File history - rpms/container-selinux

Define spc_t as a container_domain, so that container_runtime will transition

Daniel J Walsh • 5 years ago

883282

Allow unconfined_r to transition to system_r over container_runtime_exec_t

Daniel J Walsh • 5 years ago

1c6b7e

Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t

Daniel J Walsh • 5 years ago

e6bf4b

dontaudit attempts to write to sysctl_kernel_t

Daniel J Walsh • 5 years ago

4ed365

container-selinux-2:2.68-2.gitc139a3d

Lokesh Mandvekar (Bot) • 5 years ago

08b0e7

Add labels for /var/lib/origin directory

Daniel J Walsh • 5 years ago

be54b1

container-selinux-2:2.67-2.git042f7cf

Lokesh Mandvekar (Bot) • 5 years ago

814ce6

container-selinux-2:2.67-1.git0407867

Lokesh Mandvekar (Bot) • 5 years ago

da11a8

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 5 years ago

37cbbf

container-selinux-2:2.64-1.gitdfaf8fd

Lokesh Mandvekar (Bot) • 5 years ago

ee88cd

Add new type to handle containers running with a non priv user in a userns

Daniel J Walsh • 5 years ago

781a8d

Allow containers to create all socket classes

Daniel J Walsh • 5 years ago

3cc70f

Allow containers to create icmp packets

Daniel J Walsh • 5 years ago

71d866

container-selinux-2:2.62-1.git1ecf953

Lokesh Mandvekar (Bot) • 5 years ago

c23464

Allow spc_t to load kernel modules from inside of container

Daniel J Walsh • 6 years ago

25c4cb

Allow containers to list cgroup directories

Daniel J Walsh • 6 years ago

59df2c

Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.

Daniel J Walsh • 6 years ago

2be920

Add labels to allow podman to be run from a systemd unit file

Daniel J Walsh • 6 years ago

1f65da

Dontaudit attempts by containers to write to /proc/self

Daniel J Walsh • 6 years ago

c46266

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

37b78d

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

69afd1

Allow shell_exec_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

b658ae

Allow bin_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

5a5bf6

Allow container domains to map container_file_t directories

Daniel J Walsh • 6 years ago

9a7a65

Change default label of /exports to container_var_lib_t

Daniel J Walsh • 6 years ago

f8193b

Add support for nosuid_transition flags for container_runtime and unconfined domains

Daniel J Walsh • 6 years ago

3b45b2

Allow container domains to read kernel ipc info

Daniel J Walsh • 6 years ago

5b2867

Allow containers to memory map the fifo_files leaked into container from

Daniel J Walsh • 6 years ago

a7ce31

Allow unconfined domains to transition to container types, when no-new-privs is set.

Daniel J Walsh • 6 years ago

a4c374

Add support to nnp_transition for container domains

Daniel J Walsh • 6 years ago

155783

Allow container_runtime_t to use user ttys

Daniel J Walsh • 6 years ago

a85180

Allow container runtimes to use interited terminals. This helps

Daniel J Walsh • 6 years ago

64fe9d

Allow container runtimes to mmap container_file_t devices

Daniel J Walsh • 6 years ago

98e715

Allow containers to use inherited ttys

Daniel J Walsh • 6 years ago

e0502d

Allow containers to relabelto/from all file types to container_file_t

Daniel J Walsh • 6 years ago

7f79cf

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

751a4e

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

8ed545

Dontaudit container processes getattr on kernel file systems

Daniel J Walsh • 6 years ago

4e9b7c

Allow containers to read /etc/resolv.conf and /etc/hosts if volume

Daniel J Walsh • 6 years ago

cc32ba

Make sure users creating content in /var/lib with right labels

Daniel J Walsh • 6 years ago

be0a39

Allow the container runtime to dbus chat with dnsmasq

Daniel J Walsh • 6 years ago

31963a

Add support for lxcd

Daniel J Walsh • 6 years ago

b99f18

Allow a container to umount a container_file_t filesystem

Daniel J Walsh • 6 years ago

ecb176

Allow container runtimes to work with the netfilter sockets

Daniel J Walsh • 6 years ago

5a61b6

Make sure container_runtime_t has all access of container_t

Daniel J Walsh • 6 years ago

c6e706

Allow container runtimes to create sockets in tmp dirs

Daniel J Walsh • 6 years ago

652d65

Add additonal support for crio labeling.

Daniel J Walsh • 6 years ago

1aad22

Allow containers to execmod on container_share_t files.

Daniel J Walsh • 6 years ago

bb6875

Allow container processes to getsession

Daniel J Walsh • 6 years ago

ef7772

Allow containers to create tun sockets

Daniel J Walsh • 6 years ago

fbb3cf

Fix labeling for CRI-O files in overlay subdirs

Daniel J Walsh • 6 years ago

f7112e

Revert change to run the container_runtime as ranged

Daniel J Walsh • 6 years ago

590def

Add default labeling for cri-o in /etc/crio directories

Daniel J Walsh • 6 years ago

486876

Allow container types to read/write container_runtime fifo files

Daniel J Walsh • 6 years ago

379ddc

Add labels for crio rename

Dan Walsh • 7 years ago

1b640c

Add rules to allow container runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

d6c9f1

Add rules to allow container_runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

4e04f9

Allow container_file_t to be stored on cgroup_t file systems

Daniel J Walsh • 7 years ago

e6af90

Fix type in container interface file

Daniel J Walsh • 7 years ago

afcdd3

Fix typebounds entrypoint problems

Daniel J Walsh • 7 years ago

761ca4

Fix typebounds problems

Daniel J Walsh • 7 years ago

3fcf74

Add typebounds statement for container_t from container_runtime_t

Daniel J Walsh • 7 years ago

c06c92

Fix labeling on /usr/bin/runc.*

Daniel J Walsh • 7 years ago

c8e82c

container-selinux-2:2.2-1

Lokesh Mandvekar • 7 years ago

98c88e

container-selinux-2:2.0-1

Lokesh Mandvekar • 7 years ago

7fa12a

Initial setup of the repo

Fedora Release Engineering • 7 years ago

3dde17

rpms / container-selinux

History .gitignore

rpms / container-selinux

Source Code

History .gitignore