# changelog

author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.v2601
changelog:
  - arm64/machine_t: Add 5000c and 5000c_e interfaces (liyouhong) [bug:477861]
  - KVM: arm64: vgic: fix REC vCPU handling in vgic load/put paths (Jackie Liu)
  - sched/kysched: Porting top task scheduler feature to klas (fangqiurong) [task:514421]
  - REDHAT: spec: speed up "cp -r" when it overwrites existing files. (Denys Vlasenko) [task:556803]
  - REDHAT: kernel.spec: avoid keeping two copies of vmlinux (Ondrej Mosnacek) [task:556803]
  - REDHAT: kernel.spec: Force remove tmp file (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: remove some temporary files early (Ondrej Mosnacek) [task:556803]
  - REDHAT: kernel.spec: Parallelize compression (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: fix standalone tools build (Jan Stancek) [task:556803]
  - REDHAT: kernel.spec: Use RPM_BUILD_NCPUS (Prarit Bhargava) [task:556803]
  - REDHAT: kernel.spec: Remove unnecessary output from pathfix.py (Prarit Bhargava) [task:556803]
  - arch/sw_64: Enable Livepatch Support for SW64 (wudandan) [task:578257]
  - sw64,loongarch: defconfig: Enable PSI and Memory Cgroup Options (Guopeng Zhang) [task:585947]
  - configs/x86: enable config for TPMI_POWER_DOMAIN and PLR_TPMI (Riwen Lu) [task:581451]
  - PHYTIUM: arm64: Phytium: Fix incorrect MSI compose logic on Phytium PS17064 SoCs (Li Mingzhe) [task:563613]
  - PHYTIUM: pci: phytium: Retry secondary-bus reset when link degrades (Li Tongfeng) [task:563613]
  - PHYTIUM: pci: phytium: Restore PCIe config space after hotrest (Xiao Cong) [task:563613]
  - PHYTIUM: arm64: phytium: Update the method to obtain CPU type for Phytium SoCs (Feng Jun) [task:563613]
  - PHYTIUM: arm64: phytium: Add support of reading cpu type for Phytium Socs (Feng Jun) [task:563613]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (James Morse) [task:527377]
  - fs/resctrl: Consider sparse masks when initializing new group's allocation (Reinette Chatre) [task:527377]
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode (Babu Moger) [task:527377]
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Babu Moger) [task:527377]
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled (Babu Moger) [task:527377]
  - MAINTAINERS: resctrl: Add myself as reviewer (Babu Moger) [task:527377]
  - x86/resctrl: Configure mbm_event mode if supported (Babu Moger) [task:527377]
  - fs/resctrl: Introduce the interface to switch between monitor modes (Babu Moger) [task:527377]
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled (Babu Moger) [task:527377]
  - fs/resctrl: Introduce the interface to modify assignments in a group (Babu Moger) [task:527377]
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group (Babu Moger) [task:527377]
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal (Babu Moger) [task:527377]
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir (Babu Moger) [task:527377]
  - fs/resctrl: Provide interface to update the event configurations (Babu Moger) [task:527377]
  - fs/resctrl: Add event configuration directory under info/L3_MON/ (Babu Moger) [task:527377]
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode (Babu Moger) [task:527377]
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() (Babu Moger) [task:527377]
  - x86/resctrl: Refactor resctrl_arch_rmid_read() (Babu Moger) [task:527377]
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode (Babu Moger) [task:527377]
  - fs/resctrl: Pass struct rdtgroup instead of individual members (Babu Moger) [task:527377]
  - fs/resctrl: Add the functionality to unassign MBM events (Babu Moger) [task:527377]
  - fs/resctrl: Add the functionality to assign MBM events (Babu Moger) [task:527377]
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC (Babu Moger) [task:527377]
  - fs/resctrl: Introduce event configuration field in struct mon_evt (Babu Moger) [task:527377]
  - x86/resctrl: Add data structures and definitions for ABMC assignment (Babu Moger) [task:527377]
  - fs/resctrl: Introduce interface to display number of free MBM counters (Babu Moger) [task:527377]
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain (Babu Moger) [task:527377]
  - fs/resctrl: Add resctrl file to display number of assignable counters (Babu Moger) [task:527377]
  - fs/resctrl: Introduce the interface to display monitoring modes (Babu Moger) [task:527377]
  - x86/resctrl: Add support to enable/disable AMD ABMC feature (Babu Moger) [task:527377]
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details (Babu Moger) [task:527377]
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource (Babu Moger) [task:527377]
  - x86/resctrl: Add ABMC feature in the command line options (Babu Moger) [task:527377]
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) (Babu Moger) [task:527377]
  - x86,fs/resctrl: Prepare for more monitor events (Tony Luck) [task:527377]
  - x86/resctrl: Remove the rdt_mon_features global variable (Tony Luck) [task:527377]
  - x86,fs/resctrl: Replace architecture event enabled checks (Tony Luck) [task:527377]
  - x86,fs/resctrl: Consolidate monitor event descriptions (Tony Luck) [task:527377]
  - fs/resctrl: Optimize code in rdt_get_tree() (Shaopeng Tan) [task:527377]
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters (Reinette Chatre) [task:527377]
  - arm64: cacheinfo: Provide helper to compress MPIDR value into u32 (James Morse) [task:527377]
  - cacheinfo: Add arch hook to compress CPU h/w id into 32 bits for cache-id (James Morse) [task:527377]
  - cacheinfo: Set cache 'id' based on DT data (Rob Herring) [task:527377]
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem (Qinyun Tan) [task:527377]
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex (Zeng Heng) [task:527377]
  - riscv: Replace function-like macro by static inline function (Björn Töpel) [task:587391]
  - gpio: pca953x: fix wrong error probe return value (Sascha Hauer) [task:587391]
  - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path (Shardul Bankar) [task:587391]
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [task:587391]
  - ASoC: fsl_sai: Add missing registers to cache default (Alexander Stein) [task:587391]
  - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 (Andrew Elantsev) [task:587391]
  - ALSA: usb-audio: Update for native DSD support quirks (Jussi Laako) [task:587391]
  - can: j1939: make j1939_session_activate() fail if device is no longer registered (Tetsuo Handa) [task:587391]
  - drm/amd/display: Fix DP no audio issue (Charlene Liu) [task:587391]
  - netfilter: nf_tables: avoid chain re-validation if possible (Florian Westphal) [task:587391]
  - powercap: fix sscanf() error return value handling (Sumeet Pawnikar) [task:587391]
  - powercap: fix race condition in register_control_type() (Sumeet Pawnikar) [task:587391]
  - bpf: Fix reference count leak in bpf_prog_test_run_xdp() (Tetsuo Handa) [task:587391]
  - bpf, test_run: Subtract size of xdp_frame from allowed metadata size (Toke Høiland-Jørgensen) [task:587391]
  - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN (Amery Hung) [task:587391]
  - bpf: Make variables in bpf_prog_test_run_xdp less confusing (Amery Hung) [task:587391]
  - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K (Yonghong Song) [task:587391]
  - riscv: uprobes: Add missing fence.i after building the XOL buffer (Björn Töpel) [task:587391]
  - x86/microcode/AMD: Select which microcode patch to load (Borislav Petkov (AMD)) [task:587391]
  - NFSD: Remove NFSERR_EAGAIN (Chuck Lever) [task:587391]
  - nfs_common: factor out nfs_errtbl and nfs_stat_to_errno (Mike Snitzer) [task:587391]
  - NFS: trace: show TIMEDOUT instead of 0x6e (Chen Hanxiao) [task:587391]
  - ALSA: ac97: fix a double free in snd_ac97_controller_register() (Haoxiang Li) [task:587391]
  - ALSA: ac97bus: Use guard() for mutex locks (Takashi Iwai) [task:587391]
  - arp: do not assume dev_hard_header() does not change skb->head (Eric Dumazet) [task:587391]
  - net: enetc: fix build warning when PAGE_SIZE is greater than 128K (Wei Fang) [task:587391]
  - net: usb: pegasus: fix memory leak in update_eth_regs_async() (Petko Manolov) [task:587391]
  - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (Xiang Mei) [task:587391]
  - HID: quirks: work around VID/PID conflict for appledisplay (René Rebe) [task:587391]
  - net: fix memory leak in skb_segment_list for GRO packets (Mohammad Heib) [task:587391]
  - bnxt_en: Fix potential data corruption with HW GRO/LRO (Srijit Bose) [task:587391]
  - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() (Zilin Guan) [task:587391]
  - net/mlx5e: Don't print error message due to invalid module (Gal Pressman) [task:587391]
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Di Zhu) [task:587391]
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Weiming Shi) [task:587391]
  - inet: ping: Fix icmp out counting (yuan.gao) [task:587391]
  - net: mscc: ocelot: Fix crash when adding interface under a lag (Jerry Wu) [task:587391]
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress (Alexandre Knecht) [task:587391]
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure (Alok Tiwari) [task:587391]
  - netfilter: nf_conncount: update last_gc only when GC has been performed (Fernando Fernandez Mancera) [task:587391]
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Zilin Guan) [task:587391]
  - gpio: pca953x: handle short interrupt pulses on PCAL devices (Ernest Van Hoecke) [task:587391]
  - gpio: pca953x: Add support for level-triggered interrupts (Potin Lai) [task:587391]
  - gpio: pca953x: Utilise temporary variable for struct device (Andy Shevchenko) [task:587391]
  - gpio: pca953x: Utilise dev_err_probe() where it makes sense (Andy Shevchenko) [task:587391]
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Fernando Fernandez Mancera) [task:587391]
  - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM (Marek Vasut) [task:587391]
  - ARM: dts: imx6q-ba16: fix RTC interrupt level (Ian Ray) [task:587391]
  - arm64: dts: add off-on-delay-us for usdhc2 regulator (Haibo Chen) [task:587391]
  - scsi: ufs: core: Fix EH failure after W-LUN resume error (Brian Kao) [task:587391]
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Wen Xiong) [task:587391]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (ChenXiaoSong) [task:587391]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (ChenXiaoSong) [task:587391]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (ChenXiaoSong) [task:587391]
  - NFS: Fix up the automount fs_context to use the correct cred (Trond Myklebust) [task:587391]
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [task:587391]
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Mikulas Patocka) [task:587391]
  - alpha: don't reference obsolete termio struct for TC* constants (Sam James) [task:587391]
  - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels (Sebastian Andrzej Siewior) [task:587391]
  - csky: fix csky_cmpxchg_fixup not working (Yang Li) [task:587391]
  - NFSD: NFSv4 file creation neglects setting ACL (Chuck Lever) [task:587391]
  - nfsd: set security label during create operations (Stephen Smalley) [task:587391]
  - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() (Trond Myklebust) [task:587391]
  - nfsd: convert to new timestamp accessors (Jeff Layton) [task:587391]
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Pedro Demarchi Gomes) [task:587391]
  - libceph: make calc_target() set t->paused, not just clear it (Ilya Dryomov) [task:587391]
  - libceph: reset sparse-read state in osd_fault() (Sam Edwards) [task:587391]
  - libceph: return the handler error from mon_handle_auth_done() (Ilya Dryomov) [task:587391]
  - libceph: make free_choose_arg_map() resilient to partial allocation (Tuo Li) [task:587391]
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (Ilya Dryomov) [task:587391]
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (ziming zhang) [task:587391]
  - wifi: avoid kernel-infoleak from struct iw_point (Eric Dumazet) [task:587391]
  - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping (Bartosz Golaszewski) [task:587391]
  - gpio: rockchip: mark the GPIO controller as sleeping (Bartosz Golaszewski) [task:587391]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Alex Deucher) [task:587391]
  - drm/pl111: Fix error handling in pl111_amba_probe (Miaoqian Lin) [task:587391]
  - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag (Alexander Sverdlin) [task:587391]
  - counter: 104-quad-8: Fix incorrect return value in IRQ handler (Haotian Zhang) [task:587391]
  - lib/crypto: aes: Fix missing MMU protection for AES S-box (Eric Biggers) [task:587391]
  - mei: me: add nova lake point S DID (Alexander Usyskin) [task:587391]
  - btrfs: always detect conflicting inodes when logging inode refs (Filipe Manana) [task:587391]
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() (Thomas Fourier) [task:587391]
  - atm: Fix dma_free_coherent() size (Thomas Fourier) [task:587391]
  - nfsd: provide locking for v4_end_grace (NeilBrown) [task:587391]
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew) [task:587391]
  - LoongArch: Fix the memset out-of-bounds issue (cuitao) [task:571753]
  - MAINTAINERS: Add reviewers for fs/resctrl (James Morse) [task:527377]
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl (James Morse) [task:527377]
  - x86/resctrl: Always initialise rid field in rdt_resources_all[] (James Morse) [task:527377]
  - x86/resctrl: Relax some asm #includes (Dave Martin) [task:527377]
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context() (Dave Martin) [task:527377]
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code (Dave Martin) [task:527377]
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h (James Morse) [task:527377]
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs (James Morse) [task:527377]
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h (James Morse) [task:527377]
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl (James Morse) [task:527377]
  - fs/resctrl: Add boiler plate for external resctrl code (James Morse) [task:527377]
  - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation (James Morse) [task:527377]
  - x86/resctrl: Split trace.h (James Morse) [task:527377]
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits (James Morse) [task:527377]
  - x86/resctrl: Add end-marker to the resctrl_event_id enum (James Morse) [task:527377]
  - x86/resctrl: Move is_mba_sc() out of core.c (James Morse) [task:527377]
  - x86/resctrl: Drop __init/__exit on assorted symbols (James Morse) [task:527377]
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point (James Morse) [task:527377]
  - x86/resctrl: Check all domains are offline in resctrl_exit() (James Morse) [task:527377]
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_" (James Morse) [task:527377]
  - x86/resctrl: Remove the limit on the number of CLOSID (Amit Singh Tomar) [task:527377]
  - x86/resctrl: Optimize cpumask_any_housekeeping() (Yury Norov [NVIDIA]) [task:527377]
  - cpumask: Add cpumask_{first,next}_andnot() API (Yury Norov [NVIDIA]) [task:527377]
  - find: Add find_first_andnot_bit() (Yury Norov [NVIDIA]) [task:527377]
  - cpumask: Relax cpumask_any_but() (Yury Norov [NVIDIA]) [task:527377]
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name (James Morse) [task:527377]
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers (James Morse) [task:527377]
  - x86/resctrl: Move get_config_index() to a header (James Morse) [task:527377]
  - x86/resctrl: Handle throttle_mode for SMBA resources (James Morse) [task:527377]
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl (James Morse) [task:527377]
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr (James Morse) [task:527377]
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code (James Morse) [task:527377]
  - x86/resctrl: Allow an architecture to disable pseudo lock (James Morse) [task:527377]
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions (James Morse) [task:527377]
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource (James Morse) [task:527377]
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code (James Morse) [task:527377]
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers (James Morse) [task:527377]
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC (James Morse) [task:527377]
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h (James Morse) [task:527377]
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers (James Morse) [task:527377]
  - x86/resctrl: Move monitor init work to a resctrl init call (James Morse) [task:527377]
  - x86/resctrl: Move monitor exit work to a resctrl exit call (James Morse) [task:527377]
  - x86/resctrl: Add an arch helper to reset one resource (James Morse) [task:527377]
  - x86/resctrl: Move resctrl types to a separate header (James Morse) [task:527377]
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code (James Morse) [task:527377]
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel (James Morse) [task:527377]
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() (James Morse) [task:527377]
  - x86/resctrl: Add helper for setting CPU default properties (James Morse) [task:527377]
  - x86/resctrl: Generate default_ctrl instead of sharing it (James Morse) [task:527377]
  - x86/resctrl: Add max_bw to struct resctrl_membw (James Morse) [task:527377]
  - x86/resctrl: Remove data_width and the tabular format (James Morse) [task:527377]
  - x86/resctrl: Use schema type to determine the schema format string (James Morse) [task:527377]
  - x86/resctrl: Use schema type to determine how to parse schema values (James Morse) [task:527377]
  - x86/resctrl: Remove fflags from struct rdt_resource (James Morse) [task:527377]
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list (James Morse) [task:527377]
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (James Morse) [task:527377]
  - kernfs: Move dput() outside of the RCU section. (Sebastian Andrzej Siewior) [task:527377]
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked(). (Sebastian Andrzej Siewior) [task:527377]
  - kernfs: Use RCU to access kernfs_node::name. (Sebastian Andrzej Siewior) [task:527377]
  - kernfs: Use RCU to access kernfs_node::parent. (Sebastian Andrzej Siewior) [task:527377]
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir(). (Sebastian Andrzej Siewior) [task:527377]
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry(). (Sebastian Andrzej Siewior) [task:527377]
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry(). (Sebastian Andrzej Siewior) [task:527377]
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn(). (Sebastian Andrzej Siewior) [task:527377]
  - x86/resctrl: Document the new "mba_MBps_event" file (Tony Luck) [task:527377]
  - x86/resctrl: Add write option to "mba_MBps_event" file (Tony Luck) [task:527377]
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories (Tony Luck) [task:527377]
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported (Tony Luck) [task:527377]
  - x86/resctrl: Compute memory bandwidth for all supported events (Tony Luck) [task:527377]
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event (Tony Luck) [task:527377]
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control (Tony Luck) [task:527377]
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags (Babu Moger) [task:527377]
  - x86/paravirt: Remove the WBINVD callback (Juergen Gross) [task:527377]
  - cacheinfo: Use of_property_present() for non-boolean properties (Rob Herring (Arm)) [task:527377]
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6 (Tony Luck) [task:527377]
  - cacheinfo: Don't opencode per_cpu_cacheinfo() (Nikolay Borisov) [task:527377]
  - x86/resctrl: Use kthread_run_on_cpu() (Frederic Weisbecker) [task:527377]
  - kernfs: annotate different lockdep class for of->mutex of writable files (Amir Goldstein) [task:527377]
  - PCI: Implement custom llseek for sysfs resource entries (Valentine Sinitsyn) [task:527377]
  - kernfs: sysfs: support custom llseek method for sysfs entries (Valentine Sinitsyn) [task:527377]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.1.v2601
changelog:
  - arm64: configs: Enable CONFIG_SENSORS_DMS5013A=m (Huiwen He) [task:425547]
  - OPENEULER: nfs, sunrpc: add enfs feature (ChenXiaoSong) [task:549271]
  - tpm: Compat with legacy TPM_MAX_DIGEST_SIZE (mengdehui) [task:589193]
  - selftests/damon: add tests for auto-tuning module (Enze Li) [task:525879]
  - mm/damon/sysfs: introduce priority sysfs interface (Enze Li) [task:525877]
  - mm/damon/auto-tuning: introduce DAMON-based auto-tunning module (Enze Li) [task:525877]
  - kalert: Rate limit BPF event reporting (Huiwen He) [task:526009]
  - kalert: Add KUnit tests (Huiwen He) [task:526009]
  - kalert: Add rate-limiting support for event reporting (Huiwen He) [task:526009]
  - kalert: Support Memory and PCIe RAS event reporting (Zheng Tan) [task:526009]
  - kalert: drop debug print in kfunc init path (Huiwen He) [task:526009]
  - sched/qos: only check cfs tasks in sched_qos_offline_wait (liwanwu) [task:579595]
  - Fix the missing syntax terminator error in the task_struct structure (Qingshuang Fu) [task:588353]
  - sched: Temporarily disable the DELAY_DEQUEUE scheduling feature (Bing Huang) [task:587045]
  - mm: Introduce page pool (Lincheng Yang) [task:587093]
  - mm: vmscan: shrink_all_memory optimization to optional (Lincheng Yang) [task:588185]
  - mm: vmscan: make shrink_all_memory as much as possible reclaim (Lincheng Yang) [task:588185]
  - add mmput_try_async (Lincheng Yang) [task:588175]
  - mm: Add pcp batch dynamic modification interface (WeiLixiang) [task:588175]
  - platform/x86: Lenovo X7 and X7H models do not use EC to control backlight. (zhangzihuan) [task:588189]
  - platform/x86: Lenovo adds X7 model board (zhangzihuan) [task:588189]
  - platform/x86: Lenovo adds LED controls for the speakers and microphone for X7h (Zihuan Zhang) [task:588189]
  - platform/x86: lenovo ec add support for X7H (huxiaoying) [task:588189]
  - platform/x86: fix spelling mistakes on lenovo ec led driver (zhangzihuan) [task:588189]
  - platform/x86: lenovo ec add led driver (zhangzihuan) [task:588189]
  - platform/x86: lenovo ec add support for X1 (Ai Chao) [task:588189]
  - configs: Enable KYLIN_EXTRA_BUTTON option (Riwen Lu) [task:531375, task:588159]
  - extra_button: Add ACPI extra button support (Riwen Lu) [task:458097, task:388697, task:531375, task:588159]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.2.v2601
changelog:
  - configs: update generic_defconfig (Jiangshan Yi) [task:588385]
  - Adjust the loading order of the RTC driver (liuyunchen) [bug:483945]
  - lib/raid6: Delete the RAID6_PQ_BENCHMARK config (sunliming) [task:585767]
  - lib/raid6: Optimizing the raid6_select_algo time through asynchronous processing (sunliming) [task:585767]
  - lib/raid6: Divide the raid6 algorithm selection process into two parts (sunliming) [task:585767]
  - LoongArch: drivers/pwm: export symbol for pwm_add_table (Tianrui Zhao) [task:577685]
  - ANOLIS: mm: use __GFP_MEMALLOC in vmemmap_alloc_block (Xu Yu) [task:590821]
  - NFS: Fix a deadlock involving nfs_release_folio() (Trond Myklebust) [task:590809]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Niklas Cassel)
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1 (Niklas Cassel)
  - exit: Sleep at TASK_IDLE when waiting for application core dump (Paul E. McKenney) [task:591267]
  - gve: defer interrupt enabling until NAPI registration (Ankit Garg) [task:589035] {CVE-2025-71156}
  - gve: Avoid rescheduling napi if on wrong cpu (Shailend Chand) [task:589035]
  - ublk: fix deadlock when reading partition table (Ming Lei) [task:589351] {CVE-2025-68823}
  - binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [task:573213] {CVE-2025-68239}
  - Adapt to the new version of Jenkins' changelog (Qingshuang Fu) [task:591019]
  - X86: enable CONFIG_HSR (taowei) [bug:487965]
  - configs/x86: enable config for CONFIG_BLK_DEV_UBLK (Yang Xiuwei) [bug:486253]
  - HYGON: EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors (allenli) [task:584695]
  - HYGON: x86/tsc: TSC adjust Backport x86 TSC adjust patch (allenli) [task:584695]
  - HYGON: EDAC/amd64: Bug fix for EDAC to correct the address translation on hygon family 18h model 4h (allenli) [task:584695]
  - HYGON: perf/x86/uncore: Correct the L3 PMU config for Hygon processors (Wenhui Fan) [task:586595]
  - blk-glitch: Enable the IO glitch detection function for ARM and X86 (liyouhong) [task:526187]
  - blk-glitch: Add the use of static_key in blk-glitch (liyouhong) [task:526187]
  - blk-glitch: Optimize the code structure to reduce performance overhead (liyouhong) [task:526187]
  - blk-glitch: Adjust blk_glitch_stats to blk_glitch_bio/rq_stats (liyouhong) [task:526187]
  - blk-glitch: Add timestamp recording during RQ requeueing (liyouhong) [task:526187]
  - blk-glitch: Add process filtering functionality (liyouhong) [task:526187]
  - blk-glitch: Add an attribute file to dynamically adjust the threshold (liyouhong) [task:526187]
  - blk-glitch: Add a timestamp record to the driver layer (liyouhong) [task:526187]
  - blk-glitch: Add a timestamp record to the block layer (liyouhong) [task:526187]
  - blk-glitch: Add io_glitch_detection tracepoint (liyouhong) [task:526187]
  - blk-glitch: Add the function of IO glitch detection timestamp statistics (liyouhong) [task:526187]
  - PHYTIUM: pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD (Cao Guanghui) [bug:477893]
  - PHYTIUM: pswiotlb: Adapt to the function iommu_pgsize() exported by EXPORT_SYMBOL_GPL() (Cao Guanghui) [bug:477893]
  - SCSI: Chang Linkdata HBA/RAID default value to m (zhanggenjian) [bug:487925, bug:486745]
  - inet: frags: drop fraglist conntrack references (Florian Westphal) [task:592299] {CVE-2026-23016}
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Zilin Guan) [task:592301] {CVE-2026-23038}
  - null_blk: fix kmemleak by releasing references to fault configfs items (Nilay Shroff) [task:592309] {CVE-2026-23032}
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts (Tetsuo Handa) [task:590799] {CVE-2026-22997}
  - macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [task:590131] {CVE-2026-23001}
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Duoming Zhou) [task:590069] {CVE-2025-68822}
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Gregory CLEMENT) [task:589963] {CVE-2025-71109}
  - ipv6: Fix use-after-free in inet6_addr_del(). (Kuniyuki Iwashima) [task:590053] {CVE-2026-23010}
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Eric Dumazet) [task:589961] {CVE-2026-23004}
  - sunway/config: Modify sunway configure. (liuyunchen) [bug:480863]
  - rust: update all rust drivers (zhoulong) [task:587131]
  - drivers/yunsilicon: Added support for the sw architecture (luoqing) [bug:489797]
  - rust: sync input drivers, include serio, tablet, rmi4 and touchscreen (zhoulong) [task:587131]
  - rust: sync input drivers, include keyboard, mouse, joystick and misc (zhoulong) [task:587131]
  - btrfs: Use module_subinit{_noexit} and module_subeixt helper macros (Youling Tang) [task:591007]
  - module: Add module_subinit{_noexit} and module_subeixt helper macros (Youling Tang) [task:591007]
  - mm: fix build with CONFIG_KYLIN_MM_PAGEPOOL=n (Lincheng Yang) [task:592653]
  - rust: sync leds and i3c drivers (zhoulong) [task:587131]
  - rust: sync nls and gpio drivers (zhoulong) [task:587131]
  - ksaf: fix argv UAF in ksaf_run_cmd (penghuaihe) [bug:407083]
  - x86_64: configs: Hygon request for confidential computing test (lifangxu) [task:589941]
  - sync hwmon rust drviers (zhoulong) [task:587131]
  - rust: sync reset and typec rust drviers (zhoulong) [task:587131]
  - rust: sync watchdog rust drivers (zhoulong) [task:587131]
  - sync rust drivers framework (zhoulong) [task:587131]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.3.v2601
changelog:
  - Add common NIC drivers (Jiangshan Yi) [task:588385]
  - Revert "arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB" (张浩) [task:595141]
  - uacce: implement mremap in uacce_vm_ops to return -EPERM (Yang Shen) [task:593785] {CVE-2026-23056}
  - intel_th: fix device leak on output open() (Johan Hovold) [task:593619] {CVE-2026-23091}
  - scsi: qla2xxx: Sanitize payload size to prevent member overflow (Jiasheng Jiang) [task:593775] {CVE-2026-23059}
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [task:593625] {CVE-2026-23073}
  - ANOLIS: sched/fair: Clear ->h_load_next when unregistering cgroup (Peng Wang) [task:590819]
  - dmaengine: xilinx: xdma: Fix regmap max_register (Anthony Brandon) [task:593801] {CVE-2025-71195}
  - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection (Francesco Lavra) [task:593793] {CVE-2025-71198}
  - tracing: Fix crash on synthetic stacktrace field usage (Steven Rostedt) [task:593781] {CVE-2026-23088}
  - leds: led-class: Only Add LED to leds_list when it is fully ready (Hans de Goede) [task:593803] {CVE-2026-23101}
  - net/sched: act_ife: avoid possible NULL deref (Eric Dumazet) [task:593787] {CVE-2026-23064}
  - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (Andrey Vatoropin) [task:593611] {CVE-2026-23084}
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (Robbie Ko) [task:593633] {CVE-2025-71194}
  - scsi: core: Wake up the error handler when final completions race against each other (David Jeffery) [task:593729] {CVE-2026-23110}
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Mark Rutland) [task:593733] {CVE-2026-23107}
  - vsock/virtio: Coalesce only linear skb (Michal Luczaj) [task:593727] {CVE-2026-23057}
  - uacce: fix isolate sysfs check condition (Chenghai Huang) [task:593771] {CVE-2026-23094}
  - vsock/virtio: cap TX credit to local buffer size (Melbin K Mathew) [task:593641] {CVE-2026-23086}
  - vsock/virtio: fix potential underflow in virtio_transport_get_credit() (Melbin K Mathew) [task:593641]
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593621] {CVE-2026-23061}
  - uacce: ensure safe queue release with state management (Chenghai Huang) [task:593789] {CVE-2026-23063}
  - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (Jamal Hadi Salim) [task:593799] {CVE-2026-23105}
  - uacce: fix cdev handling in the cleanup path (Wenkai Lin) [task:593725] {CVE-2026-23096}
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [task:593609] {CVE-2026-23099}
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [task:593635] {CVE-2026-23058}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Taeyang Lee) [task:593631] {CVE-2026-23060}
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima) [task:593627] {CVE-2026-23083}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [task:593607] {CVE-2026-23076}
  - irqchip/gic-v3-its: Avoid truncating memory addresses (Arnd Bergmann) [task:593591] {CVE-2026-23085}
  - regmap: Fix race condition in hwspinlock irqsave routine (Cheng-Yu Lee) [task:593595] {CVE-2026-23071}
  - net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [task:593593] {CVE-2026-23074}
  - udp: call skb_orphan() before skb_attempt_defer_free() (Eric Dumazet) [task:593555] {CVE-2026-23048}
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [task:593557] {CVE-2026-23089}
  - gue: Fix skb memleak with inner IP protocol 0. (Kuniyuki Iwashima) [task:593547] {CVE-2026-23095}
  - LoongArch: BPF: Enhance the bpf_arch_text_poke() function (Chenghao Duan) [task:593967]
  - LoongArch: BPF: No text_poke() for kernel text (Hengqi Chen) [task:519401]
  - LoongArch: BPF: Enable trampoline-based tracing for module functions (Chenghao Duan) [task:593967]
  - LoongArch: BPF: Adjust the jump offset of tail calls (Chenghao Duan) [task:593967]
  - LoongArch: BPF: Save return address register ra to t0 before trampoline (Chenghao Duan) [task:593967]
  - LoongArch: Enable exception fixup for specific ADE subcode (Chenghao Duan) [task:593967]
  - kvm: fix error initializing system register tables (Zongmin Zhou) [bug:491195]
  - netfilter: conntrack: warn when cleanup is stuck (Jakub Kicinski) [task:590215]
  - inet: frags: flush pending skbs in fqdir_pre_exit() (Jakub Kicinski) [task:590215] {CVE-2025-68768}
  - inet: frags: add inet_frag_queue_flush() (Jakub Kicinski) [task:590215]
  - inet: frags: avoid theoretical race in ip_frag_reinit() (Jakub Kicinski) [task:590215]
  - socket: Print pf->create() when it does not clear sock->sk on failure. (Kuniyuki Iwashima) [task:590215]
  - vsock: do not leave dangling sk pointer in vsock_create() (Eric Dumazet) [task:590215]
  - net: warn, if pf->create does not clear sock->sk on error (Ignat Korchagin) [task:590215]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.4.v2601
changelog:
  - rust: avoid vmlinux re-link on "make modules" with Rust drivers (long zhou) [task:587131]
  - rust: sync x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - fs: don't block write during exec on pre-content watched files (Amir Goldstein) [bug:480477]
  - crypto: hisi: disable in-tree ACC for out-of-tree deploy (chengang) [task:597259]
  - Revert "OPENEULER: irqchip/gic-v3: Fix one race condition due to NMI withdraw" (tanze) [task:597027]
  - configs: cleanup generic_defconfig (Jiangshan Yi) [task:588385]
  - Revert "rust: update x86 generic_defconfig for rust drivers" (Jiangshan Yi) [task:587131]
  - Revert "rust: Covert others nls drivers to rust" (周龙) [task:587131]
  - drivers/scsi/qedf: rust: Fix some function (wulinen) [task:587131]
  - rust: Fix the build_rust script (liuhaitian) [task:587131]
  - rust: Fix KEYBOARD_PINEPHONE driver (liuhaitian) [task:587131]
  - block/nbd: rust: type nbd pointers as NbdDevice in Rust path (sangliang) [task:587131]
  - block/nbd: rust: migrate generic wrappers to bindings (sangliang) [task:587131]
  - rust: update x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - rust: fix LED undefined ref and hidraw section mismatch (long zhou) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Fix incorrect implementation in the CAP11XX driver (liuhaitian) [task:587131]
  - rust: Fix incorrect implementation in rust driver (liuhaitian) [task:587131]
  - rust: Re-apply Rust drivers (liuhaitian) [task:587131]
  - rust: Re-apply Rust drivers (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Driver enablement prerequisites (liuhaitian) [task:587131]
  - rust: Enhance the INA209 driver security with Rust (liuhaitian) [task:587131]
  - rust: Standardize comments (liuhaitian) [task:587131]
  - rust: Enhance lineage-pem driver security with Rust (liuhaitian) [task:587131]
  - rust: fix unused function warnings in qlogic (gaoyinggang) [task:587131]
  - rust: Enhance emc6w201 driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance the tc654 driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance ina2xx driver security with Rust (liuhaitian) [task:587131]
  - rust: Driver enablement prerequisites (liuhaitian) [task:587131]
  - rust: Translate hwmon Rust/C driver comments from Chinese to English (lifengxiang) [task:587131]
  - rust: fix watchdog modpost errors and comment formatting (gaoyinggang) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs files (wulinen) [task:587131]
  - rust: Enhance the W83791D driver security with Rust (liuhaitian) [task:587131]
  - rust: hwmon: Convert LM85 driver to Rust and fix unused C symbols (wangyuxin) [task:587131]
  - block/nbd: rust: use shared bindings and port sock_shutdown, disk_init to Rust (sangliang) [task:587131]
  - rust: Keyborad driver fix (liuhaitian) [task:587131]
  - rust: Translate comments to English in shim (yijiqian) [task:587131]
  - rust: enable hwmon drivers (lifengxiang) [task:587131]
  - rust: Translate comments to English in Serio (yijiqian) [task:587131]
  - rust: mouse: Translate comments to English (yijiqian) [task:587131]
  - rust: kernel-helpers: Translate Chinese comments to English (wangyuxin) [task:587131]
  - rust: Enhance the tps23861 driver security with Rust (liuhaitian) [task:587131]
  - block/nbd: rust: port IDR helpers, nbd_send_cmd, and link_dead to Rust (sangliang) [task:587131]
  - rust: update Some *.shim.c comments (chenlongteng) [task:587131]
  - rust: Standardize Rust driver integration and fix errors (lifengxiang) [task:587131]
  - rust: update watchdog C comments (Haoze Wu) [task:587131]
  - rust: update binging wrappers comments (Haoze Wu) [task:587131]
  - rust: scsi/fnic: Move driver to scsi subdirectory (chentao) [task:587131]
  - rust: scsi/fnic: Expand driver core and protocol modules (chentao) [task:587131]
  - rust: fix bindings and shim for out-of-tree (O=) builds (long zhou) [task:587131]
  - drivers/rust/drivers/scsi: add qedf io (wulinen) [task:587131]
  - rust: scsi/fnic: Add queue descriptors and VNIC extensions (chentao) [task:587131]
  - rust: hwmon: Translate comments to English and add SPDX (wangyuxin) [task:587131]
  - rust: update kernel-helper comments (Haoze Wu) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs attr (wulinen) [task:587131]
  - rust: update typec driver && Some *.shim.c comments (chenlongteng) [task:587131]
  - rust: hwmon: Convert NCT7802 driver to Rust (wangyuxin) [task:587131]
  - rust: fix depmod Cycle detected (long zhou) [task:587131]
  - rust: hwmon: Convert LTC2945 driver to Rust (wangyuxin) [task:587131]
  - rust: Convert four drivers to Rust (chenlongteng) [task:587131]
  - rust: Standardize comments part4 (liuhaitian) [task:587131]
  - rust: Implement HID core functions in Rust (yijiqian) [task:587131]
  - rust: Convert the comments in bcm5974, cyapa_common/gen3/gen5 (input/mouse) into English (yijiqian) [task:587131]
  - rust: Convert hd3ss3220 & rts5453 & fsa4480 driver to Rust (chenlongteng) [task:587131]
  - rust/hwmon: Convert tmp401 driver to Rust (wangyuxin) [task:587131]
  - rust: iio_hwmon driver fix (liuhaitian) [task:587131]
  - rust: update drivers comments (lingfuyi) [task:587131]
  - rust: Enhance oxp-sensors driver security with Rust (liuhaitian) [task:587131]
  - rust: Enhance the smpro-hwmon driver security with Rust (liuhaitian) [task:587131]
  - rust: update watchdog driver comments (Haoze Wu) [task:587131]
  - rust: Add infrastructure for C2Rust migration of partial drivers (liuhaitian) [task:587131]
  - drivers/rust/drivers/scsi: add qedfs files-4 (wulinen) [task:587131]
  - rust: update driver shim comments (Haoze Wu) [task:587131]
  - rust: hwmon: Translate comments to English and add SPDX (wangyuxin) [task:587131]
  - rust: Covert others nls drivers to rust (lingfuyi) [task:587131]
  - rust: normalize qlogic and kernel-helpers comments to English (gaoyinggang) [task:587131]
  - rust: update joystick driver comments (long zhou) [task:587131]
  - rust: scsi/fnic: Extend SCSI, FCS and VNIC device layers (chentao) [task:587131]
  - rust: update unit_test,template and subsystems comments (long zhou) [task:587131]
  - rust: Convert cp932 NLS driver to Rust (lingfuyi) [task:587131]
  - rust: scsi/fnic: Add main driver, trace and debugfs modules (chentao) [task:587131]
  - rust: scsi/fnic: Add SCSI processing and FC services in Rust (chentao) [task:587131]
  - rust: scsi/fnic: Add FNIC core driver structures in Rust (chentao) [task:587131]
  - rust: Implement HID core functions in Rust (chenlongteng) [task:587131]
  - rust: Convert ADT7470 driver to Rust (lifengxiang) [task:587131]
  - rust: convert comments to English and add license headers (lifengxiang) [task:587131]
  - rust: convert comments to English and add license headers (lifengxiang) [task:587131]
  - rust: Convert NLS CP950 to Rust (lingfuyi) [task:587131]
  - rust: scsi/fnic: Add VNIC hardware abstraction layer in Rust (chentao) [task:587131]
  - rust: scsi/fnic: Add Rust driver framework infrastructure (chentao) [task:587131]
  - rust: update pwm driver comments (long zhou) [task:587131]
  - rust: i3c: Convert Chinese comments to English (chentao) [task:587131]
  - rust: Enhance corsair-cpro driver security with Rust (liuhaitian) [task:587131]
  - rust: Translate comments to English in drivers (lifengxiang) [task:587131]
  - rust: Add ignore information (liuhaitian) [task:587131]
  - rust: Enhance the da9052-hwmon driver security with Rust (liuhaitian) [task:587131]
  - rust: Standardize comments part3 (liuhaitian) [task:587131]
  - rust: Enhance the INA238 driver security with Rust (liuhaitian) [task:587131]
  - block/nbd: rust: port Netlink CONNECT and RECONFIGURE to Rust (sangliang) [task:587131]
  - block/nbd: rust: port Netlink DISCONNECT/STATUS and Debugfs to Rust (sangliang) [task:587131]
  - rust/qlogic: fix compilation errors in qlcnic 83xx Rust driver (Haoze Wu) [task:587131]
  - rust: update reset driver comments (long zhou) [task:587131]
  - rust: update rmi4 driver comments (long zhou) [task:587131]
  - rust: Add path compare and probe wrappers, fix hid_generic (yijiqian) [task:587131]
  - rust: Convert report/field registration and report parser to Rust (yijiqian) [task:587131]
  - rust: update gpio comments (long zhou) [task:587131]
  - rust: Add qlcnic context, DCB, minidump, SR-IOV and sysfs in Rust. (gaoyinggang) [task:587131]
  - rust: Convert report parser, free report, resolution multiplier and scan to Rust (yijiqian) [task:587131]
  - rust: Convert fetch_item func and hid_parser_global func in hid_core (yijiqian) [task:587131]
  - rust: update touchscreen drivers comments (long zhou) [task:587131]
  - rust: gpio: fix unused import and variable warnings in unit tests (sangliang) [task:587131]
  - block/nbd: rust: port module init and cleanup to Rust (sangliang) [task:587131]
  - block/nbd: rust: port device start, disconnect, and config_put to Rust (sangliang) [task:587131]
  - rust: Convert the hid_close_report function in hid_core (yijiqian) [task:587131]
  - block/nbd: export nbd_cmd_size for Rust shim tag_set init (sangliang) [task:587131]
  - block/nbd: rust: port blk-mq ops and socket add/reconnect to Rust (sangliang) [task:587131]
  - block/nbd: rust: port handle_reply, clear_req, handle_cmd to Rust (sangliang) [task:587131]
  - rust: Convert HID core driver to Rust (yijiqian) [task:587131]
  - drivers/rust/drivers/scsi: add qedf net (wulinen) [task:587131]
  - rust: Add Rust ethtool, init and io modules in qlcnic (gaoyinggang) [task:587131]
  - rust: Add full Rust qlcnic_main.rs and qlcnic_hw.rs (gaoyinggang) [task:587131]
  - rust: Convert hid-generic driver to Rust (yijiqian) [task:587131]
  - rust: convert hid_generic_probe (yijiqian) [task:587131]
  - rust: Building HID infrastructure (yijiqian) [task:587131]
  - rust: Convert input/mouse/cyapa Gen3/Gen5/Gen6 to Rust (yijiqian) [task:587131]
  - rust: qlogic: complete qla3xxx driver with MSI and ethtool support (Haoze Wu) [task:587131]
  - rust: netxen: Complete NetXen NIC driver Rust translation (Haoze Wu) [task:587131]
  - rust: netxen: Complete NetXen NIC driver Rust translation (Haoze Wu) [task:587131]
  - rust: i3c: Add hardware controller drivers in Rust (chentao) [task:587131]
  - rust: i3c: Add IBI and compatibility helper modules (chentao) [task:587131]
  - rust: i3c: Add transfer and control helper modules (chentao) [task:587131]
  - rust: i3c: Add address and device management helpers (chentao) [task:587131]
  - rust: i3c: Add master_ops and related modules (chentao) [task:587131]
  - rust: i3c: Add ccc_cmd and transfer helper modules (chentao) [task:587131]
  - rust: i3c: Add daa, sysfs and bus helper modules (chentao) [task:587131]
  - rust: Add unaligned access and enhance wrappers (yijiqian) [task:587131]
  - kvm: Fix virtcca VM failed to boot (Hao Ge) [task:596021]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.5.v2601
changelog:
  - spec: Add Module.kabi_* to kernel source package (Jiangshan Yi) [task:598429]
  - kabi: initialize kabi list and symvers for v11 2603 (Jiangshan Yi) [task:598429]
  - rust: fix type paths after bindings types moved to bindings::types (sangliang) [task:587131]
  - configs/x86: enable config for INTEL_IOMMU and INTEL_IOMMU_SVM (tanze) [bug:497331]
  - update-kabilist.sh: add sw64 support (Jiangshan Yi) [task:598429]
  - configs: update generic_defconfig (Jiangshan Yi) [bug:496751, task:599339, task:598999]
  - amd64: enable EDAC drivers (Wang Yan) [bug:496771]
  - PM: Implement s3 timeout wakeup interface (Riwen Lu) [task:501149, task:590639]
  - drm/nouveau: kill plymouth before remove efifb (Wang Jiang) [bug:476569, task:590639]
  - vt: add func to get fg_console vt process info (Lu Yao) [bug:469845, task:590639]
  - usb: Fix the touchscreen(248a:501f) not working after s3 wake-up (dengjie03) [bug:449043, task:590639]
  - drm/nouveau: Solve the occasional screen flickering issue when switching to the first tty on gt730. (Wang Jiang) [bug:470713, task:590639]
  - drm/nouveau: Resolve the issue of the stress test application crashing (Wang Jiang) [bug:395369, task:590639]
  - drm/atomic: prioritize the judgment of hotspot attributes (Lu Yao) [task:561737, task:590639]
  - input: Reduce the duration of close input devices (songxiebing) [bug:434335, task:590639]
  - ata: Disable the Stagered Spin-up function (xiongxin) [bug:449871, task:590639]
  - drm/amdgpu: skip suspend when shutdown (Lu Yao) [bug:451223, task:590639]
  - acpi: cix: Rename acpi_clk_get_hw() function (dengjie03) [task:456373, task:590639]
  - usb: quirks: Add NO_LPM quirk for Realtek USB3.2 Hub (Jiayi Li) [task:532899, task:590639]
  - usb: quirks: Add USB_QUIRK_NO_LPM for realtek usb 3.2 hub(0dba:0411). (huxiaoying) [bug:434615, task:590639]
  - smmu: fix stream id duplicate error when do func0 dma alias (songxiebing) [task:528911, task:590639]
  - tee: checking the legitimacy of pointer address (yangzhao) [bug:373431, task:590639]
  - tee: shm: Validate pointers in release path (wangchi) [bug:373431, task:590639]
  - drm/nouveau: Resolve the partial resolution display issue of the gt70 screen. (Wang Jiang) [bug:408849, task:590639]
  - drm/radeon: Solve the problem of the audio options not disappearing promptly after unplugging the HDMI audio. (Wang Jiang) [bug:410803, task:590639]
  - gpio: move phytium gpio pm ops to noirq phase (Riwen Lu) [task:513931, task:590639]
  - Revert "PHYTIUM: gpio: Optimize the logic of suspend and resume" (Riwen Lu) [task:513931, task:590639]
  - drm/amdgpu: do not skip vt switch by default (Shixiong Ou) [bug:406295, task:590639]
  - sched: enable optimize the context1 and spawn test cases of unixbench by default (Longlong Xia) [task:450572, bug:362845, task:590639]
  - sched: Optimize the context1 and spawn test cases of unixbench (liwanwu) [task:417269, task:590639]
  - drm/amd/display: Delay hotplug detection time (Shixiong Ou) [bug:391627, bug:365869, task:590639]
  - drm/amdgpu: Fix the issue where audio still shows as connected after unplugging HDMI on AMD Oland cards. (Wang Jiang) [bug:365681, task:590639]
  - Revert "percpu_counter: add a cmpxchg-based _add_batch variant" (zenghongling) [task:450572, task:388551, task:590639]
  - drm/amdgpu: fix amdgpu_drv compile error (Lu Yao) [task:475401, task:590639]
  - drm: drm for si oland amdgpu (yangdeyi) [task:462438, task:590639]
  - mm: add max mode support for kymem turbo (Enze Li) [bug:490185]
  - machine_t: Add PHYTIUM D3000M interface (Riwen Lu) [task:453481, task:590639]
  - rust: update x86 generic_defconfig for rust drivers (zhoulong) [task:587131]
  - LoongArch: Add crash dump support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add ELF binary support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add EFI binary support for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add preparatory infrastructure for kexec_file (Youling Tang) [task:598607]
  - LoongArch: Add struct loongarch_image_header for kernel (Youling Tang) [task:598607]
  - mptcp: track fallbacks accurately via mibs (Paolo Abeni) [task:598609]
  - selftests: mptcp: add a check for 'add_addr_accepted' (Gang Yan) [task:598609]
  - selftests: mptcp: add checks for fallback counters (Gang Yan) [task:598609]
  - mptcp: allow overridden write_space to be invoked (Geliang Tang) [task:598609]
  - selftests: mptcp: close server IPC descriptors (Geliang Tang) [task:598609]
  - selftests: mptcp: close server file descriptors (Geliang Tang) [task:598609]
  - selftests: mptcp: join: allow more time to send ADD_ADDR (Matthieu Baerts (NGI0)) [task:598609]
  - selftests: mptcp: join: tolerate more ADD_ADDR (Matthieu Baerts (NGI0)) [task:598609]
  - mptcp: make ADD_ADDR retransmission timeout adaptive (Geliang Tang) [task:598609]
  - mptcp: add TCP_MAXSEG sockopt support (Geliang Tang) [task:598609]
  - tcp: add tcp_sock_set_maxseg (Geliang Tang) [task:598609]
  - mptcp: sockopt: drop redundant tcp_getsockopt (Geliang Tang) [task:598609]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.6.v2601
changelog:
  - security/ksaf: modify readonly mount hook para in fsmount (zhubing) [bug:499961]
  - rust: fix cyapa PM ops with CONFIG_RUST_DRIVER disabled (yijiqian) [task:587131]
  - Revert "rust: Enable configuration items" (周龙) [task:603115]
  - 3rd/mwv207: fix compile error (Lu Yao) [task:603117]
  - configs: enable auto-tuning on x86 and arm64 platforms (Enze Li) [task:525875]
  - rust: Add conditional compilation (liuhaitian) [task:587131]
  - configs: update generic_defconfig (Jiangshan Yi) [task:602241]
  - rust: Add conditional compilation (liuhaitian) [task:587131]
  - rust: Enable configuration items (liuhaitian) [task:587131]
  - ksaf: add ksaf_file_pre_open_fname hook (penghuaihe) [bug:500253]
  - rust: reduce mouse C glue by preferring Rust implementations (yijiqian) [task:587131]
  - kabi: Add kabi extended symvers check (Jiangshan Yi) [task:443413]
  - Documentation: remove sensitive wording from arcnet-hardware.rst (Haofeng.Li) [task:601483]
  - rust: reduce compiled C code by preferring Rust implementations (yijiqian) [task:587131]
  - configs/arm64: enable S3 timeout wakeup option (Riwen Lu) [task:590639]
  - rust: fix issues when built as module (CONFIG_SENSORS_K10TEMP=m) (gaoyinggang) [task:587131]
  - rust: fix SP5100 TCO WDT driver build issue (Haoze Wu) [task:587131]
  - SUNWAY: fix mmap_base exceeding Java assertion address (Gu Yuchen) [task:597783]
  - configs: enable SCSI_DH_ALUA (zhanggenjian) [bug:499437]
  - watchdog: Enable CONFIG_SOFT_WATCHDOG as module (wudandan) [bug:500569]
  - sched/kysched: Enable top task scheduler feature to klas-2603 (fangqiurong) [task:514421]
  - security/ksaf: add readonly mount hook in fsmount (zhubing) [bug:499961]
  - configs: enable CONFIG_RDMA_RXE and CONFIG_RDMA_SIW for RDMA test (Qingshuang Fu) [bug:499355]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.7.v2601
changelog:
  - config: re-enable CONFIG_NETKIT for generic_defconfig (Yun Lu) [bug:505271]
  - selftests: add damon tests to kernel-selftests package (Haofeng.Li) [bug:502773]
  - rust: make i3c Rust-only in Rust mode (chentao) [task:587131]
  - rust: decouple fnic/i3c objects and harden linker selection (chentao) [task:587131]
  - configs: enable CONFIG_ACPI_APEI_EINJ for test (Qingshuang Fu) [bug:504223]
  - configs: Enable the ECDH algorithm config on the arm64 platform (chengang) [task:600123]
  - loongarch/config: Enable SDF module compilation option (mengdehui) [bug:503421]
  - rust: reduce typec C glue by preferring Rust implementations (chenlongteng) [task:587131]
  - block/nbd: rust: fix GPF when NBD is loaded as module (sangliang) [task:587131]
  - block/nbd: rust: fix config layout, built-in module check, blksize_bits (sangliang) [task:587131]
  - mm: introduce blacklist mechanism to kymem turbo (Enze Li) [bug:502177]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.8.v2601
changelog:
  - configs: enable CONFIG_DNOTIFY (Jiangshan Yi) [bug:505255]
  - configs: enable CONFIG_FPROBE (yangfeng) [bug:506633]
  - configs: enable CONFIG_ACPI_APEI_EINJ for test on arm64 (Qingshuang Fu) [bug:506005]
  - rust: hid: use pr_debug for trace logs and fix printk loglevel prefixes (yijiqian) [bug:505099]


