From a88094d17d79c9eac8b9746d9829b74ae9ddd53e Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Wed, 16 Nov 2022 09:10:02 +0100 Subject: [PATCH] * Wed Nov 16 2022 Zdenek Pytela - 34.1.47-1 - Add domain_unix_read_all_semaphores() interface Resolves: rhbz#2123358 - Allow chronyd talk with unconfined user over unix domain dgram socket Resolves: rhbz#2141255 - Allow unbound connectto unix_stream_socket Resolves: rhbz#2141236 - added policy for systemd-socket-proxyd Resolves: rhbz#2141606 - Allow samba-dcerpcd use NSCD services over a unix stream socket Resolves: rhbz#2121729 - Allow insights-client unix_read all domain semaphores Resolves: rhbz#2123358 - Allow insights-client manage generic locks Resolves: rhbz#2123358 - Allow insights-client create gluster log dir with a transition Resolves: rhbz#2123358 - Allow insights-client domain transition on semanage execution Resolves: rhbz#2123358 - Disable rpm verification on interface_info Resolves: rhbz#2134515 --- selinux-policy.spec | 24 ++++++++++++++++++++++-- sources | 4 ++-- 2 files changed, 24 insertions(+), 4 deletions(-) diff --git a/selinux-policy.spec b/selinux-policy.spec index 851f869f..88238635 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -1,6 +1,6 @@ # github repo with selinux-policy sources %global giturl https://github.com/fedora-selinux/selinux-policy -%global commit c259481eee4de0b10ada4e57ce5f8710ecf83499 +%global commit 5500d919bd184b3930ccd797cbd991f8dda2a85d %global shortcommit %(c=%{commit}; echo ${c:0:7}) %define distro redhat @@ -23,7 +23,7 @@ %define CHECKPOLICYVER 3.2 Summary: SELinux policy configuration Name: selinux-policy -Version: 34.1.46 +Version: 34.1.47 Release: 1%{?dist} License: GPLv2+ Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz @@ -794,6 +794,26 @@ exit 0 %endif %changelog +* Wed Nov 16 2022 Zdenek Pytela - 34.1.47-1 +- Allow chronyd talk with unconfined user over unix domain dgram socket +Resolves: rhbz#2141255 +- Allow unbound connectto unix_stream_socket +Resolves: rhbz#2141236 +- added policy for systemd-socket-proxyd +Resolves: rhbz#2141606 +- Allow samba-dcerpcd use NSCD services over a unix stream socket +Resolves: rhbz#2121729 +- Allow insights-client unix_read all domain semaphores +Resolves: rhbz#2123358 +- Allow insights-client manage generic locks +Resolves: rhbz#2123358 +- Allow insights-client create gluster log dir with a transition +Resolves: rhbz#2123358 +- Allow insights-client domain transition on semanage execution +Resolves: rhbz#2123358 +- Disable rpm verification on interface_info +Resolves: rhbz#2134515 + * Fri Nov 04 2022 Nikola Knazekova - 34.1.46-1 - new version Resolves: rhbz#2134827 diff --git a/sources b/sources index a2469e85..524c7395 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (selinux-policy-c259481.tar.gz) = 91cb22e14a07d43d6d9cdd743e93a8e280eb4bbeb44a2ccb593f1888f1891ed24acbecfde273640af0a7086d263d52d7a0e16f9d5ab9ce98556bc3bf774222d9 -SHA512 (container-selinux.tgz) = adb90d7806cf0135f3087c3884a26dfaba6c4f1a6842773818508e6cd3f8147f06fe749bd29d16c7cf9ac48541cb48e7076fcec19c99cc004d1bd9c86e430684 +SHA512 (selinux-policy-5500d91.tar.gz) = a2620f2c974fb977d44d5a6e08cf26f466110b073a789b722cd49df58b87318ade00dae31eeb6ec782fce1c17b69ce6fce942dc30e062bdab5a212b71aa0f42b +SHA512 (container-selinux.tgz) = 9bc55c84dc38c63d5d2e869080315f7ca795fc17b8131c00e6a96c26665168a11683dcd3469c107b832f4c280207a693e20f67333268aaa2ce2c34e146326c2d SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4