* Thu May 16 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.38-1

- Add boolean qemu-ga to run unconfined script
Resolves: RHEL-31211
- Ensure dbus communication is allowed bidirectionally
Resolves: RHEL-35782
- Allow logwatch_mail_t read network sysctls
Resolves: RHEL-34135
- Allow sysadm execute dmidecode using sudo
Resolves: RHEL-16104
- Allow sudodomain list files in /var
Resolves: RHEL-16104
- Allow various services read and write z90crypt device
Resolves: RHEL-33361
- Allow system_cronjob_t dbus chat with avahi_t
Resolves: RHEL-32290
- Allow setroubleshootd get attributes of all sysctls
Resolves: RHEL-34078
- Remove permissive domain for bootupd_t
Resolves: RHEL-22173
This commit is contained in:
Zdenek Pytela 2024-05-16 18:15:13 +02:00
parent 1292191ae3
commit df730c18c8
2 changed files with 24 additions and 4 deletions

View File

@ -1,6 +1,6 @@
# github repo with selinux-policy sources
%global giturl https://github.com/fedora-selinux/selinux-policy
%global commit 4188842590c2d66f321a4fb62fa42093d37b7d1c
%global commit f81c762b515ed1263ff63766afada4f590642dad
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define distro redhat
@ -23,7 +23,7 @@
%define CHECKPOLICYVER 3.2
Summary: SELinux policy configuration
Name: selinux-policy
Version: 38.1.37
Version: 38.1.38
Release: 1%{?dist}
License: GPLv2+
Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@ -809,6 +809,26 @@ exit 0
%endif
%changelog
* Thu May 16 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.38-1
- Add boolean qemu-ga to run unconfined script
Resolves: RHEL-31211
- Ensure dbus communication is allowed bidirectionally
Resolves: RHEL-35782
- Allow logwatch_mail_t read network sysctls
Resolves: RHEL-34135
- Allow sysadm execute dmidecode using sudo
Resolves: RHEL-16104
- Allow sudodomain list files in /var
Resolves: RHEL-16104
- Allow various services read and write z90crypt device
Resolves: RHEL-33361
- Allow system_cronjob_t dbus chat with avahi_t
Resolves: RHEL-32290
- Allow setroubleshootd get attributes of all sysctls
Resolves: RHEL-34078
- Remove permissive domain for bootupd_t
Resolves: RHEL-22173
* Tue May 07 2024 Zdenek Pytela <zpytela@redhat.com> - 38.1.37-1
- Allow numad to trace processes in user namespace
Resolves: RHEL-33994

View File

@ -1,3 +1,3 @@
SHA512 (selinux-policy-4188842.tar.gz) = 811fcdac352134287062ca433539a7818b75bfe74e59c42cd1f3e01428785993cda268d9f87a0cf9169169423698de7a3a12d3db48b7a1b07d91158f7b51df7d
SHA512 (selinux-policy-f81c762.tar.gz) = ccecdd46657eb6265c6dec2121dd7b7efbd6305eca34061a4bee000bebaa9bab67973640784099b916549670b424610c035a43663a8de963e68d652460baad88
SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
SHA512 (container-selinux.tgz) = d6b97d63ded66bd95d4b4cb34aa209fc58cf0683ec237ae08af5af8486ea78ec32e45151f6a0f2c6f03a7cad61805dd35a9d77effc724be2a9da21e1bb5ff613
SHA512 (container-selinux.tgz) = 14935d491769b0408a2037c7760b51ca0fbb6949b50484d77468454b9d320984fe5d79b8e70b4236aca23bc363bdde46819e20f25b17f6a9418814da610515d9