowes@repl.ca)
  - 812410: Show product name on CLI subscribe to pool. (dgoodwin@redhat.com)
  - 824680: make init script status return proper exit code (alikins@redhat.com)
  - fix nosetests for progress gui (jbowes@repl.ca)
  - Rework urlparse calls to work with RHEL 5. (awood@redhat.com)
  - 818238: Set a better progress title for sub search (jbowes@repl.ca)
  - 771756: Drop "rhsm icon" from the rhsm-icon usage message (jbowes@repl.ca)
  - 820294: Let candlepin handle org/env/key validation (jbowes@repl.ca)
  - 818397: Rename subscription-manager-gnome to -gui (jbowes@repl.ca)
  - Reduce wordiness of version command. (awood@redhat.com)
  - 824333: use rhel5-friendly urlparse options (cduryee@redhat.com)
  - Log the program versions when starting the GUI or making a CLI call.
    (awood@redhat.com)
  - Fix the About dialog to work in RHEL 5.8 (awood@redhat.com)
  - 821544: Remove the stacking id attribute from my susbcriptions since it is
    not being used currently. (bkearney@redhat.com)
  - add checkcommits exception for 824100 (alikins@redhat.com)
  - 824100: update zanata.xml to grab latest pt_BR.po (alikins@redhat.com)
  - 822057: do not hard-code cdn to port 443 (cduryee@redhat.com)
  - Display sane error on CLI if missing CA certificate. (dgoodwin@redhat.com)
  - Display sane error in GUI if missing CA certificate. (dgoodwin@redhat.com)
  - 812373: Terminology change for list --installed and --consumed
    (wpoteat@redhat.com)
  - zanata client will push any po/*.pot files it finds. Stop.
    (alikins@redhat.com)
  - 789182: Fix UnicodeEncodeError when logging. (awood@redhat.com)
  - README for github and people who like to read (alikins@redhat.com)
  - checkcommits exception for xgettext patch fixed in master
    (alikins@redhat.com)
  - 820743: Fix these strings so xgettext finds extracts them
    (alikins@redhat.com)
  - refine the regex for "make gettext_lint" (alikins@redhat.com)
  - Upload el6 yum packages to another dir for compatability.
    (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.4-1
changelog:
  - 818978: Use systemd instead of sysv when installing on F17+ and RHEL7+.
    (mstead@redhat.com)
  - 827035: update identity certificate (jmrodri@gmail.com)
  - registergui: make screens without guis more generic (jbowes@redhat.com)
  - Incorrect field value removed on previous change (wpoteat@redhat.com)
  - 829812: Add an unset command for the release command (bkearney@redhat.com)
  - 823659: Update SLA text in Settings to Service Level (wpoteat@redhat.com)
  - Use a temp file for finding used widgets (jbowes@redhat.com)
  - clean up some unused import warnings (jbowes@redhat.com)
  - default to running style checks on tests (jbowes@redhat.com)
  - Make test cases stylish as well... (alikins@redhat.com)
  - Fix "make stylish" (alikins@redhat.com)
  - 829803: Added an unset command to service level. (bkearney@redhat.com)
  - Remove reference to InstalledProductsTab.product_id_text (alikins@redhat.com)
  - Add a "find-missing-widgets" target to makefile (alikins@redhat.com)
  - 830949: add accessibility locators for registration widgets
    (alikins@redhat.com)
  - 824979: No message for subscription-manager release --list with no
    subscriptions. (wpoteat@redhat.com)
  - Added UnRegisterCommand and UnSubscribeCommand nosetests (wpoteat@redhat.com)
  - registergui: get firstboot working with new new code (jbowes@repl.ca)
  - registergui: Create a PreformRegisterScreen class (jbowes@repl.ca)
  - registergui: add a post method for setting data on the parent
    (jbowes@repl.ca)
  - registergui: create a 'pre' hook for screens (jbowes@repl.ca)
    (cduryee@redhat.com)
  - 819665: print msg if user is registered to RHN Classic on "identity" command
    (cduryee@redhat.com)
    (wpoteat@redhat.com)
  - Add F17 yum repo release target. (dgoodwin@redhat.com)
  - fix make stylish (jbowes@redhat.com)
  - 810352: Disable the expansion of the system name selection in the register
    dialog (bkearney@redhat.com)
  - 824530: add test case for setting proxy cli for release (alikins@redhat.com)
  - rhsm-icon codestyle cleanups (jbowes@repl.ca)
  - 829900: Use the term 'Subscription Management Service' to refer to SAM, CFSE,
    etc (root@bkearney.(none))
  - 829898: Make the no service level option a bit clearer as to its meaning
    (bkearney@redhat.com)
  - Improve the logging so that the user only sees the approved output by default
    (bkearney@redhat.com)
  - 830193: Modify the output of the yum plugin to be consistent with RHN
    (bkearney@redhat.com)
  - 824530: "release" command ignoring cli proxy options (alikins@redhat.com)
  - 828042,828068: Make ja_JP's Confirm Subscription unique for firstboot.
    (mstead@redhat.com)
  - Updating strings from zanata (mstead@redhat.com)
  - 825309: Remove the archiecture field from the table. (bkearney@redhat.com)
  - 823608: Rename the software pane to product (bkearney@redhat.com)
  - 810369: Prefer the term Subscription to Entitlement (bkearney@redhat.com)
  - Add a warning comment about firstboot module titles (alikins@redhat.com)
  - Clean up an option (bkearney@redhat.com)
  - 827208: Fix the xmltag bugs in the or po file (bkearney@redhat.com)
  - 827214: Clean up the XML tags in ta po file. (bkearney@redhat.com)
  - Slight change in the path for the ta po file (bkearney@redhat.com)
  - Slight change in the path for the ta po file (bkearney@redhat.com)
  - Slight change in the path for the ml po file (bkearney@redhat.com)
  - 828583: Add some spacing at the end of the file paths in the ko.po file
    (bkearney@redhat.com)
  - 828816: the %prog variable should not be translated (bkearney@redhat.com)
  - 828821: Fix the addition of a new variable in the hi po file
    (bkearney@redhat.com)
  - 828903: Fix translation of options in the bn po file. (bkearney@redhat.com)
  - Fix part of the mis translated options (bkearney@redhat.com)
  - 828965: Fix a translated option which should not have been translated
    (bkearney@redhat.com)
  - 828954: fix the --pool option in the translated string (bkearney@redhat.com)
  - 828958: --available should not be translated (bkearney@redhat.com)
  - Add --password as an option, not a string. This cause several strings to be
    retranslated (bkearney@redhat.com)
  - 828969: Fix the options in the translated string (bkearney@redhat.com)
  - 828985: Fix the url in the translated string (bkearney@redhat.com)
  - 828989: Fix the access url (bkearney@redhat.com)
  - 818205: Release --set command should only accept values from --list.
    (awood@redhat.com)
  - registergui: extract out a screen superclass (jbowes@repl.ca)
  - registergui: get button label from screen class (jbowes@repl.ca)
  - registergui: keep screens in a list (jbowes@repl.ca)
  - registergui: pull out environment screen into its own class (jbowes@repl.ca)
  - registergui: sensitivity refactor and method move (jbowes@repl.ca)
  - registergui: extract out credentials_entered method (jbowes@repl.ca)
  - registergui: move organization screen to its own class (jbowes@repl.ca)
  - registergui: move credentials screen to its own class (jbowes@repl.ca)
  - registergui: move choose server screen to its own class (jbowes@repl.ca)
  - registergui: switch from GladeWrapper to GladeWidget (jbowes@repl.ca)
  - registergui: Remove some unused globals (jbowes@repl.ca)


author: Alex Wood <awood@redhat.com> 1.0.5-1
changelog:
  - 804109: Give a specific message when providing invalid credentials.
    (awood@redhat.com)
  - 810360: update wording in gnome help file (cduryee@redhat.com)
  - use new bin location of files for $STYLEFILES (alikins@redhat.com)
  - add 'debuglint' for checking for leftover debugger imports
    (alikins@redhat.com)
  - Update make clean target (jbowes@redhat.com)
  - Move py executables to bin/ (jbowes@redhat.com)
  - Put no results text inside the scrolled window (jbowes@redhat.com)
  - 817901: Show text when there are no subscriptions to show.
    (dgoodwin@redhat.com)
  - Move initd file to etc-conf (jbowes@redhat.com)
  - Move plugins to their own src dir (jbowes@repl.ca)
  - More test cases for utils.parse_url (alikins@redhat.com)
  - 829482: Delete unstranslated strings in order force a retranslation
    (bkearney@redhat.com)
  - 811602: Fix the help output based on UXD feedback (bkearney@redhat.com)
  - 828867: Removed the extra %s string from the te translation
    (bkearney@redhat.com)
  - 829479: Remove unstranslated strings to force a re-translation
    (bkearney@redhat.com)
  - Delete the unused pt.po file (bkearney@redhat.com)
  - 829476: Remove untranslated strings. (bkearney@redhat.com)
  - 811553: Improve the text for auto subscribe during registration
    (bkearney@redhat.com)
  - 829471: Fix the translation for usage, and remove a translation for %org id
    to force a retranslation (bkearney@redhat.com)
  - Remove an outdated ta.po file (bkearney@redhat.com)
  - 828810: Remove extra %s in translation (bkearney@redhat.com)
  - Test to ensure that pool id is in the output for list --available
    (wpoteat@redhat.com)
  - Close registration window even if it failed. (dgoodwin@redhat.com)
  - 825923: Subscription-manager service-level set should say "Service level set
    to:" (wpoteat@redhat.com)
  - 811594: Default behavior for ReposCommand is --list (wpoteat@redhat.com)
  - 832400: service-level --unset should display proper message for unregistered
    client. (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.6-1
changelog:
  - rhsmcertd no longer exits when not registered. (mstead@redhat.com)
  - po file cleanups (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Free config resources in one place (mstead@redhat.com)
  - rhsmcertd: free GKeyFile when done (jbowes@redhat.com)
  - rhsmcertd: remove studlyCaps (jbowes@redhat.com)
  - "make stylish" should failed on "swapped" in glade files (alikins@redhat.com)
  - Remove 'swapped=on' from glade signal markup. (alikins@redhat.com)
  - add 'fix-glade-swapped' target to de-'swapped' glade files
    (alikins@redhat.com)
  - make stylish fixups (alikins@redhat.com)
  - Fix at-spi label for "offline_radio" widget (alikins@redhat.com)
  - shorter messages for cases where registered to RHN Classic
    (alikins@redhat.com)
  - Tighten up the gettext_lint regex (alikins@redhat.com)
  - Fix string that was breaking xgettext (alikins@redhat.com)
  - 810998: Add a button to test a proxy connection. (awood@redhat.com)
  - new messages, and remove checking of rhn serverURL (alikins@redhat.com)
  - remove unused es.po file (bkearney@redhat.com)
  - 829486: Removed untranslated words to force a re-translation
    (bkearney@redhat.com)
  - Remove unused bn.po file (bkearney@redhat.com)
  - 826856: Add check for service-level command that --org can only be used with
    --list option (bkearney@redhat.com)
  - 829483: Remove english to english translation to force a re-translations
    (bkearney@redhat.com)
  - Remove unused de po file (bkearney@redhat.com)
  - 819665: on 'version' display if we are registered to RHN Classic
    (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.0.8-1
changelog:
  - Add rpmlint config for tmpfiles.d (jbowes@redhat.com)
  - Use the i18n_optparse.OptionParser instead of optparse (alikins@redhat.com)
  - Use our i18n_optparse for the migration scripts (alikins@redhat.com)
  - Look for rhn-migrate* in bin for generating string catalogs
    (alikins@redhat.com)
  - 826874: add gladelint support for 'orientation' prop (alikins@redhat.com)
  - 826874: Remove unneeded property 'orientation' from glade
    (alikins@redhat.com)
  - 796782: add systemd tmpfiles configuration (jbowes@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.9-1
changelog:
  - On invalid credentials in register, return to the login screen
    (jbowes@redhat.com)
  - 821065: Make SLA/subscription asyncronous (jbowes@redhat.com)
  - 838942: make gui and cli use the same releaseVer check (jbowes@redhat.com)
  - fixes for translations from zanata (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Remove check for date parsing not failing when we expect it to
    (alikins@redhat.com)
  - Remove glade orientation properties. (awood@redhat.com)
  - Moving the filter counting mechanism into the Filters class.
    (awood@redhat.com)
  - Adjust expand and fill properties for the filter dialog. (awood@redhat.com)
  - add za_CN.utf to list of known busted locales (alikins@redhat.com)
  - 824424: Fixing AttributeError thrown when accessing online help in RHEL 5.
    (awood@redhat.com)
  - Add icon to update progress window. (awood@redhat.com)
  - 806986: Display SKU for available and consumed subscriptions
    (jbowes@redhat.com)
  - Increase the default size of the subscriptions viewport. (awood@redhat.com)
  - Add no overlapping to the default filters. (awood@redhat.com)
  - Tweaks to filter options dialog. (awood@redhat.com)
  - 801187: print Provides: for all subs, even with no provides
    (jbowes@redhat.com)
  - The filter dialog now updates results in real time. (awood@redhat.com)
  - 837106: Add a11y property for register button (jbowes@redhat.com)
  - 813336: Break filter options out into a separate dialog box.
    (awood@redhat.com)
  - 837036: Do not refer to options as commands (bkearney@redhat.com)
  - 829495: Delete a mis-translated string to force re-translation
    (bkearney@redhat.com)
  - 828966: Delete a mis-translated string to force trasnlations
    (bkearney@redhat.com)
  - 767133: Remove english to english translations from bn_IN to force a new
    translation (bkearney@redhat.com)
  - 829491: Remove english trnaslations for italian translations
    (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.10-1
changelog:
  - 828903: Pull in the latest translation for error messages with no options
    translated (bkearney@redhat.com)
  - 841011: Fix double words in the korean translations (bkearney@redhat.com)
  - 828958: Untranslate the word password when it it used as an option in the
    pt_BR translations (bkearney@redhat.com)
  - Fixes for translations from zanata (alikins@redhat.com)
  - Latest translations from zanata (alikins@redhat.com)
  - 839887: Make error message text more clear when network is disconnected
    (bkearney@redhat.com)
  - 839760: Fix the screen text for preferences based on UXD feedback
    (bkearney@redhat.com)
  - 818355: Rename the use of 'Contract Number' to contract in the gui
    (bkearney@redhat.com)
  - 840169: The service level was incorrectly being set after auto-subscription.
    (awood@redhat.com)
  - 840637: Fixed missing reference to parent window. (mstead@redhat.com)
  - Import and translate error strings for 'envirovment' cmd (alikins@redhat.com)
  - Removed --wait arg, delay 2 min in rhsmcertd (mstead@redhat.com)
  - Interval CLI args for rhsmcertd now specified as minutes. (mstead@redhat.com)
  - Update rhsmcertd.init.d to use new CLI args (mstead@redhat.com)
  - Bad url format test and a refactor of parse_url (alikins@redhat.com)
  - Print message when rhsmcertd is shutting down (mstead@redhat.com)
  - Fixed spelling and newline issues in rhsmcertd (mstead@redhat.com)
  - Handle a few new bad url formats (http//foo or http:sdf) (alikins@redhat.com)
  - Add wait and now args to rhsmcertd (mstead@redhat.com)
  - 839683: Add some strings from older optparse to our i18n version
    (alikins@redhat.com)
  - 838146: Subscription-manager cli does not allow unsubscribe when consumer not
    registered. (wpoteat@redhat.com)
  - rhsmcertd: add format specifier checking to r_log (jbowes@redhat.com)
  - Improve rhsmcertd logging (jbowes@redhat.com)
  - Fix bug where filter options were not persisted when the dialog was reopened.
    (awood@redhat.com)
  - 838242: proxy password from the cli wasn't getting used (alikins@redhat.com)
  - Adding options parsing support (work-in-progress). (mstead@redhat.com)
  - Added initial check delay to rhsmcertd (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.11-1
changelog:
  - Remove deprecated use of hasDate. (dgoodwin@redhat.com)
  - Fix missed use of renamed method. (dgoodwin@redhat.com)
  - make stylish clean (alikins@redhat.com)
  - use isoformat() here instead of strftime format string (alikins@redhat.com)
  - create warn and expire colors once, fix test failure (alikins@redhat.com)
  - make stylish cleanups (alikins@redhat.com)
  - Additional tests for date logic. (awood@redhat.com)
  - Update for some minor changes in python-rhsm. (dgoodwin@redhat.com)
  - add rhsm_display module (alikins@redhat.com)
  - Add module to set DISPLAY if RHSM_DISPLAY is set (alikins@redhat.com)
  - 837132: fix typo (alikins@redhat.com)
  - Add "ctrl-X" as accelerator for proxy config (alikins@redhat.com)
  - Make "Usage" consistent across rhel5/6 (alikins@redhat.com)
  - Add __str__ for our fake exception. (alikins@redhat.com)
  - class ClassName(): is not legal syntax on python2.4 (alikins@redhat.com)
  - Exception by default doesn't pass 'args' (alikins@redhat.com)
  - Linkify() doesn't work on rhel5, so disble the tests there
    (alikins@redhat.com)
  - hashlib doesn't exist on 2.4, md5 is deprecated on 2.6 (alikins@redhat.com)
  - use simplejson since 'json' isnt part of python 2.4 (alikins@redhat.com)
  - Use ISO8601 date format in allsubs tab (alikins@redhat.com)
  - Fix syntax for RHEL5. (dgoodwin@redhat.com)
  - Fix awkward stretching in Subscription column. (awood@redhat.com)
  - 804144: Fix awkward stretching of Product column. (awood@redhat.com)
  - 814731: Change the name of the menu item to Preferences from Settings, and
    change the accelerator keys (bkearney@redhat.com)
  - 837132: Clean up the error message in the yum plugin (bkearney@redhat.com)
  - 837038: Fix a grammatical error in the yum plugin (bkearney@redhat.com)
  - Fix certificate parsing error reporting. (dgoodwin@redhat.com)
  - Removing unnecessary assignments. (awood@redhat.com)
  - F15 builds can't be submitted in Fedora anymore. (dgoodwin@redhat.com)
  - updating options for rhn-migrate-classic-to-rhsm per bz840152; rewriting
    rhsmcertd for different options and usage examples (dlackey@redhat.com.com)
  - Account/contract number field rename. (dgoodwin@redhat.com)
  - Stylish fixes. (dgoodwin@redhat.com)
  - Fix a certv2 error. (dgoodwin@redhat.com)
  - 829825: Alter highlighting used in My Subscriptions tab (awood@redhat.com)
  - 772040: Have no overlap filter properly handles subscription dates.
