Accepting request 1112592 from security:SELinux

OBS-URL: https://build.opensuse.org/request/show/1112592
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/container-selinux?expand=0&rev=19

container-selinux.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed Sep 20 14:21:29 UTC 2023 - Johannes Segitz <jsegitz@suse.com>
+
+- Update to version 2.222:
+  * Allow containers to read/write inherited dri devices
+
+-------------------------------------------------------------------
+Tue Aug 15 05:48:12 UTC 2023 - Johannes Segitz <jsegitz@suse.com>
+
+- Update to version 2.221:
+  * Allow containers to shutdown sockets inherited from container
+    runtimes
+  * Allow spc_t to use execmod libraries on container file systems
+  * Add boolean to allow containers to read all cert files
+  * More MLS Policy allow rules
+  * Allow container runtimes using pasta bind icmp_socket to port_t
+  * Fix spc_t transitions from container_runtime_domain
+
 -------------------------------------------------------------------
 Tue May 23 07:32:16 UTC 2023 - Johannes Segitz <jsegitz@suse.com>
 

container-selinux.spec

@@ -26,7 +26,7 @@
 # Version of SELinux we were using
 %define selinux_policyver %(rpm -q selinux-policy --qf '%%{version}')
 Name:           container-selinux
-Version:        2.215.0
+Version:        2.222.0
 Release:        0
 Summary:        SELinux policies for container runtimes
 License:        GPL-2.0-only

v2.215.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7236e149d4238b996ee94127ecc15ec3c1bceb5d4bc58e397a6e404b42133906
-size 31027

v2.222.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f9626ee2d2a49380f43f6b44a2e0d982295d6404838f4b0cd6e6d1e108d8f65e
+size 30721