* Tue Jul 16 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.5-1

- Allow to create and delete socket files created by rhsm.service
Resolves: RHEL-40857
- Allow svirt read virtqemud fifo files
Resolves: RHEL-40350
- Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
Resolves: RHEL-37822
- Allow virtqemud read virt-dbus process state
Resolves: RHEL-37822
- Allow virtqemud run ssh client with a transition
Resolves: RHEL-43215
- Allow virtnetworkd exec shell when virt_hooks_unconfined is on
Resolves: RHEL-41168
- Allow NetworkManager the sys_ptrace capability in user namespace
Resolves: RHEL-46717
- Update keyutils policy
Resolves: RHEL-38920
- Allow ip the setexec permission
Resolves: RHEL-41182
This commit is contained in:
Zdenek Pytela 2024-07-16 19:05:46 +02:00
parent cbb1ba3beb
commit 85e80ce5b4
2 changed files with 24 additions and 4 deletions

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 00e82da8812f14cb5022b497acb3955b224cf8d6
%global commit 575a5e6f268a40c25e7921ef79e00918fb7ce476
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -23,7 +23,7 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 40.13.4
Version: 40.13.5
Release: 1%{?dist}
License: GPL-2.0-or-later
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -860,6 +860,26 @@ exit 0
%endif
%changelog
* Tue Jul 16 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.5-1
- Allow to create and delete socket files created by rhsm.service
Resolves: RHEL-40857
- Allow svirt read virtqemud fifo files
Resolves: RHEL-40350
- Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
Resolves: RHEL-37822
- Allow virtqemud read virt-dbus process state
Resolves: RHEL-37822
- Allow virtqemud run ssh client with a transition
Resolves: RHEL-43215
- Allow virtnetworkd exec shell when virt_hooks_unconfined is on
Resolves: RHEL-41168
- Allow NetworkManager the sys_ptrace capability in user namespace
Resolves: RHEL-46717
- Update keyutils policy
Resolves: RHEL-38920
- Allow ip the setexec permission
Resolves: RHEL-41182
* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.4-1
- Confine libvirt-dbus
Resolves: RHEL-37822

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-00e82da.tar.gz) = d59f7a42c8802a8b907f1bc57829443be1810ff4b1e10d0942fd730b65889a1ff6e6b047b7def7ce3747ec0656ce9c3e281ff264f5d8478d1cbbbd339539a7d2
SHA512 (selinux-policy-575a5e6.tar.gz) = af502b1414c9a418e7c6647ba9f6c6c54dcaa08e96c5fb026be04eba30b3a435f560828988ee0ece3b1dde2900411420a07d3eaff68cbc4b7eaf7455f7ddd683
SHA512 (container-selinux.tgz) = 9864a3de2ae1c8de37089b6f5157fc6aa67cdbe4dd6e2fce759d4ccbf15aa194e020fd9dec0d77bd46afb4064cc33b9d90d1acfac0fe8ac156b5a103e296314f
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = dbf197403b68cdbfb8f919487a0021c989ceef61c66d67ab3d4f97d5c94a33aada6e1cf0269306dd69085b065f206f02c963bb3896b248d8bb3a3fda5cf08154