import container-selinux-2.162.0-1.module+el8.4.0+11311+9da8acfb
This commit is contained in:
parent
11d3e4835f
commit
7fcc636bb7
|
@ -1 +1 @@
|
|||
bb18101c1ab06b47a88b51df2fd87dcfa3d51412 SOURCES/v2.158.0.tar.gz
|
||||
9f59d0fd517d036e7169de7ebc2fcc3a65bcdbff SOURCES/v2.162.0.tar.gz
|
||||
|
|
|
@ -1 +1 @@
|
|||
SOURCES/v2.158.0.tar.gz
|
||||
SOURCES/v2.162.0.tar.gz
|
||||
|
|
|
@ -0,0 +1,12 @@
|
|||
diff -up container-selinux-2.161.1/container.te.orig container-selinux-2.161.1/container.te
|
||||
--- container-selinux-2.161.1/container.te.orig 2021-05-06 14:55:57.952216763 +0200
|
||||
+++ container-selinux-2.161.1/container.te 2021-05-06 14:56:02.027287991 +0200
|
||||
@@ -114,7 +114,7 @@ mls_trusted_object(container_runtime_t)
|
||||
#
|
||||
allow container_runtime_domain self:capability { chown kill fowner fsetid mknod net_admin net_bind_service net_raw setfcap sys_resource };
|
||||
allow container_runtime_domain self:tun_socket { create_socket_perms relabelto };
|
||||
-allow container_runtime_domain self:lockdown { confidentiality integrity };
|
||||
+#allow container_runtime_domain self:lockdown { confidentiality integrity };
|
||||
allow container_runtime_domain self:process ~setcurrent;
|
||||
allow container_runtime_domain self:passwd rootok;
|
||||
allow container_runtime_domain self:fd use;
|
|
@ -19,12 +19,13 @@
|
|||
|
||||
Epoch: 2
|
||||
Name: container-selinux
|
||||
Version: 2.158.0
|
||||
Version: 2.162.0
|
||||
Release: 1%{?dist}
|
||||
License: GPLv2
|
||||
URL: %{git0}
|
||||
Summary: SELinux policies for container runtimes
|
||||
Source0: %{git0}/archive/v%{version}.tar.gz
|
||||
Patch0: rhel-fix.patch
|
||||
BuildArch: noarch
|
||||
BuildRequires: git
|
||||
BuildRequires: pkgconfig(systemd)
|
||||
|
@ -106,6 +107,23 @@ fi
|
|||
%{_datadir}/containers/selinux/contexts
|
||||
|
||||
%changelog
|
||||
* Tue May 11 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
|
||||
- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
|
||||
- Related: #1954702
|
||||
|
||||
* Thu May 06 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-2
|
||||
- do not use lockdown class yet - it is not available in RHEL
|
||||
- Related: #1954702
|
||||
|
||||
* Thu May 06 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-1
|
||||
- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1
|
||||
- Related: #1954702
|
||||
|
||||
* Thu Apr 29 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.160.2-1
|
||||
- update to
|
||||
https://github.com/containers/container-selinux/releases/tag/v2.160.2
|
||||
- Related: #1954702
|
||||
|
||||
* Fri Feb 12 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
|
||||
- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
|
||||
- Related: #1883490
|
||||
|
|
Loading…
Reference in New Issue