Accepting request 1103976 from home:jsegitz:branches:security:SELinux

- Update to version 2.221:
  * Allow containers to shutdown sockets inheritted from container
    runtimes
  * Allow spc_t to use execmod libraries on container file systems
  * Add boolean to allow containers to read all cert files
  * More MLS Policy allow rules
  * Allow container runtimes using pasta bind icmp_socket to port_t
  * Fix spc_t transitions from container_runtime_domain

OBS-URL: https://build.opensuse.org/request/show/1103976
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/container-selinux?expand=0&rev=30

container-selinux.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Tue Aug 15 05:48:12 UTC 2023 - Johannes Segitz <jsegitz@suse.com>
+
+- Update to version 2.221:
+  * Allow containers to shutdown sockets inheritted from container
+    runtimes
+  * Allow spc_t to use execmod libraries on container file systems
+  * Add boolean to allow containers to read all cert files
+  * More MLS Policy allow rules
+  * Allow container runtimes using pasta bind icmp_socket to port_t
+  * Fix spc_t transitions from container_runtime_domain
+
 -------------------------------------------------------------------
 Tue May 23 07:32:16 UTC 2023 - Johannes Segitz <jsegitz@suse.com>
 

container-selinux.spec

@@ -26,7 +26,7 @@
 # Version of SELinux we were using
 %define selinux_policyver %(rpm -q selinux-policy --qf '%%{version}')
 Name:           container-selinux
-Version:        2.215.0
+Version:        2.221
 Release:        0
 Summary:        SELinux policies for container runtimes
 License:        GPL-2.0-only

v2.215.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7236e149d4238b996ee94127ecc15ec3c1bceb5d4bc58e397a6e404b42133906
-size 31027

v2.221.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:357adc87e80057e49b6f897ff367e57063c6023bd4f2bc57d5ab965863a0ade9
+size 30720