freeipa-selinux-4.12.2-10.fc42 >t 6 6_@DHX\ 3!XPȬI^DgJ ȬI^D`)H"s[y**M dgn6E4lu@&_p縼mPτwmmK W420'>FnlsLy^ lѺnY}*O#6 zH+ *{gT[(ɂG^5 | alj[,<5AP>/4G)w%$n8xWV@U ܺ)wiKY~br]8jCD|eT+,hMFޚQ)f\x[{s$ x;)E<g]N>qqMJ[a|:ʢG*t"("Hp^gJJex#Y2쨳t/yYq/!+WjjwOvn J&ӭ#(5cU@7Cg=:rmr<6E ) &bf49beb5f4701f8a7408a8e756c3a3ab02d9da1e17a0a15360e7023658bb8bfd0ef530669b786281fb9dfbe608242755347fd79e03020462f02aa400463044022006bcf5887211566a6032480645cc093b4f1ea30752b674eec7913257b08884bf02206f2a6d4b3dbd111dd5bb1acba311081a87c0524632d608718f01afacbab2ba3aOi#J7풗q{C0D>`C#=?#-d ! 8dh     > @HR\|( 8 $!9 !:!=$>,@4G<HDILXPYT\d]l^{bd e f l t u v  "k"t"x""""Cfreeipa-selinux4.12.210.fc42FreeIPA SELinux policyCustom SELinux policy module for FreeIPAgbuildhw-x86-02.iad2.fedoraproject.orgCFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttp://www.freeipa.org/linuxnoarch if selinuxenabled; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi fisemodule -d ipa_custodia &> /dev/null || true; if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/ipa.pp.bz2 || : selinuxenabled && load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : semodule -n -X 200 -s ${_policytype} -r ipa &> /dev/null || : selinuxenabled && load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fi fi semodule -e ipa_custodia &> /dev/null || true; fiCgAgAd25c7b8e2ef6cafaab10c804c50a03ab3cdbf85ccd75abe00b4c169b661a8d63@rootrootrootrootfreeipa-4.12.2-10.fc42.src.rpmfreeipa-selinux      /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-141.3341.334.20.0g@gu@g@gPD@g? gff(@f3f3f@fffffWee@eeed@eeKx@e6`@e@e;eReRdQd@d[@d@dZ@dbd%yAlexander Bokovoy - 4.12.2-10Alexander Bokovoy - 4.12.2-9Alexander Bokovoy - 4.12.2-8Alexander Bokovoy - 4.12.2-7Alexander Bokovoy - 4.12.2-6Richard W.M. Jones - 4.12.2-5Alexander Bokovoy - 4.12.2-4Alexander Bokovoy - 4.12.2-1Alexander Bokovoy - 4.12.1-3Alexander Bokovoy - 4.12.1-2Fedora Release Engineering - 4.12.1-1.1Julien Rische - 4.12.1-1Python Maint - 4.12.0-1.1Alexander Bokovoy - 4.12.0-1Rob Crittenden - 4.11.1-4Alexander Bokovoy - 4.11.1-3Fedora Release Engineering - 4.11.1-2Fedora Release Engineering - 4.11.1-1.2Fedora Release Engineering - 4.11.1-1.1Alexander Bokovoy - 4.11.1-1Alexander Bokovoy - 4.11.0-7Alexander Bokovoy - 4.11.0-6Alexander Bokovoy - 4.11.0-5Alexander Bokovoy - 4.11.0-4.beta1Alexander Bokovoy - 4.11.0-3.beta1Alexander Bokovoy - 4.11.0-2.beta1Alexander Bokovoy - 4.11.0-1.beta1Fedora Release Engineering - 4.10.2-1.3Miro Hrončok - 4.10.2-1.2Python Maint - 4.10.2-1.1Alexander Bokovoy - 4.10.2-1Alexander Bokovoy - 4.10.1-5Jerry James - 4.10.1-4- Rebuild for Samba 4.22.0 RC1- Do not pass OAuth2 client secret for public clients (freeipa#9734) - Fix upgrade for two-way trust to Active Directory (freeipa#9471 post-fix) - Allow extending certmonger request timeouts to accomodate for slow HSMs (freeipa#9725)- CVE-2024-11029 - Release notes: https://www.freeipa.org/release-notes/4-12-3.html- Apply upstream fixes since 4.12.2 - Fix OTP LDAP bind regression - Resolves: rhbz#2321307 - add ipa-idrange-fix tool - Support PyCA 44.0.0- Adjust to Samba 4.21- Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)- Bump release to handle F41 updates which went out of sync due to rebuilds - Fix CA uninstall in case ACME instance is available - Bump SSSD requirement to 2.9.5 to ensure sssd-idp can handle Entra ID - Make sure to use correct nodejs version for build- Upstream release 4.12.2 - Rebuild against Samba 4.21.0-RC3- Few more fixes, including tests and python-cryptography 43.0 compatibility- Post-4.12.1 fixes: - ipa-migrate tool fixes - HSM support fixes including SELinux policy changes - ipa-backup/ipa-restore uniqueness fix - improvements in replication topology access controls - allow PKINIT cert renewal on hidden replica - cleanup more files during uninstall - support for python-cryptography 43.0+ - Remove support for NIS server emulation. Requires slapi-nis 0.70.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild- Upstream release 4.12.1 - Release notes: https://www.freeipa.org/release-notes/4-12-1.html - Security release: CVE-2024-2698 CVE-2024-3183- Rebuilt for Python 3.13- Upstream release 4.12 - Release notes: https://www.freeipa.org/release-notes/4-12-0.html- Security release: CVE-2024-1481 - Resolves: rhbz#2265129- Support 389-ds with lmdb backend- Rebuild against Samba 4.20rc1 - Fix memory leak in Kerberos KDC driver - Fix possible crash in IPA command line tool when accessing Kerberos credentials - Compatibility fix for Python Cryptography 42.0.0 - NetBIOS defaults fix - Fix default host keytab retrieval permissions- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild- Security release: CVE-2023-5455 - Resolves: rhbz#2257646- ipalib: fix the IPACertificate validity dates (python 3.12 compatibility) - Handle PKI revocation response differences in JSON API - Allow removal of minimal length from a custom password policy- Adopt trust to AD code to Samba changes in case SIDs are malformed- FreeIPA 4.11.0 release - Simplify Fedora spec file - Release notes: https://www.freeipa.org/release-notes/4-11-0.html- Depend on selinux-policy-38.28-1.fc39 - Add SELinux policy for passkey_child to be used without ipa-otpd - Related: rhbz#2238474- Restore properly SELinux context during IPA client uninstallation - Related: rhbz#2238474- Set 'sssd_use_usb' SELinux boolean when enrolling IPA client - Resolves: rhbz#2238474- FreeIPA 4.11.0 beta 1 - Release notes: https://www.freeipa.org/release-notes/4-11-0-beta.html- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild- Use ssl.match_hostname from urllib3 as it was removed from Python 3.12- Rebuilt for Python 3.12- Upstream release FreeIPA 4.10.2 - Synchronize patches with CentOS 9 Stream- Support python-cryptography 40.0- Change fontawesome-fonts R to match fontawesome 4.x/bin/sh/bin/sh/bin/sh4.12.2-10.fc42ipa.pp.bz2ipa/usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19i686-redhat-linux-gnu if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi # with_selinux/bin/shhttps://bugz.fedoraproject.org/freeipautf-87494a07987bfc7555095235eec7a7e0d3dbbc5b3730fa088d9698911ae0a83cd5dc686b6ff2e2065d81fe9345d7b3643e4013c40fd1e9d933fcf491683734535?(/hmL 071081a40167a941843da031./usr/share/selinux/packages/targeted/ipa.pp.bz2BZh91AY&SYB$_lGC {ӼnYҨ30P58 Qsͮ໸g0=e{ǽ > )Tf}rPAO 4ܠc(9(zQ$W#J`D-ѫU]pݜqjmR2lZ\tRiH!)zɠ'~yM4јz1dizI1Aљ$4f d#C $)@ @  d4h! P Q@@ =R*OCD4=!hM4h0@ѣ@ &M1 LFF hLiIjhOO(2d6ѐHi4a4 Piff#FDIzS~P=M4=@6>Se5{܅4$m a26\DB_gh5bgi3,Kev8v Xc6 ͤN$N0DDJ0"`"R%"na8¬[FX{)^ UxHSX\̓dm͔%eQkRn,2a i lL`E`=mZZ$JD%"P78sWm*Do e6nME9aL޴bJ$oEʑ62\mpaCkmc;e;'%"`'P Iz};3F̡$5ز";җ`GTfXVׇN(k|<5"U}}5yu<\#TEU VdIBpCia՛Oͣ'eɆ`MEE O"H5>XCʡRRV6ifC7|wOHg5ͷ=z~H"bt>]auTFgpEEDGC­UUQQ>*ye}gBO]٧ 1Q*1j_}uLK$߽5݉uUjޙ=e?!HB5z:y|Ͼ |o{?N8)~%soau?9+*Mq"""#"Jͥ4|qw?S9i7Gvao< Erؿc%['pq,nͨnݾc1UU`j&9_Frs)N|gk~nvi΃61d$,+Śl""""EYDcj-Dmы$cIZ(|޷XؽZ*Mfih[:j'>R- DrTE3AƔ `o4^{ǖ͆:yc67YH98ǵLa0`FwXG~\G2 \woǐg7.s~lx>khBaQI j a{>O3<` S%uTo}SU^ :ȢA "n]-bEd@mD .]8:*p!>_jkns|a 3z`֒*u|E (~|DC-q̗:IΤ9i=F0e㵌xWDаI_s5:o\FVքm@6!@I7y ' ݍqBH|IPΏضgw3F`t=Y6! g :> hQyћ7uD-zlw@v;[dR Oz/n:Y3[tD˕$Pe 6̗:HD  5r" "{ou0ÞƊd \ΰte}͟g]֊ը e,qvnվ]%4ײ:WdG _ Yl\W]xYØS+:<`ADl痸y$ $eJ+]59j{#y׃ R+;ߪ^ RBK 64VZ[g. *(Hzc% 6BKnFlq> !%xKz"=g[[Q׆dbrQZVzoMw 03_6~?޳:{qΓKG{N hp ¢i@#JUVBDx}zAO;8D\z֟ e׻3v{ljxnffC͟:7a*pz:v۩~̟=w?Ѯi9A!73Ϛxח[kE<,cOp;|[m !{mMQR*:3ɛR+󡴚-4]*-oXzT>]kmZbo W8{D㕊Z=Ϛ+ b)Of)b^ݫ*&Ϳٸ*< P$JD)$.\"E=xtS܊{qKyE.))(S)E65”SHP-'$@S$CuݭxٷIrKmgSh)))1sJl$WrwT irNsfߟq;GWZ+u9MٞՈ EhZ-Ekuwwq|-g1|9ۮ!%{uP J79s`/~;yuLgNmd|i~==`3&pӝBЀ\׽ .>\<֏/bL1Y{8Ѣ r~=-z?6o>ܧ9KVxy׳ƴ8XVnjf@@T{@ٹ2[cFPtގ%c7ϧ'/t^>:kʧ:6^5q}[u<駜V޷/Flٛw "~Wj# D͈^4_g9ÏӉmysB"zzt~XvzNDWIͿɤV"r*٧-9Ӊrgysm0譼:|CgdzWOuLfUz4X9Tx]+Θ͎q=A[7igz}3M)žfs;gllwb=/zY$It$)H$R맅=򙦴S1OM=Xɂ ,@b T5K#lWwJI)%:$xuclԥK%j󦺦hX+Hc6 "L1hwWV;kԩRҢ)F4ZM2RҐL^4XH"$CiT ڪS@hPE$$(KdS;@50\*6BU1˫6|Cvv???m@5^!0" >;bbb2+܌$,|nF*2:GE` ))T'))+uqsyl6eӉP.3󳳳ڊ .PQiwFӪ*ME%3zM0؀uTTTUV"ek+fڲSVs9af^tL%%bwxRe%!62%k)1>ܼ9\YwD喣銕*TS<6F!hmFaU"̃$LF 0Mh4FĒ66G U$QJT¤j%e-**؛MzT47ϺI2ޖOsTʙ ͞^4I4a1WJ&KI*Bm]<$Z׫%R@E}o _a| coxeq˶㚴›b}GbM?/zSԑ< DNaqZ})-njI$cƺn#Z=G!r0# tEP~ oٶϷSunn,#r4"vm/vώHة( 7iݜߪ׾CT ]}~'+뾙:S@bnn~` :r۳K+e=Q<5:ݹ*i^_sSrQwKnlX6iyj-*o>_#z޴6y37|L< 5q1VKIF]dLrne~ѨF|vŨQQޙ٪2>}r9;YqŌ#u~rcɵQnȹ_&+Q<\lCnw7W*&9bYn7Hjyf/2Ƭol=5O}17l1퇸[.Y*.k {͕Ao~]\ZUfBss ])Z uUbr㊷ }H:r\nj_Ǹ&) Q-Čv8nE̋2aM.%ea圛{ّNnUuȬ9<ƷJ8ufVLn*͞$ۖ&i1"=_Z&hD"ZHY t"v[l"G 1|O 8D [;{zX2,rJkDG|o/ "u>6<\4 Z,Ef['eZ"2W@{\.f(,"фIZHWDjD[|i4~kXX6 4$e@C+IṚ$FkojȪhazTS:`4"?\BB"}a e3;14*o̊( H"I $r!M8qT2<46/E1$ A䊥R*BB$$-# E-E|C x"8C4])ZjfO:}&K ?-:EoI !"${Ď%7lWec^'_O[buù3M ʎ͒'JD~Mx$U_Wgio]G{+FZm%-y?*o~í]|vf0fI35kjʻaVotƼ3K/M˿G!q˫:pjL/7_V/S uv^NCbW55_imԽu|1US;yex9%)}nRltwhi>bIOYW_kpf5LU}+jB@qT](5ރ*CH$j>R!vooDͧU%~Jǰ^ѝGitXb^Xq|>&ߓrlv'OWYVltm }[:k%*Xٛ.