From 7c40aea2594bfd315f93ba19f4e42fe40505491e Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Mon, 13 Feb 2017 10:17:47 +0100 Subject: [PATCH] * Mon Feb 13 2017 Lukas Vrabec - 3.13.1-239 - Allow syslog client to connect to kernel socket. BZ(1419946) --- container-selinux.tgz | Bin 5805 -> 5821 bytes policy-rawhide-base.patch | 7 +++++-- selinux-policy.spec | 5 ++++- 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/container-selinux.tgz b/container-selinux.tgz index 16c13eb8340ad469d4ebb7a7bead58e2735f518e..4430a42e6ba8fe55bf7a3c6e25b703d05d4ce73e 100644 GIT binary patch literal 5821 zcmV;u7DDMCiwFQCd7)SU1MOXHkK8tr&e!Q*A$S6KCa`D5V>K?LmXmWmI_B3Ud}6**y^RY9DQ@+#ha zbE0$u>HF{B;pdwl-ruO7klwz%efR#GH*as=-`xK2?%liFZ*Jbay?t}@jdydZ3aP24 zRZx1~H_1a8Y)NRO8+-qMG;Pk$y&q|vra}4q=f59_mlq^^P4l`8i5C<_5{E$*=b0DE zf#Q*D51&^*UdwD70C7v5(%{G0U!F) zBcGC>3=jS`&Mv-vbGbQ_74nOqf_mdqb8)&i)#U~YSg-Hi=g^pm6tK06F6<1Hx5Hv z&tkz8sFn+ZAA%A|Ti&wry>H*>Xzrk$p1_B%enHBVLdIR35Go56)T~Dq7F}N(tJ#41 zoQyUM@Fw4p9RDi`q8__h*M4zEmrya*LROtw>^6?kGX~CI>sRRp>of429)gm5OoYA#81G`}Al{LzmR+#b1Y?5JDF?~@W)6ui7_@|PAVm} zJ@_@L0!lxkP&-XGTEyi^x&ISLOpr?X_IKbn#SKQFbOn^s>5ga2@)%bKF95>20uEPk z=&{zfn+FhgNEaw_uqfjPEC(q+V~6&TMJ;@+g$5t3F{~;1j!9z96cpYe|>)r8c4S7&j>*xz;($Bu-eB@5!c6(e~`k{p$F;8YCbiM{bel9@%f z?s5)ZfM9uyuqGTwvmaGza)%#YGcuYT=}0b7Ax|t|;-}2LIV)g@l{wCU5ew-e+pHjq zyvH)uDcC7VVdeVrlll>Ol+H3jYI>rffqqCmjxBjVft!71dR~v4-Dz1=&r_FhuZM4B zr#I2wSW_5m)iV>1I2XE1l{2Kr+K4<96*KPROJo#&YWOP&@4`dr^9l0kLoJqJGA6!V zY&VE}^;MXS-$+(XVKt^rap*-&?XO zYoUSSkf)?S2E?K$7F}uSH!O`v^2&SByt{&YFD_@}M0t2WAA~|~e^4WQItL9@eHG_* zn8eV%^O1Pl7O2TA-f)aOoX6Q-4XD6?;kO5UnGHh|3LBylA$bZr#mnJutAbE=4ON(l zGhoDI1Wk9&#CV;6xTEUGa@7AdhP-z4@8bOx$sU$OJ>;~aO9Qg~+JcxRp?UIfg&bG} zmiH6|MPQphk!70CF;S^q5H5%PLlQhMk9fNvWKiX4EM)*FE+wqmeh{T`#@8Zr1evA} zU#uk3Rr3PSjx_z`StjipjnaXQ_W}&kh68Zg35u zABIhIwQ(x&fguR@1(kAS6Tq-lPU+cj8+b=)0b)aAK=qp0!5s0*? zm%)dtU4}nqTP`2!