rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI selinux-policy-42.1.7-1.el10_1.2

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-03-17 09:24:31 -04:00
parent bd12ec1602
commit 82d905a0d8
1 changed files with 57 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
selinux-policy.spec
View File

@ -24,7 +24,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 42.1.7
Release: 1%{?dist}.1
Release: 1%{?dist}.2
License: GPL-2.0-or-later
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
Source1: Makefile.devel
@ -626,11 +626,11 @@ exit 0
%posttrans targeted
%checkConfigConsistency targeted
%postInstall $1 targeted
%{_libexecdir}/selinux/varrun-convert.sh targeted
%{_libexecdir}/selinux/binsbin-convert.sh targeted
%postInstall $1 targeted
%{_sbindir}/restorecon -Ri /usr/lib/sysimage/rpm /var/lib/rpm /etc/mdevctl.d
%{_sbindir}/restorecon -i /usr/sbin/fapolicyd* /usr/sbin/usbguard*
%{_sbindir}/restorecon -Ri /usr/sbin /var/run
%postun targeted
if [ $1 = 0 ]; then
@ -653,13 +653,25 @@ exit 0
%{_sbindir}/selinuxenabled && %{_sbindir}/semodule -nB 2> /dev/null
exit 0
%triggerin -- fapolicyd-selinux
%triggerin -- grafana
%{_libexecdir}/selinux/binsbin-convert.sh targeted
%{_sbindir}/restorecon /usr/sbin/fapolicyd*
%{_sbindir}/restorecon -Ri /usr/sbin
%triggerin -- usbguard-selinux
%triggerin -- linuxptp
%{_libexecdir}/selinux/binsbin-convert.sh targeted
%{_sbindir}/restorecon /usr/sbin/usbguard*
%{_sbindir}/restorecon -Ri /usr/sbin
%triggerin -- openwsman-server
%{_libexecdir}/selinux/binsbin-convert.sh targeted
%{_sbindir}/restorecon -Ri /usr/sbin
%triggerin -- smartmontools
%{_libexecdir}/selinux/binsbin-convert.sh targeted
%{_sbindir}/restorecon -Ri /usr/sbin
%triggerin -- usbguard
%{_libexecdir}/selinux/binsbin-convert.sh targeted
%{_sbindir}/restorecon -Ri /usr/sbin
%triggerprein -p <lua> -- container-selinux
%removeVarrunModuleLua targeted
@ -670,6 +682,18 @@ exit 0
%triggerprein -p <lua> -- fapolicyd-selinux
%removeBinsbinModuleLua targeted
%triggerprein -p <lua> -- grafana-selinux
%removeBinsbinModuleLua targeted
%triggerprein -p <lua> -- linuxptp-selinux
%removeBinsbinModuleLua targeted
%triggerprein -p <lua> -- openwsman-selinux
%removeBinsbinModuleLua targeted
%triggerprein -p <lua> -- smartmontools-selinux
%removeBinsbinModuleLua targeted
%triggerprein -p <lua> -- usbguard-selinux
%removeBinsbinModuleLua targeted
@ -677,18 +701,30 @@ exit 0
rm -f %{_sysconfdir}/selinux/*/modules/active/modules/sandbox.pp.disabled 2>/dev/null
exit 0
%triggerpostun -- pcp-selinux
%{_libexecdir}/selinux/varrun-convert.sh targeted
exit 0
%triggerpostun -- container-selinux
%{_libexecdir}/selinux/varrun-convert.sh targeted
exit 0
%triggerpostun -- fapolicyd-selinux
%triggerpostun -- grafana-selinux
%{_libexecdir}/selinux/binsbin-convert.sh targeted
exit 0
%triggerpostun -- linuxptp-selinux
%{_libexecdir}/selinux/binsbin-convert.sh targeted
exit 0
%triggerpostun -- openwsman-selinux
%{_libexecdir}/selinux/binsbin-convert.sh targeted
exit 0
%triggerpostun -- smartmontools-selinux
%{_libexecdir}/selinux/binsbin-convert.sh targeted
exit 0
%triggerpostun -- pcp-selinux
%{_libexecdir}/selinux/varrun-convert.sh targeted
exit 0
%triggerpostun -- usbguard-selinux
%{_libexecdir}/selinux/binsbin-convert.sh targeted
exit 0
@ -908,10 +944,11 @@ exit 0
%posttrans mls
%checkConfigConsistency mls
%postInstall $1 mls
%{_libexecdir}/selinux/varrun-convert.sh mls
%{_libexecdir}/selinux/binsbin-convert.sh mls
%postInstall $1 mls
%{_sbindir}/restorecon -Ri /usr/lib/sysimage/rpm /var/lib/rpm
%{_sbindir}/restorecon -Ri /usr/sbin /var/run
%postun mls
if [ $1 = 0 ]; then
@ -949,6 +986,13 @@ SELinux mls policy package - extra modules
%changelog
## START: Generated by rpmautospec
* Thu Feb 19 2026 Vit Mojzis <vmojzis@redhat.com> - 42.1.7-1.2
- Update specfile triggers for DSP modules (RHEL-132492)
- Update specfile trigger for smartmontools
- Update specfile trigger for openwsman
- Move triggerin scriptlets to the parent packages (RHEL-150914)
- Rebuild policy before running {binsbin|varrun}-convert.sh (RHEL-128498)
* Fri Feb 13 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1.1
- Allow nfsd_t domain setuid and setgid capability for rpc.mountd
Resolves: RHEL-148248