    (mstead@redhat.com)
  - Update order support level/type to service. (dgoodwin@redhat.com)
  - Remove explicit use of certificate2 module. (dgoodwin@redhat.com)
  - Fix issues introduced in certv2 refactor. (dgoodwin@redhat.com)
  - Change entitlement_version fact to certificate_version. (dgoodwin@redhat.com)
  - Update to use new certificate2 module and classes. (dgoodwin@redhat.com)
  - Send entitlement version fact. (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.12-1
changelog:
  - remove test cases that use si_LK locale (alikins@redhat.com)
  - 842845: Show better error if serverurl port is non numeric
    (alikins@redhat.com)
  - 838113: 'unregister' was not cleaning up repos (alikins@redhat.com)
  - 842170: replace None service level/type with "" not None (alikins@redhat.com)
  - 844069: Allow register --force even if ID cert is totally invalid.
    (dgoodwin@redhat.com)
  - 826874: Remove use of deprecated Gtk.Notebook.set_page (alikins@redhat.com)
  - 818355: Terminology Change: Contract Number -> Contract (wpoteat@redhat.com)
  - 844368: productid plugin was failing on ProductCert.product
    (alikins@redhat.com)
  - Ignore warning about use of dbus.dbus_bindings (alikins@redhat.com)
  - 844178: Fix error message when importing a non-entitlement cert bundle.
    (dgoodwin@redhat.com)
  - remove deprecated use of DateRange.hasNow() (jbowes@redhat.com)
  - remove use of DateRange.hasDate() (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.13-1
changelog:
  - Fix "Project-Id-Version" for ta_IN.po (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)
  - Remove the 'repos' unittests until they are more mockable
    (alikins@redhat.com)
  - Created CLI tool for viewing certificate data. (mstead@redhat.com)
  - add versionlint to "make stylish" (alikins@redhat.com)
  - add versionlint, requires pyqver (alikins@redhat.com)
  - Remove unused mock return values (alikins@redhat.com)
  - Remove enable_grid_lines from contract details glade file
    (alikins@redhat.com)
  - more test cases for ConfigCommand (alikins@redhat.com)
  - 837897: Terminology Change: Service Level Agreement -> Service Level
    (wpoteat@redhat.com)
  - add test cases for ConfigCommand (alikins@redhat.com)
  - Better error when rm'ing config item from missing section
    (alikins@redhat.com)
  - unittest coverage for managercli.CLI (alikins@redhat.com)
  - Adding unit tests for migration script regexes. (awood@redhat.com)
  - 812903: Autosubscribe not working for newly added product cert after Register
    (wpoteat@redhat.com)
  - 845827: Update command that do not require a candlepin connection
    (alikins@redhat.com)
  - 845827: Split server version checkout out to avoid errors
    (alikins@redhat.com)
  - Hack to address double mapping for 180.pem and 17{6|8}.pem (awood@redhat.com)
  - fix pep8 (jesusr@redhat.com)
  - don't show access.redhat.com url after registering to Katello
    (jesusr@redhat.com)
  - remove the explicit url search from error handling. (jesusr@redhat.com)
  - Make gettext_lint also check for _(foo) usage (alikins@redhat.com)
  - Remove unneeded _(somevar) (alikins@redhat.com)
  - Fix NameError in migration script. (awood@redhat.com)
  - bogus newline in glade file (alikins@redhat.com)
  - 826874: Reenable grid lines on newer gtk (alikins@redhat.com)
  - 826874: Remove enable_grid_lines from treeviews in glade (alikins@redhat.com)
  - 826874: Removing more properties that don't exist on gtk2.10
    (alikins@redhat.com)
  - 826874: Change gtk target version to gtk 2.10 for all glade files
    (alikins@redhat.com)
  - 826874: Clean of gtk properties not in gtk2.10 in our glade files
    (alikins@redhat.com)
  - Add support for migrating to Katello. (jesusr@redhat.com)
  - 843191: 'version' command showed wrong info with no network
    (alikins@redhat.com)
  - 843915: Multiple-specifications of --enable and --disable repos
    (wpoteat@redhat.com)
  - fix Package-Id-Version in ta_IN.po (alikins@redhat.com)
  - Fix es_ES.po (missing newline) (alikins@redhat.com)
  - 842898: fix missing --password in it.po (alikins@redhat.com)
  - 843113: latest strings from zanata (alikins@redhat.com)
  - 837280: Show users that we strip out any scheme given with a proxy.
    (awood@redhat.com)
  - new strings (alikins@redhat.com)
  - Refactor of SubDetailsWidget and GladeWidget (alikins@redhat.com)
  - 826729: Move Cert Status up to top of Product's Subscription Details
    (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.14-1
changelog:
  - 849171: Remove an extraneous print statement (bkearney@redhat.com)
  - 849105: Fixed a typo in the error message (bkearney@redhat.com)
  - 772161: Notifiy virt who, if running, when the identity changes
    (bkearney@redhat.com)
  - Reduce reads/parses of certificates (jbowes@redhat.com)
  - remove unused function 'getInstalledProductHashMap' (jbowes@redhat.com)
  - 843191: handle network errors better for 'version' command
    (alikins@redhat.com)
  - 826739, 827553: Combine Service Level and Service Type and move up in display
    order. (awood@redhat.com)
  - 847316: Remove the menu path for Subscription Manager from the manual
    registration screen. (bkearney@redhat.com)
  - 848409,848195,848190,848184: Do not print the exception when attempting to do
    the server version check (bkearney@redhat.com)
  - 847795: String and terminology clean up (bkearney@redhat.com)
  - 847380: Update the verbiage to prefer the term Subscription Management
    (bkearney@redhat.com)
  - 846834: Updated verbiage to focus on subsriptions and not on entitlements
    (bkearney@redhat.com)
  - 846105: Verbiage changes to empasize subscriptions over entitlements
    (bkearney@redhat.com)
  - 836933: Handle empty spaces for servce levels (bkearney@redhat.com)
  - 836932,835050: Fix the service level lifecycle (bkearney@redhat.com)
  - 836932: Reduce extra loggging when setting the service level
    (bkearney@redhat.com)
  - About dialog was not working due to key errors from python
    (bkearney@redhat.com)
  - 833319: Updated the help text for registration and service levels
    (bkearney@redhat.com)
  - 847060: Add missing requires on pygobject2 (bkearney@redhat.com)
  - 828954: Fix ta_IN.po file error with options (bkearney@redhat.com)
  - 842898: re-implement string fix for it.po (bkearney@redhat.com)
  - 828958: Fix the accidental translation of an option (bkearney@redhat.com)
  - fix up make stylish (jbowes@redhat.com)
  - No longer require root to run rct (mstead@redhat.com)
  - Remove manually_subscribe.py, it's class moved to rhsm_login.py
    (alikins@redhat.com)
  - Bumping the required python-rhsm version (mstead@redhat.com)
  - Renamed rt command to rct. (mstead@redhat.com)
  - Fix test case failure on 5.9 (Exception.message) (alikins@redhat.com)
  - Refactor ManuallySubscribeScreen to use new Screen api (alikins@redhat.com)
  - Check passed args as None to allow empty args (mstead@redhat.com)
  - Exception.message is deprecated, just let _str_ do it (alikins@redhat.com)
  - use MockStdout intead of nosetests sys.stdout.getvalue() (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.15-1
changelog:
  - Replace 16x16 icon with a new version that has no background
    (bkearney@redhat.com)
  - 852107: Update verbiage in migration script. (awood@redhat.com)
  - 847060: Push dependency higher up in the chain (bkearney@redhat.com)
  - 848534: Change the about dialog icon to be a PNG to ensure accurate
    representation. (bkearney@redhat.com)
  - 841396: Select first item in My Subscriptions table by default.
    (awood@redhat.com)
  - 849483: Prompt user for org name if necessary. (awood@redhat.com)
  - 849644: Calls made with --no-auto were not actually registering the system.
    (awood@redhat.com)
  - 849494: Fix variable name collision. (awood@redhat.com)
  - 846834: Use Subscription instead of entitlement certificate
    (bkearney@redhat.com)
  - 847859: Expiration highlighting was being set incorrectly. (awood@redhat.com)
  - 847750: Handle bad proxy values in migration script. (awood@redhat.com)
  - 841961: Ignore case when specifying the service level in migration
    (bkearney@redhat.com)
  - 842020: Remove an extraneous option group for rhsmcertd (bkearney@redhat.com)
  - Refactored some of the shared CLI code in 'rct' (mstead@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.16-1
changelog:
  - 853187: Verbiage change in install-num-migrate-to-rhsm. (awood@redhat.com)
  - 852894: Abort migration if multiple JBEAP channels are detected.
    (awood@redhat.com)
  - 850715: Fix malloc for Config (jbowes@redhat.com)
  - 852001: output the orgs key as part of the identity command.
    (bkearney@redhat.com)
  - fix "make gettext", wrong var name for the find root (alikins@redhat.com)
  - 850715: Fixes based on coverity scans (bkearney@redhat.com)
  - 846316: Use the full name of Subscrition Manager during first boot
    (bkearney@redhat.com)
  - 851346: Remove special case channel certs before subscribing.
    (awood@redhat.com)
  - 847354: When printing, translate None type into an empty string
    (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.0.17-1
changelog:
  - Fix gettext_lint issue with concat string in rhn-migrate (alikins@redhat.com)
  - 851124: Fix GUI unsubscribe. (dgoodwin@redhat.com)
  - fix po version for ta_IN.po (alikins@redhat.com)
  - latest strings (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.1.1-1
changelog:
  - updates to stat-cert for cert v3 (jbowes@redhat.com)
  - rct: Check for and handle files that aren't x509 certs (jbowes@redhat.com)
  - rct: remove content set count from cat-cert. use stat-cert instead.
    (jbowes@redhat.com)
  - implement aliases for cli commands (jbowes@redhat.com)
  - rct: add a stat-cert command (jbowes@redhat.com)
  - Switch certv2 related code to certv3 (jbowes@redhat.com)
  - 852107: Make banner headings equal in length (bkearney@redhat.com)
  - 842768: Remove --serverurl option from redeem command. (awood@redhat.com)
  - Set correct parent for these error dialogs. (awood@redhat.com)
  - set_parent_window() on RegisterScreen has been removed. (awood@redhat.com)
  - make regex better (jesusr@redhat.com)
  - 855762: Set correct parent for error dialog boxes raised by Autobind wizard.
    (awood@redhat.com)
  - 856349: rct cat-cert now printing content for all content types
    (mstead@redhat.com)
  - 842768: Limit --serverurl and --baseurl to specific commands.
    (awood@redhat.com)
  - 854467: Use of activation keys requires an org. (awood@redhat.com)
    (dgoodwin@rm-rf.ca)
  - 854879: Fixes for Anaconda desktop/workstation product cert installation.
    (dgoodwin@redhat.com)
  - 840415: Handle copyfile errors gracefully. (awood@redhat.com)
  - Adding new line b/w products when printed by rct (mstead@redhat.com)
  - 850920: --servicelevel and --no-auto are mutually exclusive.
    (awood@redhat.com)
  - Explicitly set GMT when doing entitlement date math (cduryee@redhat.com)
  - adding --unset option to service-level and release cmds
    (dlackey@redhat.com.com)
  - updated images for bz840599; changed rhsmcertd intervals, bz853571
    (dlackey@redhat.com.com)
  - 853233: Do not allow 68.pem and 71.pem to coexist after migration.
    (awood@redhat.com)
  - 852706: Fix server side certs not being deleted client side
    (alikins@redhat.com)
  - editing manpages and gnome help per UXD feedback; updating manpages for new
    command arguments; bz852323, bz850881, bz854357 (dlackey@redhat.com.com)
    rf.ca)
  - 845349: Support setting unknown values in the yum repo file
    (jbowes@redhat.com)
  - Add a count of content sets to entitlement certificates (bkearney@redhat.com)
  - 830988: Stacking is showing an odd parent in the My Subscriptions Tab
    (wpoteat@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.2-1
changelog:
  - 829825: Adding tests. (awood@redhat.com)
  - 853876: No need to check for GoneException when getting status
    (mstead@redhat.com)
  - 829825: Disable unsubscribe button when nothing is selected.
    (awood@redhat.com)
  - Remove unused import. (awood@redhat.com)
  - 859197: Fix product cert cleanup. (dgoodwin@redhat.com)
  - 781280: Add I18N comments for some string length issues.
    (dgoodwin@redhat.com)
  - 830193: Ensure logging is not diabled by RHN Classic Registration
    (bkearney@redhat.com)
  - remove unused RepoFile import (alikins@redhat.com)
  - 855081: Translate Arch as Arq. (bkearney@redhat.com)
  - Check identity cert permissions when running CLI commands (mstead@redhat.com)
  - mock all of RepoFile for the cli tests (alikins@redhat.com)
  - 845349: Don't clutter the repo file with empty keys (jbowes@redhat.com)
  - 845349: remove 'return' left in for debugging (jbowes@redhat.com)
  - Stylish errors for mr.po (bkearney@redhat.com)
  - 855085: Fixed the translation for [OPTIONS] (bkearney@redhat.com)
  - 855087: Fix a mis translated [OPTIONS] in the mr.po file.
    (bkearney@redhat.com)
  - Strings with the same value are not always the same instance.
    (awood@redhat.com)
  - updates from sefler for bz850881 (dlackey@redhat.com.com)
  - mock out utils.is_valid_server_info for tests (alikins@redhat.com)
  - 846207: Print error message for each invalid repo. (awood@redhat.com)
  - change test async to check for a number of thread callbacks
    (alikins@redhat.com)
  - latest strings from zanata (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.3-1
changelog:
  - 863961: Expect id cert Version to be populated in tests (alikins@redhat.com)
  - 863565: Give focus to the login field during subscription registration.
    (awood@redhat.com)
  - 838123: remove python2.5ism (alikins@redhat.com)
  - 844072: remove use and dep of PyXML (alikins@redhat.com)
  - 838123: Omit mac addresses from facts for lot and sit ipaddress types
    (bkearney@redhat.com)
  - 856236: Do not allow environmenets to be specified during registration if an
    activation key is used (bkearney@redhat.com)
  - 858289: Rename the desktop file to subscription-manager-gui.deskstop
    (bkearney@redhat.com)
  - 808217: Add a text banner to the output of release --list
    (bkearney@redhat.com)
  - 863428: Add environment support to the migration script. (awood@redhat.com)
  - 862099: Fix several dialog closing issues. (dgoodwin@redhat.com)
  - 854374: Removed extra spacing around help, and improved he rct text output a
    bit. (bkearney@redhat.com)
  - 853572: Fix a typoin the help messages (bkearney@redhat.com)
  - 859090: Remove the word technology from the branding string
    (bkearney@redhat.com)
  - 862308: Subscription Manager version reports registered to value when system
    not registered (wpoteat@redhat.com)
  - 861443: Re-raise GoneException in rhsmcertd-worker (mstead@redhat.com)
  - 861151: make stylish cleanup (alikins@redhat.com)
  - 852911: Add padding around firstboot tooltips icon. (dgoodwin@redhat.com)
  - 854312: Do not install a certificate that has expired. (mstead@redhat.com)
  - Make rhsm-icon work on gnome 3 (jbowes@redhat.com)
  - 853885: Fix icon notification popup only displaying once.
    (dgoodwin@redhat.com)
  - 853006: Wrap label in the manually subscribe firstboot screen.
    (dgoodwin@redhat.com)
  - 861151: release should not list for incompatible variants
    (alikins@redhat.com)
  - 861170: re.escape() values provided to the apply_hightlight() function.
    (awood@redhat.com)
  - 852630: Suscription manager unsubscribe --all shows error on expired
    subscriptions (wpoteat@redhat.com)
  - Freeze obsoletes version for -gnome to -gui rename (jbowes@redhat.com)
  - 860084: remove unused _x from ja_JP translation (alikins@redhat.com)
  - 860088: remove trailing dot from url in de_DE.po (alikins@redhat.com)
  - Don't reparse entitlement certs on every search filter change
    (jbowes@redhat.com)
  - 855257: fix issues with default contract quantity being wrong
    (alikins@redhat.com)
  - 860088: some translations were splitting urls into two lines
    (alikins@redhat.com)
  - Add to nosetest to ensure that Cert V3 check for validity passes.
    (wpoteat@redhat.com)
  - 860344: Subscription-manager import --certificate fails to recognize a new
    version 3.0 certificate (wpoteat@redhat.com)
  - New icon set. (awood@redhat.com)
  - 853035: Fix firstboot "back" issues. (dgoodwin@redhat.com)
  - Check the full version info of the yum api in productid (alikins@redhat.com)
  - 847319: Left align manually subscribe firstboot message (jbowes@redhat.com)
  - 860030: make server_version_check use a non authenticated call
    (alikins@redhat.com)
  - 847387: Display tooltip for info icon in RHEL 5.9. (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.4-1
changelog:
  - 864177: Add the count for the first word in calculating where to break the
    line (bkearney@redhat.com)
  - 785666: For bonded interfaces, find mac address of members
    (alikins@redhat.com)
  - 839779: Add more context around how to cover the machine with a given SLA
    (bkearney@redhat.com)
  - 864177: Attempt to detect the size of the terminal to influence how product
    names are split up. (bkearney@redhat.com)
  - 864569: Make the date picker widget 10 characters wide (bkearney@redhat.com)
  - 855050: Set the icon-name property on all dialogs and windows
    (bkearney@redhat.com)
  - 848095: Reduce the indentation on the help text to improve the layout on
    smaller terminals. (bkearney@redhat.com)
    (wpoteat@redhat.com)
  - 862848: Change the name of the button to Cancel instead of Close
    (bkearney@redhat.com)
  - 867766: Unsubscribe from multiple entitlement certificates using serial
    numbers (wpoteat@redhat.com)
  - Clear any cached environments when registering with activation keys.