$`lmda@yO%Gw?g)kgN}<^F+0({K(#ceTlRVmNnGM6YXPW6ehD` zC>YjmX5;O~sXfGHo~4sEEvM-&R?lOtHAcg`>`}XUXSiztJzf7|uYJzd8AmgKu(fy} zVUu10H#{2evmoIU*8B8fnn4B%W2=*%P*%+D*{~rf?hE6b7|Sm#lD+)MWd{J>8JJsY z^G*J}Q+CmOjgfFXw=zz~t#i`OhGJo0WRnJezsQp~d}bqD8U=+FFn}3QNeAqu@_xi< z_;P7uuOHOaK}2c|EWYgJR~FI6>N_Rwlx65h3#G|N#*->YgU83kE$BPy*jU38$#uyE z=k7Qvyih?n*3YU@wmF}_UY&=ve!AK{oCQTvgNSujhMbh(KBnut=@UlNn|((WGca!R zI*TZqFz8KPMwW4ha07otTy9&%Sw0B0g+nS>zK&NrVHFIrXAQhqGdM3m<%9*Td@gcm zF4t6Jx@=(k!m;OVb?3%K+f+YJ$DMd>NxV0dYH_1mH?Fk>laHIw-eFE{$e>c4-fIhz zHm0ms7dIqrh*gW!f88M2p_(WkEfT)9RB0Frp=gZ*D``KL!NB%zEI^Ox%}YzIx*lwk z(yGs^I@*-1^0BSd;o4!c=h#s6TW{Om{P+lU<_1OmNA9a=#p0xPxB*v87GHXe#R&#*19wr4Bni~hGK(fUKWTaIe>rzV{jRk5& z0ZH@B=OX_?Qv?zxvORm7G7FCmuE~UosAG<1pR22$xpo_M4H2c{ zqYJTQU=2htnqRWr3YFA-cJlpKmyP_{fb*)oXh`qGd#go8ZI`k)?S=?kblwifQDe#M zR#Ay?;dqQ)dIP97I;9IIBUYsE5I^}t%m-@!ML+)#S6Xem$gPo?*HipvP1jm{wN~ve zrnGc(#6-rYT=aA4&;}J0*71JO#YHcZWrnB4V3y;frf1+s53!Tgij2Op0XFv`Ht6uv zjE}VXQN;$_a8&6>sopf+L+#r|y5K`Ajj@bA>98opg552p<0Fx#=;q;t7GVf4!}Ge> zZFC=x)T^E^hFOMS!dc(NY68$W6Ve>IjP0y11{pPshLv-`UiR$622GF|so3v}ewL~0 zf4h#uj0zHuYZvf}8w_;I9VN-`E)0rb8z*t~?0xjYL;jd~_c1K{JNO1*J4&iJ^3wY( zk36g_^JcJb+c;~2k=cVXfR&t7JAlL`z{f}wcA3Se4`a1}wOe{GOOk-Lm!S7@Bvb3? z+LH>8;CDS;P?a)?)3{=lq9Upi1%66W_6hoDc<)fV#x;VWpNgM^`(8#e>m0PKD&2>U zXjND&fKo>TlquQUF>~u}nExtndN~xnrn2s1{aJ zwO#?*XphZ}C~GnVXSl}dPH!CxHav|t8*wz$$Prl=do-izQj5_0lIQe{9g#zkDs*pg z3)qXioY`cq=;%DpbDC>L>#15!ZIx&rv8^o5&HL0utIlieUh`mXQ>|E&Cy5D9AI$3p zrZBDvm-=++Bn=tDot%vPoFFW#6<~^`a98GOyDZ{*HH<_Ysiro7Mby0?F#h^?nrBz= z@`bGdAGJH5p(^!h=#PM1e-v@Ad>Y)7j?3&oU`2k+%lj)J`?tIxyE;jp(KZ1bNb?6~ zxX8Rm;vE9`5qMjI4De{4)VSG&T>mKuFi(^-)9o(Dc0lL8;y$9syiOufIQ~vS6NB|7 ztV;p_RtJ~Zh4K#|{NR|ORU4%u*|LNMdTI4ab;B+k*1c@}HUTtzXvgZj>D$@$7+=hr z&J(dGPj6TJ?v~GKviG13lm1ACj|6fa&2(4%V;Jw=2BAxzvJiQ0>y%||lM^z_WfkcM z?c&H(mX8m1d!McJoocz5I!$=nRJCGWbDFbvOiJe2hgq}CcHPU|!Qy~9d2l#jE{!*N zw%agWdRP!oRD4`VaZ{CLG$sAPm6Kq%r&vx2f4e-s?&Q^Jicn5Xovr{p=(IU+Y1)!H zr(KuRxyCMcnKSVnF((T>N8HJR&k?sd=ejiTWGOg?>mms|7XnV)1nSOQx>tEY1$OMV zkh!DR33I9v=?FY;m^lE?8fG@!u6xFL7zjw+FlgG&287En9^RAC8@rE!ZO|U-DumQICSoTndML~?N+07YJm~4fA+0`dLAj6eM+3CD zS4&3C>ZuqJzOPL!YEKU0IAg`9bZ?;U5W~8FW_X}B?IdCvDkGCQ_v8N!