* Thu Jun 10 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.8-1

- Associate dma_device_dir_t with device filesystem
Resolves: rhbz#1954116
- Add default file context specification for dnf log files
Resolves: rhbz#1955223
- Allow using opencryptoki for certmonger
Resolves: rhbz#1961756
- Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
Resolves: rhbz#1961756
- Allow httpd_sys_script_t read, write, and map hugetlbfs files
Resolves: rhbz#1964890
- Dontaudit daemon open and read init_t file
Resolves: rhbz#1965412
- Allow sanlock get attributes of cgroup filesystems
Resolves: rhbz#1965217
This commit is contained in:
Zdenek Pytela 2021-06-10 23:07:44 +02:00
parent 5d2a514c72
commit 042fffd52c
2 changed files with 20 additions and 4 deletions

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources # github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy %global giturl https://github.com/fedora-selinux/selinux-policy
%global commit c9b75ffbd087a3e756503dcfc5acb70698a44ca1 %global commit 488b443ad142f14603009863eee6650022bfc349
%global shortcommit %(c=%{commit}; echo ${c:0:7}) %global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat %define distro redhat
@ -23,7 +23,7 @@
%define CHECKPOLICYVER 3.2 %define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 34.1.7 Version: 34.1.8
Release: 1%{?dist} Release: 1%{?dist}
License: GPLv2+ License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -792,6 +792,22 @@ exit 0
%endif %endif
%changelog %changelog
* Thu Jun 10 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.8-1
- Associate dma_device_dir_t with device filesystem
Resolves: rhbz#1954116
- Add default file context specification for dnf log files
Resolves: rhbz#1955223
- Allow using opencryptoki for certmonger
Resolves: rhbz#1961756
- Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
Resolves: rhbz#1961756
- Allow httpd_sys_script_t read, write, and map hugetlbfs files
Resolves: rhbz#1964890
- Dontaudit daemon open and read init_t file
Resolves: rhbz#1965412
- Allow sanlock get attributes of cgroup filesystems
Resolves: rhbz#1965217
* Tue Jun 08 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.7-1 * Tue Jun 08 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.7-1
- Set default file context for /var/run/systemd instead of /run/systemd - Set default file context for /var/run/systemd instead of /run/systemd
Resolves: rhbz#1966492 Resolves: rhbz#1966492

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-c9b75ff.tar.gz) = 9cd2d5dffbcad99c3df6652d43cca7ea735d415468c144b891f793f5c1cdf6223cf87a4a578c13ee34cb49d026dde52262ce4ee35eb2beaca31c43e2a190d478 SHA512 (selinux-policy-488b443.tar.gz) = b88fe25c221dda767e743209933f71b0913a26aa0147a58d855b66e48f05bdc9acf8a0609313756470ca50688bd73cde88beee93f68b58f38a0a16e1dc78d538
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 0d8e3faedf1e058fa28022e94accde62c106f87d3d6cd840f62cd42cb594420b0855aa68c712f45e91d0ffebba69925cbe440c593ae1d00eba2b4c5590500916 SHA512 (container-selinux.tgz) = 3a49ceebf9e600c52a80bceb612033ed4fdaca73e0f127adb3273862aaddadf904bbadb84468598f22049c547e3df3b41745a8d830aa4ac7bf11c871c9ab6af9