1
0
Commit Graph

222 Commits

Author SHA256 Message Date
Richard Brown
9a0c018a4e Accepting request 989143 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/989143
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=28
2022-07-18 16:32:44 +00:00
Johannes Segitz
c45601e60c Accepting request 989142 from home:jsegitz:branches:security:SELinux
- Update to version 20220714. Refreshed:
  * fix_init.patch
  * fix_systemd_watch.patch

OBS-URL: https://build.opensuse.org/request/show/989142
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=137
2022-07-14 11:30:19 +00:00
Dominique Leuenberger
49901ddf56 Accepting request 988936 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/988936
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=27
2022-07-13 12:55:54 +00:00
Dominique Leuenberger
ffb5e7da5e Accepting request 988936 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/988936
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=27
2022-07-13 12:55:54 +00:00
Johannes Segitz
08dba4d639 Accepting request 988934 from home:jsegitz:branches:security:SELinux
- Update fix_systemd.patch to add cap sys_admin and kernel_dgram_send for
  systemd_gpt_generator_t (bsc#1200911)

OBS-URL: https://build.opensuse.org/request/show/988934
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=135
2022-07-13 08:54:50 +00:00
Johannes Segitz
80bdcc2619 Accepting request 988924 from home:jsegitz:branches:security:SELinux
- Update fix_systemd.patch to add sys_admin systemd_gpt_generator_t
  (bsc#1200911)

- postfix: Label PID files and some helpers correctly (bsc#1197242)

- Add fix_userdomain.patch to dontaudit UDP rpc ports (bsc#1193984)

OBS-URL: https://build.opensuse.org/request/show/988924
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=134
2022-07-13 08:15:29 +00:00
Dominique Leuenberger
c9dc623f03 Accepting request 984856 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/984856
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=26
2022-06-25 08:23:52 +00:00
Dominique Leuenberger
c7da6b80c0 Accepting request 984856 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/984856
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=26
2022-06-25 08:23:52 +00:00
Johannes Segitz
a7283c99d6 Accepting request 984855 from home:jsegitz:branches:security:SELinux
- Update to version 20220624. Refreshed:
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_logging.patch
  * fix_networkmanager.patch
  * fix_unprivuser.patch
  Dropped fix_hadoop.patch, not necessary anymore
* Updated fix_locallogin.patch to allow accesses for nss-systemd 
  (bsc#1199630)

OBS-URL: https://build.opensuse.org/request/show/984855
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=132
2022-06-24 09:40:15 +00:00
Dominique Leuenberger
a185359d28 Accepting request 978298 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/978298
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=25
2022-06-20 13:36:43 +00:00
Dominique Leuenberger
52a5fe81c3 Accepting request 978298 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/978298
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=25
2022-06-20 13:36:43 +00:00
Johannes Segitz
11a4df6bd1 Accepting request 978296 from home:jsegitz:branches:security:SELinux
- Update to version 20220520 to pass stricter 3.4 toolchain checks

OBS-URL: https://build.opensuse.org/request/show/978296
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=130
2022-05-20 14:53:12 +00:00
Johannes Segitz
0ae8014c7e Accepting request 978251 from home:jsegitz:branches:security:SELinux_3.3
- Update to version 20220428. Refreshed:
  * fix_apache.patch
  * fix_hadoop.patch
  * fix_init.patch
  * fix_iptables.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_unprivuser.patch
  * fix_usermanage.patch
  * fix_wine.patch

OBS-URL: https://build.opensuse.org/request/show/978251
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=129
2022-05-20 09:46:20 +00:00
Johannes Segitz
c6e85fecc6 Accepting request 978218 from home:jsegitz:branches:security:SELinux_3.3
- Add fix_dnsmasq.patch to fix problems with virtualization on Microos
  (bsc#1199518)

- Modified fix_init.patch to allow init to setup contrained environment
  for accountsservice. This needs a better, more general solution
  (bsc#1197610)

- Add systemd_domain_dyntrans_type.patch to allow systemd to dyntransition.
  This happens in certain boot conditions (bsc#1182500)
- Changed fix_unconfineduser.patch to not transition into ldconfig_t
  from unconfined_t (bsc#1197169)

