# changelog

author: yixiangzhike <yixiangzhike007@163.com> - 3.0-4
changelog:
  - backport some patches
     Add missing call to free_interpretation_list
     fix 2 more issues found by fuzzing
     Fix an auparse memory leak caused in recent glibc
     Fix double free with corrupted logs
     Turn libaucommon into a libtool convenience library
     Fix the closing timing of audit_fd
     Fix some string length issues
     Move the free_config to success path
     Check for fuzzer induced invalid value
     error out if log is mangled
     Dont run off the end with corrupt logs
     Another hardening measure for corrupted logs
     Fix busy loop in normalizer when logs are corrupt
     Better fix for busy loop in normalizer when logs are corrupt
     flush uid gid caches when user group added deleted modified
     In auditd check if log_file is valid before closing handle
     Check ctime return code
     When interpreting if val is NULL return an empty string
     auditd.service Restart on failure ignoring some exit
     In auditd close the logging file descriptor when logging is suspended


author: wanghao <wanghao2@kylinos.cn> - 3.0-5.se.09
changelog:
  - Type:update
  - ID:[Task#75532]
  - SUG:NA
  - DESC: 添加kysec补丁
  -         add patch: audit-3.0.20200318-kysec.patch
  -       audit服务可以手动停止
  -         add patch: audit-3.0-systemctl-faied.patch
  -       修改auditd-config.c文件
  -         add patch: audit-3.0-modify-auditd-config.patch
  -       添加mips支持
  -         add patch: audit-3.0-adopt-mips.patch
  -       改进mips相关little_endian默认值设置为1
  -         add patch: audit-3.0-modify-mips.patch
  -       删除littlt-endian的判断
  -         add patch: audit-3.0-delete-littlt-endian.patch
  -       添加loongarch64相关支持
  -         add patch: audit-3.0-add-loongarch64.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-6.se.01
changelog:
  - Type: bugfix
  - ID:[Bug#113316]
  - SUG:NA
  - DESC: 将audit.log文件权限改为600，pidfild文件权限改为644
  -         add patch: audit-3.0-modify-logfile-and-pidfile-permissions.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0-6.se.02
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: audit-3.0-fix-modify-or-del-audit-log-bug.patch


author: sunjin <sunjin@kylinos.cn> - 3.0-6.se.03
changelog:
  - Type:bugfix
  - ID:无
  - SUG:NA
  - DESC:
  -      解决ausyscall --dump看不到系统符号问题
  -      添加补丁audit-3.0-fix-syscall-error.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 3.0-6.se.04
changelog:
  - Type:update
  - ID:无
  - SUG:NA
  - DESC:
  -      添加程序黑名单类型
  -      添加补丁audit-3.0-program-blacklist-type.patch


author: liwei <liwei@kylinos.cn> 2.2.13-19.p01+sm.04
changelog:
  - fix CVE-2022-26691 CVE-2019-8842 CVE-2023-32324  CVE-2023-34241 CVE-2023-4504 
  - fix build error;fix test case fail enable test


author: wangxudong <wangxudong@kylinos.cn> - 050-5.se.04+sm.01
changelog:
  - Type: bugfix
  - ID:[Bug#161996]
  - SUG:NA
  - DESC:合入通用补丁“修复执行控制白名单和文件防篡改列表为空的问题”
  -         add patch: kysec-fix-whlist-init-failed.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 050-5.se.04+sm.02
changelog:
  - Type:update
  - ID:[Task#152969]
  - SUG:NA
  - DESC: 支持程序黑名单功能，添加补丁 dracut-support-program-blklist.patch


author: liwei <liwei@kylinos.cn> - 050-5.se.07+sm.03
changelog:
  - 合入通用补丁：
  	dracut-050-restore-file-permission-settings.patch
  	dracut-050-modify-security-switch-effective-after-reboot.patch
  	dracut-050-fix-selinux-targeted-change-strict-error.patch
  	dracut-050-fix-auditadm-read-var-log-file-failed-bug.patch
  - add patch: dracut-050-incorporating-universal-patches.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 050-5.se.07+sm.04
changelog:
  - 同步zzkk补丁：支持内核模块化场景
  - add patch: 01-dracut-add-sxf-patch-use-ko.patch
               02-dracut-fix-bug191506-compatible-se33.patch


author: xinjiahao <xinjiahao@kylinos.cn> - 050-5.se.07.02.p02+sm.04
changelog:
  - Type:bugfix
  - ID:[BUG#211690] [BUG#209238]
  - SUG:NA
  - DESC:add kernel/kylin in 90kernel-modules-extra/module-setup.sh, support kylin kernel
  -      add patch: dracut-050-support-kylin-kernel.patch
         自定义分区安装系统后,切换安全模式后重启打标过程home var 分区无法挂载
         add dracut-fix-mount-home-failed.patch
         dracut-add-os-partition-judge-in-kyseclabel-script.patch


author: wanghao <wanghao2@kylinos.cn> - 050-5.se.03
changelog:
  - Type: bugfix
  - ID:[Bug#135593]
  - SUG:NA
  - DESC: 修复修改删除audit.log后日志为空的问题
  -         add patch: dracut-fix-modify-or-del-audit-log-bug.patch


author: xinjiahao <xinjiahao@kylinos.cn> - 050-5.se.07.02.p03+sm.04
changelog:
  - Type:update
  - ID:[TASK#331444]
  - SUG:NA
  - DESC: 重启服务器无法正常进入系统
  -      add patch: dracut-fix-lvm-pv-scan-nvme-mpath.patch


author: panzhe <panzhe@kylinos.cn> - 1.40.2-8.p01
changelog:
  - Type:bugfix/compile
  - ID:NA
  - SUG:NA
  - DESC:Solve the problem that coldplug does not hava "safe remove" issue.
  - BuildRequires: libwbclient-devel 
  - Add Patch02, Fixed "Favorites" error in "My Computer".
  - Add Patch03, Solve the problem that usb flash drive sometimes fails to mount automatically.
  - Add Patch04, Solve the problem that the window displays "Network".


author: xuyujun <xuyujun@kylinos.cn> 1.40.2-8.p01.sm.01
changelog:
  - 移植桌面设备管控补丁
  - add patch: add-phone-control.patch
  - add patch: change-devctl-rules.patch
  - add patch: sm-optimization-wince-devctl.patch


author: zhangxiuwen <zhangxiuwen@kylinos.cn> 1.40.2-8.p02+sm.01
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Fix udisks2 volume monitor leaks
  - add patch: gvfs-1.40.2-kylin-fix-udisks2-volume-monitor-leaks.patch


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0-2.4.p15.sm02
changelog:
  - use (os base + os updates + sm-os updates ) repos instead of (sm-os base + sm-os updates ) repos for an_quan_tao_jian


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0-2.4.p19.sm04
changelog:
  - adapt for kylin-repos-1.0-2.4.p16.ky10
  - adapt for kylin-repos-1.0-2.4.p17.ky10
  - adapt for kylin-repos-1.0-2.4.p18.ky10
  - adapt for kylin-repos-1.0-2.4.p19.ky10


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.1-16.se.05.sm.01
changelog:
  - 合入sp3主线版本补丁
  - add kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch
  - add kysec-common-modify-kysec-log-server-listen-ip.patch


author: liwei <liwei@kylinos.cn> - 1.0.1-16.se.07+sm.03
changelog:
  - Type:update
  - 合入通用补丁：
  	kysec-common-fix-secadm-ppro-get-pid-failed.patch
  - add patch: kysec-common-incorporating-universal-patches.patch


author: wujunhua <wujunhua01> - 1.0.1-16.se.07+sm.04
changelog:
  - Type: update
  - ID:[Bug#205244]
  - SUG:NA
  - DESC: 合入通用Bug#194820patch解决：【S5000CB14】【4.19】服务器安全防护添加多个文件时包含特殊字符添加失败
  -         add patch: kysec-common-modify-decompress-xz-file.patch


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.1-16.se.10+sm.04
changelog:
  - Type: bugfix,update
  - ID:[Bug#184694] [任务#189436] [BUG#184694]
  - SUG:NA
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
            add patch: kysec-common-fix-secadm-can-not-get-ppro-by-pid.patch
          修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截了pid的查询,获取的pid会是kysec_get进程的pid的问题
            add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.09.sm.12
changelog:
  - 同步桌面补丁：
  -       优化wince和扫描仪管控，不再创建和删除phone.perm以及scanner.perm
  -       修复内置光驱设为禁止无法弹出，内置光驱管控策略未及时生效 
  - add patch: kysec-daemon-add-patch-from-debian-1114.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.3-36.se.14.sm.07
changelog:
  - separate net printer and local printer control
  - add some device and interface control
  - add patch: kysec-daemon-add-and-modify-some-device-and-interface-control.patch


author: wujunhua <wujunhua01@kylinos.cn> - 1.0.3-36.se.14.sm.08
changelog:
  - 涉密场景下限制管理员权限(通用涉密数据分离功能补丁合入)
  - add patch: kysec-daemon-limit-admin-permission-for-sm.patch
  - 修复网卡控制错误
  - add patch: kysec-daemon-fix-netcard-control-error.patch


author: wujunhua <wujunhua01@kylinos.cn> - 1.0.3-36.se.14.sm.09
changelog:
  - 调整devtype顺序
  - add patch: kysec-daemon-adjust-the-devtype-order.patch
  - 清空relabel_status表数据
  - add patch: kysec-daemon-clear-the-relabel_status-table.patch


author: wujunhua <wujunhua01@kylinos.cn> - 1.0.3-36.se.17+sm.14
changelog:
  - Bug: #187185 【深信服】嵌入式E2000设置StorageDrive开启状态，显示屏黑屏
  - add patch: kysec-daemon-embedded-E2000-sets-the-StorageDrive-to-off-state-resulting-in-a-black-screen-on-the-display-screen.patch


author: liwei <liwei@kylinos.cn> - 1.0.3-36.se.18+sm.14
changelog:
  - 合入通用patch:
  	 kysec-daemon-modify-security-switch-effective-after-reboot.patch
  - add patch: kysec-daemon-incorporating-universal-patches.patch


author: liwei <liwei@kylinos.cn> - 1.0.3-36.se.18+sm.16
changelog:
  - Type:update
  - ID: [BUG#199664]修复hub禁用启用不即时生效的问题
  - add patch: kysec-daemon-fix-hub-not-work-at-once.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.3-36.se.18+sm.17
changelog:
  - Type:update
  - ID: [TASK#179971 BUG#193846] 同步桌面流量管控普通用户可以配置策略问题
  - add patch: kysec-daemon-fix-netflow-ordinary-user-can-config-policy.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.3-36.se.18+sm.19
changelog:
  - Type:update
  - ID: [BUG#201041]hub策略异常
  - 修复la64上ehci和ohci类型hub管控无法立即生效的问题
  - kysec-daemon-fix-la64-hub-ohci-ehci.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.3-36.se.18+sm.20
changelog:
  - Type: bugfix
  - ID: [Bug#201172]
  - 修复sw平台切换状态时, 修改grub.cfg会报错的问题
  - kysec-daemon-fix-security-switch-for-sw-modify-grub-file.patch


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.3-36.se.20+sm.20
changelog:
  - Type: bugfix
  - ID: [BUG#205663][BUG#206934]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题[BUG#205663]
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch
  -	修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题[BUG#206934]
  -	  add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> - 1.0.3-36.se.20+sm.21
changelog:
  - Type: bugfix
  - ID:[BUG#280673]
  - SUG:NA
  - DESC: ethernet 启停异常
  -         add patch: kysec-daemon-fix-280673.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> - 1.0.3-36.se.20+sm.22
changelog:
  - Type: bugfix
  - ID:[BUG#346000]
  - SUG:NA
  - DESC: ethernet 启停异常
  -         add patch: kysec-daemon-fix-bug-346000.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> - 1.0.3-36.se.20+sm.23
changelog:
  - Type: bugfix
  - ID:[BUG#346000]
  - SUG:NA
  - DESC: ethernet 启停异常,修改开启判断逻辑
  -         add patch: kysec-daemon-fix-bug-346000-2.patch


author: liwei <liwei@kylin.cn> - 1.0.1-41.se.07+sm.11
changelog:
  - Type: bugfix
  - ID:[BUG#205537]
  - SUG:NA
  - DESC: 删除对devctl_auto_add_record.desktop文件的安装
  -	  add patch: kysec-sync-daemon-del-devctl-auto-add-record-desktop-file.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.0.1-41.se.07+sm.12
changelog:
  - Type: bugfix
  - ID:[BUG#208462]
  - SUG:NA
  - DESC: 修复重启后kmodpro防护失效的问题
  -         add patch: kysec-sync-daemon-fix-invalid-kmodpro-after-reboot-20240115.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> - 1.0.1-41.se.07+sm.13
changelog:
  - Type: bugfix
  - ID:[BUG#280605]
  - SUG:NA
  - DESC: MassStorage 禁用异常
  -         add patch: kysec-sync-daemon-fix-280605.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> - 1.0.1-41.se.07+sm.14
changelog:
  - Type: bugfix
  - ID:[BUG#346079]
  - SUG:NA
  - DESC: MassStorage 开机rebind异常
  -         add patch: kysec-sync-daemon-fix-bug-346079.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.10.sm.12
changelog:
  - 移植桌面补丁，USB CLASS管控，增加0f和dc的管控，清除所有策略的接口新增网卡名清空
  - add patch: kysec-utils-add-patch-from-debian-1026.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.14.sm.01
changelog:
  - 合入sp3主线版本补丁
  - add patch: kysec-utils-add-patches-from-sp3-1213.patch
  - 修改pid、vid管控usb不能及时生效问题
  - add patch: kysec-utils-fix-bugs-1213.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.14.sm.04
changelog:
  - 匹配内核device_info文件格式修改，支持USB软驱实时生效
  - add patch: kysec-utils-adapter-kernel-device-info-file-change.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 3.3.6-33.se.14.sm.06
changelog:
  - separate net printer and local printer control
  - add some device and interface control
  - 修复HDMI接口禁用未实时生效的问题
  - add patch: kysec-utils-add-and-modify-some-device-and-interface-control.patch


author: jianingning <jianingning@kylinos.cn> - 3.3.6-33.se.14.sm.09
changelog:
  - add patch: kysec-utils-set-path-which-not-existed-to-program-blacklist.patch
               kysec-utils-fix-coredump-while-set-hdmi-or-dp-control.patch
               kysec-utils-clear-the-program-blacklist-when-cancling-the-authorize.patch
               kysec-utils-use-xrandr-to-control-displayport-when-using-device-control.patch
  - use xrandr to control displayport when using device control
    clear the program blacklist when cancling the authorize
    修改HDMI或DP管控中的段错误问题
    set path which not existed to program blacklist
  - remove patch:remove-virtual-machine-test-cases.patch


author: maoyifeng <maoyifeng@kylinos.cn> - 3.3.6-33.se.17+sm.09
changelog:
  - 合入sp3主线版本补丁
  - add patch: kysec-utils-fix-can-not-get-3adm-label-when-kysec-disable-bug.patch
  	     kysec-utils-fix-insmod-success-when-modify-ko-file-after.patch
  	     kysec-utils-fix-initramfs-exec-denied-halt.patch


author: maoyifeng <maoyifeng@kylinos.cn> - 3.3.6-33.se.17+sm.11
changelog:
  - Type:update
  - ID: [Task#165399]
  - SUG:NA
  - DESC:调整pblk在func_id和func_entries中的顺序
  -         add patch: kysec-utils-modify-pblk-funcid.patch


author: maoyifeng <maoyifeng@kylinos.cn> - 3.3.6-33.se.17+sm.12
changelog:
  - Type:update
  - ID: [Task#167893]
  - SUG:NA
  - DESC:修复更新内核模块防卸载时没有return返回值
  -         add patch: kysec-utils-fix-compilation-warning.patch


author: liwei <liwei@kylinos.cn> - 3.3.6-33.se.22+sm.12
changelog:
  - Type:update
  - 合入通用补丁：
  	kysec-utils-fix-kysec-set-disable-tips-reboot.patch
  	kysec-utils-modify-security-switch-effective-after-reboot.patch
  - add patch: kysec-utils-incorporating-universal-patches.patch


