From af767f59de4ceb520e67c2b1ac2572db6c53ce12 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Mar 07 2018 09:34:18 +0000 Subject: import container-selinux-2.42-1.gitad8f0f7.el7 --- diff --git a/.container-selinux.metadata b/.container-selinux.metadata index c7db8ec..5fc9338 100644 --- a/.container-selinux.metadata +++ b/.container-selinux.metadata @@ -1 +1 @@ -29fabd88c6094684ebf1a0a0d61223a5801431ff SOURCES/container-selinux-ff95335.tar.gz +ac7fac23c989829f32fd150411c25cc767a57e1a SOURCES/container-selinux-ad8f0f7.tar.gz diff --git a/.gitignore b/.gitignore index 63756d5..218afd4 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/container-selinux-ff95335.tar.gz +SOURCES/container-selinux-ad8f0f7.tar.gz diff --git a/SPECS/container-selinux.spec b/SPECS/container-selinux.spec index 6d07f87..6df7661 100644 --- a/SPECS/container-selinux.spec +++ b/SPECS/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/projectatomic/%{name} -%global commit0 ff95335b4bc22e780964f5b0dd6dbd9e9300c2ac +%global commit0 ad8f0f7a9ced4516b1d4f03bfa8939ed51f60eb9 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 -Version: 2.36 +Version: 2.42 Release: 1.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -109,6 +109,28 @@ fi %{_datadir}/selinux/* %changelog +* Thu Feb 22 2018 Dan Walsh - 2.42-1 +- Remove typebounds access rules + +* Thu Jan 18 2018 Dan Walsh - 2.41-1 +- Add typebounds calls for container_runtime_t on spc_t and svirt_lxc_net_t + +* Tue Jan 9 2018 Dan Walsh - 2.40-1 +- Allow container_runtime_t to use user ttys +- Fixes bounds check for container_t + +* Mon Jan 8 2018 Dan Walsh - 2.39-1 +- Allow container runtimes to use interited terminals. This helps +satisfy the bounds check of container_t versus container_runtime_t. + +* Sat Jan 6 2018 Dan Walsh - 2.38-1 +- Allow container runtimes to mmap container_file_t devices +- Add labeling for rhel push plugin + +* Tue Dec 12 2017 Dan Walsh - 2.37-1 +- Allow containers to use inherited ttys +- Allow ostree to handle labels under /var/lib/containers/ostree + * Tue Nov 28 2017 Dan Walsh - 2.36-1 - Allow containers to relabelto/from all file types to container_file_t - Allow container to map chr_files labeled container_file_t