File container-selinux.changes of Package container-selinux

Overview Repositories Revisions Requests Users Attributes Meta

File container-selinux.changes of Package container-selinux (Revision 402c6b1b54e4f4f26e2490ec6c07b62d)

Currently displaying revision 402c6b1b54e4f4f26e2490ec6c07b62d , Show latest

-------------------------------------------------------------------
Thu Jul 14 08:37:48 UTC 2022 - Johannes Segitz <jsegitz@suse.com>

- Update to version 2.188.0:
  * Allow confined containers to mount overlay filesystems
  Fixed bsc#1201348

-------------------------------------------------------------------
Wed Jun 22 13:17:49 UTC 2022 - Frederic Crozat <fcrozat@suse.com>

- Update to version 2.187.0:
  * Allow container domains to use /dev/zero
- Changes from 2.186.0:
  * Create policy for a container_device_t 
  * Allow containers to shutdown & setopt userdomain:sockets
- Changes from 2.183.0:
  * Allow containers to inherit all socket classes from container runtimes.
- Changes from 2.182.0:
  * Allow containers to inherit all socket classes
- Changes from 2.181.0:
  * Allow socket activated domains for tcp sockets from init_t and userdomains.

-------------------------------------------------------------------
Tue Mar 22 08:35:54 UTC 2022 - Johannes Segitz <jsegitz@suse.com>

- Add udica templates to the package

-------------------------------------------------------------------
Fri Mar 18 12:04:25 UTC 2022 - Johannes Segitz <jsegitz@suse.com>

- Update to version 2.180.0
  * Allow container domains to read/write kvm_device_t
  * Update kublet mappings to inlcude /usr/local/*
  * Allow container domains to use container runtime tcp and udp sockets
  * Alow containers to use unix_stream_sockets leaked from container runtimes
  * Allow userdomains to execute conmon_exec_t and use it as an entrypoint
  * Allow conmon_exec_t as an entrypoint
  * Add container_use_devices boolean to allow containers to use any device
  * Add explicit range transition for conmon
  * Add missing dbus class declaration into container_runtime_run()
  * Remove lockdown allow rules
  * Remove k3s fcontexts
  * Allow container domains to be used by user roles
- Changed source url to allow for download via source service

-------------------------------------------------------------------
Fri Nov 12 16:21:06 UTC 2021 - Richard Brown <rbrown@suse.com>

- Update to version 2.171.0
  * Define kubernetes_file_t as a config_type
  * Allow containers to be socket activated by user domains and by systemd.
  * Allow iptables to use fifo files of a container runtime
  * Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t
  * Allow containers to create lnk_file on tmpfs_t directories.

-------------------------------------------------------------------
Mon Aug  9 07:44:17 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

- Update to version 2.164.2
  * Don't setup users for writing to pid_sockets
  * Allow container engines to be started from the staff user.
  * Allow spc_t domains to set bpf rules on any domain
  * Add support for k3s

-------------------------------------------------------------------
Fri Apr 23 06:04:48 UTC 2021 - Johannes Segitz <jsegitz@suse.com>

- Fix container runtime binary labels (bsc#1185030). You need to 
  relable at least /usr/sbin if you're affected

-------------------------------------------------------------------
Tue Feb 23 13:21:19 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>

- Update to version 2.158.0
  - Add nfs remount support
  - Allow containers to execmod on nfs, samba and cephs remote shares
  - Allow confined users to send dbus messages to container_runtime

-------------------------------------------------------------------
Mon Jan 11 10:40:32 UTC 2021 - Thorsten Kukuk <kukuk@suse.com>

- Update to version 2.154.0
  - Allow confined user domains to run confined container domains.
  - Allow all containers to use nfs shares, iff virt_use_nfs boolean
    is enabled.
  - Allow containers to read nsfs file systems.
  - KVM Container need to use tunnel sockets created by runtime.

-------------------------------------------------------------------
Tue Nov  3 07:53:35 UTC 2020 - Ludwig Nussel <lnussel@suse.de>

- Don't use BuildRequires based on shell script output. OBS can't
  evaluate that.

-------------------------------------------------------------------
Thu Oct 29 07:52:21 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>

- Update to version 2.150.0
  - Add additional allow rules for kvm based containers using
    virtiofsd.

-------------------------------------------------------------------
Wed Oct 14 12:57:07 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>

- Update to version 2.145.0
  - Add support for kubernetes_file_t
  - Allow container_t to open existing tun/tap

-------------------------------------------------------------------
Wed Aug 12 09:11:30 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>

- Minimize BuildRequires

-------------------------------------------------------------------
Mon Aug 10 21:11:12 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>

- Update to version 2.143.0
  - support containerd/cri

-------------------------------------------------------------------
Wed Aug  5 08:42:45 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>

- Initial version

Places

File container-selinux.changes of Package container-selinux (Revision 402c6b1b54e4f4f26e2490ec6c07b62d)

Places