File history - rpms/container-selinux

container-selinux-2:2.124.0-2

RH Container Bot • 4 years ago

1211d57

container-selinux-2:2.123.0-2

RH Container Bot • 4 years ago

65d5ed3

container-selinux-2:2.119.1-2

RH Container Bot • 4 years ago

d0db063

container-selinux-2:2.119.0-2

RH Container Bot • 4 years ago

0f3aed2

container-selinux-2:2.118.0-2

RH Container Bot • 4 years ago

cff9146

Add label for /usr/bin/crun

Daniel J Walsh • 4 years ago

c49d7bb

Don't let container_runtime_t transition to svirt domains.

Daniel J Walsh • 4 years ago

37b7696

Allow containers to execmod files on fusefs_t

Daniel J Walsh • 4 years ago

b6958ea

Allow containers to settatr on /proc/self/ lnk_files

Daniel J Walsh • 4 years ago

fb7e8af

Allow containers to name_bind to rawip_sockets.

Daniel J Walsh • 4 years ago

766e2e7

Allow containers to use fusefs_t entrypoint

Daniel J Walsh • 4 years ago

b211408

ensure sources file records centos branch commit

Lokesh Mandvekar • 4 years ago

9376ad7

container-selinux-2:2.111.0-1

Lokesh Mandvekar (Bot) • 4 years ago

4fe4bb1

container-selinux-2:2.110.0-2.git544d71f

Lokesh Mandvekar (Bot) • 4 years ago

800ae53

Allow containers to accept connections on all socket types

Daniel J Walsh • 4 years ago

0a6de2f

Allow containers to manipulate Onload files.

Daniel J Walsh • 4 years ago

c0ee28a

Allow all unconfined domains to manage unlabeled keyrings

Daniel J Walsh • 4 years ago

2518497

Set proper labeling for container volumes in SilverBlue

Daniel J Walsh • 4 years ago

0774c8f

Set proper labeling for container volumes

Daniel J Walsh • 5 years ago

1e3a667

Allow all container domains to be entered from container_file_t

Daniel J Walsh • 5 years ago

0016135

Allow containers to read rpm cache and rpm databse

Daniel J Walsh • 5 years ago

fdf3e87

Allow containers running as spc_t to create unlabeled_t kernel keyrings

Daniel J Walsh • 5 years ago

dcf127b

Fix labeling on /var/lib/containers/storage/overlay-layers,images to be sharable.

Daniel J Walsh • 5 years ago

e437259

Allow iptables to append to container_file_t

Daniel J Walsh • 5 years ago

0e95580

Allow containers to read/write sysctl_kernel_ns_last_pid_t

Daniel J Walsh • 5 years ago

6b6fe26

Allow containers to create fusefs sockets and named pipes

Daniel J Walsh • 5 years ago

029e334

Allow init_t to manage container content

Daniel J Walsh • 5 years ago

18fb4db

Allow container runtimes to create unlabeled keyrings

Daniel J Walsh • 5 years ago

5da44fd

Allow containers to mount and umount fuse file systems. This will allow us

Daniel J Walsh • 5 years ago

3d40f2c

Allow confined users to use containers

Daniel J Walsh • 5 years ago

9c1bcae

container-selinux-2:2.80-3.git21c2be6

Lokesh Mandvekar (Bot) • 5 years ago

e791d82

Add new labels for paths for containerd

Daniel J Walsh • 5 years ago

2ae0570

Don't allow containers to talk to contianer runtime sockets

Daniel J Walsh • 5 years ago

ff7f910

Fix labeling on /var/lib/registries

Daniel J Walsh • 5 years ago

d4eda46

container-selinux-2:2.77-2.git2c57a17

Lokesh Mandvekar (Bot) • 5 years ago

3899d72

Fix labeling for images in docker daemon user namespace

Daniel J Walsh • 5 years ago

5e8d437

Allow container-runtime to setattr on fifo_file handed into container runtime.

Daniel J Walsh • 5 years ago

22b5b28

Allow container-runtime to setattr on fifo_file handed into container runtime.

Daniel J Walsh • 5 years ago

6065af8

container-selinux-2:2.752.75-1.dev.git99e2cfd1

Lokesh Mandvekar (Bot) • 5 years ago

fbbda7e

Allow containers to sendto dgram socket of container runtimes

Daniel J Walsh • 5 years ago

60e901f

Allow containers to use fuse file systems by default

Daniel J Walsh • 5 years ago

20e37ff

Allow containers to setexec themselves

Daniel J Walsh • 5 years ago

5df1d6f

Define spc_t as a container_domain, so that container_runtime will transition

Daniel J Walsh • 5 years ago

8832824

Allow unconfined_r to transition to system_r over container_runtime_exec_t

Daniel J Walsh • 5 years ago

1c6b7ec

Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t

Daniel J Walsh • 5 years ago

e6bf4b2

dontaudit attempts to write to sysctl_kernel_t

Daniel J Walsh • 5 years ago

4ed3652

container-selinux-2:2.68-2.gitc139a3d

Lokesh Mandvekar (Bot) • 5 years ago

08b0e73

Add labels for /var/lib/origin directory

Daniel J Walsh • 5 years ago

be54b1d

container-selinux-2:2.67-2.git042f7cf

Lokesh Mandvekar (Bot) • 5 years ago

814ce62

container-selinux-2:2.67-1.git0407867

Lokesh Mandvekar (Bot) • 5 years ago

da11a81

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 5 years ago

37cbbf8

container-selinux-2:2.64-1.gitdfaf8fd

Lokesh Mandvekar (Bot) • 5 years ago

ee88cda

Add new type to handle containers running with a non priv user in a userns

Daniel J Walsh • 5 years ago

781a8d1

Allow containers to create all socket classes

Daniel J Walsh • 5 years ago

3cc70f6

Allow containers to create icmp packets

Daniel J Walsh • 5 years ago

71d8662

container-selinux-2:2.62-1.git1ecf953

Lokesh Mandvekar (Bot) • 6 years ago

c234646

Allow spc_t to load kernel modules from inside of container

Daniel J Walsh • 6 years ago

25c4cb3

Allow containers to list cgroup directories

Daniel J Walsh • 6 years ago

59df2c8

Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.

