Compare commits
No commits in common. "c9" and "c8-stream-2.0" have entirely different histories.
c9
...
c8-stream-
2
.gitignore
vendored
2
.gitignore
vendored
@ -1 +1 @@
|
|||||||
SOURCES/v0.2.8.tar.gz
|
SOURCES/v0.2.1.tar.gz
|
||||||
|
@ -1 +1 @@
|
|||||||
033cad13d38db7fcb03b004ac3e60cba8c3166d0 SOURCES/v0.2.8.tar.gz
|
4040bc2746225acabf5c7038d8eb38ae2de30ac2 SOURCES/v0.2.1.tar.gz
|
||||||
|
129
SPECS/udica.spec
129
SPECS/udica.spec
@ -1,7 +1,7 @@
|
|||||||
Summary: A tool for generating SELinux security policies for containers
|
Summary: A tool for generating SELinux security policies for containers
|
||||||
Name: udica
|
Name: udica
|
||||||
Version: 0.2.8
|
Version: 0.2.1
|
||||||
Release: 1%{?dist}
|
Release: 2%{?dist}
|
||||||
Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz
|
Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz
|
||||||
License: GPLv3+
|
License: GPLv3+
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
@ -13,15 +13,13 @@ Requires: python3 python3-libsemanage python3-libselinux
|
|||||||
BuildRequires: python2 python2-devel python2-setuptools
|
BuildRequires: python2 python2-devel python2-setuptools
|
||||||
Requires: python2 libsemanage-python libselinux-python
|
Requires: python2 libsemanage-python libselinux-python
|
||||||
%endif
|
%endif
|
||||||
# container-selinux provides policy templates
|
|
||||||
Requires: container-selinux >= 2.168.0-2
|
|
||||||
|
|
||||||
%description
|
%description
|
||||||
Tool for generating SELinux security profiles for containers based on
|
Tool for generating SELinux security profiles for containers based on
|
||||||
inspection of container JSON file.
|
inspection of container JSON file.
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%autosetup -p 1
|
%setup -q
|
||||||
|
|
||||||
%build
|
%build
|
||||||
%if 0%{?fedora} || 0%{?rhel} > 7
|
%if 0%{?fedora} || 0%{?rhel} > 7
|
||||||
@ -31,6 +29,8 @@ inspection of container JSON file.
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%install
|
%install
|
||||||
|
install --directory %%{buildroot}%{_datadir}/udica/templates
|
||||||
|
|
||||||
%if 0%{?fedora} || 0%{?rhel} > 7
|
%if 0%{?fedora} || 0%{?rhel} > 7
|
||||||
%{__python3} setup.py install --single-version-externally-managed --root=%{buildroot}
|
%{__python3} setup.py install --single-version-externally-managed --root=%{buildroot}
|
||||||
%else
|
%else
|
||||||
@ -45,7 +45,9 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8
|
|||||||
%{_bindir}/udica
|
%{_bindir}/udica
|
||||||
%dir %{_datadir}/udica
|
%dir %{_datadir}/udica
|
||||||
%dir %{_datadir}/udica/ansible
|
%dir %{_datadir}/udica/ansible
|
||||||
|
%dir %{_datadir}/udica/templates
|
||||||
%{_datadir}/udica/ansible/*
|
%{_datadir}/udica/ansible/*
|
||||||
|
%{_datadir}/udica/templates/*
|
||||||
|
|
||||||
%if 0%{?fedora} || 0%{?rhel} > 7
|
%if 0%{?fedora} || 0%{?rhel} > 7
|
||||||
%license LICENSE
|
%license LICENSE
|
||||||
@ -58,118 +60,29 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Thu Nov 30 2023 Vit Mojzis <vmojzis@redhat.com> - 0.2.8-1
|
* Tue Nov 26 2019 Jindrich Novy <jnovy@redhat.com> - 0.2.1-2
|
||||||
- Improve code readability based on lint and black findings
|
- initial import to container-tools 8.2.0
|
||||||
- Fix generating policy for Crio mounts
|
- Related: RHELPLAN-25139
|
||||||
- Add --devices option
|
|
||||||
- v0.2.7 release changes:
|
|
||||||
- Improve label collection for mounts and devices (RHEL-16245)
|
|
||||||
- Add support for containerd via "nerdctl inspect"
|
|
||||||
- Avoid duplicate rules for accessing mounts and devices
|
|
||||||
|
|
||||||
* Fri Jan 27 2023 Vit Mojzis <vmojzis@redhat.com> - 0.2.6-30
|
|
||||||
- Bump release to preserve upgrade path (#2160401)
|
|
||||||
|
|
||||||
* Wed Dec 01 2021 Vit Mojzis <vmojzis@redhat.com> - 0.2.6-4
|
|
||||||
- Make sure each section of the inspect exists before accessing (#2027656)
|
|
||||||
|
|
||||||
* Tue Sep 21 2021 Vit Mojzis <vmojzis@redhat.com> - 0.2.6-3
|
|
||||||
- Require container-selinux shipping policy templates (#2000051)
|
|
||||||
|
|
||||||
* Fri Sep 17 2021 Jindrich Novy <jnovy@redhat.com> - 0.2.6-2
|
|
||||||
- use RHEL-9 product version for gating
|
|
||||||
- Related: #2000051
|
|
||||||
|
|
||||||
* Thu Sep 16 2021 Jindrich Novy <jnovy@redhat.com> - 0.2.6-1
|
|
||||||
- update to https://github.com/containers/udica/releases/tag/v0.2.6
|
|
||||||
- Related: #2000051
|
|
||||||
|
|
||||||
* Fri Sep 03 2021 Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
|
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
|
|
||||||
- Replace capability dictionary with str.lower()
|
|
||||||
- Enable udica to generate policies with fifo class
|
|
||||||
- Sort container inspect data before processing
|
|
||||||
- Update templates to work properly with new cil parser
|
|
||||||
- Related: #2000051
|
|
||||||
|
|
||||||
* Wed Aug 25 2021 Vit Mojzis <vmojzis@redhat.com> - 0.2.5-1
|
