rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

* Mon Jul 27 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.26-1

Browse Source 
- Add missing rule for automotive policy
Resolves: RHEL-216823
- Allow aide get attributes of all filesystems
Resolves: RHEL-182423
- Allow postfix_postdrop_t/system_mail_t append to init unix domain stream sockets
Resolves: RHEL-169587
- Dontaudit unconfined_t map its private directories
Resolves: RHEL-154554
- Allow dhcpcd hook scripts read generic files in /proc
Resolves: RHEL-153117
- Allow dhcpc_hook_t connect to init_t over a unix stream socket
Resolves: RHEL-147153
- Allow dhcpc_hook_t unix_dgram_socket and module_request
Resolves: RHEL-147153
- Allow sysadm_t run and read/write networkmanager bpf programs
Resolves: RHEL-145714
- Allow nfsidmapd read virt lib files
Resolves: RHEL-132866
- Support cronie create crontab backups
Resolves: RHEL-129528
- Allow unconfined_t mounton its lnk_files
Resolves: RHEL-127120
- Allow systemd-machined to manage nspawn runtime directory
Resolves: RHEL-105966
This commit is contained in:
Zdenek Pytela 2026-07-27 17:56:03 +02:00
parent b071888259
commit 3801b359e9
3 changed files with 30 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
changelog
View File

@ -1,3 +1,29 @@
* Mon Jul 27 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.26-1
- Add missing rule for automotive policy
Resolves: RHEL-216823
- Allow aide get attributes of all filesystems
Resolves: RHEL-182423
- Allow postfix_postdrop_t/system_mail_t append to init unix domain stream sockets
Resolves: RHEL-169587
- Dontaudit unconfined_t map its private directories
Resolves: RHEL-154554
- Allow dhcpcd hook scripts read generic files in /proc
Resolves: RHEL-153117
- Allow dhcpc_hook_t connect to init_t over a unix stream socket
Resolves: RHEL-147153
- Allow dhcpc_hook_t unix_dgram_socket and module_request
Resolves: RHEL-147153
- Allow sysadm_t run and read/write networkmanager bpf programs
Resolves: RHEL-145714
- Allow nfsidmapd read virt lib files
Resolves: RHEL-132866
- Support cronie create crontab backups
Resolves: RHEL-129528
- Allow unconfined_t mounton its lnk_files
Resolves: RHEL-127120
- Allow systemd-machined to manage nspawn runtime directory
Resolves: RHEL-105966
* Sat Jul 04 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.25-1
- Allow kernel write to unconfined and sysadm users' keys
Resolves: RHEL-156860

4
selinux-policy.spec
View File

@ -6,7 +6,7 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit f02af002e5294ab0ea2e344cab21c32eab52c304
%global commit f19e526752937e4418adfd5c9b3b762a8d8b5e98
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -20,7 +20,7 @@
%define STABLEVER 42.1.18
Summary: SELinux policy configuration
Name: selinux-policy
Version: 42.1.25
Version: 42.1.26
Release: 1%{?dist}
License: GPL-2.0-or-later
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

4
sources
View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-f02af00.tar.gz) = dab53f9212e3454ea2139c4d9720084d8ed743e95101a9c80cc4d9be6c0501a5e125f7f3a68bb34ae759796cd98a5750a575e0a370ef317532c83027480a3192
SHA512 (selinux-policy-f19e526.tar.gz) = a3247165104dc2389f9e738a8bb75d1baf022cc419103368d2211b3b272309b6c781ef523daba23e779697cb96f7707bf39acff516c09670fa729b37ea5a7334
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 513f6d6c0fa5b95d3a96309bbbe8ac8fdb8bc1c428776e675daba2d67d5a71a29a5eb66e39421e6c8b146b9e603ca881728b95eda85b63c1ee28d1114e2cab2b
SHA512 (container-selinux.tgz) = f9b7ac38dd20bdfdec0b2069e77ce5bc97c904ff2fbe6ae83fc296d559e23944da4946f10e6f50fe8aaa0c4dc15b04d7774b74746718180741f816b719d9c175