Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

selinux: update #917

Merged
merged 22 commits into from
Sep 20, 2023
Merged

selinux: update #917

merged 22 commits into from
Sep 20, 2023

Commits on Sep 20, 2023

  1. eclass: sync selinux-policy-2 with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    b0810f4 View commit details
    Browse the repository at this point in the history

  2. sys-libs/libselinux: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@a67229c

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    7132f52 View commit details
    Browse the repository at this point in the history

  3. sys-libs/libsepol: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    c4a353d View commit details
    Browse the repository at this point in the history

  4. sys-apps/policycoreutils: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    d78e4b3 View commit details
    Browse the repository at this point in the history

  5. sys-apps/policycoreutils: apply flatcar changes 

    * remove python dependencies
* move selinux policy directory from /etc/selinux/policy to /usr/lib/selinux/policy
* add tmpfiles to recreate /var/lib/selinux on rootfs
* remove setools dependency

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    a38d44b View commit details
    Browse the repository at this point in the history

  6. sys-libs/libsemanage: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    e1ff975 View commit details
    Browse the repository at this point in the history

  7. sys-libs/libsemanage: apply flatcar patches 

    * remove python dependencies
* added back multilib_src_install function (qa_check does fail otherwise)
* setting SHLIBDIR for installation

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    90bd28e View commit details
    Browse the repository at this point in the history

  8. sys-apps/checkpolicy: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    cd2d678 View commit details
    Browse the repository at this point in the history

  9. sec-policy/selinux-base: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    3de5229 View commit details
    Browse the repository at this point in the history

  10. coreos/user-patches: add selinux-base 

    * add selinux patches (icmp-bind, relabel and kernel permissions)
* ship our own config file

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    ac520d6 View commit details
    Browse the repository at this point in the history

  11. sec-policy/selinux-base-policy: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    6b7c247 View commit details
    Browse the repository at this point in the history

  12. coreos/user-patches: add selinux-base-policy 

    Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    2af995d View commit details
    Browse the repository at this point in the history

  13. sec-policy/selinux-virt: drop ebuild 

    it's now replaced by selinux-container

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    1e2b1c9 View commit details
    Browse the repository at this point in the history

  14. sec-policy/selinux-container: add new package 

    it comes in replacement of selinux-virt

Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    1306dfe View commit details
    Browse the repository at this point in the history

  15. coreos/user-patches: add selinux-container 

    apply Flatcar patch (including the kernel_t transition that
should be removed once we have a system labelled)

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    206b71a View commit details
    Browse the repository at this point in the history

  16. sec-policy/selinux-sssd: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    eed7eb6 View commit details
    Browse the repository at this point in the history

  17. sec-policy/selinux-unconfined: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@ea4cd1f
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    af5400c View commit details
    Browse the repository at this point in the history

  18. sec-policys/selinux-dbus: add new package 

    it's a dependency from ssh module:
```
Failed to resolve typeattributeset statement at /var/lib/selinux/mcs/tmp/modules/400/ssh/cil:127
Failed to resolve AST
```

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    077dd23 View commit details
    Browse the repository at this point in the history

  19. changelog: add entries 

    Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    a07620c View commit details
    Browse the repository at this point in the history

  20. sys-apps/semodule-utils: sync with Gentoo 

    Commit-Ref: gentoo/gentoo@a8d9347

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    678dfd7 View commit details
    Browse the repository at this point in the history

  21. coreos-base/misc-files: add SELinux config 

    Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    0d3c1a5 View commit details
    Browse the repository at this point in the history

  22. .github: add more packages to automation 

    Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
    @tormath1
    tormath1 committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    c3ba668 View commit details
    Browse the repository at this point in the history