Accepted refpolicy 2:2.20221101-2 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted refpolicy 2:2.20221101-2 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Mon, 02 Jan 2023 11:22:16 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: refpolicy_2.20221101-2_amd64.changes
- Debian-source: refpolicy
- Debian-suite: unstable
- Debian-version: 2:2.20221101-2
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=bYmb/6xG40zs90nXuPT0HfEEHXdzZxLVlmbnP2U5ODQ=; b=K7BHTNDg4THDnYrL+zo0gY66R8 JHF2WyPMEnHNd+I0+DdG2QvtJwZBxy0XynfuZkpuBLWn7NEgJhAFT1pcZxuKtJBnruO241f5Mod/J HLva/MFeSMi4cN+l+2jrEOEu+AgoWq3wJAUCAQ140Ot9bhCRrk8GjG1JzZPCm2iHqD7YUjnGLvKTR mD9zfOTBlxfwMyeaUSKR0X06ruGKX8oY4JdlXaSvKoxuvT67skhxTk8Ax+KWhiARz+2B4BWFiA/Uz DCLIWwg2j+2AdR+ZNY/ZLOWSLFmm+PmlCaUq4+wXSlhGUtqIOligIH+VIM+92OVuo/trlMAm2rkpl xMQ6uhlA==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1pCItU-009PwI-SA@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 02 Jan 2023 22:02:36 +1100
Source: refpolicy
Architecture: source
Version: 2:2.20221101-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>
Changed-By: Russell Coker <russell@coker.com.au>
Closes: 1012755
Changes:
refpolicy (2:2.20221101-2) unstable; urgency=medium
.
* Allow $1_dbusd_t to create sock_files under /tmp
* Remove the deprecated interfaces that had been in Bullseye
* Allow $1_wm_t to read/write input devices and use logind fds
* Added systemd_dbus_chat_locale() and allowed xdm and user domains to do it.
* Allow user domains to unlink xdm_tmp_t socket files
* Allow systemd-coredump, chkpwd_t, and setfiles_t to statfs /proc
* Label /usr/lib/NetworkManager/nm-dispatcher* as NetworkManager_exec_t
* Label /sbin/fstrim as fsadm_exec_t
* Allow setfiles_t to read bin_t links
* Make ssh_sysadm_login default to true. Closes: #1012755
* Allow fsadm_t to statfs cgroup filesystems and to read /proc/1/environ
for systemd-fsckd. Also dontaudit net_admin capability for systemd-fsckd
trying to change buffer sizes.
* Allow systemd_sysusers_t to use inherited user terminals and inherit file
handles from unconfined_t and give it domain_obj_id_change_exemption()
* Made init_runtime_t an init unit file, for automatically generated units
Checksums-Sha1:
0a8707f178c624586e8b9fbb63c8e97ccb4f22d9 2448 refpolicy_2.20221101-2.dsc
1af1c3fd28f8afb68d1d804c30a688c2b1fb1441 101664 refpolicy_2.20221101-2.debian.tar.xz
db8d53436345c5c8ed774336c2e912097031a898 8679 refpolicy_2.20221101-2_amd64.buildinfo
Checksums-Sha256:
8aee261e9315eb01460bfcc1fd764d87068b3f70f04f1f3351d390d4c8195717 2448 refpolicy_2.20221101-2.dsc
dba852c415a8c8446460fbb84184a47ad632a336a34febd4b5a3b486c2b9146c 101664 refpolicy_2.20221101-2.debian.tar.xz
5c7827d5296937a289685ea75b8187e9c942443c2c914fadb344c8eb9cf8befd 8679 refpolicy_2.20221101-2_amd64.buildinfo
Files:
a43d7151d56d18dc49e9552a2c93be26 2448 admin optional refpolicy_2.20221101-2.dsc
99f2a639c13025e8e7506ef533ea6410 101664 admin optional refpolicy_2.20221101-2.debian.tar.xz
8d2cfabcdf0cdb29f611881a4869d4fd 8679 admin optional refpolicy_2.20221101-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEn31hncwG9XwCqmbH0UHNMPxLj3kFAmOyuocACgkQ0UHNMPxL
j3nQaBAAyquusFA15PIs2yVwWQTvzlht/cUdnYmIvooTYKHHESdugLFjQW4V/GV1
U9BiSwDESvF5BTYxAICx0rHxGwTwgdmBbZisvJFZgNmRdHTaG/UYy2q3uNM2Wtyt
DN9Dm986Y2ipzVv4Dx4kXpNAij8APtnjyJCaEBLXqOVyVdxRMpjiFzdpZNhjNjvk
7czK+20oCqNIYoIjYQ7VyLbKonFVEYUSmhrE9fV8lF3tmbHm4CTv9wrhCjgOjUJY
AVfQbdhrRcdMobnkJkW1RajsuJmt9rZw/GSgu4yu2J/tzBNfJlsAZNljUBSTTSv3
MsVC1jBmfHx4IWo9SCgwb5Cv9w6nzdJFdbeTFv9OYNQGTEwnU9K02PgHXHO/dez0
ImHi5EUznUHXt8kUlqla1XroTKCN3LrrzViIoXc9NB4ylg38v8vbxcKcnSFUDQom
K6si07RHUV2IVkRY2ARZvxswgN/7MryIhJ+c9E7KbyfNqpEYXLKUKK7hS2lIzQ0A
c9zT9c1dSphonOvgIwaPNi1fUY9G9TOnVjj/14lzLWARR3zmnWOupYHhutNr+Y/X
68VJDqIXv3Ofx2bhxy5iBc7aa+HEIuByeeBru2xcFc+Mp1iS+6z1aX/ZKocxM+ng
+dUhAW1H1Wadcfx8+hIlv0MzXTq5oMTa4R+4wGnhm4hN/BjGHwg=
=K+ow
-----END PGP SIGNATURE-----