diff --git a/selinux-policy.spec b/selinux-policy.spec index 16cd7310..c5f39f4c 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -1,6 +1,6 @@ # github repo with selinux-policy sources %global giturl https://github.com/fedora-selinux/selinux-policy -%global commit c271ed3736644eea19ca6793235772cdca31e557 +%global commit 0b21d4c0c4587cf2f8503a27109b729394bc68c1 %global shortcommit %(c=%{commit}; echo ${c:0:7}) %define distro redhat @@ -23,7 +23,7 @@ %define CHECKPOLICYVER 3.2 Summary: SELinux policy configuration Name: selinux-policy -Version: 34.1.25 +Version: 34.1.26 Release: 1%{?dist} License: GPLv2+ Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz @@ -792,6 +792,24 @@ exit 0 %endif %changelog +* Thu Feb 17 2022 Zdenek Pytela - 34.1.26-1 +- Remove permissive domain for insights_client_t +Resolves: rhbz#2055823 +- New policy for insight-client +Resolves: rhbz#2055823 +- Allow confined sysadmin to use tool vipw +Resolves: rhbz#2053458 +- Allow chage domtrans to sssd +Resolves: rhbz#2054657 +- Remove label for /usr/sbin/bgpd +Resolves: rhbz#2055578 +- Dontaudit pkcsslotd sys_admin capability +Resolves: rhbz#2055639 +- Do not change selinuxuser_execmod and selinuxuser_execstack +Resolves: rhbz#2055822 +- Allow tuned to read rhsmcertd config files +Resolves: rhbz#2055823 + * Mon Feb 14 2022 Zdenek Pytela - 34.1.25-1 - Allow systemd watch unallocated ttys Resolves: rhbz#2054150 diff --git a/sources b/sources index 4accb357..d7a8cb06 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (selinux-policy-c271ed3.tar.gz) = 75caf66ee3fcc0dec898b10f4e94596a2edad4a235c34075e076b8bed2bd553f39f545c699265715ec961e47d251f6c62b682e586ea3597c8bba7443a7be98cd +SHA512 (selinux-policy-0b21d4c.tar.gz) = 76c7f8ada11fcaaf91ff988e4f620fdcfb308b2d44a55c581de0273cce45a5882c7545b7ff2afdfe06dc829197cf2e9569251002bda6a1948d5b48409dec0e85 +SHA512 (container-selinux.tgz) = 7d34c2fd477cfebc34c740cad8260c7afb51e34fb0f726dd465d3136fe89d32b5683f6d8eafcaa7dac309efe39e39e6a3f06793d7d021018240cf703353b5d79 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4 -SHA512 (container-selinux.tgz) = 1f69b7e899b5e46c0c4f84e559c0ac00a82fca1e50045d809bb260946c17c88301ec5b65d45ac0f6ecb49410ab37272c0028fcd92d801173f6a89b9e30b27bf9