rpms
/
containers-common
7
0
Fork 0
Code Issues Pull Requests Releases Activity

containers-common-1-12.el9 

- consume seccomp.json from the oldest vendored version of c/common,
  not main branch
- Related: #2000051

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
This commit is contained in:
Jindrich Novy 2021-11-16 21:55:05 +01:00
parent 5503be2140
commit d9fd99ed3d
2 changed files with 18 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
containers-common.spec
View File

@ -12,7 +12,7 @@
Epoch: 2 Epoch: 2
Name: containers-common Name: containers-common
Version: 1 Version: 1
Release: 11%{?dist} Release: 12%{?dist}
Summary: Common configuration and documentation for containers Summary: Common configuration and documentation for containers
License: ASL 2.0 License: ASL 2.0
BuildArch: noarch BuildArch: noarch
@ -36,7 +36,7 @@ Source4: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs
#Source5: https://raw.githubusercontent.com/containers/image/%%{image_branch}/registries.conf #Source5: https://raw.githubusercontent.com/containers/image/%%{image_branch}/registries.conf
Source5: registries.conf Source5: registries.conf
Source6: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-policy.json.5.md Source6: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-policy.json.5.md
Source7: https://raw.githubusercontent.com/containers/common/main/pkg/seccomp/seccomp.json Source7: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/seccomp/seccomp.json
Source8: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers-mounts.conf.5.md Source8: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers-mounts.conf.5.md
Source9: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-signature.5.md Source9: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-signature.5.md
Source10: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-transports.5.md Source10: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-transports.5.md
@ -160,6 +160,11 @@ EOF
%{_datadir}/rhel/secrets/* %{_datadir}/rhel/secrets/*
%changelog %changelog
* Tue Nov 16 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-12
- consume seccomp.json from the oldest vendored version of c/common,
not main branch
- Related: #2000051
* Fri Nov 12 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-11 * Fri Nov 12 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-11
- use ubi8/pause as ubi9/pause is not available yet - use ubi8/pause as ubi9/pause is not available yet
- Related: #2000051 - Related: #2000051

34
seccomp.json
View File

@ -1,7 +1,6 @@
{ {
"defaultAction": "SCMP_ACT_ERRNO", "defaultAction": "SCMP_ACT_ERRNO",
"defaultErrnoRet": 38, "defaultErrnoRet": 38,
"defaultErrno": "ENOSYS",
"archMap": [ "archMap": [
{ {
"architecture": "SCMP_ARCH_X86_64", "architecture": "SCMP_ARCH_X86_64",
@ -88,8 +87,7 @@
"comment": "", "comment": "",
"includes": {}, "includes": {},
"excludes": {}, "excludes": {},
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -653,8 +651,7 @@
"CAP_DAC_READ_SEARCH" "CAP_DAC_READ_SEARCH"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -697,8 +694,7 @@
"CAP_SYS_ADMIN" "CAP_SYS_ADMIN"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -727,8 +723,7 @@
"CAP_SYS_CHROOT" "CAP_SYS_CHROOT"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -763,8 +758,7 @@
"CAP_SYS_MODULE" "CAP_SYS_MODULE"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -793,8 +787,7 @@
"CAP_SYS_PACCT" "CAP_SYS_PACCT"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -831,8 +824,7 @@
"CAP_SYS_PTRACE" "CAP_SYS_PTRACE"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -863,8 +855,7 @@
"CAP_SYS_RAWIO" "CAP_SYS_RAWIO"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -899,8 +890,7 @@
"CAP_SYS_TIME" "CAP_SYS_TIME"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -929,8 +919,7 @@
"CAP_SYS_TTY_CONFIG" "CAP_SYS_TTY_CONFIG"
] ]
}, },
"errnoRet": 1, "errnoRet": 1
"errno": "EPERM"
}, },
{ {
"names": [ "names": [
@ -958,8 +947,7 @@
"CAP_AUDIT_WRITE" "CAP_AUDIT_WRITE"
] ]
}, },
"errnoRet": 22, "errnoRet": 22
"errno": "EINVAL"
}, },
{ {
"names": [ "names": [