freeipa-selinux-luna-4.12.2-10.fc42 >t 6 6_DHL\` 3!XPȬI^DgJ ȬI^DHbc?E`hОxi&+y"* .w(&cNl9 f=!gcz  jʿ#.S,UއX+6kwB䄝1\_*lO:J=K;iq&~IA%gGKKh-a #>עA@xnڮ?Z#Oj^^ͻ)VQYwbʧSHAxb4 1 &P]rhumoMqgʼOy=+n7*w<-҅s?edA "|"8uF߱kx,Nk$wϣK_;``??d & R #   $ ( 0 r t|   (<8D!9!:!>D@LGTH\IdXhYl\|]^bdefltuv TXCfreeipa-selinux-luna4.12.210.fc42FreeIPA SELinux policy for Thales Luna HSMsCustom SELinux policy module for Thales Luna HSMsgbuildhw-x86-02.iad2.fedoraproject.org(Fedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttp://www.freeipa.org/linuxnoarch if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/ipa-luna.pp.bz2 || : selinuxenabled && load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : semodule -n -X 200 -s ${_policytype} -r ipa-luna &> /dev/null || : selinuxenabled && load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fi fi fi(gAgA5838662104c0475729ffe512fd1b2fa29acca0fc5a1ce78e810da6d48b5e5744@rootrootrootrootfreeipa-4.12.2-10.fc42.src.rpmfreeipa-selinux-luna     /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-141.3341.334.20.0g@gu@g@gPD@g? gff(@f3f3f@fffffWee@eeed@eeKx@e6`@e@e;eReRdQd@d[@d@dZ@dbd%yAlexander Bokovoy - 4.12.2-10Alexander Bokovoy - 4.12.2-9Alexander Bokovoy - 4.12.2-8Alexander Bokovoy - 4.12.2-7Alexander Bokovoy - 4.12.2-6Richard W.M. Jones - 4.12.2-5Alexander Bokovoy - 4.12.2-4Alexander Bokovoy - 4.12.2-1Alexander Bokovoy - 4.12.1-3Alexander Bokovoy - 4.12.1-2Fedora Release Engineering - 4.12.1-1.1Julien Rische - 4.12.1-1Python Maint - 4.12.0-1.1Alexander Bokovoy - 4.12.0-1Rob Crittenden - 4.11.1-4Alexander Bokovoy - 4.11.1-3Fedora Release Engineering - 4.11.1-2Fedora Release Engineering - 4.11.1-1.2Fedora Release Engineering - 4.11.1-1.1Alexander Bokovoy - 4.11.1-1Alexander Bokovoy - 4.11.0-7Alexander Bokovoy - 4.11.0-6Alexander Bokovoy - 4.11.0-5Alexander Bokovoy - 4.11.0-4.beta1Alexander Bokovoy - 4.11.0-3.beta1Alexander Bokovoy - 4.11.0-2.beta1Alexander Bokovoy - 4.11.0-1.beta1Fedora Release Engineering - 4.10.2-1.3Miro Hrončok - 4.10.2-1.2Python Maint - 4.10.2-1.1Alexander Bokovoy - 4.10.2-1Alexander Bokovoy - 4.10.1-5Jerry James - 4.10.1-4- Rebuild for Samba 4.22.0 RC1- Do not pass OAuth2 client secret for public clients (freeipa#9734) - Fix upgrade for two-way trust to Active Directory (freeipa#9471 post-fix) - Allow extending certmonger request timeouts to accomodate for slow HSMs (freeipa#9725)- CVE-2024-11029 - Release notes: https://www.freeipa.org/release-notes/4-12-3.html- Apply upstream fixes since 4.12.2 - Fix OTP LDAP bind regression - Resolves: rhbz#2321307 - add ipa-idrange-fix tool - Support PyCA 44.0.0- Adjust to Samba 4.21- Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)- Bump release to handle F41 updates which went out of sync due to rebuilds - Fix CA uninstall in case ACME instance is available - Bump SSSD requirement to 2.9.5 to ensure sssd-idp can handle Entra ID - Make sure to use correct nodejs version for build- Upstream