selinux: 2.4 to 2.5 compatibility report

Test Info

Library Name	selinux
Version #1	2.4
Version #2	2.5
CPU Type	x86_64
GCC Version	5.3.1
Subject	Binary Compatibility

Test Results

Total Header Files	75
Total Shared Libraries	3
Total Symbols / Types	699 / 291
Verdict	Incompatible (0.6%)

Problem Summary

	Severity	Count
Added Symbols	-	16
Removed Symbols	High	0
Problems with Data Types	High	0
	Medium	0
	Low	0
Problems with Symbols	High	4
	Medium	1
	Low	2
Problems with Constants	Low	1
Other Changes in Constants	-	23

Added Symbols (16)

cil.h, libsepol.so.1
cil_set_mls ( cil_db_t* db, int mls ) @@ LIBSEPOL_1.1
cil_set_policy_version ( cil_db_t* db, int policy_version ) @@ LIBSEPOL_1.1
cil_set_target_platform ( cil_db_t* db, int target_platform ) @@ LIBSEPOL_1.1

label.h, libselinux.so.1
selabel_cmp ( struct selabel_handle* h1, struct selabel_handle* h2 )
selabel_digest ( struct selabel_handle* rec, unsigned char** digest, size_t* digest_len, char*** specfiles, size_t* num_specfiles )
selabel_lookup_best_match ( struct selabel_handle* rec, char** con, char const* key, char const** aliases, int type )
selabel_lookup_best_match_raw ( struct selabel_handle* rec, char** con, char const* key, char const** aliases, int type )
selabel_partial_match ( struct selabel_handle* handle, char const* key )

module_to_cil.h, libsepol.so.1
sepol_module_package_to_cil ( FILE* fp, struct sepol_module_package* mod_pkg ) @@ LIBSEPOL_1.1
sepol_module_policydb_to_cil ( FILE* fp, struct policydb* pdb, int linked ) @@ LIBSEPOL_1.1
sepol_ppfile_to_module_package ( FILE* fp, struct sepol_module_package** mod_pkg ) @@ LIBSEPOL_1.1

modules.h, libsemanage.so.1
semanage_module_extract ( semanage_handle_t* sh, semanage_module_key_t* modkey, int extract_cil, void** mapped_data, size_t* data_len, semanage_module_info_t** modinfo ) @@ LIBSEMANAGE_1.1

restorecon.h, libselinux.so.1
selinux_restorecon ( char const* pathname, unsigned int restorecon_flags )
selinux_restorecon_default_handle ( )
selinux_restorecon_set_exclude_list ( char const** exclude_list )
selinux_restorecon_set_sehandle ( struct selabel_handle* hndl )

to the top

Problems with Symbols, High Severity (4)

	Change	Effect
1	The pointer level of 2nd parameter sepol_db has been increased from 1 to 2.	The library function may try to access unallocated memory by the dereferencing of old parameter value and therefore cause a crash of applications.

	Change	Effect
1	2nd middle parameter sepol_db has been removed from the calling stack.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.

	Change	Effect
1	2nd middle parameter sepol_db has been removed from the calling stack.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.

	Change	Effect
1	2nd middle parameter sepol_db has been removed from the calling stack.	Layout of parameter's stack has been changed and therefore parameters at higher positions in the stack may be incorrectly initialized by applications.

cil.h, libsepol.so.1
[+] cil_build_policydb ( cil_db_t* db, sepol_policydb_t* sepol_db ) (1)
[+] cil_filecons_to_string ( cil_db_t* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) (1)
[+] cil_selinuxusers_to_string ( cil_db_t* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) (1)
[+] cil_userprefixes_to_string ( cil_db_t* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) (1)

to the top

Problems with Symbols, Medium Severity (1)

	Change	Effect
1	2nd parameter sepol_db has been removed from the calling stack.	This parameter will be ignored by the function.

cil.h, libsepol.so.1
[+] cil_compile ( cil_db_t* db, sepol_policydb_t* sepol_db ) (1)

to the top

Problems with Symbols, Low Severity (2)

	Change	Effect
1	Type of 2nd parameter sepol_db has been changed from sepol_policydb_t* to sepol_policydb_t**.	Replacement of parameter data type may indicate a change in its semantic meaning.

