From a4fcadc086007366d93a31e49c76f238fd193512 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Sun, 6 Jun 2021 23:32:21 +0200 Subject: [PATCH] * Sun Jun 06 2021 Zdenek Pytela - 34.10-1 - Allow using opencryptoki for ipsec - Allow using opencryptoki for certmonger - Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans() - Label /dev/dma_heap with dma_device_dir_t - Allow syslogd watch non security dirs conditionally - Introduce logging_syslogd_list_non_security_dirs tunable - Remove openhpi module - Allow udev to watch fixed disk devices - Allow httpd_sys_script_t read, write, and map hugetlbfs files - Allow apcupsd get attributes of cgroup filesystems --- selinux-policy.spec | 16 ++++++++++++++-- sources | 4 ++-- 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/selinux-policy.spec b/selinux-policy.spec index be3b80da..7547eaa1 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -1,6 +1,6 @@ # github repo with selinux-policy sources %global giturl https://github.com/fedora-selinux/selinux-policy -%global commit 2ed658b0f359f464daaf11587740f7f02fbb7175 +%global commit 3f7821fedda121e9e8f287c55c1ac4e6c069aade %global shortcommit %(c=%{commit}; echo ${c:0:7}) %define distro redhat @@ -23,7 +23,7 @@ %define CHECKPOLICYVER 3.2 Summary: SELinux policy configuration Name: selinux-policy -Version: 34.9 +Version: 34.10 Release: 1%{?dist} License: GPLv2+ Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz @@ -792,6 +792,18 @@ exit 0 %endif %changelog +* Sun Jun 06 2021 Zdenek Pytela - 34.10-1 +- Allow using opencryptoki for ipsec +- Allow using opencryptoki for certmonger +- Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans() +- Label /dev/dma_heap with dma_device_dir_t +- Allow syslogd watch non security dirs conditionally +- Introduce logging_syslogd_list_non_security_dirs tunable +- Remove openhpi module +- Allow udev to watch fixed disk devices +- Allow httpd_sys_script_t read, write, and map hugetlbfs files +- Allow apcupsd get attributes of cgroup filesystems + * Thu May 27 2021 Zdenek Pytela - 34.9-1 - Add kerberos object filetrans for nsswitchdomain - Allow fail2ban watch various log files diff --git a/sources b/sources index 740f435e..65b4e814 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (selinux-policy-2ed658b.tar.gz) = 6abd2ca2431d0fcfbc0e7644b5f3a98d9b3e36703580979681c04eb75cea0bd66f83f014cec9e392c75142e8aef125da9584da8d38a86a89277748b60d25ec54 -SHA512 (container-selinux.tgz) = d572a659c7fc075b018ec02210dcf0efd92e130cf61afe2bbcb8f58117dc277aecf8f99acf75b8c3d46cf853cfbad716a1820852f0763ca6c7b7835225360dd3 +SHA512 (selinux-policy-3f7821f.tar.gz) = 9640771497384f190b82d5ec0fa5a9902c46abd101143ddcc98398215d5e8af90ff4d845b04656cdb9a2148afb84a3fb21e7b546d7f6632375d9c580a322b493 +SHA512 (container-selinux.tgz) = cb406a14d3ad610db8087115e1ade10b42c7e26db1af1f00a02cad9e5098a2493a1509ea9519bce8ec456a65b0c3b22d0d56ba8eeaa15c2c186dcf516d9be351 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4