release 4.12.2 - Rebuild against Samba 4.21.0-RC3- Few more fixes, including tests and python-cryptography 43.0 compatibility- Post-4.12.1 fixes: - ipa-migrate tool fixes - HSM support fixes including SELinux policy changes - ipa-backup/ipa-restore uniqueness fix - improvements in replication topology access controls - allow PKINIT cert renewal on hidden replica - cleanup more files during uninstall - support for python-cryptography 43.0+ - Remove support for NIS server emulation. Requires slapi-nis 0.70.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild- Upstream release 4.12.1 - Release notes: https://www.freeipa.org/release-notes/4-12-1.html - Security release: CVE-2024-2698 CVE-2024-3183- Rebuilt for Python 3.13- Upstream release 4.12 - Release notes: https://www.freeipa.org/release-notes/4-12-0.html- Security release: CVE-2024-1481 - Resolves: rhbz#2265129- Support 389-ds with lmdb backend- Rebuild against Samba 4.20rc1 - Fix memory leak in Kerberos KDC driver - Fix possible crash in IPA command line tool when accessing Kerberos credentials - Compatibility fix for Python Cryptography 42.0.0 - NetBIOS defaults fix - Fix default host keytab retrieval permissions- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild- Security release: CVE-2023-5455 - Resolves: rhbz#2257646- ipalib: fix the IPACertificate validity dates (python 3.12 compatibility) - Handle PKI revocation response differences in JSON API - Allow removal of minimal length from a custom password policy- Adopt trust to AD code to Samba changes in case SIDs are malformed- FreeIPA 4.11.0 release - Simplify Fedora spec file - Release notes: https://www.freeipa.org/release-notes/4-11-0.html- Depend on selinux-policy-38.28-1.fc39 - Add SELinux policy for passkey_child to be used without ipa-otpd - Related: rhbz#2238474- Restore properly SELinux context during IPA client uninstallation - Related: rhbz#2238474- Set 'sssd_use_usb' SELinux boolean when enrolling IPA client - Resolves: rhbz#2238474- FreeIPA 4.11.0 beta 1 - Release notes: https://www.freeipa.org/release-notes/4-11-0-beta.html- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild- Use ssl.match_hostname from urllib3 as it was removed from Python 3.12- Rebuilt for Python 3.12- Upstream release FreeIPA 4.10.2 - Synchronize patches with CentOS 9 Stream- Support python-cryptography 40.0- Change fontawesome-fonts R to match fontawesome 4.x/bin/sh/bin/sh4.12.2-10.fc42ipa-luna.pp.bz2ipa-luna/usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19i686-redhat-linux-gnuhttps://bugz.fedoraproject.org/freeipautf-80fe3498a66a04af9ae1d7d67b08f0d001028ead21804dc1817bcebaf7900713a3afdfd7cfacdd1549385dfa22b5922eefe4a52cfd3d70aab8e94f6bfaa4beaa7?