diff --git a/container-selinux.spec b/container-selinux.spec index a60ce117ae453cd8dee30c825e44b18f38455331..205c25a7d2f42cf1b92e3861216e8d87c2a8c336 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -19,13 +19,12 @@ Epoch: 2 Name: container-selinux -Version: 2.167.0 -Release: 1%{?dist} +Version: 2.178.0 +Release: 2%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes Source0: %{git0}/archive/v%{version}.tar.gz -Patch0: rhel-fix.patch Patch1: container-selinux-1957904.patch BuildArch: noarch BuildRequires: git @@ -108,6 +107,46 @@ fi %{_datadir}/containers/selinux/contexts %changelog +* Fri Apr 01 2022 Jindrich Novy - 2:2.178.0-2 +- remove conflict on udica - we still ship udica 2.4 in 3.0-8.6.0 +- Related: #2067540 + +* Fri Feb 11 2022 Jindrich Novy - 2:2.178.0-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 +- Related: #2001445 + +* Thu Feb 10 2022 Jindrich Novy - 2:2.177.0-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 +- Related: #2001445 + +* Thu Feb 03 2022 Jindrich Novy - 2:2.176.0-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 +- Related: #2001445 + +* Wed Feb 02 2022 Jindrich Novy - 2:2.174.0-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 +- Related: #2001445 + +* Thu Jan 27 2022 Jindrich Novy - 2:2.173.2-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 +- Related: #2001445 + +* Wed Jan 19 2022 Jindrich Novy - 2:2.173.1-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 +- Related: #2001445 + +* Wed Jan 12 2022 Jindrich Novy - 2:2.173.0-2 +- lockdown allow rule was removed +- Related: #2001445 + +* Wed Jan 12 2022 Jindrich Novy - 2:2.173.0-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 +- Related: #2001445 + +* Fri Jan 07 2022 Jindrich Novy - 2:2.172.1-1 +- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 +- Related: #2001445 + * Mon Aug 30 2021 Jindrich Novy - 2:2.167.0-1 - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415 diff --git a/download b/download new file mode 100644 index 0000000000000000000000000000000000000000..fde3dd6d44522658fac1571c849e4bae11cd72e4 --- /dev/null +++ b/download @@ -0,0 +1 @@ +4349e57b763da89466853509dfe5828b v2.178.0.tar.gz diff --git a/rhel-fix.patch b/rhel-fix.patch deleted file mode 100644 index 90293df6bae1221ed0d4239484d05ce92378d299..0000000000000000000000000000000000000000 --- a/rhel-fix.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up container-selinux-2.161.1/container.te.orig container-selinux-2.161.1/container.te ---- container-selinux-2.161.1/container.te.orig 2021-05-06 14:55:57.952216763 +0200 -+++ container-selinux-2.161.1/container.te 2021-05-06 14:56:02.027287991 +0200 -@@ -114,7 +114,7 @@ mls_trusted_object(container_runtime_t) - # - allow container_runtime_domain self:capability { chown kill fowner fsetid mknod net_admin net_bind_service net_raw setfcap sys_resource }; - allow container_runtime_domain self:tun_socket { create_socket_perms relabelto }; --allow container_runtime_domain self:lockdown { confidentiality integrity }; -+#allow container_runtime_domain self:lockdown { confidentiality integrity }; - allow container_runtime_domain self:process ~setcurrent; - allow container_runtime_domain self:passwd rootok; - allow container_runtime_domain self:fd use; diff --git a/v2.167.0.tar.gz b/v2.167.0.tar.gz deleted file mode 100644 index 1e23799d00e695c53d10b221e1ff1cf6010f0b57..0000000000000000000000000000000000000000 Binary files a/v2.167.0.tar.gz and /dev/null differ