rpm/container-selinux
SHA256
1
0
Fork 0
forked from pool/container-selinux
Code Pull Requests Activity

Accepting request 1172200 from home:jsegitz:branches:security:SELinux_6

Browse Source 
- Update to version 2.231.0:
  * Allow container domains to communicate with spc_t unix_stream_sockets
  * Move to %posttrans to ensure selinux-policy got updated before
    the commands run (bsc#1221720)

OBS-URL: https://build.opensuse.org/request/show/1172200
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/container-selinux?expand=0&rev=35
This commit is contained in:
Johannes Segitz 2024-05-06 14:44:14 +00:00 committed by Git OBS Bridge
parent 4ac42b007c
commit 6c42f1f6fc
5 changed files with 24 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
_servicedata
View File

@ -1,4 +1,4 @@
<servicedata> <servicedata>
<service name="tar_scm"> <service name="tar_scm">
<param name="url">https://github.com/containers/container-selinux.git</param> <param name="url">https://github.com/containers/container-selinux.git</param>
<param name="changesrevision">a8e389dbcd3f9b6ed0a7e495c6f559c0383dc49e</param></service></servicedata> <param name="changesrevision">a3cba5ee5c2df48ccd5bdd6cff258c3e72225a41</param></service></servicedata>

3
container-selinux-2.230.0+git4.a8e389d.tar.xz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a51c6267aeda128a15487628d4e976d50074ec97fb36dbe12377e996903563a8
size 27684

3
container-selinux-2.231.0.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3b2e700f295063858c1cf480e76b9c720b5e759434397863afbe8de984644cdf
size 27952

8
container-selinux.changes
View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Mon May 06 07:36:02 UTC 2024 - jsegitz@suse.com
- Update to version 2.231.0:
* Allow container domains to communicate with spc_t unix_stream_sockets
* Move to %posttrans to ensure selinux-policy got updated before
the commands run (bsc#1221720)
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Apr 10 15:47:15 UTC 2024 - Cathy Hu <cathy.hu@suse.com> Wed Apr 10 15:47:15 UTC 2024 - Cathy Hu <cathy.hu@suse.com>

26
container-selinux.spec
View File

@ -26,7 +26,7 @@
# Version of SELinux we were using # Version of SELinux we were using
%define selinux_policyver %(rpm -q selinux-policy --qf '%%{version}') %define selinux_policyver %(rpm -q selinux-policy --qf '%%{version}')
Name: container-selinux Name: container-selinux
Version: 2.230.0+git4.a8e389d Version: 2.231.0
Release: 0 Release: 0
Summary: SELinux policies for container runtimes Summary: SELinux policies for container runtimes
License: GPL-2.0-only License: GPL-2.0-only
@ -35,11 +35,11 @@ Source0: container-selinux-%{version}.tar.xz
BuildRequires: selinux-policy BuildRequires: selinux-policy
BuildRequires: selinux-policy-devel BuildRequires: selinux-policy-devel
Requires: selinux-policy >= %(rpm -q selinux-policy --qf '%%{version}-%%{release}') Requires: selinux-policy >= %(rpm -q selinux-policy --qf '%%{version}-%%{release}')
Requires(post): policycoreutils Requires(posttrans): policycoreutils
Requires(post): /usr/bin/sed Requires(posttrans): /usr/bin/sed
Requires(post): selinux-policy-base >= %{selinux_policyver} Requires(posttrans): selinux-policy-base >= %{selinux_policyver}
Requires(post): selinux-policy-targeted >= %{selinux_policyver} Requires(posttrans): selinux-policy-targeted >= %{selinux_policyver}
Requires(post): selinux-tools Requires(posttrans): selinux-tools
BuildArch: noarch BuildArch: noarch
%description %description
@ -68,7 +68,12 @@ install -m 0644 udica-templates/*.cil %{buildroot}%{_datadir}/udica/templates
%pre %pre
%selinux_relabel_pre -s %{selinuxtype} %selinux_relabel_pre -s %{selinuxtype}
%post %postun
if [ $1 -eq 0 ]; then
%selinux_modules_uninstall -s %{selinuxtype} %{modulenames} docker
fi
%posttrans
# Install all modules in a single transaction # Install all modules in a single transaction
if [ $1 -eq 1 ]; then if [ $1 -eq 1 ]; then
%{_sbindir}/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 %{_sbindir}/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1
@ -81,13 +86,6 @@ fi
. %{_sysconfdir}/selinux/config . %{_sysconfdir}/selinux/config
sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i %{_sysconfdir}/selinux/${SELINUXTYPE}/contexts/customizable_types sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i %{_sysconfdir}/selinux/${SELINUXTYPE}/contexts/customizable_types
matchpathcon -qV %{_sharedstatedir}/containers || restorecon -R %{_sharedstatedir}/containers &> /dev/null || : matchpathcon -qV %{_sharedstatedir}/containers || restorecon -R %{_sharedstatedir}/containers &> /dev/null || :
%postun
if [ $1 -eq 0 ]; then
%selinux_modules_uninstall -s %{selinuxtype} %{modulenames} docker
fi
%posttrans
%selinux_relabel_post -s %{selinuxtype} %selinux_relabel_post -s %{selinuxtype}
%files %files