Commits 89
Daniel J Walsh
Define spc_t as a container_domain, so that container_runtime will transition
Daniel J Walsh
•
5 years ago
Allow unconfined_r to transition to system_r over container_runtime_exec_t
Daniel J Walsh
•
5 years ago
Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t
Daniel J Walsh
•
5 years ago
Add trigger to relabel content on /var/lib/containers on older versions of
Daniel J Walsh
•
5 years ago
Add trigger to relabel content on /var/lib/containers on older versions of
Daniel J Walsh
•
5 years ago
Add new type to handle containers running with a non priv user in a userns
Daniel J Walsh
•
5 years ago
Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.
Daniel J Walsh
•
5 years ago
Add rules for container domains to make writing custom policy easier
Daniel J Walsh
•
6 years ago
Add rules for container domains to make writing custom policy easier
Daniel J Walsh
•
6 years ago
Allow container domains to map container_file_t directories
Daniel J Walsh
•
6 years ago
Change default label of /exports to container_var_lib_t
Daniel J Walsh
•
6 years ago
Escape macros in %changelog
Igor Gnatenko
•
6 years ago
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Fedora Release Engineering
•
6 years ago
Add support for nosuid_transition flags for container_runtime and unconfined domains
Daniel J Walsh
•
6 years ago
Allow containers to sendto their own stream sockets
Daniel J Walsh
•
6 years ago
Allow container domains to read kernel ipc info
Daniel J Walsh
•
6 years ago
Allow containers to memory map the fifo_files leaked into container from
Daniel J Walsh
•
6 years ago
Allow unconfined domains to transition to container types, when no-new-privs is set.
Daniel J Walsh
•
6 years ago
Add support to nnp_transition for container domains
Daniel J Walsh
•
6 years ago
Allow container_runtime_t to use user ttys
Daniel J Walsh
•
6 years ago
Allow container runtimes to use interited terminals. This helps
Daniel J Walsh
•
6 years ago
Allow container runtimes to mmap container_file_t devices
Daniel J Walsh
•
6 years ago
Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/container-selinux
Daniel J Walsh
•
6 years ago
Allow containers to use inherited ttys
Daniel J Walsh
•
6 years ago
remove git from builddep
Lokesh Mandvekar
•
6 years ago
Allow containers to relabelto/from all file types to container_file_t
Daniel J Walsh
•
6 years ago
Allow container to map chr_files labeled container_file_t
Daniel J Walsh
•
6 years ago
Allow container to map chr_files labeled container_file_t
Daniel J Walsh
•
6 years ago
Dontaudit container processes getattr on kernel file systems
Daniel J Walsh
•
6 years ago
Allow containers to read /etc/resolv.conf and /etc/hosts if volume
Daniel J Walsh
•
6 years ago
Make sure users creating content in /var/lib with right labels
Daniel J Walsh
•
6 years ago
Allow the container runtime to dbus chat with dnsmasq
Daniel J Walsh
•
6 years ago
Add support for lxcd
Daniel J Walsh
•
6 years ago