File history - rpms/container-selinux - CentOS Git server

rpms / container-selinux

History container-selinux.spec

Define spc_t as a container_domain, so that container_runtime will transition

Daniel J Walsh • 5 years ago

883282

Allow container_runtimes to setattr on callers fifo_files

Daniel J Walsh • 5 years ago

90d38a

Fix restorecon to not error on missing directory

Daniel J Walsh • 5 years ago

5c3953

Allow unconfined_r to transition to system_r over container_runtime_exec_t

Daniel J Walsh • 5 years ago

1c6b7e

Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t

Daniel J Walsh • 5 years ago

e6bf4b

remove unnecessary distro conditionals

Lokesh Mandvekar • 5 years ago

efac8b

dontaudit attempts to write to sysctl_kernel_t

Daniel J Walsh • 5 years ago

4ed365

container-selinux-2:2.68-2.gitc139a3d

Lokesh Mandvekar (Bot) • 5 years ago

08b0e7

Add labels for /var/lib/origin directory

Daniel J Walsh • 5 years ago

be54b1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

Fedora Release Engineering • 5 years ago

49aa68

update release tag to reflect unreleased status

Lokesh Mandvekar • 5 years ago

aa27ac

container-selinux-2:2.67-2.git042f7cf

Lokesh Mandvekar (Bot) • 5 years ago

814ce6

container-selinux-2:2.67-1.git0407867

Lokesh Mandvekar (Bot) • 5 years ago

da11a8

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 5 years ago

e3d623

container-selinux-2:2.64-1.gitdfaf8fd

Lokesh Mandvekar (Bot) • 5 years ago

ee88cd

Add new type to handle containers running with a non priv user in a userns

Daniel J Walsh • 5 years ago

781a8d

Allow containers to create all socket classes

Daniel J Walsh • 5 years ago

91cc6a

Allow containers to create icmp packets

Daniel J Walsh • 5 years ago

71d866

container-selinux-2:2.62-1.git1ecf953

Lokesh Mandvekar (Bot) • 5 years ago

c23464

Allow spc_t to load kernel modules from inside of container

Daniel J Walsh • 6 years ago

25c4cb

Allow containers to list cgroup directories

Daniel J Walsh • 6 years ago

59df2c

Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.

Daniel J Walsh • 6 years ago

2be920

Run restorecon /usr/bin/podman in postinstall

Daniel J Walsh • 6 years ago

cbb3d2

Add labels to allow podman to be run from a systemd unit file

Daniel J Walsh • 6 years ago

1f65da

container-selinux-2:2.55-12.gitd248f91

Lokesh Mandvekar (Bot) • 6 years ago

cbb99a

container-selinux-2:2.55-11.gitd248f91

Lokesh Mandvekar (Bot) • 6 years ago

68364b

correct Source0 if centos

Lokesh Mandvekar • 6 years ago

e87f12

container-selinux-2:2.55-10.gitd248f91

Lokesh Mandvekar (Bot) • 6 years ago

654515

container-selinux-2:2.55-9.gitd248f91

Lokesh Mandvekar (Bot) • 6 years ago

6d73ab

add shortcommit0 in release string

Lokesh Mandvekar • 6 years ago

750692

container-selinux-2:2.55-8

Lokesh Mandvekar (Bot) • 6 years ago

95b2b1

container-selinux-2:2.55-7

Lokesh Mandvekar (Bot) • 6 years ago

357bc5

container-selinux-2:2.55-6

Lokesh Mandvekar (Bot) • 6 years ago

03bdc4

container-selinux-2:2.55-5

Lokesh Mandvekar (Bot) • 6 years ago

e49a7c

container-selinux-2:2.55-4

Lokesh Mandvekar (Bot) • 6 years ago

af3606

container-selinux-2:2.55-3

Lokesh Mandvekar • 6 years ago

7c6163

change case cause it messes up my autobuilder script :D

Lokesh Mandvekar • 6 years ago

c9ddfc

container-selinux-

Lokesh Mandvekar • 6 years ago

802379

packaging changes for centos v/s fedora

Lokesh Mandvekar • 6 years ago

4c7ed6

Dontaudit attempts by containers to write to /proc/self

Daniel J Walsh • 6 years ago

c46266

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

37b78d

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

69afd1

Allow shell_exec_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

b658ae

Allow bin_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

5a5bf6

Allow container domains to map container_file_t directories

Daniel J Walsh • 6 years ago

9a7a65

Change default label of /exports to container_var_lib_t

Daniel J Walsh • 6 years ago

f8193b

Escape macros in %changelog

Igor Gnatenko • 6 years ago

a7071b

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

Fedora Release Engineering • 6 years ago

07b680

Add support for nosuid_transition flags for container_runtime and unconfined domains

Daniel J Walsh • 6 years ago

3b45b2

Allow containers to sendto their own stream sockets

Daniel J Walsh • 6 years ago

1b2065

Allow container domains to read kernel ipc info

Daniel J Walsh • 6 years ago

5b2867

Allow containers to memory map the fifo_files leaked into container from

Daniel J Walsh • 6 years ago

a7ce31

Allow unconfined domains to transition to container types, when no-new-privs is set.