author: Jiangshan Yi <yijiangshan@kylinos.cn> - 6.6.0-40.9.v2601
changelog:
  - sched: fix the modification to the struct of rq (Zeng Chi) [task:599029]
  - add config for cpuidle-haltpoll (Zeng Chi) [task:599029]
  - fix abi for cpuidle-haltpoll (Zeng Chi) [task:599029]
  - net: automatically set sk_ll_usec to 100 for netperf/netserver (luoxuanqiang) [bug:488163]


author: hexiaowen <hexiaowen@huawei.com> - 29-14
changelog:
  - add python-rpm-macros fpc-srpm-macros ghc-srpm-macros gnat-srpm-macros
  - nim-srpm-macros ocaml-srpm-macros openblas-srpm-macros perl-srpm-macros


author: xujing <xujing125@huawei.com> - 30-46
changelog:
  - add the scanning path of the rpath
    fix the ELF file cannot be found due to escape of '\'
    excute brp_chrpath before arch_install_post


author: yueyuankun <yueyuankun@kylinos.cn> - 30-56.p01
changelog:
  - Type:update
  - ID:TASK#204872
  - SUG:NA
  - DESC:support kylinos
         fix the issue of missing changelog during compilation
         add some macros in macros and macros.python files


author: andy lau <liuyang01@kylinos.cn> - 30-57.p01
changelog:
  - Type:update
  - ID:TASK#425069
  - SUG:NA
  - DESC:[backport] Fix for "undefine _auto_set_build_XX" usage


author: Jackie Liu <liuyun01@kylinos.cn> - 1.0-1
changelog:
  - inject: add missing -h args
  - filesnoop: fix crash when -o OPEN
  - Add dbstat support
  - Add ustat support
  - Add inject support
  - tcplinks: fix typo for helps
  - Add icstat support
  - memleak: Tiny fixes
  - memleak: Fix memory leak
  - Fix memory leak when using getline()
  - dbslower: Fixes build errors caused by uninitialized variables in bpf program
  - Add dbslower support
  - Add ugc support
  - Add mysqld-qslower support
  - javagc: fix some attach errors
  - Add uflow support
  - ucalls: Correct 'phpccalls' to 'phpcalls'
  - Add cachetop support
  - biotop/filetop: Fix 'count' print count
  - Add get_uid_name() implementation
  - Add trace support
  - Display UID in username format
  - libbpf-tools: update arm vmlinux with missing perf_event, BPF_PROG_TYPE_PERF_EVENT
  - setuids: rename UID to SU_UID
  - filegone: convert errno to error string
  - filegone: Increase the buffer for filename
  - filegone: Add return code support
  - Expand the print width of pid
  - libbpf-tools/filelife: Check btf struct field for CO-RE
  - tplist: Use tracefs_path()
  - Add reset-trace support
  - Tiny fixes
  - libbpf-tools/tcprtt: use the same options to filter IPv4 and IPv6 addresses
  - tools, libpf-tools: increase IPv6 address width to 39 characters
  - Fix memory leak in capable.c
  - libbpf-tools/execsnoop: fix ret type of bpf_probe_read_user*.
  - libbpf-tools: add block_io_{start,done} tracepoints support to bio tools
  - libbpf-tools: fix tcppktlat show wrong ports
  - Tiny fix we meet
  - funcslower/profile/stackcount: Add folded format output
  - filegone: rewrite filegone base on unlinksnoop
  - offwaketime/wakeuptime: Add folded format output
  - offcputime: Add folded format output
  - Add offwaketime support
  - offcputime: Change the tracepoint mode to kprobe to repair the calltrace display
  - ketones: reword new software tagline
  - dcstat: fix macro err defined
  - Add uthreads support
  - Fix potential double fclose warning
  - Use bpf_core_filed_exist for bpf_ringbuf exist
  - Fix allocating and freeing memory in {probe,free}_usdt_notes
  - Add shmsnoop support
  - uobjnew: Adjust this program to better match the BCC version
  - Add uobjnew support
  - Add tplist support
  - package: Prompt for compilation dependencies
  - Add unlinksnoop support
  - Add dcstat support
  - core_fixes: Fix __builtin_preserve_enum_value not defined issue
  - libbpf-tools: Allow tcppktlat to run on old kernels
  - libbpf-tools: Add support for IPv6 to tcprtt.
  - libbpf-tools: fallback to tracefs mount point if debugfs is not mounted
  - libbpf-tools: add filter for biosnoop
  - cpufreq: read initial freqs only of valid links
  - libbpf-tools: Avoid virtual memory area [uprobes] warning
  - statsnoop: print parent pid
  - opensnoop: print parent pid
  - filesnoop: drop opensnoop and statsnoop in filesnoop
  - Revert "statsnoop: Remove specially designed statsnoop"
  - filesnoop: extend parent pid
  - debian rules to package ketones
  - prepare for make project
  - statsnoop: Remove specially designed statsnoop
  - libbpf: Support POSIX regular expressions for multi kprobe
  - Add tcprst support
  - Add ucalls support
  - uprobe_helpers: Fix path acquisition function
  - libbpf-tools: syscount: Add syscall lookup table for arm64 and riscv
  - Add profile support
  - Add tcpdrop support
  - tcplinks: use ncurses for draw UI
  - libbpf: tiny fixup of libbpf
  - Add tcpsubnet support
  - Add tcplinks support
  - libbpf: don't attach to non-attachable kprobes
  - Add stackcount support
  - libbpf: don't need zero res in exit path
  - libbpf: available_filter_functions_addrs for filter functions
  - Fix the function to get the sk_protocol
  - tcpaccept: Delete redundant code to make more compact
  - tcp: Delete unnecessary parameters
  - Add zfsslower support
  - Add zfsdist support
  - Add funcslower support
  - signal: fix undefined behavior of signal handler
  - commons: Simplified time_since_start function
  - Add tcpaccept support
  - Makefile: fix compile error for bpflist
  - Add tcpretrans support
  - ttysnoop: Implement new way for CO-RE
  - libbpf: rewrite kprobe.multi filter with available_filter_functions
  - Add funccount support
  - Resolve compilation errors on loongarch
  - libbpf: support record count of functions has been traced
  - Makefile: bpflist: remove unnecessary compilation dependencies
  - libbpf: filter by available functions
  - Add vfscount support and cleanup unused variable
  - Add README
  - Add filesnoop support
  - Add bpflist support
  - Add stacksnoop support
  - Add writeback support
  - vfsstat: fix exit value when SIGINT
  - Add threadsnoop support
  - trace_helpers: fix proc maps with [uprobes] entry
  - Add syncsnoop support
  - Cleanup vmlinux and others
  - loads: register perf event on all cpus
  - klockstat: fix running on un-implement down_read_interruptible kernel
  - loads: Remove unnecessary assign 0 operations
  - readahead: fix CO-RE on running without fentry
  - memleak: fix kmalloc and kmalloc_node's hook running on old kernel
  - Makefile: fix foo.bpf.o build without foo.h
  - libbpf-tools: Add loongarch support
  - libbpf-tools: use fentry in funclatency
  - libbpf-tools: Filter with kprobe blacklist for kprobe_exists() api.
  - libbpf-tools/memleak: support ksyms and syms_cache
  - libbpf-tools/memleak: make it run on old kernel
  - change storage type of helper err to int
  - libbpf-tools/memleak: remove unused arg "PERCPU"
  - libbpf-tools/memleak: fix 'show allocs'
  - Makefile: fix binary depends on includes file update
  - ttysnoop: fix co-re on struct iov_iter hasn't ubuf
  - loads: sample_period works on ns, convert to second
  - Add setuids support
  - Sync upstream bpftool libbpf blazesym without submodules
  - Redefine the global name of the project and its representative meanings
  - Add ttysnoop support
  - Move various tracing programs to his directory
  - Move binary to ./bin directory
  - Spit includes and libs into directory
  - Add pidpersec support
  - Add naptime support
  - Add cpuwalk support
  - Add dcsnoop support
  - Add loads support
  - Add swapin support
  - Add tcppktlat support
  - Add javagc support
  - Add tcpstates support
  - Add tcprtt support
  - Add tcplife support
  - tcpconnect: Drop unused ts_us
  - Add tcpconnect support
  - Fix some string features must be done in _GNU_SOURCE
  - Fix potential early exit of the program
  - Add tcpsynbl support
  - Add tcptop support
  - Add tcptracer support
  - Use strftime_now for cleanup
  - Add vfsstat support
  - Use BPF_CORE_READ_STR_INTO to instead of bpf_probe_read_kernel_str
  - Add syscount support
  - Merge changes If1eb510b,I220234bb
  - tcpconnlat: Remove entries from map in all cases
  - execsnoop: add execveat support
  - Fix load of ringbuffer is not support
  - Add tcpconnlat support
  - Add statsnoop support
  - Add solisten support
  - Add support slabratetop
  - Add sigsnoop support
  - Add support readahead
  - Add opensnoop support
  - update submodules url into gitee.com
  - Add support oomkill
  - Add support mountsnoop
  - Use argp_parse_pid and do_process_running wrapper for cleanup
  - memleak: use blazesym for show symbols
  - Add support blazesym
  - Makefile: Generate a symlink for different ebpf programs
  - Add support memleak
  - Add support mdflush
  - Update submodules
  - Add support llcstat
  - Add support ksnoop
  - rename bpf_map_lookup_and_delete to bpf_map_lookup_and_delete_elem
  - Add support klockstat
  - biostacks: fix wrong function name of __blk_account_io_start
  - biosnoop.bpf: fix run by inline functions
  - cpufreq: fix typo from raw_btf to raw_tp
  - biostacks: support run on kernel without btf
  - offcputime: work on kernel without btf
  - fsdist: fix crash on kernel without bss support
  - cpufreq: work on kernel without btf
  - bitesize: fix run on kernel without btf
  - biosnoop: support kernel without fentry
  - numamove: fix initial of num and latency
  - Add fsslower support
  - Drop libbpf_set_strict_mode() calls
  - Add support fsdist
  - bitesize: add missing partitions__load
  - Add support filetop
  - Use bpf_get_current_ns_pid_tgid for WSL or container
  - Add support filelife
  - Add support exitsnoop
  - Add drsnoop support
  - Add support capable
  - Add support cachestat
  - Add support bitesize
  - Add support biostacks
  - Add support biosnoop
  - Add support biopattern
  - Add support biolatency
  - Add support bindsnoop
  - Add support cpufreq
  - Add biotop support
  - Add support funclatency
  - Add gethostlatency support
  - Add bash readline support
  - numamove: only work for numa node > 1
  - runqlen: Add run queue length support
  - execsnoop: convert to use bpf_core_read_xxx
  - Add numasched support
  - execsnoop: works on !(tracepoint/syscalls)
  - numamove: fixes BPF_KRETPROBE for kretprobe
  - update vmlinux.h
  - Add numamove support
  - Fix wrong patch of uapi/linux/bpf.h
  - Add wakeuptime support
  - Add execsnoop support
  - Add support offcputime
  - Add support cpudist
  - Add support runqueue-latency
  - Add support hardirqs
  - use warning instead of fprintf stderr
  - Add softirqs support
  - runqslower support thread id
  - Add .gitreview for git-review
  - Add README.md for build binary
  - Add runqslower tools
  - Init submodules
  - Initial LICENSE


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-2
changelog:
  - softirqs: Fix the naming error
  - Revert "ksnoop: use bpf_get_func_ip() where helper is available"
  - Add criticalstat support
  - ttysnoop: fix iov_iter.ubuf CO-RE mismatch
  - libbpf-tools/gethostlatency: Resolve the path of libc for different namespaces
  - libbpf-tools: Fix misaligned pointer accesses in exitsnoop
  - libbpf-tools/filelife: Fix error tracking caused by failed unlink
  - Added support for f2fs to fsdist and fsslower tools.
  - libbpf-tools: Check biolatency tracepoints using BTF
  - libbpf-tools: Add s390x support
  - libbpf-tools: Fix bindsnoop types usage
  - libbpf-tools: Fix -Wformat errors for 32bit systems
  - ksnoop: use bpf_get_func_ip() where helper is available
  - use tid instead of tgid
  - Add sofdsnoop support
  - spec: mark ketones need clang >= 10
  - package ketones for RPM


author: Youling Tang <tangyouling@kylinos.cn> - 1.0-3
changelog:
  - Add adaptive readahead support
  - Add wqlat support
  - libbpf-tools: fix syscall tracepoints
  - Fix bashreadline
  - libbpf-tools/offcputime, futexctn: Fix incorrect DSO information in stacktrace
  - libbpf-tools/memleak: Add verbose option
  - libbpf: Some advanced features customized for ketones
  - Update libbpf to 1.4.0
  - Add netqtop support
  - Add kvmexit support
  - Add dddos support
  - cpuunclaimed: Add cpuunclaimed support
  - libbpf-tools/ksnoop: perf buffer fix unnecessary junk bits output
  - libbpf-tools: Fix bindsnoop for kernel v6.6+
  - libbpf-tools: Fix trace_helper symbol search bug
  - libbpf-tools/biotop: Add PID filter support
  - libbpf-tools: Fix misaligned pointer accesses in drsnoop
  - libbpf-tools: Fix misaligned pointer accesses in tcptracer
  - libbpf-tools: Fix misaligned pointer accesses in tcpstates
  - libbpf-tools: Fix misaligned pointer accesses in filegone
  - libbpf-tools: Fix misaligned pointer accesses in tcplife
  - libbpf-tools: Fix misaligned pointer accesses in tcpconnect
  - libbpf-tools: Fix misaligned pointer accesses in statsnoop
  - libbpf-tools: Fix misaligned pointer accesses in runqslower
  - libbpf-tools: Fix misaligned pointer accesses in opensnoop
  - libbpf-tools: Fix misaligned pointer accesses in gethostlatency
  - libbpf-tools: Fix misaligned pointer accesses in fsslower
  - libbpf-tools: Fix misaligned pointer accesses in filelife
  - libbpf-tools: Fix misaligned pointer accesses in biosnoop
  - Add futexctn support
  - libbpf-tools/memleak: correct key size of memptrs
  - Sync ketones.spec to v1.0-2


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-4
changelog:
  - tcpmemory: Fix -P filter
  - trace: Fix Segmentation fault
  - icstat: Fix -i error
  - softirqs: Fix compilation optimization issues
  - Correct copyright statements across multiple files
  - retsnoop: capture call stacks of kernel functions that return errors
  - Use kfunc bpf_log2l instead
  - softirqs: Fix R1 unbounded memory access
  - ugc: Fix usdt: no USDT notes section (.note.stapsdt) found in '/usr/bin/python3.11'
  - uflow: Fix get binary file path failed
  - ucalls: Fix get binary file path failed
  - ustat: Fix get binary file path failed
  - ustat: Ability to add Python3
  - provide string helpers
  - Update errno functions
  - Use newer version log2 function
  - Update .clang-format
  - fslatency: Use bpf buffer for compatibility with perf and ring buffer
  - Add fslatency support


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-6
changelog:
  - blk-glitch: Add IO glitch detection function
  - offcpureason: Add tool to trace off-CPU reasons
  - wqlat: Add target function
  - wqlat: Fix the data missing issue
  - compiler: add __must_nonnull attribute and apply to bpf_buffer functions
  - compiler_types.h: add "auto" as a macro for "__auto_type"
  - chmodsnoop: Add tool to trace chmod() syscalls
  - fsdist/fslatency/fsslower: Add fuse support
  - trace_helpers: Use legacy probe attach mode for better compatibility
  - readahead: Fix eBPF program loading and attachment mismatch
  - Add funcratio support
  - filesnoop: improve code quality and fix bugs
  - tcplife: refactor port filtering with inline helper function
  - build: add compile_commands.json generation support
  - syscall_helpers: Update syscall_names_x86_64
  - sofdsnoop: fix BPF verifier error and refactor code
  - execsnoop: improve code quality and formatting consistency
  - udpdrop: Delete unused judgments
  - build: avoid creating empty binary file when cargo is missing
  - udpdrop: Fix the issue where qdisc packet loss has no stack trace
  - tcpdrop: Fix the issue where qdisc packet loss has no stack trace
  - build: streamline build system and improve maintainability
  - build: refactor library system to use static archive
  - build: optimize compilation performance and binary size
  - dddos: Fix dddos no-data issue
  - deadlock: Add lock/unlock name set
  - trace_helpers: Fix double free bug
  - build: add static compilation support with STATIC=1 flag
  - bpflist: replace strncpy with snprintf to fix truncation warning
  - wakeuptime: optimize argument parsing and error handling
  - string_helpers: cleanup and modernize code
  - memory_helpers: refactor ensure_mem function
  - btf_helpers: refactor with C99 features and improve code clarity
  - argp_helpers: simplify parsing functions and improve error handling
  - uprobe_helpers: modernize code with GNU C features and cleanup attributes
  - pattern_helpers: modernize resource management with automatic cleanup
  - vector: replace realloc with reallocarray for overflow protection
  - numa_helpers: replace sscanf with manual parsing for complex NUMA formats
  - trace_helpers: apply RAII and GNU99 optimizations
  - git-review: drop obsolete .gitreview config
  - filesnoop: add missing Makefile for symlink definitions
  - bpflist: reimplement using BPF iterator for accurate process tracking
  - bpftop: refactor BPF program type classification system
  - memleak: migrate allocation tracking to vector.h
  - vector: introduce vector.h and migrate multiple tools to use it
  - tcpdrop/udpdrop: add fentry support with runtime detection
  - system_helpers: move detect_language function for better modularity
  - commons: add variadic support to INIT_TOOL_COMPONENTS macro
  - commons: integrate skeleton cleanup into INIT_TOOL_COMPONENTS
  - udpdrop: add UDP packet drop tracing tool
  - reset-trace: Fix the infinite loop
  - include: Fix list_syscalls() prototype return type
  - opensnoop: add creation-only filtering support
  - build: rename ARCH to Arch in config.mk
  - softirqslower: add Rust-based eBPF tool for softirq latency monitoring
  - build: improve Rust tool detection and cargo availability handling
  - nfssnoop: Add more prominent error log prompts
  - ksnoop: Remove useless and white lines
  - ksnoop: Fix two invalid access to map value (#5361)
  - runqslower: add -c option to filter by process name prefix
  - ttysnoop: clean up and optimize code structure
  - runqueue-latency: clean up argument parsing and error handling
  - funcslower: refactor probe function generation using unroll macro
  - runqslower: simplify error handling and remove unnecessary cleanup logic
  - retsnoop-rs: add root privilege check before main execution
  - retsnoop: simplify Linux source path detection
  - retsnoop: revert incorrect use of bpf_map__set_max_entries()
  - execsnoop: switch from perf buffer to bpf_buffer
  - bpf: use min_t macros for histogram slot boundary checking
  - bpf: optimize string comparison with unified compat_bpf_strncmp
  - retsnoop-rs: implement professional kernel symbol resolution and stack formatting
  - stack: refactor time calibration to use OnceLock and functional style
  - build: fix BPF tool compilation dependency order
  - retsnoop-rs: implement complete BPF tracing system with dual comm support
  - build: add Rust tool support and retsnoop-rs integration
  - nfssnoop: migrate to CO-RE compatible BTF structures
  - core_fixes: improve code style and formatting consistency
  - intrusiondetec: Fix bpf_program__attach_xdp failed
  - dirwatch: Fix missing attach_mode setting in the BPF function for vfs_open
  - deadlock: Add lib set
  - libs: Fix the mismatch error
  - strings: add unified boolean-to-string and plural helpers
  - nfssnoop: add NFS client operations tracing tool
  - retsnoop: fix uninitialized a2l causing invalid free in addr2line__free
  - Add udppktlat support
  - tcplinks: add automatic PID correction for TCP connections
  - Add iowait support
  - tcplinks: simplify TCP connection tracking implementation
  - tcplinks: update man page to reflect current functionality
  - tcplinks: enhance TCP connection monitoring with complete state machine
  - bpftop: optimize TUI rendering performance and fix header display
  - tcplinks: rewrite as interactive TUI monitoring tool
  - bpftop: simplify TUI rendering logic and remove redundant color handling
  - bpftop: enhance program type detection with detailed categorization
  - bpftop: optimize filtering and sorting algorithms for better performance
  - bpftop: fix memory corruption caused by mismatched array sizes
  - man: add manual page for bpftop
  - bpftop: improve graph scaling logic for data visualization
  - bpftop: fix initial sorting with optimized baseline sampling
  - bpftop: remove non-TUI mode and filtering system to simplify architecture
  - bpftop: implement intelligent sort pausing during navigation
  - bpftop: implement comprehensive graph mode with time-series visualization
  - bpftop: add interactive TUI mode with UTF-8 support
  - bpftop: add real-time eBPF program monitoring tool
  - zombiememcgstat: Fix R8 invalid mem access 'scalar'
  - KYLIN: update the man page of mptcpify
  - docs: update development environment requirements in contributing guides
  - opensnoop: add caller stack trace functionality
  - opensnoop: implement single-event full-path reconstruction
  - KYLIN: update mptcp tool
  - docs: add contributing guides in both English and Chinese
  - license: correct LICENSE and debian/copyright to LGPL-3+
  - debian: update build and runtime dependencies
  - build: preserve BPF skeleton files for debugging purposes
  - deb: fix the issue preventing binary .deb generation on LoongArch platforms
  - trace_helpers: replace manual ELF symbol parsing with libdw interface
  - offcputime: add support for multiple PIDs and TIDs
  - offcputime: rewrite BPF program using tracepoint sched:sched_switch
  - log2: modernize implementation with type-safe dispatch and clang compatibility
  - compiler_types: simplify attribute macro definitions
  - system: implement variadic strftime_now with automatic buffer sizing
  - tcprtt: modernize BTF usage and improve exit handling
  - numamove: adopt modern resource management and runtime BSS detection
  - libs: fix resource leaks in FILE pointer operations
  - refactor: consolidate header files and improve code organization
  - libs: refactor commons.h by extracting helper functions to dedicated modules
  - bpf_buffer: add macro overloading for bpf_buffer__new function
  - tcpdrop: add support for dumping TCP drop reasons
  - libbpf-tools: sigsnoop: display target process's comm
  - tools: unify component initialization with INIT_TOOL_COMPONENTS
  - include: enhance signal handling with type safety and compilation checks
  - commons: introduce modular initialization macros for system tools
  - futexslower: implement new eBPF tool for tracing slow futex operations
  - commons: remove DEFINE_SKEL_OBJECT macro and improve resource management
  - memleak: Extract print_headers
  - biotop: Use dump_hash for map processing
  - map_helpers: Add bpf_map_lookup_and_delete_batch to dump_hash
  - dirtop: refactor directory tree traversal using shared filesystem helpers
  - errno_helpers: standardize error code format with negative prefix
  - bpf: extract filesystem target directory checking into common helper
  - opensnoop: add full path reconstruction capability
  - build: improve output path display in build messages
  - bpf: remove duplicate network constant definitions
  - clangd: add configuration to disable unused include warnings
  - bpf_buffer: refactor compat layer to bpf_buffer abstraction
  - constants.h: extract common constants into unified header file
  - refactor: unify min/max macros and improve header organization
  - Makefile: move vmlinux headers to src directory and update build config
  - debian: enhance packaging documentation and fix build targets
  - deb: create separate ketones-doc package for man pages
  - rpm: add comprehensive man pages and create ketones-doc package
  - build: complete migration to modern modular build system
  - retsnoop: comprehensive modernization and optimization
  - filetop,filelife: add directory filtering support and man pages
  - dirwatch: Add directory file operations monitoring tool
  - blkalgn: add block device alignment analysis tool
  - libs: remove DWARF debug support
  - Add deadlock support
  - tcprst: Correct a typo
  - uprobe_helpers.c: Fix the issue of unreleased resources
  - llcstat: Fix error: redefinition of 'key_info' on aarch64
  - drsnoop: Fix typo
  - syscall_helpers.c: Fix incorrect syscall name
  - syscall_helpers.c: support loongarch64 and add more generic syscall
  - Add dynamic switching congestion support
  - README: Add some dependencies
  - rdmaucma: add RDMA userspace connection manager tracer
  - btf: Replace ensure_core_btf with guard(btf_open_opts)
  - btf: Introduce RAII mechanism for BTF resource management
  - libbpf-tools/mountsnoop: Support fsopen,fsconfig,fsmount,move_mount syscalls
  - capable: optimize PID namespace and process tracking logic
  - libbpf-tools/profile: Add support for PID-namespacing
  - libbpf-tools: support to find symbols in different mount namespace
  - bpf: Replace version checks with BTF detection for cap_capable
  - bpf: Replace kernel version check with BTF detection for block tracepoints
  - Replace PERF_POLL_TIMEOUT_MS with POLL_TIMEOUT_MS
  - numasched: Convert to use bpf_buffer instead of perf_buffer
  - fsslower: Convert to use bpf_buffer instead of perf_buffer
  - gethostlatency: Convert to use bpf_buffer instead of perf_buffer
  - exitsnoop: Convert to use bpf_buffer instead of perf_buffer
  - runqslower: Convert to use bpf_buffer instead of perf_buffer
  - drsnoop: update to use bpf_buffer instead of perf_buffer
  - capable: update to use bpf_buffer instead of perf_buffer
  - bindsnoop: update to use bpf_buffer instead of perf_buffer
  - bashreadline: update to use bpf_buffer instead of perf_buffer
  - sofdsnoop: update to use bpf_buffer instead of perf_buffer
  - mdflush: update to use bpf_buffer instead of perf_buffer
  - filelife: switch from perf_buffer to bpf_buffer
  - biosnoop: switch from perf_buffer to bpf_buffer
  - block: refactor block_rq_* tracepoint parameter detection
  - btf: Use __free attribute for automatic btf object cleanup
  - zombiememcgstat: add new tool to track zombie memory cgroups
  - statsnoop: Missing dirfd check
  - klockstat: Don't crash on NULL ksym when looping over stack
  - klockstat: Track IOCTL numbers
  - memleak: Change the start message to match memleak python
  - memleak: Allocate map and calculate statistics only when -C option is used
  - memleak: Fix output error for invalid stackid when using combined-only mode
  - biosnoop: Fix biosnoop dependency on kernel version
  - statsnoop: Support fstat(2) and parse fd/dirfd in userspace
  - klockstat: Track netlink message types when taking locks
  - statsnoop: Display syscall name with -s
  - Add intrusiondetec support
  - Add jbdrunstat support
  - loads: simplify perf event sampling and CPU handling
  - inject: refactor call depth tracking with unroll macro
  - irq_storm: implement interrupt storm detection tool
  - trace: optimize code structure and string handling
  - trace_helpers: refactor kprobe attachment logic
  - trace: unify pattern parsing across all tools
  - trace_helpers: add DWARF debug info support for symbol resolution
  - common: refactor NUMA helpers and linker flags
  - Add kctxlatency support
  - softirqs: add target_cpu for softirqs
  - hardirqs: add target_cpu for hardirqs
  - profile,flamegraph: improve C++ symbol handling in flame graph
  - profile: add flame graph visualization support
  - offcputime: improve SVG output option handling
  - offcputime: add flamegraph support for visualizing off-CPU time
  - offcputime: add detailed stack printing functions
  - bitesize: use BTF to detect block_rq_issue tracepoint parameters
  - bitesize: enhance I/O statistics and improve code structure
  - wqlat: Add extra activation time
  - runqueue-latency: Add CPU display and sorting functions
  - softirqs: Optimize output information and increase CPU display and sorting
  - hardirqs: Optimize output information and increase CPU display and sorting
  - Add biofullpathlatency support
  - ttysnoop: use CO-RE to handle ITER_UBUF value changes
  - ttysnoop: enhance error handling and resource management
  - biolatency: improve code documentation and error handling
  - bindsnoop: improve code documentation and resource management
  - bashreadline: improve code documentation
  - adaptive-readahead: improve code documentation and error handling
  - biostacks: enhance error handling and statistics
  - biotop: improve error handling and thread safety
  - bpf: Use DEFINE_FREE for automatic cleanup of BPF skeletons
  - bashreadline: Use __free attribute for automatic cleanup
  - trace_helpers: Use AUTO and __free attributes for resource management
  - signoop: Support real-time signals
  - memleak: add mremap uprobe
  - klockstat: Search for correct stack offset in userspace
  - trace_helpers/partitions: Add __free attribute for partitions
  - trace_helpers/ksyms: Add __free attribute for ksyms
  - syms_cache: Add cleanup support for syms_cache
  - Replace explicit bpf_is_root checks with CHECK_ROOT_CONSTRUCTOR macro
  - Use __free macro for automatic resource cleanup
  - Use __free macro for automatic bpf_buffer cleanup
  - Add cleanup macros and refactor code for better resource management
  - trace: Update demangling_cplusplus_function to use cplus_demangle


author: Feng Yang <yangfeng@kylinos.cn> - 1.0-7
changelog:
  - blkalgn: Fix segmentation fault in blkalgn -t
  - schedtrace: refactor userspace code for clarity and maintainability
  - schedtrace: add per-CPU scheduling latency statistics
  - numasched: modernize codebase and improve BPF efficiency
  - dirwatch: Fix the issue where mkdir has no output
  - solisten: Fix failed to get map info bug
  - jbdrunstat: Add more elegant error messages
  - numamove: Fix the segmentation fault
  - netfilter: Fix the bug where packet loss detection fails
  - schedtrace: add timeslice analysis and refactor codebase
  - schedtrace: add BPF-based scheduling delay tracker
  - offcputime: Fix the unit conversion error


author: zhangzikang <zhangzikang@kylinos.cn> - 2.0.26-12.p02
changelog:
  - Type:update 
  - ID:[Task#543629]
  - SUG:NA
  - DESC:update sw patches for makedumpfile-1.7.4, resolve sw architecture compilation errors


author: zhangzikang <zhangzikang@kylinos.cn> - 2.0.26-12.p04
changelog:
  - Type:update
  - ID:[Task#588423]
  - SUG:NA
  - DESC:Refactor the kdumpctl and mkdumprd code using Python


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: bugfix
  - ID  : [TASK#601833]
  - SUG : NA
  - DESC: add Patch01: kconfigwidgets-5.113.0-kylin-correction-of-ambiguous-description.patch
          修改kf5_entry.desktop的错误字符


author: huayadong <huayadong@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: cve
  - ID  : [TASK#505555]
  - SUG : NA
  - DESC: Patch01:kdelibs4support-5.113.0-kylin-mg-word-modification.patch


author: peijiankang <peijiankang@kylinos.cn> - 5.113.0-2.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kglobalaccel-5.113.0-kylin-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 5.113.0-2.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update kglobalaccel-5.113.0-kylin-fix-coredump.patch


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "loongarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-plasma-5.113.0-2.ky11.loongarch64" /usr/bin/cmake --install "loongarch64-kylin-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "loongarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/builddir/build/BUILDROOT/kf5-sonnet-5.113.0-2.ky11.loongarch64" /usr/bin/cmake --install "loongarch64-kylin-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "loongarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    /usr/bin/cmake --build "loongarch64-kylin-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose


author: liuming <liuming@kylinos.cn> 1.0.0.0-0k2.9
changelog:
  - 用户手册中入侵检测工具图标显示异常
  - 增加对软链接/硬链接/设备文件创建的监控，并修复hook点重复的问题
  - 修复loong64/sw64上ringbuffer映射错误，以及loong64不支持fentry/fexit导致的程序无法启动的的问题


author: liuming <liuming@kylinos.cn> 1.0.0.0-0k3.0
changelog:
  - Type:update
  - ID:TASK#560287/549745
  - SUG:NA
  - DESC:接入AI检测/ksaf文件篡改检测;
         反向shell检测能力增强;
         缓冲区溢出检测优化;
         用户手册等问题修复;


author: duanhongtao <duanhongtao@kylinos.cn> 1.0.0.0-0k3.5
changelog:
  - Type:update
  - ID:BUG#498623/498837/498991/498843/499175/498587/498567/498649/498853/499077/498877/499211
  - SUG:NA
  - DESC: 配置修改后未重启服务导致功能异常
          dga服务状态判断调整
          设置服务状态后增加状态值检查
  	普通用户置灰ai相关ui


author: litianhao <litianhao@kylinos.cn> - 30-4.se.01
changelog:
  - Type: update
  - ID: [TASK#226811] 通用包合入套件补丁
  - SUG: NA
  - DESC: 合入kysec补丁
  -       kmod-add-kysec-check.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 30-4.se.02
changelog:
  - Type: update
  - ID: [BUG#346402]
  - SUG: NA
  - DESC: 去除kmod 插入模块时 kysec的检查
  -       kmod-remove-insmod-kysec-check.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 0.8.5-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-change-order-of-multipath.rules.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-RH-add-mpathconf.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-RH-Remove-the-property-blacklist-exception-builtin.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-fix-syntax-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-fix-multipathd-resize-when-not-all-paths-size-are-eq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-avoid-handling-paths-repeatedly-in-coalesce-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-fix-lun-expansion-failure-when-there-is-offline-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-fix-bugs-backported-from-next-branch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0009-fix-change-reservation-key-to-uint8-for-memcmp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0010-bugfix-flush-and-sync-before-reboot.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0011-change-log-level-to-info-if-alua-is-not-support-by-s.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0012-device-mapper-multipath-fix-find-multipath-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0013-kpartx-change-kpartx-file-and-default-bindir.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0014-remove-local-disk-from-pathvec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0015-clear-mpp-path-reference-when-path-is-freed-otherwis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0016-multipathd-Fixed-multipathd-parameter-invoking-seque.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0017-libmultipath-io_err_stat-don-t-free-aio-memory-befor.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0018-libmultipath-io_err_stat-call-io_destroy-inside-free.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0019-libmultipath-sysfs_set_scsi_tmo-do-nothing-for-ACT_D.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0020-multipath.conf.5-fix-documentation-for-find_multipat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0021-multipath.conf.5-fix-the-description-of-prio_args-fo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0022-multipath-display-the-correct-configuration-when-dum.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0023-multipathd-implement-the-count-of-the-path-state-del.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangzhiqiang <wangzhiqiang95@huawei.com> - 0.9.5-1
changelog:
  - upgrade version to 0.9.5:
    - add requires libmount and libmount-devel
    - add multipath.conf multipathc and libmpathutil.so
    - delete README.alua


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.9-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove .export_symbol section newly added in 6.6 kernel to avoid compile error


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuhuanzhang <fuhuanzhang@kylinos.cn> - 1.21.2-15.p01
changelog:
  - [TASK#534539] backport kylin patch: Add krb5-kycompat subpackage.[TASK#424795]
          Supply follow symbols to solve the API/ABI compatibility issue:
            krb5_aprof_init
            krb5_aprof_finish
            krb5int_aes_enc_key
            krb5int_aes_enc_blk
            k5_sha256_update
            k5_sha256_final
            k5_sha256_init
            krb5_free_ad_signedpath
            encode_krb5_ad_signedpath_data
            decode_krb5_ad_signedpath
            encode_krb5_ad_signedpath
            krb5int_utf8_next
            krb5int_strlcat
            krb5int_strlcpy


author: fuhuanzhang <fuhuanzhang@kylinos.cn> - 1.21.2-15.p02
changelog:
  - [TASK#596097] fix code scan logic warning
          verify_for_user_checksum
          get_pac_princ_with_realm
          add_to_transited
          dispatch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.01
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 修改spec文件及删除一些无用文件
  -       添加状态切换日志
  -       按照打包规范修改版本号
  -       添加异常退出时输出堆栈


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-06.se.02
changelog:
  - Type:update
  - ID:[BUG#295657] [v11-B14] [外设管控] 系统初始环境，/var/log/下存在txt格式文本文件
  - SUG:NA
  - DESC: 修改审计应用日志文件名


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#439186] kysec2.0审计日志输出
  - SUG: NA
  - DESC: 相关的轮替功能操作由logrotate来管理，提供默认转存配置
          增加fuzz测试
          合规性整改移除ksaf_config


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#474839] 【v11 2503】审计包功能优化
        [任务#471091] 【安全红线】整改自研组件第一轮Fortify问题-ksaf-audit-daemon
  - SUG: NA
  - DESC: 优化审计，和内核相关的定义从class-def.conf获取
          合规性整改
          没启动ksaf_main模块，不启动审计日志服务


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#490381] 【v11 2503】优化ksaf-audit-daemon相关功能
  - SUG: NA
  - DESC: 去除掉配置文件，不允许修改日志文件名


author: zhubing zhubing@kylinos.cn - 1.1.0-05
changelog:
  - Type: update
  - ID: [BUG#501287]设备连接记录异常
  - SUG: NA
  - DESC: 解决因大量dbus调用导致超时问题，过滤重复的设备插拔记录
  -   0002-fix-the-bug-of-device-plug-record.patch
  -   0003-add-unit-test-code-in-20260316.patch


author: lengchunying <lengchunying@kylinos.cn> 1.0.1-01
changelog:
  - Type:update
  - ID: [任务#434606] 【ksaf】升级kysec2.0包版本至1.0.1-01
  - SUG:NA
  - DESC: 升级kysec2.0包版本至1.0.1-01


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#486679] 【v11 2503】优化ksaf-dynamic-uid相关功能
  - SUG:NA
  - DESC: 未加载ksaf_main模块不启动该服务
          修改方案，优化该程序，减少io访问。
          移除无效的监控
  	修改单元测试
          从qmake变为cmake
          修改依赖选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-02
changelog:
  - Type:update
  - ID: [任务#595271] 完成模糊测试
        [任务#596809] 添加自动化测试代码，对接平台
  - SUG:NA
  - DESC: 添加fuzz测试
          添加自动化测试代码，对接平台


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.02
changelog:
  - Type: update
  - ID: [BUG#295015]【V11-B14】【管理员分权】strict模式下，secadm用户无权限执行fdisk命令
  - SUG: NA
  - DESC: 解决由于策略文件太大，导致策略数据写入内核失败问题，在开机时同步id pairs


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.03
changelog:
  - Type: update
  - ID: [BUG#296941] 【V11-B14】【外设管控】人体工学设备不插拔重启后策略失效
  - SUG: NA
  - DESC: 在加载kbox模块前，判断cmdline是否使能box


author: zhubing zhubing@kylinos.cn - 1.0.0-02.se.04
changelog:
  - Type: update
  - ID: [任务#419047]【安全红线】解决ksaf-init的strip编译选项问题
  - SUG: NA
  - DESC: 去除libksaf_status库文件的符号信息


author: zhubing zhubing@kylinos.cn - 1.0.1-03
changelog:
  - Type: update
  - ID: [BUG#347071]【V11 2503】【需求36791|41559】【执行控制】首次kysec_policy enable开启安全，执行控制不生效 
  - SUG: NA
  - DESC: 修复ksaf-label-manager --sync-path-id 执行失败问题


author: chengang chengang@kylinos.cn - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#369687]【执行控制】手动添加启动参数，lsm=ksaf，重启系统后开启kysec功能不生效
  - SUG: NA
  - DESC: ksaf 默认状态从 4 修改为 0


author: chengang chengang@kylinos.cn - 1.0.1-06
changelog:
  - Type: update
  - ID: [task#502245]  支持grub设置ksaf为软模式
  - SUG: NA
  - DESC: 支持解析grub参数，设置ksaf为软模式ksaf_status=0


author: chengang chengang@kylinos.cn - 1.0.1-08
changelog:
  - Type: update
  - ID: [BUG#] off模式切换strict模式，不重启之前，setstatus 关闭kysec 或者selinux,关闭时进入了是否立即重启的交互信息提示  
  - SUG: NA
  - DESC: 未开启安全时get状态返回0


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.01
changelog:
  - Type: update
  - ID: [任务#382403]【ksaf】标记管理去除依赖
  - SUG: NA
  - DESC: 标记管理程序中使用的开源库的依赖包比较多，导致集成系统镜像较大
  	将相关开源库代码编译成静态库链接到二进制程序中，解决安装依赖较多问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.02
changelog:
  - Type: update
  - ID: [任务#382843]【ksaf】更正libkysec2-exectl.so库名
  - SUG: NA
  - DESC: 执行管控动态库文件名称变更，代码中需要同步更改


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.03
changelog:
  - Type: update
  - ID: [任务#384149]【ksaf】解决下发策略时已运行进程标记未更新问题
  - SUG: NA
  - DESC: 下发默认策略后，已经运行的进程标记没有更新，导致某些进程权限不对


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.04
changelog:
  - Type: bugfix
  - ID: [BUG#290659]【V11-B14】【访问控制】【白名单访问控制】文件保护-文件只读不生效
  - SUG: NA
  - DESC: 将编译依赖的开源包从源码中分离[TASK#388587]
  		解决文件保护-文件只读不生效的问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#297115] 【v11-B14】【国密算法】Gnutls协议连接国密支持功能测试失败-5556端口被自研软件包占用
  - SUG: NA
  - DESC: 同步桌面不可变系统相关适配代码
  		删除设备信息配置文件，由ksaf-main维护


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.06
changelog:
  - Type: update
  - ID: [任务#397913]【ksaf】优化程序运行时检查程序是否已经运行的机制
  - SUG: NA
  - DESC: 优化程序运行时检查程序是否已经运行的机制，避免多个进程运行导致功能异常
          捕获程序异常信号，出现异常时打印出栈信息
  		添加命令行参数，实现同步path_id到内核


author: wangshengye <wangshengye@kylinos.cn> - 1.1.0-1.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#300787]【V11-B16】【ARM】【安全模式切换】none-strict重启过程中报错
  - SUG: NA
  - DESC: [任务#412519]【ksaf】已运行进程标记更新功能优化
          [任务#415507] ksaf-label-manager安全问题整改


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-02
changelog:
  - Type: update
  - ID: [BUG#340532]【V11-2503】【B05】rpm包vendor信息检查失败
  - SUG: NA
  - DESC: 修改SPEC文件vendor信息
          同步os-release-v11分支最新代码


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [BUG#346402]【V11-2503】【B09】【需求36791】【执行控制】加载无执行权限的内核模块，无审计日志
  - SUG: NA
  - DESC: tid配置文件中添加/usr/bin/kmod,值设置为4


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#364225]【v11-2503】【B14】【需求36795|41839|41835】【文件保护】移除软件包文件保护后被移动后还原的文件，再次添加保护不生效
  -     [BUG#364165]【v11-2503】【B14】【需求36795|41549】【文件保护】移除包方式添加的保护的例外后，文件保护不生效
  - SUG: NA
  - DESC: 优化继承标志设置逻辑
          同步桌面最新代码，桌面独有代码使用条件编译
          优化程序启动时对软件包查询的流程，减少对CPU资源的占用


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#374711]【B17】【v11 2503】【需求36795|41839|41835】【文件保护】添加\删除\查看文件保护策略-软件包-kysec_set，只读策略不生效
  - SUG: NA
  - DES: 全盘打标之前删除包内文件父目录缓存文件


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-06
changelog:
  - Type: bugfix
  - ID: [BUG#439759]【V11-6.6.0-32.9】【龙芯3C5000L】龙芯3C5000L从selinux切换到off失败
  - SUG: NA
  - DES: 注释掉标记变更发布与订阅功能，该功能暂时未用到
         解决/opt目录下文件未打标的问题,使用宏定义将全盘打标时要跳过的目录与桌面版本区分开


author: wangshengye <wangshengye@kylinos.cn> - 1.1.1-07
changelog:
  - Type: bugfix
  - ID: [BUG#455411]【20251021update内网源测试】【loongarch/x86-v11 2503】提测软件包增量升级后，执行yum -y update核心转储
        [任务#553743]安全编译参数整改 / ksaf-label-manager安全编译参数整改
  - SUG: NA
  - DES: 解决动态库中dbus连接没有关闭文件描述符的问题
         修改软件包安装后脚本，解决软件包更新后服务进程身份错误问题


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-05
changelog:
  - Type: update
  - ID: [任务#595273]完成ksaf-label-manager模糊测试和ci对接
  - SUG: NA
  - DES: 添加模糊测试与CI平台对接代码，并提高测试覆盖率


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-06
changelog:
  - Type: bugfix
  - ID: [BUG#499477]【2603-B09】模糊测试ksaf-label-manager组件，10个小时打印了82G的日志，导致磁盘打满资源耗尽，出现了48个Hang，请分析修改
  - SUG: NA
  - DES:


author: wangshengye <wangshengye@kylinos.cn> - 1.1.2-07
changelog:
  - Type: bugfix
  - ID: [BUG#502817]【2603-B12】模糊测试ksaf-label-manager组件过程中，出现两个crash，提示stack-overflow栈溢出，请分析修复
  - SUG: NA
  - DES:


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0-14
changelog:
  - Type: update
  - ID: [任务#376521]【ksaf】ksaf功能联调与问题排查
  - SUG: NA
  - DESC: 修复spec细节问题；模块自身主动打入initrd中，不再依赖ksaf-init包


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0-14.se.03
changelog:
  - Type: bugfix
  - ID: [任务#383901]【ksaf】排查安装报错问题ksaf-main-module
  - SUG: NA
  - DESC: 更新initrd放到posttrans阶段，避免系统安装时生成initrd失败


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0-14.se.04
changelog:
  - Type: bugfix
  - ID: [任务#389693]【ksaf】配合22内核编译内核模块-ksaf-main
  - SUG: NA
  - DESC:
    添加部分设备客体类别;
    修复overlay进程上下文问题;
    新增弹窗授权功能.


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0-14.se.05
changelog:
  - Type: bugfix
  - ID: [任务#376521]【ksaf】ksaf功能联调与问题排查
  - SUG: NA
  - DESC:
    修复cred使用中被释放问题.
    拆分客体类别配置文件以及设备oid配置文件


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0-14.se.07
changelog:
  - Type: bugfix
  - ID: [BUG#293877]【v11-B14】【安全日志】无kysec状态切换审计日志 [用例#1365705]
  -     [BUG#296669]【v11-B14】【外设管控】设置图像设备策略，未生成策略语言 [用例#1366313]
  -     [BUG#292923]【v11-B14】【外设管控】内置有线网卡设置为on后，概率性未激活网卡
  -     [BUG#293259]【V11-B14】【访问控制】【白名单访问控制】执行控制-verified标记进程执行其所创建的文件失败
  - SUG: NA
  - DESC:
    审计日志增加ksaf状态切换日志支持;
    设备管控策略扩充客体类型，支持更多类型设备管控，当前只做策略编译下发支持，实际未做管控.
    修复进程执行自己创建的临时文件失败问题.


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0-14.se.08
changelog:
  - Type: bugfix
  - ID: [任务#376521]【ksaf】ksaf功能联调与问题排查
  -     [BUG#301563]【需求35149】【安全SDK】设备安全-设置网卡管控状态失败
  -     [BUG#305153]【文件保护箱】文件保护箱内新建文件，文管窗口卡死，且无法再打开其他保护箱
  -     [BUG#306117]【V11-B17】【IO管控】下发Hid设备off策略，服务器重启
  -     [BUG#306075]【V11-B17】【访问控制】【白名单访问控制】当执行脚本为V标记，脚本内部创建文件，无提示无权限
  - SUG: NA
  - DESC: 修复bug，无设计上的变更。


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0-14.se.09
changelog:
  - Type: bugfix
  - ID: [任务#376521]【ksaf】ksaf功能联调与问题排查, 添加write下发数据长度校验
  -     [BUG#313601]【需求35133】【设备安全】【不可变】外设管控关闭蓝牙后，未实时生效
  -     [任务#387321]【ksaf】桌面ksaf-main-module联调问题处理,修复包联网管控失效问题
  -     [BUG#314245]【需求35151】【外设管控】【不可变】无线网卡管控失败
  -     [BUG#316559]【unixbench】清华同方TZ830V3开安全测试unixbench系统卡死
  - SUG: NA
  - DESC: 修复bug，无设计上的变更。


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-01
changelog:
  - Type: bugfix
  - ID: [BUG#327575]执行控制为enforcing，python3执行unkNown脚本成功
  -     [BUG#327885]清华同方TZ830V3开安全测试unixbench劣势超5%，请优化
  -     [BUG#312727]网络保护】系统默认集成的应用运行时弹出是否允许访问网络弹窗
  -     [BUG#322639]外设管控-插入无策略的设备需要多次选择始终阻拦才能阻拦成功
  -     [BUG#326663]切换应用程序执行控制策略为禁止弹出安全中心设备授权窗口
  -     [BUG#327313]【设备安全】修改授权为放行的u盘设备策略为阻止后，弹出安全授权5次
  -     [BUG#314679]运维模式下无法运行开明包
  - SUG: NA
  - DESC: 同步桌面修复的bug补丁, 纠正版本号


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#443854]ksaf1.5开发
  -     [BUG#336727]【KARE安装】过旧的文件句柄
  -     [BUG#338072]【安全风险】【三权命令管控】执行mv命令，权能文件被覆盖
  -     [任务#392829]增加进程绝对路径获取接口
  -     [BUG#327787]【loongarch】【外设管控】sm-example命令执行失败
  - SUG: NA
  - DESC: 内核增加动态变量支持,解决部分bug.


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-05
changelog:
  - Type: bugfix
  - ID: [BUG#341984]审计用户执行auditctl命令失败
  - SUG: NA
  - DESC: 解决缓存导致cap授权失效问题;解决动态变量初始化失败问题.


