* Thu Oct 10 2024 Zdenek Pytela <zpytela@redhat.com> - 35.1.46-1

- Label /run/modprobe.d with modules_conf_t
Resolves: RHEL-61453
- Allow boothd connect to kernel over a unix socket
Resolves: RHEL-57104
- Allow boothd connect to systemd-userdbd over a unix socket
Resolves: RHEL-57104
- Additional updates stalld policy for bpf usage
Resolves: RHEL-57075
- Update stalld policy for bpf usage
Resolves: RHEL-57075
- Allow ptp4l the sys_admin capability
Resolves: RHEL-55133
- Label /dev/hfi1_[0-9]+ devices
Resolves: RHEL-54996
- Confine iio-sensor-proxy
Resolves: RHEL-17346
This commit is contained in:
Zdenek Pytela 2024-10-10 21:51:44 +02:00
parent 6d48c6e32c
commit 93538d0a93
3 changed files with 30 additions and 5 deletions

View File

@ -2747,3 +2747,10 @@ sap = module
# bootupd - bootloader update daemon
#
bootupd = module
# Layer: contrib
# Module: iiosensorproxy
#
# Policy for iio-sensor-proxy - IIO sensors to D-Bus proxy
#
iiosensorproxy = module

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 0113b35519369e628e7fcd87af000cfcd4b1fa6c
%global commit fa8b167a5eae885c03ac48ecec4fc0b5a5358ecb
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -23,8 +23,8 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 38.1.45
Release: 3%{?dist}
Version: 35.1.46
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
Source1: modules-targeted-base.conf
@ -809,6 +809,24 @@ exit 0
%endif
%changelog
* Thu Oct 10 2024 Zdenek Pytela <zpytela@redhat.com> - 35.1.46-1
- Label /run/modprobe.d with modules_conf_t
Resolves: RHEL-61453
- Allow boothd connect to kernel over a unix socket
Resolves: RHEL-57104
- Allow boothd connect to systemd-userdbd over a unix socket
Resolves: RHEL-57104
- Additional updates stalld policy for bpf usage
Resolves: RHEL-57075
- Update stalld policy for bpf usage
Resolves: RHEL-57075
- Allow ptp4l the sys_admin capability
Resolves: RHEL-55133
- Label /dev/hfi1_[0-9]+ devices
Resolves: RHEL-54996
- Confine iio-sensor-proxy
Resolves: RHEL-17346
* Mon Sep 16 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.45-3
- Rebuild
Resolves: RHEL-55414

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-0113b35.tar.gz) = ce85fe60a7f7b7b9882ca5346263f0df4fd583b16e5193881f836e368052b81dc59c1932b28802a96d0d8475befa87895ae6299afb33e6810cbbf175ef83f61e
SHA512 (selinux-policy-fa8b167.tar.gz) = 24ed3431be5603e7d115f4fbf66d94244a3f2b0abe5416e8c3f4e60a61c965a7b460d6c98a8dc1ee501bc077f783e08f26ebc1686e813b5cc6dff9e26edc500a
SHA512 (container-selinux.tgz) = 1800a0623feb0d3b6663f1707ee3d8ca6ec79fd2d51b748018798f452a9e4041d6c1f52c461b0e3d45cec2f97aac4f59e2b8cb7617da29b018157ec78a471cd5
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = c35b1d0956a2356143cf459aef1e73d83ebf9ba65397e38a1d6918f90e3ee0fdf647142a18fb947327a067d507fcfc3a236b24c437aa122dd6f690ccbd6ea7c7