--- trunk/1.6.x/ccs-patch/README.ccs	2009/03/05 01:08:58	2223
+++ trunk/1.6.x/ccs-patch/README.ccs	2009/04/06 05:24:05	2393
@@ -1804,10 +1804,6 @@
       As remove_arg_zero() uses kmap_atomic(KM_USER0), I modified to use
       kmap_atomic(KM_USER0) rather than kmap().
 
-    @ Relocate definitions and functions.
-
-      To reduce exposed symbols, I relocated some definitions and functions.
-
 Fix 2009/01/28
 
     @ Fix "allow_read" + "allow_write" != "allow_read/write" problem.
@@ -1836,4 +1832,82 @@
       MAX_REJECT_LOG=0 , I undeleted CONFIG_TOMOYO_AUDIT option for saving
       memory used for /proc/ccs/grant_log and /proc/ccs/reject_log interfaces.
 
-Version 1.6.7 2009/??/??   Feature enhancement release.
+Fix 2009/03/13
+
+    @ Show only profile entry names ever specified.
+
+      Even if an administrator specifies only COMMENT= and MAC_FOR_FILE=
+      entries for /proc/ccs/profile , all available profile entries are shown.
+      This was designed to help administrators to know what entries are
+      available, but sometimes makes administrators feel noisy because of
+      entries showing default values.
+
+      Thus, I modified to show only profile entry names ever specified.
+
+Fix 2009/03/18
+
+    @ Add MAC_FOR_IOCTL functionality.
+
+      To be able to restrict ioctl() requests, I added MAC_FOR_IOCTL
+      functionality.
+
+      This functionality requires modification of ccs-patch-\*.diff .
+
+    @ Use better name for socket's pathname.
+
+      Until now, socket's pathname was represented as "socket:[\$]" format
+      where \$ is inode's number. But inode's number is useless for name based
+      access control. Therefore, I modified to represent socket's pathname as
+      "socket:[family=\$:type=\$:protocol=\$]" format.
+
+      This will help administrator to control ioctl() against sockets more
+      precisely.
+
+    @ Fix misplaced ccs_capable() call.  (only 2.6.8-\* and 2.6.9-\*)
+
+      Location to insert ccs_capable(TOMOYO_SYS_IOCTL) in sys_ioctl() was
+      wrong since version 1.1 .
+
+    @ Insert ccs_check_ioctl_permission() call.
+
+      To make MAC_FOR_IOCTL functionality working, I inserted
+      ccs_check_ioctl_permission() call into ccs-patch-\*.diff .
+
+Fix 2009/03/23
+
+    @ Move sysctl()'s check from ccs-patch-\*.diff to fs/tomoyo_file.c .
+
+      Since try_parse_table() in kernel/sysctl.c is almost identical between
+      all versions, I moved that function to fs/tomoyo_file.c .
+
+    @ Relocate definitions and functions.
+
+      To reduce exposed symbols, I relocated some definitions and functions.
+
+Fix 2009/03/24
+
+    @ Add CONFIG_TOMOYO_BUILTIN_INITIALIZERS option.
+
+      Some systems don't have /sbin/modprobe and /sbin/hotplug .
+      Thus, I made these pathnames configurable.
+
+Version 1.6.7 2009/04/01   Feature enhancement release.
+
+Fix 2009/04/06
+
+    @ Drop "undelete domain" command.
+
+      I added "undelete domain" command on 2007/01/19, but never used by policy
+      management tools. The garbage collector I added on 2007/01/29 will
+      automatically reuse memory and allow administrators switch domain policy
+      periodically, provided that the administrators kills processes in old
+      domains before recreating new domains with the same domainnames.
+
+      Thus, I dropped "undelete domain" command.
+
+    @ Escape invalid characters in ccs_check_mount_permission2().
+
+      ccs_check_mount_permission2() was passing unencoded strings to printk()
+      and ccs_update_mount_acl() and ccs_check_supervisor(). This may cause
+      /proc/ccs/system_policy and /proc/ccs/query to contain invalid
+      characters within a string.