    (awood@redhat.com)
    (bryan.kearney@gmail.com)
  - Clear any cached activation key values. (awood@redhat.com)
  - 869729: --autosubscribe and --activationkey should be mutually exclusive
    (wpoteat@redhat.com)
  - 857191: Stacking shows a useless parent in All Available Subscriptions tab
    (wpoteat@redhat.com)
  - 863133: Subscription-Manager version command should have server type listed
    first (wpoteat@redhat.com)
  - updates for failed-qa issues in bz857195 (dlackey@redhat.com.com)
  - Increment the hardcoded page number due to added activation key screen.
    (awood@redhat.com)
  - 864555: add "menu" window hint to filters.glade (alikins@redhat.com)
  - 850870: Update on-line documentation link. (awood@redhat.com)
  - 817671: Add support for Activation Keys in the GUI. (awood@redhat.com)
  - 840415: Print an error message if the destination directory does not exist.
    (awood@redhat.com)
  - Fail fast if the user enters a bad org. (awood@redhat.com)
  - Marking a string for translation. (awood@redhat.com)
  - 866579: Fail fast if the user enters a bad environment. (awood@redhat.com)
  - Enable logging in firstboot (alikins@redhat.com)
  - 865954: Return to creds screen if consumer name is invalid
    (alikins@redhat.com)
  - 852107: Make the banners the same width (bkearney@redhat.com)
  - 748912: Make the error message a bit more friendly when there is no cert file
    to import (bkearney@redhat.com)
  - 865590: Fix broken offline unsubscribe. (dgoodwin@redhat.com)
  - 852328: Report Classic and Subscription Management consistently in the
    version and identity commands (bkearney@redhat.com)
  - 864159: Add a new message in the gui when no subscriptions are available on a
    specific date. (bkearney@redhat.com)
  - 850531: Change the label 'Certificate Status' to 'Status'
    (bkearney@redhat.com)
  - 850533: Change the label from 'Next Update' to 'Next System Check-in'
    (bkearney@redhat.com)
  - 855365: Display a singular sentence if only one subscription is removed
    (bkearney@redhat.com)
  - 862885: Change the text for unlimited to Unlimited (bkearney@redhat.com)
  - 864184: Make the machine type uppercase to be consistent with other output
    (bkearney@redhat.com)
  - 865545: Added report log when cert has no products. (mstead@redhat.com)
  - update releases.conf (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.6-1
changelog:
  - 872847: Change unsubscribe feedback when consumer has been deleted
    (wpoteat@redhat.com)
  - 869934: make "release" related cdn usage use proper urlparse
    (alikins@redhat.com)
  - 852328: Improve the server version checking (bkearney@redhat.com)
  - 871146: Fix proxy errors on first yum operation after registration.
    (dgoodwin@redhat.com)
  - 850430: Pressing Enter in the password entry now activates registration.
    (awood@redhat.com)
  - Attach subscriptions after registration with an activation key.
    (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.7-1
changelog:
  - 873631: Migrate correctly when there is only one org. (awood@redhat.com)
  - 874147: Handle changes in python-ethool api (alikins@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.8-1
changelog:
  - 862909: install rct man page (alikins@redhat.com)
  - Fix to LocalTz DST determination (cduryee@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.9-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 864207: mark these strings for translation (alikins@redhat.com)
  - 854388: use ngettext to specify contract/contracts (alikins@redhat.com)
  - 876753: change rhsmcertd --heal-interval to --auto-attach-interval
    (alikins@redhat.com)
  - We require python-rhsm-1.1.5 now (ram) (alikins@redhat.com)
  - 876340: Move the last of the commands and help string to --auto-attach
    (bkearney@redhat.com)
  - 876294: Use attach instead of subscirbe in the rhn migration tooling
    (bkearney@redhat.com)
  - 856735: Move the Next Update notification to the About dialog.
    (awood@redhat.com)
  - Removed stacking from RAM (mstead@redhat.com)
  - Improved comments/logging/tests for RAM (mstead@redhat.com)
  - Updated the entitlement_version of client (mstead@redhat.com)
  - Added RAM limit to rct cat-cert output (mstead@redhat.com)
  - Removing dead code (mstead@redhat.com)
  - Check RAM when determining status (mstead@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.1.10-1
changelog:
  - latest strings from zanata (alikins@redhat.com)
  - 874623: Tell users running the version command if they are not registered.
    (awood@redhat.com)
  - 873418: Add at-spi locators to the activation key window. (awood@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.1-1
changelog:
  - Add two manifest commands to rct. (bkearney@redhat.com)
  - latest translations from zanata (alikins@redhat.com)
  - 895447: The count of subscriptions removed is zero for certs that have been
    imported. (wpoteat@redhat.com)
  - 895462: Message for subscription-manager repos --list for disabled repo needs
    to be modified (wpoteat@redhat.com)
  - 885964: After registration, recreate the UEP connection using the identity
    cert. (awood@redhat.com)
  - 869306: Add org ID to facts dialog. (awood@redhat.com)
  - 888853: Put output into proper columns regardless of the output language.
    (awood@redhat.com)
  - Update python-rhsm requires version (wpoteat@redhat.com)
  - 888052: Add all binaries to the makefile path for gettext string extraction
    (bkearney@redhat.com)
  - 851303: additional term updates (dlackey@redhat.com.com)
  - 844411: Add an --insecure option to subscription-manager. (awood@redhat.com)
  - 891621: Users can incorrectly enter activation keys when registering to
    hosted. (awood@redhat.com)
  - 889573: Only persist serverurl and baseurl when registering.
    (awood@redhat.com)
  - 889204: Encode the unicode string to utf-8 to avoid syslog errors
    (bkearney@redhat.com)
  - 889621: String substitution inside gettext causes message translations to
    never be found (bkearney@redhat.com)
  - 890296: Unicode characters with a - are causing printing issues for rct
    printing (bkearney@redhat.com)
  - 878269 (dlackey@redhat.com.com)
  - 784056: Raise a running instance of the GUI to the forefront.
    (awood@redhat.com)
  - 888968: Improve the gui message formatting for SLA selection
    (bkearney@redhat.com)
  - 873601: Return a non zero code if subscription manager is run with an
    incorrect command name (bkearney@redhat.com)
  - 839779: Improve messaging when autosubscribe does not work because of SLA
    (bkearney@redhat.com)
  - 867603: Add quantity to confirm subscriptions dialog. (awood@redhat.com)
  - 888790: Rebuild UEP connection after registering with activation keys.
    (awood@redhat.com)
  - 886280; 878257; 878264; 878269 (dlackey@redhat.com.com)
  - 814378: disable linkify if we are running as firstboot (alikins@redhat.com)
  - 886887: Take the user back to the activation key page if he enters an invalid
    key. (awood@redhat.com)
  - 863572: Make forward/back insensitive when registering (alikins@redhat.com)
  - 825950: updating SAM registration procedure; other term edits and updated
    screenshot (dlackey@redhat.com.com)
  - 885964: Do not make a getOwner call when not necessary. (awood@redhat.com)
  - Ask for the org in environments and service-level modules. (awood@redhat.com)
  - 886992: Fix for bad fix for 886604, wrong path for yum repos
    (alikins@redhat.com)
  - matt reid's edits to rct; bz886280; bz878257; bz878269; bz878264
    (dlackey@redhat.com.com)
  - 841496: Do not use hyphens in bash completion files as these are invalid for
    identifiers in the sh shell. (bkearney@redhat.com)
  - Improve logging for rhsmcertd scenarios (wpoteat@redhat.com)
  - 878609: Do not use public url redirectors, instead use a redhat.com address
    (bkearney@redhat.com)
  - 886604: Fix incorrect path in repos.d check (alikins@redhat.com)
  - 727092: Read in the org key during registration if none is given.
    (awood@redhat.com)
  - 845622: If an identity certificate has expired, there should be a friendly
    error message (wpoteat@redhat.com)
  - 883123: Have the migration code use the name and the label for org and
    environment lookup. (bkearney@redhat.com)
  - 886110: help blurb for --auto-attach formatted poorly (alikins@redhat.com)
  - 880070: require latest python-rhsm to handle unicode issues
    (alikins@redhat.com)
  - 798788: Results from subscription-manager facts --update after a server-side
    consumer was deleted. (wpoteat@redhat.com)
  - 878634: Improve the consistency of capitalization of URL, ID, HTTP, and CPU
    (bkearney@redhat.com)
  - 878657: Make consistent use of the term unregister instead of un-register
    (bkearney@redhat.com)
  - 883735: load branding module slightly differently (jesusr@redhat.com)
  - Stylish fix. (dgoodwin@redhat.com)
  - 878664: Add bash completion script for rct (bkearney@redhat.com)
  - 880764: Command line options which can be specified more than once should use
    the same help text (bkearney@redhat.com)
  - 867070: Adjust default sizing of subscriptions pane in Installed Products
    tab. (awood@redhat.com)
  - 873791: Expected exit codes from unsubscribe with multiple serial numbers
    (wpoteat@redhat.com)
  - 800323: Set default output stream encoding to UTF-8. (awood@redhat.com)
  - 862852: Fix double separator in redeem dialog. (dgoodwin@redhat.com)
  - Display "None" if environments value is empty on consumer. (awood@redhat.com)
  - 872351: Display environment in GUI facts dialog and CLI identity command.
    (awood@redhat.com)
  - 881091: Remove punctuation in the help message (bkearney@redhat.com)
  - Revert "878986: refactor to use curses/textwrap for format"
    (alikins@redhat.com)
  - 877579: Fix -1 quantity to consume for unlimited pools. (dgoodwin@redhat.com)
  - 881117: Add at-spi locator to redemption dialog. (awood@redhat.com)
  - 881952: Warn and continue if encountering a failure during system deletion.
    (awood@redhat.com)
  - 878820: Fix console error when yum.repos.d does not exist.
    (dgoodwin@redhat.com)
  - 839772: Display "Not Set" instead of "" in SLA and release preferences.
    (awood@redhat.com)
  - rev zanata branch version to 1.8.X (alikins@redhat.com)
  - 878986: refactor to use curses/textwrap for format (alikins@redhat.com)
  - 878986: Default to no line breaking if no stty is available
    (bkearney@redhat.com)
  - 878588: Move the requires on usermode from subscription-manager-gui to
    subscription-manager (bkearney@redhat.com)
  - 878648: Make the help usage formatting consistent for the rct and
    subscription manager commands (bkearney@redhat.com)
  - 869046: Remove stray 'print' (jbowes@redhat.com)
  - 864207: Autosubscribe should not run when all products are already
    subscribed. (wpoteat@redhat.com)
  - 854702: Place the asterisk indicating editability into the quantity cell.
    (awood@redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 1.8.2-1
changelog:
  - Update tito for RHEL 7.0 (bkearney@redhat.com)
  - Small cleanups for test_migrate (alikins@redhat.com)
  - Write repofile once instead of during every iteration. (awood@redhat.com)
  - Add unit test for migration script. (awood@redhat.com)
  - Adding more tests for the migration script. (awood@redhat.com)
  - Bump the required version of python-rhsm to pick up the new config file
    defaults (bkearney@redhat.com)
  - Modify migration script tests to run on Fedora. (awood@redhat.com)
  - Give users the ability to disable package reporting (bkearney@redhat.com)
  - 891377: Note in deprecated string that auto-attach-interval is a command
    option (bkearney@redhat.com)
  - 901612: Yum plugin warnings should go to stderr, not stdout
    (bkearney@redhat.com)
  - 903298: Replace use of 'Register to' with 'Register with'
    (bkearney@redhat.com)
  - Rewrite of the migration script featuring unit tests. (awood@redhat.com)
  - Remove F16 and old cvs releasers, add F18. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.3-1
changelog:
  - string and string catalog update from zanata (alikins@redhat.com)
  - 908954: Ensure that 'Not Set' is shown in the preferences dialog if it is not
    set (bkearney@redhat.com)
  - 906214: rct --help should return 0. (bkearney@redhat.com)
  - 909294: Add accessibility names to the preferences combo boxes
    (bkearney@redhat.com)
  - 878097: Clarify that the --org option is ORG_KEY and not ORG_NAME
    (bkearney@redhat.com)
  - Just use 0 as error for reading int keys (alikins@redhat.com)
  - Old version of config entries considered to make changes backwards compatible
    (wpoteat@redhat.com)
  - 882459: aftermath of bug 876753 - Change --heal-interval to --attach-interval
    in rhsmcertd (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.4-1
changelog:
  - Pull latest strings from zanata. (dgoodwin@redhat.com)
  - Use PyXML for iso8601 date on RHEL5 and dateutil after (alikins@redhat.com)
  - Major switchover to server for compliance checking logic. (dgoodwin@redhat.com)
  - Introduce dependency injection framework. (dgoodwin@redhat.com)
  - 916369: Do not persist config changes until the action completes
    (bkearney@redhat.com)
  - Fix a bug with changing installed products during healing.
    (dgoodwin@redhat.com)
  - 912776: fix migration test scripts to expect get_int usage
    (alikins@redhat.com)
  - 912776: cast port numbers from cli to int immediately (alikins@redhat.com)
  - 912776: use config.get_int for server port as well (alikins@redhat.com)
  - 905649: subscription-manager does not work with dbus-python-1.1.1-1
    (wpoteat@redhat.com)
  - use ngettext for plural messages in certlib/managercli (alikins@redhat.com)
  - 912776: use cfg.get_int for proxy port (alikins@redhat.com)
  - 878097: update service-level org key help text (alikins@redhat.com)
  - Handle manifests with no subscriptions in the archive (alikins@redhat.com)
  - 878664: Add filename support to the bash completion for the rct tool.
    (bkearney@redhat.com)
  - 877590: Changes to the branding messages when the user attempts to register
    twice (bkearney@redhat.com)
  - New plugin framework. (alikins@redhat.com / awood@redhat.com)
  - 886115: Remove line continuations within strings. (bkearney@redhat.com)
  - 913302: Support Level and Support Type should be shown as Service Level and
    Service Type (bkearney@redhat.com)
  - Add unknown product status state. (dgoodwin@redhat.com)
  - 913703: Prefer the use of SKU over Product ID (bkearney@redhat.com)
  - 913720: Use the term order number instead of subscription id
    (bkearney@redhat.com)
  - 878634: Use correct capitalization for ID in the rct tool
    (bkearney@redhat.com)
  - 878097: Help text for service-level command should be consistent with other
    help texts (bkearney@redhat.com)
  - 906554: Add ui_repoid_vars line to yum based on the variables which are in
    the baseurl (bkearney@redhat.com)
  - 912707: Remove a use of the deprecated hasNow() function.
    (bkearney@redhat.com)
  - 913187: Allow older manifests to print out correctly. (bkearney@redhat.com)
  - 912776: Cast proxy port to an integer. (awood@redhat.com)
  - 882459: Deprecated message in help for cert-interval (wpoteat@redhat.com)
  - 895447: Changed messages to distinguish between local and server-side
    removal. (wpoteat@redhat.com)
  - 908671: Display the pool ID when available. (awood@redhat.com)
  - 911386: Displaying combined Service Level and Type should handle empty values
    for both items (jmolet@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.5-1
changelog:
  - 927875: Fix GUI bug if there is an expired certificate. (dgoodwin@redhat.com)
  - 922806: Use dependency injection with firstboot module. (awood@redhat.com)
  - 919512: Remove proxy options from config command. (awood@redhat.com)
  - 921126: latest string updates from zanata (alikins@redhat.com)
  - 919255: Remove extraneous print statement. (awood@redhat.com)
  - 919584: Fix unicode error in RHEL 5. (awood@redhat.com)
  - Implement entitlement/product status caching. (dgoodwin@redhat.com)
  - 921245: Update installed products tab after registration. (awood@redhat.com)
  - 893993: some refactoring, show_autosubscribe_output returns 0 or 1
    (ckozak@redhat.com)
  - 859197: add special case for products that provide 'rhel-' tags
    (alikins@redhat.com)
  - productid db now supports multiple repos per product id (alikins@redhat.com)
  - let ProductData support multiple repos per product (alikins@redhat.com)
  - 893993: attach --auto now prints the proper text when no products are
    installed (ckozak@redhat.com)
  - 918746: Switched or ordering for disabling repos.  Will now print all
    repository validation errors (ckozak@redhat.com)
  - 914717: rct cat-manifest fails to report Contract from the embedded
    entitlement cert (wpoteat@redhat.com)
  - More convenient dep injection. (dgoodwin@redhat.com)
  - Try to handle the really old dbus-python on rhel5 (alikins@redhat.com)
  - add missing conf file for all_slots plugin (alikins@redhat.com)
  - 919700: Reload consumer identity after force subscribing.
