Faulty handling of static applications

CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path

fapolicyd denies access to /usr/lib64/ld-2.28.so

rebase to 1.1
introduce rules.d feature
remove pretrans scriptlet

rebase to 1.0.4
added rpm_sha256_only option
added trust.d directory
allow file names with whitespace in trust files
use full paths in trust files
fix libc.so getting identified as application/x-executable
fix fapolicyd-dnf-plugin reporting as '<invalid>'
fix selinux DSP module definition in spec file

fapolicyd abnormally exits by executing sosreport
fixed multiple problems with unlink()
fapolicyd breaks system upgrade, leaving system in dead state - complete fix

rebase to 1.0.2
strong dependency on rpm/rpm-plugin-fapolicyd
installed dnf-plugin is dummy and we are not using it anymore
enabled integrity setting
added make check
Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
fixed java detection
dnf update fails when fapolicyd is enabled
fapolicyd breaks system upgrade, leaving system in dead state - complete fix

fixed manpage fapolicyd-conf

rebase to v1.0
installed multiple policies to /usr/share/fapolicyd
known-libs (default)
restrictive
installed fapolicyd.trust file
enhanced fapolicyd-cli
introduced fapolicyd-selinux that provides SELinux policy module

fixed possible heap buffer overflow in elf parser

fixed build time python interpreter detection (spec)
added python2-devel as a BuildRequires (spec)
allow running bash scripts in home directories

rebase to v0.9.1
updated default configuration with new syntax
removed daemon mounts configuration
default fapolicyd policy prevents Ansible from running
added ansible rule to default ruleset
suspicious logs on service start
fapolicyd blocks dracut from generating initramfs
added dracut rule to default configuration
fapolicyd fails to identify perl interpreter

added missing manpage for fapolicyd-cli

Convert hashes to lowercase like sha256sum outputs
Stop littering STDOUT output for dnf plugin in fapolicyd

new upstream release

New upstream release
imported from fedora30