# changelog

author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2302.4.0.0188.42
changelog:
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - dhugetlb: set hpool to NULL for cont-bit hugepage
  - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig
  - arm64/ascend: Delete unused feature auto-tuning hugepage
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - net: bonding: Inherit MPLS features from slave devices
  - UOS: hotplug: fix the problem of power failure under the disk


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2302.5.0.0189.43
changelog:
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - iommu: Properly export iommu_group_get_for_dev()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Allow IOMMU bus ops to be unregistered
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - dhugetlb: isolate hwpoison hugepage when release
  - mm/sharepool: Fix null-pointer-deference in sp_free_area


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.1.0.0190.44
changelog:
  - HID: check empty report_list in hid_validate_values()
  - dhugetlb: use mutex lock in update_reserve_pages()
  - ntfs: fix out-of-bounds read in ntfs_attr_find()
  - ntfs: fix use-after-free in ntfs_ucsncmp()
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
  - netfilter: nf_tables: fix null deref due to zeroed list head
  - tcp: Fix listen() regression in 5.15.88.
  - tap: tap_open(): correctly initialize socket uid
  - tun: tun_chr_open(): correctly initialize socket uid
  - net: add sock_init_data_uid()
  - rds: rds_rm_zerocopy_callback() use list_first_entry()
  - UOS: Add some header file
  - UOS: Fix the bug of network control failure


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.3.0.0191.45
changelog:
  - scsi: cancel the inflight async device probe when remove scsi_target
  - scsi: fix use-after-free problem in scsi_remove_target
  - HID: asus: use spinlock to safely schedule workers
  - HID: asus: use spinlock to protect concurrent accesses
  - HID: asus: Remove check for same LED brightness on set
  - blk-wbt: don't enable throttling if default elevator is bfq
  - block: Fix kabi broken by "block: split .sysfs_lock into two locks"
  - block: fix comment and add lockdep assert
  - block: don't release queue's sysfs lock during switching elevator
  - block: fix race between switching elevator and removing queues
  - block: split .sysfs_lock into two locks
  - crypto: rsa-pkcs1pad - restore signature length check
  - fs/proc: task_mmu.c: don't read mapcount for migration entry
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - aio: fix mremap after fork null-deref
  - bpf: Always return target ifindex in bpf_fib_lookup
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netlink: remove hash::nelems check in netlink_insert
  - net: fix UaF in netns ops registration error path
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  - binder: Address corner cases in deferred copy and fixup
  - binder: fix pointer cast warning
  - binder: defer copies of pre-patched txn data
  - binder: read pre-translated fds from sender buffer
  - binder: avoid potential data leakage when copying txn
  - binder: fix handling of error during copy
  - binder: use cred instead of task for getsecid
  - binder: don't detect sender/target during buffer cleanup
  - binder: make sure fd closes complete
  - binder: Remove bogus warning on failed same-process transaction
  - binder: fix incorrect calculation for num_valid
  - binder: Prevent repeated use of ->mmap() via NULL mapping
  - binder: Don't modify VMA bounds in ->mmap handler
  - binder: Set end of SG buffer area properly.
  - binder: return errors from buffer copy functions
  - binder: check for overflow when alloc for security context
  - binder: fix BUG_ON found by selinux-testsuite
  - binder: fix handling of misaligned binder object
  - binder: use userspace pointer as base of buffer space
  - binder: remove user_buffer_offset
  - binder: remove kernel vm_area for buffer space
  - binder: avoid kernel vm_area for buffer fixups
  - binder: add function to copy binder object from buffer
  - binder: add functions to copy to/from binder buffers
  - binder: create userspace-to-binder-buffer copy function
  - binder: fix use-after-free due to ksys_close() during fdget()
  - binder: fix kerneldoc header for struct binder_buffer
  - binder: create node flag to request sender's security context
  - binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl.
  - binder: use standard functions to allocate fds
  - block: fix kabi change since add bd_write_openers and bd_part_write_openers
  - block: add info when opening an exclusive opened block device for write
  - block: add info when opening a write opend block device exclusively
  - Revert "block: add info when opening an exclusive opened block device for write"
  - Revert "block: add info when opening a write opend block device exclusively"
  - ext4: fix WARNING in mb_find_extent
  - sctp: fail if no bound addresses can be used for a given scope
  - UOS: mq-deadline: Add front merge in insert request


