File history - rpms/container-selinux

container-selinux-2:2.119.0-2

RH Container Bot • 4 years ago

6d1a8b4

container-selinux-2:2.118.0-2

RH Container Bot • 4 years ago

86cd651

Add label for /usr/bin/crun

Daniel J Walsh • 4 years ago

acb4bef

Don't let container_runtime_t transition to svirt domains.

Daniel J Walsh • 4 years ago

d55c659

Allow containers to execmod files on fusefs_t

Daniel J Walsh • 4 years ago

d6bdb86

Allow containers to settatr on /proc/self/ lnk_files

Daniel J Walsh • 4 years ago

042e485

Allow containers to name_bind to rawip_sockets.

Daniel J Walsh • 4 years ago

3125beb

Allow containers to use fusefs_t entrypoint

Daniel J Walsh • 4 years ago

7390ff8

container-selinux-2:2.111.0-2.1.dev.git9a75deb

Lokesh Mandvekar (Bot) • 4 years ago

20e3511

container-selinux-2.110.0-1.1.dev.git544d71f

Lokesh Mandvekar • 4 years ago

9db5509

Allow containers to accept connections on all socket types

Daniel J Walsh • 4 years ago

ff9d413

Allow containers to manipulate Onload files.

Daniel J Walsh • 5 years ago

e642c79

Allow all unconfined domains to manage unlabeled keyrings

Daniel J Walsh • 5 years ago

535b77c

Set proper labeling for container volumes in SilverBlue

Daniel J Walsh • 5 years ago

5a72894

Set proper labeling for container volumes

Daniel J Walsh • 5 years ago

c4b1cdf

Allow all container domains to be entered from container_file_t

Daniel J Walsh • 5 years ago

0ced217

Allow containers to read rpm cache and rpm databse

Daniel J Walsh • 5 years ago

5c4855c

Allow containers running as spc_t to create unlabeled_t kernel keyrings

Daniel J Walsh • 5 years ago

bd9b0f5

Fix labeling on /var/lib/containers/storage/overlay-layers,images to be sharable.

Daniel J Walsh • 5 years ago

920a724

Allow iptables to append to container_file_t

Daniel J Walsh • 5 years ago

e2b52d2

Allow containers to read/write sysctl_kernel_ns_last_pid_t

Daniel J Walsh • 5 years ago

7bfa450

Allow containers to create fusefs sockets and named pipes

Daniel J Walsh • 5 years ago

9a2cedc

Allow init_t to manage container content

Daniel J Walsh • 5 years ago

e0dcd25

Allow container runtimes to create unlabeled keyrings

Daniel J Walsh • 5 years ago

81c6f71

Allow containers to mount and umount fuse file systems. This will allow us

Daniel J Walsh • 5 years ago

4b3e8cc

Merge branch 'master' of ssh://pkgs.fedoraproject.org/rpms/container-selinux

Daniel J Walsh • 5 years ago

7287075

Allow all container domains to have container file types entrypoint

Daniel J Walsh • 5 years ago

c650254

container-selinux-2:2.89-5.git2521d0d

Lokesh Mandvekar (Bot) • 5 years ago

8285069

container-selinux-2:2.88-4.git5c98b56

Lokesh Mandvekar (Bot) • 5 years ago

8200ea0

container-selinux-2:2.87-3.git2c1a2ab

Lokesh Mandvekar (Bot) • 5 years ago

bee8aaf

container-selinux-2:2.87-2.git891a85f

Lokesh Mandvekar (Bot) • 5 years ago

17ada63

Allow unconfined user and services to dyntrans to container domains, needed for CRIU

