From 767de9739d64161ef1a7d7c7bb03417088b7d032 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Fri, 18 Jul 2025 19:29:08 +0200 Subject: [PATCH] * Fri Jul 18 2025 Zdenek Pytela - 42.1.3-1 - Allow svirt read virtqemud fifo files Resolves: RHEL-104069 - Allow virtqemud handle virt_content_t chr files Resolves: RHEL-76104 - Allow "hostapd_cli ping" run as a systemd service Resolves: RHEL-77047 - All sblim-sfcbd the dac_read_search capability Resolves: RHEL-98287 - Allow sblim domain read systemd session files Resolves: RHEL-98287 - Allow sblim-sfcbd execute dnsdomainname Resolves: RHEL-98287 - Allow systemd-importd create and unlink init pid socket Resolves: RHEL-98490 --- changelog | 16 ++++++++++++++++ selinux-policy.spec | 4 ++-- sources | 4 ++-- 3 files changed, 20 insertions(+), 4 deletions(-) diff --git a/changelog b/changelog index ee72dcce..ddce5ded 100644 --- a/changelog +++ b/changelog @@ -1,3 +1,19 @@ +* Fri Jul 18 2025 Zdenek Pytela - 42.1.3-1 +- Allow svirt read virtqemud fifo files +Resolves: RHEL-104069 +- Allow virtqemud handle virt_content_t chr files +Resolves: RHEL-76104 +- Allow "hostapd_cli ping" run as a systemd service +Resolves: RHEL-77047 +- All sblim-sfcbd the dac_read_search capability +Resolves: RHEL-98287 +- Allow sblim domain read systemd session files +Resolves: RHEL-98287 +- Allow sblim-sfcbd execute dnsdomainname +Resolves: RHEL-98287 +- Allow systemd-importd create and unlink init pid socket +Resolves: RHEL-98490 + * Wed Jul 16 2025 Zdenek Pytela - 42.1.2-1 - Remove permissive domains Resolves: RHEL-103661 diff --git a/selinux-policy.spec b/selinux-policy.spec index 2ecf240a..7759ebbc 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -5,7 +5,7 @@ # github repo with selinux-policy sources %global giturl https://github.com/fedora-selinux/selinux-policy -%global commit ef92d102b65de95e328936ebe7e9be4835c1503c +%global commit 5fa259835c1170f15915d278fe979cb46dabc772 %global shortcommit %(c=%{commit}; echo ${c:0:7}) %define distro redhat @@ -17,7 +17,7 @@ %define CHECKPOLICYVER 3.8 Summary: SELinux policy configuration Name: selinux-policy -Version: 42.1.2 +Version: 42.1.3 Release: 1%{?dist} License: GPL-2.0-or-later Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz diff --git a/sources b/sources index 9c198dcb..6f983bfa 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (selinux-policy-ef92d10.tar.gz) = 483934590e8c56dc490ce90f074df814d13fa2a6a2b94a35a7be00fc35f46ac4c9ffa4ceea1867c80e7ca11acf3d6d537ea651f45eb0a65fcf6210b2fd325b98 +SHA512 (selinux-policy-5fa2598.tar.gz) = f446edef7b483aa92e6b76472417987b557d25d7ac5e4733642e6ee744cbda25c27640bd7ca296d5692f4cf4d0fcf24b472a5a24f51bf934998113dce27ffdaa SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4 -SHA512 (container-selinux.tgz) = 5c87da38298ae10d4fa7e6cfab113aee09ea35559dc41a448c27059d291a8735ee09821de02c43ea76314029ac3e5eee73d5d07419d88a9aae890d8a1680fde5 +SHA512 (container-selinux.tgz) = c4505cbb590ff422b2287a964995387c18934399201a9bbf5f1c8d8ef2c565eb0564804ca2af8c8ef345646defa68a62d0fd9c624cc13a38e0c027e38e312550