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.4.0.0192.46
changelog:
  - tipc: add an extra conn_get in tipc_conn_alloc
  - tipc: set con sock in tipc_conn_alloc
  - mm/oom_kill.c: fix oom_cpuset_eligible() comment
  - oom: decouple mems_allowed from oom_unkillable_task
  - mm, oom: remove redundant task_in_mem_cgroup() check
  - mm, oom: refactor dump_tasks for memcg OOMs
  - block: Fix wrong offset in bio_truncate()
  - fs: move guard_bio_eod() after bio_set_op_attrs
  - block: add bio_truncate to fix guard_bio_eod
  - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  - cifs: Fix use-after-free in rdata->read_into_pages()
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
  - Merge "memcg: enable accounting for file lock caches" into uos_release
  - net/mlx4: Fix EEPROM dump support
  - memcg: enable accounting for file lock caches
  - Merge "netfilter: br_netfilter: do not skip all hooks with 0 priority" into uos_release
  - Merge "netfilter: bridge: prevent UAF in brnf_exit_net()" into uos_release
  - Merge "netfilter: bridge: namespace bridge netfilter sysctls" into uos_release
  - Merge "netfilter: bridge: port sysctls to use brnf_net (conflicts resolved)" into uos_release
  - Merge "net: bridge: convert nf call options to bits" into uos_release
  - Merge "net: bridge: add bitfield for options and convert vlan opts" into uos_release
  - netfilter: br_netfilter: do not skip all hooks with 0 priority
  - netfilter: bridge: prevent UAF in brnf_exit_net()
  - netfilter: bridge: namespace bridge netfilter sysctls
  - netfilter: bridge: port sysctls to use brnf_net (conflicts resolved)
  - net: bridge: convert nf call options to bits
  - net: bridge: add bitfield for options and convert vlan opts


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2303.5.0.0194.47
changelog:
  - UOS: fix 'struct bdi_writeback' kabi changed
  - net/sched: tcindex: search key must be 16 bits
  - net/sched: tcindex: update imperfect hash filters respecting rcu
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
  - x86/speculation: Add RSB VM Exit protections
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
  - x86/speculation: Disable RRSBA behavior
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list
  - x86/cpu/amd: Enumerate BTC_NO
  - x86/common: Stamp out the stepping madness
  - x86/speculation: Fill RSB on vmexit for IBRS
  - KVM: VMX: Fix IBRS handling after vmexit
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
  - x86/speculation: Remove x86_spec_ctrl_mask
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
  - x86/speculation: Fix SPEC_CTRL write on SMT state change
  - x86/speculation: Fix firmware entry SPEC_CTRL handling
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
  - intel_idle: Disable IBRS during long idle
  - x86/bugs: Report Intel retbleed vulnerability
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
  - x86/bugs: Optimize SPEC_CTRL MSR writes
  - x86/entry: Add kernel IBRS implementation
  - x86/entry: Remove skip_r11rcx
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
  - x86/bugs: Add AMD retbleed= boot parameter
  - x86/bugs: Report AMD retbleed vulnerability
  - x86/cpufeatures: Move RETPOLINE flags to word 11
  - x86/cpu: Add a steppings field to struct x86_cpu_id
  - x86/cpu: Add consistent CPU match macros
  - x86/devicetable: Move x86 specific macro out of generic code
  - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header
  - x86/cpufeature: Add facility to check for min microcode revisions
  - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
  - Revert "x86/speculation: Add RSB VM Exit protections"
  - x86/nospec: Fix i386 RSB stuffing
  - ext4: make sure fs error flag setted before clear journal error
  - ext4: commit super block if fs record error when journal record without error
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - tty: fix out-of-bounds access in tty_driver_lookup_tty()
  - arm64: errata: Remove AES hwcap for COMPAT tasks
  - kernel: Initialize cpumask before parsing
  - genirq: Disable interrupts for force threaded handlers
  - softirq: Don't try waking ksoftirqd before it has been spawned
  - scsi: hisi_sas: Clear interrupt status when exiting channel int0 for v3 hw
  - scsi: hisi_sas: Handle NCQ error when IPTT is valid
  - scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list
  - act_mirred: use the backlog for nested calls to mirred ingress
  - net/sched: act_mirred: refactor the handle of xmit
  - net: sched: don't expose action qstats to skb_tc_reinsert()
  - net: sched: protect against stack overflow in TC act_mirred
  - net: sched: refactor reinsert action
  - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  - ext4: fix another off-by-one fsmap error on 1k block filesystems
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace
  - scsi: lpfc: Add the FLOGI cmd to the list of commands which are allowed to retry
  - writeback, cgroup: do not reparent dax inodes
  - writeback, cgroup: remove wb from offline list before releasing refcnt
  - writeback, cgroup: release dying cgwbs by switching attached inodes
  - writeback, cgroup: support switching multiple inodes at once
  - writeback, cgroup: split out the functional part of inode_switch_wbs_work_fn()
  - writeback, cgroup: keep list of inodes attached to bdi_writeback
  - writeback, cgroup: switch to rcu_work API in inode_switch_wbs()
  - writeback, cgroup: increment isw_nr_in_flight before grabbing an inode
  - writeback, cgroup: add smp_mb() to cgroup_writeback_umount()
  - writeback, cgroup: do not switch inodes with I_WILL_FREE flag
  - writeback, cgroup: inode_switch_wbs() shouldn't give up on wb_switch_rwsem trylock fail
  - KVM: arm64: pmu: Only handle supported event counters
  - KVM: arm64: pmu: Fix chained SW_INCR counters
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled
  - KVM: arm64: pmu: Reset sample period on overflow handling
  - KVM: arm64: pmu: Set the CHAINED attribute before creating the in-kernel event
  - arm64: KVM: Handle PMCR_EL0.LC as RES1 on pure AArch64 systems
  - KVM: arm64: pmu: Fix cycle counter truncation
  - KVM: arm/arm64: Introduce kvm_pmu_vcpu_init() to setup PMU counter index
  - KVM: arm/arm64: Support chained PMU counters
  - KVM: arm/arm64: Remove pmc->bitmask
  - KVM: arm/arm64: Extract duplicated code to own function
  - KVM: arm/arm64: Rename kvm_pmu_{enable/disable}_counter functions
  - anolis: kvm/pmu: support kvm compiled for module
  - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART
  - KVM: arm64: pmu: Don't increment SW_INCR if PMCR.E is unset
  - KVM: x86: work around leak of uninitialized stack contents


