From 8835ccaaaa8f4d11d952f1f6189ca2f4f55bc1e1 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Apr 13 2022 04:08:55 +0000 Subject: import selinux-policy-3.14.3-96.el8 --- diff --git a/.gitignore b/.gitignore index 14e5cc4..012e129 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,3 @@ SOURCES/container-selinux.tgz -SOURCES/selinux-policy-ab10edf.tar.gz -SOURCES/selinux-policy-contrib-191fa35.tar.gz +SOURCES/selinux-policy-31e2bbb.tar.gz +SOURCES/selinux-policy-contrib-a174532.tar.gz diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata index 07f0c3a..350c55b 100644 --- a/.selinux-policy.metadata +++ b/.selinux-policy.metadata @@ -1,3 +1,3 @@ -fe7cc80203e8b5272aa4a6525845f5c8d1671f84 SOURCES/container-selinux.tgz -63370b22c1c8e54e56b2636c09d124754cb0f2d4 SOURCES/selinux-policy-ab10edf.tar.gz -a102adb4e4b8dac769ab8ea166288c3c1dbc4967 SOURCES/selinux-policy-contrib-191fa35.tar.gz +4eec9845020475772e63f3516010cdc9487d6e19 SOURCES/container-selinux.tgz +36b7919fdb62a5ef123911cfe3354a9e42d9e2a7 SOURCES/selinux-policy-31e2bbb.tar.gz +939eb1b068a9d1e066fe6f9b5ab6938f8a0ed8eb SOURCES/selinux-policy-contrib-a174532.tar.gz diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec index e988220..d03ee34 100644 --- a/SPECS/selinux-policy.spec +++ b/SPECS/selinux-policy.spec @@ -1,11 +1,11 @@ # github repo with selinux-policy base sources %global git0 https://github.com/fedora-selinux/selinux-policy -%global commit0 ab10edf9d09f671f038fbc4446ddc7d8ceb1a266 +%global commit0 31e2bbb4aa87730bead5c7b33fa19c24525ec440 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # github repo with selinux-policy contrib sources %global git1 https://github.com/fedora-selinux/selinux-policy-contrib -%global commit1 191fa35ac243f8f3f1db0a9e95c77b6e308a16e9 +%global commit1 a1745320b2330a6cbf85db51e2ba0a372afeaeaa %global shortcommit1 %(c=%{commit1}; echo ${c:0:7}) %define distro redhat @@ -29,7 +29,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.14.3 -Release: 95%{?dist} +Release: 96%{?dist} License: GPLv2+ Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz @@ -717,14 +717,28 @@ exit 0 %endif %changelog +* Thu Apr 07 2022 Zdenek Pytela - 3.14.3-96 +- Add interface rpc_manage_exports +Resolves: rhbz#2062183 +- Allow sshd read filesystem sysctl files +Resolves: rhbz#2061403 +- Update targetd nfs & lvm +Resolves: rhbz#2062183 +- Allow dhcpd_t domain to read network sysctls. +Resolves: rhbz#2059509 +- Allow chronyd talk with unconfined user over unix domain dgram socket +Resolves: rhbz#2065313 +- Allow fenced read kerberos key tables +Resolves: rhbz#1964839 + * Thu Mar 24 2022 Zdenek Pytela - 3.14.3-95 - Allow hostapd talk with unconfined user over unix domain dgram socket -Resolves: rhbz#2064284 +Resolves: rhbz#2068007 * Thu Mar 10 2022 Nikola Knazekova nknazeko@redhat.com - 3.14.3-94 - Allow chronyd send a message to sosreport over datagram socket - Allow systemd-logind dbus chat with sosreport -Resolves: rhbz#1949493 +Resolves: rhbz#2062607 * Thu Feb 24 2022 Zdenek Pytela - 3.14.3-93 - Allow systemd-networkd dbus chat with sosreport