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-06
changelog:
  - Type: bugfix
  - ID: [任务#387321]桌面ksaf-main-module联调问题处理
  - SUG: NA
  - DESC: 同步v11桌面修复bug补丁：
  -       移植开明包管控支持补丁;
  -       移植支持策略表达式if部分可视化解析补丁
  -       移植交互支持静默、授权、通知三种模式补丁
  -       移植策略数据库锁更换为互斥锁补丁
  -       移植smatch代码扫描问题修复补丁


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-09
changelog:
  - Type: bugfix
  - ID: [BUG#330607]光驱设置只读策略后，再设置禁用策略，移除策略失效
  -     [BUG#347535]插入1次打印机，生成多条连接记录
  -     [BUG#330419]不可变切换到运维模式后，关闭执行控制失败
  -     [BUG#347348]应用安全-删除软件包执行例外设置后程序依旧可执行
  -     [BUG#352767]禁用无线网卡设备策略后，有线网络也会断开重连
  - SUG: NA
  - DESC: 内核升级,重编模块；同时同步v11桌面已修复bug


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.1-16
changelog:
  - Type: bugfix
  - ID: [任务#513487]桌面产线ksaf代码质量提高
  - SUG: NA
  - DESC: 桌面系统发现的问题，现将补丁同步到服务器,同时整改spec文件，满足合规要求


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.2-06
changelog:
  - Type: update
  - ID: [任务#513487]新增策略状态查询接口，优化开机时间
  -     [BUG#483687]重构审计代码，减少对内核机制的依赖
  -     [BUG#484311]解决黑名单模块被开机自动加载
  -     [任务#590189]合规整改,重写字符串库函数,避免检测工具频繁误报,新增测试用例，提高代码覆盖率
  - SUG: NA
  - DESC: NA


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.2-09
changelog:
  - Type: update
  - ID: [任务#589493]支持安全容器功能
  -     [任务#595597]ksaf_main代码优化维护
  - SUG: NA
  - DESC: 消除了ksaf-main对所有内核模块的依赖、增强kabi兼容性


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.2-10
changelog:
  - Type: bugfix
  - ID: [BUG#497483]黑名单内核模块开机被依赖自动加载
  -     [BUG#494987]查看未在白名单内的内核模块信息，无法查看内核模块信息
  -     [BUG#498261]执行kysec_policy disable后黑明模块依然加载失败，且输出日志
  -     [任务#600369]基于6.6.0-40.5内核重编ksaf-main-module
  - SUG: NA
  - DESC: NA


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.2-11
changelog:
  - Type: update
  - ID: [任务#600369]基于6.6.0-40.5内核重编ksaf-main-module
  - SUG: NA
  - DESC: sw内核同源平台问题，没有触发sw编包，因此审计版本号重新编译


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.2-12
changelog:
  - Type: bugfix
  - ID: [BUG#499743]【V11 2603】【模式切换】仅sw架构切换defualt后重启失败
  -     [BUG#498081]自动加载的模块sr_mod加入防卸载列表后加入防加载列表，重启系统后，查看sr_mod模块被自动加载
  - SUG: NA
  - DESC: NA


author: penghuaihe <penghuaihe@kylinos.cn> - 1.0.2-13
changelog:
  - Type: bugfix
  - ID: [BUG#500253]【V11 软连接脚本文件 清除标记后依然能执行
  -     [BUG#499961]【需求66843】【B11】设备管控的自定义策略不生效
  -     [BUG#499953]设备管控多次开关设备权限控制的usb接口，出现一个麦克风
  - SUG: NA
  - DESC: NA


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 固定函数名和函数ID对应关系解决增量下发函数名会变问题
          内置变量interactive扩展：由bool类型更改为int类型
          删除由配置生成的源文件，改为编译时自动生成
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-06
changelog:
  - Type:update
  - ID: [任务#461412] 策略改动及优化
  - SUG:NA
  - DESC: 优化策略下发速度
          全量下发和增量下发方案调整
          添加策略module_name字段
          代码冗余调整，重复代码合并
          解决当section段没策略全量下发，后加入策略增量下发失败问题
  	修复loongarch初始化下发策略段错误问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 去掉ksafpolicy服务，因和dbus启动的服务冗余
          去除注释的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#487477] 【V11】【内核特性】内核启动时间调优 / 【安全】initrd裁剪-安全的脚本ksaf
        [bug#338197] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0302
        [bug#338196] 【V11 2503需求】【需求41075】【build04】【漏洞扫描】诊脉漏扫测试KVE-2025-0301
  - SUG:NA
  - DESC: 新增ksaf-policy-sync-init只下发初始化策略
          修复脉诊漏洞


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 库修复，之前不是链接


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.2-02
changelog:
  - Type:update
  - ID: [任务#590181] 安全合规整改
        [任务#575963] 进行ksaf-policy的持续优化
  - SUG:NA
  - DESC: 添加自动化测试代码，对接平台
          策略优化


author: lengchunying <lengchunying@kylinos.cn> 1.0.2-06
changelog:
  - Type:update
  - ID: [bug#499207] 【2603-B09】【模糊测试】ksaf-policy-interpreter件fuzzing时，出现crash，稳定复现
  - SUG:NA
  - DESC: 修改参数校验，去掉无效代码


author: xuchao <xuchao@kylinos.cn> - 1.0.1-5kord.se.03
changelog:
  - Type:update
  - ID:[Task#78021]
  - SUG:NA
  - DESC:
  - spec和pro文件修改，打包集成安全加固插件库。
  - 针对服务版本对安全中心代码进行优化，删除部分服务器不需要的功能和桌面主题适配代码


author: xuchao <xuchao@kylinos.cn> - 1.0.1-5kord.se.04
changelog:
  - Type:update
  - ID:[Task#87930]
  - SUG:NA
  - DESC:
  - 安全加固二期功能和入。目前安全加固分为15大类：安全服务、内核参数、安全网络、系统命令、系统审计、系统设置、潜在危险、文件权限、风险账户、磁盘检查、密码强度、账户锁定、系统安全、系统维护、资源分配。并支持自定义加固功能
  - 移植指令流、安全内存模块


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.06
changelog:
  - Type:update
  - ID:[Task#92827 #93756]
  - SUG:NA
  - DESC:
  - 修改设置界面，根据不同的用户和安全状态判断是否可以设置
  - 合入可信启动、安全内存、指令流模块


author: liu_yi <liu_yi@kylinos.cn> - 1.0.1-5kord.se.08
changelog:
  - Type:update
  - ID:[Task#94884 #73846]
  - SUG:NA
  - DESC:
  - 实现开启指令流功能时自动开启LSM
  - 修改关于界面
  - 修改主界面图标
  - 修改bug118416
  - 启用启动度量时重置系统基准值


author: liu_yi <liu_yi@kylinos.cn> - 1.0.1-5kord.se.09
changelog:
  - Type:update
  - ID:[Bug#128578][Bug#128649,119422,122889,119065,118375,126613]
  - SUG:NA
  - DESC:
  - #128578 修复切换安全内存保护导致系统卡死问题
  - #128649 安全加固界面未更新命令行操作结果
  - #119422 还原完成存在失败项，报告界面显示错误
  - #122889 还原完成且不存在还原失败项，界面显示错误
  - #119065 加固过成中加固项后面没有显示数量
  - #126613 首次扫描未加固打场景下可以使用一键还原功能


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.11
changelog:
  - Type:update
  - ID:[Task#92827,81150,100973][Bug#118375,122968,122944,17825,117712,117348,112302,131649, 131821]
  - SUG:NA
  - DESC:
  - #92827 安全设置界面功能用户权限调整
  - #118375 账户设置不保存状态
  - #122968 回文不生效
  - #122944 密码字典不生效
  - #117825 网络首页提示错误
  - #117712 联网控制切换状态后与命令行不符
  - #117348 安全加固界面上下栏上显示不一致
  - #112302 联网控制切换状态后与命令行不符
  - #81150 账户管理相关项取值范围调整
  - #100973 安全报告增加重启生效状态
  - #131649 安全防护模式为自定义时安全设置勾选推荐
  - #131821 设置界面的问好文案错误


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.12
changelog:
  - Type:update
  - ID:[Bug#136400,135982,130841]
  - SUG:NA
  - DESC:
  - #136400 report dialog's datas are wrong
  - #135982 安全加固点击停止扫描后，等扫描完成后点击确定，闪退
  - #130841 加固后还原提示有误


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.13
changelog:
  - Type:update
  - ID:[Bug#117868,131649,138075,140001]
  - SUG:NA
  - DESC:
  - #117868 :update help file
  - #131649 :setting's contents wrong while security level is custom
  - #138075 :cannot select box item successfully
  - #140001 :get different model type is wrong


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.14
changelog:
  - Type:update
  - ID:[Bug#139586,118375]
  - SUG:NA
  - DESC:
  - #139586 :update accountProtect
  - #118375 :update accountProtect


author: wangyunuo <wangyunuo@kylinos.cn> - 1.0.1-5kord.se.15
changelog:
  - Type:update
  - ID:[Bug#142108]
  - SUG:NA
  - DESC:
  - #142108 :update three auth text
  - #139635 :update similar chech logic


author: wangyang <wangyang@kylinos.cn> - 1.0.1-5kord.se.17
changelog:
  - Type:update
  - ID:[Task#126665][Bug#160916]
  - SUG:NA
  - DESC:
  - #126665 : Adjusting the account lock threshold
  - #160916 : Clean error log


author: xuyujun <xuyujun@kylinos.cn> - 1.0.2-0kord.se.01
changelog:
  - Type:update
  - ID:[TASK#327593]
  - SUG:NA
  - DESC:
  - 适配v11版本
  - 添加补丁  ksc-defender-add-file-header.patch
  -           ksc-defender-adaptor-v11.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.2-0kord.se.02
changelog:
  - Type:update
  - ID:[TASK#332006]
  - SUG:NA
  - DESC:
  - 添加ksaf参数，安全中心升级版本重新提交
  - 添加补丁  ksc-defender-add-ksaf-grub-param.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.2-0kord.se.03
changelog:
  - Type:update
  - ID:[BUG#241149]
  - SUG:NA
  - DESC:
  - 【安全中心】【安全加固】安全中心不显示安全加固组件
  - 添加补丁  ksc-defender-fix-bug-0710.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.2-0kord.se.04
changelog:
  - Type:update
  - ID:[TASK#332810]
  - SUG:NA
  - DESC:
  - 【单元测试】安全包进行单元测试 / ksc-defender单元测试
  - 添加补丁  ksc-defender-add-unit-test.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.2-0kord.se.05
changelog:
  - Type:update
  - ID:[BUG#242087][BUG#244375]
  - SUG:NA
  - DESC:
  - 242087 【V11-B05】【安全加固】【首页显示】未使用过安全加固模块的界面显示提示不合理
  - 244375 【V11 B06】【安全中心】【安全加固】当前安全模板选中test，删除test模板后首页未更新
  - 添加补丁  ksc-defender-fix-bug-0726.patch


author: wanghao <wanghao@kylinos.cn> - 1.0.2-0kord.se.06
changelog:
  - Type:update
  - ID:[TASK#366209]
  - SUG:NA
  - DESC:
  - 修复fortify和安全红线问题
  - add patch: ksc-defender-fix-fortify-and-security-red-line.patch
  - kysec-utils接口适配：应用联网、文件只读保护、进程防杀、模块防卸载功能模块
  - add patch: ksc-defender-kysec-utils-interface-adaptation.patch
  - 添加账户保护单元测试代码
  - add patch: ksc-defender-add-unit-tests.patch
  - 修复由CheckPasswd.cpp导致在koji上编包错误的问题
  - add Patch11:  ksc-defender-fix-koji-build-error-by-CheckPasswd-file.patch

  - Type:update
  - ID:[任务#366173]
  - SUG:NA
  - DESC: 366173 【安全中心】kysec-utils接口适配:应用防护
  - add Patch10:  ksc-defender-kysec2.patch


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 1.0.2-0kord.se.07
changelog:
  - Type:update
  - ID:[BUG#290715/292283]
  - SUG:NA
  - add patch:
    Patch12:  0001-ksc-defener-modify-kysec-status-half.patch
    Patch13:  ksc-defender-setstatus.patch
  - DESC: 290715 【V11-B14】【安全中心】【应用保护】none模式下，打开安全中心-应用程序执行控制失败
  - DESC: 292283 【V11-B14】【安全加固】自定义模板名字符超过四位，加固界面无法显示完整的模板


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 1.0.2-0kord.se.08
changelog:
  - Type:update
  - ID:[BUG#294703][TASK#366207]
  - SUG:NA
  - add patch:
    Patch14:  ksc-defender-trans.patch
    Patch15:  ksc-defender-unittest.patch
  - DESC: 294703 【V11-2409】【B14】【UKUI 4.0】英文系统下，安全中心应用内的部分内容显示中文
  - DESC: 366207 【安全中心】单元测试覆盖率达标


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 1.0.2-0kord.se.09
changelog:
  - Type:update
  - ID:[BUG#300973/305775/306577]
  - SUG:NA
  - add patch:
    Patch16:  ksc-defender-unittest2.patch
  - DESC: 300973 【V11-B16】【X86】【文件保护箱】strict模式下，安全中心开启/关闭保护箱功能，无重启生效提示
  - DESC: 305775 【V11-B17】【安全中心】【应用保护】安全中心执行控制无法移除手动添加的白名单文件
  - DESC: 306577 【v11-B17】【安全中心】【龙芯】default模式下安全中心关闭/开启应用防护提示失败实际成功


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 1.0.2-0kord.se.10
changelog:
  - Type:update
  - ID:[BUG#309139/310987/312825]
  - SUG:NA
  - add patch:
    Patch17:  ksc-defender-box.patch
    Patch18:  ksc-defender-templatename.patch
  - DESC: 309139 【V11-B17】【文件保护箱】【龙芯】无法创建保护箱
  - DESC: 310987 【V11-B18】【安全中心】【应用保护】打开应用防护/执行控制不重启关闭，提示异常
  - DESC: 312825 【V11-B18】【安全加固】编辑用户自定义模板，模板名称可以编辑成与其他模板相同的名字


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 1.0.2-0kord.se.11
changelog:
  - Type:update
  - ID:[TASK#415491]
  - SUG:NA
  - add patch:
    Patch19:  ksc-defender-copyright.patch
  - DESC: 415491 ksc-defender安全问题整改


author: zhaoqingyou <zhaoqingyou@kylinos.cn> - 1.0.2-0kord.se.12
changelog:
  - Type:update
  - ID:[BUG#291419][BUG#327398]
  - SUG:NA
  - add patch:
    Patch20:  ksc-defender-msg.patch
  - DESC: 291419 【V11-B14】【安全加固】安全扫描过程中，点击右上角X号，弹框最小化按钮无效
  - DESC: 327398 【V11-B19】【安全加固】【首页显示】安全扫描，扫描结果有问题时首页显示繁体


author: jiaohongjie <jiaohongjie@kylinos.cn> - 3.0.0-3
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 0002补丁:应用联网控制功能优化
  - DESC: 0003补丁:kysec开启接口更改;half状态判断更改;模块操作日志修改


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-6
changelog:
  - Type:update
  - ID:[BUG#347383][BUG#349036][BUG#346870][BUG#346816][BUG#344842][BUG#346423][Bug#346777][BUG#346779][BUG#346822][BUG#347522][BUG#347703][任务#461358]
  - SUG:NA
  - DESC: 添加0010补丁: 修改可信度量bug;添加日志级别;切换开关翻译;同步桌面进程，文件，内核防卸载模块修改。----hanhuijie
  -    [BUG#349036]【V11-2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】管理员关闭可信度量重启后查看详情未置灰 		
  -    [BUG#347383]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】切换可信启动开关后显示未达预期	
  -    [BUG#346870]【V11 2503】【B09】【需求41727】【应用程序执行控制】安全日志-关闭应用程序度执行控制功能，日志级别为信息 
  -      添加0009补丁: 同步桌面联网管控状态切换优化，搜索优化，首次加载数据优化                         ----jioahongjie
  -      添加0008补丁: 控制面板的安全中心为英文;【UKUI4.0】设置面板中安全项未汉化;终端和设置中含有英文，未繁体化; 同步桌面kysec切换接口 ----duanhongtao
  -       [BUG#346816] 【UKUI4.0】设置面板中安全项未汉化
  -       [BUG#344842] 【繁体】终端和设置中含有英文，未繁体化
  -       [BUG#346423]  控制面板的安全中心为英文
  -      添加0007补丁，修复以下问题                                                                      -----maqiting
  -    【V11 2503】【B09】【账户保护】密码强度-推荐文案中为“至少包含2类字符”
  -    【V11 2503】【B09】【账户保护】账户锁定-默认状态测试，锁定时长与锁定时间不对
  -    【V11 2503】【B09】【安全设置】安全模式切换（关闭-安全优先-关闭）,选择安全优先后重启，安全变为自定义模式，重启后安全管理员和审计管理员无法登录
  -    【V11 2503】【需求41779】【B09】default模式下test用户打开高级配置后切换root用户无法打开安全中心
  -    【V11 2503】【B09】【需求41779】点击安全中心-设置-切换安全防护设置为安全优先后重启未生效 
  - DESC: 0006补丁:开源合规修改&&删除ksc-exectl，kysec-devctl,PrivatySecurity和SecurityReinforce下的翻译文件  ----hanhuijie


author: maqiting <maqiting@kylinos.cn> - 3.0.0-7
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353735][BUG#353485][BUG#347924][BUG#347835][BUG#350293]
  - SUG:NA
  - DESC:
  -      添加0011,0012,0013补丁，修复以下问题
  -     【V11-2503】【B09】【安全加固】【安全扫描】安全扫描过程中，点击停止按钮，停止扫描后仍有扫描项的状态是扫描中
  -     【V11-2503】【B09】【日志查看器】审计操作行为日志文件中没有记录
  -     【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -     【V11 2503】【B11】【需求41769】【安全中心】繁体模式下，安全加固和安全工具为英文
  -     【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  -      更新设置下的切换安全模式弹窗逻辑，完善密码检查，更新翻译文件
  -      同步桌面修改，优化服务启动性能


author: maqiting <maqiting@kylinos.cn> - 3.0.0-8
changelog:
  - Type:update
  - ID:[BUG#356165][BUG#353485][BUG#344842][任务#455262][BUG#347416][BUG#346056][BUG#271387]
  - SUG:NA
  - DESC:
  -      添加0014补丁，修复完善以下问题
  -      [BUG#356165]【v11 2503】【B12】【需求41759】【账户保护】密码强度－自定义密码的长度拉伸条取值范围和输入数字的取值范围不一致
  -      [BUG#353485]【v11 2503】【B11】【账户保护】密码强度-推荐后面字体未对齐，有空白留存
  - 
  -      添加0015补丁，修复完善以下问题。----sunjin
  -      [BUG#344842]【V11-2503】【B08】【繁体】终端和设置中含有英文，未繁体化
  -      优化模板名显示不全和没翻译的问题
  -      修复msgstr"之间没空格的问题
  -
  -      添加0016补丁，完成用户手册（中文）编写和相关bug修复。----hanhuijie
  -      [任务#455262]【V11 2503】编写《银河麒麟高级服务器操作系统V11 2503安全中心用户手册》
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册关于可信度量说明失败
  -      [BUG#346056]【V11 2503】【B09】【需求41779】应用联网控制-帮助文档验证，帮助文档打不开
  -      [BUG#271387]【V11-2409】【B10】设置的帮助手册部分内容的描述与实际系统不一致
  -
  -      添加0017补丁，修复half打开安全中心时状态切换问题。----jiaohongjie
  -      [BUG#346997]【V11 2503】【B09】【需求41779】应用联网控制-UI状态更新实时更新到命令（关-开-关）-未开启过安全功能
  -      [BUG#346469]【v11 2503】【B09】【需求41775】【内核模块防卸载】首次开启内核模块防卸载，关闭弹框后界面没有提示重启生效
  -      [BUG#346521]【V11 2503】【B09】【需求41773】【文件防篡改】首次开启文件防篡改，点击稍后重启后，界面没有重启提示
  -      [BUG#346649]【v11 2503】【B09】【需求41777】【进程防杀死】off模式开启进程防杀死，点击稍后重启后，界面没有提示重启生效
  - 
  -      添加0018补丁，修复防火墙、联网管控问题。----jiaohongjie
  -      [BUG#363405]【v11-2503】【B14】【账户保护】密码强度默认为自定义
  -      添加多个应用或软件包时，增加交互进程条；优化添加软件包窗口和结果提醒弹窗出现顺序
  -      优化添加软件包对话框：搜索保持选中状态、搜索内容为空时回车关闭问题修复
  - 
  -      添加0019补丁，补充用户手册遗漏内容
  -      添加0020补丁，修复安全热点问题 ----zhaoqingyou
  -      [任务#468465][安全红线]整改自研组件第一轮安全热点扫描的问题-ksc-defender


author: duanhongtao <duanhongtao@kylinos.cn> - 3.0.0-9
changelog:
  - Type:update
  - ID:[BUG#359365][BUG#364657][BUG#364573][BUG#353220][BUG#367341][BUG#353220][BUG#351500][BUG#347416][BUG#347377]
  - SUG:NA
  - DESC:
  -      添加0021补丁，修复完善以下问题
  -      [BUG#359365] off模式下开启内核模块防卸载未立即重启界面选中关闭，无重启生效提示
  -      [BUG#364657]【应用程序执行控制】普通用户访问安全中心，脚本管控开关未置灰
  -      [BUG#364573]【控制面板安全】控制面板-安全中心-安全加固-界面排版存在问题
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误
  -
  -      添加补丁0022 修复可信度量弹窗以及可信根问题;用户手册删除不存在内容以及调整顺序问题。--hanhuijie
  -      [BUG#367341]【V11 2503】【B15】【需求41769】【安全中心】【可信度量】【KYEE】篡改grub.cfg后，可信度量项UEFI失败，通知是英文	
  -      [BUG#353220]【V11 2503】【B11】【需求41769】【安全中心】【可信度量】【TPM/TCM】开启可信度量，查看可信根、BIOS、GRUB详情，可信根描述有误 
  -      [BUG#351500]【V11 2503】【B10】【需求41769】【安全中心】【可信启动】【TPM/TCM/KYEE】不可信状态下，切换用户后登录系统，未弹出通知 
  -      [BUG#347416]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】查看帮助手册内容有问题 	    
  -      [BUG#347377]【V11 2503】【B09】【需求41769】【安全中心】【可信度量】【TPM/TCM】篡改BIOS配置后，系统未给通知
  -
  -      添加补丁0023 修复fortify问题。--zhaoqingyou
  -      [任务#471067][安全红线]整改自研组件第一轮Fortify问题-ksc-defender


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-10
changelog:
  - Type:update
  - ID:[BUG#372255][BUG#372147][BUG#370307] 	
  - SUG:NA
  - DESC:
  -      添加0024补丁，修复完善以下问题     ---jiahongjie
  -      应用联网管控提示语更新、优化删除按钮显示、软件包UI界面图标优化等
  - 
  -      添加0025补丁，修复完善以下问题     ---xuyujun
  -      涉密接管后，应用程序执行控制和应用联网控制修改为还可以继续使用
  - 
  -      添加0026补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#372255]【V11-2503】【B16】【需求41799】【可信启动】【TPM/TCM】命令行开启可信启动为拦截模式，切换安全中心界面，可信度量未选中开关 		    
  -      [BUG#372147]【V11-2503】【B16】【需求41769】【安全中心】【可信度量】【TPM/TCM/KYEE】开启文案长度不应该显示省略号
  -      [BUG#370307]【V11 2503】【B15】【需求41769】【可信度量日志】【KYEE】可信启动日志-在安全中心进行可信状态修改，日志查看器找不到操作日志    
  -
  -      添加0027补丁, 添加麒麟版本声明, 删除未使用代码 ---zhaoqingyou


author: maqiting <maqiting@kylinos.cn> - 3.0.0-11
changelog:
  - Type:update
  - ID:[BUG#377081][BUG#376931][BUG#378261][BUG#378697][BUG#378695]
  - SUG:NA
  - DESC:
  -      添加0028补丁，修复完善以下问题     ---duanhongtao
  -      [BUG#377081] 【B17】【应用程序执行控制】off模式开启应用程序执行控制把box也打开
  -
  -      添加0029，0030补丁，修复完善以下问题     ---maqiting
  -      [BUG#376931] 【V11-2503】【B17】【账户保护】账户锁定-关闭账户锁定登录测试，关闭锁定后重新打开安全中心，账户锁定自动打开
  -      [BUG#378261] 【v11-2503】【B17】【需求41775】【内核模块防卸载】off模式开启内核模块防卸载重启生效提示信息不对 
  -      更新设置-安全模式按钮展示逻辑，删除冗余代码
  -      [BUG#378697] 【V11 2503】【build18】【安全设置】UI上从安全模式从关闭切换成严格模式，未提示重启生效
  -      [BUG#378695] 【V11 2503】【build18】【安全设置】安全模式切换-初始状态从UI上切换到推荐，未提示重启生效


author: sunjin <sunjin@kylinos.cn> - 3.0.0-12
changelog:
  - Type:update
  - ID:[BUG#378983]
  - SUG:NA
  - DESC:
  -      添加0031补丁，修复完善以下问题     ---sunjin
  -      [BUG#378983] 【V11-2503】【B18】【安全加固】【首页显示】安全扫描，扫描结果时间显示省略号


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-13
changelog:
  - Type:update
  - ID:[BUG#383817]
  - SUG:NA
  - DESC:
  -      添加0032补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#383817] 【出厂测试】【v11 2503】0711提测的手册存在需要修改的内容
  -      添加0033补丁，修复可信度量英文标题大小写问题&&模块防卸载翻译 ---hanhuijie
  -      添加0034补丁，修复完善以下问题     ---duanhongtao
  -      [BUG#353095] 状态为permissive时安全中心的开关为关闭
  -      [BUG#347148]【应用程序执行控制】应用程序执行控制按钮文字不为“开启”
  -      添加0035补丁，【联网管控】增加重复添加应用提醒等优化     ---jiaohongjie
  -      添加0036补丁，安全中心开始与控制面板打开安全加固打开高亮问题&&命令行打开后增加更新optionName接口，侧边栏高亮并且手册支持跳转     ---hanhuijie


author: hanhuijie <hanhuijie@kylinos.cn> - 3.0.0-14
changelog:
  - Type:update
  - ID:[BUG#406159]
  - SUG:NA
  - DESC:
  -      添加0037补丁，修复完善以下问题     ---hanhuijie
  -      [BUG#406159] 【20250826update内网源测试】【arm/loongarch/x86-v11 2503】ksc-defender软件包导致侧边栏安全加固切换失败


author: maqiting <maqiting@kylinos.cn> - 3.0.0-16
changelog:
  - Type:update
  - ID:[BUG#442687][BUG#444721][BUG#448963]
  - SUG:NA
  - DESC:
  -      添加0039补丁，修复完善以下问题
  -      安全中心整体尺寸适配
  -      新增密码强度-自定义密码历史数量的设置
  -      [BUG#444721] 【攻关】账户保护-密码强度，边界值存在歧义
  -      [BUG#442687] 【攻关】账户保护-密码强度，推荐的说明没有密码历史的默认值为0
  -      [BUG#448963] 【攻关】【账户保护】【密码历史】安全中心显示不完整


author: maqiting <maqiting@kylinos.cn> - 3.1.0-1
changelog:
  - Type:update
  - ID:[任务#538245][任务#538275]
  - SUG:NA
  - DESC:
  -       整理历史补丁（0001-0039)，升级主框架，重新打包源码，升级大版本到3.1.0
  -       添加补丁 0001-update-password-history-parameter.patch，更新密码历史写入参数
  -       添加补丁 0002-Add-SecurityReport.patch
  -      【安全中心】新增安全报告功能
  -       添加补丁 0003-add-security-reinforce.patch
  -       任务538275 支持安全加固3.0独立工具
  -       添加补丁 0004-update-SecurityTools-translation.patch，更新安全工具下翻译
  -       添加补丁 0005-SecurityReport-remove-MemoryIntegrity.patch，安全报告移除内存完整性


author: maqiting <maqiting@kylinos.cn> - 3.1.0-2
changelog:
  - Type:update
  - ID:[任务#570943][BUG#484387][BUG#481973][BUG#481967]
  - SUG:NA
  - DESC:
  -      [任务#570943]  龙芯可信启动功能适配安全中心显示  
  -      添加补丁 0006-ksc-defender-support-loongarch-tpm.patch,适配loogarch
  -      添加补丁 0007-fix-undefined-symbol.patch, 修复所有未定义符号
  -      添加补丁 0008-fix-missing-TCSecurity.patch,可信度量宏定义区分环境
  -      添加补丁 0009-fix--exec-scripes-for-securityreport.patch,增加脚本管控记录
  -      [BUG#484387] 【V11 2603】【B03】【需求41769|44504】【安全中心】【可信度量】【TPM/TCM】安全中心没有可信度量界面
  -      [BUG#481973] 【V11 2603】【需求59251】【账户保护】安全中心-账户保护缺失
  -      [BUG#481967] 【V11 2603】【需求59253】【B03】安全中心未显示安全报告


author: hanhuijie <hanhuijie@kylinos.cn> - 3.1.0-3
changelog:
  - Type:update
  - ID:[BUG#486753][BUG#486755][BUG#486115][BUG#486113][BUG#486059][BUG#486033]
  - SUG:NA
  - DESC:
  -      [BUG#486753]【V11 2603】【B05】【需求59253】安全报告-安全处理器入口名称错了	  
  -      添加补丁 0010-fix-securityreport-bug.patch
  -      [BUG#486755]【v11 2603】【B05】【需求59253】【应用程序执行控制】脚本管控开启时，关闭执行控制，脚本管控报告出现两条 
  -      [BUG#486115]【V11 2603】【B05】【需求59253】安全报告-内核隔离-内存访问保护未启用正常-rodata关闭后内存访问保护还是开启 
  -      [BUG#486113]【V11 2603】【B05】【需求59253】安全报告-内核隔离-内存访问保护未启用不生效 
  -      [BUG#486059]【V11 2603】【B05】【需求59253】【安全报告】默认状态检查，下方默认状态和设计不一致 
  -      [BUG#486033]【V11 2603】【B05】【需求59253】安全报告-内核隔离-默认状态检查-显示未启用


author: maqiting <maqiting@kylinos.cn> - 3.1.0-4
changelog:
  - Type:update
  - ID:[任务#586041]
  - SUG:NA
  - DESC:
  -      [任务#586041] 编写安全中心单元测试代码
  -      添加补丁 0011-update-unit-test.patch
  -      第一轮单元测试覆盖率提升，修复漏洞和安全热点问题，整改自研组件Fortify问题
  -      添加安全报告在控制面板的显示


author: xuyujun <xuyujun@kylinos.cn> - 3.2.0-1
changelog:
  - Type:update
  - ID:[任务#567607][任务#549793][需求#66843][需求#66845][需求#66847][BUG#488091][BUG#488063][BUG#488045][BUG#489105][BUG#491373][BUG#567653][BUG#492813]
  - SUG:NA
  - DESC: 
  -      重新打包源码，升级大版本到3.2.0
  -      [任务#567607] 安全中心和kysec-daemon接口联调
  -      [任务#549793] 内核模块黑名单增强功能实现
  -      [需求#66843] 安全中心增强，设备管控支持对USB接口、光驱、有线网络的管控
  -      [需求#66845] 安全中心增强，增加流量统计界面，可显示应用程序上下行流速
  -      [需求#66847] 安全中心增强，增加流量管控操作界面，可对应用设置上下行流速限制
  -      [BUG#488091] 【V11 2603】【B05】【需求41779】使用命令更新联网管控的策略，安全中心重新进入联网管控界面状态不更新
  -      [BUG#488063] 【v11 2603】【B06】【需求41771】【应用程序执行控制】off模式开启应用程序执行控制需要重启，重启生效提示信息不对
  -      [BUG#488045] 【v11 2603】【B05】【需求41777】【进程防杀死】安全中心双击进行防杀死图标，图标样式发生变化
  -      调整可执行控制/文件保护日志; 调整安全报告图标; 添加麒麟版权声明; update notify; ksc-common-lib TCSecurity 单元测试覆盖率提升
  -      fpro-增加目录添加和授权管理; dbus_interface 单元测试, 设置界面新增进度条; 添加设备管控及功能优化; 修复ktableview编译报错
  -      [BUG#489105] 【v11 2603】【B05】【安全中心】密码强度-无dbus调用日志
  -      [BUG#491373] 【V11 2603】【B07】【需求59253】安全报告-安全处理器详情的厂商ID和型号名称与lscpu查询出的不一致
  -      [BUG#567653] 【V11 2603】安全中心流量管控更新日志
  -      [BUG#492813] 【V11-2603】【B04】【漏洞挖掘】ksc-defender组件存在KVE-2026-0207漏洞


author: maqiting <maqiting@kylinos.cn> - 3.2.0-2
changelog:
  - Type:update
  - ID:[BUG#495225][BUG#495317][任务#586035][BUG#497625][BUG#497555][BUG#496705][BUG#496439][BUG#486079]
  - SUG:NA
  - DESC:
  -       添加补丁 0001-fix-ksc-defender-bugs.patch 
  -       BUG#495225 【V11 2603】【B07】【需求41769】【安全中心】【可信度量】【KYEE】篡改grubaa64.efi后，可信度量项UEFI失败，但不存在告警通知弹窗
  -       BUG#495317 【V11 2603】【B07】【需求41769】【安全中心】【可信度量】【KYEE】度量阶段使用英文展示
  -       任务#586035 去除安全中心设备管控依赖 
  -       代码第二轮合规整改，包含单元测试、fortify扫描问题修改等
  -       BUG#497625 【V11 2603】【需求66843】【安全工具】【设备安全】设备管控开启后，模块防加载模块会被打开 
  -       BUG#497555 【V11 2603】【需求66843】【安全工具】控制面板无法打开外设管控 
  -       BUG#496705 【v11 2603】【B09】【需求59255】【安全工具】【内核模块防加载】重复添加模块不提示策略已添加
  -       BUG#496439 【v11 2603】【B09】【需求59255】【安全工具】【内核模块防加载】添加文件名不一致，实际模块名称一致的模块时，添加失败，但不提示模块已添加 
  -       BUG#486079 【v11 2603】【B05】【需求59253】【内核模块防加载】功能启停安全报告查看-防加载开关没有


author: hanhuijie <hanhuijie@kylinos.cn> - 3.2.0-3
changelog:
  - Type:update
  - ID:[BUG#499083][BUG#499185][BUG#497885][BUG#497863][BUG#497857][BUG#497809][BUG#497443][任务#586041]
  - SUG:NA
  - DESC:
  -       添加补丁 0002-fix-ksc-defender-bugs-and-unittest.patch 
  -       任务#586041: 提升联网管控的单测覆盖率;修正_ksc_defender_init单元测试
  -       BUG#499083 【v11 2603】【B09】【需求59253】【内核模块防卸载】关闭内核模块防卸载提示功能开启中
  -       BUG#499185 【v11 2603】【B09】【需求59253】【安全报告】 设置繁体，安全报告首页有英文显示
  -       BUG#497885 【B09】【v11 2603】【需求59243】【安全工具】【文件防篡改】字体语言适配，字体最大，显示英文，信息展示补全   
  -       BUG#497863 【B09】【v11 2603】【需求59243】【安全工具】【文件防篡改】重复添加目录保护策略，提示信息错误     
  -       BUG#497857 【B09】【v11 2603】【需求59243】【安全工具】【文件防篡改】重复添加文件保护授权管理策略，提示信息与预期不一致    
  -       BUG#497809 【B09】【v11 2603】【需求59243】【安全工具】【文件防篡改】策略为空时界面未显示暂无内容     
  -       BUG#497443 【b09】【v11 2603】【需求59243】【安全工具】【文件防篡改】无法删除保护策略


author: hanhuijie <hanhuijie@kylinos.cn> - 3.2.0-4
changelog:
  - Type:update
  - ID:[BUG#500353][BUG#497809][BUG#499195][BUG#500433][BUG#499349][BUG#499265][BUG#499195][BUG#499185]
  - SUG:NA
  - DESC:
  -       添加补丁 0003-fix-bugs-fpro-SRM-userguide.patch 提示适配繁体;增加繁体适配；设备安全和内核模块防加载单元测试
  -       BUG#500353 【v11 2603】【B11】【需求59243】【安全工具】【文件防篡改】多次添加授权应用，安全中心无响应
  -       BUG#497809 【B09】【v11 2603】【需求59243】【安全工具】【文件防篡改】策略为空时界面未显示暂无内容
  -       BUG#499195 【v11 2603】【B09】【需求59253】【安全报告】【应用程序执行控制】英文模式下，执行控制的报告内容显示不全
  -       BUG#500433 【v11 2603】【B11】【需求59243】【安全工具】【文件防篡改】添加文件的授权应用，提示为英文
  -       BUG#499349 【V11 2603】【B10】【需求59253】【安全报告】系统默认环境的流量管控条目为英文 
  -       BUG#499265 【V11 2603】【需求59253】安全中心安全报告中，账户锁定/可信启动/密码强度添加100条日志，未更新成功且多了一个安全体检的内容  
  -       BUG#499195 【v11 2603】【B09】【需求59253】【安全报告】【应用程序执行控制】英文模式下，执行控制的报告内容显示不全 	
  -       BUG#499185 【v11 2603】【B09】【需求59253】【安全报告】 设置繁体，安全报告首页有英文显示


author: hanhuijie <hanhuijie@kylinos.cn> - 3.2.0-5
changelog:
  - Type:update
  - ID:[BUG#502495][BUG#500439][BUG#499389][BUG#499119]
  - SUG:NA
  - DESC:
  -       添加补丁 0004-fix-bugs-fpro-test.patch  修改fpro单测;设备相关bug
  -       BUG#502495【2603-B12】【文件防篡改】文件防篡改添加文件提示英文“Successfuly added 1 file”	
  -       BUG#500439【v11 2603】【B11】【需求59243】【安全工具】【文件防篡改】授权管理应用列表无peony     
  -       BUG#499389【v11 2603】【B09】【需求59253】【安全报告】【文件防篡改】安全中心开启关闭文件防篡改，登录普通用户后，报告内容显示在进程防杀里 	    
  -       BUG#499119【v11 2603】【B09】【需求59253】【安全报告】【应用联网控制】刚登录系统时联网管控报告显示异常


author: hanhuijie <hanhuijie@kylinos.cn> - 3.2.0-6
changelog:
  - Type:update
  - ID:[BUG#504747][BUG#505507][BUG#504413][BUG#499125]
  - SUG:NA
  - DESC:
  -       添加补丁 0005-fix-SRM-DEV-Net-Unittest.patch  修改相关bug;可执行控制, 安全工具及控制面板插件单元测试程序
  -       BUG#504747 【V11 2603】【B12】【安全设置】【安全中心】安全模式切换提示为英文
  -       BUG#505507 【V11 2603】【B13】【需求66843】【安全工具】【设备安全】设备权限控制-USB移动存储管控策略配置测试
  -       BUG#504413 【V11 2503】【B12】【需求41779】应用联网控制-帮助文档与实际不一致
  -       BUG#499125 【CND】【v11 2603】【B09】【需求59253】【安全报告】off下开启联网管控选择立即重启，重启后无操作记录


author: hanhuijie <hanhuijie@kylinos.cn> - 3.2.0-7
changelog:
  - Type:update
  - ID:[BUG#506775][BUG#499125]
  - SUG:NA
  - DESC:
  -       添加补丁 0006-fix-SRM-Fpro-bugs.patch  修改安全报告相关bug;文件防篡改fpro-数据模型更新-索引失效问题
  -       BUG#506775 【V11 2603】【需求59253】安全报告-内核隔离-图标不正确
  -       BUG#499125 【CND】【v11 2603】【B09】【需求59253】【安全报告】off下开启联网管控选择立即重启，重启后无操作记录


author: wangjiang <wangjiang37@h-partners.com> - 1:2020.0.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix backport-Fix-hist_nearend.patch
         backport-functions-with-not-loaded-autoloaded-functions.patch
         backport-Fix-interactive-restricted-shell-behavior.patch


author: wangyuhang <wangyuhang27@huawei.com> - 2:1.0.8-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:due to the upstream community no longer maintaining the previous version,
         we have rolled back to the stable branch and switched to an active code repository.
         new upstream release and update version to 1.0.8


author: huayumeng <huayumeng@kylinos.cn> - 0.2.0-1
changelog:
  - Type: update
  - ID: [TASK#223348]
  - SUG: NA
  - DESC: Implement engineering based image construction function


author: huayumeng <huayumeng@kylinos.cn> - 0.2.1-1
changelog:
  - Type: update
  - ID: [TASK#334992]
  - SUG: NA
  - DESC: Supplement ktib unit testing
          The FROM command to supplement dockerfile's functionality can be used for scratch in one step
          Fix the issue of incorrect maintainer retrieval through static scanning function
  	Fix the issue of incorrect label retrieval in static scanning function
  	Fix the issue of incorrect ENV data acquisition in the static scanning function
  	Delete unnecessary functions that have not been called
  	Fixed the issue in the security policy where the image detection returned a non empty value when it was Scratch
  	Fix the ADD and COPY method issue of dockerfile not being detected during non whitelist file detection in the security policy


author: lvxiangcong <lvxiangcong@kylinos.cn> - 0.2.2-1
changelog:
  - Type: bugfix
  - ID: [BUG#243821]
  - SUG: NA
  - DESC: Modify the default config.yml generated by initializing rootfs
  	Fix the issue where the target path does not exist when copying
  	Fix the issue of failed installation of RPM package in container 
  	Fix the issue where images are used by container when building images


author: lvxiangcong <lvxiangcong@kylinos.cn> -0.2.4-1
changelog:
  - Type: update
  - ID: [BUG#334951]
  - SUG: NA
  - DESC: fix error chroot chroot_script.sh file and add kylin copyright


author: lvxiangcong <lvxiangcong@kylinos.cn> - 0.3.0-1
changelog:
  - Type:TASK
  - ID:  [TASK#432698]
  - SUG: NA
  - DESC: Support images manifest manager function
  	Support container images manager function 
  	Imporve and perfect builders build function


author: chendexi <chendexi@kylinos.cn> - 0.5.1-1
changelog:
  - Type: update
  - ID:  [TASK#595819]
  - SUG: NA
  - DESC: Compliance rectification, upgrade to version 0.5.1


author: huayumeng <huayumeng@kylinos.cn> - 0.5.2-1
changelog:
  - Type: bugfix
  - ID:  [BUG#497983][BUG#498087][BUG#498111][BUG#498311][BUG#498313]
  - SUG: NA
  - DESC: Fix bugs, upgrade to version 0.5.2


author: Yuan Chen <chenyuan@kylinos.cn> - 1.0.2-5
changelog:
  - Fix overlapping issues between different chains when detect is enabled.
  - Fix symbol resolution UAF issue
  - fix skb header read
  - add skb head print
  - Updated version to 1.0.2.1 (temporary release).
  - Adapted for SP2 kernel
  - Minor modifications
  - fix the bug of perf event map create.
  - Add multi-directional sock layer tracing and code adjustments.
  - Add PID information collection for return hook event matching, preventing function entry/return mismatches caused by reentrant function calls.
  - Fix similar to .isra functions hook failed
  - Fix application exit hang issues.
  - Move is_skb_life_end function to common.h file.
  - Adjust the numbering format in stack trace prints.
  - Minor code adjustments.
  - Add sock queue SKB enqueue/dequeue monitoring.
  - Fixed IPv6 filtering logic issues.
  - Added a release hook for SKBs to prevent tracking anomalies in partial SKBs.
  - Repair compilation issues outside COMPAT mode.
  - sock event storage supports IPv6 hash computation.
  - Remove some debug messages and adjust certain log levels.
  - The sock UAF (Use-After-Free) stack tracing feature has been implemented. This patch has not undergone comprehensive testing and may contain potential issues.
  - Export the hash bucket's hash operator to allow external provisioning, enhancing flexibility.
  - Increase the default maximum terminal size, adjust the logging level, and avoid outputting unnecessary log information.
  - Add support for FIFO data types.
  - Fix the issue where functions returning void have their return instructions (ret) hooked.
  - add ret hook enable check.
  - Support retval show.
  - Support logging to a file.
  - Fix crash caused by improper thread resource release.
  - Supports reporting socket release events in preparation for subsequent monitoring of socket use-after-free (UAF) vulnerabilities.
  - Revert "Make modifications for loongarch to pass the security department's"
  - Revert "Make modifications to pass the security department's tool detection."
  - Make modifications for loongarch to pass the security department's tool detection.
  - Make modifications to pass the security department's tool detection.
  - Fix softirq latency event synchronization issues.
  - Fix compilation issues in compat mode.
  - User Manual Update
  - Add stack trace functionality for specified functions.
  - Add a hook to the skb_copy_datagram_iter function to track the timestamps when user-space programs retrieve data from sk_buff (skb).
  - add net device name show
  - Simple code optimization
  - Spawn a dedicated print thread
  - We may add more type analyzers for return value checks in the future, so isolating this detection code into a separate module will make modifications easier.
  - Fix packaging naming issues
  - Add DEB package generation support
  - Add the ability to recognize suffixes similar to ".isra" functions
  - Add latency filter
  - Add rtt support
  - Add arp support
  - 添加 CHANGELOG
  - 删除CHANGELOG
  - 添加 CHANGELOG
  - Add netns filter
  - Add rpm kernel version information


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: weiyuan <weiyuan@kylinos.cn> - 1.29.1-10.p01
changelog:
  - Type:update
  - ID:[TASK#427098]
  - SUG:NA
  - DESC:backport v11-2409 patch
         add 1002-add-phytium-tune-for-better-affinity-in-k8s-1.29.patch


author: lizhun <lizhun@kylinos.cn> - 1.29.1-10.p05
changelog:
  - Type:bugfix
  - ID:[TASK#588173]
  - CVE:NA
  - SUG:NA
  - DESC:remove source relevant character in 1005-add-numa-topology-aware-scheduling-in-k8s.patch


author: lijian <lijian2@kylinos.cn> - 1.29.1-10.p06
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport fix CVE-2025-13281
         backport kubeadm preflight checks: fix host URL construction


author: peijiankang <peijiankang@kylinos.cn> - 5.27.10-2.p01
changelog:
  - Type: update
  - ID:   [TASK#426756]
  - SUG:  NA
  - DESC: fix build error
          add 0001-update-changelog-4-5.27.11-ok2.patch
              0002-update-changelog-4-5.27.11-ok3.patch


author: peijiankang <peijiankang@kylinos.cn> - 5.24.7-2.p01
changelog:
  - Type: update
  - ID:   [TASK#425692]
  - SUG:  NA
  - DESC: sync kylin patch from 5.24.7-1.p01
          add 0001-update-changelog.patch to add strength


author: houhongxun<houhongxun@kylinos.cn> - 5.24.4-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#352453]
  - SUG : NA
  - DESC: fix some windows displaying abnormally for 16bit depth


author: peijiankang<peijiankang@kylinos.cn> - 5.24.4-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add kwin-5.24.4-fix-coredump-when-logout.patch


author: houhongxun <houhongxun@kylinos.cn> - 5.24.4-1.p05
changelog:
  - Type: bugfix
  - ID  : [Task#536445]
  - SUG : NA
  - DESC: fix some apps displaying abnormally under 16bit color depth


author: huayadong <huayadong@kylinos.cn> - 5.24.4-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#429071]
  - SUG : NA
  - DESC: add Patch06:kwin-5.24.4-kylin-Turn-off-Tablet-Manager.patch
          关闭平板模式管理器


author: Xu Jin <jinxu@kylinos.cn> - 0.1.0-1.p04
changelog:
  - Type:update
  - ID:TASK#599859
  - SUG:NA
  - DESC:fix fortify findings and add key comments to .rs files


author: Xu Jin <jinxu@kylinos.cn> - 0.1.0-1.p05
changelog:
  - Type:bugfix
  - ID:BUG#501083 BUG#501081 BUG#501071 BUG#501067
  - SUG:NA
  - DESC:fixbug 501083 501081 501071 501067


author: sunliqiang <sunliqiang@kylinos.cn> - 1.0.0-1
changelog:
  - Type: update
  - ID: [Task#588423]
  - SUG: NA
  - DESC: Initial package of kybzip2 (pure Rust implementation)


author: wangshuo <wangshuo@kylinos.cn> - 0.1.0-1
changelog:
  - Initial release
  - Pure Rust implementation with no external dependencies
  - Compatible with GNU cpio 2.14


author: songliyang <songliyang@kylinos.cn> - 1.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#588423]
  - SUG:  NA
  - DESC: Initial package of kydiffstat, a pure Rust rewrite of diffstat


author: songliyang <songliyang@kylinos.cn> - 1.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#588423]
  - SUG:  NA
  - DESC: Initial release
          Implements find with -name, -iname, -type, -size, -mtime, -atime, -ctime
          Implements find with -perm, -user, -group tests
          Implements find with -print, -print0, -exec, -delete actions
          Implements find with logical operators -and, -or, -not
          Implements find with -maxdepth, -mindepth options
          Implements xargs with -0, -n, -I, -P, -t, -r, -d options


author: xiejing <xiejing@kylinos.cn> - 1.0.0-1
changelog:
  - Type: update
  - ID: [TASK#588423]
  - SUG: NA
  - DESC: Init kyflamegraph package (Rust rewrite of FlameGraph)


author: lipengyu <lipengyu@kylinos.cn> - 0.1.0-3
changelog:
  - Type:update
  - ID:[TASK#602253]
  - SUG:NA
  - DESC:1.add config.toml to fix CI failure
         2.modify help infomation


author: Li Chenguang <lichenguang@kylinos.cn> - 1.0.0-1
changelog:
  - Type: update
  - ID: [Task#358553]
  - SUB: NA
  - DESC: version: 1.0.0，修复以下问题：
  -   a. 修改unapply处理逻辑
  -   b. 修改query处理逻辑
  -   c. 删除操作成功也会提示的信息, 修改完善命令行补全
  -   d. 修复profile.manager模块add接口变量reassign问题
  -   e. 修改日志默认级别为INFO
  -   f. 移除ldop/cli/config.py中注释代码


author: Li Chenguang <lichenguang@kylinos.cn> - 1.0.0-2
changelog:
  - Type: update
  - ID: [Task#383051]
  - SUG: NA
  - DESC:
  -   添加以下功能:
  -   a. 增加单方案参数冲突时层级关联处理
  -   修复以下问题:
  -   a. 规范dbus接口错误代码
  -   b. 修复单元测试导致koji编译失败的问题
  -   c. 修复fortify检测报告中的两处错误


author: guoshengsheng <guoshengsheng@kylinos.cn> - 1.0.0-3
changelog:
  - Type: update
  - ID: [Task#391119]
  - SUG: NA
  - DESC:
  -    1. 修复自研软件开发代码文件未标注麒麟软件版权头的问题
  -    2. V11版本kyldop组件中不安全函数修复:
  -      a. 修改memcpy函数为memcpy_s函数
  -      b. 修改snprintf函数为snprintf_s函数
  -      c. 修改memset函数为memset_s函数


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-1
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 使用meson构建工具管理工程;
  - 2. 调整优化服务架构，核心功能代码下沉至安全层； 
  - 3. 调整前端管理工具，使用新接口规划;
  - 4. 新增precheck功能，保证优化服务仅在麒麟系统上运行;
  - 5. 优化模块支持多场景切换；
  - 6. 优化方法支持中断绑核功能；
  - 7. 集成用户手册和优化方案编写规范手册。


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-2
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 修复门禁系统兼容性分析问题 
  - 2. 修复门禁系统合规分析问题； 
  - 3. 提升ldop-ext模块的单元测试覆盖率;


author: lichenguang <lichenguang@kylinos.cn> - 1.0.1-4
changelog:
  - Type: update
  - ID: [Task#442809]
  - SUG: NA
  - DESC:  
  - 1. 提升单元测试覆盖率至80%; 
  - 2. 修复sonarqube扫描中的部分问题；


author: lichenguang <lichenguang@kylinos.cn> - 1.0.2-4
changelog:
  - Type: update
  - ID: [TASK#593001] [TASK#595565]
  - SUG: NA
  - DESC: 
  - 1. 威胁分析整改: 新增审计日志防篡改机制 [TASK#593001] 
  - 2. kyldop模糊测试整改：完善模糊测试代码，提升测试覆盖率。[TASK#595565]


author: zhangdashuang<zhangdashuang@kylinos.cn> - 1.3.10-5.p05
changelog:
  - add patch kylin_activation_fix_76021_76160_76173_75744.patch
  - fix bug76021 bug76160 bug76173 bug75744


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p18
changelog:
  - add patch 18:kylin_activation_fix_103100.patch
  - bug 103100:【济宁市委】ukey激活异常 
  - 本次更新解决激活ukey后会导致断错误,移除了华为可信1.3.10-10到1.3.10-17版本.