%z<4SW+G`X zsW7treDS8)y*6uU_w9ij~J zf!)N47FA%X(%@|KSOGBDP{{cp8k?vGkLzgcc_$8HG#WwXdfJu!;0`UID;^gi3jng< zlW1SIu_qsO5g#7PBEGAf9?kO65{cr4@-Bjr&M|CiScaN<>p)^Y-7_V74;C8)%aeYlUa7) z?7hpx*HQZ7Sm0RMlFl{{Ikj}`xYEm6+sVKNp&{3~x64c1Z3}?*)*+wr7Mh#%syR2; zT=US$Bl=vo2fEuuc$wq}*-Wu+sMR(N6_x?yN`MvxL64^~Vs^e<-%86KQBz^f;SL^> zbk-qm;~KT4p0SZC&UiKhwWSQ(6Q}YXaGgPX#0acr>)NIReg)rXu8v<|q_k=G5^T=d zjRV@_J?x0(F)_KebDM+vs7AKXO*n-(6FN1&;-MA@mI22uL2S)NM#GTirUU&PbSqI9 zIW&&?D(|>G(d?m-ua>1u)WEztwzo4F*Lp_YF8B?m@)9_KVo7=Hy6V8jikU-NRQ{No z`BcB*2(pm*^|mV;iXvTUkhD2jKZAfj7%!WvD_Q~^VS}-@qU_(Ccm1{_6 z3cRW>?asZQ>Jqe~DtYF|Y+`;V9<0uw#-cF3!n=b#jn3$UNH3Dk_We>EwBbjo)nfS* zzBqvD&3Xa!mfr10y@T2OUbMbg9k`*|W5V*_FfQnDY+7?!%-7$0*( zp*)nw{4};+glo>`b`R%z!&PMFap2?5BHKK1lYCvWvzTf=rvWpvl)+=XM62(`p9QSR z16odOHE{^i?MO6!Q^N3xQ&_GeQdjK7VLY zI=a8BCPX;tYCA$_4Ir!ZQD6qr)~nX{mZ=^$(2`5TtDe8k=F97?Y>m$m9iIJajR(jm zhE-fnnNhW8z(=5w{YB>)TO9jFHR0^Za_-9L-P|K5!#T)hzqyS-cvCw3l$6>fi927! zJ)M2A!E-i5hWigRmz>BV`xcW*&yHK?KgptZ;h@Y&TNj@XRW5f=wF zWTlSK|MO)>6oOTP3@Toqi1%%L}tTii5q=GCGDe zVQG5#%KNRoH(!mDFvY=%J+;}6*KtWQwvD+oac4j3%QTcb9939pR_u68pV_cMDUHnA zWJ|trhlt4hr7tgB)6uEv)2rRd?zXhw|9SJnySLvD?*F`bzuy1(Inp)8M_&JW#cu^; zm-XV1AWxOJ>e8?8geWfWS^*$#;-Pp$=ygrY>m=Ud-t?N|Twi^6_WHFmn%tO*zbApH zI#BUXf{m&Iu+u9iC_)EoT;qA0`yn%1A_=g7| H0LTCUg(625 literal 5805 zcmV;e7E%)*|r$6gy4?_Ch=9*}$pu(&%Q zAF_#7EwQ_`qqh~Md5Pis?N`MYiIPZ)Qmbtz5COZVrK*Qykt`OAMRu5HRS;*Syoz_v zPLy6ldjI|%e!lte!)x^u(%ZK;?|yjp=I!fuAKtuw|KW%C&tAWIdvo*tnfLls1yWN@ ztDy9}XUTmTY)NRO8+-qMG;Pk$y&q|vra}4i=f59_mlq^^Mf180i5C<_5{E$*=b0DE zj^dGQ51&^*UQ4zOfVibjZt&&oFOMXwE25ysnO7au2T`8FA6Ja^TH*D6EP^sfy(~z{ zpPqB7=YJmL@H2bi1xb=WkjSfYuPTF###kvG=ru!yzc+DKk#ZM=Vx8ZWP~*?N=9c2?b*{WW|{!Zet%kW8nO?ewJ>qzJSc>At=eWBz0CG zce!(N2dO79t*~#Kgf4(Ik6fB;oIAQGfQO5U}4^n=?2JIn>QutU34L*8fSXJ^J)5KgTsJufar72l)UO!9% zN)1`Dcf-84L}V9D$q)a3?&Sr_KS=)cyeex`6_K=;?UuyZ-YHxC5Rp30*+ZipAU1c3 zG6=rAfq!q|-@9e)vtR!G=Wk@@U{*{KN7LpFSPL5z4nWZf1~CKDK3sg+M@f0Vh!1ih zN0njS{X{F0hE+1vh17pnXK}^E-!