Daniel J Walsh • 6 years ago

a4c374

Add support to nnp_transition for container domains

Daniel J Walsh • 6 years ago

155783

Allow container_runtime_t to use user ttys

Daniel J Walsh • 6 years ago

a85180

Allow container runtimes to use interited terminals. This helps

Daniel J Walsh • 6 years ago

64fe9d

Allow container runtimes to mmap container_file_t devices

Daniel J Walsh • 6 years ago

98e715

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/container-selinux

Daniel J Walsh • 6 years ago

aaa91f

Allow containers to use inherited ttys

Daniel J Walsh • 6 years ago

e0502d

remove git from builddep

Lokesh Mandvekar • 6 years ago

0ce870

Allow containers to relabelto/from all file types to container_file_t

Daniel J Walsh • 6 years ago

7f79cf

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

751a4e

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

8ed545

Dontaudit container processes getattr on kernel file systems

Daniel J Walsh • 6 years ago

4e9b7c

Allow containers to read /etc/resolv.conf and /etc/hosts if volume

Daniel J Walsh • 6 years ago

cc32ba

Make sure users creating content in /var/lib with right labels

Daniel J Walsh • 6 years ago

be0a39

Allow the container runtime to dbus chat with dnsmasq

Daniel J Walsh • 6 years ago

31963a

Add support for lxcd

Daniel J Walsh • 6 years ago

b99f18

Allow a container to umount a container_file_t filesystem

Daniel J Walsh • 6 years ago

ecb176

Allow container runtimes to work with the netfilter sockets

Daniel J Walsh • 6 years ago

5a61b6

Make sure container_runtime_t has all access of container_t

Daniel J Walsh • 6 years ago

c6e706

Allow container runtimes to create sockets in tmp dirs

Daniel J Walsh • 6 years ago

b74f4a

Add additonal support for crio labeling.

Daniel J Walsh • 6 years ago

1aad22

Fixup spec file conditionals

Troy Dawson • 6 years ago

9a3633

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

Fedora Release Engineering • 6 years ago

5cb66e

Allow containers to execmod on container_share_t files.

Daniel J Walsh • 6 years ago

bb6875

Relabel runc and crio executables

Daniel J Walsh • 6 years ago

852a09

Allow container processes to getsession

Daniel J Walsh • 6 years ago

ef7772

Allow containers to create tun sockets

Daniel J Walsh • 6 years ago

fbb3cf

Fix labeling for CRI-O files in overlay subdirs

Daniel J Walsh • 6 years ago

35b539

Revert change to run the container_runtime as ranged

Daniel J Walsh • 6 years ago

590def

Add default labeling for cri-o in /etc/crio directories

Daniel J Walsh • 6 years ago

486876

Allow container types to read/write container_runtime fifo files

Daniel J Walsh • 6 years ago

379ddc

Add labels for crio rename

Dan Walsh • 7 years ago

ed21ef

Add rules to allow container runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

d6c9f1

Add rules to allow container_runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

4e04f9

Allow container_file_t to be stored on cgroup_t file systems

Daniel J Walsh • 7 years ago

e6af90

Fix type in container interface file

Daniel J Walsh • 7 years ago

afcdd3

Fix typebounds entrypoint problems

Daniel J Walsh • 7 years ago

761ca4

Fix typebounds problems

Daniel J Walsh • 7 years ago

a2fe41

Fix typebounds problems

Daniel J Walsh • 7 years ago

3fcf74

Add typebounds statement for container_t from container_runtime_t

Daniel J Walsh • 7 years ago

c06c92

Fix labeling on /usr/bin/runc.*

Daniel J Walsh • 7 years ago

6c8c18

Fix labeling on /usr/bin/runc.*

Daniel J Walsh • 7 years ago

c8e82c

container-selinux-2:2.2-4

Lokesh Mandvekar • 7 years ago

dc5c39

container-selinux-2:2.2-3

Jonathan Lebon • 7 years ago

6028cc

container-selinux-2:2.2-2

Lokesh Mandvekar • 7 years ago

8602eb

container-selinux-2:2.2-1

Lokesh Mandvekar • 7 years ago

98c88e

container-selinux-2:2.0-2

Lokesh Mandvekar • 7 years ago

57ea4c

Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a

Daniel J Walsh • 7 years ago

85f5b3

container-selinux-2:2.0-1

Lokesh Mandvekar • 7 years ago

7fa12a

Powered by Pagure 5.13.3

SSH Hostkey/Fingerprint | Documentation