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p20
changelog:
  - add patch30 kylin_activation_fix_103100_ukey_activation_error.patch
  - bug 103100 ukey激活异常，优化激活过程。使界面不弹出Marco，系统不卡顿。


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p22
changelog:
  - Type:bugfix&task
  - ID:[BUG#122719] [TASK#88923] 
  - SUG:NA
  - DESC:limit dbus method import_auth_file


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p24
changelog:
  - Type:bugfix
  - ID:[BUG#89131&&BUG128952]
  - SUG:NA
  - DESC:fix show qr code err and import License err


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p25
changelog:
  - Type:update
  - ID:[TASK#105221]
  - SUG:NA
  - DESC:Venue authorization limited time unlimited demand support


author: zhangjun <zhangjun@kylinos.cn> - 1.3.10-5.p27
changelog:
  - Type:bugfix
  - ID:[BUG#139688]
  - SUG:NA
  - DESC:fix kms client not show deactivation button while config serverip is url(patch27)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-5.p31
changelog:
  - Type:bugfix
  - ID:[BUG#178000] [TASK#176779] [TASK#179475]
  - SUG:NA
  - DESC: add get trial date fuction for dbus
  - DESC: open auto activation for kms privatization
  - DESC: add ipv6 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-5.p33.02
changelog:
  - Type: bugfix
  - ID:[bug#216077]
  - SUG: NA
  - DESC: add tips when inputed activation code is too short


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p02
changelog:
  - Type: update
  - ID:[TASK#329559]
  - SUG:NA
  - DESC: add copyright of kylinsoft
  - DESC: delete useless code


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p09
changelog:
  - Type: update
  - ID:[TASK#350617][bug#292043][bug#292411]
  - SUG:NA
  - DESC: Fix domain activation failure and add more utest case
  - DESC: fix dbus low level cve


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p16
changelog:
  - Type: update
  - ID:[TASK#436445][TASK#432968]
  - SUG: NA
  - DESC: add fuzz check
          add secret key activation
          add deactivation function
          adjust the configuration file to the/etc directory
          adjust activate the policy to the server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p17
changelog:
  - Type: bugfix
  - ID: [BUG#336521][BUG#336143] 
  - SUG: NA
  - DESC: update get activation code from kylin


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p18
changelog:
  - Type: bugfix
  - ID: [BUG#336143][TASK#442197][BUG#336809][BUG#339458][BUG#338942]
  - SUG: NA
  - DESC: update spec to fix install error
  	integrate value for added product
  	upate get activation status logic


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p22
changelog:
  - Type: update
  - ID:[TASK#463164][BUG#348859][TASK#466714]
  - SUG: NA
  - DESC: ajust the size of the Confirm Cancel button
  	check license osname locally when kms version lower than 2.5
  	fix security compilation issues


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p24
changelog:
  - Type: update
  - ID:[TASK#544093][TASK#502175][BUG#440309]
  - SUG: NA
  - DESC: upload cpu and os version info to kms server
  	fix kms activation execution stuck


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p25
changelog:
  - Type: update
  - ID:[TASK#553999][TASK#554007]
  - SUG: NA
  - DESC: optimize windows display
          add permission control


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p26
changelog:
  - Type: update
  - ID:[TASK#554091][BUG#481523]
  - SUG: NA
  - DESC: unified logger and configuration file
          support for displaying versions in multiple languages


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p27.06
changelog:
  - Type: bugfix
  - ID:[BUG#502191][BUG#501583]
  - SUG: NA
  - DESC: fix KVE-2026-0105
          optimizate secret key activation failure prompt


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.3.10-6.p27.07
changelog:
  - Type: bugfix
  - ID:[BUG#503743][BUG#503739][BUG#504233]
  - SUG: NA
  - DESC: fix set autoactivated failed for kms 
          add check for dbus func write_common_log


author: lichenguang <lichenguang@kylinos.cn> 1.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#473471]
  - SUG : NA
  - DESC: Fix security hotsposts in the sonarqube report.


author: zhaokexin<zhaokexin@kylinos.cn> 1.1.0.1-0k1.32.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#504199]
  - SUG : NA
  - DESC: Address the local privilege escalation vulnerability


author: huayadong<huayadong@kylinos.cn> - 2.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Source1: QtWebEngine-aarch64.tar.gz
              Source2: QtWebEngine-loongarch.tar.gz
              Source3: QtWebEngine-x86.tar.gz


author: peijiankang<peijiankang@kylinos.cn> 2.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#418058]
  - SUG : NA
  - DESC: remove debug files during compilation process
          add kylin-aiassistant-2.0.0-kylin-add-copyright.patch


author: huayadong<huayadong@kylinos.cn> - 2.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#422649]
  - SUG : NA
  - DESC: remove Source1: QtWebEngine-aarch64.tar.gz
                 Source2: QtWebEngine-loongarch.tar.gz
                 Source3: QtWebEngine-x86.tar.gz


author: douyan<douyan@kylinos.cn> 2.0.0.0-0v11k1.22k1.46
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: Update upstream version 2.0.0.0-0v11k1.22k1.46


author: zhoudisi<zhoudisi@kylinos.cn> 2.0.0.0-0v11k1.22k1.46.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#499865] [BUG#499789]
  - SUG : NA
  - DESC: fix introduction widget not show and avoid panel persistent icon problem


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: kylin-process-manager-daemon-4.10.0.0-fix-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-process-manager-4.10.0.0-ok1.33k1.5
          upstream commtid:0038ddf0249de1761514d30db39c7730dc0a1242


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#452549]
  - SUG : NA
  - DESC: remove kylin-process-manager core functionality


author: qiaojijun <qiaojijun@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#473473]
  - SUG : NA
  - DESC: kylin-process-manager fix sonarqube hotpoints


author: douyan<douyan@kylinos.cn> 3.2.0.1kylin1k32.01-1
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: Update upstream version 3.2.0.1kylin1k32.01-1


author: peijiankang <peijiankang@kylinos.cn> - 3.2.0.1kylin1k32.01-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-burner-3.2.0.1kylin1k32.01-ok28k0.15
          upstream commtid:a75a72f1b921070dfeaaae1aed4f80961ddcd4e4


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.0-ok6.15k0.7
          upstream commitid: 37ab1d619f81aa00f85a1decdfe505518e0f5ddd


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#250087]
  - SUG : NA
  - DESC: Add patch: kylin-calculator-1.2.0.0-disable-feedback.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-calendar-4.10.0.0-ok2.16k0.12
          upstream commtid:33a3c76c0b50b9058fdebd352de5229ce21d71bb


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#250111]
  - SUG : NA
  - DESC: Patch0002: kylin-calendar-4.10.0.0-kylin-update-zh_HK-translation.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-calendar-4.10.0.0-Single-instance-addition-of-DISPLAY-judgment.patch


author: huayadong <huayadong@kylinos.cn> - 3.24.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#424335]
  - SUG:  NA
  - DESC: update version to 3.24.0.0-0k0.35
          fix KVE-2024-1102


author: peijiankang <peijiankang@kylinos.cn> - 3.24.0.0-1.p01
changelog:
  - Type: bugfix
  - ID:   [BUG#289223]
  - SUG:  NA
  - DESC: add kylin-device-daemon-3.24.0.0-fix-coredump-when-quit.patch


author: ganjianqing <ganjianqing@kylinos.cn> - 1.2.0.0-1
changelog:
  - Initial kylin-disk-encryption code  based on  desktop 1.2.0.0-1k1.35~1 version of bugfix/yhkylin/v11 brach


author: kangyu <ganjianqing@kylinos.cn> - 1.2.0.0-1.se.04
changelog:
  - Types:update
  - ID:BUG#501283 BUG#500985 BUG#500945 BUG#500597
  - SUG:NA
  - DESC:modify auto mount after umount and fuser error


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: Update ukui-settings-daemon-4.10.0.0-fix-shortcut-open-terminal-fail.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-save-param-SIGABRT.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#291269]
  - SUG : NA
  - DESC: ukui-settings-daemon-4.10.0.0-fix-targetBrightness-to-100.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#304113]
  - SUG : NA
  - DESC: add Patch5:ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.18k0.9


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: update ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch
          add ukui-settings-daemon-4.10.0.0-add-copyright-info.cpp


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#379967]
  - SUG : NA
  - DESC: add ukui-settings-daemon-4.10.0.0-kylin-fix-push-power-btn-error.patch
          add ukui-settings-daemon-4.10.0.0-fix-authoritydbus-name-error.patch


author: huayadong <huayadong@kylinos.cn> - 1.1.0.13-1.p01
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: sync code from desktop kylin-font-viewer-1.1.0.13-0k1.29
          upstream commtid:0ae74a01cdd70dde46befbfd78de32da65762861


author: yangxudong <yangxudong@kylinos.cn> - 1.0-2.5.p03
changelog:
  - Type:bugfix
  - ID:[BUG#236047]
  - CVE:NA
  - SUG:NA
  - DESC:modify addons repo url
  - DESC:modify ks10 to v11


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-theme-4.10.0.0-0k0.13
          upstream commtid:dc0ff06586aca10e1729d9b7a4aa2c5f138c72fa


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#495463]
  - SUG : NA
  - DESC: adapt kysp-editor and security-reinforce icons name


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [TASK#599375][BUG#498103]
  - SUG : NA
  - DESC: add copyright head and add kybox icons


author: jiangping <jiangping@kylinos.cn> - 7-14.1.01
changelog:
  - Add kylin-indexhtml-7-14.1-kylin-change-Desktop-to-Advanced-Server.patch
  - Fixed kylinbz#1360, change Desktop to Advanced Server


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.2-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-ipmsg-1.3.1.2-ok16.15k0.8
          upstream commtid:6fec1925bb1cec7080dcc22863c6aba3563582a9


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.2-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586745]
  - SUG : NA
  - DESC: sync code from desktop kylin-ipmsg-1.3.1.2-ok16.15k0.22


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0-1.se.10
changelog:
  - Type: bugfix
  - ID:   [BUG#205800]
  - SUG:  NA
  - DESC: add update-kylin-log-viewer-1.0.0-zh_HK-translations.patch


author: mengyuan <mengyuan@kylinos.cn> - 1.0.0-1.se.12
changelog:
  - Type: update
  - ID:[TASK#332807][BUG#240017]
  - SUG:  NA
  - DESC:
  - 新增单元测试代码
  - 移除sqlite库源码
  - 更新日志查看器帮助手册


author: fuwei <fuwei@kylinos.cn> - 1.0.0-1.se.14
changelog:
  - Type: bugfix
  - ID:   [BUG#241411][BUG#241676][BUG#249019]
  - SUG:  NA
  - DESC:
  - root用户判权问题优化
  - 修复麒麟安全日志不显示的问题
  - 时间窗口显示不符合预期问题


author: liu_yi <liu_yi@kylinos.cn> - 1.0.0-1.se.16
changelog:
  - Type: update
  - ID:   [TASK#361225][TASK#366335][TASK#363305]
  - SUG:  NA
  - DESC: 添加安全编译参数
  		安全函数整改
  		添加ksaf日志适配
  - 添加补丁:	
  - TASK-361225-add-security-compile-parameters.patch
  - TASK-366335-fix-sonarcube-scan-bugs.patch
  - TASK-366335-fix-sonarcube-scan-bugs-for-security-func.patch
  - TASK-363305-ksaf-log-adaptation.patch
  - KYLIN-supplement-file-header-comment.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.17
changelog:
  - Type: update
  - ID:   [TASK#360909][BUG#292413][BUG#292409][BUG#292405][BUG#292401][BUG#289875][BUG#295607]
  - SUG:  NA
  - DESC: KVE漏洞修复
  - 启动日志无法查看修复
  - 图标显示不一致
  - unit test modules & params
  - 添加补丁:
  - fix-KVE-startup-icon.patch
  - TASK-360909-feat-add-sonarqube-params-in-build.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.18
changelog:
  - Type: update
  - ID:   [BUG#291723][BUG#295643][BUG#297323]
  - SUG:  NA
  - DESC: 安全日志明细操作字段显示
  - 登录日志同一用户两条日志过滤
  - 登录失败级别修改为错误
  - 添加补丁:
  - bug-291723-kysec-log-information-table-op.patch
  - bug-295643-297323-login-log.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.19
changelog:
  - Type: update
  - ID:   [BUG#293841]
  - SUG:  NA
  - DESC: 
  - strict模式下，所有用户都能查看日志查看器
  - 添加补丁:
  - bug-293841-permission-problems-in-strict-mode.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.20
changelog:
  - Type: update
  - ID:   [BUG#310625][TASK#361225][TASK#420685]
  - SUG:  NA
  - DESC: KVE漏洞修复
  		添加strip编译参数
  		添加copyright
  - 添加补丁:
  - bug-310625-fix-kve-2022-0308.patch
  - TASK-361225-add-strip-security-compile-parameter.patch
  - TASK-420685-supplement-header-comment.patch
  - TASK-420685-supplement-header-comment-update.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.21
changelog:
  - Type: update
  - ID:   [BUG#330366][BUG#297363][BUG#297421]
  - SUG:  NA
  - DESC: 修复崩溃日志无显示
  		更新单元测试文件
  		修复字体样式未随系统切换
  		修复审计日志导出后文件内容存在特殊字符
  		合规性整改
  - 添加补丁:
  - bug-330366-no-crash-log-display-after-crash.patch
  - update-unit-test-file.patch
  - bug-297363-font-update-with-system.patch
  - bug-297421-special-character-displayed-when-export-audit-log.patch
  - update-code-compliance-rectification.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.22
changelog:
  - Type: update
  - ID:   [BUG#338424]
  - SUG:  NA
  - DESC: 添加dbus方法级管控接口
  - 添加补丁:
  - bug-338424-add-dbus-interface-access-control.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.23
changelog:
  - Type: update
  - ID:   [TASK#439187][TASK#439188]
  - SUG:  NA
  - DESC: debug模式下禁用dbus接口管控
  		安全操作日志需求
  		适配kysec2.0内核日志
  - 添加补丁:
  - update-disable-dbus-access-control-in-debug.patch
  - TASK-439187-adapted-to-operation-log.patch
  - TASK-439188-adapted-to-kysec2.0-kernel-log.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.24
changelog:
  - Type: update
  - ID:   [BUG#295643][BUG#314413][BUG#347837][BUG#347838]
  - SUG:  NA
  - DESC: ssh登录失败等级为警告
  		root用户被锁定没有日志
  		复制日志失败
  		数据加载完成后提示窗不会自动退出
  - 添加补丁:
  - bug-295643-level-warning-when-ssh-login-failed.patch
  - bug-314413-no-root-locked-log.patch
  - bug-347837-copy-log-failed.patch
  - bug-347838-dialog-auto-exits-after-loading-completed.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.25
changelog:
  - Type: update
  - ID:   [BUG#347841][BUG#346493]
  - SUG:  NA
  - DESC: 主题适配
  		未知用户登陆等级修改为错误
  		关闭文件防篡改等级修改为警告
  - 添加补丁:
  - bug-347841-adapt-to-system-theme.patch
  - update-unknown-user-login-failed-is-error.patch
  - bug-346493-the-level-is-information-when-close-kysec-fpro.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.26
changelog:
  - Type: update
  - ID:   [BUG#346493][BUG#346442]
  - SUG:  NA
  - DESC: 更改warning级别翻译为告警
  		修复kysec命令行操作在麒麟安全中无显示问题
  		修复测试用例编译问题
  - 添加补丁:
  - update-warning-of-translation-issue.patch
  - update-kysec-cmd-operation-is-not-displayed.patch
  - update-test-case-compilation-issue.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.27
changelog:
  - Type: update
  - ID:   [BUG#375807][BUG#376571]
  - SUG:  NA
  - DESC: 用户手册无法打开、更新用户手册
  		default模式无应用日志：应用日志暂不显示
  		代码通过clang-format格式化
  - 添加补丁:
  - bug-375807-user-guide-cannot-be-opened.patch
  - bug-376571-ordinary-users-do-not-display-app-logs.patch
  - update-standardized-code-format.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.28
changelog:
  - Type: update
  - ID:   [TASK#553757]
  - SUG:  NA
  - DESC: 栈保护安全编译参数修改
  - 添加补丁:
  - TASK-553757-update-stack-protector-compile-parameter.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.0-1.se.01
changelog:
  - Type: update
  - ID:   [TASK#561173]
  - SUG:  NA
  - DESC: 增加安装日志
  - 添加补丁:
  - TASK-561173-enable-application-option-and-device-option.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.0-1.se.02
changelog:
  - Type: update
  - ID:   [BUG#476933][BUG#476975]
  - SUG:  NA
  - DESC: 安装日志等级错误
  		用户手册更新
  - 添加补丁:
  - bug-476933-no-error-level-log-in-app-log.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.0-1.se.03
changelog:
  - Type: update
  - ID:   [TASK#587395]
  - SUG:  NA
  - DESC: 日志清理和日志轮替移植
  		数据库操作优化移植
  - 添加补丁:
  - TASK-587395-add-logclean-and-logrotate.patch
  - TASK-587395-database-operation-optimization.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.0-1.se.04
changelog:
  - Type: update
  - ID:   [TASK#587759]
  - SUG:  NA
  - DESC: kysdk适配
  		测试用力编译问题修复
  		代码合规问题整改
  - 添加补丁:
  - update-test-case-compilation-1se03.patch
  - update-code-compliance-rectification-1se03.patch
  - TASK-587759-adapt-to-the-kysdk-interface.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.0-1.se.05
changelog:
  - Type: update
  - ID:   [TASK#596947]
  - SUG:  NA
  - DESC: 二阶段合规整改
  - 添加补丁:
  - TASK-596947-safety-and-compliance-rectification.patch
  - fix-crash-when-exit-during-search-table.patch


author: huayadong <huayadong@kylinos.cn> - 1.0-6.8.p02
changelog:
  - Type: bugfix
  - ID  : [Bug#226228]
  - SUG : NA
  - DESC: add Patch01:kylin-logos-1.0-change-KylinSoft-Corporation-COPYING.patch


author: Qin Fandong <qinfandong@kylinos.cn> - 5.0.1.p04
changelog:
  - Type:bugfix
  - ID:BUG#507359
  - SUG:NA
  - DESC: Fix provide lsb with archname error
          Fix bad archname in arch sw_64


author: Ray Strode <rstrode@redhat.com> 1.8-1
changelog:
  - release 1.8, remove AC_PROG_LIBTOOL from configure.in
  - release 1.7, remove gnome-control-center.desktop


author: <dcbw@redhat.com> - 3.7-2
changelog:
  - Gratuitous version bump from upstream
  - #rh74651# no mimetype entries for microsoft offic
  - #rh136731# wordperfect files (.wpd) should be associated with openoffice


author: Dan Williams <dcbw@redhat.com> 3.7-5
changelog:
  - #rh137520# Add "application/x-ole-storage" to Calc, Impress, and Writer
   desktop files, so Evolution can associate these with OOo


author: Than Ngo <than@redhat.com> 3.7.1-7
changelog:
  - add mssing kwrite/kate/kedit, kcontrol center, System setting
    in menu #147121, #12218, #1221811, #143937
  - get rid of capplets from preferences.menu, #149233
  - fix icon entry in desktop file #143336


author: Ray Strode <rstrode@redhat.com> 3.8.0-1
changelog:
  - don't include kde legacy stuff anymore, since
    kde uses it's own applications menu file now and it 
    breaks gnome (bug 153125)


author: David Malcolm <dmalcolm@redhat.com> - 5.0.4-1
changelog:
  - Split the evolution desktop file into four separate ones: one per component.
    Force people to update evolution, to avoid it using a stale symlink. 
    (#170799).


author: Matthew Barnes <mbarnes@redhat.com> - 8.9.10-3
changelog:
  - Add X-GNOME-Bugzilla-Version to Evolution desktop files (#243101).
  - Bump evolution-data-server version in desktop files to 1.12.


author: Matthias Clasen <mclasen@redhat.com> - 12.0.1-1
changelog:
  * Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.0.1-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: zhangzikang <zhangzikang@kylinos.cn> -12.0.2-12.el8.ks8.02
changelog:
  - Type:update
  - ID:TASK#141930
  - SUG:NA
  - DESC:modify the spec file URL and gettext_package to kylin
  - Add Patches:fix_PACKAGE_name_to_kylin.patch


author: zhouming <zhouming@kylinos.cn> 1.0.0-07
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:修复BUG:352774;352204;351741;351609;351536;351526;351477;351461;651441;351374;351323;351307


author: zhouming <zhouming@kylinos.cn> 1.0.0-08
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:修复BUG:354369;354103;353905;362383;353889;363101;354369;新增对免密登录的处理;优化OTP PIN码错误提示不够详细的问题;优化 存在多个UKEY设备时的相关提示


author: zhouming <zhouming@kylinos.cn> 1.0.0-09
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 修复BUG:修复开启双因子后，远程SSH登录失败的问题
          去除userAuthMethods dbus接口授权
          优化OTP绑定和PAM认证流程及其相关接口
          优化OTP,UKEY解绑接口
          修复 在服务器版本中，无法开启MFA SSH功能的问题
          优化 在配置SSH MAF的重启SSH服务修改为重新加载SSH配置
          修复 在编译过程中出现的警告信息
          修复 在SSH远程登录账户锁定时出现多次锁定信息的问题
          添加 在UKEY未绑定登录时，提示未绑定的信息
          更新 翻译信息


author: zhouming <zhouming@kylinos.cn> 1.0.0-12
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC: 
          修复 多因子认证-图形化页面-用户管理-删除用户验证：kylin用户绑定安全密钥，删除kylin用户，新建kylin用户，重新绑定初始化的Ukey失败
          添加帮助文档相关内容
          添加 生成证书的脚本


author: peijiankang <peijiankang@kylinos.cn> - 1.1.0.47-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-music-1.1.0.47-ok9.25k0.14
          upstream commtid:6d4626ab05a46fe6f1712a2f06571fb1d0cbd724


author: peijiankang <peijiankang@kylinos.cn> - 1.1.0.47-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586747]
  - SUG : NA
  - DESC: sync code from desktop kylin-music-1.1.0.47-ok9.25k0.86
          add kylin copyright info


author: peijiankang <peijiankang@kylinos.cn> - 1.1.0.47-1.p04
changelog:
  - Type: bugfix
  - ID  : [TASK#591329]
  - SUG : NA
  - DESC: remove tests directory and change libsimple.so install path


author: douyan<douyan@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch 0001-fix-kylin-nm-4.10.0.0-add-LANG-env.patch


author: houhongxun <houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289795]
  - SUG : NA
  - DESC: dns address from network manager is in network byte order


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok0.13k0.14
          upstream commitid: 52ecaf1e58ae14f32abcc183c92b6c60b0d3e2f9


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID: [BUG#249127]
  - SUG: NA
  - DESC: kylin-prohibit-non-root-users-from-setting-up-networ.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#437383]
  - SUG: NA
  - DESC: kylin-nm-4.10.0.0-kylin-fix-closing-network-segment.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch5: kylin-nm-4.10.0.0-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#500277]
  - SUG : NA
  - DESC: Disabled all network cards when wired switch is off


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#504491]
  - SUG : NA
  - DESC: Fixed network connection when network adapter is disabled


author: houhongxun <houhongxun@kylinos.cn> - 4.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.0.0.0-ok6k0.3


author: huayadong <huayadong@kylinos.cn> - 1.3.0.3-1.p02
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: sync code from desktop kylin-photo-viewer-1.3.0.3-ok22.36k0.9
          upstream commtid:2e076623f1ab76a3c6973e4238d6234116c77422


author: peijiankang <peijiankang@kylinos.cn> - 1.3.0.3-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#294723]
  - SUG : NA
  - DESC: add kylin-photo-viewer-1.3.0.3-kylin-disable-startani.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.3.0.3-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#294723]
  - SUG : NA
  - DESC: add kylin-photo-viewer-1.3.0.3-kylin-add-copyright-head.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.3.0.3-1.p05
changelog:
  - Type: update
  - ID  : [TASK#586759]
  - SUG : NA
  - DESC: sync code from desktop kylin-photo-viewer-1.3.0.3-ok22.36k1.10
          add kylin copyright head info


author: huayadong <huayadong@kylinos.cn> - 1.3.0.3-1.p06
changelog:
  - Type: update
  - ID  : [TASK#599373]
  - SUG : NA
  - DESC: Patch3:kylin-photo-viewer-1.3.0.3-kylin-fix-fority.patch
          修复代码Race Condition问题


author: peijiankang <peijiankang@kylinos.cn> - 1.3.0.2.0k3.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-recorder-1.3.0.2.0k3.3-ok5.14k0.10
          upstream commtid:cb6a1735d34be048f17f6c5e67660d4fd3c3cba6


author: peijiankang <peijiankang@kylinos.cn> - 1.3.0.2.0k3.3-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586749]
  - SUG : NA
  - DESC: sync code from desktop kylin-recorder-1.3.0.2.0k3.3-ok5.14k0.70
          add kylin copyright head info


author: yueyuankun <yueyuankun@kylinos.cn> - 1.0-24.6.p159
changelog:
  - Type:update
  - ID:task#187073
  - CVE:NA
  - SUG:NA
  - DESC: merge traditional Chinese License Agreement


author: yangxudong <yangxudong@kylinos.cn> - 1.0-24.6.p179
changelog:
  - Type:update
  - ID:[task#203388]
  - CVE:NA
  - SUG:NA
  - DESC: update Build_date / kylin_code_version  for V10SP4-Build15


author: yangxudong <yangxudong@kylinos.cn> - 1.0-24.6.p183
changelog:
  - Type:update
  - ID:NA
  - CVE:NA
  - SUG:NA
  - DESC: update Build_date / kylin_code_version  for V10SP4-Build16


author: Qin Fandong <qinfandong@kylinos.cn> - 11-01.6.p211
changelog:
  - Type: task
  - ID: [TASK#392851]
  - SUG: NA
  - Desc: Update EULA of V11
          %patchN is deprecated, apply patches with 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/delete-welcome-information.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-fix-incorrect-encode-in-EULA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-add-traditional-chinese-licence-text.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-continue-only-meaningful-in-a-for.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-traditional-Chinese-Licensing-Agreement-is-merged.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Modify-License-Agreement-Format.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/update_License.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-TASK-392851-Update-EULA-of-V11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-Update-kylin-License-Agreement.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-add-product.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-update-svr25-License-Agreement.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-add-exnkvers-tool.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-update-svr26-License-Agreement.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-add-system-information.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-add-v11-2603-product.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/kylin-release-update-system-information.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yangxiaodong <yangxiaodong@kylinos.cn> - 11-01.6.p237
changelog:
  - Type:update
  - ID:[TASK#463164]
  - CVE:NA
  - SUG:NA
  - DESC: modify SOURCES/90-default.preset add activation.service


author: yueyuankun <yueyuankun@kylinos.cn> - 11-01.6.p253
changelog:
  - Type:update
  - ID:TASK#563041
  - SUG:NA
  - Desc:feat: add exnkvers tool to generate /etc/os-release-advance


author: zhangyulong <zhangyulong@kylinos.cn> - 11-01.6.p254
changelog:
  - Type:update
  - ID:TASK#566329
  - SUG:NA
  - Desc:feat: update the license agreement document and privacy agreement document provided by the v11-2603


author: zhangyulong <zhangyulong@kylinos.cn> - 11-01.6.p256
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - Desc:updates build_date build_id for v11-svr26 and provide system information invarious languages


author: zhangyulong <zhangyulong@kylinos.cn> - 11-01.6.p258
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - Desc:updates build_date build_id for v11-svr26 and updates product file


author: zhangyulong <zhangyulong@kylinos.cn> - 11-01.6.p267
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - Desc:updates build_date build_id for v11-svr26 and update system information


author: houhongxun <houhongxun@kylinos.cn> - 3.2.1-1
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 3.2.1-ok2.22k0.13
          upstream commitid: cf4a632d55481c99b97ac4b995f193823fe3ac52


author: huayadong <huayadong@kylinos.cn> - 3.2.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: add patch03:kylin-scanner-3.2.1-chnage-libzip-to-minizip.patch


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0.1kylin1k81-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0.1kylin1k81-ok8.24k1.3


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add kylin-screenshot-1.0.0.1kylin1k81-fix-aboutinfo-and-singleinstance.patch
          add kylin-screenshot-1.0.0.1kylin1k81-add-copyright-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 1.0.0.1kylin1k81-1.p04
changelog:
  - Type: update
  - ID  : [TASK#586761]
  - SUG : NA
  - DESC: sync code from desktop kylin-screenshot-1.0.0.1kylin1k81-ok8.24k5.11.patch
          add kylin copyright info


author: huayadong <huayadong@kylinos.cn> - 1.0.0.1kylin1k81-1.p05
changelog:
  - Type: update
  - ID  : [TASK#599373]
  - SUG : NA
  - DESC: add Patch05: kylin-screenshot-1.0.0.1-kylin-fix-fority.patch
          修复代码Memory Leak问题


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p02
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0002-update-led-and-some-issues.patch


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p03
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0003-cli-add-v-for-verbose-output.patch


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 0.1.0-1.p04
changelog:
  - Type: updates/bugfix
  - ID: [BUG#204196/BUG#204155/BUG#204142/BUG#204080/BUG#204079/TASK#186097]
  - SUG: NA
  - DESC: fix BUG#204196 BUG#204155 BUG#204142 BUG#204080 BUG#204079 and TASK#186097


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p05
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0005-add-scan-unnormal-md-fix-spec.patch


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p06
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0006-delete-unused-import-package-update-event-trace.patch


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 0.1.0-1.p07
changelog:
  - Type: bugfix
  - ID: [BUG#204684/BUG#204677/BUG#204604/BUG#204196]
  - SUG: NA
  - DESC: fix BUG#204684 BUG#204677 BUG#204604 and BUG#204196


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p09
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0009-update-warn-func-and-cli-help.patch


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p10
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0010-fix-re-run-mdmonitor-when-killed.patch


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p13
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0013-check-exists-sys-block-s-md-sync_action.patch 0014-nvme-list-subsys-instead-of-nvme-list.patch


author: huangwenhua <huangwenhua@kylinos.cn> - 0.1.0-1.p14
changelog:
  - Type: updates
  - ID: [Task#176665]
  - SUG: NA
  - DESC: add patch:0015-update-dig-slow-disk-and-cpu-iowait.patch


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p05
changelog:
  - Type:update
  - ID:TASK#222678
  - SUG:NA
  - DESC: Modify License to KylinSoft
          RPM ignore test code


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.1.1-1.p06
changelog:
  - Type:bugfix
  - ID:[BUG#248111/BUG#247937/BUG#247889/BUG#247883]
  - SUG:NA
  - DESC: Fix bugs cause by sonarQube


author: cenhuilin <cenhuilin@kylinos.cn> - 0.1.1-1.p11
changelog:
  - Type:bugfix
  - ID:[BUG#398435]
  - SUG:NA
  - DESC:1.fix match process error problem
         2.mdmonitor is not start by default,delete disable enable mdmonitor
         3.fix no python file problem in build


author: cenhuilin <cenhuilin@kylinos.cn> - 0.1.1-1.p13
changelog:
  - Type:update
  - ID:[TASK#554125]
  - SUG:NA
  - DESC:add usermode raid auto start and join array interface


author: zhaojianbin <zhaojianbin@kylinso.cn> - 1.0.0
changelog:
  - add V10 fix,commitID:2b236802f51600b2a2ec6147e8607656ad59d4fc
  - optimize spec file with proper directory structure and dependencies
  - add command completion and man page support
  - improve post-install scripts for better system integration


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-4
changelog:
  - Type:update
  - ID:[task#553845] [任务#554043] [task#554041] 
  - SUG:NA
  - DESC:1. 新增系统健康检查与诊断工具; 
         2. 新增文件监控功能; 
         3. 新增进程数线程数监控


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-5
changelog:
  - Type:update
  - ID:[task#581335] [task#554087] [task#581331] [task#581333] [task#581327] [task#553849]
  - SUG:NA
  - DESC:1. 新增网络监控模块;
         2. 新增oom诊断;
         3. 新增进程资源监控;
         4. 新增进程资源监控分析;
         5. 新增基线配置与检测功能;
         6. 新增内存泄漏模块


author: andy <liuyang01@kylinos.cn> - 3.0-6
changelog:
  - Type:update
  - ID:[task#587971] [task#597175] [task#597175] [task#597175]
  - SUG:NA
  - DESC:1. 新增进程监控;
         2. 新增进程信息查询;
         3. 新增系统周期性信息查询功能;
         4. 安全合规整改;
         5. fortify高风险问题整改;
         6. 代码注释率问题整改;


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-7
changelog:
  - Type:update
  - ID:[bug#494845] [task#597175]
  - SUG:NA
  - DESC:1. 修复KVE-2026-0208漏洞;
         2. fortify高风险问题整改


author: fandeyuan <fandeyuan@kylinos.cn> - 3.0-8
changelog:
  - Type:update
  - ID:[bug#500733] [bug$500641] [bug#501867] [task#553847] [task#597175]
  - SUG:NA
  - DESC:1. 修复进程状态监控报错;
         2. 文件监控功能日志支持结构化输出;
         3. 网络监控探测点修改;
         4. 修复网络监控目录问题
         5. 安全合规整改


author: houhongxun <houhongxun@kylinos.cn> - 1.2.0.3kord-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.2.0.3kord-ok6.13k0.13
          upstream commitid: f1439f4f99b8afd4691d8a401861442be40ca815


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586739]
  - SUG : NA
  - DESC: sync code from desktop kylin-usb-creator-1.2.0.3kord-ok6.13k0.21


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p03
changelog:
  - Type: update
  - ID  : [TASK#586739]
  - SUG : NA
  - DESC: update upstream version to 1.2.0.3kord-ok6.13k0.54 and fixed empty plugin version info


author: peijiankang <peijiankang@kylinos.cn> - 1.2.0.3kord-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#491479]
  - SUG : NA
  - DESC: Skip MD5 check for ISO images missing md5sum.txt


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.16
          upstream commtid:7ad757f89f412a5be1d5684048a516c028645671


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-user-guide-4.10.0.0-ok2.7k0.18
          upstream commtid:a780d9a4d36e4f58f6dea3412fc3974c14e5f6ea


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#293701]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-root-start-no-sandbox.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p06
changelog:
  - Type: update
  - ID  : [TASK#475175]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-remove-html-comment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#363727]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-zh-HK-adapt.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#363723]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-zh-HK-ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-fix-ukui-control-center-jump-error.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: bugfix
  - ID  : [BUG#356895]
  - SUG : NA
  - DESC: update kylin-user-guide-4.10.0.0-kylin-add-ksc-defender-jumpinfo.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#385929]
  - SUG : NA
  - DESC: add kylin-user-guide-4.10.0.0-kylin-update-shortcut-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.2k1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-video-3.1.4.2k1-ok26.21k0.22
          upstream commtid:7a08725bccb3c7938502fb9d7b2e44bd0999078a


author: peijiankang <peijiankang@kylinos.cn> - 3.1.4.2k1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#586751]
  - SUG : NA
  - DESC: sync code from desktop kylin-video-3.1.4.2k1-ok26.21k0.100
          add kylin copyright head code


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-virtual-keyboard-3.0.1.0-ok0.12k0.4
          upstream commtid:f3b588138f44997947ec3b5c2912a11fcafcd71f


author: peijiankang <peijiankang@kylinos.cn> - 3.0.1.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#470133]
  - SUG : NA
  - DESC: fix kylin-virtual-keyboard animationAvailability


author: yangyan<yangyan@kylinos.cn> -0.1.0-5
changelog:
  - Type:bugfix and task
  - ID:all
  - SUG:Na
  - DESC: The modifications made in the past week have been combined into a patch file


author: yangyan <yangyan@kylinos.cn> -0.1.0-6
changelog:
  - Type:task
  - ID:210047 & 210036
  - SUG:Na
  - DESC: Added archive profile judgment and removed patch_info field check


author: yangyan <yangyan@kylinos.cn> -0.1.0-7
changelog:
  - Type:BUG&Task
  - ID:all
  - SUG:NA
  - DESC:The modifications made in the past week have been combined into a patch file


author: zuohsh <zuohongsheng@kylinos.cn> -2.0.1-1
changelog:
  - Type:Task
  - ID:457822
  - SUG:NA
  - DESC: kylin_warm_revert_patch-taget_definition_compatible_with_all_hotpatches.patch


author: qiaojijun <qiaojijun@kylinos.cn> -2.0.2-1
changelog:
  - Type:Task
  - ID:564289
  - SUG:NA
  - DESC: delete rust vendor deps and libcare-plus dep,use cargo proxy


author: peijiankang <peijiankang@kylinos.cn> - 1.3.1.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-wayland-compositor-1.3.1.0-0k0.5
          upstream commtid:1e12b35019a7339c27fabc4c88c6cee50f566461


author: houhongxun <houhongxun@kylinos.cn> - 1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 1.0.0-ok3.4k0.1


author: peijiankang <peijiankang@kylinos.cn> - 3.2.0.3-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop kylin-weather-3.2.0.3-ok16.11k0.3
          upstream commtid:b2a5226e945afbec819e8e450a8b7ced820cb0a4


author: peijiankang <peijiankang@kylinos.cn> - 3.2.0.3-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add kylin-weather-3.2.0.3-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.2.0.3-1.p03
changelog:
  - Type: update
  - ID  : [TASK#586741]
  - SUG : NA
  - DESC: sync code from desktop kylin-weather-3.2.0.3-ok16.11k1.12


author: peijiankang <peijiankang@kylinos.cn> - 3.2.0.3-1.p04
changelog:
  - Type: update
  - ID  : [TASK#586741]
  - SUG : NA
  - DESC: update upstream version to 3.2.0.3-ok16.11k1.14 and fixed empty plugin version info


author: kuangkai <kuangkai@kylinos.cn> - 1.2.1-01
changelog:
  - Type: bug fix
  - DESC: remove the dependency of vendor
  - COMMIT:603bfb4c [bugfix] recover cannot work on panic in goroutine


author: kuangkai <kuangkai@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bug fix
  - DESC: fix the bug of start server error after deploy
  - COMMIT:e1431534 update the deploy
           84d29af6 add the raft iops metric support


author: kuangkai <kuangkai@kylinos.cn> - 1.3.1-01
changelog:
  - Type: release
  - DESC: add support for mirror group and optimize metadata performance
  - COMMIT: 5a2cd8cd add support for mirror group
            8e096546 badger code optimize
            af5021e2 badger performance optimize
            support v10-ai: make srpm.v10


author: wangsong <wangsong01@kylinos.cn> - 1.3.1-03
changelog:
  - Type: bugfix
  - ID:   NA
  - SUG:  NA
  - DESC:
      remove sysv scripts
      convert audit log to append-only


author: liyunqing <liyunqing@kylinos.cn> - 0.1.0-1
changelog:
  - Type:init
  - ID:[Task#588423]
  - SUG:NA
  - DESC: add kynetutils network utilities with ping/arping/tracepath/clockdiff commands


author: chenjianhu <chenjianhu@kylinos.cn> - 0.1.0-1
changelog:
  - Type:update
  - ID:[TASK#588423]
  - SUG:NA
  - DESC:
   add system daemon to monitor NUMA topology and resource usage
   automatically bind processes to optimal NUMA nodes based on resource usage 
   to reduce cross-node memory access latency and improve system performance


author: songliyang <songliyang@kylinos.cn> - 1.0.0-1
changelog:
  - Initial package
  - Pure Rust implementation of parallel gzip compression
  - Supports compression levels 1-9
  - Multi-threaded compression with configurable thread count
  - Compatible with gzip file format


author: chenjianhu <chenjianhu@kylinos.cn> - 1.0.0-1
changelog:
  - Type:update
  - ID:[TASK#588423]
  - SUG:NA
  - DESC:
     add Python launcher to support multiple Python versions 
     support path mapping and dynamic distribution
     support syslog recording


author: chenjianhu <chenjianhu@kylinos.cn> - 1.0.0-2
changelog:
  - Type:update
  - ID:[TASK#588423]
  - SUG:NA
  - DESC:In accordance with security and compliance requirements, 
         rectify the weak algorithms in use.


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p03
changelog:
  - Type: update
  - ID: [TASK#596701] kysdk-netflow-control 合规整改
  - SUG: NA
  - DESC: 修复sonarqube安全热点及增加单元测试覆盖率


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p05
changelog:
  - Type: update
  - ID: [BUG#504093] [BUG#504103] [BUG#504107]
  - SUG: NA
  - DESC:
  -       添加补丁 kysdk-netflow-control-fix-kve.patch
  -       [BUG#504093] 【V11-2603】【B09】【漏洞挖掘】kysdk-netflow-control组件存在KVE-2026-0312漏洞
  -       [BUG#504103] 【V11-2603】【B09】【漏洞挖掘】kysdk-netflow-control组件存在KVE-2026-0313漏洞
  -       [BUG#504107] 【V11-2603】【B09】【漏洞挖掘】kysdk-netflow-control组件存在KVE-2026-0314漏洞


author: hanzhengyun <hanzhengyun@kylinos.cn> - 1.0.0-1.p06
changelog:
  - Type: update
  - ID: [BUG#507379]
  - SUG: NA
  - DESC: 细化接口调用审计日志，增加权限不足时的日志记录
  -       添加补丁 kysdk-netflow-control-modify-log-record.patch
  -       [BUG#507379] 【V11 2603】【B14】【流量管控】 【威胁消减】 dbus服务威胁-普通用户调用策略调整接口，调用失败时日志信息不全


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-1.p04
changelog:
  - Type: TASK
  - ID: [TASK#598185]kysdk-netflow-monitor 自研代码提升评估
  - SUG: NA
  - DESC: Delete bpf bcc 安装依赖，使用pcap机制


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p01
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;Bugfix496401 
  - SUG: NA
  - DESC: 增加指针链表回收、删除未使用的HIGH问题函数内容；删除python3安装依赖；rpm包名获取不到时返回“-”


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p02
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;
  - SUG: NA
  - DESC: 添加单元测试代码tests文件夹；修复安全热点问题


author: yangguangjing<yangguangjing@kylinos.cn>-1.0.0.1-4.p05
changelog:
  - Type: TASK
  - ID: [TASK#596701]二阶段安全合规整改kysdk-netflow-monitor;
  - SUG: NA
  - DESC: 修改配置文件为600；增加之前的对应CI时自动新建模糊测试输出out文件夹;删除未使用的decpcap的单元测试代码文件；


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.01
changelog:
  - 新增无事务数据加载接口
  -   add patch: kysec-common-add-without-transaction-retrieve-interface-for-sqlite.patch
  - 修复调用path_is_mount_bind接口失败的bug
  -   add patch: kysec-common-fix-bug-of-call-path_is_mount_bind.patch
  - Bug:  #66918
  - 参数为空时日志为none
  -   add patch: kysec-common-update-unknown-to-none.patch
  - Bug:  #69396 #70642
  - 二进制程序覆盖python脚本，python脚本状态变成“已损坏”
  - 安全中心打印kysec.log日志的时间格式，以/etc/default/locale中的语言环境为准
  -   add patch: kysec-common-optimize-script-file-parse-move-to-end.patch
  - Bug:  #80484
  - 语言环境变量错误，导致英文模式下，执行控制弹框为中文
  -   add patch: kysec-common-fix-other-app-lang-env-error-caused-by-time.patch
  - kysec日志添加日志轮询功能
  -   add patch: kysec-common-add-logrotate-for-kysec-log.patch
  - 应用桌面补丁到：1.0.1-21kylin


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.03
changelog:
  - Type: update 
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-common-fix-fortify.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#141967]
  - SUG:NA
  - DESC: 修复无效日志数据导致kyseclogd崩溃问题
  -         add patch: kysec-common-fix-kyseclogd-coredump-caused-by-invalid-msg.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#143870]
  - SUG:NA
  - DESC: 修改kysec_logd服务的监听ip为127.0.0.1
  -         add patch: kysec-common-modify-kysec-log-server-listen-ip.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.1-16.se.06
changelog:
  - Type: bugfix
  - ID:[BUG#165526]
  - SUG:NA
  - DESC: 解决获取所有进程防杀死列表不全的问题
  -         add patch: kysec-common-fix-get-ppro-list-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.01
changelog:
  - Type: update
  - ID:[TASK#147330]
  - SUG:NA
  - DESC: 1、移植桌面补丁: unify-time-str-output-format.patch [BUG#105996]
  -          获取当前时间并转化为字符串，调用后需释放内存
  -            add patch: kysec-common-unify-time-str-output-format.patch [BUG#109081]
  -	2、移植桌面补丁: set-timeout-for-log-send-socket.patch
  -          日志接口设置超时时间
  -            add patch: kysec-common-set-timeout-for-log-send-socket.patch
  -	3、移植桌面补丁: use-uds-to-transport-log-message.patch [BUG#123788][BUG#122867]
  -          更新日志信息通讯传输方式
  -            add patch: kysec-common-use-uds-to-transport-log-message.patch
  -	4、移植桌面补丁: add-sqlite-stmt-interface.patch [BUG#128943]
  -	   增加sqlite stmt类接口封装
  -	     add patch: kysec-common-add-sqlite-stmt-interface.patch
  -	5、移植桌面补丁: 移植桌面补丁: return-abs-path-when-get-file-list-from-dir.patch- [BUG#134392]
  -	   从目录获取文件列表时返回绝对路径
  -	     add patch: kysec-common-return-abs-path-when-get-file-list-from-dir.patch
  -	6、移植桌面修改: 修改spec文件,安装时重启服务 [BUG#163132]
  -	7、移植服务器sm补丁: kysec-common-fix-bug-230215.patch
  -	   解决读取管道文件会阻塞的问题
  -	     add patch: kysec-common-fix-read-pipe-file-block-bug.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.1.1-01.se.02
changelog:
  - Type: update
  - ID:[TASK#155338]
  - SUG:NA
  - DESC: sp4 kysec 应用层日志改造
  -       add patch: kysec-common-log-enhanced-sp4.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.1.1-01.se.03
changelog:
  - Type:update
  - ID:[Task#163122]
  - SUG:NA
  - DESC: 1.兼容hostos与sp4中procps调用: kysec-common-compatible-hostos-and-spx.patch
  -       2.处理sp4[BUG#186382]: kysec-common-fix-socket-in-use.patch
  -       3.处理kysec_log.h中宏gettid冲突: kysec-common-fix-gettid-conflict.patch


author: wanghao <wanghao@kylinos.cn> - 1.1.1-01.se.04
changelog:
  - Type:update
  - ID:[Task#171233]
  - SUG:NA
  - DESC: 同步hostos补丁，增加hostos调用procps容错[BUG#189005]
  -	  add patch: kysec-common-fix-hostos-getpid-by-proc2.patch


author: wanghao <wanghao@kylinos.cn> - 1.1.1-01.se.06
changelog:
  - Type: bugfix
  - ID: [BUG#194820]
  - SUG:NA
  - DESC: 修改解压xz文件的方式,提高解析文件类型的速度,修改spec文件，添加xz依赖
  -	  add patch: kysec-common-modify-modify-decompress-xz-file.patch


author: wanghao <wanghao@kylinos.cn> - 1.1.1-01.se.07
changelog:
  - Type: update
  - ID: [任务#196834]
  - SUG:NA
  - DESC: 修复解析文件类型时,对没加!/bin/bash头且文件后缀为.sh的脚本文件判断
  -	不准确的问题, 导致source执行文件时会把脚本文件当成普通文件放行
  -	  add patch: kysec-common-fix-shell-script-judge-inaccuracy-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.08
changelog:
  - Type: update
  - ID: [Task#214106]
  - SUG:NA
  - DESC: 修复当secadm使用kysec_get查询指定路径的ppro状态时,若selinux拦截
  -   了pid的查询,获取的pid会是kysec_get进程的pid的问题
  -	  add patch: kysec-common-fix-get-pid-error-when-selinux-prevent.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: update
  - ID: [Task#214106]
  - SUG:NA
  - DESC: 修复08版本补丁引入的undefined get_basename symbol 错误.
  -	  add patch: kysec-common-fix-undefined-get_basename-symbol-error.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: update
  - ID: [BUG#244673] kysec_get查询不到进程信息
  - SUG: NA
  - DESC: 修复查询进程信息
  -       kysec-common-fix-proc.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.1.1-01.se.12
changelog:
  - Type: update
  - ID: [TASK#337989]
  - SUG: NA
  - DESC: 添加单元测试
  -       kysec-common-add-unit-test.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: update
  - ID: [TASK#337989]
  - SUG: NA
  - DESC: 编译但是不安装单元测试
  -       kysec-common-not-install-unit-test-program.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: update
  - ID: [TASK#391721]
  - SUG: NA
  - DESC: 修复安全热点和fortify
  -       kysec-common-fix-sonarqube-bugs.patch
  -       kysec-common-fix-fortify-bugs.patch
  -       kysec-common-fix-test-makefile.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#307245]
  - SUG: NA
  - DESC: 修复parse_file_type函数解析文件类型错误问题
  -       kysec-common-fix-parse-file-type-error.path