OBS-URL: https://build.opensuse.org/request/show/978218
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=128
2022-05-20 07:36:43 +00:00
Dominique Leuenberger
51fabeb6bb Accepting request 957363 from security:SELinux
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/957363
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=24
2022-02-26 16:01:58 +00:00
Dominique Leuenberger
223a3cdd5f Accepting request 957363 from security:SELinux
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/957363
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=24
2022-02-26 16:01:58 +00:00
Johannes Segitz
d6ac89f53f Accepting request 955626 from home:kwk:branches:security:SELinux
- use %license tag for COPYING file

OBS-URL: https://build.opensuse.org/request/show/955626
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=127
2022-02-17 13:51:31 +00:00
Dominique Leuenberger
f8fd46faf9 Accepting request 953129 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/953129
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=23
2022-02-11 22:07:09 +00:00
Dominique Leuenberger
623616946f Accepting request 953129 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/953129
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=23
2022-02-11 22:07:09 +00:00
Johannes Segitz
62d16518b2 Accepting request 953125 from home:jsegitz:branches:security:SELinux
- Updated fix_cron.patch. Adjust labeling for at (bsc#1195683)

OBS-URL: https://build.opensuse.org/request/show/953125
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=126
2022-02-10 10:25:04 +00:00
Johannes Segitz
863e94abf1 Accepting request 953118 from home:fbonazzi:branches:security:SELinux
- Fix bitlbee runtime directory (bsc#1193230)
  * add fix_bitlbee.patch

OBS-URL: https://build.opensuse.org/request/show/953118
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=125
2022-02-10 10:24:00 +00:00
Dominique Leuenberger
14bc6e561c Accepting request 948335 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/948335
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=22
2022-01-26 20:26:31 +00:00
Dominique Leuenberger
80b8756a0f Accepting request 948335 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/948335
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=22
2022-01-26 20:26:31 +00:00
Johannes Segitz
321f539d0b Accepting request 948331 from home:jsegitz:branches:security:SELinux
- Update to version 20220124. Refreshed:
  * fix_hadoop.patch
  * fix_init.patch
  * fix_kernel_sysctl.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
- Added fix_hypervkvp.patch to fix issues with hyperv labeling 
  (bsc#1193987)

OBS-URL: https://build.opensuse.org/request/show/948331
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=124
2022-01-24 08:43:41 +00:00
Dominique Leuenberger
036b3db5c3 Accepting request 947458 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/947458
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=21
2022-01-21 00:25:14 +00:00
Dominique Leuenberger
bfd2a0a742 Accepting request 947458 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/947458
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=21
2022-01-21 00:25:14 +00:00
Johannes Segitz
445c681f20 Accepting request 947457 from home:jsegitz:branches:security:SELinux
- Allow colord to use systemd hardenings (bsc#1194631)

OBS-URL: https://build.opensuse.org/request/show/947457
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=123
2022-01-19 15:57:54 +00:00
Dominique Leuenberger
bf8e52f30a Accepting request 930935 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/930935
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=20
2021-11-15 14:26:00 +00:00
Dominique Leuenberger
d7a7b70dfb Accepting request 930935 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/930935
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=20
2021-11-15 14:26:00 +00:00
Johannes Segitz
3e76bf7c4f Accepting request 930934 from home:jsegitz:branches:security:SELinux
- Update to version 20211111. Refreshed:
  * fix_dbus.patch
  * fix_systemd.patch
  * fix_authlogin.patch
  * fix_auditd.patch
  * fix_kernel_sysctl.patch
  * fix_networkmanager.patch
  * fix_chronyd.patch
  * fix_unconfineduser.patch
  * fix_unconfined.patch
  * fix_firewalld.patch
  * fix_init.patch
  * fix_xserver.patch
  * fix_logging.patch
  * fix_hadoop.patch

OBS-URL: https://build.opensuse.org/request/show/930934
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=122
2021-11-11 16:01:20 +00:00
Dominique Leuenberger
adaf9c93f6 Accepting request 927915 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/927915
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=19
2021-10-30 21:13:30 +00:00
Dominique Leuenberger
698311c05a Accepting request 927915 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/927915
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=19
2021-10-30 21:13:30 +00:00
Johannes Segitz
a54d31d04f Accepting request 927719 from home:msmeissn:branches:security:SELinux
- fix_wine.patch: give Wine .dll same context as .so (bsc#1191976)

OBS-URL: https://build.opensuse.org/request/show/927719
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=121
2021-10-28 08:41:11 +00:00
Dominique Leuenberger
ab2665df35 Accepting request 922280 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/922280
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=18
2021-10-01 20:28:54 +00:00
Dominique Leuenberger
ae689b83ec Accepting request 922280 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/922280
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=18
2021-10-01 20:28:54 +00:00
Johannes Segitz
569b406914 Accepting request 922219 from home:ematsumiya:branches:security:SELinux
- Fix auditd service start with systemd hardening directives (boo#1190918)
  * add fix_auditd.patch

