From a8e3dc5636f5187f72069f700bac66b44b8af367 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Thu, 23 Jan 2025 14:49:22 +0100 Subject: [PATCH] * Thu Jan 23 2025 Zdenek Pytela - 40.13.23-1 - Remove the lockdown class from the policy Resolves: RHEL-36741 - Remove socket from unconfined_domain_type allow rule Resolves: RHEL-36741 - Include key_socket in socket_class_set Resolves: RHEL-36741 --- changelog | 8 ++++++++ selinux-policy.spec | 4 ++-- sources | 4 ++-- 3 files changed, 12 insertions(+), 4 deletions(-) diff --git a/changelog b/changelog index 71f79f8f..831ea5c4 100644 --- a/changelog +++ b/changelog @@ -1,3 +1,11 @@ +* Thu Jan 23 2025 Zdenek Pytela - 40.13.23-1 +- Remove the lockdown class from the policy +Resolves: RHEL-36741 +- Remove socket from unconfined_domain_type allow rule +Resolves: RHEL-36741 +- Include key_socket in socket_class_set +Resolves: RHEL-36741 + * Thu Jan 16 2025 Zdenek Pytela - 40.13.22-1 - Allow staff user dbus chat with virt-dbus Resolves: RHEL-73914 diff --git a/selinux-policy.spec b/selinux-policy.spec index 701d9311..aaf063a3 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -5,7 +5,7 @@ # github repo with selinux-policy sources %global giturl https://github.com/fedora-selinux/selinux-policy -%global commit 526a180591de075f64e778a26cdb3e07766d9319 +%global commit 049c14b918202275ad6fd4f63b3c94d3c6e8898d %global shortcommit %(c=%{commit}; echo ${c:0:7}) %define distro redhat @@ -17,7 +17,7 @@ %define CHECKPOLICYVER 3.8 Summary: SELinux policy configuration Name: selinux-policy -Version: 40.13.22 +Version: 40.13.23 Release: 1%{?dist} License: GPL-2.0-or-later Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz diff --git a/sources b/sources index 3bb7bbee..0eb59949 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (selinux-policy-526a180.tar.gz) = 7c49870d04d79b5f1c8d64c3edbcd590b6ee4a3aaa5761f93804041745a7eb8f5d9cad10e37a36d5568940107f07e83bce9bf5ef7b43910016434caf0d25c6c8 +SHA512 (selinux-policy-049c14b.tar.gz) = 7740132bc38c37e479d0760e217f5d246db2e1a33ef86f7fe22ac333f8ed97d0da9c2dd4cc8f564d3acba197b7a31fda15a51d5ffd94d052d73151519d4a0b89 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4 -SHA512 (container-selinux.tgz) = a0d9025ee2e4500388de36abf8f635d820179f56d7d47720097c6b73fe876b06f64c200ab16f7b3b02c5002ea63646d15326ea04263c0e5c2b0a5c2120284ffd +SHA512 (container-selinux.tgz) = 51eabb30a79aa80e41e8d8fa4ae3570eb121151768c059307bc04c3f0f477090a0044a7d4cf3246375945ef37c1b269b288ce6107f75bf1b280a9132e14eb858