[ol9_appstream] passt-selinux-0^20231204.gb86afe3-1.el9.noarch

This package adds SELinux enforcement to passt(1) and pasta(1).

Changelog (Show File list) (Show related packages)

• Fri Dec 15 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20231204.gb86afe3-1

  - Resolves: RHEL-19590

• Tue Aug 22 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4

  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811

• Tue Aug 22 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3

  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811

• Mon Aug 21 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2

  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811

• Sat Aug 19 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-1

  - Rebase from Fedora 39
  - Resolves: RHELPLAN-155811

• Sun Jun 11 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4

  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)

• Fri Apr 28 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3

  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)

• Thu Mar 16 2023 Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2

  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813

• Wed Feb 22 2023 Camilla Conte <cconte@redhat.com> - 0^20230222.g4ddbcb9-1

  - Import from fedora to CentOS/RHEL
  - Resolves: rhbz#2172244

• Wed Nov 16 2022 Miroslav Rezanina <mrezanin@redhat.com> - 0^20221110.g4129764-1

  - Import from fedora to CentOS/RHEL
  - Resolves: rhbz#2131015