From 3ca6173d82fc4de54916c55572e2ab786e7b25f4 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Jul 30 2021 04:21:34 +0000 Subject: import selinux-policy-3.14.3-75.el8 --- diff --git a/.gitignore b/.gitignore index 6283ef6..9c20f8a 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,3 @@ SOURCES/container-selinux.tgz -SOURCES/selinux-policy-a7e85c6.tar.gz -SOURCES/selinux-policy-contrib-de298c0.tar.gz +SOURCES/selinux-policy-4646374.tar.gz +SOURCES/selinux-policy-contrib-3ea5231.tar.gz diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata index 45936aa..b5771c2 100644 --- a/.selinux-policy.metadata +++ b/.selinux-policy.metadata @@ -1,3 +1,3 @@ -3d506da2d5cd9fa27422e9eb221bf6db6f8eb0c4 SOURCES/container-selinux.tgz -2a6ec8f210558023c7a04c086e24b41da86dcc81 SOURCES/selinux-policy-a7e85c6.tar.gz -148932e85db4650ccd9655e028339d261481b318 SOURCES/selinux-policy-contrib-de298c0.tar.gz +ef411248d42ced76bbb265cc8dbad21754e543bc SOURCES/container-selinux.tgz +4762890749afbb866a589f9adf6ff18925951650 SOURCES/selinux-policy-4646374.tar.gz +deb30dd93e805aa4c129ec9418dd452ba6ea8af1 SOURCES/selinux-policy-contrib-3ea5231.tar.gz diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec index c898d29..48d07f3 100644 --- a/SPECS/selinux-policy.spec +++ b/SPECS/selinux-policy.spec @@ -1,11 +1,11 @@ # github repo with selinux-policy base sources %global git0 https://github.com/fedora-selinux/selinux-policy -%global commit0 a7e85c695fd9c8fc26aa5d2dc4668363b997619e +%global commit0 464637407b7bd6226bc1cbeb2afd7409ee3a8419 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # github repo with selinux-policy contrib sources %global git1 https://github.com/fedora-selinux/selinux-policy-contrib -%global commit1 de298c09b9c949291effa80a5d975f3cd4362ef6 +%global commit1 3ea5231d3764b0c8d8576f92f14db89496780410 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7}) %define distro redhat @@ -29,7 +29,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.14.3 -Release: 74%{?dist} +Release: 75%{?dist} License: GPLv2+ Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz @@ -715,6 +715,26 @@ exit 0 %endif %changelog +* Thu Jul 29 2021 Zdenek Pytela - 3.14.3-75 +- Add the unconfined_dgram_send() interface +Resolves: rhbz#1978562 +- Change dev_getattr_infiniband_dev() to use getattr_chr_files_pattern() +Resolves: rhbz#1936522 +- Add checkpoint_restore cap2 capability +Resolves: rhbz#1973325 +- Allow fcoemon talk with unconfined user over unix domain datagram socket +Resolves: rhbz#1978562 +- Allow hostapd bind UDP sockets to the dhcpd port +Resolves: rhbz#1977676 +- Allow NetworkManager read and write z90crypt device +Resolves: rhbz#1938203 +- Allow abrt_domain read and write z90crypt device +Resolves: rhbz#1938203 +- Label /usr/lib/pcs/pcs_snmp_agent with cluster_exec_t +Resolves: rhbz#1937111 +- Allow mdadm read iscsi pid files +Resolves: rhbz#1924716 + * Fri Jul 16 2021 Zdenek Pytela - 3.14.3-74 - Allow dyntransition from sshd_t to unconfined_t Resolves: rhbz#1947841