rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
selinux-policy/.gitignore

43 lines
1.4 KiB
Plaintext
Raw Permalink Normal View History

Import rpm: c8s
2023-02-27 20:25:04 +00:00
SOURCES/container-selinux.tgz
SOURCES/selinux-policy-426c028.tar.gz
SOURCES/selinux-policy-contrib-c6da44c.tar.gz
Auto sync2gitlab import of selinux-policy-3.14.3-95.el8.src.rpm
2022-05-26 18:23:57 +00:00
/container-selinux.tgz
Auto sync2gitlab import of selinux-policy-3.14.3-117.el8.src.rpm
2023-02-18 02:11:46 +00:00
/selinux-policy-426c028.tar.gz
/selinux-policy-contrib-c6da44c.tar.gz
* Thu Apr 13 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-118 - Allow login_pgm setcap permission Resolves: rhbz#2172541 - Label /run/fsck with fsadm_var_run_t Resolves: rhbz#2184348 - Add boolean qemu-ga to run unconfined script Resolves: rhbz#2028762 - Allow dovecot-deliver write to the main process runtime fifo files Resolves: rhbz#2170495 - Allow certmonger dbus chat with the cron system domain Resolves: rhbz#2173289 - Allow insights-client read all sysctls Resolves: rhbz#2177607
2023-04-13 19:31:14 +00:00
/selinux-policy-3806b3e.tar.gz
/selinux-policy-contrib-8e0a2fa.tar.gz
/macro-expander
* Fri Apr 21 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-119 - Add unconfined_server_read_semaphores() interface Resolves: rhbz#2183351 - Allow systemd-pstore read kernel persistent storage files Resolves: rhbz#2181558 - Add fs_read_pstore_files() interface Resolves: rhbz#2181558 - Allow insights-client work with teamdctl Resolves: rhbz#2185158 - Allow insights-client read unconfined service semaphores Resolves: rhbz#2183351 - Allow insights-client get quotas of all filesystems Resolves: rhbz#2183351
2023-04-21 15:08:40 +00:00
/selinux-policy-0ee2dae.tar.gz
/selinux-policy-contrib-2604c4b.tar.gz
* Thu May 11 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-120 - Allow unconfined service inherit signal state from init Resolves: rhbz#2177254 - Allow systemd-pstore delete kernel persistent storage files Resolves: rhbz#2181558 - Add fs_delete_pstore_files() interface Resolves: rhbz#2181558 - Allow certmonger manage cluster library files Resolves: rhbz#2177836 - Allow samba-rpcd work with passwords Resolves: rhbz#2107106 - Allow snmpd read raw disk data Resolves: rhbz#2160000 - Allow cluster_t dbus chat with various services Resolves: rhbz#2196524
2023-05-11 17:40:42 +00:00
/selinux-policy-e7dabe5.tar.gz
/selinux-policy-contrib-e782e71.tar.gz
* Thu May 25 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-121 - Update pkcsslotd policy for sandboxing 2/2 Resolves: rhbz#2208162 - Update pkcsslotd policy for sandboxing 1/2 Resolves: rhbz#2208162 - Allow abrt_t read kernel persistent storage files Resolves: rhbz#2207914 - Add allow rules for lttng-sessiond domain Resolves: rhbz#2203509 - Allow rpcd_lsad setcap and use generic ptys Resolves: rhbz#2107106 - Allow samba-dcerpcd connect to systemd_machined over a unix socket Resolves: rhbz#2107106 - Dontaudit targetd search httpd config dirs Resolves: rhbz#2203720
2023-05-25 19:29:12 +00:00
/selinux-policy-7bf027b.tar.gz
/selinux-policy-contrib-15580d9.tar.gz
* Thu Jun 15 2023 Nikola Knazekova <nknazeko@redhat.com> - 3.14.3-122 - Update cyrus_stream_connect() to use sockets in /run Resolves: rhbz#2165752 - Allow insights-client map generic log files Resolves: rhbz#2214572 - Allow insights-client work with pipe and socket tmp files Resolves: rhbz#2207819 - Allow insights-client getsession process permission Resolves: rhbz#2207819 - Allow keepalived to manage its tmp files Resolves: rhbz#2179335
2023-06-15 17:06:04 +00:00
/selinux-policy-contrib-00f671d.tar.gz
* Thu Jun 29 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-123 - Label only /usr/sbin/ripd and ripngd with zebra_exec_t Resolves: rhbz#2213606 - Allow httpd tcp connect to redis port conditionally Resolves: rhbz#2213965 - Exclude container-selinux manpage from selinux-policy-doc Resolves: rhbz#2218362
2023-06-29 10:37:59 +00:00
/selinux-policy-contrib-595dfde.tar.gz
* Thu Jul 20 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-124 - Add the files_getattr_non_auth_dirs() interface Resolves: rhbz#2076937 - Update policy for the sblim-sfcb service Resolves: rhbz#2076937 - Dontaudit sfcbd sys_ptrace cap_userns Resolves: rhbz#2076937 - Label /usr/sbin/sos with sosreport_exec_t Resolves: rhbz#2167731 - Allow sa-update manage spamc home files Resolves: rhbz#2222200 - Allow sa-update connect to systemlog services Resolves: rhbz#2222200 - Label /usr/lib/systemd/system/mimedefang.service with antivirus_unit_file_t Resolves: rhbz#2222200
