* Thu Jan 16 2025 Zdenek Pytela <zpytela@redhat.com> - 40.13.22-1

- Allow staff user dbus chat with virt-dbus
Resolves: RHEL-73914
- Allow virtqemud domain transition to nbdkit
Resolves: RHEL-69118
- Add nbdkit interfaces defined conditionally
Resolves: RHEL-69118
- Allow svirt_t read sysfs files
Resolves: RHEL-71270
- Label /dev/pmem[0-9]+ with fixed_disk_device_t
Resolves: RHEL-71656
- Add support for the KVM guest memfd anon inodes
Resolves: RHEL-69128
- Allow sysadm user dbus chat with virt-dbus
Resolves: RHEL-73914
- Allow initrc_t transition to passwd_t
Resolves: RHEL-71665
- Allow unconfined_service_t transition to passwd_t
Resolves: RHEL-71665
This commit is contained in:
Zdenek Pytela 2025-01-16 21:45:16 +01:00
parent f64670faa3
commit 06af1e2772
3 changed files with 24 additions and 4 deletions

View File

@ -1,3 +1,23 @@
* Thu Jan 16 2025 Zdenek Pytela <zpytela@redhat.com> - 40.13.22-1
- Allow staff user dbus chat with virt-dbus
Resolves: RHEL-73914
- Allow virtqemud domain transition to nbdkit
Resolves: RHEL-69118
- Add nbdkit interfaces defined conditionally
Resolves: RHEL-69118
- Allow svirt_t read sysfs files
Resolves: RHEL-71270
- Label /dev/pmem[0-9]+ with fixed_disk_device_t
Resolves: RHEL-71656
- Add support for the KVM guest memfd anon inodes
Resolves: RHEL-69128
- Allow sysadm user dbus chat with virt-dbus
Resolves: RHEL-73914
- Allow initrc_t transition to passwd_t
Resolves: RHEL-71665
- Allow unconfined_service_t transition to passwd_t
Resolves: RHEL-71665
* Wed Jan 08 2025 Zdenek Pytela <zpytela@redhat.com> - 40.13.21-1
- Allow init create vsock socket for sshd
Resolves: RHEL-72549

View File

@ -5,7 +5,7 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 9e20ff3dfd8b57bab412414b748ef1bac237b73b
%global commit 526a180591de075f64e778a26cdb3e07766d9319
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -17,7 +17,7 @@
%define CHECKPOLICYVER 3.8
Summary: SELinux policy configuration
Name: selinux-policy
Version: 40.13.21
Version: 40.13.22
Release: 1%{?dist}
License: GPL-2.0-or-later
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-9e20ff3.tar.gz) = 53ce5243472ee22aea0fdca36019035ed5c93b4ccf97f7ce5cb12faf2ff1ede575f72b09d328131c58c2875e69c6ae2943e239061be96a65f62789f536afcd74
SHA512 (selinux-policy-526a180.tar.gz) = 7c49870d04d79b5f1c8d64c3edbcd590b6ee4a3aaa5761f93804041745a7eb8f5d9cad10e37a36d5568940107f07e83bce9bf5ef7b43910016434caf0d25c6c8
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 2c214386e2f382d7b237f81b1ccdcbbfb111115868f9e9219a454984233907138df69e52b82ebbbce3c2209c4d5e56e558d8790a8e8a2744203bd13c7ec69001
SHA512 (container-selinux.tgz) = a0d9025ee2e4500388de36abf8f635d820179f56d7d47720097c6b73fe876b06f64c200ab16f7b3b02c5002ea63646d15326ea04263c0e5c2b0a5c2120284ffd