From a8518096d50abc7a2dc108e050d9b10d7e42efb5 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Tue, 9 Jan 2018 09:30:05 -0500 Subject: [PATCH] Allow container_runtime_t to use user ttys Fixes bounds check for container_t --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index cc777fe..9489df1 100644 --- a/.gitignore +++ b/.gitignore @@ -32,3 +32,4 @@ /container-selinux-8ba32a4.tar.gz /container-selinux-26c642a.tar.gz /container-selinux-96e58bf.tar.gz +/container-selinux-599072a.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index bf0ac61..a0a357a 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/projectatomic/container-selinux %if 0%{?fedora} || 0%{?rhel} > 7 -%global commit0 96e58bf7fd152f24f6b95efc156d8cbb4446c354 +%global commit0 599072a930b995ba13ca7a4a6add7e808aa9b01f %else # use upstream's RHEL-1.12 branch for CentOS 7 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1 @@ -35,7 +35,7 @@ Name: container-selinux %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7 Epoch: 2 %endif -Version: 2.39 +Version: 2.40 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -117,6 +117,10 @@ fi %{_datadir}/selinux/* %changelog +* Tue Jan 9 2018 Dan Walsh - 2.40-1 +- Allow container_runtime_t to use user ttys +- Fixes bounds check for container_t + * Mon Jan 8 2018 Dan Walsh - 2.39-1 - Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t. diff --git a/sources b/sources index c291f4b..4135ee4 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-96e58bf.tar.gz) = d496b4ba8aa1c47b47dbed644b9d8a9e97e154814b878280929108609820aa30b00aa6dba37edc83568fcd8c82343b82fae642db6c18e2deddfaf499cc8276c5 +SHA512 (container-selinux-599072a.tar.gz) = d3b21648444c83623b952ce08e4317f1400c6e2ed54923512e6e8fafdf2abd539d85d4e1e5c9f19144666bb2792ca991a3f77f6f7e9b927a5869c4be16324684