statically linked app can execute untrusted app
Starting manually fapolicyd while the service is already running breaks the system
Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
fapolicyd: Introduce filtering of rpmdb

rebase fapolicyd to the latest stable vesion
fapolicyd does not correctly handle SIGHUP
fapolicyd often breaks package updates
drop libgcrypt in favour of openssl
fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
fapolicyd gets way too easily killed by OOM killer
compiled.rules file ownership and mode
Faulty handling of static applications
Introduce ppid rule attribute
CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]

rebase to 1.1
introduce rules.d feature
remove pretrans scriptlet

rebase to 1.0.4
added rpm_sha256_only option
added trust.d directory
allow file names with whitespace in trust files
use full paths in trust files
fix libc.so getting identified as application/x-executable
fix fapolicyd-dnf-plugin reporting as '<invalid>'
fix selinux DSP module definition in spec file

fapolicyd abnormally exits by executing sosreport
fixed multiple problems with unlink()
fapolicyd breaks system upgrade, leaving system in dead state - complete fix

rebase to 1.0.2
strong dependency on rpm/rpm-plugin-fapolicyd
installed dnf-plugin is dummy and we are not using it anymore
enabled integrity setting
added make check
Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
fixed java detection
dnf update fails when fapolicyd is enabled
fapolicyd breaks system upgrade, leaving system in dead state - complete fix

fixed manpage fapolicyd-conf

rebase to v1.0
installed multiple policies to /usr/share/fapolicyd
known-libs (default)
restrictive
installed fapolicyd.trust file
enhanced fapolicyd-cli
introduced fapolicyd-selinux that provides SELinux policy module

fixed possible heap buffer overflow in elf parser

fixed build time python interpreter detection (spec)
added python2-devel as a BuildRequires (spec)
allow running bash scripts in home directories

rebase to v0.9.1
updated default configuration with new syntax
removed daemon mounts configuration
default fapolicyd policy prevents Ansible from running
added ansible rule to default ruleset
suspicious logs on service start
fapolicyd blocks dracut from generating initramfs
added dracut rule to default configuration
fapolicyd fails to identify perl interpreter

added missing manpage for fapolicyd-cli

Convert hashes to lowercase like sha256sum outputs
Stop littering STDOUT output for dnf plugin in fapolicyd

new upstream release

New upstream release
imported from fedora30

backport some patches to resolve dac_override for fapolicyd