	Change	Effect
1	Type of 2nd parameter opts has been changed from struct selinux_opt* to struct selinux_opt const*.	Replacement of parameter data type may indicate a change in its semantic meaning.

cil.h, libsepol.so.1
[+] cil_build_policydb ( cil_db_t* db, sepol_policydb_t* sepol_db ) (1)

label.h, libselinux.so.1
[+] selabel_open ( unsigned int backend, struct selinux_opt* opts, unsigned int nopts ) (1)

to the top

Problems with Constants, Low Severity (1)

	Change	Effect
1	The value of constant SELABEL_NOPT has been changed from 5 to 6.	Applications will pass an old value of this constant as the parameter to the new-version library functions, that expect a new one. This may result in crash of incorrect behavior of applications.

label.h
[+] SELABEL_NOPT

to the top

Other Changes in Constants (23)

	Change	Effect
1	The constant AVTAB_XPERMS_ALLOWED with value 0x0100 has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_AUDITALLOW with value 0x0200 has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_DONTAUDIT with value 0x0400 has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_IOCTLDRIVER with value 0x02 has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_IOCTLFUNCTION with value 0x01 has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_NEVERALLOW with value 0x0800 has been added.	No effect.

	Change	Effect
1	The constant SELABEL_OPT_DIGEST with value 5 has been added.	No effect.

	Change	Effect
1	The constant AVRULE_XPERMS_ALLOWED with value 0x0100 has been added.	No effect.

	Change	Effect
1	The constant AVRULE_XPERMS_AUDITALLOW with value 0x0200 has been added.	No effect.

	Change	Effect
1	The constant AVRULE_XPERMS_DONTAUDIT with value 0x0400 has been added.	No effect.

	Change	Effect
1	The constant AVRULE_XPERMS_IOCTLDRIVER with value 0x02 has been added.	No effect.

	Change	Effect
1	The constant AVRULE_XPERMS_IOCTLFUNCTION with value 0x01 has been added.	No effect.

	Change	Effect
1	The constant AVRULE_XPERMS_NEVERALLOW with value 0x0800 has been added.	No effect.

	Change	Effect
1	The constant EXTENDED_PERMS_LEN with value 8 has been added.	No effect.

	Change	Effect
1	The constant OCON_XEN_DEVICETREE with value 5 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_IGNORE_DIGEST with value 1 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_NOCHANGE with value 2 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_PROGRESS with value 32 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_REALPATH with value 64 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_RECURSE with value 8 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_SET_SPECFILE_CTX with value 4 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_VERBOSE with value 16 has been added.	No effect.

	Change	Effect
1	The constant SELINUX_RESTORECON_XDEV with value 128 has been added.	No effect.

avtab.h
[+] AVTAB_XPERMS_ALLOWED
[+] AVTAB_XPERMS_AUDITALLOW
[+] AVTAB_XPERMS_DONTAUDIT
[+] AVTAB_XPERMS_IOCTLDRIVER
[+] AVTAB_XPERMS_IOCTLFUNCTION
[+] AVTAB_XPERMS_NEVERALLOW

label.h
[+] SELABEL_OPT_DIGEST

policydb.h
[+] AVRULE_XPERMS_ALLOWED
[+] AVRULE_XPERMS_AUDITALLOW
[+] AVRULE_XPERMS_DONTAUDIT
[+] AVRULE_XPERMS_IOCTLDRIVER
[+] AVRULE_XPERMS_IOCTLFUNCTION
[+] AVRULE_XPERMS_NEVERALLOW
[+] EXTENDED_PERMS_LEN
[+] OCON_XEN_DEVICETREE

restorecon.h
[+] SELINUX_RESTORECON_IGNORE_DIGEST
[+] SELINUX_RESTORECON_NOCHANGE
[+] SELINUX_RESTORECON_PROGRESS
[+] SELINUX_RESTORECON_REALPATH
[+] SELINUX_RESTORECON_RECURSE
[+] SELINUX_RESTORECON_SET_SPECFILE_CTX
[+] SELINUX_RESTORECON_VERBOSE
[+] SELINUX_RESTORECON_XDEV

to the top

Header Files (75)