OBS-URL: https://build.opensuse.org/request/show/922219
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=120
2021-09-30 06:48:59 +00:00
Dominique Leuenberger
377bd6dbf3 Accepting request 915717 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/915717
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=17
2021-09-02 21:20:08 +00:00
Dominique Leuenberger
33d04f1b0d Accepting request 915717 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/915717
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=17
2021-09-02 21:20:08 +00:00
Johannes Segitz
23c83e5de5 Accepting request 915716 from home:jsegitz:branches:security:SELinux
- Modified fix_systemd.patch to allow systemd gpt generator access to
  udev files (bsc#1189280)

OBS-URL: https://build.opensuse.org/request/show/915716
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=119
2021-09-02 09:14:04 +00:00
Johannes Segitz
ec4c74f73a Accepting request 915205 from home:akedroutek:branches:security:SELinux
- fix rebootmgr does not trigger the reboot properly (boo#1189878)
  * fix managing /etc/rebootmgr.conf
  * allow rebootmgr_t to cope with systemd and dbus messaging

OBS-URL: https://build.opensuse.org/request/show/915205
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=118
2021-08-31 13:53:41 +00:00
Johannes Segitz
ae9139e375 Accepting request 914371 from home:jsegitz:branches:security:SELinux
- Properly label cockpit files
- Allow wicked to communicate with network manager on DBUS (bsc#1188331)

OBS-URL: https://build.opensuse.org/request/show/914371
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=117
2021-08-26 08:36:34 +00:00
Johannes Segitz
87ac70638e Accepting request 914043 from home:akedroutek:branches:security:SELinux
- Added policy module for rebootmgr (jsc#SMO-28)

OBS-URL: https://build.opensuse.org/request/show/914043
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=116
2021-08-24 14:50:15 +00:00
Richard Brown
51218d2b3a Accepting request 912873 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/912873
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=16
2021-08-19 11:39:01 +00:00
Richard Brown
feeb03e48b Accepting request 912873 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/912873
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=16
2021-08-19 11:39:01 +00:00
Ales Kedroutek
e9e2930221 Accepting request 912846 from home:lnussel:usrmove
- Allow systemd-sysctl to read kernel specific sysctl.conf
  (fix_kernel_sysctl.patch, boo#1184804)

OBS-URL: https://build.opensuse.org/request/show/912846
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=115
2021-08-18 10:42:18 +00:00
Johannes Segitz
fdc38c861f Accepting request 911222 from home:lnussel:branches:security:SELinux
- Fix quoting in postInstall macro

OBS-URL: https://build.opensuse.org/request/show/911222
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=114
2021-08-11 12:31:49 +00:00
Dominique Leuenberger
25bc21e926 Accepting request 909370 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/909370
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=15
2021-08-02 10:04:33 +00:00
Dominique Leuenberger
c8394980d8 Accepting request 909370 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/909370
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=15
2021-08-02 10:04:33 +00:00
Johannes Segitz
72477b3ac5 Accepting request 909369 from home:jsegitz:branches:security:SELinux
- Update to version 20210716
- Remove interfaces for container module before building the package
  (bsc#1188184)
- Updated
  * fix_init.patch
  * fix_systemd_watch.patch
  to adapt to upstream changes

- Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing
  here

- Update to version 20210419
- Dropped fix_gift.patch, module was removed
- Updated wicked.te to removed dropped interface
- Refreshed:
  * fix_cockpit.patch
  * fix_hadoop.patch
  * fix_init.patch
  * fix_logging.patch
  * fix_logrotate.patch
  * fix_networkmanager.patch
  * fix_nscd.patch
  * fix_rpm.patch
  * fix_selinuxutil.patch
  * fix_systemd.patch
  * fix_systemd_watch.patch
  * fix_thunderbird.patch
  * fix_unconfined.patch
  * fix_unconfineduser.patch
  * fix_unprivuser.patch

OBS-URL: https://build.opensuse.org/request/show/909369
OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=113
2021-07-30 09:07:13 +00:00
Dominique Leuenberger
b82ea14783 Accepting request 904732 from security:SELinux
OBS-URL: https://build.opensuse.org/request/show/904732
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=14
2021-07-11 23:24:43 +00:00