v1.15.1

What's Changed

• ReserveLabelV2: ignore labels without MCS by @kolyshkin in #272

Full Changelog: v1.15.0...v1.15.1

v1.15.0

This release adds a new function, SetProcessKind, which is to be used instead of KVMProcessLabel[s] and InitProcessLabel[s] in case the user only wants to change the type of the existing label, not generate a new one. It also fixes an CI issue and optimizes label.InitLabels for a few common cases.

What's Changed

• ci: set timeout for vm jobs by @kolyshkin in #270
• label.InitLabels: optimize by @kolyshkin in #269
• Add SetProcessKind by @kolyshkin in #271

Full Changelog: v1.14.1...v1.15.0

v1.14.1

This release mostly fixes label.InitLabels regression introduced in v1.14.0.

What's Changed

• README: rm travis, add gha badge by @kolyshkin in #268
• Fix label.InitLabels regression in v1.14.0; amend ReserveLabelV2 doc by @kolyshkin in #267

Full Changelog: v1.14.0...v1.14.1

v1.14.0

This release fixes a regression in ExecLabel, bumps the minimal Go version to 1.22, and deprecates several functions in favor of improved API.

Fixed

• ExecLabel was using an incorrect path (regression in v1.13.0). (#253)

Deprecated

• CategoryRange is deprecated; use SetCategoryRange instead. (#262)
• KVMContainerLabels is deprecated; use KVMContainerLabel instead. (#262)
• InitContainerLabels is deprecated; use InitContainerLabel instead. (#262)
• ReserveLabel is deprecated; use ReserveLabelV2 instead. (#262)
• ROFileLabel is deprecated; if you use it, open a new issue. (#262)
• ContainerLabels is deprecated, if you use it, open a new issue. (#262)

Added

• SEUserByName. (#232, #251)
• CheckLabel. (#250)
• SetCategoryRange, KVMContainerLabel, InitContainerLabel, ReserveLabelV2. (#262)

Changed

• Switch to Go 1.22 as the minimally supported version (#256)
• Update GetDefaultContextWithLevel to fall back to failsafe context (#232)
• Use math/rand/v2 rather than crypto/rand for MCS label generation (#257)

Miscellaneous

• MAINTAINERS: add Aleksa as a maintainer. (#243)
• Assorted CI bumps and related fixes. (#255)
• Remove intToMcs. (#259)
• Use Cut more. (#254)
• Simplify getSelinuxMountPoint. (#258)
• Simplify/remove some code. (#261)
• selinux: release map key when call mcsDelete. (#263)

New Contributors

• @capnspacehook made their first contribution in #232
• @mschiff made their first contribution in #253
• @espadolini made their first contribution in #257

Full Changelog: v1.13.1...v1.14.0

v1.13.1

This release includes a minor update to reduce the minimum version
requirement of the github.com/cyphar/filepath-securejoin package from
v0.6.0 to v0.5.1. We did not use any of the newer features, so
downgrading is a no-op but will help with downstreams that need to
backport github.com/opencontainers/selinux updates.

What's Changed

• build(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #240
• downgrade github.com/cyphar/filepath-securejoin to v0.5.1 by @Luap99 in #242

New Contributors

• @Luap99 made their first contribution in #242

Full Changelog: v1.13.0...v1.13.1

v1.13.0

What's Changed

• Switch to golangci-lint v2 by @kolyshkin in #230
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #233
• build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #234
• keyring: fix typo in EACCES check by @cyphar in #235
• Add Go 1.25, drop go 1.23, bump golangci-lint by @kolyshkin in #236
• selinux: migrate to pathrs-lite procfs API by @cyphar in #237

Full Changelog: v1.12.0...v1.13.0

v1.12.0

This release removes deprecated functions from the label package,
and improves documentation and error reporting of SetCreateKey.

What's Changed

• VERSION: remove by @kolyshkin in #217
• CI: add AlmaLinux 8, CentOS Stream 9, and Fedora by @AkihiroSuda in #221
• ci: install git-core by @kolyshkin in #224
• CI: add openSUSE Tumbleweed by @AkihiroSuda in #223
• Bump Go version, deps, fix some linter issues... by @kolyshkin in #218
• label: remove deprecated stuff by @kolyshkin in #228
• Improve SetKeyCreate error reporting, fix test flakes by @kolyshkin in #227

Full Changelog: v1.11.1...v1.12.0

v1.11.1

What's Changed

• Bump to v1.11.0 by @rhatdan in #197
• fix some error by @ningmingxiao in #200
• ci: update Go 1.21 support by @michalbiesek in #202
• Extend build-cross target with riscv64 arch by @michalbiesek in #201
• Remove nolint annotations for unix errno comparisons by @kolyshkin in #203
• ci: bump some actions by @kolyshkin in #205
• Misc nitpicks by @kolyshkin in #206
• pwalk, pwalkdir: fix walk vs remove race by @kolyshkin in #204
• Update GitHub Actions CI Go matrix for Go v1.22 by @austinvazquez in #209
• Update GitHub Actions packages to resolve deprecation warnings. by @austinvazquez in #208
• Add dependabot config by @kolyshkin in #210
• build(deps): bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1 by @dependabot in #211
• build(deps): bump golangci/golangci-lint-action from 4 to 6 by @dependabot in #213
• Show SELinux label on failure by @rhatdan in #216

New Contributors

• @ningmingxiao made their first contribution in #200
• @michalbiesek made their first contribution in #202
• @dependabot made their first contribution in #211

Full Changelog: v1.11.0...v1.11.1

v1.11.0

What's Changed

• Bump to 1.10.2 by @rhatdan in #182
• gha: add go1.19, drop go1.16, update golangci-lint to v1.49 by @thaJeztah in #183
• go-selinux: remove redundant stub for DisableSecOpt() by @thaJeztah in #187
• remove vendor directory by @thaJeztah in #186
• go-selinux: remove fallbacks for go < 1.16 by @thaJeztah in #184
• pkg/pwalk: deprecate in favor of pkg/pwalkdir by @thaJeztah in #185
• go-selinux: some cleanup/refactor and improve test coverage by @thaJeztah in #190
• gha: also test and lint stubs by @thaJeztah in #189
• use filepath instead of path by @thaJeztah in #188
• golangci-lint: enable more linters and address linting issues by @thaJeztah in #191
• Adds MLSEnabled function. by @badochov in #192
• go-selinux: add coverage for LfileLabel, LsetFileLabel by @thaJeztah in #194
• Add Go 1.20 support; require Go 1.19; drop Go 1.17 and 1.18 by @austinvazquez in #195
• Add ability to set fscontext mounts points by @rhatdan in #196

New Contributors

• @badochov made their first contribution in #192
• @austinvazquez made their first contribution in #195

Full Changelog: v1.10.2...v1.11.0

v1.10.2

What's Changed

• Bump to v1.10.1 by @rhatdan in #174
• gha: update golangci-lint to v1.46, add Go 1.18, remove Go 1.15 by @thaJeztah in #179
• vendor: golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 by @thaJeztah in #178
• Allow relabeling of files/directories under /usr prefix by @rhatdan in #180
• selinux.Chcon should check legal rather then just label.Relabel by @rhatdan in #181
• If chcon fails, check if label is already correct by @rhatdan in #177

Full Changelog: v1.10.1...v1.10.2