commit: 8ba3d32077cb80df69133ea44ab31a39992427c8 Author: Chris PeBenito <cpebenito <AT> tresys <DOT> com> AuthorDate: Tue Dec 8 14:53:02 2015 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Thu Dec 17 15:25:22 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=8ba3d320
Update Changelog and VERSION for release. Changelog | 87 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ VERSION | 2 +- 2 files changed, 88 insertions(+), 1 deletion(-) diff --git a/Changelog b/Changelog index 1f53185..617f49e 100644 --- a/Changelog +++ b/Changelog @@ -1,3 +1,90 @@ +* Tue Dec 08 2015 Chris PeBenito <[email protected]> - 2.20151208 +Alexander Wetzel (1): + adds vfio device support to base policy + +Chris PeBenito (48): + Module version bump for optional else block removal from Steve Lawrence. + Add always_check_network policy capability. + Update contrib. + Fix domain_mmap_low() to be a proper tunable. + Add initial Travis CI configuration. + Travis CI already exports variables. + Add validate target for monolithic policy. + Update contrib. + Use matrix keyword to simplify travis-ci build definitions. + Undo last commit. + Simplify travis-ci build handling of SELinux toolchain. + Update contrib. + Module version bump for fstools blkid fix from Jason Zaman + Update contrib. + Module version bump for debufs mount point fc entry from Laurent + Bigonville. + Module version bump for updated netlink sockets from Stephen Smalley + Update contrib. + Module version bump for init_startstop_service from Jason Zaman. + Update contrib. + Change CI tests to drop DIRECT_INITRC. + Module version bumps for further init_startstop_service() changes from + Jason Zaman. + Module version bump for admin interface changes from Jason Zaman. + Update contrib. + Module version bumps for admin interfaces from Jason Zaman. + Module version bump for cron_admin for sysadm from Jason Zaman. + Module version bump for ssh-agent -k fix from Luis Ressel. + Module version bump for APR build script labeling from Luis Ressel. + Module version bump for vfio device from Alexander Wetzel. + Update contrib. + Rearrange lines in ipsec.te. + Module version bump for patches from Jason Zaman/Matthias Dahl. + Add systemd build option. + Add systemd access vectors. + Implement core systemd policy. + Add supporting rules for domains tightly-coupled with systemd. + Add rules for sysadm_r to manage the services. + Add systemd units for core refpolicy services. + Add sysfs_types attribute. + Add refpolicy core socket-activated services. + Change policy_config_t to a security file type. + Merge branch 'pebenito-master' + Module version bump for systemd additions. + Update contrib for dbus systemd fix. + Revise selinux module interfaces for perms protected by neverallows. + Remove bad interface in systemd.if. + Module version bump for utempter Debian helper from Laurent Bigonville. + Update contrib. + Bump module versions for release. + +Jason Zaman (13): + fstools: add in filetrans for /run dir + Introduce init_startstop_service interface + logging: use init_startstop_service in _admin interface + postgresql: use init_startstop_service in _admin interface + Add openrc support to init_startstop_service + Introduce iptables_admin + Add all the missing _admin interfaces to sysadm + Introduce lvm_admin interface + Introduce ipsec_admin interface + Introduce setrans_admin interface + add new cron_admin interface to sysadm + Add overlayfs as an XATTR capable fs + system/ipsec: Add policy for StrongSwan + +Laurent Bigonville (4): + Add fc for /sys/kernel/debug as debugfs_t + Add "binder" security class and access vectors + Properly label utempter helper on debian + Allow the user cronjobs to run in their userdomain + +Luis Ressel (2): + Allow ssh-agent to send signals to itself + Mark APR build scripts as bin_t + +Stephen Smalley (1): + Update netlink socket classes. + +Steve Lawrence (1): + Remove optional else block for dhcp ping + * Wed Dec 03 2014 Chris PeBenito <[email protected]> - 2.20141203 Artyom Smirnov (3): New database object classes diff --git a/VERSION b/VERSION index a9e4840..382483e 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.20141203 +2.20151208