av_permissions.h
avc.h
avrule_block.h
avtab.h
booleans.h
booleans_active.h
booleans_local.h
booleans_policy.h
cil.h
conditional.h
constraint.h
ebitmap.h
errcodes.h
expand.h
fcontext_record.h
fcontexts_local.h
fcontexts_policy.h
flask_types.h
get_context_list.h
get_default_type.h
hashtab.h
hierarchy.h
interfaces.h
interfaces_local.h
interfaces_policy.h
label.h
link.h
mls_types.h
module.h
modules.h
nodes.h
nodes_local.h
nodes_policy.h
polcaps.h
policydb.h
module.h (policydb/module.h)
policydb.h (policydb/policydb.h)
ports.h
ports_local.h
ports_policy.h
roles.h
selinux.h
context.h (selinux/context.h)
flask.h (selinux/flask.h)
semanage.h
boolean_record.h (semanage/boolean_record.h)
context_record.h (semanage/context_record.h)
debug.h (semanage/debug.h)
handle.h (semanage/handle.h)
iface_record.h (semanage/iface_record.h)
node_record.h (semanage/node_record.h)
port_record.h (semanage/port_record.h)
user_record.h (semanage/user_record.h)
sepol.h
boolean_record.h (sepol/boolean_record.h)
context.h (sepol/context.h)
context_record.h (sepol/context_record.h)
debug.h (sepol/debug.h)
handle.h (sepol/handle.h)
iface_record.h (sepol/iface_record.h)
node_record.h (sepol/node_record.h)
context.h (sepol/policydb/context.h)
flask.h (sepol/policydb/flask.h)
port_record.h (sepol/port_record.h)
user_record.h (sepol/user_record.h)
services.h
seuser_record.h
seusers_local.h
seusers_policy.h
sidtab.h
symtab.h
users.h
users_local.h
users_policy.h
util.h

to the top

Shared Libraries (3)

libselinux.so.1
libsemanage.so.1
libsepol.so.1

to the top

Test Info

Library Name	selinux
Version #1	2.4
Version #2	2.5
CPU Type	x86_64
GCC Version	5.3.1
Subject	Source Compatibility

Test Results

Total Header Files	75
Total Shared Libraries	3
Total Symbols / Types	720 / 311
Verdict	Incompatible (0.6%)

Problem Summary

	Severity	Count
Added Symbols	-	16
Removed Symbols	High	0
Problems with Data Types	High	0
	Medium	0
	Low	0
Problems with Symbols	High	3
	Medium	2
	Low	2
Problems with Constants	Low	2
Other Changes in Constants	-	27

Added Symbols (16)

cil.h
cil_set_mls ( cil_db_t* db, int mls )
cil_set_policy_version ( cil_db_t* db, int policy_version )
cil_set_target_platform ( cil_db_t* db, int target_platform )

label.h
selabel_cmp ( struct selabel_handle* h1, struct selabel_handle* h2 )
selabel_digest ( struct selabel_handle* rec, unsigned char** digest, size_t* digest_len, char*** specfiles, size_t* num_specfiles )
selabel_lookup_best_match ( struct selabel_handle* rec, char** con, char const* key, char const** aliases, int type )
selabel_lookup_best_match_raw ( struct selabel_handle* rec, char** con, char const* key, char const** aliases, int type )
selabel_partial_match ( struct selabel_handle* handle, char const* key )

module_to_cil.h
sepol_module_package_to_cil ( FILE* fp, struct sepol_module_package* mod_pkg )
sepol_module_policydb_to_cil ( FILE* fp, struct policydb* pdb, int linked )
sepol_ppfile_to_module_package ( FILE* fp, struct sepol_module_package** mod_pkg )

modules.h
semanage_module_extract ( semanage_handle_t* sh, semanage_module_key_t* modkey, int extract_cil, void** mapped_data, size_t* data_len, semanage_module_info_t** modinfo )

restorecon.h
selinux_restorecon ( char const* pathname, unsigned int restorecon_flags )
selinux_restorecon_default_handle ( )
selinux_restorecon_set_exclude_list ( char const** exclude_list )
selinux_restorecon_set_sehandle ( struct selabel_handle* hndl )

to the top

Problems with Symbols, High Severity (3)

	Change	Effect
1	2nd middle parameter sepol_db has been removed from the calling stack.	Recompilation of a client program may be broken.

	Change	Effect
1	2nd middle parameter sepol_db has been removed from the calling stack.	Recompilation of a client program may be broken.

	Change	Effect
1	2nd middle parameter sepol_db has been removed from the calling stack.	Recompilation of a client program may be broken.

cil.h
[+] cil_filecons_to_string ( cil_db_t* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) (1)
[+] cil_selinuxusers_to_string ( cil_db_t* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) (1)
[+] cil_userprefixes_to_string ( cil_db_t* db, sepol_policydb_t* sepol_db, char** out, size_t* size ) (1)

to the top

Problems with Symbols, Medium Severity (2)

	Change	Effect
1	The pointer level of 2nd parameter sepol_db has been increased from 1 to 2.	Recompilation of a client program may be broken.

