* Fri Jan 12 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-134

- Allow syslog to run unconfined scripts conditionally
Resolves: RHEL-10087
- Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
Resolves: RHEL-10087
- Allow collectd connect to statsd port
Resolves: RHEL-19482
- Allow collectd_t read network state symlinks
Resolves: RHEL-19482
- Allow collectd_t domain to create netlink_generic_socket sockets
Resolves: RHEL-19482
- Allow opafm search nfs directories
Resolves: RHEL-19426
- Allow mdadm list stratisd data directories
Resolves: RHEL-21374
This commit is contained in:
Zdenek Pytela 2024-01-12 16:52:31 +01:00
parent bbcf1324a4
commit a99bd017ea
3 changed files with 24 additions and 6 deletions

2
.gitignore vendored
View File

@ -30,3 +30,5 @@ SOURCES/selinux-policy-contrib-c6da44c.tar.gz
/selinux-policy-contrib-5b3c7b8.tar.gz
/selinux-policy-fc55894.tar.gz
/selinux-policy-contrib-98baf55.tar.gz
/selinux-policy-621d818.tar.gz
/selinux-policy-contrib-61ad859.tar.gz

View File

@ -1,11 +1,11 @@
# github repo with selinux-policy base sources
%global git0 https://github.com/fedora-selinux/selinux-policy
%global commit0 53d5c585c535c91819f0c1218e57678427e4be60
%global commit0 621d818f129565750683eff2f7fb6100bdb3cff9
%global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
# github repo with selinux-policy contrib sources
%global git1 https://github.com/fedora-selinux/selinux-policy-contrib
%global commit1 98baf5555ab09962c55e8ed9e0099650205806c6
%global commit1 61ad8597a9c27cabaf8a75ad1afc5ee0853a9833
%global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
%define distro redhat
@ -29,7 +29,7 @@
Summary: SELinux policy configuration
Name: selinux-policy
Version: 3.14.3
Release: 133%{?dist}
Release: 134%{?dist}
License: GPLv2+
Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@ -718,6 +718,22 @@ exit 0
%endif
%changelog
* Fri Jan 12 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-134
- Allow syslog to run unconfined scripts conditionally
Resolves: RHEL-10087
- Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
Resolves: RHEL-10087
- Allow collectd connect to statsd port
Resolves: RHEL-19482
- Allow collectd_t read network state symlinks
Resolves: RHEL-19482
- Allow collectd_t domain to create netlink_generic_socket sockets
Resolves: RHEL-19482
- Allow opafm search nfs directories
Resolves: RHEL-19426
- Allow mdadm list stratisd data directories
Resolves: RHEL-21374
* Wed Dec 13 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-133
- Label /dev/acpi_thermal_rel char device with acpi_device_t
Resolves: RHEL-18027

View File

@ -1,4 +1,4 @@
SHA512 (selinux-policy-53d5c58.tar.gz) = 05607b7aa77557e30e41a2365ee769e754cccc4fc0400d99004e2b5c1cf0d844e9072e0e0ce5d873020d74d427842520e11fd9b54c9c7c4d00127ce9bb9d9e47
SHA512 (selinux-policy-contrib-98baf55.tar.gz) = 667d0e2cd3c94def1e84ec5ff33c8e97fc81f7714a7c9a3200beeffc7035f48fae49868f98561578ec70810649776f8ac2fb995318cd000993165b8321572be4
SHA512 (container-selinux.tgz) = c99f8c50431efca6adb2473adcea5bd74e3c4837371ec9d6eadd8c648410e4b4e22e4cfe2c2acf46ee723020220211945770cd7d1878b5aa24cc347ffc81da22
SHA512 (selinux-policy-621d818.tar.gz) = b9da31e760230b885d77b63015c81f5cebac8b6992e6ea5d47a7582e8e1b1d596768ac51ae73574c4f9fefa65e209569ec70cb9e2ae60b7100780c5170ed6288
SHA512 (selinux-policy-contrib-61ad859.tar.gz) = d65cfa52e3566e0b6cb1d11d420f2e940ea154a815aaf26fcc36aff937906207b75e23061b255e40218e5b46a35621bf4f8c7dd700b89c7fa587ddfabc250cf2
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 01fb849a4078fbbf4799354d81be52482502f549428c4db67b69685714834bb5282f353524f73cdbc4d5da2957bc4455989ae9c89b775fe05b332cfd295b04c0