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: update
  - ID: [TASK#405875]
  - SUG: NA
  - DESC: 增加单元测试代码
  -       kysec-common-add-unit-test-20241024.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       kysec-common-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: update
  - ID: [TASK#435234]
  - SUG: NA
  - DESC: 单元测试代码更新
  -       kysec-common-update-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: update
  - ID: [TASK#449386]
  - SUG: NA
  - DESC: 修复平台扫描的开源代码引入问题
  -       kysec-common-fix-opensource-introduce.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-01
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: kysec2.0命令行开发,添加kysec_policy的日志类型
  -         kysec-common-add-kysec-policy-log-type.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2.1-02
changelog:
  - Type: bugfix
  - ID: [BUG#346400]
  - SUG: NA
  - DESC: 修复parse_file_type()解析.ko.xz的错误
  -	  kysec-common-fix-parse-file-type-interface-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2.1-03
changelog:
  - Type: update
  - ID: [TASK#441570]
  - SUG: NA
  - DESC: 新增kysec-scene日志接口
  -	  kysec-common-add-kysec-scene-log-if.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-04
changelog:
  - Type: update
  - ID: [TASK#468469]
  - SUG: NA
  - DESC: 修复安全热点问题
  -     kysec-common-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.2.1-05
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 增加获取指定目录下所有子文件和子目录接口,逐级获取接口,增加获取指定目录下文件和目录,仅指定目录层级
  -     kysec-common-add-get-path-api.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.3.1-02
changelog:
  - Type: update
  - ID: [TASK#597481][BUG#492821]
  - SUG: NA
  - DESC: 1.完成kysec-common模糊测试和ci对接；2.修复kysec-common组件存在KVE-2026-0206漏洞
  -       kysec-common-add-sonar-and-fuzz-test-code.patch
  -       kysec-common-fix-KVE-2026-0206.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.3.1-03
changelog:
  - Type: update
  - ID: [TASK#599237]
  - SUG: NA
  - DESC: 1.完成valgrind测试和CI对接;
  -       kysec-common-add-valgrind-test.patch


author: wangshengye <wangshengye@kylinos.cn> - 1.3.1-04
changelog:
  - Type: bugfix
  - ID: [BUG#498255]
  - SUG: NA
  - DESC: 1.优化判断文件是否为内核模块和动态库的判断逻辑
  -       kysec-common-optimize-the-identification-methods-for-kernel-modules-and-dynamic-libraries.patch


author: wangshengye <wangshengye@kylinos.cn> - 1.3.1-05
changelog:
  - Type: update
  - ID: [TASK#604821]
  - SUG: NA
  - DESC: 1.ksaf通用基础库消减措施整改
  -       kysec-common-threat-analysis-and-rectification.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.02
changelog:
  - exectl添加sm3硬算法，并且有kysec_tpm控制是否启用硬算法
  - setstatus添加kysec_tpm
  -   add patch: kysec-daemon-add-sm3-hard-hash-and-kysec-tpm.patch
  - netctl计算文件路径改用sm3算法，当tpm卡可用时使用硬算法，否则使用软算法
  -   add patch: kysec-daemon-netctl-change-sm3-hash.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.03
changelog:
  - 修改kmod白名单
  -   add patch: kysec-daemon-modify-kmod-whlist.patch
  - 修复漏洞：通过dbus查询数据库接口实现SQL注入，修改白名单
  -   add patch: kysec-daemon-fix-sql-inject-by-retrieve.patch
  - 添加enable_tpm编译宏
  -   add patch: kysec-daemon-add-enable-tpm-budil-macro.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.05
changelog:
  - Type: bugfix
  - ID: [BUG#118414]
  - SUG:NA
  - DESC: 清空内核模块防卸载白名单，保留sm4_generic
  -         add patch: kysec-daemon-kmod-whlist-keep-sm4_generic.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.06
changelog:
  - Type: update
  - ID: [TASK#84294]
  - SUG:NA
  - DESC: 修复whlist_update_by_deb接口存在命令注入漏洞
  -         add patch: kysec-daemon-fix-popen-injection-command-leak.patch
  - Type: bugfix
  - ID: [BUG#122953]
  - SUG:NA
  - DESC: 解决在龙芯机器上安全中心获取内核防卸载名单失败的问题
  -         add patch: kysec-daemon-fix-ksc-defender-load-kmod-whlist-error.patch
  - Type: bugfix
  - ID: [BUG#122688][BUG#122673][BUG#122671][BUG#122646][BUG#122644]
  - SUG:NA
  - DESC: 修复操作whlist数据库的SQL注入的问题
  -         add patch: kysec-daemon-fix-sql-inject-by-operate-whlist-database.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.07
changelog:
  - Type:update
  - ID: [Task#90053]
  - SUG:NA
  - DESC:   kysec命令行改造，将security-switch模块设置逻辑下移到服务
  -         add patch: kysec-daemon-add-security-switch-module.patch


author: xuyujun <xuyujun@kylinos.cn> - 1.0.3-36.se.08
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的服务接口
  -         add patch: kysec-daemon-add-chpolicy.patch
  - Type: bugfix
  - ID: [Bug#122953]
  - SUG:NA
  - DESC: 修复添加内核防卸载时，Qstring导致的乱码的问题
  -         add patch: kysec-daemon-fix-add-kmod-protect-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.09
changelog:
  - Type: bugfix
  - ID: [Bug#131435][Bug#131574]
  - SUG:NA
  - DESC: 修复security-switch加固后切换strict模式失败的问题
  -       修复strict模式下，切换selinux模式为permissive失败的问题
  -         add patch: kysec-daemon-fix-kysec-command-bug.patch
  - Type:update
  - ID: NA
  - SUG:NA
  - DESC: 将kysec-module的dbus通信移植到kysec-daemon
  -         add patch: kysec-daemon-modify-dbus-module-to-daemon.patch
  - Type: bugfix
  - ID: [bug#132371][bug#132368]
  - SUG:NA
  - DESC: spec文件中Conflicts改成Obsoletes,修复yum update失败的问题


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.10
changelog:
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-daemon-fix-failed-to-remove-exectl.patch
  - Type: update
  - ID: []
  - SUG:NA
  - DESC: netctl添加pkg path的dbus接口
  -         add patch: kysec-daemon-netctl-add-pkg-path-dbus-interface.patch
  - Type: bugfix
  - ID: [Bug#135098]
  - SUG:NA
  - DESC: 删除devctl相关内容
  -         add patch: kysec-daemon-delete-devctl.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.11
changelog:
  - Type: bugfix
  - ID: [Bug#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-daemon-fix-not-set-status-when-close-3adm.patch
  - Type: update
  - ID: [TASK#111368]
  - SUG:NA
  - DESC: 为security-switch加入回滚机制
  -       add patch: kysec-daemon-security-switch-add-rollback.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.12
changelog:
  - Type: bugfix
  - ID: [Bug#144683]
  - SUG:NA
  - DESC: 修复在strict模式下，关闭box重启后security-switch和getstatus失败的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-when-set-box-disable.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.13
changelog:
  - Type: bugfix
  - ID: [Bug#144594]
  - SUG:NA
  - DESC: 修复安全优先模式切换其他模式，未重启前模式显示错误的问题
  -         add patch: kysec-daemon-fix-security-switch-get-error-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.14
changelog:
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-daemon-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#157216]
  - SUG:NA
  - DESC: 解决添加白名单后whlist.db文件无法关闭的问题
  -         add patch: kysec-daemon-fix-whlist-db-close-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.3-36.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#161996]
  - SUG:NA
  - DESC: 修复执行控制白名单和文件防篡改列表为空的问题
  -         add patch: kysec-daemon-fix-whlist-init-failed.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.0.3-36.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#151059]
  - SUG:NA
  - DESC: 切换selinux的permissive及enforcing模式实时生效
  -         add patch: kysec-daemon-fix-selinux-status-changenow.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.01
changelog:
  - Type: update
  - ID: [TASK#147330]
  - SUG:NA
  - DESC: 1、移植服务器sm补丁: kysec-daemon-fix-update-from-sp2.patch
  - 	     add patch: kysec-daemon-fix-update-from-sp2.patch
  -	2、移植服务器sm补丁: kysec-daemon-add-patch-from-debian-0824.patch
  -	   合并桌面补丁，支持usb白名单class管控
  -	     add patch: kysec-daemon-add-patch-from-debian-0824.patch
  -	3、移植服务器sm补丁: kysec-daemon-add-patch-from-debian-0913.patch
  -	   合并桌面补丁，移植授权新方案和及时生效, spec文件添加编译依赖和安装依赖
  -	     add patch: kysec-daemon-add-patch-from-debian-0913.patch
  -	4、移植服务器sm补丁: kysec-daemon-add-patch-from-debian-0928.patch
  -          合并桌面补丁, 修复990上蓝牙管控无效的问题
  -	     add patch: kysec-daemon-add-patch-from-debian-0928.patch
  -	5、移植服务器sm补丁: kysec-daemon-add-forbidden-package-uninstall-function.patch
  -	   支持软件防卸载, spec中增加pkglist.xml相关设置
  -	     add patch: kysec-daemon-add-forbidden-package-uninstall-function.patch
  -	6、移植服务器补丁: kysec-daemon-add-patch-from-debian-1026.patch
  -	   移植桌面补丁，USB CLASS管控，增加0f和dc的管控代码修改
  -	     add patch: kysec-daemon-add-patch-from-debian-1026.patch
  -	7、移植服务器sm补丁: kysec-daemon-fix-bugs-1026.patch
  -	   解决bug145973, 服务器移除不在管控列表里的网卡时, 接口调用卡住
  -            add patch: kysec-daemon-fix-bugs-1026.patch
  -	8、移植服务器sm补丁: kysec-daemon-add-patch-from-debian-1105.patch
  -	   移植桌面补丁
  -	     add patch: kysec-daemon-add-patch-from-debian-1105.patch
  -	9、移植服务器sm补丁: kysec-daemon-add-patch-from-debian-1114.patch
  -	   同步桌面补丁：
  -	     优化wince和扫描仪管控，不再创建和删除phone.perm以及scanner.perm
  -            修复内置光驱设为禁止无法弹出，内置光驱管控策略未及时生效
  -            add patch: kysec-daemon-add-patch-from-debian-1114.patch
  -	10、移植服务器sm补丁: kysec-daemon-fix-bugs-1121.patch
  -	    优化设备管控逻辑
  -             add patch: kysec-daemon-fix-bugs-1121.patch
  -	11、移植服务器sm补丁: kysec-daemon-fix-bugs-1207.patch
  - 	    修改设备管控即时生效bug
  -	      add patch: kysec-daemon-fix-bugs-1207.patch
  -	12、移植服务器sm补丁: kysec-daemon-fix-core-bug-230131.patch
  -	    解决core问题
  -	      add patch: kysec-daemon-fix-core-bug-230131.patch
  -	13、移植服务器sm补丁: kysec-daemon-add-bgset.patch
  -	    增加壁纸锁定功能
  -	      add patch: kysec-daemon-add-bgset.patch
  -	14、移植服务器sm补丁: kysec-daemon-adapter-kernel-device-info-file-change.patch
  -	    匹配内核device_info文件格式修改
  -	      add patch: kysec-daemon-adapter-kernel-device-info-file-change.patch
  -	15、移植桌面补丁: add-kmod_list-init-to-sql-file.patch
  -	    kmod_list表初始化放在单独文件中, 方便升级安装时还原数据; 修改spec文件, 修改数据库重新初始化脚本
  -	      add patch: kysec-daemon-add-kmod-list-init-to-sql-file.patch
  -	16、移植桌面补丁: remove-libkysec-dependency.patch
  -	    移除libkysec依赖, 修改spec文件, 删除编译依赖和安装依赖
  -	      add patch: kysec-daemon-remove-libkysec-dependency.patch
  - 	17、移植桌面补丁: unify-use-kysec-common-sqlite-stmt-interface.patch
  -	    统一sqlite stmt 接口调用
  -	      add patch: kysec-daemon-unify-use-kysec-common-sqlite-stmt-interface.patch
  -	18、移植桌面补丁: The-kysec-init-function-is-optimized.patch
  -	    kysec-init功能优化: 系统安装好后首次启动进行kysec初始化期间, 可以点击开始菜单进行关机重启, 导致下次开机仍然要初始化
  -	    修改netctl接口参数类型
  -	      add patch: kysec-daemon-kysec-init-function-is-optimized.patch
  -	19、移植桌面补丁: fix-fd-leak-caused-by-sqlite-operate.patch
  -	    修复数据库操作时句柄泄露问题
  -	      add patch: kysec-daemon-fix-fd-leak-caused-by-sqlite-operate.patch
  -	20、移植桌面补丁: fix-label-rollback-casused-by-database-err.patch
  -	    修复数据库锁定导致标记回退问题
  -	      add patch: kysec-daemon-fix-label-rollback-casused-by-database-err.patch
  -	21、移植桌面补丁: fortify-scan-vulnerability-modification.patch
  -	    fortify扫描漏洞修改
  -	      add patch: kysec-daemon-fortify-scan-vulnerbaility-modification.patch
  -	22、移植桌面补丁: run-init-service-when-kysec-not-disable.patch
  -	    系统未启用KYSEC时, 不进行初始化
  -	      add patch: kysec-daemon-run-init-service-when-kysec-not-disable.patch
  -	23、移植桌面补丁: Adding-newline-character-result-in-full-marking.patch
  -	    解决添加换行符后全盘打标记的问题
  -             add patch: kysec-daemon-add-newline-character-result-in-full-marking.patch
  -	24、移植桌面补丁: resolve-the-garbled-characters-displayed-in-the-database.patch
  -	    解决数据库显示模块名称乱码的问题
  -	      add patch: kysec-daemon-resolve-the-garbled-characters-displayed-in-the-database.patch
  -	25、移植桌面补丁: add-check-user-invalid-v2-interface.patch
  -	    强制模式下, 提供bash执行脚本时哈希校验功能
  -	      add patch: kysec-daemon-add-check-user-invalid-v2-interface.patch
  -	26、移植桌面补丁: Solve-kysec-whlist-load-caused-kysec-daemon-process-to-terminate.patch
  -	    解决通过kysec_whlist_load导致kysec-daemon进程终止的问题
  -	      add patch: kysec-daemon-solve-kysec-whlist-load-caused-kysec-daemon-process-to-terminate.patch
  -	27、移植桌面补丁: update-readonly-list-when-operate-readonly-label.patch
  -	    更新文件保护标记时，同步更新readonly_list文件
  -             add patch: kysec-daemon-update-readonly-list-when-operate-readonly-label.patch
  -	28、移植桌面补丁: add-sm-and-ipt-status-update.patch
  -	    新增安全套件状态配置
  -	      add patch: kysec-daemon-add-sm-status-update.patchk
  -	29、移植桌面补丁: fix-devctl-exist-rules-log-failed-when-sm.patch
  -	    修复多次添加相同设备策略时, log有failed信息问题
  -             add patch: kysec-daemon-fix-devctl-exist-rules-log-failed-when-sm.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.02
changelog:
  - Type: update
  - ID: [TASK#151386]
  - SUG:NA
  - DESC: 网络控制改为黑名单模式
  -    	  add patch: kysec-daemon-netctl-mode-modify-to-blist.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.03
changelog:
  - Type: update
  - ID: [TASK#163915]
  - SUG:NA
  - DESC: 修复koji编包的问题
  - 	  add patch: kysec-daemon-fix-build-problem-in-koji.patch


author: wujunhua <wujunhua01@kylinos.cn> - 1.1.1-01.se.04
changelog:
  - Type: update
  - ID: [TASK#162336]
  - SUG:NA
  - DESC: 设备管控需求合入通用
  -         add patch: kysec-daemon-integration-of-equipment-control-requirements-into-common-use.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 1.1.1-01.se.05
changelog:
  - Type: update
  - ID:[TASK#155338]
  - SUG:NA
  - DESC: sp4 kysec 应用层日志优化
  -       add patch: kysec-daemon-log-enhanced-sp4.patch


author: wujunhua <wujunhua01@kylinos.cn> - 1.1.1-01.se.06
changelog:
  - Type: update
  - ID: [BUG#187185]
  - SUG:NA
  - DESC: 嵌入式E2000设置StorageDrive(当为启动盘时)开启状态，显示屏黑屏
  -         add patch: kysec-daemon-embedded-E2000-sets-the-StorageDrive-to-off-state-resulting-in-a-black-screen-on-the-display-screen.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.09
changelog:
  - Type: update
  - ID: [任务#171233][BUG#189974]
  - SUG:NA
  - DESC: 同步hostos补丁，内核模块化，sp4未实现exectl.ko模块化，但是修改同样适用[Task#163122]
  -	  add patch: kysec-daemon-use-ko-kernel.patch
  -	同步hostos补丁，适配主线及hostos[Task#163122]
  -	  add patch: kysec-daemon-compatible-hostos-and-spx.patch
  -	同步hostos补丁，适配hostos内核lsm参数[Task#163122]
  -	  add patch: kysec-daemon-suport-lsm-kernel-param.patch
  -	同步hostos补，kysec配置-进程保护标签设置-kysec_get无法查看当前标记[BUG#189005]
  -	  add patch: kysec-daemon-fix-hostos-getpid-by-proc2.patch
  -	同步hostos补丁，[BUG#189311]修复kysec为enforing模式下外设不识别，devctl默认设置为关[BUG#189974]
  -	  add aptch: kysec-daemon-devctl-set-default-off.patch
  -	同步hostos补丁，切换模式时忽略devctl的状态值设置[BUG#189658]
  -	  add patch: kysec-daemon-switch-mode-ignore-devctl-status.patch
  -	为hostos可以拉齐sp4版本，升级到se.09


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.10
changelog:
  - Type: update
  - ID: [任务#170022]
  - SUG:NA
  - DESC: 卸载套件时清除策略
  -       add patch: kysec-daemon-clear-policy-when-uninstall.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.11
changelog:
  - Type: update
  - ID:[BUG#190233]
  - SUG:NA
  - DESC: 修复hub禁用启用不即时生效的问题
  -       add patch: kysec-daemon-fix-hub-not-work-at-once.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.12
changelog:
  - Type: bufix
  - ID: [BUG#191987]
  - SUG:NA
  - DESC: 修复security-switch --set strict设置三元密码时，dbus通信超时导致密码设置失败的问题
  -	  add patch: kysec-daemon-fix-set-passwd-dbus-timeout-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#195434]
  - SUG:NA
  - DESC: 修复strict模式下，kysec-wlinit失败的问题
  -	  add patch: kysec-daemon-fix-strict-mode-kysec-wlinit-failed.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.1.1-01.se.14
changelog:
  - Type: bufix
  - ID: [TASK#179971 BUG#193846]
  - SUG:NA
  - DESC: 同步桌面流量管控普通用户可以配置策略问题
  -         add patch: kysec-daemon-fix-netflow-ordinary-user-can-config-policy.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -         add patch: kysec-daemon-modify-security-switch-effective-after-reboot.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#205354]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -         add patch: kysec-daemon-fix-login-failed-when-del-3adm-home-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.17
changelog:
  - Type: update
  - ID: [任务#165225][任务#165240][任务#165232][任务#178765][任务#178762][任务#165245]
  -     [BUG#204409][BUG#204640][BUG#204601]
  - SUG:NA
  - DESC: 添加软件包黑白名单kdk接口[任务#165225]
  -	  add patch: kysec-daemon-add-bwlist-kdk-interface.patch
  -	添加应用执行控制kdk接口[任务#165240]
  -	  add patch: kysec-daemon-add-pblk-kdk-interface.patch
  -	添加软件防卸载kdk接口,修改spec文件,pkglist.xml放在kysec-utils
  -	包中安装[任务#165232]
  -	  add patch: kysec-daemon-add-pkglist-kdk-interface.patch
  -	数据库修改支持kdk和兼容性升级,同时修改spec文件，数据库操作
  -	  add patch: kysec-daemon-modify-db-for-kdk.patch
  -	添加内核模块防卸载kdk接口[任务#178765]
  -	  add patch: kysec-daemon-add-kmod-kdk-interface.patch
  -	添加进程防杀死kdk接口[任务#178762]
  -	  add patch: kysec-daemon-add-ppro-kdk-interface.patch
  -	添加文件保护kdk接口[任务#165245]
  -	  add patch: kysec-daemon-add-filepro-kdk-interface.patch
  -	修改spec文件中升级时数据库的操作,修复安装过程中报错的问题[BUG#204409]
  -       修改函数返回值,0代表成功[BUG#204640][BUG#204601]
  -         add patch: kysec-daemon-modify-function-return-value-0-success.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.18
changelog:
  - Type: bugfix
  - ID: [BUG#209909][BUG#210138][#210326]
  - SUG:NA
  - DESC: 修复sm套件取消授权失败的问题[BUG#209909]
  -	修复sm查询文件保护错误的问题[BUG#210138]
  -	修复切换模式时,会删除/etc/default/grub中关于静态度量的配置[BUG#210326]
  -	去掉切换none模式时audit=0的配置
  -	  add patch: kysec-daemon-fix-sm-cancel-authorization-fail-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1.1-01.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#218009]
  - SUG:NA
  - DESC: 修复kdk接口导致kysec命令可以修改sm策略的问题[BUG#218009]
  -	  add patch: kysec-daemon-fix-kysec-can-modify-sm-policy-bug.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.20
changelog:
  - Type: update
  - ID: [TASK#226809] v11重编kysec1.0核外包
  - SUG: NA
  - DESC: 初始化v11首个版本
  -       kysec-daemon-support-ksaf.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.21
changelog:
  - Type: update
  - ID: [BUG#241499] 开启selinux失败
  - SUG: NA
  - DESC: 启用selinux时不再依赖selinux-policy-devel
  -      kysec-daemon-remove-selinux-devel-dependency.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.22
changelog:
  - Type: update
  - ID: [BUG#242165] setstatus无法开启box
  - SUG: NA
  - DESC: 调整启动参数配置
  -       kysec-daemon-fix-boot-param.patch


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.1.1-01.se.23
changelog:
  - Type: update
  - ID: [TASK#337989]
  - SUG: NA
  - DESC: 添加单元测试
  -       kysec-daemon-add-unit-test.patch
  -       kysec-daemon-not-install-unit-test-program.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.24
changelog:
  - Type: update
  - ID: [BUG#244069]
  - SUG: NA
  - DESC: v11内核不支持中文,切换模式时显示的中文改成英文
  -       kysec-daemon-add-en-translation.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.25
changelog:
  - Type: update
  - ID: [BUG#249041] secadm无法从安全中心下发进程防杀策略
  - SUG: NA
  - DESC: 修复开启三员后鉴权过程中检查标记总是失败的问题
  -       kysec-daemon-fix-check-auth-label.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.26
changelog:
  - Type: update
  - ID: [BUG#251157] 删除网卡禁用策略后多余网卡配置
  - SUG: NA
  - DESC: 修复开启三员后鉴权过程中检查标记总是失败的问题
  -       kysec-daemon-fix-enable-netcard-duplicate-profile.patch


author: chengang <chengang@kylinos.cn> - 1.1.1-01.se.27
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -       kysec-daemon-add-unit-test-program.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.27
changelog:
  - Type: update
  - ID: [TASK#380049]
  - SUG: NA
  - DESC: ksaf框架兼容修改
  -  kysec-daemon-ksaf-compatible.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.28
changelog:
  - Type: update
  - ID: [BUG#290423][BUG#290399]
  - SUG: NA
  - DESC: 修复查看box和设置box状态失败问题
  -  kysec-daemon-fix-box-status-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.29
changelog:
  - Type: update
  - ID: [BUG#300847]
  - SUG: NA
  - DESC: 修复setstatus 打开box失败问题
  -  kysec-daemon-fix-box-status-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.30
changelog:
  - Type: update
  - ID: [TASK#391723][TASK#395905]
  - SUG: NA
  - DESC: 修复安全热点 fortify
  -  kysec-daemon-fix-fortify-sonarqube.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.31
changelog:
  - Type: update
  - ID: [BUG#304953] 【壁纸管控】添加壁纸管控后无法取消
  - SUG: NA
  - DESC: 修复删除壁纸管控策略后没有立即生效的问题
  -       kysec-daemon-fix-unset-bgset-take-effect.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.32
changelog:
  - Type: bugfix
  - ID: [BUG#292801]
  - SUG: NA
  - DESC: 修复设置安全模块状态失败时 直接返回错误
  -       kysec-daemon-fix-security-switch-retval.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.33
changelog:
  - Type: bugfix
  - ID: [BUG#312873][BUG#313343]
  - SUG: NA
  - DESC: 修复strict模式下,改变selinux状态失败bug,修复设置box状态后 ksaf为软模式bug
  -       kysec-daemon-fix-strict-mode-change-selinux-failed.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.34
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       kysec-daemon-add-license.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-01.se.35
changelog:
  - Type: update
  - ID: [TASK#435236]
  - SUG: NA
  - DESC: 代码覆盖率提升
  -       kysec-daemon-update-unit-test-program.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.36
changelog:
  - Type: update
  - ID: []
  - SUG: NA
  - DESC: 解决v11 sw平台切换模式时 grub更新失败问题
  -       kysec-daemon-fix-sw-platform-switch-security-mode-failed.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.1.1-01.se.37
changelog:
  - Type: update
  - ID: [BUG#339778]
  - SUG: NA
  - DESC: 解决接口未加权限校验,导致普通用户能够设置安全状态
  -       kysec-daemon-restore-authorize.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-01.se.38
changelog:
  - Type: update
  - ID: [BUG#314411]
  - SUG: NA
  - DESC: 解决验证取消壁纸管控后，控制面板仍然无法设置壁纸问题
  -       kysec-daemon-fix-set-bg-failed-after-bgset-remove.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.1.1-01.se.39
changelog:
  - Type: update
  - ID: [BUG#305103][BUG#292399]
  - SUG: NA
  - DESC: 修复kysec_check_user_valid_with_pam函数存在密码猜解风险的问题
  -       kysec-daemon-fix-check-user-pam-kve.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-01
changelog:
  - Type: update
  - ID: [BUG#346885]
  - SUG: NA
  - DESC: 模式切换时全量下发策略
  -       kysec-daemon-20250506-fix-some-bugs.patch


author: yangguangjing <yangguangjing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [BUG#347490]
  - SUG: NA
  - DESC: 增加security-switch的需求
  -      kysec-daemon-security-switch-new-parameter-20250508.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: 模式切换时 去除kysec中开启box的动作,单独开启box
  -	  kysec-daemon-fix-double-enable-box.patch  
  - 	添加setModuleStatusReboot()接口, 可以直接重启系统
  -         kysec-daemon-add-set-module-status-reboot-interface.patch   
  -   box开启逻辑放在kysec中作为子项
  -         kysec-daemon-fix-change-box-status.patch
  - 修改security-switch --get 状态时 off的状态显示值由none 变为off
  -	  kysec-daemon-get-status-none-2-off.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#352649][BUG#352653][BUG#351149]
  - SUG: NA
  - DESC: 修复调用reboot命令执行错误的问题
  -	  kysec-daemon-fix-excute-reboot-failed-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#353088][BUG#353355]
  - SUG: NA
  - DESC: 安全模式由off切换到strict出现提示完成后立即重启[BUG#353088]
  -	无权限进行模式切换的用户，切换失败后提示信息不友好[BUG#353355]
  -	  kysec-daemon-fix-off-to-strict-need-immediately-reboot-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#354035][BUG#353489]
  - SUG: NA
  - DESC: [BUG#354035]修复开启安全后 audit服务启动失败问题
  -       [BUG#353489]解决安全中心设置中无法关闭安全问题
  -       [其它]修复onoe模式下ksaf是开启状态, 检查切换模式是否需要重启错误的问题
  -          -- kysec-daemon-fix-none-mode-but-ksaf-on-check-reboot-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#369811][BUG#368135]
  - SUG: NA
  - DESC: [BUG#369811]修复softmode和enable互相切换时会修改子模块状态的问题
  -	[BUG#368135]推荐模式下，setstatus生效测试-apparmor-enable，失败
  -         -- kysec-daemon-fix-softmode-and-enable-switch-error.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#372191]
  - SUG: NA
  - DESC: [BUG#372191]修改涉密场景禁止设置安全模式和切换kysec、selinux、apparmor状态
  -	[其它]修复setstatus设置状态时, 如果状态出错, 是正常返回的问题
  -	  -- kysec-daemon-modify-sm-scene-forbidden-set-security-mode.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#375127][BUG#372111]
  - SUG: NA
  - DESC: [BUG#375127]修复频繁操作security-switch --get 模式回变成off
  -	[BUG#372111]解决普通用户可以使用systemctl管理服务问题
  -	  -- kysec-daemon-fix-repeatedly-execute-security-switch-get-error.patch


author: litianhao <litianhao@kylinos.cn> - 2.0.0-10
changelog:
  - Type: bugfix
  - ID: [BUG#376773]
  - SUG: NA
  - DESC: [BUG#376773]修复频繁操作security-switch --get 模式回变成off
  -	  kysec-daemon-do-not-disable-audit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#379175]
  - SUG: NA
  - DESC: 修复切换切换strict或default模式后 grub中存在两个audit参数问题
  -	  kysec-daemon-fix-grub-audit-param-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#381085]
  - SUG: NA
  - DESC: 修复off模式下仅开启box 重启后 获取的安全状态不正常问题
  -	  kysec-daemon-fix-get-security-status-error-when-only-open-box.patch


author: wanghao <wanghao2@kylinos.cn> - 2.0.0-13
changelog:
  - Type: bugfix
  - ID: [TASK#555445]
  - SUG: NA
  - DESC: 解决只切换selinux状态时, 不进行策略编译下发
  -	  kysec-daemon-fix-set-selinux-status-not-sync-policy.patch


author: lengchunying <lengchunying@kylinos.cn> - 2.0.0-14
changelog:
  - Type: bugfix
  - ID: [TASK#566261]
  - SUG: NA
  - DESC: 修复CVE-2025-1202
  -         kysec-daemon-fix-cve-2025-1202.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-02
changelog:
  - Type: update
  - ID: [task#598013]
  - SUG: NA
  - DESC: 修复arm架构grub.cfg文件缺少resume参数，导致切换模式失败的问题
  -         kysec-daemon-fix-arm-grub-lack-resume-parameter-set-kysec-status-failed.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 3.0.0-3
changelog:
  - Type: update
  - ID: [task#589493]
  - SUG: NA
  - DESC: 更新安全容器接口，完成与服务器容器客户端联调
  -       [其它]添加麒麟软件许可证，解决门禁合规问题
  -       kysec-daemon-update-container-interfaces.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-04
changelog:
  - Type: bugfix
  - ID: [BUG#498047][BUG#496697][BUG#496675][BUG#497801][BUG#497819]
  -     [BUG#497817][BUG#497653][BUG#497987][BUG#497951][BUG#497559]
  -     [BUG#498333]
  - SUG: NA
  - DESC: 修复使用命令更新联网管控的策略失败,修改spec文件,安装时创建配置文件[BUG#498047]
  -       【内核模块防加载】添加被损坏的内核模块无错误提示信息[BUG#496697]
  -       【内核模块防加载】添加普通文件无错误提示信息[BUG#496675]
  -       【文件防篡改】界面添加文件夹的授权管理失败[BUG#497801]
  -       【文件保护】手动创建目录添加\删除\查看例外程序-例外程序为软件包不显示[BUG#497819]
  -       【文件保护】手动创建目录添加例外程序-例外程序为路径，-L 查询不显示[BUG#497817]
  -       开启ksaf子模块开启后，重启机器，开主开关，重启机器，其他子模块无法开启[BUG#497653]
  -       【文件保护】\删除例外路径\包不存在，提示信息错误[BUG#497987]
  -       【文件保护】删除例外路径\包不存在,提示信息错误[BUG#497951]
  -       【模式切换】执行命令“security-switch --set strict” off切strict，default切strict失败[BUG#497559]
  -       sm-example安装失败，无法进行套件授权测试[BUG#498333]
  -         kysec-daemon-fix-some-bug-1.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#498333][BUG#498557]
  - SUG: NA
  - DESC: 修复开启sm后，未重启后，多次开启sm报错的问题[BUG#498333]
  -       【执行控制】添加\修改\查看白名单-文件-二进制-kysec_set 输出显示异常[BUG#498557] 
  -         kysec-daemon-fix-repetition-set-sm-status-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#499949][BUG#500135][BUG#499939][BUG#499953][BUG#500289][BUG#500427]
  - SUG: NA
  - DESC: 设备管控不显示连接状态[BUG#499949]
  -       设备管控未自动生成策略[BUG#500135]
  -       【执行控制】二进制-kysec_set,设置unknown标记后kysec_get exectl -f不显示文件路径[BUG#499939]
  -       设备管控多次开关设备权限控制的usb接口，出现一个麦克风[BUG#499953]
  -       【联网管控】kysec_set 设置联网策略后，查新显示异常[BUG#500289]
  -       【文件防篡改】文件夹添加应用授权后无法取消授权[BUG#500427] 
  -       修复当GRUB_CMDLINE_LINUX_SECURITY=”“是空时无法添加lsm=ksaf的错误
  -       修改spec文件，优化目录不存在的脚本判断语句
  -           kysec-daemon-fix-dev-get-60-day-records-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#501289][BUG#502527][BUG#501285][BUG#501257][BUG#501243][TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 【设备安全】设备连接策略-导入策略显示导入0行策略[BUG#501289]
  -       【进程防护】删除-路径添加的例外递归目录失败[BUG#502527]
  -       【设备安全】光驱的连接记录不显示[BUG#501285]
  -       【设备安全】设备权限控制-光驱管控开启关闭测试（外置光驱），不符合策略[BUG#501257]
  -       【设备安全】设备权限控制-USB接口控制功能验证-禁用USB接口仅U盘生效，光驱和网卡可读[BUG#501243]
  -       修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         kysec-daemon-fix-dev-add-multi-policy-return-0-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.0.0-08
changelog:
  - Type: update
  - ID: [TASK#605711]
  - SUG: NA
  - DESC: 设备管控加入开机和关机的时候自动更新设备连接记录的功能
  -         kysec-daemon-dev-add-auto-add-record.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 3.0.0-09
changelog:
  - Type: update
  - ID: [TASK#605473]
  - SUG: NA
  - DESC: sdk优化问题自查及修复
  -       kysec-daemon-fix-gvariant-unref-issue.patch


author: wanghao <wanghao2@kylinos.cn> - 1.0.0-1.se.04
changelog:
  - Type: update
  - ID:[Task#165225]
  - SUG:NA
  - DESC: 为软件包黑白名单kdk接口添加bwlist类型
  -	  add patch: kysec-module-authorize-add-bwlist-type-for-kdk-interface.patch


author: chengang <chengang@kylinos.cn> - 1.0.0-1.se.06
changelog:
  - Type: update
  - ID: [TASK#375187] 代码覆盖率提升
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      kysec-module-authorize-add-unit-test.patch
  -      kysec-module-authorize-add-coverage-tests.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-1.se.07
changelog:
  - Type: update
  - ID: [TASK#395911] fortify问题修复
  - SUG: NA
  - DESC: 修复foritfy问题
  -      kysec-module-authorize-fix-fortify-bug.patch
  -      kysec-module-authorize-fix-add-test-build-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-1.se.08
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 合规性整改,增加license声明
  -      kysec-module-authorize-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 1.0.0-1.se.09
changelog:
  - Type: update
  - ID: [TASK#435248]
  - SUG: NA
  - DESC: 代码覆盖率提升
  -      kysec-module-authorize-update-coverage-tests.patch


author: maxu <maxu@kylinos.cn> - 1.0.0-1.se.10
changelog:
  - Type: update
  - ID: [TASK#595381]
  - SUG: NA
  - DESC: CI对接
  -      kysec-module-authorize-increase-the-single-test-coverage-rate.patch


author: maxu <maxu@kylinos.cn> - 1.0.0-1.se.11
changelog:
  - Type: update
  - ID: [TASK#595381]
  - SUG: NA
  - DESC: 提高单元测试覆盖率
  -      kysec-module-authorize-increase-the-single-test-coverage-rate-02.patch


author: maxu <maxu@kylinos.cn> - 1.0.0-1.se.12
changelog:
  - Type: update
  - ID: [TASK#599239] [BUG#498893]
  - SUG: NA
  - DESC: Valgrind动态测试、错误日志记录kysec.log打满磁盘
  -      kysec-module-authorize-add-fuzz-and-valgrind-test.patch
  -      kysec-module-authorize-replace-kysec-log-to-fprintf.patch


author: zhangfan<zhangfan4@kylinos.cn> - 1.0.0-05
changelog:
  - Type:bugfix
  - ID:[BUG#334554]
  - SUG:NA
  - DESC:1.服务器v11-2503机密级计算功能集成
         2.增加自动化测试脚本
         3.增加麒麟license和copyright信息


author: wujiening<wujiening@kylinos.cn> - 1.0.0-07
changelog:
  - Type:bugfix
  - ID:[BUG#487417]
  - SUG:NA
  - DESC:1.sosid 命令长度限制修改为32字节，超过报错
         2.sosid 命令增加错误提示
         3.增加sosid命令自动化测试脚本


author: wujiening<wujiening@kylinos.cn> - 1.0.0-08
changelog:
  - Type:bugfix
  - ID:[BUG#489293]
  - SUG:NA
  - DESC:1.kmid 命令长度限制修改为32字节，超过报错
         2.kmid 命令增加错误提示
         3.增加kmid命令超出32字节自动化测试脚本


author: wujiening<wujiening@kylinos.cn> - 1.0.0-09
changelog:
  - Type:update
  - ID:[BUG#596247]
  - SUG:NA
  - DESC:1.增加单元测试覆盖检测
         2.增加valgrind内存检测
         3.修复命令行工具从文件获取数据溢出问题
         4.增加fuzz测试
  - 补丁:
         1.code-compliance-rectification.patch
         2.add_fuzz_test.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.01
changelog:
  - build rpm from desktop
  - libkysec.c文件添加kysec_check_komd()函数
  - kysofy_list文件添加/usr/bin/virt-manager
  -   add patch: kysec-utils-add-kysec-check-kmod-func.patch
  - 删除告警模式
  -   add patch: kysec-utils-del-warning-mode.patch
  - 修复libpam导致无法登录的问题
  -   add patch: kysec-utils-fix-libpam-cannot-login.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.02
changelog:
  - 添加kysec_tpm状态设置和获取
  -   add patch: kysec-utils-add-kysec-tpm-status.patch
  - netctl修改为sm3算法，并且由kysec_tpm决定使用软算法还是硬算法
  -   add patch: kysec-utils-change-netctl-tpm-sm3-hash.patch
  - exectl添加sm3硬算法，由kysec_tpm决定是否启用硬算法
  -   add patch: kysec-utils-exectl-add-sm3-hard-hash.patch
  - 更新netctl白名单
  -   add patch: kysec-utils-update-netctl-xml.patch
  - 更新ppro白名单
  -   add patch: kysec-utils-update-ppro-xml.patch
  - 修复setstatus和getstatus的错误
  -   add patch: kysec-utils-fix-setstatus-getstatus-error.patch
  - 添加netctl_pkg.xml文件
  -   add patch: kysec-utils-add-netctl-pkg-xml.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.03
changelog:
  - 网络控制获取所有包信息时过滤未安装的软件包
  -   add patch: kysec-utils-netctl-pkg-read-all-data-filter-unistalled-pkg.patch
  - 添加enable_tpm编译宏
  -   add patch: kysec-utils-add-enable-tpm-build-macro.patch
  - 修改spec文件，删除宏- 使之可以生成debuginfo、debugsource包


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.04
changelog:
  - Type: bugfix
  - ID:[BUG#75532]
  - SUG:NA
  - DESC: 修改getstatus查看kysec信息显示，去除devctl和tpm_status
  -         add patch: kysec-utils-modify-getstatus-info.patch
  - Type: update
  - ID:[TASK#81148]
  - SUG:NA
  - DESC: 当kysec_status或者exectl的状态从disable到enable是，将数据库中relabel_status的值改为0，全盘打标记
  -         add patch: kysec-utils-change-relabel_status-to-0.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.05
changelog:
  - Type: bugfix
  - ID:[BUG#112677]
  - SUG:NA
  - DESC: 依据服务器部门提供的netctl白名单列表，修改网络控制xml文件
  -         add patch: kysec-utils-netctl-modify-xml-file.patch
  - Type: bugfix
  - ID:[BUG#106538]
  - SUG:NA
  - DESC: 修改kysec_check_exec()函数，解决sh执行脚本的问题
  -         add patch: kysec-utils-modify-kysec_check_exec-function.patch
  - Type: bugfix
  - ID:[BUG#118587]
  - SUG:NA
  - DESC: 修复当模块的标签是unknown是仍然可以insmod的问题
  -         add patch: kysec-utils-fix-insmod-seccuess-when-module-label-unknown.patch
  - Type: bugfix
  - ID:[BUG#122963]
  - SUG:NA
  - DESC: netctl为龙芯的机器添加龙芯浏览器白名单
  -         add patch: kysec-utils-netctl-xml-add-lbrowser-for-loongarch64.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.06
changelog:
  - Type:update
  - ID:NA
  - SUG:NA
  - DESC: 给安全加固程序加上kysoft标记，因为安全加固程序需要给配置文件打白名单，需要kysoft标记，否则没有权限
  -       add patch: kysec-utils-add-kysoft-label-to-security-reinforce.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.07
changelog:
  - Type: update
  - ID:[Task#93378]
  - SUG:NA
  - DESC: fortify扫描安全问题修复
  -         add patch: kysec-utils-fix-fortify.patch
  - Type: bugfix
  - ID:[Bug#121813]
  - SUG:NA
  - DESC: 在secadm_list列表中加入semodule程序，修复三权模式下，secadm用户安装，卸载策略模块失败的问题 
  -         add patch: kysec-utils-add-semodule-to-secadm_list.patch
  - Type: bugfix
  - ID:[Bug#122812]
  - SUG:NA
  - DESC: 修复sh执行可执行程序失败的问题，libkysecwhlist.so调用失败
  -         add patch: kysec-utils-fix-sh-execute-failed.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.08
changelog:
  - Type: update
  - ID:[Task#90053]
  - SUG:NA
  - DESC: 修改kysec相关命令
  -         add patch: kysec-utils-modify-kysec-command.patch
  - Type: bugfix
  - ID:[Bug#128959][Bug#128809]
  - SUG:NA
  - DESC: sh执行没有标记的脚本，度量成功后，允许执行并打上verified的标记
  -         add patch: kysec-utils-fix-sh-execute-set-label.patch


author: xuyujun <xuyujun@kylinos.cn> - 3.3.6-33.se.09
changelog:
  - Type:update
  - ID: [Task#90054]
  - SUG:NA
  - DESC: 添加支持chpolicy的库接口
  -         add patch: kysec-utils-add-chpolicy.patch
  - Type: update
  - ID:[Task#90053][Bug#131756]
  - SUG:NA
  - DESC: 优化部分kysec相关命令, 解决软件包标签获取命令执行报错的问题
  -         add patch: kysec-utils-kysec-command-optimize-and-fix-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.10
changelog:
  - Type: update
  - ID:[Task#90053][Bug#128917][Bug#131796][Bug#131599][Bug#131594]
  - SUG:NA
  - DESC: 优化部分kysec相关命令
  -       修复进程开启情况下，设置防杀死标签，不生效，下次打开的进程才生效的问题
  -       修复kysec_set设置应用程序联网管控失败的问题
  -       修复strict模式下关闭kysec后root用户执行setenforce 0提示权限不够的问题
  -       修复strict模式下关闭kysec后secadm和auditadm用户仍存在的问题
  -       调用kysec-module的dbus服务改为kysec-daemon
  -         add patch: kysec-utils-fix-kysec-command-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.11
changelog:
  - Type: update
  - ID: NA
  - SUG:NA
  - DESC: kysec检查接口还原p标记检查，先做hash值检查，再检查p标记
  -         add patch: kysec-utils-kysec-check-lib-restore-parent-label-check.patch
  - Type: bugfix
  - ID: [bug#135468]
  - SUG:NA
  - DESC: 修复kysec组件命令注入的漏洞
  -         add patch: kysec-utils-fix-kysec-command-inject-bug.patch
  - Type: bugfix
  - ID: [Bug#135772]
  - SUG:NA
  - DESC: 修复应用程序执行控制解除失败的bug
  -         add patch: kysec-utils-fix-failed-to-remove-exectl.patch
  - Type: bugfix
  - ID: [Bug#138094]
  - SUG:NA
  - DESC: 旧版本接口兼容
  -         add patch: kysec-utils-add-old-version-interface-compatible.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.12
changelog:
  - Type: bugfix
  - ID: [BUG#140008]
  - SUG:NA
  - DESC: setstatus设置disable提示重启生效
  -         add patch: kysec-utils-setstaus-disable-prompt-reboot.patch
  - Type: bugfix
  - ID: [BUG#]
  - SUG:NA
  - DESC: 修复当三权关闭时，无法使用security-switch和setstatus切换状态的问题
  -         add patch: kysec-utils-fix-not-set-status-when-close-3adm.patch
  - Type: bugfix
  - ID: [BUG#142102]
  - SUG:NA
  - DESC: 修复非secadm用户不可查看当前安全状态的问题
  -         add patch: kysec-utils-delete-security-switch-from-secadm-list.patch
  - Type: update
  - ID: [TASK#113906]
  - SUG:NA
  - DESC: 从auditadm_list中删除ausearch程序
  -         add patch: kysec-utils-delete-ausearch-from-auditadm-list.patch
  - Type: update
  - ID: [TASK#113152]
  - SUG:NA
  - DESC: 命令行注入分析及解决
  -         add patch: kysec-utils-command-line-injection.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.13
changelog:
  - Type: bugfix
  - ID: [BUG#143767][BUG#143772][BUG#143803]
  - SUG:NA
  - DESC: 修复kysec_get module打印的帮助信息提示无效的参数
  -       修复kysec_set module(exectl\kmod\fpro\ppro)显示的不是子模块帮助信息
  -       修复kysec_set kmod -v allow -n nbd.ko.xz后有两个防卸载模块的问题
  -         add patch: kysec-utils-fix-kysec-command-prompt-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.14
changelog:
  - Type: bugfix
  - ID: [BUG#146928]
  - SUG:NA
  - DESC: 修复强制重启后，kysec-daemon无法启动的问题，修改com.kylin.kysec.service后，执行sync让数据落盘
  -         add patch: kysec-utils-fix-security-switch-disable-after-force-reboot-bug.patch
  - Type: update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: kysec-utils-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.15
changelog:
  - Type: bugfix
  - ID: [BUG#164394]
  - SUG:NA
  - DESC: 修复当kysec关闭时不能通过软件包获取3adm的标记的问题
  -         add patch: kysec-utils-fix-can-not-get-3adm-label-when-kysec-disable-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 3.3.6-33.se.16
changelog:
  - Type: bugfix
  - ID: [BUG#165082]
  - SUG:NA
  - DESC: 修复当修改内核模块文件后，仍可以insmod成功的问题
  -         add patch: kysec-utils-fix-insmod-success-when-modify-ko-file-after.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.01
changelog:
  - Type: update
  - ID: [TASK#147330]
  - SUG:NA
  - DESC: 1、移植服务器sm补丁: kysec-utils-fix-update-from-sp2.patch
  -          修改spec文件，kysec-utils包去除libkysecwhlist-devel编译依赖，添加libkysecwhlist安装依赖
  -            add patch: kysec-utils-fix-update-from-sp2.patch
  -	2、移植服务器sm修改: 修改spec文件, 移除libkysec-extend和libkysecwhlist包的kysec-daemon安装依赖
  -	3、移植服务器sm补丁: kysec-utils-fix-update-from-sw.patch
  -	   支持申威平台lib库目录是/usr/lib
  -	     add patch: kysec-utils-fix-update-from-sw.patch
  -	4、移植服务器sm补丁: kysec-utils-fix-bugs-220824.patch
  -	   修复文件夹打白功能的程序bug
  -	     add patch: kysec-utils-fix-set-dir-whlist-bug.patch
  -       5、移植服务器sm补丁: kysec-utils-add-patch-from-debian-0824.patch
  -	   合并桌面补丁，支持usb白名单class管控
  -	     add patch: kysec-utils-add-patch-from-debian-0824.patch
  -	6、移植服务器sm补丁: kysec-utils-support-device-control.patch
  -	   getstatus、setstatus添加对设备管控的支持
  -	     add patch: kysec-utils-support-device-control.patch
  -	7、移植服务器sm补丁: kysec-utils-add-patch-from-debian-0913.patch
  -	   合并桌面补丁，移植授权新方案和及时生效, spec文件kysec-utils包添加libkysec-module-authorize-devel编译依赖, 
  -	   post阶段添加kysec_sync_init执行
  -	     add patch: kysec-utils-add-patch-from-debian-0913.patch
  -	8、移除服务器sm补丁: kysec-utils-fix-bugs-0919.patch
  -	   修改移除网络管控策略，网络不能自动连接的bug
  -	     add patch: kysec-utils-fix-bugs-0919.patch
  -	9、移植服务器sm补丁: kysec-utils-fix-bugs-0928.patch
  -	   移植桌面补丁，提供clean_all的接口，以及策略remove后没有启用的问题
  -	     add patch: kysec-utils-fix-bugs-0928.patch
  -	10、移植服务器sm补丁: kysec-utils-fix-bugs-1012.patch
  -	    解决策略重复下发无效的问题
  -	      add patch: kysec-utils-fix-bugs-1012.patch
  -	11、移植服务器sm补丁: kysec-utils-add-forbidden-package-uninstall-function.patch
  -	    添加软件防卸载
  -	      add patch: kysec-utils-add-forbidden-package-uninstall-function.patch
  -	12、移植服务器sm补丁: kysec-utils-add-patch-from-debian-1026.patch
  -	    移植桌面补丁，USB CLASS管控，增加0f和dc的管控，清除所有策略的接口新增网卡名清空
  -	      add patch: kysec-utils-add-patch-from-debian-1026.patch
  -	13、移植服务器sm补丁: kysec-utils-add-patch-from-debian-1105.patch
  -           移植桌面补丁
  -	      add patch: kysec-utils-add-patch-from-debian-1105.patch
  -	14、移植服务器sm补丁: kysec-utils-add-patch-from-debian-1114.patch
  -	    移植桌面补丁：修复内置光驱设为禁止无法弹出，内置光驱管控策略未及时生效
  -	      add patch: kysec-utils-add-patch-from-debian-1114.patch
  -	15、移植服务器sm补丁: kysec-utils-fix-bugs-1118.patch
  -	    添加针对目录的文件保护接口
  -	      add patch: kysec-utils-fix-bugs-1118.patch
  -	16、移植服务器sm补丁: kysec-utils-fix-bugs-1121.patch
  -	    优化设备管控逻辑, 修复bug#149718: 安全中心相关程序未打上parent标记
  -	      add patch: kysec-utils-fix-bugs-1121.patch
  -	17、移植服务器sm补丁: kysec-utils-fix-bugs-1207.patch
  -	    修改设备管控即时生效bug
  -	      add patch: kysec-utils-fix-bugs-1207.patch
  -	18、移植服务器sm补丁: kysec-utils-fix-bugs-1213.patch
  -	    修改pid、vid管控usb不能及时生效问题
  -	      add patch: kysec-utils-fix-bugs-1213.patch
  -	19、移植服务器sm补丁: kysec-utils-fix-bugs-0109.patch
  -	    修改kysec-sync-daemon中使用的设备管控结构体没有赋值version值为1的问题
  -	      add patch: kysec-utils-fix-bugs-0109.patch
  -	20、移植服务器sm补丁: kysec-utils-add-bgset.patch
  -	    增加壁纸锁定功能
  -	      add patch: kysec-utils-add-bgset.patch
  -	21、移植服务器sm补丁: kysec-utils-adapter-kernel-device-info-file-change.patch
  -	    匹配内核device_info文件格式修改，支持USB软驱实时生效
  -	      add patch: kysec-utils-adapter-kernel-device-info-file-change.patch
  -	22、移植桌面补丁: activation-daemon.patch [BUG#10688]
  -	    目前/usr/sbin/activation-daemon程序集成在进程防杀死列表, 开机时会出现kylin-activation coredump,
  -           建议把该文件从进程防杀死列表移除,并添加到进程防杀死黑名单中去
  -	      add patch: kysec-utils-ppro-remove-activation-daemon.patch
  -	23、移植桌面补丁: fix-error-of-incremental-backups-and-devctl-syn-policies.patch [BUG#113477]
  -	    解决rsync增量备份功能失效的问题
  -	      add patch: kysec-utils-modify-backup-daemon-label.patch
  -	24、移植桌面补丁: add-log-for-change-kysec-status.patch [BUG#121062]
  -	    修改kysec各模块状态时产生操作日志
  -             add patch: kysec-utils-add-log-for-change-kysec-status.patch
  -	25、移植桌面补丁: format-dbus-interface-return-value.patch
  -	    规范化dbus接口返回值
  -	      add patch: kysec-utils-format-dbus-interface-return-value.patch
  -	26、移植桌面补丁: fix-free-glib-iter-core-dump-error.patch [BUG#128943]
  -	    修复释放glib iter崩溃问题
  -	      add patch: kysec-utils-fix-free-glib-iter-core-dump-error.patch
  -	27、移植桌面补丁: fix-bug-for-kysec_set-r.patch 
  -	    修复kysec_monitor的编译警告, 修复kysec_set批量设置文件标记错误的问题, 优化getstatus状态获取接口
  -             add patch: kysec-utils-modify-ppro-interface-in-kysec-daemon-and-fix-kysec-set-bug.patch
  -	28、移植桌面补丁: fix-netctl-dbus-interface-call-failed.patch [BUG#134310]
  -	    修复联网管控dbus接口调用失败
  -	      add patch: kysec-utils-fix-netctl-dbus-interface-call-failed.patch
  -	29、移植桌面补丁: use-tid-to-communication-with-kernel.patch [BUG#104810]
  -	    内核通讯改用tid通讯; 且重新实现gettid方法, 修复loongarch64下gettid导致编译失败问题
  -	      add patch: kysec-utils-use-tid-to-communication-with-kernel.patch
  -	30、移植桌面补丁: Bug-fixes-for-networking-control.patch 
  -	    修改netctl接口容错问题; 添加装包时netctl_pkg.xml的同步功能
  -	      add patch: kysec-utils-fix-bug-for-networking-control.patch
  -	31、移植桌面补丁: add-trust-boot-cmd-to-utils-when-os-support.patch
  -	    kysec_get_process_info.c的漏洞修复; libkysec.c的修改
  -	      add patch: kysec-utils-fix-kysec-get-process-info-api-bug.patch
  -	32、移植桌面补丁: call-kysec-auth-check-when-bash-excute-script.patch
  -	    强制模式下, 调用kysec-auth校验哈希值
  -	      add patch: kysec-utils-call-kysec-auth-check-when-bash-excute-script.patch
  -	33、移植桌面补丁: network-management-policies-are-sync-optimized.patch
  -	    联网管控策略升级同步优化
  -	      add patch: kysec-utils-network-management-policies-are-sync-optimized.patch
  -	34、移植桌面补丁: fix-not-permission-when-exectl-var-lib-dpkg-xx.patch
  -	    修复parent标记进程在/var/lib/dpkg目录下创建的文件无权限执行的bug
  -	      add patch: kysec-utils-fix-not-permission-when-exectl-var-lib-dpkg-file.patch
  -	35、移植桌面补丁: remove-enforcing-mode-set-tip-for-tboot.patch
  -	    修复fortify扫描漏洞
  -	      add patch: kysec-utils-fix-bug-about-libkysec-and-kysec_whlist.patch
  -	36、移植桌面补丁: fix-the-problem-that-failed-to-enable-hdmi.patch
  -	    修复一些fortify扫描的bug
  -	      add patch: kysec-utils-fix-some-bug-for-fortify.patch
  -	37、移植桌面补丁: add-sm-and-ipt-status-update.patch
  -	    新增安全套件状态配置; 修改configure.ac文件
  -	      add patch: kysec-utils-add-sm-and-modify-configure-ac.patch
  -	38、移植桌面补丁: change-the-type-of-judge-netlink-in-hw-pc.patch
  -	     		  optimize-netlink-communicate-speed.patch
  -			  change-the-type-of-judge-netlink-in-hw-pc2.patch
  -	    优化判断netlink的方式; 优化netlink通讯效率
  -	      add patch: kysec-utils-optimize-netlink-communicate-speed-and-change-judge-netlink-type.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.02
changelog:
  - Type: update
  - ID: [TASK#151386]
  - SUG:NA
  - DESC: 网络控制改为黑名单模式
  -	  add patch: kysec-utils-netctl-mode-modify-to-blist.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.03
changelog:
  - Type: bugfix
  - ID: [BUG#174880][BUG#174764]
  - SUG:NA
  - DESC: 添加netctl管控策略，不加-v时，默认阻止
  -	增加netctl -d参数，可以根据路径从管控列表中删除
  -	修改netctl提示语
  -	查询netctl策略时，不显示未安装的应用程序
  -	  add patch: kysec-utils-modify-kysec_set-netctl-cmdline.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.04
changelog:
  - Type: bugfix
  - ID: [BUG#151006]
  - SUG:NA
  - DESC: 移植sp3主线补丁:修复关机过程调用initramfs内进程无执行权限的问题
  -         add patch: kysec-utils-fix-initramfs-exec-denied-halt.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.05
changelog:
  - Type: update
  - ID: [任务#修复koji编包的问题]
  - SUG:NA
  - DESC: 修复koji编包的问题
  -         add patch: kysec-utils-fix-build-problem-in-koji.patch