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2304.1.0.0196.48
changelog:
  - ext4: Fix i_disksize exceeding i_size problem in paritally written case
  - ext4: ext4_put_super: Remove redundant checking for 'sbi->s_journal_bdev'
  - ext4: Fix reusing stale buffer heads from last failed mounting
  - net: virtio_net_hdr_to_skb: count transport header in UFO
  - net: be more gentle about silly gso requests coming from user
  - ext4: fix race between writepages and remount
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
  - ftrace: Fix invalid address access in lookup_rec() when index is 0
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - scsi: scsi_dh_alua: fix memleak for 'qdata' in alua_activate()
  - RDMA/core: Don't infoleak GRH fields
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - perf event: Check ref_reloc_sym before using it


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2304.3.0.0197.49
changelog:
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
  - bpf: add missing header file include
  - uaccess: Add speculation barrier to copy_from_user()
  - random: always mix cycle counter in add_latent_entropy()
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - ext4: fail ext4_iget if special inode unallocated
  - ext4: zero i_disksize when initializing the bootloader inode
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - crypto: seqiv - Handle EBUSY correctly
  - ACPI: battery: Fix missing NUL-termination with large strings
  - ACPICA: nsrepair: handle cases without a return value correctly
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - ring-buffer: Fix race while reader and writer are on the same page
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup/cpuset: Change cpuset_rwsem and hotplug lock order
  - Revert "cgroup/cpuset: Change cpuset_rwsem and hotplug lock order"
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock"
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()"
  - block: fix wrong mode for blkdev_put() from disk_scan_partitions()
  - block: fix scan partition for exclusively open device again
  - block: fix kabi broken in ioctl.c
  - block: merge disk_scan_partitions and blkdev_reread_part
  - block: cleanup partition scanning in register_disk
  - block: Revert "block: check 'bd_super' before rescanning partition"
  - md: fix kabi broken in struct mddev
  - md: use interruptible apis in idle/frozen_sync_thread
  - md: wake up 'resync_wait' at last in md_reap_sync_thread()
  - md: refactor idle/frozen_sync_thread()
  - md: add a mutex to synchronize idle and frozen in action_store()
  - md: refactor action_store() for 'idle' and 'frozen'
  - mm: mem_reliable: Initialize reliable_nr_page when mm_init()
  - md: fix soft lockup in status_resync
  - md: don't update recovery_cp when curr_resync is ACTIVE
  - md: Ensure resync is reported after it starts
  - md: Use enum for overloaded magic numbers used by mddev->curr_resync
  - loop: Add parm check in loop_control_ioctl
  - block/wbt: enable wbt after switching cfq to other schedulers
  - Fix double fget() in vhost_net_set_backend()
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - Revert "sched: Reinit task's vruntime if a task sleep over 200 days"
  - btrfs: fix race between quota disable and quota assign ioctls
  - smartpqi: update driver to 1.2.16-040