	Change	Effect
1	2nd parameter sepol_db has been removed from the calling stack.	Recompilation of a client program may be broken.

cil.h
[+] cil_build_policydb ( cil_db_t* db, sepol_policydb_t* sepol_db ) (1)
[+] cil_compile ( cil_db_t* db, sepol_policydb_t* sepol_db ) (1)

to the top

Problems with Symbols, Low Severity (2)

	Change	Effect
1	Type of 2nd parameter sepol_db has been changed from sepol_policydb_t* to sepol_policydb_t**.	Recompilation of a client program may be broken.

	Change	Effect
1	Type of 2nd parameter opts has been changed from struct selinux_opt* to struct selinux_opt const*.	Recompilation of a client program may be broken.

cil.h
[+] cil_build_policydb ( cil_db_t* db, sepol_policydb_t* sepol_db ) (1)

label.h
[+] selabel_open ( unsigned int backend, struct selinux_opt* opts, unsigned int nopts ) (1)

to the top

Problems with Constants, Low Severity (2)

	Change	Effect
1	The value of constant SELABEL_NOPT has been changed from 5 to 6.	Recompilation of a client program may be broken.

	Change	Effect
1	The value of constant POLICYDB_VERSION_MAX has been changed from 29 to 30.	Recompilation of a client program may be broken.

label.h
[+] SELABEL_NOPT

policydb.h
[+] POLICYDB_VERSION_MAX

to the top

Other Changes in Constants (27)

	Change	Effect
1	The constant AVTAB_XPERMS with value (AVTAB_XPERMS_ALLOWED \| AVTAB_XPERMS_AUDITALLOW \| AVTAB_XPERMS_DONTAUDIT) has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_ALLOWED with value 0x0100 has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_AUDITALLOW with value 0x0200 has been added.	No effect.

	Change	Effect
1	The constant AVTAB_XPERMS_DONTAUDIT with value 0x0400 has been added.	No effect.

avtab.h
[+] AVTAB_XPERMS
[+] AVTAB_XPERMS_ALLOWED
[+] AVTAB_XPERMS_AUDITALLOW
[+] AVTAB_XPERMS_DONTAUDIT
[+] AVTAB_XPERMS_IOCTLDRIVER
[+] AVTAB_XPERMS_IOCTLFUNCTION
[+] AVTAB_XPERMS_NEVERALLOW

label.h
[+] SELABEL_OPT_DIGEST

policydb.h
[+] AVRULE_XPERMS
[+] AVRULE_XPERMS_ALLOWED
[+] AVRULE_XPERMS_AUDITALLOW
[+] AVRULE_XPERMS_DONTAUDIT
[+] AVRULE_XPERMS_IOCTLDRIVER
[+] AVRULE_XPERMS_IOCTLFUNCTION
[+] AVRULE_XPERMS_NEVERALLOW
[+] EXTENDED_PERMS_LEN
[+] OCON_XEN_DEVICETREE
[+] POLICYDB_VERSION_XEN_DEVICETREE
[+] POLICYDB_VERSION_XPERMS_IOCTL

restorecon.h
[+] SELINUX_RESTORECON_IGNORE_DIGEST
[+] SELINUX_RESTORECON_NOCHANGE
[+] SELINUX_RESTORECON_PROGRESS
[+] SELINUX_RESTORECON_REALPATH
[+] SELINUX_RESTORECON_RECURSE
[+] SELINUX_RESTORECON_SET_SPECFILE_CTX
[+] SELINUX_RESTORECON_VERBOSE
[+] SELINUX_RESTORECON_XDEV

to the top

Header Files (75)

to the top

Shared Libraries (3)

libselinux.so.1
libsemanage.so.1
libsepol.so.1

to the top

API compatibility report for the selinux library between 2.4 and 2.5 versions on x86_64

Test Info

Test Results

Problem Summary

Added Symbols (16)

Problems with Symbols, High Severity (4)

Problems with Symbols, Medium Severity (1)

Problems with Symbols, Low Severity (2)

Problems with Constants, Low Severity (1)

Other Changes in Constants (23)

Header Files (75)

Shared Libraries (3)

Test Info

Test Results

Problem Summary

Added Symbols (16)

Problems with Symbols, High Severity (3)

Problems with Symbols, Medium Severity (2)

Problems with Symbols, Low Severity (2)

Problems with Constants, Low Severity (2)

Other Changes in Constants (27)

Header Files (75)

Shared Libraries (3)