Accepted refpolicy 2:2.20221101-3 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted refpolicy 2:2.20221101-3 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Mon, 09 Jan 2023 07:19:18 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: refpolicy_2.20221101-3_amd64.changes
- Debian-source: refpolicy
- Debian-suite: unstable
- Debian-version: 2:2.20221101-3
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=K4rOPyIY7ROK7z8sjUUp7oYPI887BUeqL7Er/Kzow/A=; b=LLWpsBf0GUn6XSVBmyCjUvCrLs H9QlYG8Li0WtX0YkkvyH6FqlUVz3JQC5KTFA0aqAr+9pwHBUBXG5Zy88bkkKCiNY0lU+oYk/VnlHc ID/BuMudcQ3Aw7iZ9Vlgxdq42Tr4NfXdXZY78q6L6kgoJ6OgEa9dYzYT0HT+RVo05aP8dkV2TlHSb r4ml5YmTMPOrolA7XazoXybHJ1Yn+IXt8aSNwOfnQZ6/W7P2hVjB567ysg6w3vLVrfDRoMEeXgKmK Peiu7v+RGPb0EKvye++tabmnXGWKFijuzBjK9+yvGvo7FQGpi2YQBnAeDD6vBxRT8YO5FrM/UQJsX etiBXsOw==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1pEmRC-00BMc5-C7@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 09 Jan 2023 18:05:47 +1100
Source: refpolicy
Architecture: source
Version: 2:2.20221101-3
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>
Changed-By: Russell Coker <russell@coker.com.au>
Changes:
refpolicy (2:2.20221101-3) unstable; urgency=medium
.
* Add auth_write_pam_motd_files() interface for writing to /run/motd.d and
correctly label /run/motd.d
* Add policy for fwupd (firmware update)
* Allow groupadd_t to search kernel fs sysctls
* Allow rasdaemon to read sysfs_t
* Allow systemd_machined_t to talk to policykit via dbus
* Allow systemd_locale_t to write to /run/systemd/notify
* Allow systemd_sysctl_t and systemd_tmpfiles_t to search ramfs
* Allow systemd_generator_t udp setopt and sysnet_read_config for postconf
* Allow systemd_generator_t to stat usr_t files
* Allow systemd_modules_load_t to search debugfs
* Allow systemd_sysusers_t to use apt ptys
* Allow acpid to getsched
* Add support for /run/motd.d/
* Allow Chrome to read sysctl_dev_t and write to dbus session runtime
socket. Label the Chrome libvulkan.so.1 file as lib_t
* Allow systemd_logind_t to delete user tmpfs files and manage tmpfs dirs
* Allow systemd_locale_t to talk to unconfined via dbus
Checksums-Sha1:
368be3e4b51037612b5d90d782680472f22951e8 2448 refpolicy_2.20221101-3.dsc
d110b14b60b1ab79307660066b70f8806cceeb53 103552 refpolicy_2.20221101-3.debian.tar.xz
60441fb45fbe4ca99a0360d2a2af3a983c27b87f 8657 refpolicy_2.20221101-3_amd64.buildinfo
Checksums-Sha256:
fa77782c1649c95d423332285216c9930eb06d6433cd0b14dc090e218d7f939f 2448 refpolicy_2.20221101-3.dsc
3e39ef711adcda0fa611e3998387cfb82720162b4486e1620d6dce90ecdbb767 103552 refpolicy_2.20221101-3.debian.tar.xz
f74256b4762fc49b737ca575eb1b9ab22d0e3e4e842b1ad558d714961513afe7 8657 refpolicy_2.20221101-3_amd64.buildinfo
Files:
4de494e1b39aedc5e53b507671a8a15b 2448 admin optional refpolicy_2.20221101-3.dsc
e30337fc4186f9959d32645b79ca91b0 103552 admin optional refpolicy_2.20221101-3.debian.tar.xz
ec3c8dfe1612dc7b0e7eef954b591a0b 8657 admin optional refpolicy_2.20221101-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=MMZA
-----END PGP SIGNATURE-----