author: Gou Hao <gouhao@uniontech.com> - 4.19.90-2304.4.0.0197.51
changelog:
  - KVM: nVMX: add missing consistency checks for CR0 and CR4
  - drm/vmwgfx: Validate the box size for the snooped cursor
  - net/sched: Retire tcindex classifier
  - Documentation/hw-vuln: Fix rST warning
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
  - KVM: x86: Mitigate the cross-thread return address predictions bug
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions
  - cpu/SMT: create and export cpu_smt_possible()
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
  - config: enable CONFIG_ECRYPT_FS for encryptfs filesystem
  - Merge "UOS:add x86_64 CONFIG_DRM_SMI and CONFIG_DRM_SMI_HDMI" into uos_release
  - UOS:add x86_64 CONFIG_DRM_SMI and CONFIG_DRM_SMI_HDMI


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.73-1
changelog:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.


author: Bo Wang <wangbob@uniontech.com> - 1.5.3-1.1
changelog:
  - Remove all external golang package build requires
  - modify incompatible macros
  - Obsoletes containerd.io
  - Conflicts containerd.io


author: Bo Wang <wangbob@uniontech.com> - 1.5.3-1.2
changelog:
  - ExcludeArch i686 loongarch64
  - Disable building the btrfs snapshot driver and remove BR btrfs-progs-devel


author: mahailiang <mahailiang@uniontech.com> - 4.7.0-8.0.1.06
changelog:
  - refactor: delete --with-cve --with-bug
  - refactor: delete  patch 10001-dnf-uos-modify-yum-updateinfo-list.patch


author: Richard W.M. Jones <rjones@redhat.com> - 4.7.0-10
changelog:
  - Backport fix for leaks of libsolv's page file descriptors in Base object
    resolves: rhbz#2087734
  - Include instructions for regenerating patches.


author: Lukas Hrazky <lhrazky@redhat.com> - 4.7.0-11
changelog:
  - [doc] Describe how gpg keys are stored for `repo_ggpcheck`
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)


author: Olivier Lemasle <o.lemasle@gmail.com> - 20.10.6-1
changelog:
  - Update to upstream 20.10.6 (#1948605)
  - Re-bundle moby dependencies to fix gRPC issues with Swarm
    (https://github.com/coreos/fedora-coreos-tracker/issues/793)


author: Bo Wang <wangbob@uniontech.com> - 20.10.7-1.1
changelog:
  - Remove BR go-rpm-macros
  - Remove BR golang-github-docker-libnetwork-devel
  - Add libnetwork source tar
  - Modify proxy install from path
  - Disable Btrfs and remove BR pkgconfig(libbtrfsutil)
  - Define %gobuild
  - Remove Bundled dependencies
  - Remove %{__cmake_builddir} when build tini


author: yuxiaojun <yuxiaojun@uniontech.com> - 4.2.1-6
changelog:
  - feat: fix the bug that the protection cannot be removed after the package protection is added with the package name and version number


author: yuxiaojun <yuxiaojun@uniontech.com> - 4.15.1-49.01
changelog:
  - fix: Rpm installs multiple packages at a time, and there is a bug that the labels are confused(bugid:187073)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-1.24
changelog:
  - feat: Set the restart service operation to only reinforce once
  - fix: Add the execution of the allow method


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-3
changelog:
  - fix: Fix issue with update-crypto-policies setting DEFAULT:NO-SHA1 not taking effect(bugid:199425)


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-5
changelog:
  - fix: Delete modification rules for .service files. (bugid:199789)
  - fix: /etc/ssh/sshd_ Set SyslogFacility to AuthPRIV in the config file to display the IP information of the SSH connection(bugid:199475)
  - feat: Prompt for modifying securitymod.sh
  - feat: delete base-security.conf file.