^sqiՃ6?dp_v;-n 9B;Ӹh5|ՄS;&$p0 !72$T1!>(F/ξw?ςmsʾ.[Vӻ.bfmݲw%'`69u[=FG盌*גh"T1OuF9tI)D˚U[֣1~3z4LQ&ML"581boPK&l0m&L1k314OadRmGj:tJ97ɝ~[w{=P-#'1wIo Y5rBSyq`s7]|g6qX2׏6T8v.;K]=WAq$g>Z]מ.{5=ӽ[o;jzu%޶wF*zө.5ޝm{FO{ޝFFP]NHbFm"5m.{y7{U}NW'|).䝧Cs<95}+ d>2ۚq.+08᳗R81o<ހu{{{GNGlt;5Հj, hlG"7W{ލ6Q``C`j5ma!b@Dj*)j53{^#?=o5bxrmQʪ`;MsSRLn7%yx|dלy./Öp#hXkf./^-q-qDTNԕb;!FM ֣cm8a6$4FAQiF_m `f ZCcL2g0=kKz߷w~/PK|̞.ZF'w9f#2)Ϫ;䲁WH(8g_rjFn5Xw\UN UR{7U_+D|HIM-bԢ%i RVe2hDVe mojk^AU=(>EsTܠPl{$ƣP$SQP}X [)!ɇ.|])pe8P!Y@x@*DmF$i7L444TӢ3@.7QS4K Z^. r%;K`02X\PXj- %E,dnTєFXXTP # `\A##PcQ[ S Q`4P]U҈1dH$Tt\RLH˻n.eWjӅA%K` ,W F)MSR!5O!QRK LO 6R. q20MQ!I ]*HN6M)"cMWFlI%^Q.7lcj4W@ (QQABB$$uw]iGKv6$uչ""JVR l`qF9$!HBBuݺNumFmo&b$BFEDp FaJm#"jD^ғ#C$LMP0*jDMMLĐ"dD(@dH&DL)"4 D۫[Z5Tm;ij%EI]V۫+J,Ԗ4U֛k]JdB T\A4Yb! Eb GjC cXU,e) 3wM}ڿ8`VaSZW?eYdk)ŅL-Jmep+Ĉ[Cj H@db$IG1iE_mbIEHFh~5ٓgҾXɂgAwd5l}F|->jkm,$3sᱽ̬~c wjd_VoK&tMqZUCcϘk("c)6U]Gyfk;9lq7[fzocl|XTFև=2c8 8 HDJ)(|,IE>bmE l}^2٩yeͱÈ0<3i9ɝvNᩞ/vcuw»|jN\{=M+<>zNu7ffzX%xUW(5k>njl4zua63tbqw^T{&)y[&W;3/Q¡6|ZXp=Y Uha|ILg//ufMjfnsj}W=.LՑ-G0FWY5\wIs iZM{#'fBHSHmԛӂӤqsèaFsoiL[Ftv%K75 -LRYKmHKf:Ѕ;эn)`m:ٻ\':o4^z$Uj=꬧{0xershM9h1Jf4]YN2I1EK,ϧIus[{}ZNT6Q'\*snqȃdӨTvrm:mcPs{8v&y8v›6ɕas!. L,IW')Kqa6d;]&uQZnu&S b]4BP,]M-^8τ4ѐߘgx2zz{zz|p988pm72Y#| 9矇bc+:¨VSH)0b :ӫRu7\GtCT3Qm f9u*0B {ɴ Pѓwwt E*-%-&,*^O$8<&q$9StV/ 7Er&`j[v@ <#9;0hxmI-Q1ufRRx(jwUҳi; m ]x"Efj tPpa @VlZQSj5Zp C*=8,I/=P lYpۻ81@ކJQ猕.N\ôWZFt)vnI$I 6$nOuDu$B$7$#rI#m& Ϻ NJ$_ m ٻA9U^RB#=2mjaAx{ýqvYcj' :r3bˬ,g|qU,7Dƈv pvGvI5쓆aG\d6z/Y]Pu8(\ƃ8V\xw!͢&-Yi(/"vVZi)/)6 nΑnlr؛ Ø9u@6;9ѢI3~tk+g+dUUN%H!e),K5G=-8n#pО.D#e̠+88;Aǘ~'V] JsHBIU`Tkt"6D MX(x$d7Jgt4aCcQcEFą'I:2:4iUV""",nXPѬ'" `Axcꓪ-د7׽>^U%Hj Qܥ{aX@:ЙĢ*bOXL \K[4FA]2 J L$`kLbprI8*z95<z:`R%e3pMwԜ"BZT{ V=t|k7U7B@CW: Uj<%#@ pE ԔQw g0}UK6 O$;'<+;}J VсL{5d\yj+%oZ*&-d&Us u2IхTcp>CPq(Z]Gd8Bb" sWw Oortl7z0u5ٕmVݶmx_˛~ % $1mKwW3nwGs{ѷl;uU.zQs :g֑ٴ֪[:jy!% &΂lN\BMZTu8AYI`3HT*BQje0=V=\JAhiyl"0ӂ{ mfsbcZs&D0@q/ 칡(HF0%;͕ ʓa03F+gh4;C eʚIpuLwL8!G^.ɼuyNo2{-,џv@6$:dQcFF0Htj`eJ-} N;l6cOjipu`EӯL-q͙0cCDiϳw9W'V&[caδmv[v=#&ئgx+m6ofʹt+}LkM$\hIۨse:C74̕yK{I ˞Xʼn'sJAl\.(ZJG@:kd&ت]06$mU!E`FAiϾ[mAOַ^,edNkrDm&rlm`3QW #1{/hOJ39fIreTEg:/xY\S\NTaFՑ׎B}$@Ɵ'kVJ:|zrarg$zCRt̆~AXKfMBrdqk!3OBK.ZP=׀O45t3`|ae