    (dgoodwin@redhat.com)
  - utils.parseDate is now isodate.parse_date (alikins@redhat.com)
  - Remove  ent/prod dir arguments to CLI commands. (dgoodwin@redhat.com)
  - PluginsCommand does not need network cli options (alikins@redhat.com)
  - Fix pluginDir config value in default config file (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.6-1
changelog:
  - Latest translations. (dgoodwin@redhat.com)
  - 903298: Fix a few more examples of Register to (bkearney@redhat.com)
  - 878634: Fix the final three uses of id instead of ID (bkearney@redhat.com)
  - Fix string formatting done outside of gettext _() (alikins@redhat.com)
  - 950892: entity typo (dlackey@redhat.com.com)
  - when no parameters are given, dump manifest uses current directory
    (ckozak@redhat.com)
  - fixed zipfile creation in python 2.4 (ckozak@redhat.com)
  - 919561: moving cat manifest into memory (ckozak@redhat.com)
  - 914717: Fields taken from pool data. (wpoteat@redhat.com)
  - 924919: stop log to stderr in isodata module (alikins@redhat.com)
  - 919561: refactored some code into additional methods, fixed naming
    conventions, and added test cases (ckozak@redhat.com)
  - Dont log exception if a repo doesn't have productid (alikins@redhat.com)
  - 919561: checking manifest zip for files outside of scope (ckozak@redhat.com)
  - 919561: moved new extractall into a class that extends ZipFile
    (ckozak@redhat.com)
  - 919561: fixed variable naming in new extractall method (ckozak@redhat.com)
  - 919561: replaced reference to zipfile.extractall (aded in python2.6)
    (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.7-1
changelog:
  - 959563, 956298: for rhel 5.10 (dlackey@redhat.com.com)
  - 905922: use get_int instead of get in order to consume the value as a
    booolean (bkearney@redhat.com)
  - enhancements to tests (alikins@redhat.com)
  - Update expected rct output for content arch info (alikins@redhat.com)
  - let 'rct cat-cert' show arches info on content sets (alikins@redhat.com)
  - Use the unknown icon when it is appropriate. (bkearney@redhat.com)
  - Do not allow manual entry of numbers that aren't multiples of spinner
    increment. (awood@redhat.com)
  - 959570: Subscription names were being mangled in the installed products page.
    (bkearney@redhat.com)
  - 959124: Consistant system status between CLI and GUI (ckozak@redhat.com)
  - re-added compatibility for old candlepin servers. (ckozak@redhat.com)
  - 885130: Switch from using xmlrpclib to rhnlib's rpclib. (awood@redhat.com)
  - 958827: fixed duplicate reasons from bundled subs, removed messages for valid
    products, refactoreed client-side reasons code (ckozak@redhat.com)
  - 958775: correct info for future subscriptions (ckozak@redhat.com)
  - Removing messages from compliant installed products caused by bad overconsumption (ckozak@redhat.com)
  - Use server provided value to determine quantity increment. (awood@redhat.com)
  - 957218: Bump system.certificate_version for cores support (mstead@redhat.com)
  - 956285, 913635, 913628. still need to finalize output for 913628.  (dlackey@redhat.com.com)
  - 955142: Display core limit in rct cat-cert tool (mstead@redhat.com)
  - Warn when we detect we need a newer version of 'mock' (alikins@redhat.com)
  - 924919: remove loging about isodate implementation (alikins@redhat.com)
  - 957195: Pull in the latest or fix from zanata. (bkearney@redhat.com)
  - Add the unkown icon (bkearney@redhat.com)
  - Add reasons to list --installed and list --consumed.  Added list --status
    (ckozak@redhat.com)
  - 908037: remove all ¶ characters from the ml.po file. Zanata was also updated
    (bkearney@redhat.com)
  - 906552: Fixed mis translation of subscription-manager in pa.po and zh_CN.po.
    Zanata was also updated (bkearney@redhat.com)
  - 908059: Fix a pt_BR translation which did not include the http portion of a
    url. Zanata is fixed as well (bkearney@redhat.com)
  - Add F19, 5.10, 6.4 releasers. (dgoodwin@redhat.com)
  - use "assert_string_equal" for multiline str asserts (alikins@redhat.com)
  - add "assert_string_equals" that diffs multiline strings (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.8-1
changelog:
  - Fix echo'ing of exit status or exception on exit (alikins@redhat.com)
  - 962905: Fixing errors with quantity spinner. (awood@redhat.com)
  - 961124: Allow rct dump-manifest to be called more than once (bkearney@redhat.com)
  - 921249: Fix Unknown virt status being reported to server.  (dgoodwin@redhat.com)
  - 905136: Make the accessability value unique (bkearney@redhat.com)
  - 913635: typo (dlackey@redhat.com.com)
  - 889582 (dlackey@redhat.com.com)
  - 962520: require python-rhsm 1.8.11 for arches (alikins@redhat.com)
  - 919706: Relax rhn-setup-gnome dependency. (dgoodwin@redhat.com)
  - Add new expiring icon (bkearney@redhat.com)
  - use os.linesep as imported (alikins@redhat.com)
  - cleanup camelCase usage in various files (alikins@redhat.com)
  - adding architecture data (ckozak@redhat.com)
  - Default option is status (ckozak@redhat.com)
  - changed list --status to status (ckozak@redhat.com)
  - adding data to installed prods (ckozak@redhat.com)
  - SORT ALL THE IMPORTS! (alikins@redhat.com)
  - stylish cleanup (alikins@redhat.com)
  - mock.patch ConsumerIdentity instead of monkey patch (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.9-1
changelog:
  - 905136: added accessibily name for owner_label (jmolet@redhat.com)
  - 928175: fixed status command after user deletion (ckozak@redhat.com)
  - 950672: Added data for yellow. Added list view. (ckozak@redhat.com)
  - 963796: Unified descriptions (cschevia@redhat.com)
  - 966745: Correct typo in name of configuration value. (awood@redhat.com)
  - 967863: Suggest package to install when mapping file is missing. (awood@redhat.com)
  - 968364: show the issuer for certs in rct. (bkearney@redhat.com)
  - 966262 for rct.8; 959563 for subscription-manager.8 (dlackey@redhat.com.com)
  - Extract latest strings from code. (dgoodwin@redhat.com)
  - close file objects deliberately (alikins@redhat.com)
  - Use fnmatch to add wildcard support (bkearney@redhat.com)
  - One more miss from my issuer/errata debacle (bkearney@redhat.com)
  - Extend use of compliance status from cp (ckozak@redhat.com)
  - Add s390 lpar specific socket counting (alikins@redhat.com)
  - be extra paranoid and strip nul from /sys reads (alikins@redhat.com)
  - use new cpu info method by default (alikins@redhat.com)
  - Add a new method for calculating cpu sockets (alikins@redhat.com)
  - Added reasons to Subscription Details (ckozak@redhat.com)
  - Support enable and disable of all repos. (bkearney@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.10-1
changelog:
  - 922825: pre_subscribe conduit now contains more data (mstead@redhat.com)
  - 921222: Fixed subman auto-complete scripts (cschevia@redhat.com)
  - 922806: Fix RHEL 5 firstboot issue with backButton. (dgoodwin@redhat.com)
  - 960465: Subman disconnected when consumer cert is invalid (ckozak@redhat.com)
  - 966747: handle a custom facts file being empty (alikins@redhat.com)
  - 969280: Fix traceback on disconnected sub detach (ckozak@redhat.com)
  - handle s390x's without vm info in sysinfo (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.11-1
changelog:
  - 844532: xen dom0 cpu topology lies, work around it (alikins@redhat.com)
  - 854380: fix overlap filter (ckozak@redhat.com)
  - 915847: Provide option to skip using proxy when connecting to RHSM.
  - 921222: Fixed tab completion (cschevia@redhat.com)
  - 922871: Call pre_product_id_install hook on product install (mstead@redhat.com)
  - 924766: Show machine type when attaching 'virt only' subscriptions (wpoteat@redhat.com)
  - 927340: added empty warning, block auth unless proxy enabled (ckozak@redhat.com)
  - 928401: Fixed translation issue in redeem dialog (cschevia@redhat.com)
  - 947485: System 'disconnected' if no cache and disconnected (ckozak@redhat.com)
  - 947788: facts plugin can handle no 'facter' (alikins@redhat.com)
  - 966137: stat-cert handles ent cert with no content (alikins@redhat.com)
  - 972883: Add entries to productid.js during migration. (awood@redhat.com)
  - 973938: Flush std out and catch errors to work around the broken pipe from the more command (bkearney@redhat.com)
  - 974123: default behavior is help, no longer status (ckozak@redhat.com)
  - 974587: Allow list --consumed to handle certificates with empty order sections (bkearney@redhat.com) (awood@redhat.com)
  - 975164: 975186: fix certlib exception handling (ckozak@redhat.com)
  - Pull PluginManager from dependency injection framework (mstead@redhat.com)
  - Performance enhancements (ckozak@redhat.com)
  - added cp_provider doc strings, modified test fixture (ckozak@redhat.com)
  - Fix expand options so there is no border txt view (alikins@redhat.com)
  - Make PluginManager lazy loading (mstead@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.12-1
changelog:
  - 877331: Add --org and --environment options to migration script.  (awood@redhat.com)
  - 915847: Clear old proxy settings if the --no-proxy option is used. (awood@redhat.com)
  - 928401: Fixed translation issue in redeem dialog (cschevia@redhat.com)
  - 974123: default behavior is help, no longer status (ckozak@redhat.com)
  - 976689: Handle no xorg server, allow help (ckozak@redhat.com)
  - 976848: 976851: thread cache write, limit disk reads, singleton
  - 976865: dbus iface singleton for gui (ckozak@redhat.com)
  - 976866: single instance of ProdDir and EntDir (ckozak@redhat.com)
  - 976868: improve rhsmd logging (alikins@redhat.com)
  - 976868: enable logging from /usr/libexec/rhsmd (alikins@redhat.com)
  - 976924: empty service level and type (ckozak@redhat.com)
  - 977481: added proxy options to status (ckozak@redhat.com)
  - 977535: cli uses utf8 too (ckozak@redhat.com)
  - 977851: 977321: Centralize CertSorter, drive updates, refresh properly
  - 978322: fixed client deleting certs (ckozak@redhat.com)
  - 979492: register auto-attach force recreates cert dirs (ckozak@redhat.com)
  - 980209: removed injection calls from migration script (ckozak@redhat.com)
  - 980640: include stacked ents in provided (ckozak@redhat.com)
  - 981689: fix attach command (ckozak@redhat.com)
  - 982286: Fixed empty dialog message (cschevia@redhat.com)
  - latests strings from zanata and new keys.pot (alikins@redhat.com)
  - Fixed Preferences dialog to be non-threaded (cschevia@redhat.com)
  - updated spec to require python-rhsm v1.8.13-1 or greater (cschevia@redhat.com)
  - Added auto-attach property in the preferences dialog (cschevia@redhat.com)
  - Added autoheal command to subman CLI (cschevia@redhat.com)
  - Add support for SUBMAN_DEBUG to log to stdout (alikins@redhat.com)
  - remove logging of plugin args (alikins@redhat.com)
  - Fixed auto-complete script for auto-attach command (cschevia@redhat.com)


author: Alex Wood <awood@redhat.com> 1.9.1-1
changelog:
  - latest translations from zanata (alikins@redhat.com)
  - Preserve traceback when an exception is thrown from background thread.
    (awood@redhat.com)
  - Remove logging of injection setup (alikins@redhat.com)
  - 988411: more at-spi changes for QA (ckozak@redhat.com)
  - 908521: Pull in the latest mr strings (bkearney@redhat.com)
  - 928469: Pull in latest ml strings from zanata (bkearney@redhat.com)
  - 927990: Pull in latest ta_IN strings from zanata (bkearney@redhat.com)
  - 987579: Make clicking autoheal label work (cschevia@redhat.com)
  - 988430, 988861: remove logging from write_cache to avoid segfault
    (ckozak@redhat.com)
  - 966422: Do not hang firstboot if there is an exception during registration.
    (awood@redhat.com)
  - 978329: catch IdentityCertException gracefully (ckozak@redhat.com)
  - 988482: fix gtk warnings on gtk-2.10 (alikins@redhat.com)
  - 988411: fixed at-spi locator name (ckozak@redhat.com)
  - fixed dbus on rhel5 (ckozak@redhat.com)
  - 987071: specify arch of librsvg dep (alikins@redhat.com)
  - 987626: Remove PUTS while opening preferences dialog, fix related test
    (cschevia@redhat.com)
  - 987551: correctly reconnect to rhsmd daemon (ckozak@redhat.com)
  - 981611, 981565: fixed icon and text truncation (ckozak@redhat.com)
  - rev zanata branch to 1.9.X (alikins@redhat.com)
  - Rev master to 1.9.x (alikins@redhat.com)
  - 968820: raise timeout exceptions for cli calls (alikins@redhat.com)
  - 950892: add ents-nag-warning.png to docs install (alikins@redhat.com)
  - add new file to spec (ckozak@redhat.com)
  - 978466: fix missing socket info s390x/ppc64 (alikins@redhat.com)
  - 985515: moved DbusIface to fix anaconda productId (ckozak@redhat.com)
  - 983193: remove unused 'Virt Limit' cat-cert field (alikins@redhat.com)
  - Correcting whitespace error. (awood@redhat.com)
  - 986971: String Update: Quantity > Available (cschevia@redhat.com)
  - 980724: allsubstab cleared on identity change, check redeem on register
    (ckozak@redhat.com)
  - 921222: add 'status' to bash completion (alikins@redhat.com)
  - 977580: Preferences dialog hide and show (cschevia@redhat.com)
  - 977481: make proxy cli check require_connection (alikins@redhat.com)
  - 977896: Fixes for Workstation/Desktop certs (alikins@redhat.com)
  - Added comma to satisfy grammar rules (cschevia@redhat.com)
  - added at-spi locator for autoheal checkbox (jmolet@redhat.com)
  - 984203: Fix german translations (bkearney@redhat.com)
  - 974587: Add more checks for no order portion being present
    (bkearney@redhat.com)
  - 984206: Removed Spaces from String (cschevia@redhat.com)
  - Remove releasers due to branching. (dgoodwin@redhat.com)
  - 983670: Improved auto-attach description (cschevia@redhat.com)
  - 982286: Adjusted markup removal (cschevia@redhat.com)
  - 983250: 983281: certs check warning period (ckozak@redhat.com)
  - Adding Fedora 19 Yum releasers. (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.9.2-1
changelog:
  - 851321: Refresh/redraw tables after removing subscriptions (cschevia@redhat.com)
  - 974587: allow certs with no content (ckozak@redhat.com)
  - 977920, 983660: manpage updates (dlackey@redhat.com.com)
  - 987579: Re-arranged preferences dialog (cschevia@redhat.com)
  - 990195: remove subscribe options (ckozak@redhat.com)
  - 991214: refresh ent dir, catch exception gracefully (ckozak@redhat.com)
  - 991548: Display correct error message for registration failures.  (awood@redhat.com)
  - 991580: add rhsmd debug to stdout (ckozak@redhat.com)
  - 993202: fix default config, take advantage of rhsmconfig options (ckozak@redhat.com)
  - 994266: list consumed shows expired bugs (ckozak@redhat.com)
  - 994997: Fix Unknown is_guest during firstboot. (dgoodwin@redhat.com)
  - Changed 'It is' to possessive 'Its' (cschevia@redhat.com)
  - Remove unused WARNING_DAYS variable (ckozak@redhat.com)
  - Bump python-rhsm requires to 1.9.1 for config changes. (dgoodwin@redhat.com)
  - add ondate to status (ckozak@redhat.com)
  - Fedora 17 is at end of life. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.1-1
changelog:
  - Adding Fedora 20 branch to releaser. (awood@redhat.com)
  - Subscribe/unsubscribe mirror attach/remove tests (alikins@redhat.com)
  - Revert "990195: remove subscribe options" (alikins@redhat.com)
  - 994620: reword tooltip message (ckozak@redhat.com)
  - 997935: stop making requests after unregister (ckozak@redhat.com)
  - 997740: allow autoheal call more often (ckozak@redhat.com)
  - Prevent name collision over the parent variable in RHEL 5 Firstboot.
    (awood@redhat.com)
  - 997189: error is now a sys.exc_info() tuple. (awood@redhat.com)
  - self._parent is not defined here. (awood@redhat.com)
  - bump version and remove rhel-6.5 releaser (jesusr@redhat.com)
  - Convert contract selection window to use a MappedListStore.
    (awood@redhat.com)
  - Stripe rows whenever the My Subs or All Available tabs are shown.
    (awood@redhat.com)
  - 991165: Refresh row striping after the TreeView is resorted.
    (awood@redhat.com)
  - Remove unused background attribute in Installed Products tab.
    (awood@redhat.com)
  - Set background color on progress bar renderer. (awood@redhat.com)
  - No need to set a hint to true in glade then false in code. (awood@redhat.com)
  - Remove duplicate import. (awood@redhat.com)
  - Add a very simple "smoke" test script (alikins@redhat.com)
  - 842402: Re-aligning Subscription Manager Gui (cschevia@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10.2-1
changelog:
  - update translations from zanata (alikins@redhat.com)
  - 1004893: update prods before compliance (ckozak@redhat.com)
  - 1004908: Remove the rhn-setup-gnome dep even more. (alikins@redhat.com)
  - 1004908: move rhn-setup-gnome requires to -gui subpackage
    (pbabinca@redhat.com)
  - 1004385: rhsm icon completion fix (ckozak@redhat.com)
  - 1004341: add gui completion (ckozak@redhat.com)
  - 1001820: fix autocompletion (ckozak@redhat.com)
  - rev min python version for "make stylish" to 2.6 (alikins@redhat.com)
  - 994344: messaging for bad filetypes (ckozak@redhat.com)
  - 995597: continue attaching if a pool cannot be found (ckozak@redhat.com)
  - 1001169: fix pythonic empty string identity problems (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.3-1
changelog:
  - Latest strings from zanata. (alikins@redhat.com)
  - Latest string catalog. (alikins@redhat.com)
  - point at the zanata 1.10.x version/branch (alikins@redhat.com)
  - Run 'make update-po' on translations. (awood@redhat.com)
  - Latest translations from Zanata. (awood@redhat.com)
  - Merge pull request #782 from candlepin/ckozak/environment_completion
    (alikins@redhat.com)
  - Merge pull request #776 from candlepin/alikins/1008462_log_virt_what
    (c4kofony@gmail.com)
  - 1011712: add missing environments completion (ckozak@redhat.com)
  - Merge pull request #773 from candlepin/ckozak/match_gui_filters
    (alikins@redhat.com)
  - Merge pull request #787 from candlepin/awood/1006985-abort-migration
    (alikins@redhat.com)
  - Use all keywords args for call to get_avail_ents (alikins@redhat.com)
  - Add 'providedProducts' to test pool (alikins@redhat.com)
  - stylish cleanups (alikins@redhat.com)
  - removed subscribed filter, added testing (ckozak@redhat.com)
  - Add some tests cases for managerlib.get_avail_ents (alikins@redhat.com)
  - fix wrong index in get_filtered_pools_list (ckozak@redhat.com)
  - remove unused args, remove unnecessary idcert read (ckozak@redhat.com)
  - add completion for new CLI filters (ckozak@redhat.com)
  - 654501: add some filtering to list available (ckozak@redhat.com)
  - Merge pull request #765 from candlepin/alikins/redhataccount
    (awood@redhat.com)
  - Move capture() context manager to fixtures.py (awood@redhat.com)
  - Merge pull request #786 from candlepin/ckozak/cli_list_provided
    (alikins@redhat.com)
  - 1006985: Abort migration when we detect different certs with the same ID.