author: maoyifeng <maoyifeng@kylinos.cn> - 3.4.1-01.se.06
changelog:
  - Type: update
  - ID: [任务#162335]
  - SUG:NA
  - DESC: 设备管控需求合入 
  -         add patch: kysec-utils-add-program-blacklist-to-prevent-program-execution.patch
                       kysec-utils-add-and-modify-some-device-and-interface-control.patch
                       kysec-utils-add-sm-data-separation.patch
                       kysec-utils-set-path-which-not-existed-to-program-blacklist.patch
                       kysec-utils-fix-coredump-while-set-hdmi-or-dp-control.patch
                       kysec-utils-clear-the-program-blacklist-when-cancling-the-authorize.patch
                       kysec-utils-use-xrandr-to-control-displayport-when-using-device-control.patch


author: zhangzhou <zhangzhou@kylinos.cn> - 3.4.1-01.se.07
changelog:
  - Type: update
  - ID:[TASK#155338]
  - SUG:NA
  - DESC: 修复utils与common gettid重名问题：add patch:kysec-utils-fix-gettid-multiple.patch
  - 		sp4 kysec应用层日志优化 add patch:kysec-utils-log-enhanced-sp4.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.08
changelog:
  - Type: bugfix
  - ID:[BUG#186970][BUG#186960]
  - SUG:NA
  - DESC: 修复kysec_set设置netctl提示信息有无误的问题[BUG#186970]
  -	  add patch: kysec-utils-fix-set-netctl-prompt-message-error-bug.patch
  -	清空netctl默认黑名单配置文件[BUG#186960]
  -	  add patch: kysec-utils-clear-netctl-blacklist.patch


author: maoyifeng <maoyifeng@kylinos.cn> - 3.4.1-01.se.09
changelog:
  - Type: update
  - ID:[TASK#168789]
  - SUG:NA
  - DESC: 修复更新内核模块防卸载时没有return返回值
  -       add patch:kysec-utils-fix-compilation-warning.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.10
changelog:
  - Type: update
  - ID:[TASK#171233]
  - SUG:NA
  - DESC: 同步hostos补丁，修改spec文件，取消对libkysecwhlist-devel编译依赖[TASK#155338]
  -	同步hostos补丁，解决setstatus设置kysec enforcing时卡住的问题[BUG#188787]
  -	  add patch: kysec-utils-fix-setstatus-kysec-enforcing-stuck.patch
  -	同步hostos补丁，setstatus设置kysec为enforcing时，忽略devctl，sm和pblk的状态值设置[BUG#189658]
  -	  add patch: kysec-utils-set-kysec-enforcing-ignore-devctl-sm-pblk-status.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.11
changelog:
  - Type: bugfix
  - ID:[BUG#190568]
  - SUG:NA
  - DESC: 修复kysec关闭的情况下，设置netctl黑名单报错的问题
  -	  add patch: kysec-utils-fix-disable-set-netctl-error.patch


author: litianhao <litianhao@kylinos.cn> 3.4.1-01.se.12
changelog:
  - Type: update
  - ID:[BUG#190233]
  - SUG:NA
  - DESC: 修复hub禁用启用不即时生效的问题
  -     add patch: kysec-utils-fix-hub-not-work-at-once.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.13
changelog:
  - Type: bugfix
  - ID:[BUG#188130]
  - SUG:NA
  - DESC: 解决通过sh或者python执行unknown标记的文件，会产生两条重复的错误提示
  -	  add patch: kysec-utils-repeat-error-prompt-when-fix-sh-execute-script.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.14
changelog:
  - Type: update
  - ID:[任务#173364][BUG#192980]
  - SUG:NA
  - DESC: 解决在安装tuned包后，提示/etc/profile.d/env.sh没有权限的问题[任务#173364]
  -	  add patch: kysec-utils-tuned-script-file-add-kysoft-label.patch
  -	为docker容器运行的程序加上kysoft标记[BUG#192980]
  -	  add patch: kysec-utils-add-kysoft-label-for-docker.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.15
changelog:
  - Type: bugfix
  - ID:[BUG#193772]
  - SUG:NA
  - DESC: kysec为permissive模式，且exectl为enable模式时，kysec_exectl_check()加入日志
  -	  add patch: kysec-utils-permissive-mode-kysec-exectl-check-add-log.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 3.4.1-01.se.16
changelog:
  - Type: bugfix
  - ID:[TASK#179971 BUG#193846]
  - SUG:NA
  - DESC: 同步桌面流量管控普通用户可以配置策略问题
  -	  add patch: kysec-utils-fix-netflow-ordinary-user-can-config-policy.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.17
changelog:
  - Type: bugfix
  - ID: [BUG#200401][BUG#202354][BUG#202370]
  - SUG:NA
  - DESC: 修复切换selinux策略失败时，提示语句不完整的问题[BUG#200401]
  -         add patch: kysec-utils-fix-chpolicy-tips-error.patch
  -	将load_policy和checkpolicy加入secadm_list文件中[BUG#202354][BUG#202370]
  -	  add patch: kysec-utils-add-checkpolicy-and-load_policy-to-secadm_list.patch


author: litianhao <litianhao@kylinos.cn> - 3.4.1-01.se.18
changelog:
  - Type: bugfix
  - ID:[BUG#201833]
  - SUG:NA
  - DESC: 修复getstatus在sm开启时未显示部分功能状态的问题
  -     add patch: kysec-utils-add-sm-missing-status-info.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.19
changelog:
  - Type: bugfix
  - ID: [BUG#198091]
  - SUG:NA
  - DESC: 修改使securit-switch切换状态后重启生效
  -	  add patch: kysec-utils-modify-security-switch-effective-after-reboot.patch


author: liwei <liwei@kylinos.cn> - 3.4.1-01.se.20
changelog:
  - Type: task
  - ID: [Task#173713]
  - SUG:NA
  - DESC: 【外设管控】去除虚拟机默认策略中有test相关内容
  - add patch: kysec-utils-remove-pblk-test.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.21
changelog:
  - Type: bugfix
  - ID: [BUG#205354]
  - SUG:NA
  - DESC: 修复三员用户家目录删除后,stirct模式仍然可以成功切换,但无法登录的问题
  -	  add patch: kysec-utils-fix-login-failed-when-del-3adm-home-dir.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.22
changelog:
  - Type: bugfix
  - ID: [BUG#207002]
  - SUG:NA
  - DESC: 修复查询或设置非模块文件的防卸载策略时，提示段错误
  -	  add patch: kysec-utils-fix-not-ko-file-set-and-get-kmod-error.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.23
changelog:
  - Type: update
  - ID:[任务#165225][任务#165240][任务#165232][任务#178765][任务#178762][任务#165245]
  -    [BUG#204640][BUG#204601]
  - SUG:NA
  - DESC: 添加软件包黑白名单kdk接口[任务#165225]
  -	  add patch: kysec-utils-add-bwlist-kdk-interface.patch
  -       添加应用执行控制kdk接口[任务#165240]
  -         add patch: kysec-utils-add-pblk-kdk-interface.patch
  -       添加软件防卸载kdk接口,修改spec文件,pkglist.xml
  -       文件由kysec-utils包安装[任务#165232]
  -         add patch: kysec-utils-add-pkglist-kdk-interface.patch
  -       添加内核模块防卸载kdk接口[任务#178765]
  -         add patch: kysec-utils-add-kmod-kdk-interface.patch
  -       添加进程防杀死kdk接口[任务#178762]
  -         add patch: kysec-utils-add-ppro-kdk-interface.patch
  -       添加文件保护kdk接口[任务#165245]
  -         add patch: kysec-utils-add-filepro-kdk-interface.patch
  -       添加kysec_clear_all_policy_kdk()接口
  -         add patch: kysec-utils-add-clear-all-policy-kdk-interface.patch
  -       修改函数返回值0代表成功;解决添加sdk补丁,只更新libkysec-extend包后,
  -	再使用rpm安装会出现段错误的问题[BUG#204640][BUG#204601]
  -         add patch: kysec-utils-modify-function-return-value-0-success.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.24
changelog:
  - Type: update
  - ID: [任务#196834][BUG#211413][BUG#210878][BUG#210876][BUG#210773]
  - ID: [BUG#210141][BUG#210138]
  - SUG:NA
  - DESC: 修复使用source执行普通文件是kysec拦截的问题[任务#196834]
  -	  add patch: kysec-utils-fix-source-execute-common-file-kysec-denied.patch
  -	libkysec-core libkysec-adv libsecurity-conf三个包修改安装依赖版本,
  -	解决sp3升级sp4失败的问题[BUG#211413]
  -	修复进程管控使用命令工具查询或者设置由sdk导致的错误[BUG#210878][BUG#210876][BUG#210773]
  -	修复sm添加进程防杀死的失败的问题[BUG#210141]
  -	修复sm查询文件保护错误的问题[BUG#210138]
  -	  add patch: kysec-uitls-fix-some-bug-about-sdk.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.25
changelog:
  - Type: fixbug
  - ID: [BUG#217615]
  - SUG:NA
  - DESC: 修复【SP4-B15】【安全SDK】【strict】设备管控功能授权失败
  - add  kysec-utils-add-kdk-authorize-in-kysoft.patch


author: wanghao <wanghao2@kylinos.cn> - 3.4.1-01.se.26
changelog:
  - Type: bugfix
  - ID: [BUG#218009]
  - SUG:NA
  - DESC: 修复kdk接口导致kysec命令可以修改sm策略的问题[BUG#218009]
  -         add patch: kysec-utils-fix-kysec-can-modify-sm-policy-bug.patch


author: litianhao <litianhao@kylinos.cn> - 3.4.1-01.se.28
changelog:
  - Type: update
  - ID: [BUG#244065] kysec_get p参数不可用
  - SUG: NA
  - DESC: 修复获取进程属性失败的问题
  -       kysec-utils-fix-attr-path.patch


author: litianhao <litianhao@kylinos.cn> - 3.4.1-01.se.30
changelog:
  - Type: update
  - ID: [BUG#248933] strict模式下kysec相关命令有报错提示
  - SUG: NA
  - DESC: 修复单元测试参数导致命令执行异常的问题
  -       kysec-utils-fix-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.31
changelog:
  - Type: update
  - ID: [TASk#379851]
  - SUG: NA
  - DESC: 兼容层接口开发
  -        kysec-utils-2501-compatible01.patch
  -        kysec-utils-2501-kysec_set-compatible01.patch
  -        kysec-utils-get.patch
  -        kysec-utils-2501-compatible-mode-switch.patch
  -        kysec-utils-2501-compatible-setstatus.patch
  -        kysec-utils-2501-compatible-setstatus02.patch
  -        kysec-utils-2501-compatible-kysec-daemon-root-run.patch
  -        kysec-utils-2501-compatible-setstatus03.patch
  -        kysec-utils-2501-compatible-load-whlist-ftype-error.patch
  -        kysec-utils-2501-compatible-coverage-del-error-code-1.patch
  -        kysec-utils-2501-compatible-update-load-exectldb-data.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.32
changelog:
  - Type: update
  - ID: [TASk#379851]
  - SUG: NA
  - DESC: 支持set muti indentify接口
  -       kysec-utils-compatiable-set-multi-identify-func.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.35
changelog:
  - Type: update
  - ID: [BUG#295285]
  - SUG: NA
  - DESC: 修复临时切换kysec, 重启后kysec状态有永久生效问题 
  -       kysec-utils-fix-set-kysec-temporary-status-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.36
changelog:
  - Type: update
  - ID: [BUG#293881][BUG#293455]
  - SUG: NA
  - DESC: 修复kysec_get获取三权标识错误
  -       kysec-utils-fix-kysec_set-some-bugs.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.37
changelog:
  - Type: update
  - ID: [TASK#391714][TASK#395907]
  - SUG: NA
  - DESC: 修复安全热点和fortify
  -       kysec-utils-fix-security-sensitive-fortify-issues.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.38
changelog:
  - Type: bugfix
  - ID: [BUG#307245]
  - SUG: NA
  - DESC: 修复kysec_set 对普通文件设置执行标记时错误信息不明确
  -       kysec-utils-fix-kysec_set-normal-file-failed-msg.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.39
changelog:
  - Type: update
  - ID: [TASK#405873]
  - SUG: NA
  - DESC: 增加单元测试
  -       kysec-utils-add-unit-test-20241101.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.40
changelog:
  - Type: update
  - ID: [BUG#313097]
  - SUG: NA
  - DESC: 模块防卸载标签查看无法查看指定模块的保护策略
  -       kysec-utils-fix-kysec_get-kmod-policy-error.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.41
changelog:
  - Type: update
  - ID: [TASK#422677]
  - SUG: NA
  - DESC: 安全热点解决
  -       kysec-utils-fix-sonarqube-scan.patch
  -       kysec-utils-add-license.patch


author: pengxi <pengxi@kylinos.cn> - 3.4.1-01.se.42
changelog:
  - Type: update
  - ID: [TASK#435248]
  - SUG: NA
  - DESC: 单元测试更新
  -       kysec-utils-update-unit-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.4.1-01.se.43
changelog:
  - Type: update
  - ID: [TASK#449388]
  - SUG: NA
  - DESC: license声明修复,修改开源代码引入问题
  -       kysec-utils-fix-lincense-non-compliance.patch


author: kangshiming <kangshiming@kylinos.cn> - 3.4.1-01.se.44
changelog:
  - Type: update
  - ID: [BUG#342016]
  - SUG: NA
  - DESC: 不显示文件保护的none标记,增加文件保护列表为空情况下的none标记显示
  -       kysec-utils-fix-kysec_get-fpro-policy-none-bug.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-01
changelog:
  - Type: update
  - ID: [TASK#441731]
  - SUG: NA
  - DESC: kysec2.0命令行开发, 添加kysec-policy命令, 适配kysec_set和kysec_get命令
  -	  kysec-utils-add-kysec-policy-command.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-02
changelog:
  - Type: update
  - ID: [TASK#441731][BUG#244773]
  - SUG: NA
  - DESC: 修复kysec_policy命令行BUG#34774, 347769, 347435, 347432,
  -	347426, 347422, 347420, 347400, 347394, 347392, 247388,
  -	347326, 347298, 347261, 346933, 346930, 346588, 345256
  -		kysec-utils-fix-kysec-policy-command-bug1.patch
  -       修复设置模块状态时增加sm场景的判断   
  -		kysec-utils-20250506-fix-some-bug.patch
  -       修复因bwlist内容格式问题造成的重复提示错误信息的问题
  -		kysec-utils-fix-duplicate-error-by-bwlist-format-errors.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-03
changelog:
  - Type: update
  - ID: [TASK#441731][BUG#346442]
  - SUG: NA
  - DESC: 设置kysec为disable时 实际底层也是关闭的, 获取接口去掉之前的容错代码
  -	修复开关子模块时 kysec log日志始终为ERROR类型日志[BUG#346442]
  -	  kysec-utils-del-set-status-fault-tolerant-code-and-fix-switch-module-error-type-log.patch
  -	kysec_policy和setstatus添加立即重启逻辑, 修复命令行
  -	bug#347786, 347432, 347388, 347158, 346725, 346722, 345982
  -	  kysec-utils-fix-kysec-policy-command-bug2.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 4.0.0-04
changelog:
  - Type: update
  - ID: [BUG#346442]
  - SUG: NA
  - DESC: 修复设置子模块开关时日志输出等级
  -       kysec-utils-fix-switch-sub-module-log.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#347304][BUG#346994][BUG#352195][BUG#347171][BUG#346911]
  - SUG: NA
  - DESC: 应用联网控制-命令行状态实时更新到UI测试（关-开-关）-切换过安全功能的none，命令开启联网控制失败[BUG#347304]
  -	普通用户修改保护箱状态失败kysec_policy命令未提示失败原因[BUG#352195]
  -	kysec_policy错误参数未输出帮助信息[BUG#347171]
  -	应用联网控制，首次安装系统后执行kysec_policy net on，提示先开启kysec[BUG#346994]
  -	未开启kysec，输入错误参数未输出帮助信息[BUG#346911]
  -	  kysec-utils-fix-kysec-policy-command-bug3.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#346897]
  - SUG: NA
  - DESC: 修复BUG#346897 文件保护箱打不开
  -	kysec_policy和kysec_set命令交互提示之前,先检查接口调用权限
  -	旧命令加入废弃提示
  -	_get_func_status()接口查询子模块状态之前,先查询kysec状态, kysec为关,子模块都是关
  -	文件保护允许删除不存在的文件、目录和软件包的只读保护策略和例外策略
  -	忽略链接文件的实际文件不存在时的报错
  -	  kysec-utils-fix-kysec-policy-command-bug4.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-07
changelog:
  - Type: bugfix
  - ID: [BUG#360575]
  - SUG: NA
  - DESC: 修复BUG#360575 添加\删除\查看\清除白名单-对象不存在-kysec_set提示信息未换行
  -       同步桌面修改:
  -       1、修复bug#353590 kysec_policy命令行-A添加策略时,不允许设置-v选项, 增加错误提示
  -       2、修复enable和warning的拼写错误
  -       3、修改checkSecuritySwitchReboot_dbus()接口调用函数名错误的问题
  -       4、新增getBootMode_dbus()查询当前系统模式的接口
  -       5、网络保护查询所有策略不检查软件包和文件是否存在
  -       6、网络保护删除文件策略时, 不检查文件是否存在
  -       7、网络保护删除、添加和更新文件策略时，如果文件有所属软件包，需要处理软件包的策略
  -       8、执行控制添加告警弹窗状态设置
  -       9、执行控制和文件只读保护添加在不可变模式下过滤/usr路径下的文件
  -         -- kysec-utils-fix-kysec-policy-command-bug5.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-08
changelog:
  - Type: bugfix
  - ID: [BUG#361691]
  - SUG: NA
  - DESC: [BUG#361691]解决进程保护和文件只读保护例外程序无法删除的问题
  -       同步桌面补丁:
  -       [其它]文件保护和执行控制添加例外程序时，在不可变模式下过滤/usr目录
  -       [其它]删除status_dbus.h中的config.h头文件引用, 解决其它包引用时编包错误
  -         -- kysec-utils-fix-kysec-policy-command-bug6.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-09
changelog:
  - Type: bugfix
  - ID: [BUG#347672][TASK#471077][BUG#346106][BUG#352444][BUG#346106][BUG#364039][BUG#364125][BUG#363959]
  - SUG: NA
  - DESC: [BUG#347672]根据要求去除错误码
  -       [BUG#347672]根据要求去除错误码
  -       [TASK#471077]修复申请的资源未释放问题
  -       [其它]安全热点问题
  -       [BUG#346106]修复使用kysec_set添加文件策略后, kysec_policy更新对应文件策略失败的问题
  -       [BUG#352444]优化kysec关闭时, 开启单独模块耗时长的问题
  -       [BUG#346106]网络控制修改逻辑, 文件有所属软件包, 添加修改软件包策略
  -       [BUG#364039]文件保护的帮助信息不对
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#363959]目录添加保护，删除文件保护例外失败
  -       [其它]修改setstatus命令, 切换box时ksaf开启不提示重启
  -       同步桌面补丁:
  -       [其它]修改设备管控光驱的状态显示
  -       [其它]优化执行控制查询白名单速度
  -          -- kysec-utils-fix-kysec-policy-command-bug7.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-10
changelog:
  - Type: bugfix
  - ID: 
  - SUG: NA
  - DESC: [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368141]根据路径删除网络管控策略-kysec_set未生效
  -       [BUG#368127]kysec_get netctl -l 无数据
  -       [BUG#367319]帮助信息-kysec_get输出多余信息
  -       [BUG#367069]更新被篡改的文件，有多余的提示信息
  -       [BUG#366955]off->开启kysec，禁止程序执行的子模块显示名称不对
  -       [BUG#366937]开启获取selinux状态，命令提示处于废弃阶段，删除getstatus和setstatus中废弃提示
  -       [BUG#366379]execban禁止程序执行-strict权限测试，root和auditadm用户不可执行
  -       [BUG#366367]strict模式下关闭selinux，出现交互信息
  -       [BUG#365915]清除标签-递归目录-执行命令未达预期，删除提示信息
  -       [BUG#365873]清除标签-目录，执行命令提示不符预期，删除提示信息
  -       [BUG#364687]kysec_policy包名添加的程序，路径方式删除成功提示失败
  -       [BUG#364667]kysec_set添加的策略，kysec_policy更新失败
  -       [BUG#364125]文件保护添加目录和软件包none标记提示核心已转储
  -       [BUG#364017]删除文件保护后，例外程序未被删除
  -       [其它]修改设备管控错误, 修改cdrom设置权限的方式
  -       [其它]修改scripts/init-bottom/3adm_enable文件,解决三员模式下kysec-daemon修改netctl.xml错误的问题
  -          -- kysec-utils-fix-kysec-policy-command-bug8.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-11
changelog:
  - Type: bugfix
  - ID: [BUG#370259]
  - SUG: NA
  - DESC: [BUG#370259]删除服务器的命令行的禁止执行功能
  -	[BUG#369979]解决黑白名单安装控制-黑白名单同时生效时，rpm安装软件包提示核心已转储的问题
  -       [其它]修复编译优化参数是-O0时，编译错误的问题
  -       [其它]涉密场景下kysec_policy禁止设置kysec状态, setstaus禁止设置kysec、selinux和apparmor状态,
                kysec_set和kysec_get禁止和查询设置fpro、ppro和kmod策略
  -         -- kysec-utils-fix-kysec-policy-command-bug9.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-12
changelog:
  - Type: bugfix
  - ID: [BUG#375705]
  - SUG: NA
  - DESC: [BUG#375705]kysec_policy userid --help root用户不展示帮助手册
  -       同步桌面修改：
  -       [BUG#377631]删除开明包标记后，kaiming命令不可用，软件包忽略软链接文件
  -       [BUG#358329]开明包删除标记后，进行标记查询，出现警告弹窗，软件包忽略软链接文件
  -       [其它]隐私保护除设置开关外，其它操作不检查用户权限检查
  -	  -- kysec-utils-fix-kysec-policy-command-bug10.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-13
changelog:
  - Type: bugfix
  - ID: [BUG#378971][BUG#380475][BUG#380117]
  - SUG: NA
  - DESC:[BUG#378971]下发docker中的脚本，无法移除策略, 修改通过pid获取路径接口
  -      [BUG#380475]kysec_policy -V不显示版本信息, 隐藏-V选项
  -      [BUG#380117]更新不存在的管控策略成功, 修改文件和软件包策略都不存在,不添加软件包策略
  -      [BUG#380347]/usr/etc/文件不应存在,修改spec文件,创建命令注释了
  -      spec文件增加libksaf-label-manager-devel依赖
  -	  -- kysec-utils-fix-kysec-policy-command-bug11.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-14
changelog:
  - Type: TASK
  - ID: [TASK#502485]
  - SUG: NA
  - DESC: 同步桌面修改：
  -	[BUG#355391]不可变模式下，忽略软件包中含有不可变目录下的文件设置执行控制标签
  -	  -- kysec-utils-fix-kysec-policy-command-bug12.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-15
changelog:
  - Type: TASK
  - ID: [TASK#548021]
  - SUG: NA
  - DESC: 同步Bug#434735修复补丁
  -	[BUG#434735]进程防杀死接口测试-执行./ppro add /usr/bin/top失败
  -	  kysec-utils-fix-return-value.patch


author: maxu <maxu@kylinos.cn> - 4.0.0-16
changelog:
  - Type: update
  - ID: [BUG#450991]
  - SUG: NA
  - DESC: 【安全套件】文件防护功能函数优化，对目录添加保护后子目录仍然能够被删除移动
  -	  kysec-utils-add-dir-protect.patch


author: wanghao <wanghao2@kylinos.cn> - 4.0.0-17
changelog:
  - Type: update
  - ID: [TASK#578567]
  - SUG: NA
  - DESC: 删除命令行中应用执行管控的例外管理
  -	  kysec-utils-del-exec-except.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-02
changelog:
  - Type: bugfix
  - ID: [BUG#494997]
  - SUG: NA
  - DESC: 隐藏apparmor相关功能, 修复apparmor当前状态与切换状态一致时提示重启的bug[BUG#494997]
  -       修复kysec_policy查询exec目录中的文件是否可执行显示错误的问题
  -         kysec-utils-fix-some-bug-1.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-03
changelog:
  - Type: bugfix
  - ID: [BUG#500643][BUG#500289][BUG#500619][BUG#499945]
  - SUG: NA
  - DESC: 【内核模块保护】添加未加载的模块到保护列表-kysec_set 失败[BUG#500643]
  -       【联网管控】kysec_set 设置联网策略后，查新显示异常[BUG#500289]
  -       【内核模块保护】删除保护策略-模块路径-kysec_set后依然能查询到结果[BUG#500619]
  -       【执行控制】添加\删除\查看\更新白名单-包-kysec_set,参数错误 建议优化提示[BUG#499945]
  -           kysec-utils-fix-kmod-add-uninsmod-ko-error.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-04
changelog:
  - Type: update
  - ID: [TASK#596817][TASK#595475]
  - SUG: NA
  - DESC: 修改编译参数，修改引用声明[TASK#596817]
  -       增加模糊测试，增加单元测试[TASK#595475]
  -         kysec-utils-add-fuzz-test.patch


author: zhaolintong <zhaolintong@kylinos.cn> - 5.0.0-05
changelog:
  - Type: update
  - ID: [TASK#595475]
  - SUG: NA
  - DESC: 增加模糊测试，增加单元测试[TASK#595475]
  -       kysec-utils-fix-fuzz-test.patch


author: wanghao <wanghao2@kylinos.cn> - 5.0.0-06
changelog:
  - Type: bugfix
  - ID: [BUG#500069][BUG#500559][BUG#500579][BUG#500543]
  - SUG: NA
  - DESC: 【执行控制】对象不存在-kysec_set（包）提示信息错误[BUG#500069]
  -       【进程防护】添加\删除的进程\进程号不存在-kysec_policy提示信息错误[BUG#500559]
  -       【进程防护】重复删除进程\进程号保护策略-kysec_set缺少提示信息[BUG#500579]
  -       【进程防护】添加\删除的进程号不存在-kysec_set无提示信息[BUG#500543]
  -         kysec-utils-fix-kysec_set-prompt-info-error.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [BUG#488491][BUG#497461][BUG#497547]
  - SUG: NA
  - DESC: 1.修复插件状态设置不生效和文件保护例外程序不生效的问题。
  -       2.kysec2-control-module-sync-policy-interface-changed.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [BUG#498345]
  - SUG: NA
  - DESC: 1.解决首次切换default模式时，自保护策略不生效问题.
  -       2.移除audit.log相关自保护策略，移动到ksafdefault.policy中实现
  -       3.post脚本中添加重新加载插件库命令
  -       kysec2-control-module-fix-kysec-self-protect-not-enable.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#497793][BUG#497957]
  - SUG: NA
  - DESC: 1.删除文件保护信任策略（除安全和系统安装包相关的）.
  -       kysec2-control-module-fix-filectl-trust-policy.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [BUG#500529]
  - SUG: NA
  - DESC: 1.修改进程管控的插件层枚举参数kysec_scene_resource_type，解决因为数值问题造成例外包程序无法添加;


author: zhubing <zhubing@kylinos.cn> - 1.0.0-04.se.03
changelog:
  - Type: update
  - ID: [任务#391053]【ksaf】基于22内核编译后的ksaf-main模块重新编译devctl模块
  - SUG: NA
  - DESC: 基于22内核编译后的ksaf-main模块重新编译devctl模块


author: zhubing <zhubing@kylinos.cn> - 1.0.0-04.se.04
changelog:
  - Type: update
  - ID: [任务#393585]【ksaf】配合23.1内核升级内核模块包-外设管控
  - SUG: NA
  - DESC: 基于22内核重新编译kysec_devctl模块


author: zhubing <zhubing@kylinos.cn> - 1.0.0-04.se.05
changelog:
  - Type: update
  - ID: [任务#398189]【ksaf】配合23.2内核升级内核模块包-外设管控
  - SUG: NA
  - DESC: 基于23.2内核重新编译kysec_devctl模块


author: zhubing <zhubing@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#443616]【V11 2503】基于6.6.0-27.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-02


author: zhubing <zhubing@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#448225]【V11 2503】基于6.6.0-28.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-03


author: zhubing <zhubing@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [任务#452593]【V11 2503】基于6.6.0-29.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-04


author: zhubing <zhubing@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [任务#461244]【V11 2503】基于6.6.0-31.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-05


author: zhubing <zhubing@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#463153]【V11 2503】基于6.6.0-32.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-06


author: zhubing <zhubing@kylinos.cn> - 1.0.1-07
changelog:
  - Type: update
  - ID: [任务#465109]【V11 2503】基于6.6.0-32.1内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-07


author: zhubing <zhubing@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [任务#469313]【V11 2503】基于6.6.0-32.2内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-08


author: zhubing <zhubing@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [任务#472101]【V11 2503】基于6.6.0-32.3内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-09


author: zhubing <zhubing@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [任务#482713]【V11 2503】基于6.6.0-32.5内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-10


author: zhubing <zhubing@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [任务#487747]【v11 2503】ksaf模块加载与内核版本号解绑-kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.1-11


author: zhubing <zhubing@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#382147]【自动测试】【v11-2503】0710daily的x86/arm版本安装选择虚拟化主机安装模块kysec2-devctl-module出现异常导致安装失败
  - SUG: NA
  - DESC: 升级包版本至1.0.1-12


author: zhubing <zhubing@kylinos.cn> - 1.0.2-01
changelog:
  - Type: update
  - ID: [任务#561841]迭代1-基于6.6.0-35.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.2-01


author: zhubing zhubing@kylinos.cn - 1.0.2-02
changelog:
  - Type: update
  - ID: [任务#571841]迭代1-基于6.6.0-36.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.2-02


author: zhubing zhubing@kylinos.cn - 1.0.2-03
changelog:
  - Type: update
  - ID: [任务#575293]迭代3-基于6.6.0-37.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.2-03


author: zhubing zhubing@kylinos.cn - 1.0.2-04
changelog:
  - Type: update
  - ID: [任务#585991]迭代5-基于6.6.0-38.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.2-04，同步桌面修复补丁


author: zhubing zhubing@kylinos.cn - 1.0.2-05
changelog:
  - Type: update
  - ID: [任务#589197]迭代5-基于6.6.0-40.0内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.2-05，本内核模块加载不允许卸载


author: zhubing zhubing@kylinos.cn - 1.0.2-06
changelog:
  - Type: update
  - ID: [任务#592495]kysec-devctl-module的门禁合规检查整改
  - SUG: NA
  - DESC: 升级包版本至1.0.2-06，门禁合规检查整改


author: zhubing zhubing@kylinos.cn - 1.0.2-07
changelog:
  - Type: update
  - ID: [任务#595315]update-基于6.6.0-40.2内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 升级包版本至1.0.2-07


author: zhubing <zhubing@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: [任务#599223]基于6.6.0-40.4内核重编kysec2-devctl-module
  - SUG: NA
  - DESC: 版本号变更为2.0.0-02


author: maxu <maxu@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [BUG#498333] 【V11-2603】【B09】【外设管控】sm-example安装失败，无法进行套件授权测试
  - SUG: NA
  - DESC: 修复策略下发失败问题
  -    kysec2-devctl-module-fix-policy-send-error.patch


author: zhubing <zhubing@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [任务#596773]安全合规整改kysec2-devctl-module，sonarqube对接ci
  - SUG: NA
  - DESC: 升级版本至2.0.0-04
  -    add-unit-test-code-for-kmodule-to-ci.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-05
changelog:
  - Type: update
  - ID: [任务#596773] 安全合规整改-kysec2-devctl-module
  - SUG: NA
  - DESC: 安全合规整改
  -    kysec2-devctl-module-add-rust-unit-test.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-06
changelog:
  - Type: update
  - ID: [任务#596773] 安全合规整改-kysec2-devctl-module
  - SUG: NA
  - DESC: 安全合规整改
  -    kysec2-devctl-module-optimize-rust-unit-test-sh.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-07
changelog:
  - Type: update
  - ID: [任务#605835] 插件包接口添加对kysec-daemon进程的检测
  - SUG: NA
  - DESC: 插件包接口添加对kysec-daemon进程的检测
  -    kysec2-devctl-module-add-permission-verifity.patch


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.02
changelog:
  - Type: update
  - ID: [BUG#290555]【V11 B14】【模式切换】none切换default存在不友好提示
  - SUG: NA
  - DESC: 优化TPM不存在时的错误输出


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.04
changelog:
  - Type: update
  - ID: [BUG#292143]【V11-B14】【联网管控】docker中client无权限执行
  - SUG: NA
  - DESC: 添加判断进程是否是多命名空间空间进程的策略函数


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.06
changelog:
  - Type: update
  - ID: [任务#393581]【ksaf】配合23.1内核升级内核模块包-执行控制
  - SUG: NA
  - DESC: 重编23.1内核的kysec_exectl模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.0-02.se.11
changelog:
  - Type: update
  - ID: [BUG#306077]【V11-B17】【访问控制】【白名单访问控制】执行控制-重命名文件的标记同步失败
  - SUG: NA
  - DESC: 重命名文件后设置为unknown标记


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-01
changelog:
  - Type: update
  - ID: [任务#434037]【V11 2503】基于6.6.0-25.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-25.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [任务#443615]【V11 2503】基于6.6.0-27.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-27.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [BUG#337349]【软件适配】edge浏览器在kare-v10sp1安装失败
  - SUG: NA
  - DESC: 修复在docker中安装浏览器软件失败的bug


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [任务#448224]【V11 2503】基于6.6.0-28.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-28.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [任务#452592]【V11 2503】基于6.6.0-29.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-29.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [任务#461243]【V11 2503】基于6.6.0-31.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-31.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [任务#463150]【V11 2503】基于6.6.0-32.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.0内核重编模块


author: huanfuxi <huanfuxi@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#347597]添加内核模块度量策略后，加载模块没有度量日志
  - SUG: NA
  - DESC: 修复没有tpm芯片时系统启动初期没有静态度量日志的bug


author: wangchi <wangchi@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [任务#465108]【V11 2503】基于6.6.0-32.1内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.1内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [任务#469315]【V11 2503】基于6.6.0-32.2内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.2内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [任务#472093]【V11 2503】基于6.6.0-32.3内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.3内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [任务#482719]【V11 2503】基于6.6.0-32.5内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-32.5内核重编模块


author: wangchi <wangchi@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID:
  -   [任务#487751]【v11 2503】ksaf模块加载与内核版本号解绑-kysec2-exectl-module
  -   [任务#485691]【v11 2503】开启安全的性能优化
  -   [需求##360361] 【安全套件】运维模式安装smexampleh后，退出运维模式，进入系统失败
  - SUG: NA
  - DESC: 优化静态度量性能，添加执行控制文件类型以及inode为空时的检查


author: wangchi <wangchi@kylinos.cn> - 1.0.2-01
changelog:
  - Type: update
  - ID: [任务#561839] 迭代1-基于6.6.0-35.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 基于6.6.0-35.0内核重编内核模块


author: wangchi <wangchi@kylinos.cn> - 1.0.2-04
changelog:
  - Type: update
  - ID: 
      [任务#564623] kysec2-exectl-module同步修复补丁
      [任务#585995] 基于6.6.0-38.0内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 静态度量流程优化（解决文件执行的时候概率性度量失败）,增加外设文件执行管控


author: wangchi <wangchi@kylinos.cn> - 2.0.0-02
changelog:
  - Type: update
  - ID: 
      [任务#589491] 安全容器策略初始化开发
      [任务#599225]  基于6.6.0-40.4内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: 初始化白名单数据时排除/var/lib/docker目录


author: maxu <maxu@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [BUG#498333]sm-example安装失败，无法进行套件授权测试
  - SUG: NA
  - DESC: 修复策略下发失败问题
  -    kysec2-exectl-module-fix-policy-send-error.patch


author: wangchi <wangchi@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: 
      [任务#596769] 安全合规整改-kysec2-exectl-module
      [任务#600381] 基于6.6.0-40.5内核重编kysec2-exectl-module
  - SUG: NA
  - DESC: CI对接，内核重编


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-05
changelog:
  - Type: update
  - ID: [任务#597745]
  - SUG: NA
  - DESC: scene-plugin 单元覆盖率 ci对接
  -  add patch2: kysec2-exectl-module-add-scene-plugin-unit-code.patch
  -  add patch3: kysec2-exectl-module-add-license.patch


author: wangchi <wangchi@kylinos.cn> - 2.0.0-06
changelog:
  - Type: update
  - ID: [BUG#498255]重命名后的.ko.xz文件无法管控
  - SUG: NA
  - DESC: 修改.ko文件判断方式，增加exectl_check_on_hard_driver附加函数


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.0-07
changelog:
  - Type: update
  - ID: [任务#605835]
  - SUG: NA
  - DESC: 增加接口权限校验,增加单元覆盖率
  -	add path: kysec2-exectl-module-add-scene-plugin-interface-auth.patch


author: yangzhao <yangzhao@kylinos.cn> 1.0.0-01.se.05
changelog:
  - Type: update
  - ID: [bug#290279,294953,295003,296941]
  - SUG: NA
  - DESC: 策略同步失败，需要更改kbox模块的安装路径到/lib/modules/*/ksaf目录下


author: yangzhao <yangzhao@kylinos.cn> 2.0.1-03
changelog:
  - Type: update
  - ID: [task#596767] 安全合规整改-kysec2-kbox
  - SUG: NA
  - DESC: 完成kysec2-kbox在sonarqube的ci对接


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.0-2
changelog:
  - Type: update
  - ID: [TASK#386231]
  - SUG: NA
  - DESC: 安装后添加执行管控标记，卸载后删除执行管控标记，调试信息等级都改为DEBUG，对ksaf和执行管控接口调用方式改为dlopen，动态库检查失败不作处理，去除对其他安全组件包的安装依赖


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.0-7
changelog:
  - Type: bugfix
  - ID: [BUG#313455 TASK#420691 TASK#422689 TASK#423777]
  - SUG: NA
  - DESC: 将文件列表数组静态定义方式改为动态分配，解决有文件未打上标记问题
          【安全编译】安全编译整改 zhoukangyu
          【开源合规】开源合规整改 zhoukangyu
          【单元测试】增加单元测试覆盖率 zhoukangyu


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-0
changelog:
  - Type: update
  - ID: [TASK#471081 BUG#354750 BUG#338995]
  - SUG: NA
  - DESC: 解决fortify问题
          kysec2-scene-1.0.0-01.se.14.ky11.src.rpm卸载后，yum install指令提示核心已转储
          增加单元测试
          【V11 2409】【SW-B04】软件包安装报“Segmentation fault（核心已转储）”，安装失败


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.0-01.se.01
changelog:
  - Type: update
  - ID: [任务#420435]【ksaf】安全编译选项整改-kysec2-rbac-utils和审计
  - SUG:NA
  - DESC: 优化spec文件
          不能删除最后一条用户配置
          移除rpath


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [Bug#352562] 【20250513update内网源测试】【v11-2409】kysec2-rbac-utils卸载失败，提示错误信息
  - SUG: NA
  - DESC:	未开启ksaf不用同步内核策略


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [任务#471093] 【安全红线】整改自研组件第一轮Fortify问题-kysec2-rbac-utils
  - SUG: NA
  - DESC: fortify整改
          同步fuzz代码


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-01.se.01
changelog:
  - Type: update
  - ID: [TASK#379837]
  - SUG: NA
  - DESC: 完善一些功能 解决安装后脚本退出状态问题
  -     add path: kysec2-scene-improve-some-features.path


author: litianhao <litianhao@kylinos.cn> - 1.0.0-01.se.02
changelog:
  - Type: update
  - ID: [TASK#379837]
  - SUG: NA
  - DESC: 修复转换策略时未处理box导致转换失败的问题
  -     kysec2-scene-fix-check-boxctl-state.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.0-01.se.03
changelog:
  - Type: update
  - ID: [TASK#386229]
  - SUG: NA
  - DESC: 修复下发策略和devctl
  -     kysec2-scene-fix-policy-and-devctl.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.0-01.se.04
changelog:
  - Type: update
  - ID: [TASK#390085]【ksaf】将编开源代码从源码中分离
  - SUG: NA
  - DESC: 分离依赖
  -     kysec2-scene-fix-kid-and-sync.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.0-01.se.05
changelog:
  - Type: update
  - ID: [BUG#295633] 普通用户可修改策略
  - SUG: NA
  - DESC: 接口增加校验
  -     kysec2-scene-add-authorization.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.0-01.se.06
changelog:
  - Type: update
  - ID: [BUG#294587] 设置StorageDrive后无策略
  - SUG: NA
  - DESC: 展开设备管控类型
  -     kysec2-scene-fix-devctl-expandable-types.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.0-01.se.07
changelog:
  - Type: update
  - ID: [BUG#290991] 【外设管控】usb设备pid+vid管控不生效
  - SUG: NA
  - DESC: 调整设备管控策略优先级
  -     kysec2-scene-reorder-devctl-priority.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-01.se.08
changelog:
  - Type: update
  - ID: [BUG#313343]ksaf未初始化时 切换模式 重启后策略未同步问题
  - SUG: NA
  - DESC: 策略未同步问题
  -     kysec2-scene-add-compile_init_policy-dbus-if.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.0-01.se.09
changelog:
  - Type: update
  - ID: [TASK#420007]添加uid_list kysec-scene 保护
  - SUG: NA
  - DESC: 添加安全编译选项 解决sonarqube安全热点,增加license声明
  -     kysec2-scene-add-security-param-and-fix-sonarqube-scan.patch
  -     kysec2-scene-add-license.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-02
changelog:
  - Type: update
  - ID: [TASK#443852] ksaf 1.5 三层
  - SUG: NA
  - DESC: ksaf 1.5 三层
  -     kysec2-scene-incremental-compile-and-dynamic-variable.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-03
changelog:
  - Type: update
  - ID: [TASK#443853] ksaf 1.5新功能
  - SUG: NA
  - DESC: ksaf 1.5 三层
  -     kysec2-scene-add-ksaf1.5-some-features.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-04
changelog:
  - Type: update
  - ID: [TASK#443853] 新增产品化功能 修复产品化功能BUG
  - SUG: NA
  - DESC: 产品化功能开发,产品化功能修复
  -     kysec2-scene-20250506-fix-some-bugs.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-05
changelog:
  - Type: update
  - ID: [TASK#443853] 新增产品化功能 修复产品化功能BUG
  - SUG: NA
  - DESC: 优化sm授权，修复getstatus功能
  -     kysec2-scene-fix-sm-get-status-and-authorize.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-06
changelog:
  - Type: update
  - ID: [TASK#463785][TASK#441507]
  - SUG: NA
  - DESC: 策略添加module_name字段, 增加kyseclog审计日志
  -     kysec2-scene-add-feature-module_name-and-kyseclog.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-07
changelog:
  - Type: update
  - ID: [TASK#469081]
  - SUG: NA
  - DESC: 修复设置模块状态时 每次都会编译boxctl相关策略问题
  -     kysec2-scene-fix-boxctl-compile-when-set-module-status.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-08
changelog:
  - Type: update
  - ID: [BUG#338131]、[BUG#347699]
  - SUG: NA
  - DESC: 解决SM场景自保护失效问题。
  -     kysec2-scene-fix-self-protect-fail.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-09
changelog:
  - Type: update
  - ID: [BUG#364017]
  - SUG: NA
  - DESC: kysec2-scenen升级策略合并, 新增清除例外策略接口,解决自保护相关问题
  -     kysec2-scene-20250613-add-some-features.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-10
changelog:
  - Type: update
  - ID: [BUG#366133]
  - SUG: NA
  - DESC: chronyc命令在strict模式下 只能root执行
  -     kysec2-scene-20250624-fix-some-bugs.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-11
changelog:
  - Type: update
  - ID: [BUG#370845][BUG#368687]
  - SUG: NA 
  - DESC: 修复安装pure-ftpd后ftp无法连接，获取kysec状态时线程阻塞的问题
  -     kysec2-scene-20250626-fix-some-bugs.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-12
changelog:
  - Type: update
  - ID: [BUG#372333]
  - SUG: NA 
  - DESC: 去除secadm的dac override权能
  -     kysec2-scene-remove-secadm-dac-override-cap.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-13
changelog:
  - Type: update
  - ID: [BUG#377637]
  - SUG: NA 
  - DESC: boxctl增加user protect接口
  -     kysec2-scene-20250708-fix-some-bugs.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-14
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -     kysec2-scene-add-sm-authorize-sync-exception-rules.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-15
changelog:
  - Type: update
  - ID: [BUG#379211]
  - SUG: NA 
  - DESC: 修复通过pid获取容器内进程的路径不正确
  -    kysec2-scene-fix-get-program-path-by-pid-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-16
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: 修复缺kmodctl.h文件中缺失的对scene_common.h的引用问题
  -    kysec2-scene-fix-missing-header-file.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-17
changelog:
  - Type: update
  - ID: [TASK#501697]
  - SUG: NA 
  - DESC: 修复：根据PID获取进程路径时，路径中大写字母强制转成小写字母，导致授权程序异常
  -    kysec2-scene-fix-get-path-case-error.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-18
changelog:
  - Type: update
  - ID: [BUG#383859]
  - SUG: NA 
  - DESC: 【通用用例安全适配】开启strcit后 secadm无权限执行 setsebool ftpd_full_access on
  -    kysec2-scene-fix-strict-not-exec-setsebool.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-19
changelog:
  - Type: update
  - ID: [BUG#416485]
  - SUG: NA 
  - DESC: 解决下发静态度量策略不生效问题
  -    kysec2-scene-fix-static_measurement-not-effective.patch


author: maxu <maxu@kylinos.cn> - 1.0.1-20
changelog:
  - Type: update
  - ID: [BUG#418689]
  - SUG: NA 
  - DESC: 升级软件包时，即时生效策略
  -    kysec2-scene-add-update-rpm-sync-policy.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-21
changelog:
  - Type: update
  - ID: [TASK#549749]
  - SUG: NA
  - DESC: 移除setfattr命令特权
  -    kysec2-scene-remove-setfattr-permit.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 2.0.1-02
changelog:
  - Type: update
  - ID: [task#596819]
  - SUG: NA
  - DESC: 添加单元测试 fuzz valgrind 代码
  -  add path: kysec2-scene-add-unit-fuzz-valgrind-code.patch


author: tiandongdong <tiandongdong@kylinos.cn> 1.0.0-02
changelog:
  - Type: bugfix
  - ID: [BUG#492893]
  - SUG: NA
  - DESC: 修复admctl和pblkctl中scene场景名称错误问题
  - 	add patch: kysec2-scene-policy-fix-pblk-admctl-scene-name-error.patch


author: maxu <maxu@kylinos.cn> 1.0.0-03
changelog:
  - Type: bugfix
  - ID: [BUG#498333]
  - SUG: NA
  - DESC: 修复pblkctl中SM场景中scene名称错误问题
  - 	add patch: kysec2-scene-policy-fix-pblk-sm-scene-name-error.patch


author: maxu <maxu@kylinos.cn> 1.0.0-04
changelog:
  - Type: bugfix
  - ID: [BUG#492893]
  - SUG: NA
  - DESC: 系统从off切换到default模式失败
  - 	add patch: kysec2-scene-policy-fix-off-switch-to-default-error.patch


author: maxu <maxu@kylinos.cn> 1.0.0-05
changelog:
  - Type: bugfix
  - ID: [BUG#498345]
  - SUG: NA
  - DESC: 添加audit.log防护策略
  - 	add patch: kysec2-scene-policy-add-audit-log-protect.patch


author: fuwei <fuwei@kylinos.cn> 1.0.0-02
changelog:
  - Type:update
  - ID:[Task#596259] [BUG#494093] [BUG#493959] [BUG#493943] [BUG#493929] [BUG#493921] [BUG#493569] [BUG#493491] [BUG#493487] [BUG#492853] [BUG#492113] [BUG#491859]
  - PATCH: version_1.0.0-01_02.patch
  - DESC:
  - 1. 优化获取版本号的策略
  - 2. cmake接入qt翻译，不再直接依赖qm文件，通过ts解析动态生成
  - 3. 安全合规整改相关改动，打通项目上传sonarqube的流程
  - 4. 修复部分翻译问题以及子窗体不居中的问题
  - 5. 优化安全编译参数


author: fuwei <fuwei@kylinos.cn> 1.0.0-03
changelog:
  - Type:update
  - ID:[BUG#493851] [BUG#493855]
  - PATCH: version_1.0.0-02_03.patch
  - DESC:
  - 1. cmakelist & rpm build优化
  - 2. 部分bug修复


author: fuwei <fuwei@kylinos.cn> 1.0.0-04
changelog:
  - Type:update
  - ID:[BUG#500675] [BUG#500673]
  - PATCH: version_1.0.0-03_04.patch
  - DESC:
  - 1. bug#500675【V11 2603】【需求66345】【本地安全策略编辑器】【威胁分析】只有root进程能够访问dbus接口未实现且无日志 cmakelist & rpm build优化
  - 2. bug#500673【V11 2603】【需求66345】【本地安全策略编辑器】【威胁分析】普通用户无权限使用策略编辑器，无日志


author: fuwei <fuwei@kylinos.cn> 1.0.0-05
changelog:
  - Type:update
  - ID:[BUG#500675]
  - PATCH: version_1.0.0-04_05.patch
  - DESC:
  - 1. bug#500675 dbus接口禁止访问时，需要有日志写入到/.log/kysp-editor-daemon.log


author: songliyang <songliyang@kylinos.cn> - 1.0.0-1
changelog:
  - Type: update
  - ID:   [TASK#588423]
  - SUG:  NA
  - DESC: Initial package of kytime, a pure Rust rewrite of GNU time


author: houzhiwei <houzhiwei@kylin.cn> - 1.0.0-1
changelog:
  - Supports all command-line options and output formats (Text, HTML, XML, JSON)
  - Comprehensive test suite with unit, integration and stress tests


author: shuihengcheng <shuihengcheng@kylinos.cn> - 1.2
changelog:
  - add service to get kybima log
  - measure /boot/grub*/grub.cfg in default
  - get switch info
  - add measure_stage, measure_component value
  - fix log upload err


author: shuihengcheng <shuihengcheng@kylinos.cn> - 2.0
changelog:
  - add tpm support
  - add function:add, del, upd measure files, update tpm NV space
  - add new interface to server


author: shuihengcheng <shuihengcheng@kylinos.cn> - 2.3
changelog:
  - modify json-c err
  - getdir tree ignore link file, dir '/' only display dir "boot" and "etc"
  - only measure /boot/* and /etc/*
  - add limits forbid setting arrest_mode when trusted_startup is off
  - modify directory tree


