From 042fffd52cd459f0430506b48bd221e5b5e77f8e Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Thu, 10 Jun 2021 23:07:44 +0200 Subject: [PATCH] * Thu Jun 10 2021 Zdenek Pytela - 34.1.8-1 - Associate dma_device_dir_t with device filesystem Resolves: rhbz#1954116 - Add default file context specification for dnf log files Resolves: rhbz#1955223 - Allow using opencryptoki for certmonger Resolves: rhbz#1961756 - Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans() Resolves: rhbz#1961756 - Allow httpd_sys_script_t read, write, and map hugetlbfs files Resolves: rhbz#1964890 - Dontaudit daemon open and read init_t file Resolves: rhbz#1965412 - Allow sanlock get attributes of cgroup filesystems Resolves: rhbz#1965217 --- selinux-policy.spec | 20 ++++++++++++++++++-- sources | 4 ++-- 2 files changed, 20 insertions(+), 4 deletions(-) diff --git a/selinux-policy.spec b/selinux-policy.spec index b6f80e3e..04d79473 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -1,6 +1,6 @@ # github repo with selinux-policy sources %global giturl https://github.com/fedora-selinux/selinux-policy -%global commit c9b75ffbd087a3e756503dcfc5acb70698a44ca1 +%global commit 488b443ad142f14603009863eee6650022bfc349 %global shortcommit %(c=%{commit}; echo ${c:0:7}) %define distro redhat @@ -23,7 +23,7 @@ %define CHECKPOLICYVER 3.2 Summary: SELinux policy configuration Name: selinux-policy -Version: 34.1.7 +Version: 34.1.8 Release: 1%{?dist} License: GPLv2+ Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz @@ -792,6 +792,22 @@ exit 0 %endif %changelog +* Thu Jun 10 2021 Zdenek Pytela - 34.1.8-1 +- Associate dma_device_dir_t with device filesystem +Resolves: rhbz#1954116 +- Add default file context specification for dnf log files +Resolves: rhbz#1955223 +- Allow using opencryptoki for certmonger +Resolves: rhbz#1961756 +- Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans() +Resolves: rhbz#1961756 +- Allow httpd_sys_script_t read, write, and map hugetlbfs files +Resolves: rhbz#1964890 +- Dontaudit daemon open and read init_t file +Resolves: rhbz#1965412 +- Allow sanlock get attributes of cgroup filesystems +Resolves: rhbz#1965217 + * Tue Jun 08 2021 Zdenek Pytela - 34.1.7-1 - Set default file context for /var/run/systemd instead of /run/systemd Resolves: rhbz#1966492 diff --git a/sources b/sources index e4254fa6..3c698c20 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (selinux-policy-c9b75ff.tar.gz) = 9cd2d5dffbcad99c3df6652d43cca7ea735d415468c144b891f793f5c1cdf6223cf87a4a578c13ee34cb49d026dde52262ce4ee35eb2beaca31c43e2a190d478 +SHA512 (selinux-policy-488b443.tar.gz) = b88fe25c221dda767e743209933f71b0913a26aa0147a58d855b66e48f05bdc9acf8a0609313756470ca50688bd73cde88beee93f68b58f38a0a16e1dc78d538 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4 -SHA512 (container-selinux.tgz) = 0d8e3faedf1e058fa28022e94accde62c106f87d3d6cd840f62cd42cb594420b0855aa68c712f45e91d0ffebba69925cbe440c593ae1d00eba2b4c5590500916 +SHA512 (container-selinux.tgz) = 3a49ceebf9e600c52a80bceb612033ed4fdaca73e0f127adb3273862aaddadf904bbadb84468598f22049c547e3df3b41745a8d830aa4ac7bf11c871c9ab6af9