Daniel J Walsh • 5 years ago

7ef0bf8

More allow rules to allow containers to run within containers

Daniel J Walsh • 5 years ago

cdbdbb8

More allow rules to allow containers to run within containers

Daniel J Walsh • 5 years ago

9481eed

Allow containers to mounton cgroup and container_file_t

Daniel J Walsh • 5 years ago

a2d2cf7

Allow confined users to use containers

Daniel J Walsh • 5 years ago

9c1bcae

container-selinux-2:2.80-3.git21c2be6

Lokesh Mandvekar (Bot) • 5 years ago

e791d82

Add new labels for paths for containerd

Daniel J Walsh • 5 years ago

2ae0570

Don't allow containers to talk to contianer runtime sockets

Daniel J Walsh • 5 years ago

ff7f910

Fix labeling on /var/lib/registries

Daniel J Walsh • 5 years ago

d4eda46

Fix labeling for images in docker daemon user namespace

Daniel J Walsh • 5 years ago

5e8d437

Allow container-runtime to setattr on fifo_file handed into container runtime.

Daniel J Walsh • 5 years ago

22b5b28

Allow container-runtime to setattr on fifo_file handed into container runtime.

Daniel J Walsh • 5 years ago

6065af8

Allow containers to sendto dgram socket of container runtimes

Daniel J Walsh • 5 years ago

60e901f

Allow containers to use fuse file systems by default

Daniel J Walsh • 5 years ago

20e37ff

Allow containers to setexec themselves

Daniel J Walsh • 5 years ago

5df1d6f

Define spc_t as a container_domain, so that container_runtime will transition

Daniel J Walsh • 5 years ago

8832824

Allow unconfined_r to transition to system_r over container_runtime_exec_t

Daniel J Walsh • 5 years ago

1c6b7ec

Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t

Daniel J Walsh • 5 years ago

e6bf4b2

dontaudit attempts to write to sysctl_kernel_t

Daniel J Walsh • 5 years ago

4ed3652

container-selinux-2:2.68-2.gitc139a3d

Lokesh Mandvekar (Bot) • 5 years ago

08b0e73

Add labels for /var/lib/origin directory

Daniel J Walsh • 5 years ago

be54b1d

container-selinux-2:2.67-2.git042f7cf

Lokesh Mandvekar (Bot) • 5 years ago

814ce62

container-selinux-2:2.67-1.git0407867

Lokesh Mandvekar (Bot) • 5 years ago

da11a81

Allow container runtimes to dbus chat with systemd-resolved

Daniel J Walsh • 6 years ago

37cbbf8

container-selinux-2:2.64-1.gitdfaf8fd

Lokesh Mandvekar (Bot) • 6 years ago

ee88cda

Add new type to handle containers running with a non priv user in a userns

Daniel J Walsh • 6 years ago

781a8d1

Allow containers to create all socket classes

Daniel J Walsh • 6 years ago

3cc70f6

Allow containers to create icmp packets

Daniel J Walsh • 6 years ago

71d8662

container-selinux-2:2.62-1.git1ecf953

Lokesh Mandvekar (Bot) • 6 years ago

c234646

Allow spc_t to load kernel modules from inside of container

Daniel J Walsh • 6 years ago

25c4cb3

Allow containers to list cgroup directories

Daniel J Walsh • 6 years ago

59df2c8

Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.

Daniel J Walsh • 6 years ago

2be9204

Add labels to allow podman to be run from a systemd unit file

Daniel J Walsh • 6 years ago

1f65dab

Dontaudit attempts by containers to write to /proc/self

Daniel J Walsh • 6 years ago

c46266a

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

37b78d2

Add rules for container domains to make writing custom policy easier

Daniel J Walsh • 6 years ago

69afd19

Allow shell_exec_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

b658aee

Allow bin_t as a container_runtime_t entrypoint

Daniel J Walsh • 6 years ago

5a5bf66

Allow container domains to map container_file_t directories

Daniel J Walsh • 6 years ago

9a7a65d

Change default label of /exports to container_var_lib_t

Daniel J Walsh • 6 years ago

f8193b5

Add support for nosuid_transition flags for container_runtime and unconfined domains

Daniel J Walsh • 6 years ago

3b45b27

Allow container domains to read kernel ipc info

Daniel J Walsh • 6 years ago

5b28670

Allow containers to memory map the fifo_files leaked into container from

Daniel J Walsh • 6 years ago

a7ce313

Allow unconfined domains to transition to container types, when no-new-privs is set.

Daniel J Walsh • 6 years ago

a4c374a

Add support to nnp_transition for container domains

Daniel J Walsh • 6 years ago

1557831

Allow container_runtime_t to use user ttys

Daniel J Walsh • 6 years ago

a851809

Allow container runtimes to use interited terminals. This helps

Daniel J Walsh • 6 years ago

64fe9d8

Allow container runtimes to mmap container_file_t devices

Daniel J Walsh • 6 years ago

98e715e

Allow containers to use inherited ttys

Daniel J Walsh • 6 years ago

e0502da

Allow containers to relabelto/from all file types to container_file_t

Daniel J Walsh • 6 years ago

7f79cfa

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

751a4e3

Allow container to map chr_files labeled container_file_t

Daniel J Walsh • 6 years ago

8ed545a

Dontaudit container processes getattr on kernel file systems

Daniel J Walsh • 6 years ago

4e9b7c3

Allow containers to read /etc/resolv.conf and /etc/hosts if volume

Daniel J Walsh • 6 years ago

cc32bab

Make sure users creating content in /var/lib with right labels

Daniel J Walsh • 6 years ago

be0a39a

Allow the container runtime to dbus chat with dnsmasq

Daniel J Walsh • 6 years ago

31963a3

Add support for lxcd

Daniel J Walsh • 6 years ago

b99f18b

Allow a container to umount a container_file_t filesystem

Daniel J Walsh • 6 years ago

ecb1760

Allow container runtimes to work with the netfilter sockets

Daniel J Walsh • 6 years ago

5a61b68

Make sure container_runtime_t has all access of container_t

Daniel J Walsh • 6 years ago

c6e706a

Allow container runtimes to create sockets in tmp dirs

Daniel J Walsh • 6 years ago

652d659

Add additonal support for crio labeling.

Daniel J Walsh • 6 years ago

1aad223

Allow containers to execmod on container_share_t files.

Daniel J Walsh • 6 years ago

bb6875d

Allow container processes to getsession

Daniel J Walsh • 7 years ago

ef7772c

Allow containers to create tun sockets

Daniel J Walsh • 7 years ago

fbb3cfc

Fix labeling for CRI-O files in overlay subdirs

Daniel J Walsh • 7 years ago

f7112ea

Revert change to run the container_runtime as ranged

Daniel J Walsh • 7 years ago

590defb

Add default labeling for cri-o in /etc/crio directories

Daniel J Walsh • 7 years ago

4868764

Allow container types to read/write container_runtime fifo files

Daniel J Walsh • 7 years ago

379ddc4

Add labels for crio rename

Dan Walsh • 7 years ago

1b640cb

Add rules to allow container runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

d6c9f15

Add rules to allow container_runtimes to run with unconfined disabled

Daniel J Walsh • 7 years ago

4e04f9a

Allow container_file_t to be stored on cgroup_t file systems

Daniel J Walsh • 7 years ago

e6af905

Fix type in container interface file

Daniel J Walsh • 7 years ago

afcdd30

Fix typebounds entrypoint problems

Daniel J Walsh • 7 years ago

761ca4f

Fix typebounds problems

Daniel J Walsh • 7 years ago

3fcf74c

Add typebounds statement for container_t from container_runtime_t

Daniel J Walsh • 7 years ago

c06c926

Fix labeling on /usr/bin/runc.*

Daniel J Walsh • 7 years ago

c8e82ce

container-selinux-2:2.2-1

Lokesh Mandvekar • 7 years ago

98c88e3

container-selinux-2:2.0-1

Lokesh Mandvekar • 7 years ago

7fa12a4

Initial setup of the repo

Fedora Release Engineering • 7 years ago

3dde170

rpms / container-selinux

History .gitignore

rpms / container-selinux

Source Code

History .gitignore