(/h5 Z071081a40167a94182817036./usr/share/selinux/packages/targeted/ipa-luna.pp.bz2BZh91AY&SYܬZ6& (p rn(h PI$ziPmM4M4h`Ԇ&M2MCML=M @2iUUQ) LA &2 !L#@2i004dǪ  ѡdF@M@z7@h h4 JG&2db0C&& Fd# 2hɦ142`210L&`Li AJFA0i@ѣFi=F44M4h44iA"!4Sy OH44#C@@h24hF@}QUj}yNË"P(]iG;YGZ#:(]m7-S9_NSe1xq >IǙٜ|`oa}~qȊ:>p`[q~hnI+6Lem}px\5'vr][3d:,.S;:ow=W{~?? "&*.26:>BEJNRVZ^bfjmrvz}E #-5=EMU]ems}+;K[kwۋWWw8XxPp01Qq2Rr3Ss('hQQRSSTUVW)SegikmoqrU#ԅ_.c?#㗶2:2n YT^R lY;qsP1GuD!!$B 5#iL_| @&v}¨@ozvv.ڽ}l[_GBM *+ʝjtI-R#tٷLS=DQ hH3_I wc(f6hfik= up/sɽR@IYo۰3YӘ`;b^H]_ _gҗ볔 !Nz8}ЀiㄇpkFQE҅?Q]P~fyc7xq$ v;ڋ$S袵В tT *SroWU *UBK5U +U_%U -YZ$*k% !X,+@9ݹM-gkl4mxܑ Ir/\"HFL aX36$2tPJ@J *"  I!:u,dKJtt[G`h~ 2i ~&?۟=ZXUV|9iim6)JRyvW>{4 $.ڔݩ&j/N ;v:;oBJv66 (b؂XK a,%mif6Yʹ! lExcƞ3>S .$N(I` )s[)]t!~f=p9 8!O\`ɇ_sL'-|OJo,s6Z!IüG0fv73??/NY =k/G|0ku4&zc#gPЀPS .BBD 2[;+埣;:x%T$=ywRpudC}pvm&eS"!|!%OڻGrDd|o•]Dv(s;n*ið^_sS |ʺF-c٧V=4Rb-7Yf" 9(nM\dU9s1YS#u\Yy+ۣQk]7nW)%:%+yEx9(UaVy@FR0aU]YʺKFcJ(YgOqUj`^ӌjQg9!Yɉ|+g.mSn8Vf𨹬.6U7D(GyIF*WxI(B$ ђD\?Bj^]-֩z?@:qӱp÷sr]NSH Bu11ǵȢM '(j!%BJ@y%4HJJK̿w 2! R{,qآpO\T\#L=v -EnOMyQgD$(IPChhm 8@Js 8Ȉs9j <@-T XաC iٙjGE 1*;"9gRO*rq Cpf.lRv6؀/gϵ}EPUC &IRTeHJNT >-k;"  Q=[} )*"BQ:8 ",ŀ wT`EZZJ$+]EYYqdN$z:AtDy+.et+C9M $vihÄF lPB+oM9a(H8V:RmB4)H5IAd8htp ĐhI X,ICJIH0!]8i"X4 !6CJ5РjkgUݵ|r6.,\/Zhv;I֖Y`m~D+A-qꖹ{Fuǁy_1W# A`{Qk@q|z8&] ;jW;a5Z;ܔ4ᡞGLsjMr-|iʳkC,qߦyu$Zcqr s(/}cj\~9} d3Ck')lS|eJlru'ʩ<&H~_Y_u1Y ݉jA $1Zb{ >-f`=+h=JOq&Ő:R!| '{IAǟf jiO\= ٮ av(նcK0H%lE*35bi82Fyu,rպm;&i'|[v ZcU27ޗm0zFh70M#A,i8` 08njLLg< @9Jg}=M:x=MgtT$ HF]Ve\8.;fo,+CnCWb㴵SAȕqT\.!gF~ Qץy>|zz$wDdNm{jޝԗzqN_zuý5=zw[o;5Cw;ө##QO;ҩo@QߞǜSU}NWsՙ).䝧C\􅐼9#SWҼFJ{zC,=9{#5Azxӽ;5Y#]#w_{u4zwj- m X6Do;ޮhl Fj*BĀUS Yi j==>׬HQj;:iUU%OefroH3#8g_fs:n/~+;Ò|%k2{D;BQ5JduNxj52`:| }8Frۻ9Np#yH\v 6jN$=olzܚx37\j7qr@r*V7}e.;T$3$w{֎`j5u30@r]c@Ta\QK¹ F%Y CYJG6b j5 wxTh$EFX$.``kE>Uϣ!vb`CT)I*3[kϺ~ TI#Fԕɤz"8zhİ h cb$=}ULz<vBY ϥ &uCBAxdQٻıI8&3GcC]h. 7 *H@<6JS=(-(/vixtssyw'/`tf``acm0c38&֤8(m,pZD̛m1h&Ts/r;$ەΈjQGaҸw 2$,P@CHIhm(ieTUH<ơ &1[AS&'B98KR Vt8>Pxy`<̊$-N/S H72p´1Z JZ` @h$i(bAQH`쨢:K< r|gxWJ%+lQ62IשB75B NrJgZo7wA $w vU e hI-+2$5^wuZߊf AI $H$R@W7{ hIq-vJI& `M$Jy #I% J=iD68ʆLf di7$%CóK:LFįC#ON!sfuhŎC @1sP41̪RI04k+`Rc8|^)<|=#6}g("L9(m#s|+̶E̡5AGEZ5,D42$Q=$,a6.J$DŽ6 !KBi"Bf? aUb- cbzyԳ1`J$@1MOTTPhWhMX f|>#;+FKd2 Z,0{WS`1ZD/b" ߤ0o` '! _(iW+t2BK3v%e>7h@f-ZM6S!Z*|bif`GNmGHN(TV=M;p`0$i1/8c6Kfm c+Z(AOE!'uP,:p ɟY1$yuakJ2J4`CbLQ$1또@Z  "LIL8'J6[[D)M8! %5cLq@aEx|_^&>,  2$hp4*[\0""_y]BpS|t>öAA=l{ㄱ|Eh`xheexUW Rt&lR\BTNjL<P#B  >)*K1IФ*)*Ăqp.'v!BICi5( ** s Jgd tIEIl(%b,?r:="N=wo@(j "I [4'Q’RpD)wEox$Aߤ 7*uϡ5F@`$XLU,lQđDO$B-ߘsD)p<ACL1W8$Aİ.$om+1Q+NN`IPXFk8=$9!&Q<W*jlb,NVf1HcP8lA)i_58ryMqdF`z/F]y Nĕj%l[ fo;Ya^wd# $ 1wՈfHIn &^9]Ğlo.cI28 n F:>NLO |"""Ҵ"<ѵ'#ֵ ZJ٤09$I FLJQ -s'¶֤ H3-,z$A n2K8yK[˝oہm49F@+(c=HH H\%³Y(:APVD9H 3ARRNiTrf6eY,! p&gefaq"Km3nf% jхI%HIe$kJrU ,J$#D6QxF" UplE8)Q" (_X~lRe3$8IJd宸((B1C\I *d'@PC@d <@P$ Q&NajAdXGElRQvmdI/d 6&ҽ$D $@493bZ0 P.8h Pri %ЄRe=4HUH82Zlje>'; T̾  FhF7껳9*F~ IJI0;xbg{ [D ,IQ)Vńa ԡC 1'ZEH|P^g8!V4dԌurPapa,F#b}:ÒdJK]A&y{Һ:ED,% 7LL ]$,8lViQA @D `s?DHCI!BhAܑN$+w+bTRAILER!!!u(PP&TAH0)*4*8$*8HbƠ(w#Hx0v{@jHo}r(|Yo MQw-t>+kI2.ea[fښ9dL%yfƜ=?wMCϗ!,COQ~ceHW(ÛĂ+uT[a3N AqA1rNTsa$rؠSAQ!>g R3y !!z0I0