    (awood@redhat.com)
  - Merge pull request #781 from candlepin/ckozak/cat_cert_unlimited
    (alikins@redhat.com)
  - 996993: add provided to list available (ckozak@redhat.com)
  - Merge pull request #784 from candlepin/ckozak/gui_unentitled_string
    (alikins@redhat.com)
  - 1012501: Correct number of entitled products with expired ents
    (ckozak@redhat.com)
  - 1012566: rhsmd cron job 700 (ckozak@redhat.com)
  - 1011703: Do not allow selection on listview (mstead@redhat.com)
  - Merge pull request #779 from candlepin/alikins/flex_branding3
    (c4kofony@gmail.com)
  - 1011961: -1 quantity is printed as unlimited (ckozak@redhat.com)
  - Merge pull request #774 from candlepin/ckozak/fix_gui_completion
    (alikins@redhat.com)
  - Make certlib repo and brand updating similar. (alikins@redhat.com)
  - 1004385: remove some gtk help options (ckozak@redhat.com)
  - Make BrandingInstaller run every cert install/rm (alikins@redhat.com)
  - Merge pull request #778 from candlepin/ckozak/update_repolib_attach
    (alikins@redhat.com)
  - keep repolib in certmgr (ckozak@redhat.com)
  - 1011234: no service level displays empty string (ckozak@redhat.com)
  - 1008016: update repos on certlib change (ckozak@redhat.com)
  - fix traceback when poolstash is empty (ckozak@redhat.com)
  - 1008462: log more virt-what output (alikins@redhat.com)
  - 1008462: Log detected virt info as we detect it. (alikins@redhat.com)
  - 1004341: gui completion no longer resets (ckozak@redhat.com)
  - Merge pull request #761 from candlepin/ckozak/overlap_filter_ondate
    (alikins@redhat.com)
  - Refactor credentials gathering. (awood@redhat.com)
  - Merge pull request #771 from candlepin/alikins/cmd_name_logging
    (jmrodri@nc.rr.com)
  - Merge pull request #769 from
    candlepin/ckozak/catch_exception_updating_installed (jmrodri@nc.rr.com)
  - Merge remote branch 'origin/master' into alikins/redhataccount
    (awood@redhat.com)
  - Merge pull request #768 from candlepin/ckozak/status_ondate_completion
    (jmrodri@nc.rr.com)
  - Merge pull request #766 from candlepin/alikins/make_zanata
    (jmrodri@nc.rr.com)
  - 973838: refresh redhat.repo after register (alikins@redhat.com)
  - make default logger include sys.argv[0] (alikins@redhat.com)
  - Merge pull request #770 from candlepin/mstead/add-virt-type-info
    (c4kofony@gmail.com)
  - Add System Type to output of list --consumed (mstead@redhat.com)
  - Add Type column to Confirm Subscription screen (mstead@redhat.com)
  - 1008603: Catch and log connection error while updating installed products
    (ckozak@redhat.com)
  - Merge pull request #767 from candlepin/ckozak/attach_suggested_quantity
    (wpoteat@redhat.com)
  - 1004385: Add missing rhsm-icon debug options (ckozak@redhat.com)
  - suggested quantity in list available (ckozak@redhat.com)
  - Merge pull request #754 from candlepin/alikins/flex_branding2
    (c4kofony@gmail.com)
  - 1001820: added ondate to completion (ckozak@redhat.com)
  - cleanup comments (alikins@redhat.com)
  - remove call on filter change, use None instead of now (ckozak@redhat.com)
  - Adding autocomplete stuff for new migration script options.
    (awood@redhat.com)
  - 767754: overlap filter ondate (ckozak@redhat.com)
  - Add a 'make zanata' target that syncs zanata (alikins@redhat.com)
  - Adding unit tests for new migration script options. (awood@redhat.com)
  - Correct failing unit tests and add convenience method. (awood@redhat.com)
  - Change brand attribute from 'os' to 'brand_type' (alikins@redhat.com)
  - Make rct show branding info (alikins@redhat.com)
  - Move to RHELBrandsInstaller by default. (alikins@redhat.com)
  - Split RHEL specific brand install bits (alikins@redhat.com)
  - Add a BrandsInstaller that handles multiple brands (alikins@redhat.com)
  - Invert dependencies, and add RHEL specific impls. (alikins@redhat.com)
  - Stylish cleanups. (alikins@redhat.com)
  - Added new parameters to the script (tazimkolhar@gmail.com)
  - clean up comments (alikins@redhat.com)
  - More entbranding logging and testing. (alikins@redhat.com)
  - Allow multi ents that provide identical branding (alikins@redhat.com)
  - More entbranding test cases. (alikins@redhat.com)
  - Add BrandPicker and Brand base class. (alikins@redhat.com)
  - Add branding support to ent cert importer. (alikins@redhat.com)
  - Update branding on cert sorter dir moniter event (alikins@redhat.com)
  - Move all branded product logic to entbranding (alikins@redhat.com)
  - make it more clear this is for RHEL branded ents (alikins@redhat.com)
  - Add support for populating product branding info. (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.4-1
changelog:
  - 1017351: ignore dbus failures on show_window (alikins@redhat.com)
  - 1016643: Fix firstboot issues with new firstboot. (alikins@redhat.com)
  - 1005420: adding --ondate to manpage (dlackey@redhat.com.com)
  - 1007580: Add contract number to the output of list --available
    (bkearney@redhat.com)
  - 1017299: handle dmidecode module not installed (alikins@redhat.com)
  - 846331: Add tooltips to the filters page (bkearney@redhat.com)
  - 1015553: fix help message for no-overlap. display usage requirement
    (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.5-1
changelog:
  - 1021581: account/contract display nothing when no data exists
    (ckozak@redhat.com)
  - Swap heading of selectsla/confirmsubs widgets. (alikins@redhat.com)
  - 1006748: replace simplejson with 'ourjson' (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.6-1
changelog:
  - 985502: Use yum.i18n utf8_width function for string length in CLI
    (ckozak@redhat.com)
  - 916666: Displayed 'Next System Check-In' is inaccuarate (wpoteat@redhat.com)
  - Change wording for identity in CLI command. (dgoodwin@redhat.com)
  - 1019753: Stop including a fake consumer UUID fact. (dgoodwin@redhat.com)
  - 1022198: Display highest suggested quantity in contract selection
    (ckozak@redhat.com)
  - Hook up the 'why register' dialog from old rhn-client-tools.
    (dgoodwin@redhat.com)
  - Add screen to describe and skip registration in Fedora/EL7 firstboot.
    (dgoodwin@redhat.com)
  - Fix firstboot on Fedora 19. (dgoodwin@redhat.com)
  - Report distribution.version.modifier fact. ex 'beta' (ckozak@redhat.com)
  - Center filter dialog on parent window when opened (mstead@redhat.com)
  - Sort owner list in org selection screen (mstead@redhat.com)
  - 1004318: Bash completion for rct was not handing options and file lists
    correctly. (bkearney@redhat.com)
  - 1023166: Strip leading and trailing whitespaces from all usernames and
    passwords provided on the cli (bkearney@redhat.com)
  - 963579: Stop hiding the Library environment. (dgoodwin@redhat.com)
  - Fix layout issues with select sla screen in firstboot. (alikins@redhat.com)
  - Fix the layout for "Confirm Subscriptions" screen. (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.7-1
changelog:
  - 998033: Handle Unauthorized/Forbidden exceptions in CLI/GUI
    (mstead@redhat.com)
  - Remove unnecessary network calls after clean command (ckozak@redhat.com)
  - Bumping the python-rhsm required version (mstead@redhat.com)
  - Latest translations. (awood@redhat.com)
  - Introduced an Override model object to OverrideLib (mstead@redhat.com)
  - Use injected Identity instead of ConsumerIdentity in repolib
    (mstead@redhat.com)
  - Catch ValueError when determining boolean value (mstead@redhat.com)
  - Use a simplier method to compare two lists of dictionaries.
    (awood@redhat.com)
  - Hide item when server does not support overrides. (mstead@redhat.com)
  - Show message instead of repo table when no repos exist. (mstead@redhat.com)
  - Made Repository Details resemble Subscription Details (mstead@redhat.com)
  - Created an overrides module (mstead@redhat.com)
  - Created Repository Management Dialog (mstead@redhat.com)
  - Add 'repo-override' command to alter content repositories server-side.
    (awood@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.8-1
changelog:
  - 1030604: Handle 400 code for add override (mstead@redhat.com)
  - Use backed to ensure a refreshed Overrides object (mstead@redhat.com)
  - 1034574: Alternate message based on why no repos exist in GUI
    (mstead@redhat.com)
  - 1034396: No longer require entitlements to run repo-override command
    (mstead@redhat.com)
  - 1033741: Refresh Overrides CP connection when dialog is shown
    (mstead@redhat.com)
  - 1033690: Updated repo-overrides not supported message (mstead@redhat.com)
  - 1034649: Only allow repolib to update override cache if supported by the
    server (mstead@redhat.com)
  - 1032673: Warn on add override if repo doesn't exist (mstead@redhat.com)
  - 1030996: Fixed usage text for repo-override add/remove options
    (mstead@redhat.com)
  - 1032243: Updated the redhat.repo warning (mstead@redhat.com)
  - Use local ent certs to list attached pools (ckozak@redhat.com)
  - 1021013: Change wording on firstboot address screen (alikins@redhat.com)
  - 1020539: Show proxy info if no RHN in firstboot (alikins@redhat.com)
  - Make zip file of consumer information for debugging (wpoteat@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.9-1
changelog:
  - Check for RHSM_DISPLAY before loading any modules. (alikins@redhat.com)
  - 1034429: Fix stacktrace in logs on unregister. (dgoodwin@redhat.com)
  - add ServerUrlParseException strings to mapper (jesusr@redhat.com)
  - 1040167: Update installed products properly (ckozak@redhat.com)
  - Added atspi locator for overall status (ckozak@redhat.com)
  - ExceptionMapper will now traverse object graph looking for message
    (mstead@redhat.com)
  - Convert tests on stderr to use Capture context manager. (awood@redhat.com)
  - Have Capture grab both stdout and stderr. (awood@redhat.com)
  - Updated for readability (ckozak@redhat.com)
  - replace file monitors with a single monitor (ckozak@redhat.com)
  - Rename capture context manager and use new-style classes. (awood@redhat.com)
  - Correct Makefile for RHEL 5. (awood@redhat.com)
  - 1030604: print to stdout instead of stderr for consistency
    (mstead@redhat.com)
  - display pool type in cli and gui (ckozak@redhat.com)
  - 1031008: Properly handle exceptions when checking compliance
    (mstead@redhat.com)
  - Change the capture() context manager to tee output. (awood@redhat.com)
  - Remove mock stdout. Nosetest captures stdout by default. (awood@redhat.com)
  - respect http(s)_proxy env variable for proxy information (jesusr@redhat.com)
  - Created ExceptionMapper to allow sharing exception messages
    (mstead@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.10-1
changelog:
  - 1039736: Modify the remote server string to reference Satellite instead of
    CloudForms (bkearney@redhat.com)
  - 916666: Change method of service detection (wpoteat@redhat.com)
  - Correct at-spi name for subscription type text (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.11-1
changelog:
  - 1018807: Ensure virt facts are a single line (bkearney@redhat.com)
  - 1007580: Print blank spaces if there is no contract number on the list
    command (bkearney@redhat.com)
  - Fedora 18 is at end of life. (awood@redhat.com)
  - Updated translations. (dgoodwin@redhat.com)
  - 104338: add default dest dir to rhsm-debug help (alikins@redhat.com)
  - 1042897: add proxy info to rhsm-debug completion (alikins@redhat.com)
  - 914833: rct cat-cert output reports an Order: Subscription: field.
    (wpoteat@redhat.com)
  - 1052297: delay import of site module (ckozak@redhat.com)
  - set default encoding to utf-8 in rhsm-debug and migrate scripts
    (ckozak@redhat.com)
  - 1048325: Set default encoding to utf-8 when running the rct script
    (ckozak@redhat.com)
  - 1050850: re-evaluate system facts when checking for updates
    (ckozak@redhat.com)
  - Some refactoring of rhsm-debug (alikins@redhat.com)
  - Additional improvements to rhsm-debug (wpoteat@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.12-1
changelog:
  - added testing for the pooltype cache (ckozak@redhat.com)
  - 961003: Stricter matches for rhel product tags (alikins@redhat.com)
  - 1059809: Cache pool types to avoid unnecessary api calls (ckozak@redhat.com)
  - 1059809 Improve attach and remove performance add progress bar
    (ckozak@redhat.com)
  - 908869: Fix the mis-transated options in pt-BR (bkearney@redhat.com)
  - 1044596: handle http,socket,ssl fetching release (alikins@redhat.com)
  - dont always print exception message (ckozak@redhat.com)
  - 1044596: Make release listing handle empty data (alikins@redhat.com)
  - 1020423: update help messages (jesusr@redhat.com)
  - Fix incorrect patching. (awood@redhat.com)
  - Mock ProductDatabase so tests can run without a productid.js file
    (awood@redhat.com)
  - 825388: Properly wrap text when reaching dialog limit (mstead@redhat.com)
  - 1021443: display Consumer deleted message (jesusr@redhat.com)
  - Altering titles per mreid conversation. (wpoteat@redhat.com)
  - 1039736: Fix missed reference to CloudForms in tooltip. (dgoodwin@redhat.com)
  - Fix ta_IN translation problem. (dgoodwin@redhat.com)
  - Lock timezone to EST5EDT in timezone tests. (awood@redhat.com)
  - 1005329: add at-spi locator to the SLA selection table (ckozak@redhat.com)
  - 1039914: Update the rhsm-debug man page (bkearney@redhat.com)
  - 874169: Fix label alignment in progress UI (mstead@redhat.com)
  - 1020361: Replace the use of the term Valid with Current in the status command
    (bkearney@redhat.com)
  - 1028596: Add the repo-override command to the subscription-manager man page
    (bkearney@redhat.com)
  - 1020522: Update the man page for subscription-manager with new list options
    (bkearney@redhat.com)
  - Pull in the latest strings from zanata. (bkearney@redhat.com)
  - 1057719: adding a small section on deprecated commands (dlackey@redhat.com)
  - 1017354: remove msg printed to stderr via yum (alikins@redhat.com)
  - 857147: Auto-subscribe window has a confusing name (wpoteat@redhat.com)
  - Use dateutil.tz instead of pytz. (awood@redhat.com)
  - 883486: The local time's start/end dates rendered in the list
    --available/--consumed incorrect (wpoteat@redhat.com)
  - 1049037: Add conditional requires on migration data package.
    (awood@redhat.com)
  - 973938: correctly handle SIGPIPE in rct (ckozak@redhat.com)
  - 878089: Add line wrapping when listing subscription-manager modules
    (ckozak@redhat.com)
  - 1017354: Ensure all message go to stdout, not stderr (bkearney@redhat.com)
  - 851325: Anchor choose server "default" button beside the text box.
    (dgoodwin@redhat.com)
  - 1039739: Add 96x96 and 256x256 icons (bkearney@redhat.com)
  - 873967: Move choose server tooltips closer to the elements they assist with.
    (dgoodwin@redhat.com)
  - 1044686: Make serverurl parse error detailed again (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.13-1
changelog:
  - 1060917: catch exception thrown in firstboot (ckozak@redhat.com)
  - Extract the latest strings (bkearney@redhat.com)
  - 995121: require gnome-icon-theme for calendar icon (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-1
changelog:
  - Use glob for finding entitlement certs to remove. (dgoodwin@redhat.com)
  - Make sure entitlement cert directory exists before we clean it out.
    (dgoodwin@redhat.com)
  - safer default args in AsyncWidgetUpdater (ckozak@redhat.com)
  - use enumerate instead of confusing myself (ckozak@redhat.com)
  - Pull in latest strings from zanata (bkearney@redhat.com)
  - make sure entitlement has a pool before reading it (ckozak@redhat.com)
  - quickly load preferences (ckozak@redhat.com)
  - 1061937: preference changes occur in the background (ckozak@redhat.com)
  - use existing signals (ckozak@redhat.com)
  - simplify preferences window (ckozak@redhat.com)
  - Fix test failure if run on system that is registered. (dgoodwin@redhat.com)
  - 1061393: Don't allow subscription-manager string to be translated
    (ckozak@redhat.com)
  - 1016427: On string was missed from the extraction (bkearney@redhat.com)
  - 1058495: productid yum errors on yum remove (alikins@redhat.com)
  - 1026501: Preserve PKI directories and have rpm own them.