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-7
changelog:
  - fix: Resolve error issues during backup and restore operations
  - feat: Write backup restore logs to the /var/log/UnionTech-security-bakres.log file


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-8
changelog:
  - fix: Rule for deleting ineffective CAD key combinations
  - fix: Fix the issue of hibernation and standby options in the shutdown interface(bugid:203363)


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-9
changelog:
  - fix: Solve the problem of not being able to get stuck in the login interface after security reinforcement
         in the Loongarch64 environment(bugid:198909)


author: qinzhiben <qinzhiben@uniontech.com> - 2.1-10
changelog:
  - fix: Resolve the issue of duplicate backup data caused by multiple executions of backup scripts
  - fix: Backup script execution in service file with bash


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-108.1
changelog:
  - Add the files_map_read_etc_files() interface
  Resolves: rhbz#2136762
  - Allow insights-client manage samba var dirs
  Resolves: rhbz#2136762
  - Allow insights-client send null signal to rpm and system cronjob
  Resolves: rhbz#2136762
  - Update rhcd policy for executing additional commands 4
  Resolves: rhbz#2136762
  - Allow insights-client connect to postgresql with a unix socket
  Resolves: rhbz#2136762
  - Allow insights-client domtrans on unix_chkpwd execution
  Resolves: rhbz#2136762
  - Add file context entries for insights-client and rhc
  Resolves: rhbz#2136762


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-108.2
changelog:
  - Add domain_unix_read_all_semaphores() interface
  Resolves: rhbz#2170510
  - Add interfaces in domain, files, and unconfined modules
  Resolves: rhbz#2170510
  - Allow insights-client manage fsadm pid files
  Resolves: rhbz#2170510
  - Allow insights-client work with su and lpstat
  Resolves: rhbz#2170510
  - Allow insights-client read nvme devices
  Resolves: rhbz#2170510
  - Allow insights-client tcp connect to all ports
  Resolves: rhbz#2170510
  - Add insights additional capabilities
  Resolves: rhbz#2170510
  - Allow insights client work with gluster and pcp
  Resolves: rhbz#2170510
  - Allow insights-client tcp connect to various ports
  Resolves: rhbz#2170510
  - Allow insights-client work with pcp and manage user config files
  Resolves: rhbz#2170510
  - Allow insights-client dbus chat with various services
  Resolves: rhbz#2170510
  - Allow insights-client dbus chat with abrt
  Resolves: rhbz#2170510
  - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
  Resolves: rhbz#2170510
  - Allow insights client read raw memory devices
  Resolves: rhbz#2170510
  - Allow insights-client domain transition on semanage execution
  Resolves: rhbz#2170510
  - Allow insights-client create gluster log dir with a transition
  Resolves: rhbz#2170510
  - Allow insights-client manage generic locks
  Resolves: rhbz#2170510
  - Allow insights-client unix_read all domain semaphores
  Resolves: rhbz#2170510


author: qinzhiben <qinzhiben@uniontech.com> - 1.0.0-1.12
changelog:
  - fix: Fix the issue of incorrect text display in the account protection module(bugid:203357)
  - fix: Resolve the issue of incorrect display order of reinforcement items for security reinforcement(bugid:203373)


author: kongxinglong <kongxinglong@uniontech.com> - 1.0.0-1.13
changelog:
  - fix: Fix some copywriting errors and increase the judgment of password complexity(BUG: 203829,203563,203355,203353)


author: wanhui <wanhui@uniontech.com> - 1.0.0-1.14
changelog:
  - fix: Risk item not at the top(bugid: 203825)
  - fix: Add more than 200 proc files(bugid: 203567)
  - fix: Add more than 200 executable files


author: wanhui <wanhui@uniontech.com> - 1.0.0-1.15
changelog:
  - fix: bugid: 204057
  - fix: exec file execute segment after adding to prevent flie modify list(bugid: 203823)
  - fix: add tips if there are null character in the file name  (bugid:203777)
  - fix: add tips if there are duplicate files  (bugid:203595)


author: qinzhiben <qinzhiben@uniontech.com> - 1.0.0-1.19
changelog:
  - fix: Add ellipses in the reinforcement details report, and move the mouse to
         display the function of omitting content(bugid:204931)


