rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

* Fri Mar 18 2022 Zdenek Pytela <zpytela@redhat.com> - 36.5-1

Browse Source 
- Add support for nm-dispatcher console helper scripts
- Allow nm-dispatcher plugins read its directory and sysfs
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
- devices: Add a comment about cardmgr_dev_t
- Add basic policy for BinderFS
- Label /var/run/ecblp0 pipe with cupsd_var_run_t
- Allow rpmdb create directory in /usr/lib/sysimage
- Allow rngd drop privileges via setuid/setgid/setcap
- Allow init watch and watch_reads user ttys
- Allow systemd-logind dbus chat with sosreport
- Allow chronyd send a message to sosreport over datagram socket
- Remove unnecessary /etc file transitions for insights-client
- Label all content in /var/lib/insights with insights_client_var_lib_t
- Update insights-client policy
This commit is contained in:
Zdenek Pytela 2022-03-18 18:48:45 +01:00
parent e42de71056
commit 46273b67bf
2 changed files with 21 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
selinux-policy.spec
View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources # github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy %global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 51d529f4b8921fd25fa497e8fd5b9034cd4ef650 %global commit d8f8145b1624f256b63d4f5e24aebe11db35dd22
%global shortcommit %(c=%{commit}; echo ${c:0:7}) %global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat %define distro redhat
@ -23,8 +23,8 @@
%define CHECKPOLICYVER 3.2 %define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 36.4 Version: 36.5
Release: 2%{?dist} Release: 1%{?dist}
License: GPLv2+ License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
Source1: modules-targeted-base.conf Source1: modules-targeted-base.conf
@ -810,6 +810,22 @@ exit 0
%endif %endif
%changelog %changelog
* Fri Mar 18 2022 Zdenek Pytela <zpytela@redhat.com> - 36.5-1
- Add support for nm-dispatcher console helper scripts
- Allow nm-dispatcher plugins read its directory and sysfs
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
- devices: Add a comment about cardmgr_dev_t
- Add basic policy for BinderFS
- Label /var/run/ecblp0 pipe with cupsd_var_run_t
- Allow rpmdb create directory in /usr/lib/sysimage
- Allow rngd drop privileges via setuid/setgid/setcap
- Allow init watch and watch_reads user ttys
- Allow systemd-logind dbus chat with sosreport
- Allow chronyd send a message to sosreport over datagram socket
- Remove unnecessary /etc file transitions for insights-client
- Label all content in /var/lib/insights with insights_client_var_lib_t
- Update insights-client policy
* Wed Feb 23 2022 Zdenek Pytela <zpytela@redhat.com> - 36.4-2 * Wed Feb 23 2022 Zdenek Pytela <zpytela@redhat.com> - 36.4-2
- Add insights_client module to modules-targeted-contrib.conf - Add insights_client module to modules-targeted-contrib.conf

4
sources
View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-51d529f.tar.gz) = b46e8ee873b767ec604d9de227e39b61fcded2f67e8a00d97285297a975bebb101151205a47b95daacbf6cdada634ecd7f9183bf7d8739937762afa01ae1551a SHA512 (selinux-policy-d8f8145.tar.gz) = 4ef12d475211c37e6e690ae4f63b465446679b6437e88f43828a3d14e01d5a6eb99c8bf77a68ace5893ee9ab4c18924808f4e42a4f4436798b7cea1abb9e0a4a
SHA512 (container-selinux.tgz) = 0c78514841b1aedd9000a94d230b3b535dfee36356bdff57821a5e0b983547e0c6c10b11553a460d0751b9537204fa0fedc47012c7d3b4255f367a972777eb1f
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 27372e794bb85a6fe2b88456a77e7bf7d8429877486b1c2e5e7ef6484adafdb07c54b042e9da89b85fa11b76a24c9e55cc40ce98b2af9f74fcd5c396e6438614