    (dgoodwin@redhat.com)
  - 1058374: Fix crash on exception in managergui._show_buttons
    (ckozak@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.1-1
changelog:
  - 1021069: Add reference to network usage info. (alikins@redhat.com)
  - latest strings from zanata 1.11.X branch (alikins@redhat.com)
  - 1061923: Remove trailing period from privacy URL (wpoteat@redhat.com)
  - 1039913: rhsm-debug updates and fixes (alikins@redhat.com)
  - 1061407: don't allow some translations (ckozak@redhat.com)
  - 1055664: rhsm-debug now follows more config paths (alikins@redhat.com)
  - 1038242: add anaconda.pid check before chroot (alikins@redhat.com)
  - 1035115: Update product id certs (alikins@redhat.com)
  - 864195: New output line for subscribe --auto if it can't cover all products
    (wpoteat@redhat.com)
  - 1060727: Changes to rhsm-debug for sos report (wpoteat@redhat.com)
  - 1044596: Don't match beta product tags for release (alikins@redhat.com)
  - 851325: Tweak activation key checkbox to left (alikins@redhat.com)
  - Use systemd RPM macros to make life easier. (awood@redhat.com)
  - 958016: use rpm %{optflags} and _hardended_build (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.2-1
changelog:
  - Use the new Product.brand_name for brand_name (alikins@redhat.com)
  - 865702: Dont render exc messages with bogus markup (alikins@redhat.com)
  - 1070908: Don't count cpus without topo for lpar (alikins@redhat.com)
  - 1075167: Avoid using injected values in migrate-classic-to-rhsm
    (ckozak@redhat.com)
  - 1074568: Use our translations in optparser (ckozak@redhat.com)
  - Man page spelling corrections (wpoteat@redhat.com)
  - 1070737: correct config section for ca_cert_dir (ckozak@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.3-1
changelog:
  - Cleanup entbranding tests names. (alikins@redhat.com)
  - Test cases for empty,none,not set brand type/name (alikins@redhat.com)
  - Use a real certificate2.Product in tests cases. (alikins@redhat.com)
  - Latest strings from zanata (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.11.4-1
changelog:
  - Move atspi locator to correct element (ckozak@redhat.com)
  - 1090560: readd locator to the all subs view (ckozak@redhat.com)
  - test_cert_sorter could fail based on test order (alikins@redhat.com)
  - 1058383: widgets are added and removed dynamically (ckozak@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.5-1
changelog:
  - Removing CVS properties since CVS is dead. (awood@redhat.com)
  - CertSorter syncs installed prods before super init. (alikins@redhat.com)
  - Add more entcertlib class and method docs. (alikins@redhat.com)
  - Reorder methods in roughly exec order (alikins@redhat.com)
  - entcertlib docstring cleanup (alikins@redhat.com)
  - TestDataLib -> TestBaseActionInvoker (alikins@redhat.com)
  - repolib.RepoUpdateAction ->RepoUpdateActionCommand (alikins@redhat.com)
  - repolib.RepoLib -> RepoActionInvoker (alikins@redhat.com)
  - InstalledProductsLib -> InstalledProductsActionInvoker (alikins@redhat.com)
  - IdentityCertLib -> IdentityCertActionInvoker (alikins@redhat.com)
  - healiblib.HealingLib -> HealingActionInvoker (alikins@redhat.com)
  - FactAction -> FactsActionCommand (alikins@redhat.com)
  - FactActionReport -> FactsActionReport (alikins@redhat.com)
  - FactLib -> FactsActionInvoker (alikins@redhat.com)
  - entcertlib.EntCertLib -> EntCertActionInvoker (alikins@redhat.com)
  - certlib.DataLib -> certlib.BaseActionInvoker (alikins@redhat.com)
  - rename certmgr.py to action_client (alikins@redhat.com)
  - Rename CertManager to ActionClient (alikins@redhat.com)
  - Rename CertManager to CertActionClient (alikins@redhat.com)
  - Update docstrings. (alikins@redhat.com)
  - Remove no longer used old_install. (alikins@redhat.com)
  - Add entcertlib docs (alikins@redhat.com)
  - update copyright info (alikins@redhat.com)
  - s/entdir/ent_dir since we use that slightly more (alikins@redhat.com)
  - factsgui identity now injected at the last minute (alikins@redhat.com)
  - SubManFixture's mock identity now NonCallable (alikins@redhat.com)
  - test_async does not need to mock Facts (alikins@redhat.com)
  - Store default inject stub Facts on SubManFixture (alikins@redhat.com)
  - Remove unneeded Facts() init. (alikins@redhat.com)
  - Replace Facts() with injected facts in managercli (alikins@redhat.com)
  - Start replacing use of Facts() with inj'ed facts (alikins@redhat.com)
  - Stop passing facts to ReleaseBackend. (alikins@redhat.com)
  - Make repolib use inject ent_dir/prod_dir (alikins@redhat.com)
  - Make cp_provider manage ContentConnection (alikins@redhat.com)
  - Make ReleaseBackend use inj'ed ent/prod dirs (alikins@redhat.com)
  - split migrates basic/consumer connection methods (alikins@redhat.com)
  - migrate.py now uses inj'ed CP_PROVIDER (alikins@redhat.com)
  - ReleaseBackend doesn't need a uep, remove it. (alikins@redhat.com)
  - Stop passing a uep into CertManager and friends. (alikins@redhat.com)
  - Don't pass cp to RepoLib from cli, use inj (alikins@redhat.com)
  - update Overrides to use inject uep (alikins@redhat.com)
  - Split IdentityCertLib into Lib+Action (alikins@redhat.com)
  - Use the mock cp_provider inject with the fixture (alikins@redhat.com)
  - certlib.DataLib doesn't need a uep now (alikins@redhat.com)
  - Fix testcase to use injected uep (alikins@redhat.com)
  - Use inj'ed UEP in healinglib (alikins@redhat.com)
  - Use inj'ed UEP in repolib (alikins@redhat.com)
  - Use inj'ed UEP in packageprofilelib (alikins@redhat.com)
  - Use inject uep in installedproductslib (alikins@redhat.com)
  - Remove unneeded mock Facts in test_certmgr (alikins@redhat.com)
  - Make certmgr let FactLib use inj uep (alikins@redhat.com)
  - Make FactActionReport use inj'ed UEP (alikins@redhat.com)
  - Start letting EntCertLib use injected UEP (alikins@redhat.com)
  - Move entcertlib to use inj'ed cp_proivder (alikins@redhat.com)
  - Remove now wrong comment (alikins@redhat.com)
  - Remove late import of repolib (alikins@redhat.com)
  - Remove incorrect docstrings (alikins@redhat.com)
  - Remove initial entcertlib invocation (alikins@redhat.com)
  - Don't pass in a facts object, inject it (alikins@redhat.com)
  - We don't use the passed in entdir, don't pass it (alikins@redhat.com)
  - Handle ActionReport lists having None (alikins@redhat.com)
  - Remove commented out code (alikins@redhat.com)
  - Fix up for now, but need to remove these tests (alikins@redhat.com)
  - certdata merge cleanups (alikins@redhat.com)
  - merge cleanups (alikins@redhat.com)
  - Add new files to spec (alikins@redhat.com)
  - stylish cleanups (alikins@redhat.com)
  - Use injected identity instead of consumer object (alikins@redhat.com)
  - Update to use Caputure() instead of MockStdout (alikins@redhat.com)
  - Fix v1 cert exp cert output for catcert tests (alikins@redhat.com)
  - self.installed is a property now, fix references (alikins@redhat.com)
  - merge cleanups (alikins@redhat.com)
  - make stylish cleanups (alikins@redhat.com)
  - Update repolib tests for certlib refactor (alikins@redhat.com)
  - Repo/override cli tests use injected identity (alikins@redhat.com)
  - Update Repos and overrides for injected identity (alikins@redhat.com)
  - Update RepoLib to use new DataLib init (alikins@redhat.com)
  - Fix mismerge and merge cleanups (alikins@redhat.com)
  - Stylish cleanups, mostly no longer used imports (alikins@redhat.com)
  - Remove unused ProductCertRepo bits (alikins@redhat.com)
  - Keep certmgr update_reports as a instance variable (alikins@redhat.com)
  - Remove certlib.ConsumerIdentity. (alikins@redhat.com)
  - Move firstboot to use injected identity. (alikins@redhat.com)
  - Move 'subscription-manager' yum plugin to inj (alikins@redhat.com)
  - Remove unused ConsumerIdentity from test_unreg (alikins@redhat.com)
  - Using injection in migration for prod_dir/identity (alikins@redhat.com)
  - Remove _get_consumer_id from EntUpdateAction (alikins@redhat.com)
  - Move old test_certlib to test_entcertlib (alikins@redhat.com)
  - Fix fetch_certificates for entcert Report (alikins@redhat.com)
  - Add some comments about id error logging (alikins@redhat.com)
  - Add a certmgr.UnregisterCertMgr class (alikins@redhat.com)
  - Add a RepoActionReport formatter (alikins@redhat.com)
  - Add a RepoActionReport (alikins@redhat.com)
  - More injected id, clean check_registration use (alikins@redhat.com)
  - Test fixes and merge/rebase cleanup (alikins@redhat.com)
  - Make string equals show expected/actual (alikins@redhat.com)
  - identitycertlib now uses injected identity (alikins@redhat.com)
  - certmgr tests were hitting real rpmdb (alikins@redhat.com)
  - PackageProfileManager/InstalledProductsManager inj (alikins@redhat.com)
  - Move PackageProfileLib and InstalledProductsLib (alikins@redhat.com)
  - Make rhsm_d use injection consumer identity (alikins@redhat.com)
  - Convert test_async to use SubManFixture (alikins@redhat.com)
  - test_certmgr calls uep.getRelease, so mock it (alikins@redhat.com)
  - Use injected consumer identity in firstboot (alikins@redhat.com)
  - Use injected consume identity in factlib (alikins@redhat.com)
  - Use ConsumerIdentity from identity not certlib (alikins@redhat.com)
  - Fix self.exceptions reference (alikins@redhat.com)
  - _valid_consumer to _inject_mock_valid_consumer (alikins@redhat.com)
  - Move _[in]valid_consumer to test/fixture.py (alikins@redhat.com)
  - Use injected Identity in repolib (alikins@redhat.com)
  - Remove  certlib.ConsumerIdentity from managerlib (alikins@redhat.com)
  - Inject identity in utils for version check (alikins@redhat.com)
  - Give a name to Mock()s created in test/fixture (alikins@redhat.com)
  - Re add the new slimmer fitter certlib.py (alikins@redhat.com)
  - Make entcertlib uses injected identity (alikins@redhat.com)
  - Split certlib into entcertlib and certlib (alikins@redhat.com)
  - Make IdentityCertLib use inj IDENTITY (alikins@redhat.com)
  - Move IdentityCertLib to identitycertlib.py (alikins@redhat.com)
  - Split Healing* into healinglib.py (alikins@redhat.com)
  - repolib.UpdateAction is now RepoUpdateAction (alikins@redhat.com)
  - Checkout idcertlib._status from it's report (alikins@redhat.com)
  - Inject an ActionLock, and a Facts class. (alikins@redhat.com)
  - Add ActionReports, certlib cleanup, lock cleanup (alikins@redhat.com)
  - The Action subclass is unneeded now. (alikins@redhat.com)
  - CertManager split CertManager/HealingCertManager (alikins@redhat.com)
  - HealingAction just uses an EntCertUpdateReport atm (alikins@redhat.com)
  - reAction()'ify repolib, add RepoReport (alikins@redhat.com)
  - reAction()'ify Factlib, add FactUpdateReport (alikins@redhat.com)
  - certmgr expects a ActionReport from Action.perform (alikins@redhat.com)
  - Rename CertLib->EntCertLib (alikins@redhat.com)
  - Split UpdateReport into base class and sub classes (alikins@redhat.com)
  - Create UpdateReport in Certlib.CertLib and pass it (alikins@redhat.com)
  - Start refactoring certlib (alikins@redhat.com)
  - Add product certs with os_name in certdata (alikins@redhat.com)
  - Add ProductIdRepoMap as core of ProductDatabase (alikins@redhat.com)
  - Add a DefaultDict (defaultdict with pretty print) (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.11.7-1
changelog:
  - update existing repos with non-default overrides (ckozak@redhat.com)
  - correct repos --list behavior (ckozak@redhat.com)
  - Cache overrides when RepoFile is written (ckozak@redhat.com)
  - 1098891: Apply overrides to mutable properties (ckozak@redhat.com)
  - 1076359; Removes the extra l from --remove all (csnyder@redhat.com)
  - 1098891: Update repos, persisting local settings when possible
    (ckozak@redhat.com)
  - 1094617: Status line reporting for installed products uses incorrect date
    (wpoteat@redhat.com)
  - 1097208: 1097703: Fix rhsmcertd-worker daemon (ckozak@redhat.com)
  - 1086301: Fix product id product version compare (alikins@redhat.com)
  - 1096777: Bad URI for remove by serial (wpoteat@redhat.com)
  - 1095938: re-add at-spi locator in repos window (ckozak@redhat.com)
  - 1094492: Consumer name length issues in certificate (wpoteat@redhat.com)
  - Fix yum subman plugin RepoActionInvoker error. (alikins@redhat.com)
  - Overrides had no "cp", the connection was named uep (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.1-1
changelog:
  - bump version to 1.12 (jesusr@redhat.com)
  - Support getting release versions via API call (mstead@redhat.com)
  - 855050: set default fallback window icon (ckozak@redhat.com)
  - refresh ent_dir after adding/deleting certs (ckozak@redhat.com)
  - 1035440: Don't rewrite redhat.repo unless it has changed (ckozak@redhat.com)
  - 1097536: match-installed filter was incorrectly removed. (wpoteat@redhat.com)
  - 1092754: 1094879: Remove install-num-migrate-to-rhsm tool (ckozak@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.12.2-1
changelog:
  - 1070585: GUI no longer locks on connection test. Adds cancel button.
    (csnyder@redhat.com)
  - Disable CLI if we are running inside a container. (dgoodwin@redhat.com)
  - Don't encourage registration in yum plugin if we have ents but no identity.
    (dgoodwin@redhat.com)
  - Allow yum plugin to generate redhat.repo when unregistered.
    (dgoodwin@redhat.com)
  - Rev zanata branch to 1.12.X (alikins@redhat.com)
  - 1030638: Changes default resolution values in mainwindow.glade to 800x600.
    (csnyder@redhat.com)
  - 1086377: Next system check-in not displaying in RHEL 5.11
    (wpoteat@redhat.com)
  - Fix plugin config so conduit conf methods work. (alikins@redhat.com)
  - 1058380: Subscripton Manager plugin reporting Subscription Management when
    RHN is in use (wpoteat@redhat.com)
  - Add support for sphinx doc generation. (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.12.3-1
changelog:
  - Bumping required python-rhsm version (mstead@redhat.com)
  - Fixing checkstyle. (mstead@redhat.com)
  - TODO/FIXME cleanup. (alikins@redhat.com)
  - Cleanup BaseOstreeKeyFileTest.cfgfile_data (alikins@redhat.com)
  - Remove unused model.OstreeRepo (alikins@redhat.com)
  - Use python-rhsm's new EntCert.key_path() (alikins@redhat.com)
  - Add specific exception for refspec parse error (alikins@redhat.com)
  - stylish cleanups (alikins@redhat.com)
  - Add test cases for OstreeContents (alikins@redhat.com)
  - Remove fixed FIXME. (alikins@redhat.com)
  - Add section name to exception reading remote name. (alikins@redhat.com)
  - Remove unused origin/refspec from report. (alikins@redhat.com)
  - repr and report format cleanups. (alikins@redhat.com)
  - Save needed ostree remote info to config file. (alikins@redhat.com)
  - Mock an ent cert associated with a content. (alikins@redhat.com)
  - Start passing along ent cert ssl info to ostree (alikins@redhat.com)
  - Fix mismerge for OstreeContents usage (alikins@redhat.com)
  - call get_path() to get path string on deploy (alikins@redhat.com)
  - Remove done TODO (map gpgkey->gpg-verify) (alikins@redhat.com)
  - _get_deployed_origin returns None if not a ostree install
    (alikins@redhat.com)
  - Fix missed return in gi_wrapper. (dgoodwin@redhat.com)
  - Rename poor choice of gi.py script. (dgoodwin@redhat.com)
  - Only replace origin remote if it matches first portion of ref.
    (dgoodwin@redhat.com)
  - Test subprocess error calling pygobject3 script, log output.
    (dgoodwin@redhat.com)
  - Start making OstreeContent resp for finding contents. (alikins@redhat.com)
  - Add models.py to spec (alikins@redhat.com)
  - Make models internal data attrs '_' (alikins@redhat.com)
  - Add a static map_gpg to OstreeRemote (alikins@redhat.com)
  - stylish cleanups (alikins@redhat.com)
  - Remove 'api' module. (alikins@redhat.com)
  - Add models module, for objects we pass to plugins (alikins@redhat.com)
  - OSTree package depends on pygobject3-base. (dgoodwin@redhat.com)
  - Move gi introspection code to separate script. (dgoodwin@redhat.com)
  - Add some missing copyright notices. (dgoodwin@redhat.com)
  - Remove inj from 'api' module. (alikins@redhat.com)
  - Add more tests. (alikins@redhat.com)
  - Remove per class repo_file_store_class (alikins@redhat.com)
  - Package ostree plugin as a sub-package. (dgoodwin@redhat.com)
  - Test cases for OstreeConfig and ..RepoFileWriter (alikins@redhat.com)
  - When persisting a OstreeCore copy all items. (alikins@redhat.com)
  - Default empty OstreeRemotes or OstreeCore (alikins@redhat.com)
  - Fix test cases to look for ostree.config (alikins@redhat.com)
  - Make OstreeConfig use OstreeConfigFileStore (alikins@redhat.com)
  - Remove OstreeConfigUpdater (alikins@redhat.com)
  - Complete happy path test for origin remote updating. (dgoodwin@redhat.com)
  - Attempt to disambiguate use of repo_config_file variables.