Daniel J Walsh • 6 years ago

2be9204

Add labels to allow podman to be run from a systemd unit file

Daniel J Walsh • 6 years ago

1f65dab

Dontaudit attempts by containers to write to /proc/self

Daniel J Walsh • 6 years ago

c46266a

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

37b78d2

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

69afd19

Allow shell_exec_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

b658aee

Allow bin_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

5a5bf66

Allow container domains to map container_file_t directories

Daniel J Walsh • 6 years ago

9a7a65d

Change default label of /exports to container_var_lib_t

Daniel J Walsh • 6 years ago

f8193b5

Add support for nosuid_transition flags for container_runtime and unconfined domains

Daniel J Walsh • 6 years ago

3b45b27

Allow container domains to read kernel ipc info

Daniel J Walsh • 6 years ago

5b28670

Allow containers to memory map the fifo_files leaked into container from

Daniel J Walsh • 6 years ago

a7ce313

Allow unconfined domains to transition to container types, when no-new-privs is set.

Daniel J Walsh • 6 years ago

a4c374a

Add support to nnp_transition for container domains

Daniel J Walsh • 6 years ago

1557831

Allow container_runtime_t to use user ttys

Daniel J Walsh • 6 years ago

a851809

Allow container runtimes to use interited terminals. This helps

Daniel J Walsh • 6 years ago

64fe9d8

Allow container runtimes to mmap container_file_t devices

Daniel J Walsh • 6 years ago

98e715e

Allow containers to use inherited ttys

Daniel J Walsh • 6 years ago

e0502da

Allow containers to relabelto/from all file types to container_file_t

Daniel J Walsh • 6 years ago

7f79cfa

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

751a4e3

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

8ed545a

Dontaudit container processes getattr on kernel file systems

Daniel J Walsh • 6 years ago

4e9b7c3

Allow containers to read /etc/resolv.conf and /etc/hosts if volume

Daniel J Walsh • 6 years ago

cc32bab

Make sure users creating content in /var/lib with right labels

Daniel J Walsh • 6 years ago

be0a39a

Allow the container runtime to dbus chat with dnsmasq

Daniel J Walsh • 6 years ago

31963a3

Add support for lxcd

Daniel J Walsh • 6 years ago

b99f18b

Allow a container to umount a container_file_t filesystem

Daniel J Walsh • 6 years ago

ecb1760

Allow container runtimes to work with the netfilter sockets

Daniel J Walsh • 6 years ago

5a61b68

Make sure container_runtime_t has all access of container_t

Daniel J Walsh • 6 years ago

c6e706a

Allow container runtimes to create sockets in tmp dirs

Daniel J Walsh • 6 years ago

652d659

Add additonal support for crio labeling.

Daniel J Walsh • 6 years ago

1aad223

Allow containers to execmod on container_share_t files.

Daniel J Walsh • 6 years ago

bb6875d

Allow container processes to getsession

Daniel J Walsh • 6 years ago

ef7772c

Allow containers to create tun sockets

Daniel J Walsh • 6 years ago

fbb3cfc

Fix labeling for CRI-O files in overlay subdirs

Daniel J Walsh • 6 years ago

f7112ea

Revert change to run the container_runtime as ranged

Daniel J Walsh • 6 years ago

590defb

Add default labeling for cri-o in /etc/crio directories

Daniel J Walsh • 6 years ago

4868764

Allow container types to read/write container_runtime fifo files

Daniel J Walsh • 6 years ago

379ddc4

Add labels for crio rename

Dan Walsh • 7 years ago

1b640cb

Add rules to allow container runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

d6c9f15

Add rules to allow container_runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

068028a

Add rules to allow container_runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

4e04f9a

Allow container_file_t to be stored on cgroup_t file systems

Daniel J Walsh • 7 years ago

e6af905

Fix type in container interface file

Daniel J Walsh • 7 years ago

afcdd30

Fix typebounds entrypoint problems

Daniel J Walsh • 7 years ago

761ca4f

Fix typebounds problems

Daniel J Walsh • 7 years ago

3fcf74c

Add typebounds statement for container_t from container_runtime_t

Daniel J Walsh • 7 years ago

c06c926

Fix labeling on /usr/bin/runc.*

Daniel J Walsh • 7 years ago

c8e82ce

container-selinux-2:2.2-1

Lokesh Mandvekar • 7 years ago

98c88e3

container-selinux-2:2.0-1

Lokesh Mandvekar • 7 years ago

7fa12a4

Initial setup of the repo

Fedora Release Engineering • 7 years ago

3dde170

rpms / container-selinux

History sources

rpms / container-selinux

Source Code

History sources