>G-j)b8lGvcikBY8=Z9F295R1E!zz41hn%%WL$ zIR`I5u{=ar5{{!;k18d(#SgFP8O@4xgi9326BC&DD!Dgj1$418#}P2%Azfsd6=ae3 zP{uj~J0&U1Twi}sKY)zVSx!hzOEfgl4ynhnrR*n2voB1~>q)aaEQ{)C>J;wv@Qvd1 zCi)v|3Z1QbV(JmcLRYAAg!Dukk^7=z&V77|g2GRYd?n#+cqn~7KpuQ3#WF(1#FvZh z0+G+Yim>r7l2ubgjcJ&ZMdXZOlGxjc8uO2QQA%tD_hwM0e*;CchQxRM0g~i<3#&30 z8Ym8VO8R|3Op0RCm7adX)QBW6z30ulE8u&6IU6U+!@Kz)6uA9CiSX$hG%)p5oL6BI zL-Wo@;&oe~B(r40G4gPpWP2r`0t33=9_(e-4NWMli%Nv#G3;b7yT7dn!q_zwVJ6N% z5R(x!%{dd}RRZdcsy)lm{?|D2+TOp5_g5slUlR3@(~2$)$kuBMVwQyF$^8{dU=di} zQWOksXoU@U%SQ&4Q3Ym8Y@P0bsb4Fl+lkl*SpKi*O^zG<^7E zC6TV07l3x8>nG1L>ECFK4y?Qvcwp#1db9$QBxUmpslK}X%u9pz29|nu7>IU(YY6=? zETX$5nYEBMtb^R3d!?QFO1~iNao$Rwu-DmAnPL4}JKo=Z`Kc`f{g!)Q5jyukq(!?7 zK3x4W{4rZ{`A}A7pzxa0-V&aH-=c(Mc{rUXidE%DwhpXIq<65ap;VrzA9JHHofSjI zFn2Q_Z#PcuJ}&btowR5?nw9_y_!I^JcA+TA1RW=FmSR-hreIsNgO`09xk1N!V4I{2&m)+?4|O4#A*0q zX=kq=)YU;mY7IQT?BzEW(Z$~X#M$?-8jVk6~+~#!_ zQ8r+3H+30Z#y5l;_#@(S+ak`|gHUTYq=M<|c(W5`!619mz>7J9%K}VJn9$0nB8Td7 zOEsp;2DUF8d)^jzZd|m@^y74V6R*vQw}w(I?sV(MwYFgLaTD4*$sZ za?$jLm)@JJ*H^D6sjSVp_cI9-&=0u41y!_R8Y3b!6pycL&189J0g%+(yAEr-d#h3duu8jx(V0Uc?z$GX(gMq`0m zQ9#l>^SR2u(Bx!0xW>7BT5o^%VLlHJLAGaaQ|95(!8J^1h&pmK>s(#&%%$6?bBM?l zA6qML^oT7)6I4A1Lg zx6yq(Qm=Zt7_tn(#AbaLs|i5kLP&FHGPbh57%*xC4KwFJyzJS>4Z0vRQnBwBeU_>7 ze>;!Ehzb&qTNm((I}CKw9VN-`HVlej8z*t~b|?V z1-X|=oW>O^2Ni*osN++TvQIEM!#ju4HM=1g?Wt^y@a>inX5F4FD@ymFBU%*}3!v1| z0A&h$+f8n~Ez{YwrUl6&8)v^yt5v~OG3!DOO##D>sRu8hz#T*3!J4por}Z|^Mtf3j z#6FWzH^XUFcVO#Su;Br`*@&ajMUKe2aHAPjmxhCW`*=>v*bzAtsY3S}w}8E1%b8W? zwvBGHc}{iBXg%x7sjd?36V{c5wt1hM0M&Vw-D@7qt*RAk@*pwc>En0Zz!bqX5mKKo zowOlCxRryE9}R?=v;s^q74FJBZKp+?uZF>gBgNFltcbGrW5i$mPV?*vUOu-~;FET- zGqj#Q54Rv-p&vzjBR&o8NN1PqKww6G$jiGcAp5txAiFwAp3ofu5=irV=BvoO2jU$9 z_!4+qf&%bpp47O$1+M=T1jrNR%v-z5u^!O4FZs66LtZD5$Q-|?V0^*+64oUF0PCKX zSa|XeApGda&{~Spc5Fq$V!O1aq`F2Id(=HPet`h`I<$Rt-tg@#bc`?N4d;p2lZUq} zes`7UG}wF4hCzR%z(-;?j~2Qs{xO1guY<6qPnn54s&&ddw#f;Fx4Pg zh;#&=*UcP&XLU0hZg)qoh<)Na&nyH=ucuY&j8y1%a3yEwE}m#uC5CmkBz{0-CsL3H4G$!8 z%N%z<46~2eipNkq79AFZReTQvB{JkM=p%erN9=MLkqLi8Z9-`s6X@vJ>SG)(yHxZ* zlEeas62t8QwyU&G&8nynMY&9xM1g%V3AH%TtUfK+4Lz*;_S{$D^6qtrlAWYoeG%> zNUOZWX|N0)e72$b2=;Uo(>nt_+tNd2mQnf;SK&cVC(dQ{WediAls_1t#Z_7|P*zXH zi12-Fs!