rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

* Tue Jul 01 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.59-1

Browse Source 
- virt: allow QEMU use of the qgs daemon for attestation
Resolves: RHEL-87744
- qgs: add contrib module for TDX "qgs" daemon
Resolves: RHEL-87744
- kernel: add interfaces for using SGX enclaves
Resolves: RHEL-87744
- Allow coreos-installer search sssd library directory
Resolves: RHEL-95689
- Label /dev/diag as diagnostic_device_t
Resolves: RHEL-95342
- Allow irqbalance execute shell if irqbalance_run_unconfined is on
Resolves: RHEL-1556
This commit is contained in:
Zdenek Pytela 2025-07-01 21:34:32 +02:00
parent c2458cfb92
commit df59df50d8
4 changed files with 32 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
modules-mls-contrib.conf
View File

@ -1579,3 +1579,10 @@ zosremote = module
# Policy for mandb
#
mandb = module
# Layer: service
# Module: qgs
#
# TDX QGS Daemon
#
qgs = module

7
modules-targeted-contrib.conf
View File

@ -2768,3 +2768,10 @@ powerprofiles = module
# Policy for switcheroo-control: D-Bus service to check dual GPU availability
#
switcheroo = module
# Layer: service
# Module: qgs
#
# TDX QGS Daemon
#
qgs = module

18
selinux-policy.spec
View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 9104418d6c680321bd38d3ebcf8fca8773d47002
%global commit 906bebe413ca878d733bf4702e0462ea3176f8c9
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -26,7 +26,7 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 38.1.58
Version: 38.1.59
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -906,6 +906,20 @@ exit 0
%endif
%changelog
* Tue Jul 01 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.59-1
- virt: allow QEMU use of the qgs daemon for attestation
Resolves: RHEL-87744
- qgs: add contrib module for TDX "qgs" daemon
Resolves: RHEL-87744
- kernel: add interfaces for using SGX enclaves
Resolves: RHEL-87744
- Allow coreos-installer search sssd library directory
Resolves: RHEL-95689
- Label /dev/diag as diagnostic_device_t
Resolves: RHEL-95342
- Allow irqbalance execute shell if irqbalance_run_unconfined is on
Resolves: RHEL-1556
* Mon Jun 09 2025 Zdenek Pytela <zpytela@redhat.com> - 38.1.58-1
- Allow mptcpd the net_admin capability
Resolves: RHEL-81729

4
sources
View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-9104418.tar.gz) = 223375367e2da5749c938443939cef11ecb710098d917ad43d5a86c8d0c5b8ff02aafe633d006f8ed961fd70fb38e37aa91de6e8610cad59e0816b85063ca3b6
SHA512 (selinux-policy-906bebe.tar.gz) = c47b391a3f308f0b4d02977e3c1a49c08e94ae82215906626881225429084d78beeeb518f4d2948bdabfb46805ff5f0654883aa1881a1227071ea12eda2f39c7
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = 3108a0970c67f122e146c2d2e63bc8b45ad8cb450f3cc18928b9e348a8642e1ca27b73cc0436ed4b63dd76f41fa016866705b9d325f989f4bea986344d07c0e7
SHA512 (container-selinux.tgz) = 9b9077269cc6fe82b5e305290d6b590036eaf14a495a331251088d809d1d4ac53ec522e42713257b068b10d58f1754eea7e9c4dd98043ccde7037757501bef08