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.08
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:1.增加NV授权保护功能
  	add add-nv-index-authorization-protection.patch
  	add modified-the-Haiguang-platform-adaptive-error-problem.patch


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.11
changelog:
  - Type:Bug
  - ID:220388
  - SUG:NA
  - DESC:1.增加对pcr8、9的度量审计
         2.修改可信启动开启软模式失败问题
         3.取消备份还原
         4.增加对压缩文件解压缩的sm3计算


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.13
changelog:
  - Type:update
  - ID:[TASK#221086]
  - SUG:NA
  - DESC:1.删除pcr8、9度量审计的条件编译
         2.优化日志输出及存储
         3.可信启动TPM设备调用兼容使用tpmrm和tcmrm设备节点


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.18
changelog:
  - Type:update
  - ID:[TASK#360769] [TASK#366341] [TASK#360851] [TASK#361223]
  - SUG:NA
  - DESC:1.add fortify-kytrust-bima-r17.patch
               kytrust-bima-double-free-error.patch
               extend-unit-test.patch
               use-libboundscheck-and-fix-sonarqube-issues.patch
               kytrust-bima-security-add-safe-compilation-parameter.patch
               kytrust-bima-func-open-param-error.patch


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.21
changelog:
  - Type:Bug
  - ID:[Bug#289319]
  - SUG:NA
  - DESC:1.修复篡改.bimabase文件中arrest_mode字段后依旧可以更新基准值的问题
         2.增加执行相关操作后同步更新PCR的流程


author: zhangfan<zhangfan4@kylinos.cn> - 2.0.14.22
changelog:
  - Type:update
  - ID:[TASK#415481] [TASK#361223]
  - SUG:NA
  - DESC:1.安全热点问题修改（PCR部分）
         2.增加PCR相关测试用例
         3.安全编译参数增加strip


author: zhangfan<zhangffan4@kylinos.cn> - 2.0.14.24
changelog:
  - Type:update
  - ID:[TASK#435903]
  - SUG:NA
  - DESC:1.同步桌面v10 2503改动
         2.增加错误码
         3.新增卸载包时清理配置文件功能
         4.支持debug版本包编译
         5.修改copyright信息


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.27
changelog:
  - Type:BUG
  - ID:[Bug#353449]
  - SUG:NA
  - DESC:1.修改kybima.service服务失败问题
         2.增加生成度量报告后触发写trust.log的行为
         3.提升单元测试覆盖率


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.30
changelog:
  - Type:update
  - ID:[TASK#553767]
  - SUG:NA
  - DESC:1.安全编译栈保护参数改为-fstack-protector-strong,去掉-fstack-protector-all参数


author: bianxiuning<bianxiuning@kylinos.cn> - 2.0.14.32
changelog:
  - Type:update
  - ID:[TASK#590205]
  - SUG:NA
  - DESC:1.安全合规整改，修改fority high level issues
         2.修改合规性扫描不通过项


author: zhangxianjun <zhangxianjun@kylinos.cn> -0.0.64-1.p02
changelog:
  - Type: update
  - ID: [Task#204872]
  - SUG: NA
  - DESC: recover the traditional Chinese installation option


author: chenyanpanHW <chenyanpan@huawei.com> - .0-4
changelog:
  - DESC: delete -Sgit from 
  %setup -a 0      -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-fix-lapack-devel-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Jerry James <Jerry.James@usu.edu> - 3.08n-2
changelog:
  - Use xdg-open instead of explicitly invoking evince.
  - Package the extra-scripts directory as documentation.
  - Fix a few other packaging infelicities as pointed out in Extras review.


author: Jerry James <Jerry.James@usu.edu> - 3.08n-3
changelog:
  - Use xdg-open for the DVI and PostScript previewers also.
  - Describe previewer configuration in README.fedora.


author: Jerry James <loganjerry@gmail.com> - 4.12-1
changelog:
  - Update to 4.12 to get new option to not run bibtex.
  - Add a missing semicolon to the conf file (bz 551082).


author: Jerry James <loganjerry@gmail.com> - 4.17-1
changelog:
  - Update to 4.17 (fixes log file misparse with filename-space-message sequence)
  - Add latexmk-man.patch to fix insufficiently escaped man page constructs.


author: Jerry James <loganjerry@gmail.com> - 4.23-1
changelog:
  - Update to 4.23 (several bug fixes, new dependency-tracking functionality)
  - Drop BuildRoot and %clean


author: Jerry James <loganjerry@gmail.com> - 4.27a-1
changelog:
  - Update to 4.27a:
  - Fixes making ps/pdf files via a temporary file with no %D placeholder
  - Adds png to list of graphics extensions for pdflatex
  - Adds -norc option to prevent auto-reading of rc files
  - Adds -aux-directory and -output-directory options


author: Jerry James <loganjerry@gmail.com> - 4.28a-1
changelog:
  - Update to 4.28a:
  - Corrects handling of missing files needed by bibtex or biber
  - Corrects duplicate invocations of dvipdf and ps2pdf


author: Jerry James <loganjerry@gmail.com> - 4.30a-1
changelog:
  - Add latexmk.pdf to docs
  - Update to 4.30a:
  - Fix use of bibtex when $aux_dir and/or $out_dir are set
  - Documentation of $search_path separator variable
  - Work with feynmp package and mpost
  - Let dvips find files in the output directory
  - In search for cus-deps that can make a missing file, look in $out_dir
  - Parse biber 0.9.7 error messages


author: Jerry James <loganjerry@gmail.com> - 4.31-1
changelog:
  - Update to 4.31 (numerous new features documented at
    http://www.phys.psu.edu/~collins/software/latexmk-jcc/versions.html)


author: Jerry James <loganjerry@gmail.com> - 4.37-1
changelog:
  - Update URLs
  - Update to 4.37:
  - Fix failure when current dir's name contains special regexp characters
  - Make -rules work with -pvc
  - Add -lualatex option
  - Allow $clean_ext and $clean_full_ext to contain wildcards
  - Fix bug when using revtex4-1.cls


author: Jerry James <loganjerry@gmail.com> - 4.39-1
changelog:
  - Update to 4.39:
  - Automatic creation of subdirectories of auxdir
  - Add error diagnostics to if_source
  - Allow print_type = 'auto'
  - Fix use of directories with names containing perl glob characters
  - Ensure that subdirectories are created properly
  - In output of dependencies, include pathname of target file(s) in the rule.
  - In -pvc mode, writing of deps file is per make not per overall run.


author: Jerry James <loganjerry@gmail.com> - 4.40h-1
changelog:
  - Fix license handling
  - Relax LaTeX Requires slightly
  - Update to 4.40h:
  - When -jobname option is used, quote it on command line.
  - Change maintainer's preferred e-mail.
  - Attempt to improve handling of errors from (pdf)latex.
  - Fix up for the making of -eps-converted-to.pdf
  - Improve listing of warning lines from log file.
  - Fix failure when using both -cd and -output-directory
  - If user's home directory can't be determined, then don't read ~/.latexmkrc
  - Introduce configuration variable $silence_logfile_warnings
  - In setting $pscmd, allow for non-existent environment variable USER
  - Miscellaneous corrections.


author: Jerry James <loganjerry@gmail.com> - 4.42-1
changelog:
  - Update to 4.42:
  - -c also deletes $deps_file if it is used
  - Fix bugs associated with the -cd option
  - Add missfont.log and the generated synctex.gz to standard cleaned-up files


author: Jerry James <jamesjer@diannao.jamezone.org> - 4.43a-1
changelog:
  - Update to 4.43a:
  - Source files in directories with non-ASCII names are not correctly detected
    under MiKTeX
  - On cleanup, synctex.gz files are deleted only by -C, not by -c


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: fuanan <fuanan3@huawei.com> - 563-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: EibzChan <chenbingzhao@huawei.com> - 608-2
changelog:
  - Type:test enhancement
  - ID:NA
  - SUG:NA
  - DESC:backport patches from upstream to enable make check.
         backport-makecheck-0000-add-lesstest.patch
         backport-makecheck-0001-Work-on-lesstest-remove-rstat-add-LESS_DUMP_CHAR.patch
         backport-makecheck-0002-lesstest-correctly-handle-less-exit-during-run_inter.patch
         backport-makecheck-0003-Some-runtest-tweaks.patch
         backport-makecheck-0004-Rearrange-signal-handling-a-little.patch
         backport-makecheck-0005-Don-t-setup_term-in-test-mode.patch
         backport-makecheck-0006-Compile-fixes.patch
         backport-makecheck-0007-Pass-less-specific-env-variables-to-lesstest-get-rid.patch
         backport-makecheck-0008-Move-terminal-init-deinit-to-run_interactive-since.patch
         backport-makecheck-0009-Fix-bug-in-setting-env-vars-from-lt-file-in-test-mod.patch
         backport-makecheck-0010-Make-runtest-work.patch
         backport-makecheck-0011-lesstest-in-interactive-mode-call-setup_term-before-.patch
         backport-makecheck-0012-lesstest-log-LESS_TERMCAP_-vars-so-termcap-keys-etc.patch
         backport-makecheck-0013-lesstest-accommodate-stupid-termcap-design-where-the.patch
         backport-makecheck-0014-lesstest-maketest-should-not-overwrite-existing-lt-f.patch
         backport-makecheck-0015-lesstest-add-O-option-to-maketest-if-textfile-is-not.patch
         backport-makecheck-0016-lesstest-add-O-option-to-lesstest.patch
         backport-makecheck-0017-lesstest-handle-colored-text-with-less-R.patch
         backport-makecheck-0018-lesstest-add-e-option.patch
         backport-makecheck-0019-lesstest-split-display_screen-into-display_screen_de.patch
         backport-makecheck-0020-Add-E-option.patch
         backport-makecheck-0021-Consistent-style.patch
         backport-makecheck-0022-Obsolete-file.patch
         backport-makecheck-0023-Tuesday-style.patch
         backport-makecheck-0024-Tuesday-style.patch
         backport-makecheck-0025-lesstest-add-support-for-combining-and-composing-cha.patch
         backport-makecheck-0026-Minor-runtest-output-tweaks.patch
         backport-makecheck-0027-lesstest-lt_screen-should-clear-param-stack-after-pr.patch
         backport-makecheck-0028-Handle-fg-and-bg-colors.patch
         backport-makecheck-0029-Have-lt_screen-use-ANSI-sequences-for-bold-underline.patch
         backport-makecheck-0030-ESC-m-should-clear-attributes-as-well-as-colors.patch
         backport-makecheck-0031-lesskey-make-lt_screen-treat-ESC-0m-like-ESC-m.patch
         backport-makecheck-0032-Store-2-char-hex-values-in-log-file-rather-than-bina.patch
         backport-makecheck-0033-lesstest-Make-display_screen_debug-write-to-stderr-n.patch
         backport-makecheck-0034-lesstest-Clear-screen-at-end-of-maketest-in-case-ter.patch
         backport-makecheck-0035-lesstest-Verify-that-the-less-binary-is-built-with-D.patch
         backport-makecheck-0036-Add-check-target-to-Makefile-to-run-lesstest.patch
         backport-makecheck-0037-Don-t-set-LESS_TERMCAP_xx-environment-vars-from-term.patch
         backport-makecheck-0038-lesstest-Remove-unnecessary-exit_all_modes-field-fro.patch
         backport-makecheck-0039-lesstest-Add-some-initial-lt-files.patch
         backport-makecheck-0040-lesstest-Remove-empty-lt-file.patch
         backport-makecheck-0041-lesstest-Add-a-couple-more-lt-files.patch
         backport-makecheck-0042-Make-make-check-work-regardless-of-directory-where-l.patch


author: xihaochen <xihaochen@huawei.com> - 4.9.2-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update lftp to 4.9.2


author: chengyechun <chengyechun1@huawei.com> - 4.9.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix second find_cmd Segmentation fault
         Ensure that PollVec enum matches poll values


author: yaoxin <yaoxin30@huawei.com> - 1.0.13-1
changelog:
  - Upgrade libEMF to 1.0.13; fix CVE-2020-13999 CVE-2020-11863 CVE-2020-11865 CVE-2020-11866 CVE-2020-11864


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.3-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-Add-getentropy-emulation-through-syscall.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Xiaole He <hexiaole@kylinos.cn> - 2.0-3
changelog:
  - backport patch:0003 to add missing else
  - backport patch:0004 to optimize if construction
  - backport patch:0005 to fix typo


author: zhaolintong <zhaolintong@kylinos.cn> - 1.0.0-02
changelog:
  - Type: update
  - ID: [task#596263][bug#493913][bug#492857][bug#493643]
  - SUG: NA
  - DESC: 安全合规问题整改，单元测试ci适配
  -      【本地安全策略编辑器】【场景用例】启用“密码必须符合复杂度要求”后，minclass的值为3 
  -      【本地安全策略编辑器】密码策略-设置密码最短使用期限为m，设置密码最长使用期限大于m失败
  -      【本地安全策略编辑器】账户锁定策略-账户锁定时间-设置最大边界值实际账户锁定10分钟


author: yanzhihua <yanzhihua4@huawei.com> - 12.10.0-25
changelog:
  - Type:enhancement
  - Id:NA
  - SUG:NA
  - DESC:ldconfig_scriptlets does not exist so modify the use of ldconfig, and rename the patch


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-fsck-Processes-may-kill-other-processes.patch
         backport-fdisk-fix-output-option-parsing.patch
         backport-libblkid-exfat-fix-divide-by-zero-coverity-scan.patch
         backport-llib-pty-session-split-PTY-and-signalfd-setup.patch
         backport-script-fix-use-of-utempter.patch
         backport-logger-always-update-header-when-read-from-stdin.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-libblkid-fix-misaligned-address-in-probe_exfat.patch
         backport-ldattach-fix-intro-command-and-pause.patch
         backport-iso9660.h-use-more-correct-function-types.patch
         backport-iso9660.h-avoid-undefined-signed-integer-shift.patch
         backport-ipc_msg_get_limits-always-initialize-memory.patch
         backport-wdctl-mark-flags-field-as-unsigned-long.patch
         backport-login-never-send-signals-to-init.patch
         backport-mkswap-do-not-use-uninitialized-stack-value.patch
         backport-lib-pager-fix-signal-safety-issues.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:nvidia_raid: validate checksum
         [add] backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Sync community patches
         [add]backport-CVE-2022-0563.patch
         backport-Fix-integer-overflow-for-alpha-like-linux.patch
         backport-column-don-t-require-column-name-for-JSON.patch
         backport-dmesg-fix-since-and-until.patch
         backport-fflush-stdout-before-reading-from-stdin.patch
         backport-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-last-don-t-assume-zero-terminate-strings.patch
         backport-lib-allow-safe_getenv-to-work-for-non-root-users.patch
         backport-lib-path-make-path-use-more-robust-coverity-scan.patch
         backport-lib-strutils-improve-strtoul_or_err-for-negative-numbers.patch
         backport-libblkid-don-t-mark-cache-as-probed-if-sys-not-available.patch
         backport-libblkid-hfs-fix-make-sure-buffer-is-large-enough.patch
         backport-libblkid-make-blkid_free_probe-more-robust.patch
         backport-libmount-all-continue-although-proc-is-not-mounted.patch
         backport-loopdev-set-block_size-when-using-LOOP_CONFIGURE.patch
         backport-lslocks-fix-maj-min-scanf.patch
         backport-lslogins-fix-free-invalid-pointer.patch
         backport-script-fix-passing-args-to-execlp.patch
         backport-scriptlive-fix-argv-0-for-execlp.patch
         backport-sysfs-fallback-for-partitions-not-including-parent-name.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
         backport-write-correctly-handle-wide-characters.patch
         backport-wall-convert-homebrew-buffering-to-open_memstream.patch
         backport-wall-use-fputs_careful.patch
         backport-hexdump-parse-handle-truncated-format-pattern.patch
         backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
         backport-lscpu-fix-p-output-all-caches-delimiter.patch
         backport-add-return-in-supam_conv-function.patch
         backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
         backport-sulogin-ignore-none-existing-console-devices.patch
         backport-sulogin-fix-KDGKBMODE-ifdef.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
         backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2024-28085
  - SUG:NA
  - DESC:fix CVE-2024-28085 and solve test_mkfds::netlink failed


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix mkfds-rw-character-device and mkfds-ro-regular-file test failed


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-15
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-sys-utils-setpriv-fix-potential-memory-leak.patch
          backport-sys-utils-save_adjtime-fix-memory-leak.patch
          backport-wall-fix-possible-memory-leak.patch
          backport-suL-fix-use-after-free-on-error.patch


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 2.39.1-17
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
          backport-lscpu-add-riscv-cputype-support.patch


author: zhangyao <zhangyao108@huawei.com> - 2.39.1-19
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport community patches
         [add] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: zhangting <dev03303@linx-info.com> - 2.39.1-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix an issue that mkfs.bfs fix memory leak
  	mkfs.bfs-fix-memory-leaks-and-weak-code.patch


author: hugel <gengqihu2@h-partners.com> - 2.39.1-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patch
         [del] backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: markeryang <yanglongkang@h-partners.com> - 2.39.1-23
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
         [add] backport-lslogins-remove-possible-memory-leaks-coverity-scan.patch
               backport-mkfs.bfs-fix-memory-leaks-and-weak-code.patch
               backport-cfdisk-fix-memory-leak-and-possible-NULL-dereference.patch
               backport-swapoff-clean-up-tag-resolution.patch
               backport-libblkid-befs-fix-underflow.patch


author: Linux_zhang <zhangruifang@h-partners.com> - 2.39.1-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: revert libblkid ext add checksum support, the disk cannot be mounted because the checksum may fail.
          [add] backport-revert-libblkid-ext-add-checksum-support.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: yueyaoqiang <yueyaoqiang@kylinos.cn> - 2.39.1-35.p01
changelog:
  - Type: update
  - ID: [TASK#604531]
  - SUG:  NA
  - DESC: 1.fix check error
         2.author:  litenglong <litenglong@kylinos.cn>
           support enable-raw
         3.sync patch 0001-set-arm-compatible-delay-time-v2-d0.4.patch
         4.sync patch 9400-set-locale-for-supporting-utf-8.patch
         5.fix_loongarch_test_error.patch
         6.sync patch 9401-libblkid-xfs-external-log-check-for-ceph_bluestore.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.24-7
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-Add-BDPluginSpec-constructor-and-use-it-in-plugin_sp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-Fix-leaking-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-lvm-dbus-Fix-leaking-error-in-bd_lvm_init.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-nvme-Fix-potential-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-part-Fix-potential-double-free-when-getting-parttype.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-crypto-Fix-double-free-in-bd_crypto_luks_remove_key.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-part-Fix-copy-paste-bug-in-bd_part_spec_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-Don-t-allow-suid-and-dev-set-on-fs-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: yangzhao <yangzhao@kylinos.cn> 2.69-5.p02
changelog:
  - Type:update
  - ID:[task#535767]
  - SUG:NA
  - DESC: Backport upstream patch to address some static analysis observations


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p01
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-add-application-with-DISPLAY.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#349212]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-ukui-menu-empty.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.13.0-1.p05
changelog:
  - Type:update
  - ID:[Task#482359]
  - SUG:NA
  - DESC: add ukui-search-4.10.13.0-kylin-remove-sensitive.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#289223][BUG#369841]
  - SUG : NA
  - DESC: update ukui-search-4.10.13.0-kylin-fix-SIGABRT-coredump.patch
          add ukui-search-4.10.13.0-kylin-ukui-search-app-data-service-sql-exec-error.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.13.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#370275]
  - SUG : NA
  - DESC: add ukui-search-4.10.13.0-kylin-fix-GetDesktopFileByPid-error.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.13.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [TASK#601833]
  - SUG : NA
  - DESC: Patch10: ukui-search-4.10.13.0-kylin-correction-of-ambiguous-description.patch
          修复字典文件的错误字符


author: wanghao <wanghao2@kylinos.cn> - 1.0-2.skl2.ky10.p.se.05
changelog:
  - Type:update
  - ID:[Task#80734]
  - SUG:NA
  - DESC: 添加登录检查相同UID的功能
  -         add patch: libchkuid-1.0-login-check-same-uid.patch


author: zhangzhou<zhangzhou@kylinos.cn> - 1.0-3.se.07
changelog:
  - Type:update
  - ID:[Task#133684]
  - SUG:NA
  - DESC: 提供状态检查接口
          add patch:libchkuid-get-chkuid-state.patch


author: hanzhengyun<hanzhengyun@kylinos.cn> - 1.0-3.se.08
changelog:
  - Type:update
  - ID:[Task#185626]
  - SUG:NA
  - DESC: 解决添加用户段错误的问题
          add patch:libchkuid-fix-segmentation-fault.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.09
changelog:
  - Type:update
  - ID:[Task#223910]
  - SUG:NA
  - DESC: 【身份鉴别】支持UID唯一性检查
           规范代码头部格式
       add patch: libchkuid-format-code-headers.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.10
changelog:
  - Type:update
  - ID:[Task#391549 Task#391551 Task#391555]
  - SUG:NA
  - DESC: 【单元测试】Sonarqube单元测试覆盖率提升-libchkuid
          【安全编译】gcc编译添加安全编译参数-libchkuid
          【安全函数】libchkuid整改
       add patch: libchkuid-test-add-unittest-and-coverage.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0-3.se.11
changelog:
  - Type:update
  - ID:[Task#391551 Task#420701]
  - SUG:NA
  - DESC: 【安全编译】修改安全编译RPATH/STRIP
           【开源合规】合规整改


author: chenyanpanHW <chenyanpan@huawei.com> - 1.7.2-10
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Add-logic-to-handle-memory-allocation-failures.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Fixed-various-bugs-in-setting-lookups-by-name-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Added-unit-test-for-config_read.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/add-to-strbuf_append_string.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xiejing <xiejing@kylinos.cn> - 5.3.28-42.p01
changelog:
  - Type: update
  - ID: TASK#327388
  - SUG: NA
  - DESC: fix __db.00* files to get the maximum size in advance (migrate patch)


author: chenhaixing <chenhaixing@huawei.com> - 0.70.2-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: majianhan<majianhan@kylinos.cn> - 0.70.2-6.p02
changelog:
  - Type:update
  - ID:TASK#432578
  - SUG:NA
  - DESC: Add compatibility check configuration parameter support


author: majianhan<majianhan@kylinos.cn> - 0.70.2-6.p04
changelog:
  - Type:update
  - ID:TASK#604509
  - SUG:NA
  - DESC: Bump version for unified source across all four architectures


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: chenyanpanHW <chenyanpan@huawei.com> - 4.33-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libev-Add-sw64-architecture.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: panxiaohe <panxiaohe@huawei.com> - 2.1.12-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add debuginfo package and make ELF files stripped
         remove redundant ABI compatibility library


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: zengjianqi <zengjianqi@kylinos.cn> - 2.1.12-13.p01
changelog:
  - Type: update
  - ID: [TASK#424795]
  - SUG: NA
  - DESC: Fix the functions check in the configure.ac, add follow symbols.
          evutil_secure_rng_add_bytes
          event_strlcpy_
          arc4random_addrandom
          arc4random_buf


author: whoisxxx<zhangxuzhou4@huawei.com> - 3.3-8
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Disable multi os directory to avoid compile failure for RISC-V


author: openEuler Buildteam <buildteam@openeuler.org> - 3.3-10
changelog:
  - append patch file of upstream repository from <e70bf987daa7b7b5df2de7579d5c51a888e8bf7d> to <e70bf987daa7b7b5df2de7579d5c51a888e8bf7d>


author: songjuntao <songjuntao@kylinos.cn> - 1.10.2-3.p01
changelog:
  - Type:update
  - ID:TASK#599077
  - SUG:NA
  - DESC:fix use weak random while using rsa crt private operation


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: xiaoyuliang <xiaoyuliang@kylinos.cn> - 1:1.49.5-7.p01
changelog:
  - Type: update
  - ID:   [TASK#534467]
  - SUG:  NA
  - DESC: Add Kylin distro support and Kylin Server distro detect.


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.2.0-1
changelog:
  - Upgrade to 1.2.0
  - Update Version, URL, Source0. delete Patch0. update stage 'prep'
  - Add 'find_lang', update stage 'files'


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: wangcheng <wangcheng156@huawei.com> - 2.9.4-1
changelog:
  - upgrade to 2.9.4
    fix some important bugs
    feature: remove the oldest expired credential to free some space
    new configuration option local_auth_policy is added


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: lizhipeng <lizhipeng@kylinos.cn> - 2.31.0-1.p01
changelog:
  - Type: update
  - ID: [TASK#553963]
  - SUG: NA
  - DESC: 1.EC: load xgfts with VBROADCASTI128 (AVX2)
          2.EC: special dispatch case for Hygon 1/2/3
          3.CRC: use crc32_iscsi_by8_02 instead
          4.CRC: short data opt
          5.mem: low nasm version support


author: haowenchao <haowenchao@huawei.com> - 1.19.0-4
changelog:
  - Split rpm package to avoid main rpm package CUnit dependency
    Previous implement place executable files in main package which leading
    to dependency of CUnit. This change add a package utils and move
    these executable files to utils package to avoid main package's CUnit
    dependency, making main package weak depend on libiscsi-utils


author: chenyanpanHW <chenyanpan@huawei.com> - 1.19.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-iscsi-ls-Fix-iser-url-scheme-parsing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0002-test-tool-Compare-Write-skip-InvalidDataOutSize-unle.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0003-test-tool-Compare-Write-override-driver-queue_pdu-ca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0004-test-tool-iSCSICmdSnTooLow-override-driver-queue_pdu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0005-test-tool-iSCSICmdSnTooHigh-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0006-test-tool-iSCSIDataSnInvalid-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0007-test-tool-BlockEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0008-test-tool-BlockEraseReserved-override-driver-queue_p.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0009-test-tool-CryptoEraseReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0010-test-tool-CryptoEraseReserved-override-driver-queue_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0011-test-tool-OverwriteReserved-skip-unless-iSCSI.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0012-test-tool-OverwriteReserved-override-driver-queue_pd.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0013-test-tool-remove-unused-iscsi_queue_pdu-symbol-overl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0014-iser-remove-__packed-from-struct-iser_cm_hdr-declaration.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0015-test-tools-use-extern-init-in-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0016-iscsi-inq-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0017-Updata-iscsi-dd.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0018-iscsi-swp-handle-setting-of-debug_level-correctly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0019-fix-iscsi-ls-parameter-parse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0020-Check-return-value-of-scsi_malloc-in-order-to.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0021-Fix-segmentation-fault-problem.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0022-init-fix-memory-leak-in-iscsi_create_context.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0023-iscsi-command-Fix-leak-in-iscsi_send_data_out.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0024-fix-segmentation-fault.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Ruijun Ge <geruijun@huawei.com> - 1.19.0-8
changelog:
  - DESC: backport patches to solve command parameter parse problem
          and dereference null pointer problem


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.0-5
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libkcapi-1.1.1-lib_Fix_kcapi_handle_destroy_closing_FD_0.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Append-newline-to-stdout.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-Prevent-cppcheck-from-defining-CHECK_DIR.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-tests-fix-overly-optimistic-kernel-version-checks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libkcapi-1.4.0-Match-the-name-of-the-kernel-algorithm.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: wuxiaolei <wuxiaolei@kylinos.cn> - 1.4.0-7.p01
changelog:
  - Type: update
  - ID: [TASK#529389]
  - SUG:NA
  - DESC: sync patches and spec changes from previous release 
          Spec changes: Remove redundancy symbol link /usr/lib64/fipscheck/libkcapi.so.1.hmac,
                        since system might boot failed due to wrong symbol link,
                        or applications might start failed due to wrong symbol link. 
                        And comment kcapi-hasher to pass the compile.
          patch: libkcapi-1.4.0-Match-the-name-of-the-kernel-algorithm.patch


author: lengchunying <lengchunying@kylinos.cn> 1.0.0-05
changelog:
  - Type:update
  - ID: [Bug#306583]【V11-B17】【授权方案】【龙芯】sm-authorize添加授权失败
  - SUG:NA
  - DESC: 解决b17龙芯架构上策略下发失败的问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-03
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解决动态变量不生效问题
          固定函数名和函数ID对应关系解决增量下发函数名会变问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-04
changelog:
  - Type:update
  - ID: [任务#443851] 【v11-2503】ksaf1.5-底层开发
  - SUG:NA
  - DESC: 解析策略前先初始化函数名解决增量下发函数名会变问题
          解决首次加载安全缺少section信息的问题
          修改及补充ksaf1.5单元测试


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-07
changelog:
  - Type:update
  - ID: [Bug#354818] 【poc】安全中心多次切换策略后，策略不生效
  - SUG:NA
  - DESC: 支持多次编译一次下发
          解决动态变量不生效问题


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-08
changelog:
  - Type:update
  - ID: [任务#478961] 【V11 2503】修改ksaf-policy-interpreter和libksaf-policy-sync的单元测试和冗余代码
  - SUG:NA
  - DESC: 修改单元测试代码
          删除注释掉的冗余代码
          修改编译选项


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-09
changelog:
  - Type:update
  - ID: [任务#498111] 【v11 2503】修复执行#ldconfig 命令，提示/usr/lib64/libksafinterpreter.so.1不是symbolic link
  - SUG:NA
  - DESC: 未挂载日志目录时打印到屏幕


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-10
changelog:
  - Type:update
  - ID: [Bug#382843] 【出厂测试】【v11 2503】【需求41775】【内核模块防卸载】内核模块添加防卸载保护后卸载成功
  - SUG:NA
  - DESC: 文件写入强制落盘，防止断电丢失
          下发初始化策略，无策略二进制文件或无二进制策略目录均返回成功


author: tianyunnuan <tianyunnuan@kylinos.cn> 1.0.1-11
changelog:
  - Type:update
  - ID: [任务#553741] 安全编译参数整改 / libksaf-policy-sync安全编译参数整改
  - SUG:NA
  - DESC: 将安全编译栈保护参数改为-fstack-protector-strong


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: peijiankang <peijiankang@kylinos.cn> - 5.27.10-4.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add libkscreen-qt5-5.27.10-kylin-fix-kscreen_backend_launcher-coredump.patch


author: hanhuijie <hanhuijie@kylinos.cn> 1.0.0-se.02
changelog:
  - Type:update
  - ID:[Bug#176967]
  - SUG:NA
  - DESC:bug[176967]【动态度量】添加进程度量策略时，-v为非必要参数		    
  - bug[176938]【动态度量】添加不存在进程pid的标签值为kill后，查看结果为告警		    
  - bug[176926]【动态度量】建议去除部分命令执行成功后的输出内容		    
  - bug[176748]【动态度量】命令参数使用与提示信息不符


author: hanhuijie <hanhuijie@kylinos.cn> 1.0.0-se.03
changelog:
  - Type:update
  - ID:[BUG#178035][BUG#179303]
  - SUG:NA
  - DESC:178035 【动态度量】使用错误参数执行命令时，输出结果需调整
  - DESC:179303 【动态度量】设置度量周期不生效


author: hanhuijie <hanhuijie@kylinos.cn> 1.0.0-se.05
changelog:
  - Type:update
  - ID:[Bug#180677][Bug#180521][Bug#182639]
  - SUG:NA
  - DESC:[Bug#180677]【动态度量】kydima_set cycle命令提示信息有误
  - DESC:[Bug#180521]【动态度量】应用层显示存在歧义
  - DESC:[Bug#182639]【动态度量】应用层使用-p命令查看的结果与实际不符


author: hanhuijie <hanhuijie@kylinos.cn> 1.0.0-se.06
changelog:
  - Type:update
  - ID:[Bug#184805][Bug#184684][Bug#184640][Bug#184625][Bug#184610][Bug#184574][Bug#184569]
  - [Bug#184551][Bug#184517][Bug#184512][Bug#184512][Bug#184444]
  - SUG:NA
  - DESC:[Bug#184805]【动态度量】关闭再打开动态度量后，度量周期设置被重置	
  - DESC:[Bug#184684]【动态度量】建议统一不同查询方式下进程策略名称的标题	
  - DESC:[Bug#184640]【动态度量】周期度量后，程序偶发段错误	
  - DESC:[Bug#184625]【动态度量】kydima_get命令的用法说明中应去除[-s]参数	
  - DESC:[Bug#184610]【动态度量】参数使用不规范时，没有报错信息或提示信息不准确	   
  - DESC:[Bug#184574]【动态度量】添加进程度量策略时，不加-p或-f参数没有报错	
  - DESC:[Bug#184569]【动态度量】--status参数无法使用	
  - DESC:[Bug#184551]【动态度量】无法开启内核模块策略	
  - DESC:[Bug#184517]【动态度量】建议优化帮助信息中关于动态度量功能的描述和信息排版布局    
  - DESC:[Bug#184512]【动态度量】-p参数的描述应修改为进程号，而非进程名	
  - DESC:[Bug#184512]【动态度量】通过pid查询未设置进程策略的进程时，提示未篡改	    
  - DESC:[Bug#184444]【动态度量】可以成功设置不存在的进程策略类型


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-01
changelog:
  - Type:update
  - ID:[Task#165935]
  - SUG:NA
  - DESC:【sp4】动态度量功能--初始化工程，动态度量sp4一版提交
  -    [Task#165935]Halberd-CRS-fnc-1】动态度量 / 动态度量核外包入库


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-02
changelog:
  - Type:update
  - ID:[Task#176305] 多人并行 【动态度量】功能优化联调入库
  - SUG:NA
  - DESC:任务描述
  - DESC:1、针对信大捷安动态度量功能研发过程中发现的问题，对sp4动态度量内核和核外部分实现进行优化
  - DESC:2、内核核外进行联调测试，输出测试报告
  - DESC:3、10.17前提交入库集成b06
  -   ID:[Task#176305] 多人并行 【动态度量】功能优化联调入库
  -   [BUG#190824]【动态度量】使用c参数设置周期失败但没有提示信息	    
  -   [BUG#190167]【动态度量】运行并篡改进程后再为其添加进程策略，度量结果不正确		    
  -   [BUG#190150]【动态度量】关闭度量开关后运行并篡改进程，再次打开度量开关后度量结果不正确	    
  -   [BUG#189506]【动态度量】周期度量后，进程列表信息累加显示 	    
  -   [BUG#189299]【动态度量】添加不存在的进程路径时，建议给出合理提示 	    
  -   [BUG#189292]【动态度量】通过文件路径查询不存在的进程度量信息时，建议给出合理提示信息    
  -   [BUG#189286]【动态度量】通过pid查询不存在的进程度量信息，提示信息重复三遍    
  -   [BUG#189131]【动态度量】添加多个同路径度量对象后其中一个进程已篡改，度量列表不显示未篡改进程信息	    
  -   [BUG#184944]【动态度量】关闭再打开动态度量后，子模块的开关均被重置为off


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-03
changelog:
  - Type:update
  - ID:[BUG#198018]【动态度量】通过不存在的pid查询或添加进程度量策略时，没有提示信息
  - SUG:NA
  - DESC:
  - Patch08: fix-bug-for-kydima7.patch
  - Patch09: fix-kydima-repeat.patch  适配loogarch环境
  - [BUG#198018]【动态度量】通过不存在的pid查询或添加进程度量策略时，没有提示信息 
  - [BUG#189506]【动态度量】周期度量后，进程列表信息累加显示	
  - [BUG#189292]【动态度量】通过文件路径查询不存在的进程度量信息时，建议给出合理提示信息
  - [BUG#184426]【动态度量】无法显示当前进程策略列表	
  - [BUG#182714]【动态度量】三元开启时，应只有secadm用户可以使用动态度量相关命令


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-04
changelog:
  - Type:update
  - ID:[BUG#203467][BUG#203466]
  - SUG:NA
  - DESC:修改spec文件，删除dbus服务重启
  - Patch10: fix-bug-for-kydima8.patch
  - [BUG#203467]【动态度量】非x86架构无法开启动态度量
  - [BUG#203466]【动态度量】安装libkydima包后，系统自动注销


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-05
changelog:
  - Type:update
  - ID:[BUG#206163]【动态度量】策略开启时无法通过路径查询度量信息，策略关闭时输出存在多余信息
  - SUG:NA
  - DESC:删除调试注释
  - Patch11: fix-bug-for-kydima9.patch
  - [BUG#206163]【动态度量】策略开启时无法通过路径查询度量信息，策略关闭时输出存在多余信息


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-06
changelog:
  - Type:update
  - ID:[任务#192803]【动态度量】动态度量PCR扩展功能核外实现
  - SUG:NA
  - DESC: 动态度量PCR扩展功能核外实现
  - Patch12: fix-bug-for-kydima10.patch
  - Patch13: fix-bug-for-kydima11.patch
  - [任务#192803]【动态度量】动态度量PCR扩展功能核外实现


author: hanhuijie <hanhuijie@kylinos.cn> 1.1.0-07
changelog:
  - Type:update
  - ID:[BUG#215180] 【需求22928】【动态度量-PCR】【arm架构】 开启动态度量PCR开关提示段错误
  - SUG:NA
  - DESC: 动态度量开启PCR扩展段错误
  - Patch14: fix-bug-for-kydima12.patch
  - [BUG#215180] 【需求22928】【动态度量-PCR】【arm架构】 开启动态度量PCR开关提示段错误


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-08
changelog:
  - Type:update
  - ID:[BUG#217462] 【需求22928】开启PCR策略失败
  - SUG:NA
  - DESC: 动态度量开启PCR扩展但未指定硬件可信跟类型时段错误
  - Patch15: BUG-217462-fix-coredump-when-tpm-is-NULL-for-kydima13.patch
  - [BUG#217462] 【需求22928】开启PCR策略失败


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-10
changelog:
  - bug#220546 【SP4-B16】【动态度量-PCR】重新进行内核加载并篡改，不会生成审计日志
  - 修正启动服务依赖关系
  - 修正文件参数保存时存在的越界读取问题
  - 将pcr参数配置调整到其它策略下发前，保证其它策略不会被清空


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-13
changelog:
  - 修复切换总开关时pcr策略下发会清理其他策略问题
  - 增强tcm1 兼容性
  - 动态修改pcr时，不再重新加载模块，保证策略连贯性
  - 添加pcie tcm1卡支持
  - 配置pcr策略时，增加pcr设备异常提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-14
changelog:
  - 添加tcm1支持兼容选项，以兼容v11系统
  - 修复编译条件变量编写错误导致的编译异常
  - 移除event帮助信息
  - 针对tcm1提示信息添加编译选项
  - 格式话代码格式
  - 修改编译告警
  - 修复三状态切换配置属性不全问题
  - 优化移除无冗余代码


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-16
changelog:
  - Type:update
  - ID:[TASK#366361] 【安全函数】libkydima整改
  - SUG:NA
  - DESC:安全编码合规性整改
  -      [TASK#361219] 【安全编译】gcc编译添加安全编译参数-libkydima
  -      修正不可靠代码，增加安全增强编译选项


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-19
changelog:
  - Type:update
  - ID:[BUG#351739]
  - SUG:NA
  - DESC: 针对set命令增加配置异常提示，针对get命令增加模块未加载时off状态显示
  	针对开源标准tcm2设备节点名称做自适应
  	修改kydima_get安装路径确保默认状态下普通用户可以访问该命令


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-20
changelog:
  - Type:update
  - ID:[BUG#353894] 【v11 2503】【B11】【需求44504】【x86\arm】【动态度量】不指定设备时，开启PCR策略命令执行失败
  - SUG:NA
  - DESC: 优化命令提示信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-21
changelog:
  - Type:update
  - ID:[TASK#471063] 【安全红线】整改自研组件第一轮Fortify问题-libkydima
  - SUG:NA
  - DESC: 修复server.cpp中 文件打开后存在句柄不释放的问题


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-22
changelog:
  - Type:update
  - ID: [BUG#369787] 【v11-2503】【B15】【需求44504】【动态度量】动态度量总开关关闭，无法获取子开关状态
  - SUG:NA
  - DESC: 修改kydima_get关闭状态显示信息
    	调整kydima_set用户执行权限


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-23
changelog:
  - Type:update
  - ID: [BUG#385507]【出厂测试】【v11-2503】【B20】【需求44504】【动态度量】帮助信息描述不对
  - SUG:NA
  - DESC: 优化命令帮助信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-24
changelog:
  - Type:update
  - ID: [BUG#408605]【自动化update内网源测试】【SP3-2403】libkydim包kydima_set命令设置周期可为负数
  - SUG:NA
  - DESC: 增加参数容错告警，修复后台服务无意义告警信息


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-25
changelog:
  - Type:update
  - ID: [TASK#553771]安全编译参数整改/libkydima安全编译参数整改
  - SUG:NA
  - DESC:
  	修复kydima_get 无法在有KYDIMA日志类型定义环境下识别篡改日志问题
  	修复偶发内核度量策略同步下发到内核失败问题
  	安全编译栈保护参数改为-fstack-protector-strong


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-26~RC0
changelog:
  - Type:update
  - ID: [TASK#595487]完成libkydima模糊测试和ci对接
  - SUG:NA
  - DESC:
  	添加ci平台模糊测试支持
  	添加ci平台单元覆盖率测试支持


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-27
changelog:
  - Type:update
  - ID: [BUG#499553] 【2603-B09】kydima_get命令fuzzing过程中出现crash，非100%复现，请分析确认
  - SUG:NA
  - DESC:
  	优化对系统文件读取时的格式限位校验


author: mengdehui <mengdehui@kylinos.cn> 1.1.0-28
changelog:
  - Type:update
  - ID: [BUG#502811]【V11 2503】【B12】【威胁消减】【动态度量】default模式下，kydima-daemon.service关闭后无法启
  - SUG:NA
  - DESC:
  	增加后台服务禁止重复启动限制


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p22
changelog:
  - Add patch:libkylin_activation_add_print_expiration_time.patch
  - [TASK#66101]KMS2.2需求实现/新增一个终端命令来查询服务到期时间
  - 本次更新新增终端命令kylin_status_check -t来查询服务到期时间


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p23
changelog:
  - add patch 26 for requirement development
  - taskid 65949: Batch activation and batch recovery are realized through MQTT


author: zhangjun <zhangdashuang@kylinos.cn> - 3.0.64.p24
changelog:
  - add patch 27:libkylin_activation_fix_103100_ukey_actionation_err.patch
  - bug 103100:【济宁市委】ukey激活异常 
  - 本次更新解决激活ukey断错误问题，由于过早的关闭动态库句柄，关闭后有其他函数在用。


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p25
changelog:
  - add patch 28 to solve the bug 104313 104169 104164 103893
  - bugId 104313:日志注册信息中version字段显示与实际版本不符
  - bugId 104169:服务到期时间仍显示2099与实际授权文件定义不符
  - bugId 104164:执行kylin_activation_check -t 不显示服务期限
  - bugId 103893:客户端取消激活失败，提示“Recycling success”


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p39
changelog:
  - Type:update
  - ID:[BUG#122522][BUG#121006]
  - SUG:NA
  - DESC:kylin_activation_check improve permissions


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p43
changelog:
  - Type:update
  - ID:[TASK#102068][BUG#135390][BUG#134276]
  - SUG:NA
  - DESC:add limit time palce authorization (patch45)
         fix bug135390 (patch46)
         fix buf134276 (modify spec file)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p45
changelog:
  - Type:update
  - ID:[TASK#110237]
  - SUG:NA
  - DESC:Limited time unlimited site authorization activated when booting (patch48)


author: zhangjun <zhangjun@kylinos.cn> - 3.0.64.p46
changelog:
  - Type:bugfix
  - ID:[BUG#137974]
  - SUG:NA
  - DESC:slove when replaceing the authorization file view computer properties then serial number changed (patch49)


author: zhangdashuang <zhangdashuang@kylinos.cn> - 3.0.64.p47
changelog:
  - Type:bugfix
  - ID:[BUG#152498]
  - SUG:NA
  - DESC:slove the problem of check error for private activation ordinary users (patch50)


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p49
changelog:
  - Type:bugfix
  - ID:[BUG#166387]
  - SUG:NA
  - DESC:add buildrequires and requires  version of paho-c in spec


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p51
changelog:
  - Type: bugfix
  - ID:[BUG#178000]
  - SUG:NA
  - DESC: fix get expiration time error and add get trial time fuction


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p52
changelog:
  - Type: upadate
  - ID:[TASK#153883]
  - SUG:NA
  - DESC: change service enable way in postinstall and posttrans


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p58
changelog:
  - Type: update
  - ID:[TASK#176779]
  - SUG:NA
  - DESC: add auto activation for kms privatization and fix bug 199947
  - DESC: cancel read hardinfo from khwid and five m extension


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.64.p61.02
changelog:
  - Type: bugfix
  - ID:[BUG#211902]
  - SUG: NA
  - DESC: gather together kms cmd 
  - DESC: add writable port and decoupling echoip from kms server


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p05
changelog:
  - Type: update
  - ID:[TASK#329905]
  - SUG:NA
  - DESC: add ftukey loongarch support
  - DESC: fix bug 241238


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p09
changelog:
  - Type: bugfix
  - ID:[BUG#241968][BUG#242140][BUG#242309][BUG#241262]
  - SUG:NA
  - DESC: fix get date error for bug#242140 and bug#241262
  	fix kms delay failed for bug#242309
  	fix kylin_kms -c failed for bug#241968


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p10
changelog:
  - Type: update
  - ID:[TASK#331951]
  - SUG: NA
  - DESC: change popen to execl in fork to exec cmd biosdevname


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p19
changelog:
  - Type: update
  - ID:[TASK#436445][TASK#432968]
  - SUG: NA
  - DESC: add fuzz check
  	add secret key activation
  	add deactivation function
  	add automatic synchronization of authorization
  	adjust the configuration file to the/etc directory
  	adjust backup the LICENSE file to the hidden directory
  	adjust activate the policy to the server
  	add support for kms2.5 specific features
  	add ukey content encryption output


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p20
changelog:
  - Type: bugfix
  - ID:[BUG#336317][BUG#336267][BUG#335891][BUG#336521]
  - SUG: NA
  - DESC: add unit testcase and fix bugs


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p21
changelog:
  - Type: update
  - ID:[TASK#442197][BUG#338635][BUG#338619][BUG#339458][BUG#339912][BUG#338942]
  - SUG: NA
  - DESC: integrate value added product authorization
  	update ukey dump
  	fix activations failed for other arch LICENSE


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p22
changelog:
  - Type: update
  - ID:[TASK#432977]
  - SUG: NA
  - DESC: add subscription support
  	add unit testcase for new function of 2503


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p25
changelog:
  - Type: bugfix
  - ID:[BUG#345916]
  - SUG: NA
  - DESC: adjust the hardware binding order for value-added product
  	add v10/v11 version check by LICENSE OSNAME
  	add osname check and similar_product check in ukey activation
  	backup license_serial upload to activation platform
  	fix get subscription status error


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p26
changelog:
  - Type: bugfix
  - ID:[BUG#348464]
  - SUG:NA
  - DESC: fix kylin_activation_sync output when subscription


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p27
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: change similar_product to product for ukey activation
  	add place activation check for activation sync
  	kylin_productinfo output optimization
  	check license osname locally when kms version lower than 2.5


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p28
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC:
  	reduce the number of subscription status checks in kms
          check license osname locally when kms version lower than 2.5 \
  	 for kms udp activation mode
  	add local osname and product_type check when system is \
  	 migrated from other system which is not v11


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p29
changelog:
  - Type: bugfix
  - ID:[BUG#359265][TASK#463164]
  - SUG: NA
  - DESC:
  	change the process of obtaining hard disk serial number
  	optimized code and add copyright header
  	add restart_activation to conf for automatic activation


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p30
changelog:
  - Type: bugfix
  - ID:[BUG#363291][BUG#365021][BUG#364959]
  - SUG: NA
  - DESC: fix ukey write error 
  	fix activate with v10 kyinfo and license
  	update testcase


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p31
changelog:
  - Type: update
  - ID:[TASK#442245]
  - SUG: NA
  - DESC: fix value added product osname check error for place


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p32
changelog:
  - Type: update
  - ID:[TASK#463164]
  - SUG: NA
  - DESC: cancel bind system uuid
  	change the way of obtaining embedded network card names on x86


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p33
changelog:
  - Type: update
  - ID:[TASK#544093][TASK#502175][BUG#378051][BUG#414807][BUG#439995]
  - SUG: NA
  - DESC: fix ukey activation more times
          upload cpu and os version info to kms server
  	change the access method of os version
  	add sw64 support


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p36
changelog:
  - Type: update
  - ID:[TASK#554089]
  - SUG: NA
  - DESC: add customer name to check print for place activation


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p37
changelog:
  - Type: update
  - ID:[TASK#554057]
  - SUG: NA
  - DESC: optimizate product type check
          Support for displaying versions in multiple languages


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38
changelog:
  - Type: update
  - ID:[TASK#554091][BUG#480713][BUG#480791][BUG#480843][BUG#481237]
  - SUG: NA
  - DESC: add permission control and unified log path
          fix new place check error


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.01
changelog:
  - Type: bugfix
  - ID:[BUG#482059][BUG#481123][BUG#482207][BUG#485105][BUG#485185]
  - SUG: NA
  - DESC: aptimize the detection of LICENSE files for interface
          added the function of obtaining network time


author: Wenhua Huang <huangwenhua@kylinos.cn> - 3.0.65.p38.03
changelog:
  - Type:bugfix
  - ID:[BUG#488739][BUG#488629]
  - SUG:NA
  - Desc: fix get network time
          fix ukey activate


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.08
changelog:
  - Type: bugfix
  - ID:[BUG#501717][BUG#501583]
  - SUG: NA
  - DESC: fix the issue of activation check for regular users
          optimizate secret key activation failure prompt


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.09
changelog:
  - Type: bugfix
  - ID:[BUG#503743][BUG#503739][BUG#503973]
  - SUG: NA
  - DESC: fix set autoactivated failed for kms and add subscribe check


author: yangxiaodong <yangxiaodong@kylinos.cn> - 3.0.65.p38.10
changelog:
  - Type: bugfix
  - ID:[BUG#506061]
  - SUG: NA
  - DESC: optimize the JSON data of the obtained operating system version


author: huayadong <huayadong@kylinos.cn> - 2.0.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: sync code from desktop libkylin-ai-base-2.0.0.0-ok1.0k1.1
          upstream commtid:6298e8f0a6da78d38bb8a09e4b0424648ca05f0f


author: peijiankang<peijiankang@kylinos.cn> - 1.0.0.0-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#347734]
  - SUG : NA
  - DESC: libkylin-ai-default-key-1.0.0.0-add-copyright-head.patch


author: zhoukangyu<zhoukangyu@kylinos.cn> - 1.0.1-3
changelog:
  - Type:update
  - ID:[Task#596341 Task#599245]
  - SUG:NA
  - DESC: 增加AFL fuzz测试 /valgrind检测 /clang format


author: lichenguang <lichenguang@kylinos.cn> - 1.0.10-4.p02
changelog:
  - Type: update
  - ID: [TASK#473471]
  - SUB: NA
  - DESC: Fix security hotsposts in the sonarqube report.