    (dgoodwin@redhat.com)
  - Beginning tests for ostree origin updating, refactor tempfiles in tests.
    (dgoodwin@redhat.com)
  - Name changes (alikins@redhat.com)
  - Add method to replace ostree remote in a refspec. (dgoodwin@redhat.com)
  - Get some better reporting, albeit klugey. (alikins@redhat.com)
  - Add some temp kluge, OstreeRemote's not immutable (alikins@redhat.com)
  - Make OstreeRemote a dict (alikins@redhat.com)
  - Simplify the config model a little. (alikins@redhat.com)
  - s/PluginManagerRunner/PluginHookRunner (alikins@redhat.com)
  - Stylish cleanups. (alikins@redhat.com)
  - Add a runiter to the fixtures mock PluginManager (alikins@redhat.com)
  - We still need the entdir refresh for 'attach'. (alikins@redhat.com)
  - Use PluginManager.runiter for content actions. (alikins@redhat.com)
  - Add a PluginManager.runiter() method. (alikins@redhat.com)
  - Update plugin docs. (alikins@redhat.com)
  - Add notes, comments, docstrings. (alikins@redhat.com)
  - Get ostree repo config saving working-ish (alikins@redhat.com)
  - Update some missed tests. (dgoodwin@redhat.com)
  - Refactor to an update content plugin. (dgoodwin@redhat.com)
  - Update makefile and spec for ostree plugin. (dgoodwin@redhat.com)
  - Move ostree plugin support code to subscription-manager namespace.
    (dgoodwin@redhat.com)
  - Add ostree/model.py for ostree related models. (alikins@redhat.com)
  - More tests for ostree/repo_file (alikins@redhat.com)
  - Add src/content_plugins to coverage (alikins@redhat.com)
  - Use RhsmConfigParser to read repo config (alikins@redhat.com)
  - More ostree impl tests. (alikins@redhat.com)
  - Use the 'api' module when importing from plugins. (alikins@redhat.com)
  - Start of test for 'api' module. (alikins@redhat.com)
  - Add an api module with our "exported" symbols (alikins@redhat.com)
  - Use regular config parser instead of pyxdg (alikins@redhat.com)
  - Add start of tests for ostree repo action (alikins@redhat.com)
  - Start ostree repo action class stubs (alikins@redhat.com)
  - Start ostree implementation tests (alikins@redhat.com)
  - Start adding ostree implementation (alikins@redhat.com)
  - Add TODO about content_plugin installs (alikins@redhat.com)
  - Move OstreeContentActionInvoker to it's own module (alikins@redhat.com)
  - Remove unneeded #!/usr/bin/python (alikins@redhat.com)
  - Make ostree content action loaded from plugins. (alikins@redhat.com)
  - Log exceptions from trying to load plugins. (alikins@redhat.com)
  - Add ostree_content plugin entry point (alikins@redhat.com)
  - HACK: install ostree content plugin in site-packages (alikins@redhat.com)
  - Add content_plugins dir,and ostree content plugins (alikins@redhat.com)
  - Remove sample yum_content plugin (alikins@redhat.com)
  - Hit ContentActionClient for some test coverage. (alikins@redhat.com)
  - Add test for ContentActionPluginConduit (alikins@redhat.com)
  - entcertlib.repo_hook can be content type agnostic (alikins@redhat.com)
  - Replace odd usage of 'repolib' name. (alikins@redhat.com)
  - Load content actions from plugin class search (alikins@redhat.com)
  - Add a dummy yum_content plugin for testing (alikins@redhat.com)
  - Add ContentActionPluginConduit plugin. (alikins@redhat.com)
  - Add ostree_action_invoker (ostree repo action) (alikins@redhat.com)
  - Add ContentActionClient (alikins@redhat.com)
  - 1104158: Version command needs better explanation for content
    (wpoteat@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.12.4-1
changelog:
  - Fix broken logging statement in container mode. (dgoodwin@redhat.com)
  - 1067035: Move Subscription Manager version for better layout
    (wpoteat@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.12.5-1
changelog:
  - Merge pull request #978 from candlepin/alikins/ostree_gpg_http
    (alikins@redhat.com)
  - Merge pull request #979 from candlepin/csnyder/help_message_identity_force
    (jmrodri@nc.rr.com)
  - Use rhsm.baseurl for ostree urls as well. (alikins@redhat.com)
  - Handle Content.gpg="http://" as gpg-verify=false (alikins@redhat.com)
  - 1107810: Updates help message for identity --force. (csnyder@redhat.com)
  - Merge pull request #977 from candlepin/alikins/handle_no_origin (dgoodwin@rm-
    rf.ca)
  - Merge pull request #974 from cgwalters/doc-typos (jmrodri@nc.rr.com)
  - Merge pull request #973 from candlepin/alikins/1112282_cond_ostree_rpm
    (jmrodri@nc.rr.com)
  - make has_ostree use macro value NOT hardcoded value. (jesusr@redhat.com)
  - Handle missing or empty ostree origin file. (alikins@redhat.com)
  - Fix saving ostree remote configs with gpg set. (alikins@redhat.com)
  - plugin/ostree: Fix doc typos (walters@verbum.org)
  - Merge pull request #972 from candlepin/ckozak/fix_custom_fact_log
    (jmrodri@nc.rr.com)
  - Merge pull request #968 from candlepin/alikins/setup_py (jmrodri@nc.rr.com)
  - 1112282: Dont build ostree plugin subpackage < 7 (alikins@redhat.com)
  - Merge pull request #966 from
    candlepin/alikins/1108257_rhel_5_workstation_special (c4kofony@gmail.com)
  - Add required bz flags to tito releaser definition. (dgoodwin@redhat.com)
  - 1112326: remove extra '/' from custom fact loading error logging
    (ckozak@redhat.com)
  - Allow tests to run in any TZ (mstead@redhat.com)
  -  Temp ignore use of subprocess.check_output (alikins@redhat.com)
  - Add test cases for 'rhel-5-workstation' tags. (alikins@redhat.com)
  - 1108257: special case prod tag rhel-5-workstation (alikins@redhat.com)
  - Add a simple setup.py. (alikins@redhat.com)
  - Merge pull request #965 from candlepin/alikins/good_enthusiasm_pep8 (dgoodwin
    @rm-rf.ca)
  - Turn off verbose mode of pyqver. (alikins@redhat.com)
  - make stylish cleanups for new pep8 (alikins@redhat.com)
  - Add tox.ini with ignores for pep8 indention (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.6-1
changelog:
  - 1022622: Modifies --no-overlap to show pools which provide products not already covered. (csnyder@redhat.com)
  - Reload ostree_config after updating remotes. (alikins@redhat.com)
  - Fix iniparse tidy import. (alikins@redhat.com)
  - Remove noise debug logging. (alikins@redhat.com)
  - Include 'tls-ca-path' for ostree remote configs. (alikins@redhat.com)
  - Use iniparse.util.tidy if installed. (alikins@redhat.com)
  - Fix odd ostree repo config whitespace issues. (alikins@redhat.com)
  - Always update ostree refspec when adding remotes. (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.7-1
changelog:
  - 1114117: Allow subscriptions to be excluded from rhsm-debug data collection (wpoteat@redhat.com)
  - Remove debugging print line from managerlib (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.8-1
changelog:
  - 1039577: simplify reposgui gpgcheck control (ckozak@redhat.com)
  - 1046132: Makes rhsm-icon slightly less annoying. (csnyder@redhat.com)
  - 1054632: Adds '7.x' to how to launch section of manual. (csnyder@redhat.com)
  - 1065158: Prompt for environment on registration when necessary (ckozak@redhat.com)
  - 1114126: Container mode message is written to stderr (csnyder@redhat.com)
  - 1114132: subman-gui and other tools are disabled in container mode.  (csnyder@redhat.com)
  - 1115499: Allow enable/disable repos in same command. (dgoodwin@redhat.com)
  - 1118012: Fixes several typos in man page. (csnyder@redhat.com)
  - 1121251: rhsm-debug system does not bash-complete for "--no-subscriptions" (wpoteat@redhat.com)
  - 1121272: fix typo that blocked enabling repos via CLI (ckozak@redhat.com)
  - cleanup and fix gui pool reselection on refresh (ckozak@redhat.com)
  - Force subscription-manager yum plugin to respect the managed root (rholy@redhat.com)
  - Force product-id yum plugin to respect the managed root (rholy@redhat.com)
  - Display other overrides in the gui (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.10-1
changelog:
  - Revert "1114132: subman-gui and other tools are disabled in container mode." (jesusr@redhat.com)
  - Revert "include dirent.h" (jesusr@redhat.com)


author: Alex Wood <awood@redhat.com> 1.12.11-1
changelog:
  - 1124726: Man page entry for '--no-subscriptions' option (wpoteat@redhat.com)
  - 1122772: yum repolist now displays warning when appropriate.
    (csnyder@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.12-1
changelog:
  - Extract the latest strings from the code (bkearney@redhat.com)
  - 1126724: Use port instead of 443 for the url help text (bkearney@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.13-1
changelog:
  - 1124685: Handle /status without rules-version (alikins@redhat.com)
  - 1125132: Label does not change to Attaching on Fristboot progress bar (wpoteat@redhat.com)
  - 1128061: Stop logging expected exceptions on unreg (alikins@redhat.com)
  - 1129480: don't query envs when actkey is given (ckozak@redhat.com)
  - 1130637: Correct call to os.path.isfile (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.14-1
changelog:
  - 1132071: Update rhsm-debug to collect product-default directory (wpoteat@redhat.com)
  - 1123029: Use default product certs if present. (alikins@redhat.com)
  - Latest strings from zanata. (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.13.1-1
changelog:
  - Make 'gettext_lint' target grok _(u"foo") strings. (alikins@redhat.com)
  - Add a sat5to6 migration script.


author: Alex Wood <awood@redhat.com> 1.13.2-1
changelog:
  - Added non-overriding default prod dir tests (ckozak@redhat.com)
  - 1135621: fix duplicate product ids from default dir (ckozak@redhat.com)
  - Remove --force option for sat5to6. (awood@redhat.com)
  - Disable RHN yum plugin for unentitled Satellite 5 systems. (awood@redhat.com)
  - Don't ask for org and environment with consumerid. (awood@redhat.com)
  - 1128061: Don't raise logged Disconnected on unreg (alikins@redhat.com)
  - 1128658: do not contact RHN if unregistered (jesusr@redhat.com)
  - 1132919: Repo dialog information is updated without the need for a gui
    restart. (csnyder@csnyder.usersys.redhat.com)


author: Bryan Kearney <bkearney@redhat.com> 1.13.3-1
changelog:
  - Merge pull request #1023 from candlepin/alikins/ppc64le (wpoteat@redhat.com)
  - Merge pull request #1026 from
    candlepin/csnyder/update_repo_dialog_config_msg_1139174 (wpoteat@redhat.com)
  - Message needed a period (wpoteat@redhat.com)
  - Fix certdirectory tests leaking temp directories. (dgoodwin@redhat.com)
  - 1142436 - Final fix pre-QE (ggainey@redhat.com)
  - Repo dialog displays appropriate message when repos are disabled by config.
    (root@csnyder.usersys.redhat.com)
  - 1142436 - unentitle is default, update output, still DRAFT
    (ggainey@redhat.com)
  - 1142436 - Give sat5to6 a man-page - DRAFT (ggainey@redhat.com)
  - Include ppc64le in list of archs to skip dmi (alikins@redhat.com)
  - 1134963: Fix 'release --list' on some systems. (alikins@redhat.com)
  - Add Fedora 21 branch to releaser. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.13.4-1
changelog:
  - Latest strings from zanata. (alikins@redhat.com)
  - 1122001: Reg with --consumerid no longer checks subs (crog@redhat.com)
  - 1119648: Added additional functionality to repo listing. (crog@redhat.com)
  - Move find content method off entitlement source. (dgoodwin@redhat.com)
  - More generic search for content method on entitlment source.
    (dgoodwin@redhat.com)
  - Refactor generic model into it's own namespace. (dgoodwin@redhat.com)
  - Refactor EntCertEntitledContent. (dgoodwin@redhat.com)
  - Add a 'install-pip-requirements' target (alikins@redhat.com)
  - Drop models ContentSet and EntCertEntitledContentSet. (dgoodwin@redhat.com)


author: Alex Wood <awood@redhat.com> 1.13.6-1
changelog:
  - 1093325: Prevent rhsm-debug from throwing tbs (alikins@redhat.com)
  - Send list of compliance reasons on dbus (wpoteat@redhat.com)
  - 1149286: Updated autocompletion for RHN migration script. (crog@redhat.com)
  - Fix file name for rhsm.conf.5 in spec file (alikins@redhat.com)
  - 1120772: Don't traceback on missing /ostree/repo (alikins@redhat.com)
  - 1094747: add appdata metdata file (jesusr@redhat.com)
  - 1122107: Clarify registration --consumerid option in manpage.
    (dgoodwin@redhat.com)
  - 1149636: Specify OS_VERSION to make in spec file. (awood@redhat.com)
  - Added client-side support for --matches on the list command.
    (crog@redhat.com)
  - 1151925: Improved filtered listing output when results are empty.
    (crog@redhat.com)
  - 990183: Add a manpage for rhsm.conf (bkearney@redhat.com)
  - 1122530: Improved grammar and abbreviation usage. (crog@redhat.com)
  - 1120576: Added additional testing of version parsing (crog@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.13.7-1
changelog:
  - Add content/product tag matching for content plugins. (alikins@redhat.com)
  - Remove ostree 'unconfigured' after configuring. (alikins@redhat.com)
  - Symlink to redhat-uep.pem if we seem to be syncing a CDN hostname cert dir.
    (dgoodwin@redhat.com)
  - Add a test for removing 'unconfigured-state' from origin (alikins@redhat.com)
  - Case insensitive content type searching. (dgoodwin@redhat.com)
  - Added container plugin for configuring Docker. (dgoodwin@redhat.com)


author: Unknown name <wpoteat@redhat.com> 1.13.8-1
changelog:
  - Added support for attaching pools from a file/stdin. (crog@redhat.com)
  - Revert "1046132: Makes rhsm-icon slightly less annoying."
    (dgoodwin@redhat.com)
  - Further improved exit code standardization (crog@redhat.com)
  - 1119688: Improved output of the status module (crog@redhat.com)
  - Make repolib tag matching use model.find_content (alikins@redhat.com)
  - Added the --pool-only option to subman's list command. (crog@redhat.com)
  - 1157761: Fixed incorrect option usage in migration tool. (crog@redhat.com)
  - 1157761: revert to "--servicelevel" (alikins@redhat.com)
  - 1119688: Improved error code usage in subman. (crog@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.13.9-1
changelog:
  - Move ostree config to /etc/ostree/remotes.d/redhat.conf (alikins@redhat.com)
  - 1147463: Log py.warnings to shutup gobject warning (alikins@redhat.com)
  - 1159266: rhsm-icon -i fails with "TypeError: 'NoneType' object has no
    attribute '__getitem__'" (wpoteat@redhat.com)
  - 1145833: Do not package sat5to6 with subscription-manager. (awood@redhat.com)
  - 1156627: Fix list consumed matching no service level to "".
    (dgoodwin@redhat.com)
  - 1162331: Changed how debug_commands.py prints errors. (crog@redhat.com)
  - 1160150: Repos --list leads to deletion of certificates imported to a system
    (wpoteat@redhat.com)
  - 1162170: Added error output when --pool-only is used with --installed.
    (crog@redhat.com)
  - 990183: Fix typos in the new man page (bkearney@redhat.com)
  - 1161694: Modify the --pool-id-only to be --pool-only in bash completion and
    man page (bkearney@redhat.com)
  - Use .format strings for --ondate example message (alikins@redhat.com)
  - 1113741: Fix rhsmd traceback on 502 errors. (alikins@redhat.com)
  - 1157387: Fix incorrect no installed products detected status in GUI.
