rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

* Tue Mar 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-4

Browse Source 
- Allow l2tpd_t domain to create pppox sockets
- Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_lib_t link files BZ(1544251)
- Add interface abrt_map_cache()
- Update gnome_manage_home_config() to allow also map permission BZ(1544270)
- Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770)
- Dontaudit kernel bug when several services requesting load kernel module
- Allow traceroute and unconfined domains creating sctp sockets
- Add interface corenet_sctp_bind_generic_node()
- Allow ping_t domain to create icmp sockets
- Allow staff_t to mmap abrt_var_cache_t BZ(1544273)
- Fix typo bug in dev_map_framebuffer() interface BZ(1551842)
- Dontaudit kernel bug when several services requesting load kernel module
This commit is contained in:
Lukas Vrabec 2018-03-06 16:16:43 +01:00
parent 47ee5f4780
commit 870fdbbf14
No known key found for this signature in database
GPG Key ID: 47201AC42F29CE06
3 changed files with 22 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -254,3 +254,5 @@ serefpolicy*
/selinux-policy-2c13be1.tar.gz /selinux-policy-2c13be1.tar.gz
/selinux-policy-e16d205.tar.gz /selinux-policy-e16d205.tar.gz
/selinux-policy-contrib-9facb1c.tar.gz /selinux-policy-contrib-9facb1c.tar.gz
/selinux-policy-contrib-f564072.tar.gz
/selinux-policy-bd7ad92.tar.gz

20
selinux-policy.spec
View File

@ -1,11 +1,11 @@
# github repo with selinux-policy base sources # github repo with selinux-policy base sources
%global git0 https://github.com/fedora-selinux/selinux-policy %global git0 https://github.com/fedora-selinux/selinux-policy
%global commit0 e16d205404edadd93214b9622c8c795ea53abe77 %global commit0 bd7ad92fc722388928f9441892a078018914cb7b
%global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
# github repo with selinux-policy contrib sources # github repo with selinux-policy contrib sources
%global git1 https://github.com/fedora-selinux/selinux-policy-contrib %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
%global commit1 9facb1c4761877d6461472a98b8a0bc29229c83e %global commit1 f5640723a5d5982bde2a85b6003c12d2fbf976b6
%global shortcommit1 %(c=%{commit1}; echo ${c:0:7}) %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
%define distro redhat %define distro redhat
@ -29,7 +29,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.14.2 Version: 3.14.2
Release: 3%{?dist} Release: 4%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@ -714,6 +714,20 @@ exit 0
%endif %endif
%changelog %changelog
* Tue Mar 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-4
- Allow l2tpd_t domain to create pppox sockets
- Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_lib_t link files BZ(1544251)
- Add interface abrt_map_cache()
- Update gnome_manage_home_config() to allow also map permission BZ(1544270)
- Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770)
- Dontaudit kernel bug when several services requesting load kernel module
- Allow traceroute and unconfined domains creating sctp sockets
- Add interface corenet_sctp_bind_generic_node()
- Allow ping_t domain to create icmp sockets
- Allow staff_t to mmap abrt_var_cache_t BZ(1544273)
- Fix typo bug in dev_map_framebuffer() interface BZ(1551842)
- Dontaudit kernel bug when several services requesting load kernel module
* Mon Mar 05 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-3 * Mon Mar 05 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-3
- Allow vdagent_t domain search cgroup dirs BZ(1541564) - Allow vdagent_t domain search cgroup dirs BZ(1541564)
- Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247) - Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)

6
sources
View File

@ -1,3 +1,3 @@
SHA512 (container-selinux.tgz) = 4a209e4adc97422ce25f867096024409261ba73aaf4c2926a336e9c1dc48fc2024498667a18a19c85e926f3f87f090422e54e0774f83c98ce75bb81a9040f0d9 SHA512 (container-selinux.tgz) = 034b1fe897360274159e54b0f872919a275522abf8017bf5d2fae4c43e5475367b850e1448edbeee0281ac8a1f208a21da0ee96bf86cba995008c597f8e06c58
SHA512 (selinux-policy-e16d205.tar.gz) = 721ead4f225e9071724ee9a2b1c521de6289e90b4b5da3fd6458421b1cf611d48928eb41fc7d852cf6ff7cd5bfa4047bf64b292896dce0281953bb46b8bd6b2a SHA512 (selinux-policy-contrib-f564072.tar.gz) = 35587369042238f95d80f8591fc6159fecb4b08c1a72f4ea09dc4cb14198353f2cfb20db11b51cf20244656e408fd119abcaf02c1784455dd33b31c35f11f809
SHA512 (selinux-policy-contrib-9facb1c.tar.gz) = 5f23eb8a311134c8b773a2b66f0761c07409b5645158b2a92f156eb4ce8bd25dfddd7f902bb37f75b97d91559e74ce6f25c21d7af7564b4e2d0d3b9d2d262664 SHA512 (selinux-policy-bd7ad92.tar.gz) = 36239c76258f147d432de05a75cf26111671953f60a124cfab01bc8eb66be45e34c52357c0e0e864f30db045e8a7da75a75c16a2c0116716c26bedfb52485d6b