From f4e535d839e3e2faab16db78932d177d2ad3b0fb Mon Sep 17 00:00:00 2001 From: eabdullin Date: Thu, 16 Nov 2023 09:34:24 +0000 Subject: [PATCH] import CS container-selinux-2.205.0-3.module_el8+717+c1ebe428 --- .container-selinux.metadata | 2 +- .gitignore | 2 +- SOURCES/container-selinux-1957904.patch | 12 ------ SPECS/container-selinux.spec | 57 ++++++++++++------------- 4 files changed, 30 insertions(+), 43 deletions(-) delete mode 100644 SOURCES/container-selinux-1957904.patch diff --git a/.container-selinux.metadata b/.container-selinux.metadata index c100dd6..6c05f0b 100644 --- a/.container-selinux.metadata +++ b/.container-selinux.metadata @@ -1 +1 @@ -8c77e6accb6094a6c33200d621a1905015bda784 SOURCES/v2.199.0.tar.gz +5964cc236c3aa8f5822d43ff0a18af173664cbf5 SOURCES/v2.205.0.tar.gz diff --git a/.gitignore b/.gitignore index d66226e..d4d313d 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/v2.199.0.tar.gz +SOURCES/v2.205.0.tar.gz diff --git a/SOURCES/container-selinux-1957904.patch b/SOURCES/container-selinux-1957904.patch deleted file mode 100644 index 9efeeea..0000000 --- a/SOURCES/container-selinux-1957904.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up container-selinux-2.163.0/container.te.orig container-selinux-2.163.0/container.te ---- container-selinux-2.163.0/container.te.orig 2021-06-16 16:14:04.107700701 +0200 -+++ container-selinux-2.163.0/container.te 2021-06-16 16:14:29.756010679 +0200 -@@ -454,7 +454,7 @@ modutils_domtrans_kmod(container_runtime - systemd_status_all_unit_files(container_runtime_domain) - systemd_start_systemd_services(container_runtime_domain) - systemd_dbus_chat_logind(container_runtime_domain) --systemd_chat_resolved(container_runtime_domain) -+#systemd_chat_resolved(container_runtime_domain) - - userdom_stream_connect(container_runtime_domain) - userdom_search_user_home_content(container_runtime_domain) diff --git a/SPECS/container-selinux.spec b/SPECS/container-selinux.spec index 53955f5..05bd33a 100644 --- a/SPECS/container-selinux.spec +++ b/SPECS/container-selinux.spec @@ -19,13 +19,12 @@ Epoch: 2 Name: container-selinux -Version: 2.199.0 -Release: 1%{?dist} +Version: 2.205.0 +Release: 3%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes Source0: %{git0}/archive/v%{version}.tar.gz -Patch1: container-selinux-1957904.patch BuildArch: noarch BuildRequires: git BuildRequires: pkgconfig(systemd) @@ -55,6 +54,17 @@ SELinux policy modules for use with container runtimes. %prep %autosetup -Sgit +sed -i 's/watch watch_reads//' container.if +sed -i '/sysfs_t:dir watch/d' container.te +sed -i '/systemd_chat_resolved/d' container.te +sed -i 's/man: install-policy/man:/' Makefile +sed -i 's/install: man/install:/' Makefile + +# https://github.com/containers/container-selinux/issues/203 +%if 0%{?fedora} <= 37 || 0%{?rhel} <= 9 +sed -i '/user_namespace/d' container.te +%endif + %build make @@ -112,34 +122,23 @@ fi %{_datadir}/udica/templates/* %changelog -* Wed Feb 08 2023 Jindrich Novy - 2:2.199.0-1 +* Tue May 02 2023 Jindrich Novy - 2:2.205.0-3 +- fix build for stable module +- Related: #2176055 + +* Fri Apr 14 2023 Jindrich Novy - 2:2.205.0-2 +- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg +- Related: #2176055 + +* Tue Mar 21 2023 Jindrich Novy - 2:2.205.0-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 +- remove user_namespace class, thanks to Lokesh Mandvekar +- Related: #2176055 + +* Tue Mar 14 2023 Jindrich Novy - 2:2.199.0-1 - revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) -- Related: #2123641 - -* Tue Feb 07 2023 Jindrich Novy - 2:2.200.0-1 -- update to https://github.com/containers/container-selinux/releases/tag/v2.200.0 -- Related: #2129766 - -* Mon Jan 30 2023 Jindrich Novy - 2:2.199.0-1 -- update to https://github.com/containers/container-selinux/releases/tag/v2.199.0 -- Related: #2129766 - -* Mon Jan 09 2023 Jindrich Novy - 2:2.198.0-1 -- update to https://github.com/containers/container-selinux/releases/tag/v2.198.0 -- Related: #2129766 - -* Wed Jan 04 2023 Jindrich Novy - 2:2.197.0-1 -- update to https://github.com/containers/container-selinux/releases/tag/v2.197.0 -- Related: #2129766 - -* Mon Jan 02 2023 Jindrich Novy - 2:2.195.1-1 -- update to https://github.com/containers/container-selinux/releases/tag/v2.195.1 -- Related: #2129766 - -* Mon Nov 28 2022 Jindrich Novy - 2:2.193.0-1 -- update to https://github.com/containers/container-selinux/releases/tag/v2.193.0 -- Related: #2129766 +- Related: #2176055 * Mon Oct 31 2022 Jindrich Novy - 2:2.191.0-1 - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0