@Ab5c?U+KBapDb%z+{1$4s$wP__0(@^P|Y(GE#-@qKpwP7xj_Fj5J8<4t+ z#cUFhT~H?#U(!69#)rzm$A<~}iQ>46#8S!UcTgB)D~Q>w5bvzGnnR6cks93rm;5!a z;nqT726&;*bq5_dPw0q<4a{-Do%Qp$@mE3a`5wDWpT>AwIB~Sk|Hl z%v2g2XCBJ{IvXlEA5>!#_26+EjXm$gL5xNtNG?9)yAc&yM5kbpXkWImBA;{-8XoEn zz6zWkee%f?IpT%#x_}X38kVoEe|8${(7)^I=~E*ng^AqG0Ztb6o}1_QaRDkQ+vOwX z_a8N(mCr6;>_=;B=tX_}6nZtxdG-Z>B(|IP8e;3}Vgt(~bz(NG0Td#DLw~<%wE&b% ztJa{t45Dpll6$71sxr6ai}w^_mR5=+&kHB0(JX~MC2Jc~SU2Mq?x^7=mhVR}j2d|Z zjuER&&(t{dCUG_Hx-l!1^NeR8dMHx6&}HzCZNkU;CBF{0TVJz9%#9+OSqemT=0t{p z2%}`K5}@6K3AQfPCmpfuVN#=F+s;;(#zW&jvf*H@cuUOI42vu)*zZCdY8Z~m*0^S1 z9wA%g9KG^}CxNf$fGb)<x2fbb8nZIxH=X9?ZrSo1A`Yt+|Pz!z0>Uw+6c1MR?!i zM_ElVZ>YsKbrr?{dL=*)fS||I6EQmiuCJwKji@QG<}d~iAv)_2w{eKtT+dif6~{1} zj@nX&?V(V4RkzN8J>s-g*}A^ufZvig%GL4XkK{J(>VVBTyA(is0*9S~JSK+LcC>PE zWz@(Lx(R;}$2O<(D?7>p!P4Q_J%z2C$LPq>Tt=WDgKjwrCx>QZy~;b=l<4-*=vT{B zCQ4wQ9oq{OjB`CBZzuc)Q+WxJK((a2b)9u!Va41bEh>M^-E!(a-w3kM`SrG|9J#)_ z98;n4{>xTrn)Hb*XJ0v4Hnx?5&pRo{Z`~R>E+n#U$KyB*SE!BX_hau=8~*U) zf*HDoJ2ZX07xSUuGF8A5?mgbe8Xz;$RFv?W|_YpYX{6OmEf-V7K%xDC(V^ z=2w^X)#_l|s6Eyz5BlPS&a!H@Ii)~j&MS=#Pl zT5mXu%sjq(+}UB<&e^2BF4+hDSJ8oblmxfop{W{xTUTQUAL@tm?+@G6pC@%nUQHK;`s)`RX#7RP zrFsBW0hbv~-I27o1e6?>>tijnnDxZxyy2@{<0sHbB^AsCsIAL?IdjGeIIuj+?T+kTXm*Ty8DI>bnc9zRc;XoT#7^LVcyk0~i`mL?nQp4I3;)f_B`S_8 zd70uN(slErri)1MC=FyC>;m%yV_qWbhyKwcUk|^i0x)N>j2@8q3#$VOySP^90Uxg% zz%H0MNw=GMO*s*)A(%6iHF&&mzv7RkPqIfw;Lwc%cyt*&@$2aeiBL=c+{mL-K?i%S ziXH=C#q61&0oZMlD$sr&j?^Sydv(61HLYn)Yg*Hq*0iQIt!YhbTGN`=w5Bz!X-#Wd r)0)<_rZuf;O>0`yn%1 - 3.13.1-239 +- Allow syslog client to connect to kernel socket. BZ(1419946) + * Thu Feb 09 2017 Lukas Vrabec - 3.13.1-238 - Allow shiftfs to use xattr SELinux labels - Fix ssh_server_template by add sshd_t to require section.