-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-f8c9d37f99 2019-04-27 23:10:05.598512 --------------------------------------------------------------------------------
Name : container-selinux Product : Fedora 29 Version : 2.100 Release : 1.git3b78187.fc29 URL : https://github.com/projectatomic/container-selinux Summary : SELinux policies for container runtimes Description : SELinux policy modules for use with container runtimes. -------------------------------------------------------------------------------- Update Information: Allow spc_t to create unlabeled kernel keyrings. ---- Fix labeling of overlay- images and overlay-layers so they can be shared. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 23 2019 Dan Walsh <[email protected]> - 2.100-1 - Allow containers running as spc_t to create unlabeled_t kernel keyrings * Mon Apr 22 2019 Dan Walsh <[email protected]> - 2.99-1 - Fix labeling on /var/lib/containers/storage/overlay-layers,images to be sharable. * Mon Apr 15 2019 Dan Walsh <[email protected]> - 2.98-1 - Allow iptables to append to container_file_t * Fri Apr 12 2019 Dan Walsh <[email protected]> - 2.97-1 - Allow containers to read/write sysctl_kernel_ns_last_pid_t - Allow containers to manage fusefs sockets and named pipes * Thu Apr 4 2019 Dan Walsh <[email protected]> - 2.96-1 - Allow containers to read/write sysctl_kernel_ns_last_pid_t * Mon Apr 1 2019 Dan Walsh <[email protected]> - 2.95-1 - Allow containers to create fusefs sockets and named pipes * Thu Mar 28 2019 Dan Walsh <[email protected]> - 2.94-1 - Allow init_t to manage container content - Allow container domains to create fifo_files on fusefs file systems - Add boolean to allow containers to use ceph file systems * Tue Mar 26 2019 Dan Walsh <[email protected]> - 2.91-1 - Allow container runtimes to create unlabeled keyrings * Wed Mar 20 2019 Dan Walsh <[email protected]> - 2.90-1 - Allow containers to mount and umount fuse file systems. This will allow us - to use buidlah within a user namespace separated container. * Sat Mar 9 2019 Dan Walsh <[email protected]> - 2.89-1 - Allow all container domains to have container file types entrypoint - Add new release to fix issues with udica - Allow container_runtime_t to dyntransition to container domains * Sat Mar 9 2019 Lokesh Mandvekar (Bot) <[email protected]> - 2:2.89-5.git2521d0d - bump to 2.89 - autobuilt 2521d0d * Thu Mar 7 2019 Lokesh Mandvekar (Bot) <[email protected]> - 2:2.88-4.git5c98b56 - bump to 2.88 - autobuilt 5c98b56 * Wed Mar 6 2019 Lokesh Mandvekar (Bot) <[email protected]> - 2:2.87-3.git2c1a2ab - autobuilt 2c1a2ab * Sat Mar 2 2019 Lokesh Mandvekar (Bot) <[email protected]> - 2:2.87-2.git891a85f - bump to 2.87 - autobuilt 891a85f * Fri Mar 1 2019 Dan Walsh <[email protected]> - 2.86-1 - Allow unconfined user and services to dyntrans to container domains, needed for CRIU - Allow containers exectue hugetlb files. * Thu Feb 28 2019 Dan Walsh <[email protected]> - 2.85-1 - More allow rules to allow containers to run within containers * Thu Feb 28 2019 Dan Walsh <[email protected]> - 2.84-1 - More allow rules to allow containers to run within containers * Tue Feb 26 2019 Lokesh Mandvekar (Bot) <[email protected]> - 2:2.82-2.git5e1f62f - bump to 2.82 - autobuilt 5e1f62f * Mon Feb 25 2019 Dan Walsh <[email protected]> - 2.83-1 - Allow containers to mounton cgroup and container_file_t * Sun Feb 10 2019 Dan Walsh <[email protected]> - 2.82-1.nightly.git5e1f62f - Allow confined users to use containers * Fri Feb 8 2019 Lokesh Mandvekar (Bot) <[email protected]> - 2:2.80-3.git21c2be6 - bump to 2.80 - autobuilt 21c2be6 * Thu Feb 7 2019 Dan Walsh <[email protected]> - 2.81-1 - Add new labels for paths for containerd * Thu Jan 31 2019 Fedora Release Engineering <[email protected]> - 2:2.80-2.git1b655d9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Tue Jan 22 2019 Dan Walsh <[email protected]> - 2.80-1.nightly.git21c2be6 - Don't allow containers to talk to contianer runtime sockets * Fri Jan 11 2019 Dan Walsh <[email protected]> - 2.79-1 - Fix labeling on /var/lib/registries * Thu Jan 10 2019 Dan Walsh <[email protected]> - 2.78-1 - Fix labeling for images in docker daemon user namespace * Mon Dec 17 2018 Dan Walsh <[email protected]> - 2.77-1 - Allow container-runtime to setattr on fifo_file handed into container runtime. * Tue Nov 13 2018 Lokesh Mandvekar (Bot) <[email protected]> - 2:2.752.75-1.dev.git99e2cfd1 - bump to 2.75 - autobuilt 99e2cfd * Mon Nov 12 2018 Dan Walsh <[email protected]> - 2.76-1 - Allow containers to sendto dgram socket of container runtimes - Needed to run container runtimes in notify socket unit files. * Tue Oct 30 2018 Dan Walsh <[email protected]> - 2.75-1.dev.git99e2cfd - Allow containers to use fuse file systems by default * Fri Oct 19 2018 Dan Walsh <[email protected]> - 2.74-1 - Allow containers to setexec themselves -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-f8c9d37f99' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
