diff --git a/_servicedata b/_servicedata index b95dbdd..f0e8c4c 100644 --- a/_servicedata +++ b/_servicedata @@ -1,7 +1,7 @@ https://gitlab.suse.de/selinux/selinux-policy.git - e17843ad685ede6b0ba9a2571bf3199e56408f83 + 45f14b8b76e738bbd167b44362388814a95c498e https://github.com/containers/container-selinux.git 07b3034f6d9625ab84508a2f46515d8ff79b4204 https://gitlab.suse.de/jsegitz/selinux-policy.git diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf index 8b9db04..a5c495c 100644 --- a/modules-targeted-contrib.conf +++ b/modules-targeted-contrib.conf @@ -2761,3 +2761,10 @@ nvme_stas = module # coreos_installer # coreos_installer = module + +## Layer: contrib +## Module: libalternatives +## +## libalternatives +## +libalternatives = module diff --git a/selinux-policy-20240205.tar.xz b/selinux-policy-20240205.tar.xz deleted file mode 100644 index 815d239..0000000 --- a/selinux-policy-20240205.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:4352abee42d51bd6d340b155e0363c101fed4cce8fa6b8799aa6786e570fd3d5 -size 794716 diff --git a/selinux-policy-20240313.tar.xz b/selinux-policy-20240313.tar.xz new file mode 100644 index 0000000..364ea0d --- /dev/null +++ b/selinux-policy-20240313.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1802736a244af3491e2ae68f65e96a01e7276a396f0889b6ce264c8a098984e8 +size 767076 diff --git a/selinux-policy.changes b/selinux-policy.changes index ae75860..d020999 100644 --- a/selinux-policy.changes +++ b/selinux-policy.changes @@ -1,3 +1,32 @@ +------------------------------------------------------------------- +Wed Mar 13 11:02:43 UTC 2024 - cathy.hu@suse.com + +- Update to version 20240313: + * Assign alts_exec_t to files_type + +------------------------------------------------------------------- +Fri Mar 08 09:05:08 UTC 2024 - cathy.hu@suse.com + +- Update to version 20240308: + * Support /bin/alts in the policy (bsc#1217530) + * Revert "Allow virtnetworkd_t to execute bin_t (bsc#1216903)" + +------------------------------------------------------------------- +Wed Mar 06 15:41:20 UTC 2024 - cathy.hu@suse.com + +- Update to version 20240306: + * Replace init domtrans rule for confined users to allow exec init + * Update dbus_role_template() to allow user service status + * Allow polkit status all systemd services + * Allow setroubleshootd create and use inherited io_uring + * Allow load_policy read and write generic ptys + +------------------------------------------------------------------- +Mon Mar 04 16:19:28 UTC 2024 - cathy.hu@suse.com + +- Update to version 20240304: + * Allow ssh-keygen to use the libica crypto module (bsc#1220373) + ------------------------------------------------------------------- Mon Feb 05 15:48:02 UTC 2024 - cathy.hu@suse.com diff --git a/selinux-policy.spec b/selinux-policy.spec index b1f5deb..2431312 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -33,7 +33,7 @@ Summary: SELinux policy configuration License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20240205 +Version: 20240313 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc