Commits - rpms/container-selinux

Define spc_t as a container_domain, so that container_runtime will transition

Daniel J Walsh • 5 years ago

883282

Allow container_runtimes to setattr on callers fifo_files

Daniel J Walsh • 5 years ago

90d38a

Fix restorecon to not error on missing directory

Daniel J Walsh • 5 years ago

5c3953

Allow unconfined_r to transition to system_r over container_runtime_exec_t

Daniel J Walsh • 5 years ago

1c6b7e

Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t

Daniel J Walsh • 5 years ago

e6bf4b

remove unnecessary distro conditionals

Lokesh Mandvekar • 5 years ago

efac8b

dontaudit attempts to write to sysctl_kernel_t

Daniel J Walsh • 5 years ago

4ed365

container-selinux-2:2.68-2.gitc139a3d

Lokesh Mandvekar (Bot) • 5 years ago

08b0e7

Add labels for /var/lib/origin directory

Daniel J Walsh • 5 years ago

be54b1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

Fedora Release Engineering • 5 years ago

49aa68

update release tag to reflect unreleased status

Lokesh Mandvekar • 5 years ago

aa27ac

container-selinux-2:2.67-2.git042f7cf

Lokesh Mandvekar (Bot) • 5 years ago

814ce6

container-selinux-2:2.67-1.git0407867

Lokesh Mandvekar (Bot) • 5 years ago

da11a8

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 5 years ago

37cbbf

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 5 years ago

e3d623

container-selinux-2:2.64-1.gitdfaf8fd

Lokesh Mandvekar (Bot) • 5 years ago

ee88cd

Add new type to handle containers running with a non priv user in a userns

Daniel J Walsh • 5 years ago

781a8d

Allow containers to create all socket classes

Daniel J Walsh • 5 years ago

3cc70f

Allow containers to create all socket classes

Daniel J Walsh • 5 years ago

91cc6a

Allow containers to create icmp packets

Daniel J Walsh • 5 years ago

71d866

container-selinux-2:2.62-1.git1ecf953

Lokesh Mandvekar (Bot) • 5 years ago

c23464

Allow spc_t to load kernel modules from inside of container

Daniel J Walsh • 5 years ago

25c4cb

Allow containers to list cgroup directories

Daniel J Walsh • 5 years ago

59df2c

Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.

Daniel J Walsh • 5 years ago

2be920

Run restorecon /usr/bin/podman in postinstall

Daniel J Walsh • 5 years ago

cbb3d2

Add labels to allow podman to be run from a systemd unit file

Daniel J Walsh • 5 years ago

1f65da

container-selinux-2:2.55-12.gitd248f91