* Sun Jun 06 2021 Zdenek Pytela <zpytela@redhat.com> - 34.10-1

- Allow using opencryptoki for ipsec
- Allow using opencryptoki for certmonger
- Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
- Label /dev/dma_heap with dma_device_dir_t
- Allow syslogd watch non security dirs conditionally
- Introduce logging_syslogd_list_non_security_dirs tunable
- Remove openhpi module
- Allow udev to watch fixed disk devices
- Allow httpd_sys_script_t read, write, and map hugetlbfs files
- Allow apcupsd get attributes of cgroup filesystems
This commit is contained in:
Zdenek Pytela 2021-06-06 23:32:21 +02:00
parent 6b0b962be0
commit a4fcadc086
2 changed files with 16 additions and 4 deletions

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 2ed658b0f359f464daaf11587740f7f02fbb7175
%global commit 3f7821fedda121e9e8f287c55c1ac4e6c069aade
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -23,7 +23,7 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 34.9
Version: 34.10
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -792,6 +792,18 @@ exit 0
%endif
%changelog
* Sun Jun 06 2021 Zdenek Pytela <zpytela@redhat.com> - 34.10-1
- Allow using opencryptoki for ipsec
- Allow using opencryptoki for certmonger
- Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
- Label /dev/dma_heap with dma_device_dir_t
- Allow syslogd watch non security dirs conditionally
- Introduce logging_syslogd_list_non_security_dirs tunable
- Remove openhpi module
- Allow udev to watch fixed disk devices
- Allow httpd_sys_script_t read, write, and map hugetlbfs files
- Allow apcupsd get attributes of cgroup filesystems
* Thu May 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.9-1
- Add kerberos object filetrans for nsswitchdomain
- Allow fail2ban watch various log files

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-2ed658b.tar.gz) = 6abd2ca2431d0fcfbc0e7644b5f3a98d9b3e36703580979681c04eb75cea0bd66f83f014cec9e392c75142e8aef125da9584da8d38a86a89277748b60d25ec54
SHA512 (container-selinux.tgz) = d572a659c7fc075b018ec02210dcf0efd92e130cf61afe2bbcb8f58117dc277aecf8f99acf75b8c3d46cf853cfbad716a1820852f0763ca6c7b7835225360dd3
SHA512 (selinux-policy-3f7821f.tar.gz) = 9640771497384f190b82d5ec0fa5a9902c46abd101143ddcc98398215d5e8af90ff4d845b04656cdb9a2148afb84a3fb21e7b546d7f6632375d9c580a322b493
SHA512 (container-selinux.tgz) = cb406a14d3ad610db8087115e1ade10b42c7e26db1af1f00a02cad9e5098a2493a1509ea9519bce8ec456a65b0c3b22d0d56ba8eeaa15c2c186dcf516d9be351
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4