Accepting request 910787 from home:jsegitz:branches:security:SELinux

- Update to version 2.164.2
  * Don't setup users for writing to pid_sockets
  * Allow container engines to be started from the staff user.
  * Allow spc_t domains to set bpf rules on any domain
  * Add support for k3s

OBS-URL: https://build.opensuse.org/request/show/910787
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/container-selinux?expand=0&rev=15

container-selinux-2.160.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:18c85dc09b16c4d138833c1fa1faab0ffafa260e28b56de2cbc2a1ea151f7ee3
-size 23993

container-selinux-2.164.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6f1b4c59526386a08cd156b43a049e62d715575265f28c56e59eec4c8bc1e209
+size 24424

container-selinux.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Mon Aug  9 07:44:17 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
+
+- Update to version 2.164.2
+  * Don't setup users for writing to pid_sockets
+  * Allow container engines to be started from the staff user.
+  * Allow spc_t domains to set bpf rules on any domain
+  * Add support for k3s
+
 -------------------------------------------------------------------
 Fri Apr 23 06:04:48 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
 

container-selinux.spec

@@ -26,7 +26,7 @@
 # Version of SELinux we were using
 %define selinux_policyver %(rpm -q selinux-policy --qf '%%{version}')
 Name:           container-selinux
-Version:        2.160.1
+Version:        2.164.2
 Release:        0
 Summary:        SELinux policies for container runtimes
 License:        GPL-2.0-only