author: liwei <liwei@kylinos.cn> - 3.3.6-33.se.22+sm.13
changelog:
  - Type:update
  - ID: [BUG#199664]修复hub禁用启用未即时生效的问题
        [BUG#199532]去除进程管控xml中test内容
  - add patch: kysec-utils-fix-hub-not-work-at-once.patch
  	     kysec-utils-remove-pblk-test.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 3.3.6-33.se.22+sm.14
changelog:
  - Type:update
  - ID: [TASK#179971 BUG#193846] 同步桌面流量管控普通用户可以配置策略问题
  - add patch: kysec-utils-fix-netflow-ordinary-user-can-config-policy.patch


author: litianhao <litianhao@kylinos.cn> - 3.3.6-33.se.22+sm.16
changelog:
  - Type:update
  - ID: [BUG#199514]修复kysec_get无法查看内核模块防卸载的sm策略
  - kysec-utils-fix-not-get-sm-kmod-policy.patch


author: litianhao <litianhao@kylinos.cn> - 3.3.6-33.se.22+sm.17
changelog:
  - Type:update
  - ID: [BUG#199521]修复kysec_get无法查看进程保护的sm策略
  - kysec-utils-fix-not-get-sm-ppro-policy.patch


author: litianhao <litianhao@kylinos.cn> - 3.3.6-33.se.22+sm.18
changelog:
  - Type:update
  - ID: [BUG#201041]修复hub管控无法立即生效的问题
  - kysec-utils-fix-add-perm-failed.patch
  - kysec-utils-fix-specified-hub-policy-not-rescan.patch


author: liwei <liwei@kylinos.cn> - 3.3.6-33.se.24+sm.18
changelog:
  - Type:update
  - ID: [任务#180316] [BUG#200000]
  - DESC: 将load_policy命令加入到secadm_list文件中
          修改切换状态时提示kill用法错误


author: xinjiahao <xinjiahao@kylinos.cn> - 3.3.6-33.se.26+sm.18
changelog:
  - Type:bugfix
  - ID: [BUG#184694] [BUG#206934]
  - DESC: 修复secadm用户无法通过pid获取进程管控状态的问题
            add patch: kysec-utils-fix-secadm-can-not-get-ppro-by-pid.patch
          修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
            add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-1.se.02+sm.17
changelog:
  - [TASK#179971 BUG#193846 BUG#198544 BUG#199175]
  - DESC: 同步桌面流量管控普通用户可以配置策略问题
          添加抓取策略时策略序号无法设置大于200
          流量管控未授权执行审计策略查询没报错问题
  -      add patch: sm-enhancement-fix-netflow-ordinary-user-can-config-policy.patch
                    sm-enhancement-fix-netflow-cant-config-policy-greater-than-200.patch
                    sm-enhancement-fix-netflow-no-error-info-when-no-authorize.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-1.se.02+sm.20
changelog:
  - [Bug#199833,#199864]
  - DESC: 壁纸管控增加查看功能,解决取消非管控壁纸时,管控壁纸失效问题.
  -      add patch: sm-enhancement-fix-bgset-remove-bug.patch
  -      add patch: sm-enhancement-bgset-improve-list.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-1.se.02+sm.22
changelog:
  - [Bug#198544]
  - DESC: 解决取消授权再授权后执行策略下发命令报错问题
  -      add patch: sm-enhancement-optimize-netflow-authorize-service-process.patch
                    sm-enhancement-fix-netflow-get-allpolicy-memory-leak.patch


author: jianingning <jianingning@kylinos.cn> - 1.0.1-1.se.02+sm.23
changelog:
  - [Bug#209764]
  - DESC: 普通用户设置细粒度失败无提示(通过网卡名禁用方式)
  -      add patch: fix-fine-grained-control-bug-209764-no-prompt.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-1.se.02+sm.24
changelog:
  - [BUG#207009 BUG#207045 BUG#207158 BUG#207168 BUG#198544]
  -DESC: 1. sm-netaudit和sm-netflow-ctl命令无法使用帮助手册
         2. 添加流量审计策略时，输出信息存在错误单词
         3. 添加抓取策略的流量方向参数为字母时添加成功，方向为in
         4. 删除流量审计策略时，提示内容中TYPE/PROCESS/DIR信息错误
         5. 流量管控未授权执行审计策略查询没报错问题
  -      add patch: sm-enhancement-fix-netflow-some-trivial.patch
                    sm-enhancement-fix-netflow-no-error-info-when-no-authorize-002.patch


