rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import selinux-policy-34.1.18-1.el9

Browse Source
This commit is contained in:
CentOS Sources 2021-12-07 13:59:00 -05:00 committed by Stepan Oksanichenko
parent 5da303c3e2
commit 0cd1ddb1a9
4 changed files with 49 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -1,2 +1,2 @@
SOURCES/container-selinux.tgz
SOURCES/selinux-policy-c83f33e.tar.gz
SOURCES/selinux-policy-442902f.tar.gz

4
.selinux-policy.metadata
View File

@ -1,2 +1,2 @@
5f808fe4b733903f3f14e4a41757a64e1c210782 SOURCES/container-selinux.tgz
a4f606cc703e7bf64e66ff9c9ffbcbbc1cad0cdc SOURCES/selinux-policy-c83f33e.tar.gz
8d849c2b4216bc1686a3633209da18b8ccee2631 SOURCES/container-selinux.tgz
81f38a8b9d37a3e1bfddf98a1518ad997211fac1 SOURCES/selinux-policy-442902f.tar.gz

7
SOURCES/modules-targeted-contrib.conf
View File

@ -2381,13 +2381,6 @@ minissdpd = module
#
freeipmi = module
# Layer: contrib
# Module: freeipmi
#
# ipa policy module contain SELinux policies for IPA services
#
ipa = module
# Layer: contrib
# Module: mirrormanager
#

50
SPECS/selinux-policy.spec
View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit c83f33e3527d42c92dd0cd40190aa808b998bc69
%global commit 442902f5605db078a727fe3fad4fb4693a32cad5
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -23,7 +23,7 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 34.1.16
Version: 34.1.18
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -792,9 +792,51 @@ exit 0
%endif
%changelog
* Thu Sep 02 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.16-1
* Mon Nov 01 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.18-1
- Allow fetchmail search cgroup directories
Resolves: rhbz#2015118
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2014611
- Allow redis-sentinel execute a notification script
Resolves: rhbz#2014611
- Support new PING_CHECK health checker in keepalived
Resolves: rhbz#2014423
* Thu Oct 14 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.17-1
- Label /usr/sbin/virtproxyd as virtd_exec_t
Resolves: rhbz#2002143
- Allow at-spi-bus-launcher read and map xdm pid files
Resolves: rhbz#2011772
- Remove references to init_watch_path_type attribute
Resolves: rhbz#2007960
- Remove all redundant watch permissions for systemd
Resolves: rhbz#2007960
- Allow systemd watch non_security_file_type dirs, files, lnk_files
Resolves: rhbz#2007960
- Allow systemd-resolved watch /run/systemd
Resolves: rhbz#1992461
- Allow sssd watch /run/systemd
Resolves: rhbz#1992461
* Thu Sep 23 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.16-1
- Allow fprintd install a sleep delay inhibitor
Resolves: rhbz#1999537
- Update mount_manage_pid_files() to use manage_files_pattern
Resolves: rhbz#1999997
- Allow gnome at-spi processes create and use stream sockets
Resolves: rhbz#2004885
- Allow haproxy list the sysfs directories content
Resolves: rhbz#1986823
- Allow virtlogd_t read process state of user domains
Resolves: rhbz#1994592
- Support hitless reloads feature in haproxy
Resolves: rhbz#1997182
- Allow firewalld load kernel modules
Resolves: rhbz#1999152
- Allow communication between at-spi and gdm processes
Resolves: rhbz#1972655
Resolves: rhbz#2003037
- Remove "ipa = module" from modules-targeted-contrib.conf
Resolves: rhbz#2006039
* Mon Aug 30 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.15-1
- Update ica_filetrans_named_content() with create_file_perms