rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

* Fri Jun 12 2026 Zdenek Pytela <zpytela@redhat.com> - 38.1.81-1

Browse Source 
- Add the systemd_logind_stream_connect() interface
Resolves: RHEL-163438
- Add files_mounton_generic_tmp_dirs() interface
Resolves: RHEL-163438
- Allow staff user mounton /var/lib dirs
Resolves: RHEL-163438
- Allow staff user read nsfs files
Resolves: RHEL-163438
- Allow staff user additional sandboxing permissions
Resolves: RHEL-163438
- Allow staff_sudo_t read PID1's process state
Resolves: RHEL-163438
- Allow staff_sudo_t read logind sessions files
Resolves: RHEL-163438
- Allow staff user delete thump_tmp_t files
Resolves: RHEL-163438
- Allow login_userdomain read thumb tmp files
Resolves: RHEL-163438
- Allow staff user connect to systemd-logind over a unix stream socket
Resolves: RHEL-163438
- Allow staff user mount /proc
Resolves: RHEL-163438
- Support confined users usage of bubblewrap
Resolves: RHEL-163438
- Add anaconda_ioctl_fifo_files_install() and anaconda_write_fifo_files_install()
Resolves: RHEL-179125
- Allow rhsmcertd read anaconda run files
Resolves: RHEL-179125
- Allow any domain to inherit fds from rpm-ostree
Resolves: RHEL-179125
- Allow install_t domain transition to insights_client_t
Resolves: RHEL-179125
- Allow logrotate stop all systemd services
Resolves: RHEL-169534
- Allow staff and sysadm execute iotop using sudo
Resolves: RHEL-172235
- Allow sysadm_t to connect to iscsid using a unix domain stream socket
Resolves: RHEL-155605
This commit is contained in:
Zdenek Pytela 2026-06-12 15:06:24 +02:00
parent f942ba1868
commit c3c2ffc076
2 changed files with 44 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
selinux-policy.spec
View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit e9c0205362c47d39250b94edb0bac882f6d81f40
%global commit fdcb02cf930668282b3d2eb98e347f309c02c291
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -28,7 +28,7 @@
%define STABLEVER 38.1.70
Summary: SELinux policy configuration
Name: selinux-policy
Version: 38.1.80
Version: 38.1.81
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -917,6 +917,46 @@ exit 0
%endif
%changelog
* Fri Jun 12 2026 Zdenek Pytela <zpytela@redhat.com> - 38.1.81-1
- Add the systemd_logind_stream_connect() interface
Resolves: RHEL-163438
- Add files_mounton_generic_tmp_dirs() interface
Resolves: RHEL-163438
- Allow staff user mounton /var/lib dirs
Resolves: RHEL-163438
- Allow staff user read nsfs files
Resolves: RHEL-163438
- Allow staff user additional sandboxing permissions
Resolves: RHEL-163438
- Allow staff_sudo_t read PID1's process state
Resolves: RHEL-163438
- Allow staff_sudo_t read logind sessions files
Resolves: RHEL-163438
- Allow staff user delete thump_tmp_t files
Resolves: RHEL-163438
- Allow login_userdomain read thumb tmp files
Resolves: RHEL-163438
- Allow staff user connect to systemd-logind over a unix stream socket
Resolves: RHEL-163438
- Allow staff user mount /proc
Resolves: RHEL-163438
- Support confined users usage of bubblewrap
Resolves: RHEL-163438
- Add anaconda_ioctl_fifo_files_install() and anaconda_write_fifo_files_install()
Resolves: RHEL-179125
- Allow rhsmcertd read anaconda run files
Resolves: RHEL-179125
- Allow any domain to inherit fds from rpm-ostree
Resolves: RHEL-179125
- Allow install_t domain transition to insights_client_t
Resolves: RHEL-179125
- Allow logrotate stop all systemd services
Resolves: RHEL-169534
- Allow staff and sysadm execute iotop using sudo
Resolves: RHEL-172235
- Allow sysadm_t to connect to iscsid using a unix domain stream socket
Resolves: RHEL-155605
* Mon May 18 2026 Zdenek Pytela <zpytela@redhat.com> - 38.1.80-1
- Allow fido services connect to postgres database
Resolves: RHEL-28814

4
sources
View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-e9c0205.tar.gz) = 85a003d58fa2e2e7da63e7442e429dab3d89382cd89df22e3bd5bb2a6adca89ae67c84e02784903f1c2f25ded6ae36d4f8e001f1eed174c0a96d0acdafc05001
SHA512 (selinux-policy-fdcb02c.tar.gz) = cfb88e9267267e58cbb63ee84a9b72d1e6a574499e7be51598840dc34aaaa5976d25bad901a926d71b6b3e71baa3605c1af683673484c47617472ffb8bd2ab6c
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 673a81bbd9b46df1711177f4853ff39796f2be5c715d6ea5104ac1c0277d76ea0b24e8b1253f31082986797cdaa5ab6297b5eed9b49a2af4be9dda67452e5270
SHA512 (container-selinux.tgz) = 5f4de11742c11a1537df7fa9b1bc0ad302895784d1355d88f62d131508618e13ee7ba29b4c915d651225c660375b2123e91fb07c4977331d426dbd9200840753