* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-79

- Introduce xdm_manage_bootloader booelan
Resolves: rhbz#1994096
- Rename samba_exec() to samba_exec_net()
Resolves: rhbz#1855215
- Allow sssd to set samba setting
Resolves: rhbz#1855215
- Allow dirsrv read slapd tmpfs files
Resolves: rhbz#1843238
- Allow rhsmcertd to create cache file in /var/cache/cloud-what
Resolves: rhbz#1994718
This commit is contained in:
Zdenek Pytela 2021-08-27 11:39:38 +02:00
parent 757d64d9d6
commit c53bdced40
2 changed files with 28 additions and 4 deletions

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 14f55fbbd083aa0bee8dd76f8084221e9b813e79
%global commit e85301a7dd56d0a1e06332cc3255649ad26efbe3
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -23,7 +23,7 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 34.16
Version: 34.17
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -810,6 +810,30 @@ exit 0
%endif
%changelog
* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.17-1
- Add support for at-spi
- Add permissions for system dbus processes
- Allow various domains work with ICA crypto accelerator
- Add ica module
- Revert "Support using ICA crypto accelerator on s390x arch"
- Allow systemd to delete fwupd var cache files
- Allow vmtools_unconfined_t domain transition to rpm_script_t
- Allow dirsrv read slapd tmpfs files
- Revert "Label /dev/shm/dirsrv/ with dirsrv_tmpfs_t label"
- Rename samba_exec() to samba_exec_net()
- Support using ICA crypto accelerator on s390x arch
- Allow systemd delete /run/systemd/default-hostname
- Allow tcpdump read system state information in /proc
- Allow rhsmcertd to create cache file in /var/cache/cloud-what
- Allow D-bus communication between avahi and sosreport
- Label /usr/libexec/gdm-runtime-config with xdm_exec_t
- Allow lldpad send to kdumpctl over a unix dgram socket
- Revert "Allow lldpad send to kdump over a unix dgram socket"
- Allow chronyc respond to a user chronyd instance
- Allow ptp4l respond to pmc
- Allow lldpad send to unconfined_t over a unix dgram socket
- Allow sssd to set samba setting
* Thu Aug 12 2021 Zdenek Pytela <zpytela@redhat.com> - 34.16-1
- Allow systemd-timesyncd watch system dbus pid socket files
- Allow firewalld drop capabilities

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-14f55fb.tar.gz) = 5b489a5758fc3c673facd4f1742e62901cd86992882f4ef84222cb96ed0af5bd8d1351b5c16602675c68a6068eb44cb17f0f124f8572cd39afc05cb31ed8a8eb
SHA512 (container-selinux.tgz) = 73fe355b37ec70f66e08c02e03c5f25e30a57f8506277af025e6e51c12bb670d929c915d22467e47c66b782d7275c7dac7d3d28c43342dc9dbfe0ee92be9359e
SHA512 (selinux-policy-e85301a.tar.gz) = 53ad8cd38fab242a44cc43d7d88445f2ed74a04363bc1803cd4e1c46577938a4d4b9a9ae40e04d05415ce0f185b66f10e7f7276cb4c2731355839dddc666e6fd
SHA512 (container-selinux.tgz) = 126c5c2a85c37a1d5e5e6424d824ee47fe45ef4853b0d164ec18596b96c6f9a2031fcd24ea11c2a56ba797b3d3863e308e06903b40f5b480f4a95e726040682a
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4