diff --git a/.gitignore b/.gitignore index 45b2101..a5ee838 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,3 @@ SOURCES/container-selinux.tgz -SOURCES/selinux-policy-7b59b17.tar.gz -SOURCES/selinux-policy-contrib-20742bb.tar.gz +SOURCES/selinux-policy-43c76ff.tar.gz +SOURCES/selinux-policy-contrib-695c26c.tar.gz diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata index 2bc4004..39d3187 100644 --- a/.selinux-policy.metadata +++ b/.selinux-policy.metadata @@ -1,3 +1,3 @@ -4c634250b09d45ac6b3635968a96433d81745f0c SOURCES/container-selinux.tgz -2b5baf09f28c58f356fbfc7e0141f0e824840874 SOURCES/selinux-policy-7b59b17.tar.gz -6fe8207404705f9d2fb1413f884515bf14d45dee SOURCES/selinux-policy-contrib-20742bb.tar.gz +21d9568df0d9faa62bbb050301298f763b64cae1 SOURCES/container-selinux.tgz +1a81f4f5d2f29f0fa33098a2932a0c8df15eca8c SOURCES/selinux-policy-43c76ff.tar.gz +94bf21415699d48a0057b472476cc6f2b7670173 SOURCES/selinux-policy-contrib-695c26c.tar.gz diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec index 17ace29..4c8f792 100644 --- a/SPECS/selinux-policy.spec +++ b/SPECS/selinux-policy.spec @@ -1,11 +1,11 @@ # github repo with selinux-policy base sources %global git0 https://github.com/fedora-selinux/selinux-policy -%global commit0 7b59b17d712873fda65ab6ec0af6d0a50a73bfb3 +%global commit0 43c76ff3f5d9f998b238a005e25cef2689fa9da3 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # github repo with selinux-policy contrib sources %global git1 https://github.com/fedora-selinux/selinux-policy-contrib -%global commit1 20742bba8863f0b35225d13dfee86639eb3ffbbd +%global commit1 695c26cb3d0edda3929ef0cb5b3d7b7c8c0b69ea %global shortcommit1 %(c=%{commit1}; echo ${c:0:7}) %define distro redhat @@ -29,7 +29,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.14.3 -Release: 91%{?dist} +Release: 92%{?dist} License: GPLv2+ Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz @@ -716,6 +716,30 @@ exit 0 %endif %changelog +* Wed Feb 16 2022 Zdenek Pytela - 3.14.3-92 +- Allow postfix_domain read dovecot certificates 1/2 +Resolves: rhbz#2043599 +- Dontaudit dirsrv search filesystem sysctl directories 1/2 +Resolves: rhbz#2042568 +- Allow chage domtrans to sssd +Resolves: rhbz#2054718 +- Allow postfix_domain read dovecot certificates 2/2 +Resolves: rhbz#2043599 +- Allow ctdb create cluster logs +Resolves: rhbz#2049481 +- Allow alsa bind mixer controls to led triggers +Resolves: rhbz#2049730 +- Allow alsactl set group Process ID of a process +Resolves: rhbz#2049730 +- Dontaudit mdadm list dirsrv tmpfs dirs +Resolves: rhbz#2011174 +- Dontaudit dirsrv search filesystem sysctl directories 2/2 +Resolves: rhbz#2042568 +- Revert "Label NetworkManager-dispatcher service with separate context" +Related: rhbz#1989070 +- Revert "Allow NetworkManager-dispatcher dbus chat with NetworkManager" +Related: rhbz#1989070 + * Wed Feb 09 2022 Zdenek Pytela - 3.14.3-91 - Allow NetworkManager-dispatcher dbus chat with NetworkManager Resolves: rhbz#1989070