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995046)
|
|
||||||
- Replace capability dictionary with str.lower()
|
|
||||||
- Enable udica to generate policies with fifo class
|
|
||||||
- Sort container inspect data before processing
|
|
||||||
- Update templates to work properly with new cil parser
|
|
||||||
|
|
||||||
* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 0.2.4-9
|
|
||||||
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
||||||
Related: rhbz#1991688
|
|
||||||
|
|
||||||
* Mon Jun 14 2021 Jindrich Novy <jnovy@redhat.com> - 0.2.4-8
|
|
||||||
- remove %%check again and all related BRs
|
|
||||||
|
|
||||||
* Mon Jun 14 2021 Jindrich Novy <jnovy@redhat.com> - 0.2.4-7
|
|
||||||
- remove black from BR
|
|
||||||
|
|
||||||
* Mon Jun 14 2021 Jindrich Novy <jnovy@redhat.com> - 0.2.4-6
|
|
||||||
- Add missing BR
|
|
||||||
- Related: #1970747
|
|
||||||
|
|
||||||
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 0.2.4-5
|
|
||||||
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
||||||
|
|
||||||
* Tue Mar 16 2021 Vit Mojzis <vmojzis@redhat.com> - 0.2.4-4
|
|
||||||
- Remove %%check section
|
|
||||||
|
|
||||||
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.2.4-3
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
||||||
|
|
||||||
* Sun Dec 13 2020 Lukas Vrabec <lvrabec@redhat.com> - 0.2.4-2
|
|
||||||
- Add %%check section to run basic tests during rpm build process
|
|
||||||
|
|
||||||
* Wed Nov 25 2020 Lukas Vrabec <lvrabec@redhat.com> - 0.2.4-1
|
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.2.4
|
|
||||||
|
|
||||||
* Thu Aug 13 2020 Lukas Vrabec <lvrabec@redhat.com> - 0.2.3-1
|
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.2.3
|
|
||||||
|
|
||||||
* Mon Aug 03 2020 Lukas Vrabec <lvrabec@redhat.com> - 0.2.2-1
|
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.2.2
|
|
||||||
|
|
||||||
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.2.1-4
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
||||||
|
|
||||||
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 0.2.1-3
|
|
||||||
- Rebuilt for Python 3.9
|
|
||||||
|
|
||||||
* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.2.1-2
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
||||||
|
|
||||||
* Fri Oct 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.2.1-1
|
* Fri Oct 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.2.1-1
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.2.1
|
|
||||||
|
|
||||||
* Wed Sep 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.2.0-1
|
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.2.0
|
- New rebase https://github.com/containers/udica/releases/tag/v0.2.0
|
||||||
|
Resolves: rhbz#1757693
|
||||||
|
|
||||||
* Wed Aug 28 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.9-1
|
* Wed Oct 02 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.2.0-1
|
||||||
- Update tests test_basic.podman.cil, test_basic.docker.cil. Round 2
|
- New rebase https://github.com/containers/udica/releases/tag/v0.2.0
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.1.9
|
Resolves: rhbz#1757693
|
||||||
|
|
||||||
* Mon Aug 19 2019 Miro Hrončok <mhroncok@redhat.com> - 0.1.8-3
|
|
||||||
- Rebuilt for Python 3.8
|
|
||||||
|
|
||||||
* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.8-2
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
||||||
|
|
||||||
* Thu Jul 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.8-1
|
* Thu Jul 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.8-1
|
||||||
- New rebase https://github.com/containers/udica/releases/tag/v0.1.8
|
- Udica supports podman version 1.4.0+
|
||||||
|
Resolves: rhbz#1729115
|
||||||
|
|
||||||
* Wed Jun 12 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.7-1
|
* Fri May 17 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.6-1
|
||||||
- New rebase with upstream adding new param --ansible, to generate ansible playbook for deploying policies. https://github.com/containers/udica/releases/tag/v0.1.7
|
- Update testsuite from upstream release
|
||||||
|
Resolves: rhbz#1673643
|
||||||
|
|
||||||
* Thu May 16 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.6-1
|
* Wed May 15 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-2
|
||||||
- New rebase with upstream adding new tests
|
- Bump release because of gating tests
|
||||||
|
|
||||||
* Tue Apr 30 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-2
|
|
||||||
- Add allow rules for container_runtime_t to base_container.cil, Podman version 1.2.0 requires new allow rules.
|
|
||||||
* Fri Apr 19 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
|
* Fri Apr 19 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
|
||||||
- Create mock selinux and semanage module
|
- Create mock selinux and semanage module
|
||||||
- Update testing section in README
|
- Update testing section in README
|
||||||
|
Loading…
Reference in New Issue
Block a user