b28e2b3d9b
- Update to version 2.171.0 * Define kubernetes_file_t as a config_type * Allow containers to be socket activated by user domains and by systemd. * Allow iptables to use fifo files of a container runtime * Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t * Allow containers to create lnk_file on tmpfs_t directories. OBS-URL: https://build.opensuse.org/request/show/931165 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/container-selinux?expand=0&rev=16
79 lines
3.0 KiB
Plaintext
79 lines
3.0 KiB
Plaintext
-------------------------------------------------------------------
|
|
Fri Nov 12 16:21:06 UTC 2021 - Richard Brown <rbrown@suse.com>
|
|
|
|
- Update to version 2.171.0
|
|
* Define kubernetes_file_t as a config_type
|
|
* Allow containers to be socket activated by user domains and by systemd.
|
|
* Allow iptables to use fifo files of a container runtime
|
|
* Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t
|
|
* Allow containers to create lnk_file on tmpfs_t directories.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 9 07:44:17 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
|
|
|
- Update to version 2.164.2
|
|
* Don't setup users for writing to pid_sockets
|
|
* Allow container engines to be started from the staff user.
|
|
* Allow spc_t domains to set bpf rules on any domain
|
|
* Add support for k3s
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 23 06:04:48 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
|
|
|
- Fix container runtime binary labels (bsc#1185030). You need to
|
|
relable at least /usr/sbin if you're affected
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 23 13:21:19 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
- Update to version 2.158.0
|
|
- Add nfs remount support
|
|
- Allow containers to execmod on nfs, samba and cephs remote shares
|
|
- Allow confined users to send dbus messages to container_runtime
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 11 10:40:32 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
- Update to version 2.154.0
|
|
- Allow confined user domains to run confined container domains.
|
|
- Allow all containers to use nfs shares, iff virt_use_nfs boolean
|
|
is enabled.
|
|
- Allow containers to read nsfs file systems.
|
|
- KVM Container need to use tunnel sockets created by runtime.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 3 07:53:35 UTC 2020 - Ludwig Nussel <lnussel@suse.de>
|
|
|
|
- Don't use BuildRequires based on shell script output. OBS can't
|
|
evaluate that.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 29 07:52:21 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
- Update to version 2.150.0
|
|
- Add additional allow rules for kvm based containers using
|
|
virtiofsd.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 14 12:57:07 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
- Update to version 2.145.0
|
|
- Add support for kubernetes_file_t
|
|
- Allow container_t to open existing tun/tap
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 12 09:11:30 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
- Minimize BuildRequires
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 10 21:11:12 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
- Update to version 2.143.0
|
|
- support containerd/cri
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 5 08:42:45 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
|
|
|
- Initial version
|