From 30da7f70675fdac8e57780cadbd9257402600f8a Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Mon, 9 Mar 2020 17:07:28 +0100 Subject: [PATCH] * Mon Mar 09 2020 Zdenek Pytela - 3.14.6-7 - Allow sssd read systemd-resolved runtime directory - Allow sssd read NetworkManager's runtime directory - Mark nm-cloud-setup systemd units as NetworkManager_unit_file_t - Allow system_mail_t to signull pcscd_t - Create interface pcscd_signull - Allow auditd poweroff or switch to single mode --- .gitignore | 2 ++ selinux-policy.spec | 14 +++++++++++--- sources | 6 +++--- 3 files changed, 16 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index b7af1b55..e85e6ddb 100644 --- a/.gitignore +++ b/.gitignore @@ -446,3 +446,5 @@ serefpolicy* /selinux-policy-contrib-f7a21a9.tar.gz /selinux-policy-contrib-08def7c.tar.gz /selinux-policy-deadfd1.tar.gz +/selinux-policy-ff8908f.tar.gz +/selinux-policy-contrib-5406e9a.tar.gz diff --git a/selinux-policy.spec b/selinux-policy.spec index 18f67160..ea7e329a 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -1,11 +1,11 @@ # github repo with selinux-policy base sources %global git0 https://github.com/fedora-selinux/selinux-policy -%global commit0 deadfd15c2ae442cc0e204d315962f3aac88e9ba +%global commit0 ff8908fb2162625769f20f937e2882067a497885 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # github repo with selinux-policy contrib sources %global git1 https://github.com/fedora-selinux/selinux-policy-contrib -%global commit1 08def7c154b5be4ce7b11643d71d59fe98ea2bfc +%global commit1 5406e9a4f4ae4a95e15fea717ccfa63fe4835264 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7}) %define distro redhat @@ -29,7 +29,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.14.6 -Release: 6%{?dist} +Release: 7%{?dist} License: GPLv2+ Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz @@ -772,6 +772,14 @@ exit 0 %endif %changelog +* Mon Mar 09 2020 Zdenek Pytela - 3.14.6-7 +- Allow sssd read systemd-resolved runtime directory +- Allow sssd read NetworkManager's runtime directory +- Mark nm-cloud-setup systemd units as NetworkManager_unit_file_t +- Allow system_mail_t to signull pcscd_t +- Create interface pcscd_signull +- Allow auditd poweroff or switch to single mode + * Fri Feb 28 2020 Lukas Vrabec - 3.14.6-6 - Allow postfix stream connect to cyrus through runtime socket - Dontaudit daemons to set and get scheduling policy/parameters diff --git a/sources b/sources index f233cc0b..211a9192 100644 --- a/sources +++ b/sources @@ -1,4 +1,4 @@ -SHA512 (selinux-policy-contrib-08def7c.tar.gz) = 9f14efa2c6505789b8d9d406e0e10dee7c8476598be7c19520a65336008a97c25304d935186a8b9ac44920edc92a704d5de88fd3a1d5d04fad384c53e0be61d9 -SHA512 (selinux-policy-deadfd1.tar.gz) = 8383a7349bed7d4e3a366d032a6bacc7cba2d1c8e460191d90c2b93d3a48102aa9d637ffe4bf125540c9bfb0dc21daae16c29cc016a6c9719ee84354ca8d4892 -SHA512 (container-selinux.tgz) = 796b5c2c6b36787886d1939e383d379c9e27248e0d4991b3f758448df865c4f9c72dfbf9f742f1430b74684400d2eb682f348012ac71f3e50a2b666b19e4d200 +SHA512 (selinux-policy-ff8908f.tar.gz) = 7ab917890dd7ac07c8147523b09bb397b34a9819a44ce06514896f70f96e3d257a18f347f52f226fd6d9ca077f3fd4f61df138fa30d9acc1daff56dcfe5d60ea +SHA512 (selinux-policy-contrib-5406e9a.tar.gz) = d169411164627b571de59d658432a20e3223b1772a4703ac3cf08edd556365bac61bd45db4c96617733d40bda1e28de636e0785a938cc101d8e7982fb9183a3c +SHA512 (container-selinux.tgz) = ecfd858fda76718436dbedc97935a0ec8f8d588441a719d186013912e7d70fa35e2752978b979e4b5d43f6b5627594a1cd7299d1bdd06dcae969f45ffc5e326f SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4