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add packges libkylin-nm-base-devel; for delete glib2-devel


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok1k0.3


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.2-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.2-0k4.22


author: peijiankang <peijiankang@kylinos.cn> - 2.5.1.2-1.p04
changelog:
  - Type: update
  - ID  : [TASK#474331]
  - SUG : NA
  - DESC: add libkysdk-system-2.5.1.2-kylin-fix-fortity.patch


author: huayadong<huayadong@kylinos.cn> 2.5.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch:libkysdk-applications-2.5.1.0-kylin-fix-compile-error-of-STB_IMAGE.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.2.0-0k0.16


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#468457]
  - SUG : NA
  - DESC: add libkysdk-applications-2.5.1.0-fix-sonarqube-security-hotspots.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.2.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#352900]
  - SUG : NA
  - DESC: fix klabel problem displaying multiple line text


author: peijiankang <peijiankang@kylinos.cn> - 2.5.2.0-1.p05
changelog:
  - Type: update
  - ID  : [TASK#586743]
  - SUG : NA
  - DESC: add kysdk-ukuiwindowhelper and update themeController code
          add copyright head info


author: huayadong<huayadong@kylinos.cn> - 2.5.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: chnage libkysdk-gsetting Requires for delete glib2-devel


author: peijiankang<peijiankang@kylinos.cn> - 2.5.1.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add libkysdk-base-2.5.1.0-fix-sync-dbus-server-strcmp-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 2.5.1.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.5.1.0-0k1.6


author: zhaokexin<zhaokexin@kylinos.cn> 1.1.0.1-0k0.4.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#492797]
  - SUG : NA
  - DESC: Solve the problem of files without declared copyright


author: houhongxun <houhongxun@kylinos.cn> - 2.3.1.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 2.3.1.0-0k0.8


author: peijiankang <peijiankang@kylinos.cn> - 2.3.1.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop libkysdk-desktop-2.3.1.0-0k0.7


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.2.09
changelog:
  - Type:update
  - ID:
  - SUG:NA
  - DESC:1.增加NV授权保护功能
         add  libkytrusted-security-add-nv-index-authorization-protection.patch
  	    kylin_tpm.mod-indicates-the-running-control-switch.patch
              the-grub-module-preload-function-is-disabled.patch


author: zhangfan<zhangfan4@kylinos.cn> - 1.0.1-13
changelog:
  - Type:update
  - ID:[TASK#221086]
  - SUG:NA
  - DESC:1.增加高阶选项相关功能及查询可信启动开光状态功能
  	   2.删除pcr8、9度量审计的条件编译
  	   3.增加日志存储功能


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.1-18
changelog:
  - Type:update
  - ID:[TASK#360771] [TASK#366343] [TASK#360849] [TASK#361221]
  - SUG:NA
  - DESC:1.fortify扫描修复
         2.安全函数整改
         3.添加安全编译参数 
         4.扩展覆盖率扫描自测程序 
         5.gerrit自动测试扫描问题修复


author: zhangfan<zhangfan4@kylinos.cn> - 1.0.1-23
changelog:
  - Type:update
  - ID:[TASK#435903]
  - SUG:NA
  - DESC:1.同步桌面v10 2503改动
         2.增加错误码
         3.新增卸载包时清理配置文件功能
         4.增加debug包编译
         5.修改copyright信息
         6.修改dev包头文件存储路径
         7.支持sw平台版本编译
         8.修改开源代码片段引用


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.1-28
changelog:
  - Type:bugfix
  - ID:[BUG#354077]
  - SUG:NA
  - DESC:1.修改help命令的显示内容
         2.完善spi_sysconfig参数检测
         3.三员适配由API接口调整为kytrust_config命令适配


author: bianxiuning<bianxiuning@kylinos.cn> - 1.0.1-37
changelog:
  - Type:update
  - ID:[TASK553767]
  - SUG:NA
  - DESC:1.安全编译栈保护参数改为-fstack-protector-strong,去掉-fstack-protector-all参数


author: wuxiaolei <wuxiaolei@kylinos.cn> - 1.1.0-5.p01
changelog:
  - Type: update
  - ID: [TASK#529389]
  - SUG:NA
  - DESC: add BuildRequires: automake to regenerate Makefile.in when patches modify Makefile.am


author: Hu Bin <hubin73@huawei.com> - 0.1.3-10
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add libmetalink testcases for api and error handling, fix automake error


author: Hu Bin <hubin73@huawei.com> - 0.1.3-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport patches to fix NULL pointer dereference and memory leak bug


author: yanglu<yanglu72@h-partners.com> - 8.17.1-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: shenyangyang <shenyangyang4@huawei.com> - 1.6.4-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:add build requires of gobject-introspection-devel to solve build problem


author: yangxiaodong <yangxiaodong@kylinos.cn> - 1.0.9-4.p01
changelog:
  - Type:Task
  - ID:[TASK#204872]
  - SUG:NA
  - DESC:skip "Operation not permitted" tests within mock for kylin


author: wuguanghao <wuguanghao3@huawei.com> - 5.0.2-1
changelog:
  - upgrade to 5.0.2:
    - fix double free in nfs3_pread_mcb()
    - Multithread support for Linux and Windows
    - fix NFS4 behavior of chmod/chown/utimes
    - Add nfs_umount() to NFSv3
    - Add nfs_statvfs64()
    - NFSv4 fix for directory handling
    - NFSv4 support
    - lockf() support(NFSv4 only)
    - fcntl() support (FNSv4 only)
    - Added nfs-fh: a simple utility to print the filehandle for a nfs file


author: openEuler Buildteam <buildteam@openeuler.org> - 2.4.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:stop the var-lib-nfs-rpc_pipefs.mount before remove the package


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 2.5.4-5
changelog:
  - set use-gss-proxy to true in nfs.conf to be consistent with the
    description of 0002-nfs-utils-set-use-gss-proxy-1-to-enable-gss-proxy-by.patch


author: zengwefeng <zwfeng@huawei.com> - 3.5.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add missing check for NULL return from allocate_rfd
         add include netlink private nl-auto-h header
         use proper int type for id attributes
         add RTNL_LINK_REASM_OVERLAPS stat
         check for null pointer in macvlan
         fix leaking in link msg parser
         fix NLE_NOMEM handling in parse multipath


author: chengyechun <chengyechun1@huawei.com> - 3.5.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  -DES:add seome tests about add and delele addr,
       add and delete neigh,
       add and delete qdisc,
       add link and rule,
       delete route;


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: Thomas Vander Stichele <thomas@apestaart.org>
changelog:
  - update for 1.0 release
  - conform Group to Red Hat's idea of it
  - take out case where configure doesn't exist; a tarball should have it


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - autogenerate from configure
  - fix download location
  - remove Prefix
  - own include dir
  - move ldconfig runs to -p scripts
  - change Release tag to include xiph


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.8
          upstream commitid: e244d03cbbaa55bff8777acce8145a0b09f20f6a


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok11k0.11
          upstream commitid: 8f91b3ac9f0c054dffc5d12daf0ae419909d1d54


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#370547]
  - SUG : NA
  - DESC: Patch02: ukui-biometric-auth-4.10.0.0-kylin-add-KylinUserDatePtr-for-root.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 0.16-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0000-libpciaccess-rom-size.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-libpciaccess-add-sw64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: weijin deng <weijin.deng@turbolinux.com.cn> - 1.28.0-1
changelog:
  - Upgrade to 1.28.0
  - Update Version, Release, Source0, BuildRequires
  - Use meson rebuild, delete python3.8-fix.patch that for autoreconf


author: huayadong<huayadong@kylinos.cn> - 4.10.0.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: chnage libpeony3 Requires for delete glib2-devel


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#292045]
  - SUG : NA
  - DESC: skip index-0 in color label setting which not used


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p05
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.5-ok1k1.10


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#250151] [BUG#334551] [BUG#346033]
  - SUG : NA
  - DESC:
  -   1. peony fix translation error.
  -   2. remove a critial messagebox.


author: lichenguang <lichenguang@kylinos.cn> - 4.10.0.5-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#337905] [BUG#296933]
  - SUG : NA
  - DESC: remove support for exfat from format dialog.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#354594]
  - SUG : NA
  - DESC: fix thread race condition which caused coredumps


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#352389]
  - SUG : NA
  - DESC: fix for copying long name file to file safe box


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p18
changelog:
  - Type: bugfix
  - ID  : [BUG#497725]
  - SUG : NA
  - DESC: fix copying files that with specific symbols name


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: litenglong <litenglong@kylinos.cn> - 1.4.5.p01
changelog:
  - Type:update
  - ID:[task#327351]
  - SUG:NA
  - DESC:Synchronize the SP3 patch:Disallow root from setting weak passwords and resolve localization issue.


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.4.5.p01.se.01
changelog:
  - Type:update
  - ID:[task#329817]
  - SUG:NA
  - DESC: 1.【账户保护】libpwquality包合入回文和相似性检查补丁
          2. 支持香港繁体字 
      add patch:libpwquality-add-palindrome-similar-option.patch
                libpwquality-add-zh_HK.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.4.5-3.p01.se.01
changelog:
  - Type:update
  - ID:[TASK#533695]
  - SUG:NA
  - DESC: backport upstream patch to remove redundant inclusion of libintl.h


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop qt5-ukui-platformtheme-4.10.0.0-ok52k0.18
          upstream commtid:723df8376ab0c104ef9b4e5612fee9012cad4fc9


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#525485]
  - SUG : NA
  - DESC: qt5-ukui-platformtheme remove libqt5-gesture-extensions


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#500213]
  - SUG : NA
  - DESC: add Patch05: qt5-ukui-platformtheme-4.10.0.0-kylin-fix-QLabel-Text.patch
          修复AI模块管理界面显示与预期不符配


author: luhuaxin <luhuaxin@huawei.com> - 0.9.4-15
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move AUTHORS and COPYING files to license folder, fix requires


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.4-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libquvi-0.9.4-lua-5.2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.0-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2023-35789.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: fuanan <fuanan3@huawei.com> - 1.12.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Fix:memory leaks
         Fix:lr_fastestmirror_prepare:Resource leaks
         Fix:lr_get_curl_handle:Check curl_easy handle before use
         lr_get_curl_handle:Strict check of curl_easy_setopt return code
         Remove "may be used uninitialized" compiler warnings


author: wangshuo <wangshuo@kylinos.cn> - 2.17.10-1.p01
changelog:
  - Type:bugfix
  - ID:[TASK#327350]
  - SUG:NA
  - DESC:add patch9001 kylin rebrand
  -      add file ureport.conf for abrt-auto-reporting command
  -      add BuildRequires xmlrpc-c-client for build


author: majianhan <majianhan@kylinos.cn> - 2.17.10-2.p01
changelog:
  - Type:update
  - ID:[TASK#425071]
  - SUG:NA
  - DESC: [backport]modify testcase port for avoid conflict with k8s


author: zhangjun <zhangjun@kylinos.cn> 1.0-1.11.1.p01
changelog:
  - update spec:Install libRockeyARM.s0.0.3 library to /usr/lib/xxx-linux-gnu directory
  - bug102904平安银行定制iso授权Key激活失败
  - 本次更新修复将动态库安装到对应架构指定目录


author: chenyanpanHW <chenyanpan@huawei.com> - 2.5.1-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-arch-disambiguate-in-arch-syscall-validate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Add-64-bit-LoongArch-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix-build-error-for-libseccomp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/fix_undefined_behavior_in_scmp_bpf_sim.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libseccomp-add-sw-arch.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: huanfuxi <huanfuxi@kylinos.cn> - 1.1-1kord
changelog:
  - 添加security_set脚本用于在initramfs中按照配置文件中
  - 记录的安全模块状态设置设置相应安全模块的状态；
  - 在引导内核时，如果grub中内核引导参数中有安全模块状态设置项，
  - 则安全状态为引导参数指定的值，否则为配置文件中的值
  - 添加libsecurity_conf库及接口，用于更新/etc/kylin-security.conf配置文件
  - 添加编译选项--with-lsm，用于区分v10和v10.1下lsm堆栈化的grub引导参数


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.02
changelog:
  - 1、kylin-security.conf改名为kysec.conf
  - 2、kysec.conf默认配置改为开启
  -    libsecurity1-change-config-file-name.patch
  - 1、添加security_config_module_status_get()接口
  -    libsecurity1-add-security-module-status-get-interface.patch
  - 1、添加devctl配置项
  - 2、security_set添加devctl状态初始化
  -    libsecurity1-add-devctl-conf-and-status-init.patch
  - 同步桌面版本到：1.1-23kylin


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.03
changelog:
  - kysec.conf添加kysec_tpm=0的配置
  -   add patch: libsecurity1-add-kysec-tpm-status-config.patch
  - 修改kysec.conf的路径
  -   add patch: libsecurity1-change-kysec-conf-path.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.06
changelog:
  - Type:update
  - ID: [TASK#116058]
  - SUG:NA
  - DESC: 修复函数会覆盖errno问题
  -         add patch: libsecurity1-fix-errno-will-be-overwritten.patch


author: wanghao <wanghao2@kylinos.cn> - 1.1-17.se.07
changelog:
  - Type:update
  - ID: [TASK#119585]
  - SUG:NA
  - DESC: 联网管控设置关
  -         add patch: libsecurity1-netctl-set-off.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2-1.se.01
changelog:
  - Type: update
  - ID: [TASK#147330]
  - SUG:NA
  - DESC: 1、移植桌面修改: [BUG#143541]
  -          修改spec文件, 当升级安装时, 不改变kysec.conf的配置
  -       2、移植桌面补丁: kysec-conf-set-dbus-is-used-to-teminate-kysec-daemon-process.patch [BUG#152966]
  -          解决通过kysec_conf_set dbus方法导致kysec-daemon进程终止的问题
  -            add patch: libsecurity1-fix-kysec-conf-set-dbus-bug.patch
  -       3、移植桌面补丁: sm-is-integrated-into-general-purpose.patch [TASK#19621][TASK#19622]
  -          [SM转通用]安全接口授权功能,加入kysec_sm配置
  -            add patch: libsecurity1-sm-is-integrated-into-general-purpose.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2-1.se.02
changelog:
  - Type: update
  - ID: [TASK#151386]
  - SUG:NA
  - DESC: netctl默认配置改为黑名单模式
  -        libsecurity1-netctl-mode-modify-to-blist.patch


author: wanghao <wanghao2@kylinos.cn> - 1.2-1.se.03
changelog:
  - Type: update
  - ID: [TASK#171233]
  - SUG:NA
  - DESC: 同步hostos补丁，kysec.conf文件添加kysec_pblk=0[BUG#189658]
  -	  add patch: libsecurity1-kysec-conf-add-pblk-status-0.patch


author: lengchunying <lengchunying@kylinos.cn> - 1.2-1.se.05
changelog:
  - Type: update
  - ID: [TASK#226809] 单元测试
  - SUG: NA
  - DESC: 编写单元测试用例，覆盖率大于10%
  - 	add patch: libsecurity1-test-20240726-01.patch
  -		   libsecurity1-test1-20240731.patch


author: litianhao <litianhao@kylinos.cn> - 1.2-1.se.06
changelog:
  - Type: update
  - ID: [BUG#248615] ssh访问服务器登录失败
  - SUG: NA
  - DESC: 修复单元测试造成的报错
  -       libsecurity1-fix-unit-test-args.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.2-1.se.09
changelog:
  - Type: update
  - ID: [TASK#405871]
  - SUG: NA
  - DESC: 增加单元测试代码
  -      add path: libsecurity1-add-unit-test-20241024.patch


author: litianhao <litianhao@kylinos.cn> - 1.2-1.se.10
changelog:
  - Type: update
  - ID: [TASK#422679] 添加版权标识
  - SUG: NA
  - DESC: 添加版权标识
  -       libsecurity1-add-license.patch


author: litianhao <litianhao@kylinos.cn> - 1.2-1.se.11
changelog:
  - Type: update
  - ID: [TASK#595381] 添加模糊测试
  - SUG: NA
  - DESC: 添加模糊测试
  -       libsecuriyt1-add-test-intergration-and-fuzz-test.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.5-4.se.01
changelog:
  - Type:update
  - ID:[Task#533985] v11补丁移植
  - SUG:NA
  - DESC:
  - 增加libselinux补丁
  -         add patch: libselinux-20200318.patch
  -       增加security宏定义
  -         add patch: add-selinux_restorecon.patch
  -       修改selinux_restorecon.c文件
  -         add patch: libselinux-20200427.patch
  -       Audit cannot be controlled by policy.
  -         add patch: libselinux-fix-ston-wrong.patch
  -       放开USER_AVC checks
  -         add patch: libselinux-keep-getpeercon-errorno.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 3.5-7.se.01
changelog:
  - Type:update
  - ID:[Task#533987]
  - SUG:NA
  - DESC:
  - 移植v11 libsemanage补丁
  -     add patch: libsemanage-20200319.patch
  -         增加文件当前包含的作用户操作的模板
  -     add patch: libsemanage-homedircon.patch
  -        【管理员分权】自定义增加备份还原分区安装系统，开启strict模式后，secadm和auditadm用户异常
  -         secadm和auditadm不存在,genhomedircon生成adm_home_t的定义


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: tianyunnuan <tianyunnuan@kylinos.cn> - 1.0.1-1.sec.02.sm.05
changelog:
  - sm-authorize add program blacklist
  - add and modify some device and interface control
  - optimize code


author: jiayongfeng <jiayongfeng@kylinos.cn> - 1.0.1-03
changelog:
  -Type:update
  -ID: [任务#169874]
  -SUG:NA
  -DESC：添加版权声明
         add patch: sm-enhancement-add-copyright-notice.patch


author: jiayongfeng <jiayongfeng@kylinos.cn> - 1.0.1-04
changelog:
  -Type:update
  -ID: [BUG#189709]
  -SUG:NA
  -DESC：kysec为permissive时安装sm-example包重启，未切换enfircing模式
         add patch: permissive-switch-enforcing.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-05
changelog:
  -Type: update
  -ID: [任务#170022]
  -SUG:NA
  -DESC: 卸载套件时清除策略
          add patch: clear-policy-when-uninstall.patch


author: jiayongfeng <jiayongfeng@kylinos.cn> - 1.0.1-06
changelog:
  -Type: update
  -ID: [任务#163122] [BUG#191049] [BUG#191923]
  -SUG:NA
  -DESC: 兼容主线及hostos的procng库调用
  -      add patch: sm-enhancement-compatible-hostos-and-spx.patch
  -      解决输入错误格式IP地址的五元组策略可以设置成功问题
  -      add patch: fix-netflow-bug-191049-policy-para-check-problem.patch
  -      解决hosts安装sm-example后，devctl安全状态未开启
  -      add patch: sm-enhancement-devctl-set-devctl-on.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-07
changelog:
  -Type: update
  -ID: [任务#191936]
  -SUG:NA
  -DESC: 修复卸载套件后设备管控策略未清空
  -      add patch: fix-devctl-kernel-policy-not-clear.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-09
changelog:
  -Type: update
  -ID: [TASK#179971 BUG#193846 BUG#198544 BUG#199175]
  -SUG:NA
  -DESC: 同步桌面流量管控普通用户可以配置策略问题
         添加抓取策略时策略序号无法设置大于200
         流量管控未授权执行审计策略查询没报错问题
         优化流量授权取消授权时服务处理
         解决流量管控测试程序内存泄露问题
  -      add patch: sm-enhancement-fix-netflow-ordinary-user-can-config-policy.patch
                    sm-enhancement-fix-netflow-cant-config-policy-greater-than-200.patch
                    sm-enhancement-fix-netflow-no-error-info-when-no-authorize.patch
                    sm-enhancement-optimize-netflow-authorize-service-process.patch
                    sm-enhancement-fix-netflow-get-allpolicy-memory-leak.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-10
changelog:
  -Type: update
  -ID: [BUG#203369]
  -SUG:NA
  -DESC: 壁纸管控增加查看功能.
         解决取消非管控壁纸时,管控壁纸失效问题
  -      add patch: sm-enhancement-bgset-improve-list.patch
                    sm-enhancement-fix-bgset-remove-bug.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-11
changelog:
  -Type: update
  -ID: [BUG#201913]
  -SUG:NA
  -DESC: 解决普通用户执行移除pblk策略未提示没有权限.
  -      add patch: sm-enhancement-fix-pblk-remove-return-value.


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-12
changelog:
  -Type: update
  -ID: [BUG#207009 BUG#207045 BUG#207158 BUG#207168]
  -SUG:NA
  -DESC: 1. sm-netaudit和sm-netflow-ctl命令无法使用帮助手册
         2. 添加流量审计策略时，输出信息存在错误单词
         3. 添加抓取策略的流量方向参数为字母时添加成功，方向为in
         4. 删除流量审计策略时，提示内容中TYPE/PROCESS/DIR信息错误
  -      add patch: sm-enhancement-fix-netflow-some-trivial.patch


author: liwei <liwei@kylinos.cn> - 1.0.1-13
changelog:
  -Type: update
  -ID: [BUG#210142]
  -SUG:NA
  -DESC: 修改添加spro后，list返回打印
  -	sm-enhancement-fix-add-spro-print.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-14
changelog:
  -Type: update
  -ID: [BUG#198544]
  -SUG:NA
  -DESC: 流量管控未授权执行审计策略查询没报错问题
  -     add patch:  sm-enhancement-fix-netflow-no-error-info-when-no-authorize-002.patch


author: xinjiahao <xinjiahao@kylinos.cn> - 1.0.1-15
changelog:
  -Type: update
  -ID: [BUG#209764]
  -SUG:NA
  -DESC: 添加普通用户设置 netcard 失败后无提示问题
  -     add patch:  add-failed-prompt-of-netcard-setting-of-normal-user.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-16
changelog:
  -Type: update
  -ID: [BUG#218156 BUG#218057]
  -SUG:NA
  -DESC: 修复无法删除壁纸管控策略
  -      修复软件防卸载提示出错
  -      add patch: sm-enhancement-fix-safeguard-remove-bgset.patch
  -                 sm-enhancement-fix-spro-return-value.patch


author: zhoukangyu <zhoukangyu@kylinos.cn> - 1.0.1-17
changelog:
  -Type: update
  -ID: [TASK#206125]
  -SUG:NA
  -DESC: 安全套件默认不启用流量管控功能
  -     add patch: sm-enhancement-disable-netflow.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-18
changelog:
  -Type: update
  -ID: [BUG#226809] v11重编kysec1.0核外包
  -SUG:NA
  -DESC: v11初始化版本，去除流量管控
  -      sm-enhancement-remove-netflow.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-21
changelog:
  -Type: update
  -ID: [BUG#249035] sm命令存在流量管控
  -SUG:NA
  -DESC: 去除命令行中的流量管控
  -      sm-enhancement-remove-netflow-in-command.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-22
changelog:
  -Type: update
  -ID: [TASK#386227] 修复设备管控接口段错误问题
  -SUG:NA
  -DESC: 修复设备管控接口段错误问题
  -      sm-enhancement-devctl-fix-apis.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-23
changelog:
  -Type: update
  -ID: [BUG#386227] 设备管控获取类型策略为空
  -SUG:NA
  -DESC: 修复设备管控获取类型策略结果为空的问题
  -      sm-enhancement-fix-get-type-policies.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-24
changelog:
  - Type: update
  - ID: [BUG#295373] 删除套件时清除策略
  - SUG: NA
  - DESC: 删除套件时清除策略
  -     sm-enhancement-10124.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-25
changelog:
  - Type: update
  - ID: [BUG#300635] 安装套件时未开启kysec
  - SUG: NA
  - DESC: 安装套件时开启kysec
  -       sm-enhancement-init-and-clear-policy.patch


author: tiandongdong <tiandongdong@kylinos.cn> - 1.0.1-26
changelog:
  - Type: update
  - ID: [TASK#395895]
  - SUG: NA
  - DESC: 修复安全热点和fortify
  -       sm-enhancement-fix-fortify-bug.patch
  -       sm-enhancement-fix-sonarqube-bug.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-27
changelog:
  - Type: update
  - ID: [BUG#300635] 安装套件时未开启kysec
  - SUG: NA
  - DESC: 开启kysec时提示重启
  -       sm-enhancement-add-reboot-prompt.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-28
changelog:
  - Type: update
  - ID: [TASK#422679] 合规整改
  - SUG: NA
  - DESC: 合规整改
  -       sm-enhancement-add-license.patch


author: litianhao <litianhao@kylinos.cn> - 1.0.1-29
changelog:
  - Type: update
  - ID: [BUG#338131] sm自保护不生效
  - SUG: NA
  - DESC: 修复安装套件时没有更新ksaf状态的问题
  -       sm-enhancement-update-ksaf-status-when-init.patch


author: kangshiming <kangshiming@kylinos.cn> - 1.0.1-30
changelog:
  - Type: update
  - ID: [BUG#342012] sm外设管控策略获取不显示网卡名字
  - SUG: NA
  - DESC: 修复有线网卡网卡细粒度策略获取不显示网卡名的问题
  -       sm-enhancement-fix-get-netcard-namelist-null.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-01
changelog:
  - Type: update
  - ID: [BUG#311011] [BUG#311027]
  - SUG: NA
  - DESC: 修复参数错误使用而未输出帮助信息提示问题
  -       sm-enhancement-fix-lack-help-info.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-02
changelog:
  - Type: update
  - ID: [BUG#311015]【外设管控】移除设备管控细粒度策略失败
  - SUG: NA
  - DESC: 【外设管控】移除设备管控细粒度策略失败
  -       sm-enhancement-fix-remove-pvid-device-failed.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-03
changelog:
  - Type: update
  - ID: [TASK#443853] 新增产品化功能 修复产品化功能BUG
  - SUG: NA
  - DESC: 优化sm授权机制，使用scene的接口控制授权
  -       sm-enhancement-optimize-authorize.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-04
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: 优化sm授权进程，添加进程时，自动添加自保护例外放行
  -       sm-enhancement-add-self-protect-exception.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-05
changelog:
  - Type: update
  - ID: [TASK#468477]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-fix-sonarqube.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-06
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 网卡管控-普通用户修改细粒度网卡策略无失败提示
  -       sm-enhancement-fix-common-user-no-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-07
changelog:
  - Type: update
  - ID: [BUG#369491]
  - SUG: NA
  - DESC: 修改普通用户设置细颗粒度网卡策略失败提示信息
  -       sm-enhancement-update-common-user-tip.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-08
changelog:
  - Type: update
  - ID: [BUG#377853]
  - SUG: NA
  - DESC: 解决sm-authorize取消授权后无法切换strict模式
  -       sm-enhancement-fix-uninstall-sm-switch-strict-failed.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-09
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA 
  - DESC: sm-authorize添加的授权进程，在文件防护、进程防护、内核防护中例外放行
  -       sm-enhancement-add-sm-authorize-sync-exception.patch


author: litianhao <litianhao@kylinos.cn> - 1.1.1-10
changelog:
  - Type: update
  - ID: [BUG#382501]
  - SUG: NA
  - DESC: 修复remove pvid接口调用失败的问题
  -       sm-enhancement-fix-devctl-perm-when-remove-pvid.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-11
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 服务开机启动时，调用add_inf_policy add_device_policy add_usb_policy接口失败
  -       sm-enhancement-fix-return-incorrect-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-12
changelog:
  - Type: update
  - ID: [BUG#384403]
  - SUG: NA
  - DESC: 修改一处遗漏的返回值处理逻辑
  -       sm-enhancement-optimize-interface-return-value.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-13
changelog:
  - Type: update
  - ID: [TASK#494339]
  - SUG: NA
  - DESC: 同步桌面Bug#434735修复补丁
  -       sm-enhancement-sync-desktop-bug-434735.patch


author: maxu <maxu@kylinos.cn> - 1.1.1-14
changelog:
  - Type: NA
  - ID: [TASK#589931]
  - SUG: NA
  - DESC: 修复安全热点问题
  -       sm-enhancement-resolve-hotspot-issue.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-03
changelog:
  - Type: update
  - ID: [BUG#485723]
  - SUG: NA
  - DESC: 添加打印信息
  -       sm-enhancement-add-print-info.patch


author: maxu <maxu@kylinos.cn> - 2.0.0-04
changelog:
  - Type: update
  - ID: [BUG#502831] [BUG#503699]
  - SUG: NA
  - DESC: 修改打印信息
  -       sm-enhancement-modify-the-prompt-message.patch


author: liying <liying_1@chinatelecom.cn> - 1.0.31-3
changelog:
  - Marked unimplemented dither enums in the header file as such.
  - Fix typo
  - Fix memory leak in caf_read_header


author: xihaochen <xihaochen@huawei.com> - 0.7.17-1
changelog:
  - Type:requirements                                                                                                                                  
  - Id:NA
  - SUG:NA
  - DESC:update libsolv to 0.7.17


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: peijiankang <peijiankang@kylinos.cn> - 2.74.3-10.p01
changelog:
  - Type: update
  - ID:   [TASK#532535]
  - SUG:  NA
  - DESC: sync from 2.74.3-4.p04(fix CVE-2025-4945 and Failed to fix websocket-test case)


author: xihaochen <xihaochen@huawei.com> - 0.9.5-1
changelog:
  - Type:requirements                                                                                                                                            
  - Id:NA
  - SUG:NA
  - DESC:update libssh to 0.9.5


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: zengweifeng<zwfeng@huawei.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.10.4-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build from ProxyJump
         packet: do not enqueue outgoing packets after sending


author: Chenxi Mao <chenxi.mao@suse.com> - 0.10.4-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Backport patches to fix build error if compiler switch to clang.


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangjun <zhangjun@kylinos.cn> - 1.10.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Prevent files from being skipped if the output buffer is too small


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le


author: gaoyi<gaoyi15@huawei.com> - 2.1.14-2.h1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: backport patches from https://github.com/samba-team/samba
  - Package init


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.20-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libtar-1.2.11-missing-protos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libtar-1.2.11-mem-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libtar-1.2.20-fix-resource-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libtar-1.2.11-bz729009.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/libtar-1.2.20-no-static-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2013-4420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openEuler-CVE-2021-33643-CVE-2021-33644.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/openEuler-CVE-2021-33645-CVE-2021-33646.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/CVE-2021-33640-fix-memory-leak-and-use-after-free-bugs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 0.10.2-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-tevent-fix-CID-1437974-dereference-after-null-check.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenyanpanHW <chenyanpan@huawei.com> - 1:1.1.1-26
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/Fix-pp_sharp_mod-calculation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-fix-underlinking.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/examples-png_sizeof-no-longer-available-since-libpng.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/backport-fix-CVE-2024-56431.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: wenjun<wenjun8@huawei.com> - 4.0.9-11.h1
changelog:
  - Type:cves
  - ID:CVE-2018-18557 CVE-2018-17101 CVE-2018-17100 CVE-2018-12900 CVE-2018-18661
  - SUG:NA
  - DESC:fix above cves


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.5.0-2
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: huayadong <huayadong@kylinos.cn> - 0.4.5.2-2.p01
changelog:
  - Type: bugfix
  - ID  : [TASK#601833]
  - SUG : NA
  - DESC: add Patch01: timezonemap-0.4.5.2-kylin-correction-of-ambiguous-description.patch
          修正backward文件的错误字符


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yubo <yubo1@kylinos.cn> - 0.9.5-4.p01
changelog:
  - Type:update
  - ID:[任务#223921]
  - SUG:NA
  - DESC:add support to tpm2-00-permall update and disable sm4 in configure


author: douyan<douyan@kylinos.cn> 4.10.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Requires: ukui-search  ukui-biometric-manager


author: houhongxun<houhongxun@kylinos.cn> 4.10.0.0-1.p02
changelog:
  - Type: update
  - ID  : [TASK#371113]
  - SUG : NA
  - DESC: fix area setting interface not showing traditional chinese problem


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p04
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add Patch4:ukui-control-center-4.10.0.0-kylin-update-to-4.10.0.0-ok4.50k0.3.patch
          update:  4.10.0.0-ok4.46   ->   4.10.0.0-ok4.50k0.3
          fix BUG:#278525 【冒烟2级】【需求35431】【主题设置】使用命令打开特效模式后，特效模式设置的百分比与关闭前不一致
  	fix BUG:#278705 【字体】设置-个性化-字体中字体选择下拉框无字体可选择 278953 【GB18030】【字体】个性化-字体中无国标字体
  	fix BUG:#279433 【系统主题】控制面板主题页面出现DMZ-黑光标
  	fix BUG:#278405  设置】点击进入非首页界面后左上角的图标留白位置异常
  	fix BUG:#278937 【声音】用户手册未更新
  	fix BUG:#277913 【控制面板】【搜索】搜索栏输入文字后点击别处，搜索结果不消失且置顶
  	fix BUG:#267647  bug#278919更新用户手册
  	fix BUG:#278921 【区域语言】用户手册未更新
  	fix BUG:#278919 【锁屏】用户手册未更新


author: houhongxun<houhongxun@kylinos.cn> 4.10.0.0-1.p06
changelog:
  - Type: bugfix
  - ID  : [BUG#250683]
  - SUG : NA
  - DESC: don't show nopasswdlogin and autologin set button


author: peijiankang<peijiankang@kylinos.cn> 4.10.0.0-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#294219]
  - SUG : NA
  - DESC: ukui-control-center-4.10.0.0-kylin-fix-change-password-and-auth_admin_keep.patch


author: huayadong<huayadong@kylinos.cn> 4.10.0.0-1.p08
changelog:
  - Type: update
  - ID  : [BUG#294085]
  - SUG : NA
  - DESC: add patch8:ukui-control-center-4.10.0.0-kylin-fix-add-group-error.patch


author: peijiankang<peijiankang@kylinos.cn> 4.10.0.0-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#299257]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-fix-cpuinfo-display-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p11
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.50k0.23
          upstream commitid: 77a653aa14bfb421f7450c486af8a5c23fcece6a


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p15
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.0-ok4.50k0.29


author: mengchaoming <mengchaoming@kylinos.cn> - 4.10.0.0-1.p21
changelog:
  - Type: bugfix
  - ID  : [BUG#298765] [BUG#335314]
  - SUG : NA
  - DESC: add patch18: ukui-control-center-4.10.0.0-Adjust-user-type-icon-style-in.patch
  -	add patch19: ukui-control-center-4.10.0.0-Refine-authorization-policy-and-adjust-other-users-l.patch 
  -	modify spec: posttrans: add auth rules.


author: xuguangmin <xuguangmin@kylinos.cn> - 4.10.0.0-1.p22
changelog:
  - Type: bugfix
  - ID  : [BUG#294475]
  - SUG : NA
  - DESC: Add patch: ukui-control-center-4.10.0.0-add_withkysec_for_homepage.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p23
changelog:
  - Type: bugfix
  - ID  : [BUG#293499]
  - SUG : NA
  - DESC: Add patch: ukui-control-center-4.10.0.0-kylin-fix-brightnessFrame-display-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p25
changelog:
  - Type: bugfix
  - ID  : [BUG#250169]
  - SUG : NA
  - DESC: add more missing traditional chinese translations


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p26
changelog:
  - Type: bugfix
  - ID  : [BUG#350939]
  - SUG : NA
  - DESC: sync open kylin multifactor authentication fixes


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p27
changelog:
  - Type: bugfix
  - ID  : [BUG#346690]
  - SUG : NA
  - DESC: sync open kylin multifactor authentication fixes


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p29
changelog:
  - Type: bugfix
  - ID  : [BUG#353362]
  - SUG : NA
  - DESC: add Patch26: ukui-control-center-4.10.0.0kylin-fix-checkUserPwdW-can-not-user.patch
              Patch27: ukui-control-center-4.10.0.0-kylin-fix-changeuserpwd-error.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p30
changelog:
  - Type: bugfix
  - ID  : [BUG#353727]
  - SUG : NA
  - DESC: standard user shouldn't change other users' type、password、groups


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p32
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add kui-control-center-4.10.0.0-kylin-fix-display-widget.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p33
changelog:
  - Type: bugfix
  - ID  : [BUG#353362]
  - SUG : NA
  - DESC: add Patch30:ukui-control-center-4.10.0.0-kylin-change-checkUserPwd-rule.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p34
changelog:
  - Type: bugfix
  - ID  : [BUG#346795]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-add-copyright-head.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p36
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-kylin-fix-SIGABRT-coredump.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p37
changelog:
  - Type: bugfix
  - ID  : [BUG#370881]
  - SUG : NA
  - DESC: fix opt bind prompt message size and position


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p39
changelog:
  - Type: bugfix
  - ID  : [BUG#381069]
  - SUG : NA
  - DESC: add ukui-control-center-4.10.0.0-add-kylin-mfa-help-info.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p40
changelog:
  - Type: bugfix
  - ID  : [BUG#396007]
  - SUG : NA
  - DESC: add ukui-control-center accountinfo user guide


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p41
changelog:
  - Type: bugfix
  - ID  : [BUG#448987]
  - SUG : NA
  - DESC: add Patch39: ukui-control-center-4.10.0.0-kylin-changeUserPwd-add-QMessageBox-warning.patch
  	changeUserPwd add QMessageBox warning.
          用户修改自身密码结束后添加弹窗，显示pam回显。


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p42
changelog:
  - Type: update
  - ID  : [TASK#553947]
  - SUG : NA
  - DESC: add Patch40: 0001-ukui-control-center-update-license-for-v11-2603.patch
  	update license for v11 2603


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p43
changelog:
  - Type: bugfix
  - ID  : [BUG#468605][TASK#553947]
  - SUG : NA
  - DESC: BUG#468605:get os_version from kylin-system-version.conf
          TASK#553947:update license for v11 2603(Revised)


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p44
changelog:
  - Type: bugfix
  - ID  : [TASK#525485][BUG#471359]
  - SUG : NA
  - DESC: remove ukui-search requires and add theme transparency value


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p45
changelog:
  - Type: update
  - ID  : [TASK#553999]
  - SUG : NA
  - DESC: add Patch44: 0001-ukcc-show-activation-status-dialog-when-click-serial.patch
  	show activation status dialog when click service serial number


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p46
changelog:
  - Type: update
  - ID  : [TASK#554089]
  - SUG : NA
  - DESC: add Patch45: 0001-ukcc-show-customer-when-locally-activated.patch
  	show customer info when system is locally activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p47
changelog:
  - Type: bugfix
  - ID  : [BUG#478205]
  - SUG : NA
  - DESC: Add UserName reading when dbus interface RealName is empty.


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p48
changelog:
  - Type: bugfix
  - ID  : [BUG#477075]
  - SUG : NA
  - DESC: support password history account protection feature when change other users' password


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p50
changelog:
  - Type: bugfix
  - ID  : [BUG#481277][BUG#482067]
  - SUG : NA
  - DESC: show register number when system activated
          don't show activate button when system activated on main about page


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p51
changelog:
  - Type: bugfix
  - ID  : [BUG#483057]
  - SUG : NA
  - DESC: fix the check when system activation is expired


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p52
changelog:
  - Type: cves
  - ID  : [TASK#589295]
  - SUG : NA
  - DESC: fix KVE-2026-0104, encode password when used as command argument


author: huayadong<huayadong@kylinos.cn> - 4.10.0.0-1.p53
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch53: ukui-control-center-4.10.0.0-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.0-1.p54
changelog:
  - Type: bugfix
  - ID  : [Bug#485195]
  - SUG : NA
  - DESC: activate button shouldn't named "Extend" when system is not activated


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1.p55
changelog:
  - Type: bugfix
  - ID  : [Bug#500581][BUG#500383]
  - SUG : NA
  - DESC: Fixed defaultapp invalid when clicked reset button
          Fixed excessive password prompts when adding group members


author: huayadong <huayadong@kylinos.cn> - 4.10.0.0-1.p56
changelog:
  - Type: bugfix
  - ID  : [Bug#500531]
  - SUG : NA
  - DESC: add Patch57:ukui-control-center-4.10.0.0-kylin-change-png.patch
          更换帮助手册图片.


author: huayadong <huayadong@kylinos.cn> 4.1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: delete Requires:glib2-devel gsettings-qt-devel


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.0-1
changelog:
  - Type: update
  - ID  : [TASK#411577]
  - SUG : NA
  - DESC: sync code from desktop ukui-interface-4.10.0.0-ok1k0.4


author: douyan<douyan@kylinos.cn> 4.10.3.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#369005]
  - SUG : NA
  - DESC: add patch ukui-file-metadata-4.10.3.1-kylin-change-lib-to-lib64.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.3.1-1.p02
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.3.1-ok4k0.3


author: huayadong<huayadong@kylinos.cn> 4.10.2.12-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#293217]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-kylin-remove-s3-s4-chang-poweroff-reboot.patch


author: peijiankang<peijiankang@kylinos.cn> 4.10.2.12-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#288929]
  - SUG : NA
  - DESC: Patch02: ukui-menu-4.10.2.12-add-root-to-listCachedUsers.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.2.12-1.p04
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-menu-4.10.2.12-ok0.2k0.9
          upstream commtid:3148deafc141224257df8dd9c5e67a37d8290e3b


author: huayadong <huayadong@kylinos.cn> - 4.10.2.12-1.p05
changelog:
  - Type: update
  - ID  : [TASK#442854]
  - SUG : NA
  - DESC: add patch4:ukui-menu-4.10.2.12-chnage-uninstall-rule.patch


author: xuchenchen <xuchenchen@kylinos.cn> - 4.10.2.12-1.p06
changelog:
  - Type: bugfix
  - ID: [BUG#344202]
  - SUG: NA
  - DESC: add patch5:fix-chinese-translation-problem.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p07
changelog:
  - Type: bugfix
  - ID  : [BUG#347730] [BUG#347734]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-add-3adm.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.10.2.12-1.p08
changelog:
  - Type: bugfix
  - ID  : [BUG#353097]
  - SUG : NA
  - DESC: add ukui-menu-4.10.2.12-update-3adm-appinfo.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p09
changelog:
  - Type: bugfix
  - ID  : [BUG#366591]
  - SUG : NA
  - DESC: add Patch08:ukui-menu-4.10.2.12-kylin-remove-kylin-process-manager.patch


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p10
changelog:
  - Type: bugfix
  - ID  : [BUG#429765]
  - SUG : NA
  - DESC: remove argv --help-all
  	add Patch09:ukui-menu-4.10.2.12-kylin-remove-argv-help-all.patch
  	删除无用参数 --help-all


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p11
changelog:
  - Type: update
  - ID  : [TASK#587663]
  - SUG : NA
  - DESC: Patch10:ukui-menu-4.10.2.12-kylin-chnage-the-kysec-initerface-to-dbus.patch
          适配kysec接口升级，更改kysec接口为dbus


author: houhongxun <houhongxun@kylinos.cn> - 4.10.2.12-1.p12
changelog:
  - Type: bugfix
  - ID  : [BUG#494961]
  - SUG : NA
  - DESC: don't show firewall-config menu for unprivileged users


author: huayadong<huayadong@kylinos.cn> - 4.10.2.12-1.p13
changelog:
  - Type: bugfix
  - ID  : [BUG#499903][BUG#499883]
  - SUG : NA
  - DESC: add Patch1001: ukui-menu-4.10.2.12-kylin-update-to-4.10.2.12-ok0.2k0.12.patch
          修复全屏模式切换到最后一个功能名，高亮显示错误问题.
          修复全屏模式下字母排序模式从A切换到Z，开始菜单卡死.


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-notification-4.10.1.5-ok0.1k0.6
          upstream commtid:c54c60447b72e60f90fb0e80cfc9ceacc8d6177e


author: mengchaoming<mengchaoming@kylinos.cn> - 4.10.1.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#334491]
  - SUG : NA
  - DESC: add Patch2:ukui-notification-4.10.1.5-add-zh_HK.ts.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p04
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-fix-ukui-notification-server-no-quit-when-ukui-session-quit.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.1.5-1.p05
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-notification-4.10.1.5-kylin-fix-ukui-notification-server-coredump-SIGABRT-when-logout.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.8.1-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.8.1-ok0k0.9


author: peijiankang<peijiankang@kylinos.cn> 4.10.8.1-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#370527]
  - SUG : NA
  - DESC: add ukui-quick-4.10.8.1-kylin-fix-runcommand-invalid.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441577]
  - SUG : NA
  - DESC: sync code from desktop ukui-sidebar-4.10.3.5-ok0.3k0.10
          upstream commtid:9b2175d39a58d36e5c2f7f05bade021dacd7c00a


author: peijiankang <peijiankang@kylinos.cn> - 4.10.3.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#289223]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-fix-ukui-sidebar-coredump-SIGABRT-when-logout.patch


author: huayadong <huayadong@kylinos.cn> - 4.10.3.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#383661]
  - SUG : NA
  - DESC: add ukui-sidebar-4.10.3.5-kylin-change-kylin-screenshot-args.patch


author: houhongxun <houhongxun@kylinos.cn> - 4.10.0.5-1.p01
changelog:
  - Type: update
  - ID  : [TASK#441146]
  - SUG : NA
  - DESC: sync code from desktop version 4.10.0.5-ok1.1k0.7


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.5-1.p02
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-sni-4.10.0-Single-instance-addition-of-DISPLAY-judgment.patch


author: peijiankang <peijiankang@kylinos.cn> - 4.10.0.5-1.p03
changelog:
  - Type: bugfix
  - ID  : [BUG#366357]
  - SUG : NA
  - DESC: add ukui-sni-4.10.0-fix-ukui-sni-watcher-no-quit-when-ukui-session-quit.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p01
changelog:
  - Type: update
  - ID  : [TASK#371117]
  - SUG : NA
  - DESC: ukui-input-gather-4.1.0.0-fix-coredump.patch


author: peijiankang<peijiankang@kylinos.cn> - 4.1.0.0-1.p03
changelog:
  - Type: update
  - ID  : [TASK#289223]
  - SUG : NA
  - DESC: add ukui-input-gather-4.1.0.0-fix-coredump-about-ukuiinputgatherclient.patch


author: chenziyang <chenziyang4@huawei.com> - 2:1.6.2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix failed run-ptrace-mapper testcase