    (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.13.10-1
changelog:
  - 1103824: Add a catchall excepthook for rhsmd (alikins@redhat.com)
  - 1119688: Improved exit code usage (crog@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.13.11-1
changelog:
  - 1132981: Fixed exit code when registering system with no products installed
    (crog@redhat.com)
  - Add 'list --matches' example to man page. (alikins@redhat.com)
  - 1149286: Removed obsolete CLI options from auto-completion (crog@redhat.com)
  - 990183: Spelling errors in man pages (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.13.12-1
changelog:
  - Latest strings from zanata. (alikins@redhat.com)
  - 1122530: Removed/updated more obsoleted documentation, dates and versions
    (crog@redhat.com)
  - 1159348: Improved list error output when using list criteria
    (crog@redhat.com)
  - 1142918: Fixed proxy config button labels (crog@redhat.com)
  - Move repolibs release fetch to the last minute. (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.13.13-1
changelog:
  - 1175284: Show warning for crossdev --noarchive (wpoteat@redhat.com)
  - Add missing import of GMT() (alikins@redhat.com)
  - 1180400: "Status Details" are now populated on CLI (crog@redhat.com)
  - 1180395: Added "Provides Management" to subman list output (crog@redhat.com)
  - Bumping required python-rhsm version (mstead@redhat.com)
  - Don't fail when product cache has an old format. (awood@redhat.com)
  - Use custom JSON encoding function to encode sets. (awood@redhat.com)
  - Make 'attach' auto unless otherwise specified. (alikins@redhat.com)
  - Add product tag reporting to client. (awood@redhat.com)
  - 1175185: Removed extra slash from rhsm-debug output (crog@redhat.com)
  - 1175291: Fixed a bug with attaching pools via empty file (crog@redhat.com)
  - 1070585: Changed button label from "Ok" to "Save" (crog@redhat.com)
  - 1122530: Updated man page examples (crog@redhat.com)
  - 1132981: Reverted removal of warning message (crog@redhat.com)
  - 1058231: Adjusted "last update" label positioning (crog@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.14.1-1
changelog:
  - 976855: populate a "version.py" at build time (alikins@redhat.com)
  - Fixed typo in subscription-manager-gui (crog@redhat.com)
  - 1186386: Provide one and only one Red Hat CA to Docker. (awood@redhat.com)
  - 1114117: Stop collecting subs info by default. (alikins@redhat.com)
  - 1184940: Update container plugin config. (dgoodwin@redhat.com)
  - 1183122: Fix KeyErrors building dbus ent status (alikins@redhat.com)
  - 884285: Needs to maintain loop for dbus calls (wpoteat@redhat.com)


author: Alex Wood <awood@redhat.com> 1.14.2-1
changelog:
  - Move to fileConfig based logging. (alikins@redhat.com)
  - Ignore glib warnings about class properties. (alikins@redhat.com)
  - log level updates, mostly info->debug. (alikins@redhat.com)
  - Condense virt fact logging to one info level entry. (alikins@redhat.com)
  - Log to info when we update facts. (alikins@redhat.com)
  - Change branding 'nothing-happened' logs to debug. (alikins@redhat.com)
  - Condense cert_sorter logged info. (alikins@redhat.com)
  - Change most cache related log msgs to debug level. (alikins@redhat.com)
  - Make D-Bus related log entries debug level. (alikins@redhat.com)
  - Change heal logging to be more concise. (alikins@redhat.com)
  - Add log friendy str version of Identity (alikins@redhat.com)
  - 1133647: Fix messageWindow deprecation warning. (alikins@redhat.com)
  - 1183382: Fix test case to work with dateutil 2. (alikins@redhat.com)
  - Revert "Added check for /etc/oracle-release in hwprobe" (alikins@redhat.com)
  - 1196416: Migration should not need credentials with activation keys
    (awood@redhat.com)
  - 1196385: Add --activation-key option to migration man page.
    (awood@redhat.com)
  - 1196418: Add bash completion for --activation-key in migration.
    (awood@redhat.com)
  - Update spec to point to github / new project website. (dgoodwin@redhat.com)
  - Quiet "Whoever translated calendar*" warnings. (alikins@redhat.com)
  - Stop 'recently-used.xbel' warnings, disable mru (alikins@redhat.com)
  - 1154375: Allow use of activation keys during migration. (awood@redhat.com)
  - 1191237: Fix proxy "test connection" in firstboot. (alikins@redhat.com)
  - 1191237: Make proxy config "save" work in firstboot. (alikins@redhat.com)
  - 1191241: Handle network starting after subman does. (alikins@redhat.com)
  - 1145077, disabled column wrapping during redirects (jmolet@redhat.com)
  - Add syslog logging handler. (alikins@redhat.com)
  - 1191237: Fix problems exitting firstboot on errors (alikins@redhat.com)
  - 1163398, fixing rhsm-icon --help descriptions (jmolet@redhat.com)


author: Alex Wood <awood@redhat.com> 1.14.3-1
changelog:
  - 1170314: Clarify that manage_repos 0 will delete redhat.repo.
    (dgoodwin@redhat.com)
  - 1207958: Fix traceback when contract # is None (alikins@redhat.com)
  - 1117525,1189950,1188961 latest strings from zanata (alikins@redhat.com)
  - 1200972: Fixed grammar issue with error message in the attach command
    (crog@redhat.com)
  - Bumping required python-rhsm version (mstead@redhat.com)
  - 1204012: Added missing documentation for the --release option
    (crog@redhat.com)
  - 1209519: Removed erroneous information in help message for subman
    (crog@redhat.com)
  - 1198369: refresh_compliance_status now has a default value for state
    (crog@redhat.com)
  - 1180273: Allow migration without requiring RHN credentials (awood@redhat.com)
  - 1201727: Handle reasons with expired ent id (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.4-1
changelog:
  - 1141257: Fix wrapping of subscription name in contract dialog
    (mstead@redhat.com)
  - 1147404: Fixed firstboot title length issues (mstead@redhat.com)
  - 1207306: Revert DBus compliance status code. (dgoodwin@redhat.com)
  - 1195501: Properly refresh repo file on override deletion (mstead@redhat.com)
  - Add Fedora 22 to Fedora releaser branches. (awood@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.6-1
changelog:
  - 1149095: Fix error when yum updates subman modules (alikins@redhat.com)
  - 1159163: Fix prod id del because of --disablerepo (alikins@redhat.com)
  - 1180273: Migrate from RHN Classic without credentials (awood@redhat.com)
  - 1213418: Message agreement between GUI and CLI in disconnected system
    (wpoteat@redhat.com)
  - 1199597: Fix UnicodeError from repolib's report (alikins@redhat.com)
  - 1209519: Removed excerpt from man page listing --auto as a requirement
    (crog@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.7-1
changelog:
  - 1220287: Proxy Save accel fix with latest strings. (alikins@redhat.com)
  - 1212515: Print error message for missing systemid file. (awood@redhat.com)
  - Added missing option to the migration manual page (crog@redhat.com)
  - Specified error codes on system_exit in rhn-migrate-classic-to-rhsm
    (crog@redhat.com)
  - Updated the manual pages for the attach command (crog@redhat.com)
  - Remove locale based DatePicker tests. (alikins@redhat.com)
  - Make rhsm-debug test cases clean up better. (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.8-1
changelog:
  - 1223860: Revert to default value on remove command (wpoteat@redhat.com)
  - translation sync from zanata (alikins@redhat.com)
  - 1223852: fix 'Deletedfd' string in repo report (alikins@redhat.com)
  - Remove gnome-python2-canvas,gnome-python2 deps (alikins@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.14.9-1
changelog:
  - 1223038: Fix API used by openshift clients. (alikins@redhat.com)
  - 1195824: Latest strings from zanata (alikins@redhat.com)


author: Alex Wood <awood@redhat.com> 1.15.1-1
changelog:
  - Don't try to set file attrs on symlinks in spec (alikins@redhat.com)
  - 1228807: Make disabling proxy via gui apply (alikins@redhat.com)
  - Use find_lang --with-gnome for the gnome help (alikins@redhat.com)
  - Cast return daemon() to void to quiet warnings. (alikins@redhat.com)
  - Make the 'compile-po' step in the build quiet. (alikins@redhat.com)
  - Make desktop-file-validate warnings. (alikins@redhat.com)
  - rpm spec file reorg (alikins@redhat.com)
  - 1224806: Prevent yum blocking on rhsm locks (alikins@redhat.com)
  - 1092564: Add LDFLAGS to makefile so RPM can modify them. (awood@redhat.com)
  - Update registergui.py (wpoteat@redhat.com)
  - Bump version to 1.15 (wpoteat@redhat.com)
  - Remove spurious debug logging about content labels (alikins@redhat.com)
  - Revert "1189953: Replaced usage of "startup" with "start-up""
    (crog@redhat.com)
  - Revert "1149098: Removed uses of the non-word "unregister"" (crog@redhat.com)
  - Revert "1189937: Added hypens to instances of the non-word "wildcard""
    (crog@redhat.com)
  - Revert "1200507: Hyphenated uses of the non-word "plugin."" (crog@redhat.com)
  - 1225435: Use LC_ALL instead of LANG for lscpu. (alikins@redhat.com)
  - Remove mutable default args in stubs (alikins@redhat.com)
  - Add notes about how register/firstboot interact. (alikins@redhat.com)
  - 1189953: Replaced usage of "startup" with "start-up" (crog@redhat.com)
  - 1194453: Fixed typos and grammar issues in the rhsmcertd man page
    (crog@redhat.com)
  - 1192646: Fixed typos and grammar issues in the RHSM conf man page
    (crog@redhat.com)
  - 1192574: Fixed typos and grammar issues in subman GUI man page
    (crog@redhat.com)
  - 1192120: Fixed typos and grammar issues in subman man page (crog@redhat.com)
  - 1192094: Fixed erroneous usage of "servicelevel" for the subman command
    (crog@redhat.com)
  - 1194468: Fixed typos and grammar in rhsm-debug man page (crog@redhat.com)
  - 1193991: Fixed typos and header for RCT man page. (crog@redhat.com)
  - 1200507: Hyphenated uses of the non-word "plugin." (crog@redhat.com)
  - 1189946: Removed extraneous hyphens from instances of "pre-configure"
    (crog@redhat.com)
  - 1189937: Added hypens to instances of the non-word "wildcard"
    (crog@redhat.com)
  - 1149098: Removed uses of the non-word "unregister" (crog@redhat.com)
  - 1189880: Removed the non-word "unentitle" from error messages
    (crog@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.2-1
changelog:
  - Added release target for RHEL 7.2 (crog@redhat.com)
  - Move po compile/install for faster 'install-files' (alikins@redhat.com)
  - Stop using deprecated Tito settings. (awood@redhat.com)


author: Adrian Likins <alikins@redhat.com> 1.15.3-1
changelog:
  - 1232508: file_monitor is no longer a gobject (alikins@redhat.com)
  - Add 'subscription-manager-initial-setup-addon' sub package (alikins@redhat.com)
  - Make 'subscription-manager-firstboot' optional (alikins@redhat.com)
  - Make 'firstboot' and 'initial-setup' RHEL version dependent (alikins@redhat.com)
  - Add initial-setup modules. (alikins@redhat.com)
  - Port gui from gtk2 to gtk3 via 'ga' (alikins@redhat.com)
  - Make gui support gtk2 and gtk3 (alikins@redhat.com)
  - Add module 'ga' ('gtk any') as Gtk ver abstraction (alikins@redhat.com)
  - Add search-disabled-repos plugin. (vmukhame@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.7-1
changelog:
  - Merge pull request #1219 from candlepin/alikins/1241247_ga_ImportError
    (ceiu@cericlabs.com)
  - Merge pull request #1211 from candlepin/awood/1232232-enable-repos
    (alikins@redhat.com)
  - 1241247: Fix ga ImportError in rhsmcertd (alikins@redhat.com)
  - Merge pull request #1214 from
    candlepin/alikins/prevent_nose_loading_ga_impls_directly (awood@redhat.com)
  - Add comment about the request_injection decorator. (awood@redhat.com)
  - Prevent nose looking for tests in sub_manager/ (alikins@redhat.com)
  - Remove assertIn as that test is not in Python 2.6. (awood@redhat.com)
  - Move API dependency injection out of module scope. (awood@redhat.com)
  - 1232232: Add supported API to enable content repositories. (awood@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.8-1
changelog:
  - Fedora 20 has been retired. (awood@redhat.com)
  - 1136163: Ignore pythonpath to avoid selinux AVCs (alikins@redhat.com)
  - 1234413: lower log level of rhsmd RHN messages (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-1
changelog:
  - 1246146: Changed initial-setup-addon package requirement from subman to
    subman-gui (crog@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-2
changelog:
  - Updated initial-setup-addon package requirement to initial-setup-gui
    (crog@redhat.com)
  - 985157: Display the URL that is the registration target (wpoteat@redhat.com)
  - Cast product.id to int for sort in cat-cert (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-3
changelog:
  - 1248746: Fix layout of contract dialog (GTK3) (mstead@redhat.com)
  - 1248821: Add Gtk.Window to ga_gtk2.Gtk (alikins@redhat.com)
  - 1248821: All subs date picker was failing. (alikins@redhat.com)
  - 1249053: Fixed layout/blank button issues on owner selection dialog
    (mstead@redhat.com)
  - 1248729: All subs filter dialog was not focused. (alikins@redhat.com)
  - 1248664: Fix GtkAdjustment related warnings (alikins@redhat.com)
  - 1248546: Slightly better looking done screen. (alikins@redhat.com)
  - 1245557: Fix release and service level preferences (alikins@redhat.com)
  - Add GTK_COMPAT_VERSION to ga_gtk2/gtk_compat (alikins@redhat.com)
  - 1248773: Fixed proxy dialog layout (GTK3) (mstead@redhat.com)
  - 1248771: Fixing activation key dialog layout (GTK3) (mstead@redhat.com)
  - 1247723: Fixed layout issues in Facts dialog (GTK3) (mstead@redhat.com)
  - 1245283: Properly initialize AutobindWizard when auto-attach is clicked
    (mstead@redhat.com)
  - 1248546: Refine the aesthics of register dialog. (alikins@redhat.com)
  - 1243260: Make proxy config dialog work. (alikins@redhat.com)
  - 1161157,1155954: Improve performance of Repository Dialog (mstead@redhat.com)
  - 1165771: make content plugins require subman (alikins@redhat.com)
  - Move gtk_compat features to sub ga module. (alikins@redhat.com)
  - Use idle_add from ga_Object for 6.x (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-4
changelog:
  - Fix spec file build errors (alikins@redhat.com)
  - Require initial-setup >= 0.3.9.24, no fb on el7 (alikins@redhat.com)
  - Remove use of Widget.is_toplevel() (alikins@redhat.com)
  - Only build initial-setup rpm on rhel > 7.1 (alikins@redhat.com)
  - 1243704: Goto error screen on 'cancel' (alikins@redhat.com)
  - Add new api package to RPM. (awood@redhat.com)
  - Turn off ga loading debug messages. (alikins@redhat.com)
  - Specify a thread name for any threads we start. (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-5
changelog:
  - 1141128: Imported certificate in detatched scenario not getting deleted
    (wpoteat@redhat.com)
  - 1221273: Auto-attach failure should not short-circuit other parts of
    registration (wpoteat@redhat.com)
  - 1185958: Make ostree plugin depend on ostree. (alikins@redhat.com)
  - 1240553: Fix detection of cert dir changes (alikins@redhat.com)
  - Fixing All Subscriptions layout issues (mstead@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-6
changelog:
  - 1141128: Subscriptions need refresh after imported cert removed
    (wpoteat@redhat.com)
  - 1185958: Remove ostree plugins req on ostree (alikins@redhat.com)
  - 1150150: Ostree update report should log updates in proper section
    (wpoteat@redhat.com)
  - 1251610: Port and prefix were reversed in connection URL statement
    (wpoteat@redhat.com)
  - 1141128: Clean up and correct for style (wpoteat@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-7
changelog:
  - search-disabled-repos: ignore failed temporarily enabled repos
    (vmukhame@redhat.com)
  - search-disabled-repos: replace CLI with API calls for enabling repos
    permanently (vmukhame@redhat.com)
  - 1253275: Fix initial-setup ks mode (alikins@redhat.com)
  - 1246429: Stop spinbutton from blocking quantity (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-8
changelog:
  - 884288: Better registergui for initial-setup (alikins@redhat.com)
  - Fix 'make gladelint' errors in repositories.glade (alikins@redhat.com)
  - 1254349: Move registering to message (vrjain@redhat.com)
  - 1257460: Set text domain on Gtk.Builder widgets (alikins@redhat.com)
  - 1207247: Insecure parameter needs more explanation (wpoteat@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-9
changelog:
  - 1261572: Re-initialize() RegisterWidget on RegDialog show
    (alikins@redhat.com)
  - 1254550: Fix activation key usage in gui. (alikins@redhat.com)
  - 1251853: Manage repos config entry needs to allow blank value
    (wpoteat@redhat.com)
  - Use Notebook 'page' prop notify signal for tests (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-10
changelog:
  - 1248833: Ensure the displayMessage is displayed regardless of success or
    failure (csnyder@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-12
changelog:
  - 1261006: Handle multiple nav button clicks (alikins@redhat.com)
  - 1242998, 1254550: Fix "already reg'ed" in initial-setup (alikins@redhat.com)
  - 1249012: fix start-end date original color FIXME (vrjain@redhat.com)
  - 1249012: Start-End Date of expired subscription is now in red status
    (vrjain@redhat.com)
  - 884288: Make register widgets handle resizing. (alikins@redhat.com)
  - 1265347, 1265371: Updated translations with whitespace corrections
    (crog@redhat.com)
  - 1257943:Adding a warning to repo-override command when manage_repos = 0
    (fnguyen@redhat.com)
  - Set help file name for the Subscription Manager spoke
    (martin.kolman@gmail.com)
  - 1246680: Hide rhsm-debug --subscriptions options (alikins@redhat.com)
  - 1246680: Remove subscriptions from rhsm-debug (wpoteat@redhat.com)
  - 1185958: Quieter ostree plugin sans ostree (alikins@redhat.com)
  - 1168268: Add rhsm.conf proxy info to ostree repo (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-13
changelog:
  - 1266480: Refresh TreeView selection after subscriptions are removed.
    (awood@redhat.com)
  - 1267034: Handle 401 with cert based auth (alikins@redhat.com)
  - Allow 'back' to go back multiple times. (alikins@redhat.com)
  - 1262075,1267179,1243707: Fix back/cancel nav (alikins@redhat.com)
  - 1267287: Fix allsubs tab ui regression (alikins@redhat.com)
  - 1266994: Use our icon for initial-setup spoke icon (alikins@redhat.com)
  - 1265347, 1265371: More translations whitespace corrections (crog@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-14
changelog:
  - 1268102: Stop main window from opening duplicate dialogs. (awood@redhat.com)
  - 1268088: Changes the rhsm spoke display message to end with "registered"
    (csnyder@redhat.com)
  - 1268095: Replace SLA radio buttons w/ combobox (alikins@redhat.com)
  - 1268028: Fix skipped auto attach in registergui (alikins@redhat.com)
  - 1268060: Add 'cancel' back to s-m-gui register. (alikins@redhat.com)


author: Chris Rog <crog@redhat.com> 1.15.9-15
changelog:
  - 1254460: Fixed the credits button in the about dialog in subman GUI
    (crog@redhat.com)
  - 1251853: Fix errors if "manage_repos = " in cfg (alikins@redhat.com)
  - 1270204: Crash report no longer sent when widget is none (csnyder@redhat.com)


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


