rpms/passt
7
0
Fork 0
Code Issues Pull Requests Releases Activity

passt-0^20260728.gf8df3f1-1.el9

Browse Source 
Resolves: RHEL-185655
This commit is contained in:
Stefano Brivio 2026-07-29 15:46:04 -04:00
parent 7597b6d5cd
commit 1f42e42adc
5 changed files with 17 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@ -15,3 +15,4 @@
/passt-c3f1ba70237a9e66822aff3aa5765d0adf6f6307.tar.xz
/passt-d04c48032bcf724550d0b8f652fd00efcd2dfad0.tar.xz
/passt-a9c61ffaf15347b8dfcc2347c5440e4b0e82333b.tar.xz
/passt-f8df3f1b228fe19a74a269334fdfe6cc7d0605ce.tar.xz

8
0001-selinux-Drop-user_namespace-create-allow-rules.patch
View File

@ -1,7 +1,7 @@
From 7087adfbab35354f9def7edee87385b82416c722 Mon Sep 17 00:00:00 2001
From e7546b1371f424dd21fc570e1d2cbdf9185fd438 Mon Sep 17 00:00:00 2001
From: Stefano Brivio <sbrivio@redhat.com>
Date: Mon, 8 Dec 2025 22:32:50 -0500
Subject: [PATCH] selinux: Drop user_namespace create allow rules
Date: Wed, 29 Jul 2026 15:31:06 -0400
Subject: [PATCH 1/2] selinux: Drop user_namespace create allow rules
Those are incompatible with current el9 kernels. I introduced them
upstream with commit 62059058cf24 ("selinux: Fix user namespace
@ -36,7 +36,7 @@ index 6995df8..76d23e8 100644
auth_read_passwd(passt_t)
diff --git a/contrib/selinux/pasta.te b/contrib/selinux/pasta.te
index 95fe42a..7e1e821 100644
index 9394f97..c6d051e 100644
--- a/contrib/selinux/pasta.te
+++ b/contrib/selinux/pasta.te
@@ -126,7 +126,6 @@ allow pasta_t self:cap_userns { setpcap sys_admin sys_ptrace net_admin net_bind_

12
0002-selinux-Use-systemd_logind_exec_t-instead-of-systemd.patch
View File

@ -1,7 +1,7 @@
From 1053abff00f93de91efaf3e084fb34a25baa77e6 Mon Sep 17 00:00:00 2001
From af3a3b6b9a1ef945eb83ab8dbd28360d8813a98e Mon Sep 17 00:00:00 2001
From: Stefano Brivio <sbrivio@redhat.com>
Date: Mon, 22 Dec 2025 21:48:32 -0500
Subject: [PATCH] selinux: Use systemd_logind_exec_t instead of
Date: Wed, 29 Jul 2026 15:44:34 -0400
Subject: [PATCH 2/2] selinux: Use systemd_logind_exec_t instead of
systemd_user_runtimedir_exec_t
On CentOS Stream 9, selinux-policy doesn't contain commit
@ -15,7 +15,7 @@ Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/contrib/selinux/pasta.te b/contrib/selinux/pasta.te
index 51ceb76..98e47b9 100644
index c6d051e..f758fe4 100644
--- a/contrib/selinux/pasta.te
+++ b/contrib/selinux/pasta.te
@@ -98,7 +98,7 @@ require {
@ -27,8 +27,8 @@ index 51ceb76..98e47b9 100644
}
type pasta_t;
@@ -254,7 +254,7 @@ allow pasta_t container_var_run_t:file { create open write };
allow pasta_t ifconfig_var_run_t:file { create open write };
@@ -255,7 +255,7 @@ allow pasta_t container_var_run_t:file { create open read write };
allow pasta_t ifconfig_var_run_t:file { create open read write };
allow pasta_t container_var_run_t:sock_file { getattr create open read write };
allow pasta_t ifconfig_var_run_t:sock_file { getattr create open read write };
-allow systemd_user_runtimedir_t ifconfig_var_run_t:dir rmdir;

9
passt.spec
View File

@ -10,12 +10,12 @@
# Copyright (c) 2022 Red Hat GmbH
# Author: Stefano Brivio <sbrivio@redhat.com>
%global git_hash a9c61ffaf15347b8dfcc2347c5440e4b0e82333b
%global git_hash f8df3f1b228fe19a74a269334fdfe6cc7d0605ce
%global selinuxtype targeted
%global selinux_policy_version 41.41
Name: passt
Version: 0^20260611.ga9c61ff
Version: 0^20260728.gf8df3f1
Release: 1%{?dist}
Summary: User-mode networking daemons for virtual machines and namespaces
License: GPL-2.0-or-later AND BSD-3-Clause
@ -121,12 +121,10 @@ fi
%doc %{_docdir}/%{name}/demo.sh
%{_bindir}/passt
%{_bindir}/pasta
%{_bindir}/qrap
%{_bindir}/passt-repair
%{_bindir}/pesto
%{_mandir}/man1/passt.1*
%{_mandir}/man1/pasta.1*
%{_mandir}/man1/qrap.1*
%{_mandir}/man1/passt-repair.1*
%{_mandir}/man1/pesto.1*
%ifarch x86_64
@ -144,6 +142,9 @@ fi
%{_datadir}/selinux/packages/%{selinuxtype}/pesto.pp
%changelog
* Wed Jul 29 2026 Stefano Brivio <sbrivio@redhat.com> - 0^20260728.gf8df3f1-1
- Resolves: RHEL-185655
* Wed Jun 17 2026 Stefano Brivio <sbrivio@redhat.com> - 0^20260611.ga9c61ff-1
- Resolves: RHEL-185655

2
sources
View File

@ -1 +1 @@
SHA512 (passt-a9c61ffaf15347b8dfcc2347c5440e4b0e82333b.tar.xz) = fb1b34b92c0059c4e1d7ac01e36c90c51cbf42c8bcdcbbf42f22299facc6791cab640502772588a1bc7fe0ddff771f4058bd4da36de8188a13b08bad8766445c
SHA512 (passt-f8df3f1b228fe19a74a269334fdfe6cc7d0605ce.tar.xz) = 9d5a9a19919a577ce32db4a6c9202c43718fd748559bd76f11a1eccdb8f34d5204cb4176241f63ef27d8f9907bd4f51f5ead8d83688f8b435338d0237be5f70b