From 191f6b36c344cb5be7a0a0184c51a15943c72f01 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Thu, 30 May 2019 11:43:45 +0200 Subject: [PATCH] * Thu May 30 2019 Lukas Vrabec - 3.14.4-20 - Allow pcp_pmcd_t domain to domtrans to mdadm_t domain BZ(1714800) - Allow spamd_update_t to exec itsef - Fix broken logwatch SELinux module - Allow logwatch_mail_t to manage logwatch cache files/dirs - Update wireshark_t domain to use several sockets - Allow sysctl_rpc_t and sysctl_irq_t to be stored on fs_t --- .gitignore | 2 ++ selinux-policy.spec | 14 +++++++++++--- sources | 6 +++--- 3 files changed, 16 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index 9e89a6d5..564f7518 100644 --- a/.gitignore +++ b/.gitignore @@ -377,3 +377,5 @@ serefpolicy* /selinux-policy-78cbf0a.tar.gz /selinux-policy-contrib-efd9524.tar.gz /selinux-policy-50e97b7.tar.gz +/selinux-policy-contrib-7dabd9f.tar.gz +/selinux-policy-26ad838.tar.gz diff --git a/selinux-policy.spec b/selinux-policy.spec index 9ba2a8dd..30041fb6 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -1,11 +1,11 @@ # github repo with selinux-policy base sources %global git0 https://github.com/fedora-selinux/selinux-policy -%global commit0 50e97b781ea7a501c06f8a86e94cbbdfe5a86720 +%global commit0 26ad838210206ef428322035335b92090fcee7c9 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # github repo with selinux-policy contrib sources %global git1 https://github.com/fedora-selinux/selinux-policy-contrib -%global commit1 efd95248a3e798cde8f7ed2e5667561add118588 +%global commit1 7dabd9fa102e21b3e7c91a0e2eef6854e9f0f40d %global shortcommit1 %(c=%{commit1}; echo ${c:0:7}) %define distro redhat @@ -29,7 +29,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.14.4 -Release: 19%{?dist} +Release: 20%{?dist} License: GPLv2+ Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz @@ -787,6 +787,14 @@ exit 0 %endif %changelog +* Thu May 30 2019 Lukas Vrabec - 3.14.4-20 +- Allow pcp_pmcd_t domain to domtrans to mdadm_t domain BZ(1714800) +- Allow spamd_update_t to exec itsef +- Fix broken logwatch SELinux module +- Allow logwatch_mail_t to manage logwatch cache files/dirs +- Update wireshark_t domain to use several sockets +- Allow sysctl_rpc_t and sysctl_irq_t to be stored on fs_t + * Mon May 27 2019 Lukas Vrabec - 3.14.4-19 - Fix bind_read_cache() interface to allow only read perms to caller domains - [speech-dispatcher.if] m4 macro names can not have - in them diff --git a/sources b/sources index c2ef661b..ee9615bf 100644 --- a/sources +++ b/sources @@ -1,4 +1,4 @@ -SHA512 (selinux-policy-contrib-efd9524.tar.gz) = 4ab58df002e0c604c98d86c9ece13597fd1ce181b2665df900a8a7b5076f6fe85a8ec0c7df59d15859e4fd91897405b902b9cf2ce14e4f9d3a0c3ac4ac2283a9 -SHA512 (selinux-policy-50e97b7.tar.gz) = 519ef4dda2fb4f3e72f885043c893d54adccd6ca6edca6b87d3601fa79cfece787b8cfc1493aaa524d438132560007ef246e0427f1ad738e8af8aaa7b5c200f0 -SHA512 (container-selinux.tgz) = 6bf3a9a88a7557a88953049900322ba6f0913e5e9c0ac56c1a184d49bf3a5e5bc2374ac49793f2a0faba3573a24edf8cbf21d526a10be67378c8d5f4a279eca1 +SHA512 (selinux-policy-contrib-7dabd9f.tar.gz) = 21870f25d058d2c480c6a4486fed1089ea6ef5d6dffa950127305c1d396b1027ad803177b070a3cb83c4eec3b1a5c8e5b4fe7dcc7adc90851abb909fa347b997 +SHA512 (selinux-policy-26ad838.tar.gz) = cc1ec3ea59673fb8042f5ff59eb369f6f57d698e99aa70daa141232c4b00e3a994a6e9940a836b790dceaa63575a06cc2b4a4fec20b43e3be35335c928c6d099 +SHA512 (container-selinux.tgz) = dc93b03f3163f93389ce0ecd2cf48c65f02a52e7b4d70fc37aacaad68161d0b20c45f14e768153e33712d4943814cb13cfcc439c01bde876e1c37b8d48c5f7bb SHA512 (macro-expander) = b4f26e7ed6c32b3d7b3f1244e549a0e68cb387ab5276c4f4e832a9a6b74b08bea2234e8064549d47d1b272dbd22ef0f7c6b94cd307cc31ab872f9b68206021b2