2023-07-20 15:52:48 +00:00
/selinux-policy-c6ff36f.tar.gz
/selinux-policy-contrib-8dc6e4c.tar.gz
* Fri Aug 04 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-125 - Allow user_u and staff_u get attributes of non-security dirs Resolves: rhbz#2216151 - Allow unconfined user filetrans chrome_sandbox_home_t 1/2 Resolves: rhbz#2221573 - Allow unconfined user filetrans chrome_sandbox_home_t 2/2 Resolves: rhbz#2221573 - Allow insights-client execmem Resolves: rhbz#2225233 - Allow svnserve execute postdrop with a transition Resolves: rhbz#2004843 - Do not make postfix_postdrop_t type an MTA executable file Resolves: rhbz#2004843 - Allow samba-dcerpc service manage samba tmp files Resolves: rhbz#2210771 - Update samba-dcerpc policy for printing Resolves: rhbz#2210771
2023-08-04 14:16:26 +00:00
/selinux-policy-e552306.tar.gz
/selinux-policy-contrib-b02d4cb.tar.gz
* Fri Aug 11 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-126 - Allow cloud_init create dhclient var files and init_t manage net_conf_t 1/2 Resolves: rhbz#2229726 - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t Resolves: rhbz#2177704 - Allow cloud_init create dhclient var files and init_t manage net_conf_t 2/2 Resolves: rhbz#2229726 - Make insights_client_t an unconfined domain Resolves: rhbz#2225527 - Allow insights-client create all rpm logs with a correct label Resolves: rhbz#2229559 - Allow insights-client manage generic logs Resolves: rhbz#2229559
2023-08-11 18:39:42 +00:00
/selinux-policy-3778a9d.tar.gz
/selinux-policy-contrib-e1cc232.tar.gz
* Thu Aug 17 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-127 - Allow cloud_init create dhclient var files and init_t manage net_conf_t 3 Resolves: rhbz#2229726
2023-08-17 11:47:08 +00:00
/selinux-policy-ff2ac01.tar.gz
* Fri Aug 25 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-128 - Allow ssh_agent_type manage generic cache home files Resolves: rhbz#2177704 - Add chromium_sandbox_t setcap capability Resolves: rhbz#2221573
2023-08-25 12:02:35 +00:00
/selinux-policy-b5586ba.tar.gz
/selinux-policy-contrib-267743a.tar.gz
* Wed Oct 04 2023 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-130 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539
2023-10-04 11:12:59 +00:00
/selinux-policy-contrib-ec63def.tar.gz
/selinux-policy-8974fee.tar.gz
* Tue Nov 28 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-132 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185
2023-11-28 13:43:30 +00:00
/selinux-policy-420a39f.tar.gz
/selinux-policy-contrib-5b3c7b8.tar.gz
* Wed Dec 13 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-133 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721
2023-12-13 15:34:09 +00:00
/selinux-policy-fc55894.tar.gz
/selinux-policy-contrib-98baf55.tar.gz
* Fri Jan 12 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-134 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374
2024-01-12 15:52:31 +00:00
/selinux-policy-621d818.tar.gz
/selinux-policy-contrib-61ad859.tar.gz
* Fri Jan 26 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-135 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276
2024-01-26 16:47:29 +00:00
/selinux-policy-61dd8ba.tar.gz
/selinux-policy-contrib-de23cff.tar.gz
* Thu Feb 15 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-136 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843
2024-02-15 17:25:24 +00:00
/selinux-policy-82ab8ed.tar.gz
/selinux-policy-contrib-6292557.tar.gz
* Thu Feb 22 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-137 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249
2024-02-22 16:27:43 +00:00
/selinux-policy-552905c.tar.gz
/selinux-policy-contrib-91c6683.tar.gz
* Fri Mar 08 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-138 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394
2024-03-08 09:25:36 +00:00
/selinux-policy-contrib-a33cd5f.tar.gz
* Fri Mar 08 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-139 - Allow wdmd read hardware state information Resolves: RHEL-27507
2024-03-08 17:57:11 +00:00
/selinux-policy-contrib-635888d.tar.gz