From 5d8c009a9857748f211ab50d0857a8e07421715f Mon Sep 17 00:00:00 2001 From: Nikola Knazekova Date: Tue, 12 Apr 2022 13:22:32 +0200 Subject: [PATCH] Tue Apr 12 2022 Nikola Knazekova - 34.1.30-1 - Allow administrative users the bpf capability Resolves: RHBZ#2070982 - Allow NetworkManager talk with unconfined user over unix domain dgram socket Resolves: rhbz#2064688 - Allow hostapd talk with unconfined user over unix domain dgram socket Resolves: rhbz#2064688 - Allow fprintd read and write hardware state information Resolves: rhbz#2062911 - Allow fenced read kerberos key tables Resolves: RHBZ#2060722 - Allow init watch and watch_reads user ttys Resolves: rhbz#2060289 - Allow systemd watch and watch_reads console devices Resolves: rhbz#2060289 - Allow nmap create and use rdma socket Resolves: RHBZ#2059603 --- selinux-policy.spec | 27 ++++++++++++++++++++++++++- sources | 2 +- 2 files changed, 27 insertions(+), 2 deletions(-) diff --git a/selinux-policy.spec b/selinux-policy.spec index a59bbbc5..ad67eff6 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -23,7 +23,7 @@ %define CHECKPOLICYVER 3.2 Summary: SELinux policy configuration Name: selinux-policy -Version: 34.1.29 +Version: 34.1.30 Release: 1%{?dist} License: GPLv2+ Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz @@ -793,6 +793,31 @@ exit 0 %endif %changelog +* Tue Apr 12 2022 Nikola Knazekova - 34.1.30-1 +- Allow administrative users the bpf capability +Resolves: RHBZ#2070982 + +- Allow NetworkManager talk with unconfined user over unix domain dgram socket +Resolves: rhbz#2064688 + +- Allow hostapd talk with unconfined user over unix domain dgram socket +Resolves: rhbz#2064688 + +- Allow fprintd read and write hardware state information +Resolves: rhbz#2062911 + +- Allow fenced read kerberos key tables +Resolves: RHBZ#2060722 + +- Allow init watch and watch_reads user ttys +Resolves: rhbz#2060289 + +- Allow systemd watch and watch_reads console devices +Resolves: rhbz#2060289 + +- Allow nmap create and use rdma socket +Resolves: RHBZ#2059603 + * Thu Mar 31 2022 Zdenek Pytela - 34.1.29-1 - Allow qemu-kvm create and use netlink rdma sockets Resolves: rhbz#2063612 diff --git a/sources b/sources index 022f99bf..f7447ff9 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (selinux-policy-8f56646.tar.gz) = af7b606f3cd2bfe02a059e713ceb869152e8bdb5d2ff4aa288b9d0cf1be068bf253f33f79e4624bd672b38bf6cef5fe20273b38f395a67dfaae0df60fa712047 -SHA512 (container-selinux.tgz) = 0278e4ca7bb3e9f1c73227ae921c48bf7d941118f8fcaceb2690aa84e35c96f017985da7ae9399336f8a6675e724564179cbe191e3576e50ff719c831c42b8c2 +SHA512 (container-selinux.tgz) = 7102ba1795d72ab698645ac4138e465f66d2d05f06d1ae301cf0cd6c7d9f4148c35a51f333e6948334d616235ba07a4b0f60b2c40601dcc292945a55c556d72c SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4