* Fri Mar 19 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-7

- Allow xdm_t watch systemd-logind session dirs
- Allow xdm_t transition to system_dbusd_t
- Allow confined users login into graphic session
- Allow login_userdomain watch systemd login session dirs
- install_t: Allow NoNewPriv transition from systemd
- Remove setuid/setgid capabilities from mysqld_t
- Add context for new mariadbd executable files
- Allow netutils_t create netlink generic socket
- Allow systemd the audit_control capability conditionally
This commit is contained in:
Zdenek Pytela 2021-03-19 21:52:07 +01:00
parent 77437ed12d
commit 7e06a74914
2 changed files with 15 additions and 4 deletions

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit e3da92314ccfcc7b263aa44d0c9f824703df197c
%global commit d552a9bea539b67ebe404601074887a8c48a3f3b
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -24,7 +24,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.14.8
Release: 6%{?dist}
Release: 7%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
Source1: modules-targeted-base.conf
@ -796,6 +796,17 @@ exit 0
%endif
%changelog
* Fri Mar 19 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-7
- Allow xdm_t watch systemd-logind session dirs
- Allow xdm_t transition to system_dbusd_t
- Allow confined users login into graphic session
- Allow login_userdomain watch systemd login session dirs
- install_t: Allow NoNewPriv transition from systemd
- Remove setuid/setgid capabilities from mysqld_t
- Add context for new mariadbd executable files
- Allow netutils_t create netlink generic socket
- Allow systemd the audit_control capability conditionally
* Thu Mar 11 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-6
- Allow polkit-agent-helper-1 read logind sessions files
- Allow polkit-agent-helper read init state

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-e3da923.tar.gz) = d3963ff469fc1dd8d5fb525cc78276109a1220fe528839549c74a1d9676d0fe481926718a40c1bf0062b6823730200a2d69141c8ece3c07ed1f9e12d2b4a2fb7
SHA512 (container-selinux.tgz) = 2256f3e211e3268c3912b22ab4754828fb7b58d1241c7b406e213dd9f79cf37fbd6b526101a5722c36a56b592bedcba4f3eda1cb5ac5a2b65804f527c8b7769e
SHA512 (selinux-policy-d552a9b.tar.gz) = 0209126192da510aca892778d55e3f8f7b51e94c7f574beb2fca6d98707cd474cc98499664e92139fec455b211f613454b8b37d2a6c2694c3aef0f18bcb434cc
SHA512 (container-selinux.tgz) = 0e4d2aea5a826cc1774923fa7a3fa359178d5dc858ddec4df26d6d4881bc2bb92d95a30e6b9a747407d815be330e0d12cfa4b2396c0b63bae47efc7a1069c0d6
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4