Commits - rpms/container-selinux

Change default label of /exports to container_var_lib_t

Daniel J Walsh • 6 years ago

e2a744

Allow containers to sendto their own stream sockets

Daniel J Walsh • 6 years ago

f4c446

Allow container domains to read kernel ipc info

Daniel J Walsh • 6 years ago

de8c56

Allow unconfined domains to transition to container types, when no-new-privs is set.

Daniel J Walsh • 6 years ago

f846c3

Add support to nnp_transition for container domains

Daniel J Walsh • 6 years ago

4aa4cc

Allow container_runtime_t to use user ttys

Daniel J Walsh • 6 years ago

cb65ff

Allow container runtimes to use interited terminals. This helps

Daniel J Walsh • 6 years ago

0da116

Allow container runtimes to mmap container_file_t devices

Daniel J Walsh • 6 years ago

373b35

Allow containers to use inherited ttys

Daniel J Walsh • 6 years ago

25cb53

remove git from builddep

Lokesh Mandvekar • 6 years ago

06bc2d

Allow containers to relabelto/from all file types to container_file_t

Daniel J Walsh • 6 years ago

21cd0d

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

fd0719

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

31e82a

Dontaudit container processes getattr on kernel file systems

Daniel J Walsh • 6 years ago

426e65

Allow containers to read /etc/resolv.conf and /etc/hosts if volume

Daniel J Walsh • 6 years ago

947138

Make sure users creating content in /var/lib with right labels

Daniel J Walsh • 6 years ago

c642d7

Allow the container runtime to dbus chat with dnsmasq

Daniel J Walsh • 6 years ago

22a11a

Add support for lxcd

Daniel J Walsh • 6 years ago

db10f7

Allow a container to umount a container_file_t filesystem

Daniel J Walsh • 6 years ago

7e3655

Allow container runtimes to work with the netfilter sockets

Daniel J Walsh • 6 years ago

4d68bd

Make sure container_runtime_t has all access of container_t

Daniel J Walsh • 6 years ago

89a5c3

Allow container runtimes to create sockets in tmp dirs

Daniel J Walsh • 6 years ago

485df1

Allow container runtimes to create sockets in tmp dirs

Daniel J Walsh • 6 years ago

a285f6

Add additonal support for crio labeling.

Daniel J Walsh • 6 years ago

caaff8

Allow containers to execmod on container_share_t files.

Daniel J Walsh • 6 years ago

9832a5

Relabel runc and crio executables

Daniel J Walsh • 6 years ago

7ff0bd

Allow container processes to getsession

Daniel J Walsh • 6 years ago

0a04ed

Allow containers to create tun sockets

Daniel J Walsh • 6 years ago

128d9a

Fix labeling for CRI-O files in overlay subdirs

Daniel J Walsh • 6 years ago

df84d0

Revert change to run the container_runtime as ranged

Daniel J Walsh • 6 years ago

7bb0b3

Add default labeling for cri-o in /etc/crio directories

Daniel J Walsh • 6 years ago

cd373d

Allow container types to read/write container_runtime fifo files

Daniel J Walsh • 6 years ago

23a6ec

Add labels for crio rename

Dan Walsh • 6 years ago

695905

Add rules to allow container runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

d6c9f1

Add rules to allow container_runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

068028

Add rules to allow container_runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

4e04f9

Allow container_file_t to be stored on cgroup_t file systems

Daniel J Walsh • 7 years ago

e6af90

Fix type in container interface file

Daniel J Walsh • 7 years ago

afcdd3

Fix typebounds entrypoint problems

Daniel J Walsh • 7 years ago

761ca4

Fix typebounds problems

Daniel J Walsh • 7 years ago

a2fe41

Fix typebounds problems

Daniel J Walsh • 7 years ago

3fcf74

Add typebounds statement for container_t from container_runtime_t

Daniel J Walsh • 7 years ago

c06c92

Fix labeling on /usr/bin/runc.*

Daniel J Walsh • 7 years ago

6c8c18

Fix labeling on /usr/bin/runc.*

Daniel J Walsh • 7 years ago

c8e82c

container-selinux-2:2.2-4