Accepting request 962468 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/962468
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/k3s-selinux?expand=0&rev=2

_service

@@ -3,10 +3,11 @@
     <param name="url">https://github.com/k3s-io/k3s-selinux</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.5.stable.1</param>
+    <param name="revision">v1.1.stable.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
+    <param name="match-tag">*stable*</param>
   </service>
   <service name="set_version" mode="disabled">
     <param name="basename">k3s-selinux</param>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/k3s-io/k3s-selinux</param>
-              <param name="changesrevision">e4307b98dd1e4c1d9a1cdb09af8b48ad1e91f8f5</param></service></servicedata>
+              <param name="changesrevision">f1b9b539a38c01781cbb03d88f9b3a47788b3aa1</param></service></servicedata>

k3s-selinux-0.5.latest.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:92069501b3f5d90e1e809ef1c54a55e68b1a01b3f73fcd7401b580a3e562559c
-size 10903

k3s-selinux-1.1.stable.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:67e7d5d9901ed338050deec95ab459accb0da1125efc74473d1d3385cb92ce73
+size 11818

k3s-selinux.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Mar 16 17:40:02 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 1.1.stable.1:
+  * fix centos 7
+- remove file k3s.if as it is now included in a release
+
+-------------------------------------------------------------------
+Wed Mar 16 17:39:11 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 1.0.stable.1:
+  * centos 8 vault: side-step eol problems (#28)
+  * k3s-root: reduced executable privileges (#26)
+
 -------------------------------------------------------------------
 Wed Jan 26 11:52:45 UTC 2022 - Richard Brown <rbrown@suse.com>
 

k3s-selinux.spec

@@ -15,6 +15,7 @@
 # Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
+
 %define k3s_relabel_files() \
         mkdir -p /var/lib/cni; \
         mkdir -p /var/lib/kubelet/pods; \
@@ -34,7 +35,7 @@
 %define container_policyver 2.164.2-1.1
 
 Name:           k3s-selinux
-Version:	0.5.latest.1
+Version:        1.1.stable.1
 Release:        0
 Summary:        SELinux policy module for k3s
 
@@ -42,7 +43,6 @@ Group:	    System Environment/Base
 License:        Apache-2.0
 URL:            http://k3s.io/k3s-selinux
 Source:         %{name}-%{version}.tar.gz
-Source1:    k3s.if
 
 BuildArch:      noarch
 BuildRequires:  container-selinux >= %{container_policyver}
@@ -50,7 +50,8 @@ BuildRequires: git
 BuildRequires:  selinux-policy >= %{selinux_policyver}
 BuildRequires:  selinux-policy-devel >= %{selinux_policyver}
 
-Requires: policycoreutils, selinux-tools
+Requires:       policycoreutils
+Requires:       selinux-tools
 Requires(post): selinux-policy-base >= %{selinux_policyver}, policycoreutils, container-selinux >= %{container_policyver}
 Requires(postun):policycoreutils
 
@@ -63,7 +64,6 @@ This package installs and sets up the SELinux policy security module for k3s.
 
 %prep
 %setup -q
-install -m 644 %{SOURCE1} policy/microos/k3s.if
 
 %build
 cd policy/microos
@@ -99,4 +99,3 @@ fi;
 %{_datadir}/selinux/devel/include/contrib/k3s.if
 
 %changelog
-

k3s.if

@@ -1,27 +0,0 @@
-#######################################################################
-## <summary>
-##	Creates types and rules for a k3s runtime domain.
-## </summary>
-## <param name="prefix">
-##	<summary>
-##	Prefix for the domain.
-##	</summary>
-## </param>
-#
-template(`k3s_runtime_domain_template',`
-	gen_require(`
-		attribute container_runtime_domain, exec_type;
-		role system_r, sysadm_r;
-	')
-
-	attribute $1_domain;
-	type $1_t, $1_domain;
-	role system_r types $1_t;
-	role sysadm_r types $1_t;
-
-	can_exec($1_t, exec_type)
-	domain_type($1_t)
-	domain_entry_file($1_domain, $1_t)
-
-	admin_pattern(container_runtime_domain, $1_t)
-')