rpms/fapolicyd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
25 Commits 7 Branches 50 Tags 369 KiB
555b15cb6a
Commit Graph

25 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Radovan Sroka
555b15cb6a RHEL 9.2.0 ERRATUM 
- statically linked app can execute untrusted app
Resolves: rhbz#2097077
- fapolicyd ineffective with systemd DynamicUser=yes
Resolves: rhbz#2136802
- Starting manually fapolicyd while the service is already running breaks the system
Resolves: rhbz#2160517
- Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
Resolves: rhbz#2160518
- fapolicyd: Introduce filtering of rpmdb
Resolves: RHEL-192

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2023-01-30 12:15:07 +01:00
Radovan Sroka
cb1e3ca81e RHEL 9.2.0 ERRATUM 
- statically linked app can execute untrusted app
Resolves: rhbz#2097077
- fapolicyd ineffective with systemd DynamicUser=yes
Resolves: rhbz#2136802
- Starting manually fapolicyd while the service is already running breaks the system
Resolves: rhbz#2160517
- Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
Resolves: rhbz#2160518

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2023-01-13 15:07:23 +01:00
Radovan Sroka
1c06afb128 RHEL 9.1.0 ERRATUM 
- rebase fapolicyd to the latest stable vesion
Resolves: rhbz#2100041
- fapolicyd gets way too easily killed by OOM killer
Resolves: rhbz#2097385
- fapolicyd does not correctly handle SIGHUP
Resolves: rhbz#2070655
- Introduce ppid rule attribute
Resolves: rhbz#2102558
- fapolicyd often breaks package updates
Resolves: rhbz#2111244
- drop libgcrypt in favour of openssl
Resolves: rhbz#2111938
- Remove dnf plugin
Resolves: rhbz#2113959
- fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
Resolves: rhbz#2115849

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2022-08-05 20:04:16 +02:00
Radovan Sroka
f9014707a8 RHEL 9.1.0 ERRATUM 
- rebase fapolicyd to the latest stable vesion
Resolves: rhbz#2100041
- fapolicyd gets way too easily killed by OOM killer
Resolves: rhbz#2097385
- fapolicyd does not correctly handle SIGHUP
Resolves: rhbz#2070655
- Introduce ppid rule attribute
Resolves: rhbz#2102558

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2022-06-30 10:56:36 +02:00
Radovan Sroka
2dc7eac9a4 Rebase to 1.1.3 
- rebase fapolicyd to the latest stable vesion
Resolves: rhbz#2100041
- fapolicyd gets way too easily killed by OOM killer
Resolves: rhbz#2097385
- fapolicyd does not correctly handle SIGHUP
Resolves: rhbz#2070655

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2022-06-22 11:25:32 +02:00
Radovan Sroka
586b5e37fd RHEL 9.1.0 ERRATUM 
- CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
Resolves: rhbz#2069123
- Faulty handling of static applications
Resolves: rhbz#2096457

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2022-06-16 17:20:05 +02:00
Radovan Sroka
c17d1d3f6b
RHEL 9.1.0 ERRATUM 
- fapolicyd denies access to /usr/lib64/ld-2.28.so
Resolves: rhbz#2067493

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2022-04-03 21:39:08 +02:00
Radovan Sroka
04a7a9e4fd RHEL 9.0.0 ERRATUM 
- rebase to 1.1
Resolves: rhbz#2032408
- introduce rules.d
Resolves: rhbz#2054740
- remove pretrans scriptlet
Resolves: rhbz#2051481
 2022-02-16 13:07:05 +01:00
Zoltan Fridrich
f8d6e274ed Expand libc detection 
Resolves: rhbz#2015307
 2021-12-15 14:13:56 +01:00
Zoltan Fridrich
2a6f4bfe17 RHEL 9.0.0 ERRATUM 
- rebase to 1.0.4
- added rpm_sha256_only option
- added trust.d directory
- allow file names with whitespace in trust files
- use full paths in trust files
Resolves: rhbz#2032408
- fix libc.so getting identified as application/x-executable
Resolves: rhbz#2015307
- fix selinux DSP module definition in spec file
Resolves: rhbz#2014449
 2021-12-14 14:41:36 +01:00
Mohan Boddu
94d469413b Rebuilt for IMA sigs, glibc 2.34, aarch64 flags 
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-08-09 19:58:20 +00:00
Radovan Sroka
85fa1e88aa
RHEL 9 BETA 
- SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm

Resolves: rhbz#1932225
Resolves: rhbz#1977731

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2021-07-21 14:43:14 +02:00
Mohan Boddu
421ab1fe32 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-04-15 23:16:36 +00:00
Radovan Sroka
f0c988fb1f
Added gating.yaml 
Signed-off-by: Radovan Sroka <rsroka@redhat.com>
 2021-04-14 19:03:01 +02:00
DistroBaker
725d3a69e0 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#183a7e15ec6b1052a7ea3c3036840c7578e6776b
 2021-04-05 01:40:17 +00:00
DistroBaker
267a5f545a Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#45492d59f0d1183fa53845481b27aa63144ae916
 2021-02-03 13:29:22 +01:00
DistroBaker
0bb6d6b250 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#3cdc28b4cb1782f602f06baf8e13930aeb1532af
 2021-01-06 17:18:47 +00:00
DistroBaker
684492f45f Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#e97bf03c73d2c8506a48834444c8e7b4c4d4f55d
 2020-12-04 17:01:56 +01:00
DistroBaker
ee245d148a Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#e97bf03c73d2c8506a48834444c8e7b4c4d4f55d
 2020-11-24 03:57:28 +01:00
DistroBaker
9d34ad79d0 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#e97bf03c73d2c8506a48834444c8e7b4c4d4f55d
 2020-11-20 15:57:23 +00:00
DistroBaker
2760a2be5f Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#e97bf03c73d2c8506a48834444c8e7b4c4d4f55d
 2020-11-20 13:19:38 +00:00
DistroBaker
ea06c322a1 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/fapolicyd.git#e97bf03c73d2c8506a48834444c8e7b4c4d4f55d
 2020-11-20 12:20:21 +00:00
Troy Dawson
a15d84fdb4 RHEL 9.0.0 Alpha bootstrap 
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/fapolicyd#e97bf03c73d2c8506a48834444c8e7b4c4d4f55d
 2020-11-18 09:48:25 -08:00
Petr Šabata
3f487fe108 RHEL 9.0.0 Alpha bootstrap 
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/fapolicyd#c96e437e8964d0a9b5a4828c8890d142b41a70c7
 2020-10-15 00:13:12 +02:00
Release Configuration Management
f93a8c03ba New branch setup 2020-10-08 11:55:08 +00:00