* Wed Apr 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.1-1

- Update selinux-policy.spec and make-rhat-patches.sh for RHEL 9.0 beta
- Allow unconfined_service_t confidentiality and integrity lockdown
Resolves: rhbz#1950267
This commit is contained in:
Zdenek Pytela 2021-04-21 20:32:21 +02:00
parent b8bce4d7d2
commit 40e9a7fb1f
3 changed files with 19 additions and 13 deletions

View File

@ -2,13 +2,12 @@
DISTGIT_PATH=$(pwd)
FEDORA_VERSION=rawhide
DOCKER_FEDORA_VERSION=master
DISTGIT_BRANCH=f34
REPO_SELINUX_POLICY=${REPO_SELINUX_POLICY:-https://github.com/fedora-selinux/selinux-policy}
REPO_SELINUX_POLICY_BRANCH=${REPO_SELINUX_POLICY_BRANCH:-$FEDORA_VERSION}
REPO_CONTAINER_SELINUX=${REPO_CONTAINER_SELINUX:-https://github.com/containers/container-selinux}
REPO_MACRO_EXPANDER=${REPO_MACRO_EXPANDER:-https://github.com/fedora-selinux/macro-expander.git}
RHEL_VERSION="rhel-9.0.0-beta"
DISTGIT_BRANCH="rhel-9.0.0-beta"
REPO_SELINUX_POLICY=${REPO_SELINUX_POLICY:-git@gitlab.cee.redhat.com:SELinux/selinux-policy.git}
REPO_SELINUX_POLICY_BRANCH=${REPO_SELINUX_POLICY_BRANCH:-$RHEL_VERSION}
REPO_CONTAINER_SELINUX=${REPO_CONTAINER_SELINUX:-git@github.com:projectatomic/container-selinux.git}
REPO_MACRO_EXPANDER=${REPO_MACRO_EXPANDER:-git@gitlab.cee.redhat.com:SELinux/macro-expander.git}
# When -l is specified, we use locally created tarballs and don't download them from github
DOWNLOAD_DEFAULT_GITHUB_TARBALLS=1
@ -16,7 +15,7 @@ if [ "$1" == "-l" ]; then
DOWNLOAD_DEFAULT_GITHUB_TARBALLS=0
fi
git checkout $DISTGIT_BRANCH -q
#git checkout $DISTGIT_BRANCH -q
POLICYSOURCES=`mktemp -d --tmpdir policysources.XXXXXX`
pushd $POLICYSOURCES > /dev/null

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 7e50553feb19abeab49911db46c15b50b6bda47e
%global commit 2d660f08acb640cc1539ec038b4d66d86e48f051
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -23,8 +23,8 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 34
Release: 2%{?dist}
Version: 34.1.1
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
Source1: modules-targeted-base.conf
@ -792,6 +792,13 @@ exit 0
%endif
%changelog
* Wed Apr 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.1-1
- Allow unconfined_service_t confidentiality and integrity lockdown
Resolves: rhbz#1950267
* Wed Apr 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34-3
- Update selinux-policy.spec and make-rhat-patches.sh for RHEL 9.0 beta
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 34-2
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-7e50553.tar.gz) = d5d0f053ce5d6706f1a0f902b7406c7ec3abb0e625077fb3eb70fab77eb850246d4df5ca08ffd76beb833358fda7ffa32105bb51c6d79730be109403d85e4618
SHA512 (selinux-policy-2d660f0.tar.gz) = cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
SHA512 (container-selinux.tgz) = a97c344949c136c0cd9c1b7ca0354ccfa2de9fcb2fd2ee7b285f7fe6ddceda15a14811a8ed493bf0a907e4cc5030a55c2e3f39be8d4515869e9171a05c0653d3
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 11094eb90b535a1f8cec0c4462fc65b4e63ed0555aa80dce7faaff365bd53d546fde1d633d68e443acd7ce94a64a8df4bff38c28c5ce88263ebde20682399663