author: zhuzhousheng <zhuzhousheng@kylinos.cn> - 1.0.1-1.se.02+sm.26
changelog:
  - Type: bugfix
  - ID:[BUG#280613]
  - SUG:NA
  - DESC: CDROM禁用启用异常
  -      sm-example-fix-bug-280613.patch


author: xuyujun <xuyujun@kylinos.cn> - 4.15.1-37.p01.sm.01
changelog:
  - Type:update
  - ID: [Task#115696]
  - SUG:NA
  - DESC: 支持软件防卸载
  -       添加补丁 rpm-add-forbidden-package-uninstall-function.patch
  - Type:update
  - ID: [bug#156258]
  - SUG:NA
  - DESC: 软件防卸载管控点从rpmErase下移到removePackage，里面获取的软件名称经过解析，更准确，防止误判
  -       添加补丁 rpm-fix-forbidden-package-uninstall-bugs.patch


author: dangqihui <dangqihui@kylinos.cn> - 4.15.1-37.p02.se.01+sm.01
changelog:
  - 合入通用主线补丁
  - add patches backport-Fix-install-of-block-and-character-special-files-219.patch
  -             backport-Use-fd-based-ops-for-metadata-in-FA_TOUCH-mode-too-w.patch
  -             backport-Add-a-test-for-special-device-node-installation.patch
  -	      rpm-remainoldtag-kysec.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0.28-11.p01
changelog:
  - Type:bugfix
  - ID:task#74810
  - SUG:NA
  - DESC:Cancel the noarch attribute of "sane backends help" package


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.0-1.sm.06
changelog:
  - TASK #164935 流量管控性能优化（删除原BPF方案代码部分、增加无策略不采集数据处理）
  - 其他改动说明: 1. 优化策略读取部分代码，获取所有策略时直接从内核策略链表读取 
                  2. 优化缓存淘汰策略，实现LRU算法hash表
                  3. 解决流量管控模块与厂商的地址黑名单功能冲突卡死问题
                  4. 支持MIPS和申威架构


author: wangshengye <wangshengye@kylinos.cn> 1.0.0-1.sm.07
changelog:
  - BUG #199173 (关联TASK #174987) (netflow_ctl) 解决添加200条阻断策略后，查询策略失败问题
    其他改动说明: 1.添加策略时判断内核中策略是否大于200
                  2.调整核外获取策略时保存策略的buffer大小
  				3.删除核外策略链表的相关操作


author: zhoukangyu <zhoukangyu@kylinos.cn> 1.0.0-1.sm.08
changelog:
  - BUG#199175 流量管控审计策略不能下发编号大于200的问题
  -  add patch: sm-netflow-daemon-fix-netflow-cant-add-policy-out-of-200.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.0-1.sm.09
changelog:
  -Type: update
  -ID: [TASK#193496 BUG#207035 BUG#184900 BUG#206037]
  -SUG:NA
  -DESC: 1. 增加debuginfo包
         2. 解决在ipv4+udp场景下流量审计偶发审计日志缺失问题
         3. 解决大流量测试场景下内存二次释放导致服务异常问题 
         4. 卸载netflow_info模块偶发系统卡死问题
         5. 其他改动说明: 增加流量采集和端口信息转换模块调试日志部分
  -      add patch: sm-netflow-daemon-cancel-strip.patch
                    sm-netflow-daemon-fix-loss-of-audit-logs-occasionally.patch
                    sm-netflow-daemon-fix-rmmod-netflow-module-hang-occasionally.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.0-1.sm.10
changelog:
  -Type: update
  -ID: [BUG#215288]
  -SUG:NA
  -DESC: 1. 解决无效上下文中会sleeping问题
  -      add patch: sm-netflow-daemon-fix-invalid-context-sleeping-problem.patch


