Commits - rpms/container-selinux - src.fedoraproject.org

More allow rules to allow containers to run within containers

Daniel J Walsh • 5 years ago

9481eed

container-selinux-2:2.82-2.git5e1f62f

Lokesh Mandvekar (Bot) • 5 years ago

0a83311

Allow containers to mounton cgroup and container_file_t

Daniel J Walsh • 5 years ago

a2d2cf7

Allow confined users to use containers

Daniel J Walsh • 5 years ago

9c1bcae

container-selinux-2:2.80-3.git21c2be6

Lokesh Mandvekar (Bot) • 5 years ago

e791d82

Add new labels for paths for containerd

Daniel J Walsh • 5 years ago

2ae0570

- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

Fedora Release Engineering • 5 years ago

6355b5e

Don't allow containers to talk to contianer runtime sockets

Daniel J Walsh • 5 years ago

ff7f910

Don't allow containers to talk to contianer runtime sockets

Daniel J Walsh • 5 years ago

f7bd24f

Don't allow containers to talk to contianer runtime sockets

Daniel J Walsh • 5 years ago

a562ce5

Fix labeling on /var/lib/registries

Daniel J Walsh • 5 years ago

d4eda46

container-selinux-2:2.77-2.git2c57a17

Lokesh Mandvekar (Bot) • 5 years ago

3899d72

Fix labeling for images in docker daemon user namespace

Daniel J Walsh • 5 years ago

5e8d437

Allow container-runtime to setattr on fifo_file handed into container runtime.

Daniel J Walsh • 5 years ago

22b5b28

Allow container-runtime to setattr on fifo_file handed into container runtime.

Daniel J Walsh • 5 years ago

6065af8

container-selinux-2:2.752.75-1.dev.git99e2cfd1

Lokesh Mandvekar (Bot) • 5 years ago

fbbda7e

Allow containers to sendto dgram socket of container runtimes

Daniel J Walsh • 5 years ago

60e901f

Allow containers to sendto dgram socket of container runtimes

Daniel J Walsh • 5 years ago

b66e016

Allow containers to use fuse file systems by default

Daniel J Walsh • 5 years ago

20e37ff

Allow containers to setexec themselves

Daniel J Walsh • 5 years ago

5df1d6f

Remove requires for policycoreutils-python-utils we don't need it.

Daniel J Walsh • 5 years ago

2efd385

Define spc_t as a container_domain, so that container_runtime will transition

Daniel J Walsh • 5 years ago

8832824

Allow container_runtimes to setattr on callers fifo_files

Daniel J Walsh • 5 years ago

90d38a2

Fix restorecon to not error on missing directory

Daniel J Walsh • 5 years ago

5c39536

Allow unconfined_r to transition to system_r over container_runtime_exec_t

Daniel J Walsh • 5 years ago

1c6b7ec

Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t

Daniel J Walsh • 5 years ago

e6bf4b2

remove unnecessary distro conditionals

Lokesh Mandvekar • 5 years ago

efac8b1

dontaudit attempts to write to sysctl_kernel_t

Daniel J Walsh • 5 years ago

4ed3652

container-selinux-2:2.68-2.gitc139a3d

Lokesh Mandvekar (Bot) • 5 years ago

08b0e73

Add labels for /var/lib/origin directory

Daniel J Walsh • 5 years ago

be54b1d

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

Fedora Release Engineering • 5 years ago

49aa687

update release tag to reflect unreleased status

Lokesh Mandvekar • 5 years ago

aa27ac4

container-selinux-2:2.67-2.git042f7cf

Lokesh Mandvekar (Bot) • 5 years ago

814ce62

container-selinux-2:2.67-1.git0407867

Lokesh Mandvekar (Bot) • 5 years ago

da11a81

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 5 years ago

37cbbf8

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 5 years ago

e3d6234

container-selinux-2:2.64-1.gitdfaf8fd

Lokesh Mandvekar (Bot) • 5 years ago

ee88cda

Add new type to handle containers running with a non priv user in a userns

Daniel J Walsh • 5 years ago

781a8d1

Allow containers to create all socket classes

Daniel J Walsh • 6 years ago

3cc70f6

Allow containers to create all socket classes

Daniel J Walsh • 6 years ago

91cc6aa

Allow containers to create icmp packets

Daniel J Walsh • 6 years ago

71d8662

container-selinux-2:2.62-1.git1ecf953

Lokesh Mandvekar (Bot) • 6 years ago

c234646

Allow spc_t to load kernel modules from inside of container

Daniel J Walsh • 6 years ago

25c4cb3

Allow containers to list cgroup directories

Daniel J Walsh • 6 years ago

59df2c8

Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.

Daniel J Walsh • 6 years ago

2be9204

Run restorecon /usr/bin/podman in postinstall

Daniel J Walsh • 6 years ago

cbb3d2b

Add labels to allow podman to be run from a systemd unit file

Daniel J Walsh • 6 years ago

1f65dab

container-selinux-2:2.55-12.gitd248f91

Lokesh Mandvekar (Bot) • 6 years ago

cbb99af

container-selinux-2:2.55-11.gitd248f91

Lokesh Mandvekar (Bot) • 6 years ago

68364ba

rpms / container-selinux

Commits 129

rpms / container-selinux

Source Code

Commits 129