# changelog

author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-7
changelog:
  - fixed tf2server-specific problems with updating and console access via steamcmd (which prevented cron-controlled server rebooting)


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-9
changelog:
  - fixed tf2server-specific problems while updating with steamcmd (again), and rpm_t/crond_t related troubles preventing reboot (again)


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-10
changelog:
  - fixed tf2server-specific problems during updating once again, including rpm_script_t, rpm-t and crond_t related troubles
  - finally finished the utils packages (lgsm-utils, lgsm-tf2server-utils, lgsm-ut2k4server-utils)
  - added lgsm_restart-when-needed.sh script to get around tf2 not restarting after an update, when it should have.


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-11
changelog:
  - lgsm_getplayersfromlog.sh now does the sensible thing: show the log filtered through sort -u
  - finally made lgsm_getupdate and lgsm_restart-when-needed work better with the new dynamic systemd service files (tf2server@.service and ut2k4server@.service) . Update your /etc/sysconfig/tf2server.env file(s)!
  - fixed some SELinux weirdness regarding lgsm's steamcmd
  - Happy new year!


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-13
changelog:
  - tf2server: a few new permissions were missing for executing steamsdk_t as system_cronjob_t and rpm_script_t
  - ut2k4server: added tcp talking to masterservers support.. somehow this one only showed up once the selinux-testservers at ut2k4.holics.at stopped used an opensource master server. and yes, fu epic for disabling the masterservers. :-(


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-14
changelog:
  - lgsm / tf2server / ut2k4server: fixed lgsm firstsetup weirdness (and maybe linux distro changes on-the-fly)
  - tf2server / ut2k4server: added TimeoutStartSec=30 to both SystemD unit files, because lgsm's file-checking can take longer than SystemD is willing to wait (by default).


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-16
changelog:
  - tf2server: allow system_cronjob_t to run updater that needs execmod on tf2server_bin_execmod_t
  - lgsm: allow lgsm_to connectto and read/write to system_cronjob_t:unix_socket_files


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-17
changelog:
  - lgsm: lgsm added a new lgsm-subdir ./lgsm/modules/ . added toggleable support for it, when it needs writing-capabilities. if lgsm-update fails, execute 'setsebool lgsm_allow_major_update on' and restart the server. then disable it again.
  - ut2k4server: added additional firewalld-service-definition for a 2nd server that runs on different (default-ish) portsets


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-19
changelog:
  - tf2server: selinux - fixed missing tf2server_tmp_dir_t create permissions
  - lgsm: utils - fixed lgsm-restart_when_needed.sh in case service is used instead of systemctl; utils - lgsm-restart_when_needed.sh is now being called by cron every 30 minutes


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-20
changelog:
  - tf2server/lgsm: selinux changes necessary because of RHEL selinux changes
  - tf2server: cron table sanitized, so we now try to update and restart the tf2server only every 6 hours, starting at 2:15/2:20 . lgsm mods-update always "updates", on every run. weird. but it causes the lgsm_checkupdate.sh to restart the tf2server every time. TODO check for text-output of force-update instead of rc, and disregard mods-update rc or output to not more than one restart per day


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-21
changelog:
  - tf2server: final selinux changes allowing systemd_tmpfiles_t to manage tf2server_tmp_t, as it rightfully should be able to


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-22
changelog:
  - lgsm: lgsm decided to start using lnk_files, which caused the server to hang in a restart-loop until said lnk_files in the lgsm - log/ subdirectory could be created. wth, dude.


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-23
changelog:
  - lgsm/tf2server: added a fix for el9 selinux policy changes, that were not needed in el8; el8 and el9 policies for lgsm and tf2server have now their own files.


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-24
changelog:
  - lgsm/tf2server: added a fix for el9 system_cronjob_t and unconfined_service_t, that somehow was missed for eons


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-25
changelog:
  - lgsm: added a fix for el9 unconfined_service_t accessing lgsm_tmp_t, that somehow was missed for eons


author: Frederic Krueger <fkrueger-dev-selinux_tf2server@holics.at> 1.0-31
changelog:
  - tf2server: accidentally coredumping was allowed even when the boolean was set to off. this should fix this.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Frederic Krueger <fkrueger-dev-myfetchmail@holics.at> - 6.4.37-1
changelog:
  - Shamelessly ripped spec and other files from EPEL 8 upstream to get a more current version (thanks to googlemail problems with the 6.4.24 version)


author: Frederic Krueger <fkrueger-dev-myfetchmail@holics.at> - 6.4.37-2
changelog:
  - Idiotic service-file defaulting to using /etc/fetchmailrc.example as its configfile caused another version bump


author: Frederic Krueger <fkrueger-dev-el8_shellinabox@holics.at> - 2.20-6
changelog:
  - Started using the last el7 package of shellinabox as a basis, because el8/el9 don't have that package?!
  - Added DDOS fix for form-data handling created by Imre Rad in 2018 ( also on github https://github.com/shellinabox/shellinabox/commit/4f0ecc31ac6f985e0dd3f5a52cbfc0e9251f6361 )
  - Added GCC11 fix of the fedora edition
  - Added default port service definition for SystemD firewalld
  - On debian this preselection of patches is known as version 2.21, not 2.20-6 :-)


author: Frederic Krueger <fkrueger-dev-shellinabox_selinux@holics.at> 2.20-6
changelog:
  - Initial package (versioning is based on the numbering of my own shellinabox rpm, which is loosely based on the numbering of el7 spec file)


author: Frederic Krueger <fkrueger-dev-holicsrepo@holics.at> - 8-2.el8
changelog:
  - reworked the spec file to support fedora and rhel-type distros (built on: 2023-11-07 16:23:18OURCE)


