From ee8763e98e545b23be378bbebab8f4c17874abde Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Fri, 4 Jan 2019 21:22:36 +0100 Subject: [PATCH 01/11] * Fri Jan 04 2019 Lukas Vrabec - 0.1.2-1 - Fix invalid syntax output when policy is using just one template Resolves: #6 --- .gitignore | 1 + sources | 2 +- udica.spec | 8 ++++++-- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 994fdc2..c4d48d3 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,2 @@ /v0.1.1.tar.gz +/v0.1.2.tar.gz diff --git a/sources b/sources index 7297920..16da401 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.1.tar.gz) = abf4bdd0e9d84fd5233f1f10494c11c40ef03dcb820c545d7ef0f003bd9e72b6dc60715f56296ec59380a6d9327cf255d50edd3bd23a30e700c322d134302f2a +SHA512 (v0.1.2.tar.gz) = c82741d9a8c92759e53deed117f8eabbe95d667192671a46f1ea3354037d8019993fba1c931f5d4a8554c2f5848cf652ee5d8d96056d15a0f4660082fd7651e0 diff --git a/udica.spec b/udica.spec index f1b15f8..dca70b9 100644 --- a/udica.spec +++ b/udica.spec @@ -1,7 +1,7 @@ Summary: A tool for generating SELinux security policies for containers Name: udica -Version: 0.1.1 -Release: 2%{?dist} +Version: 0.1.2 +Release: 1%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ BuildArch: noarch @@ -58,6 +58,10 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Fri Jan 04 2019 Lukas Vrabec - 0.1.2-1 +- Fix invalid syntax output when policy is using just one template +Resolves: #6 + * Tue Oct 23 2018 Lukas Vrabec - 0.1.1-2 - Fix small issues in spec file like improve description and change files section. From 5ba00e056f89026ed66255e0ebad2783cdb1e8b8 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Wed, 23 Jan 2019 17:17:21 +0100 Subject: [PATCH 02/11] * Wed Jan 23 2019 Lukas Vrabec - 0.1.3-1 - Fix capability allow rules when capabilities are specified in JSON file - Add additional SELinux allow rules to base container template to allow container to read proc_type types. --- .gitignore | 1 + sources | 2 +- udica.spec | 6 +++++- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index c4d48d3..a5b182f 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,3 @@ /v0.1.1.tar.gz /v0.1.2.tar.gz +/v0.1.3.tar.gz diff --git a/sources b/sources index 16da401..c129a51 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.2.tar.gz) = c82741d9a8c92759e53deed117f8eabbe95d667192671a46f1ea3354037d8019993fba1c931f5d4a8554c2f5848cf652ee5d8d96056d15a0f4660082fd7651e0 +SHA512 (v0.1.3.tar.gz) = af25b74b5b7973ec1ae64a2a9ae6e2311a960ee9fe5c86af92488f69795189f999a17058e2c9677f97ea8348a8fa7525739af107e3a4ec7c0593587ec849b5a9 diff --git a/udica.spec b/udica.spec index dca70b9..443c642 100644 --- a/udica.spec +++ b/udica.spec @@ -1,6 +1,6 @@ Summary: A tool for generating SELinux security policies for containers Name: udica -Version: 0.1.2 +Version: 0.1.3 Release: 1%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ @@ -58,6 +58,10 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Wed Jan 23 2019 Lukas Vrabec - 0.1.3-1 +- Fix capability allow rules when capabilities are specified in JSON file +- Add additional SELinux allow rules to base container template to allow container to read proc_type types. + * Fri Jan 04 2019 Lukas Vrabec - 0.1.2-1 - Fix invalid syntax output when policy is using just one template Resolves: #6 From 86384ebced7e25a79952408f5e64a73b555d1651 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Sun, 17 Feb 2019 22:59:23 +0100 Subject: [PATCH 03/11] * Sun Feb 17 2019 Lukas Vrabec - 0.1.3-2 - Improve capability parsing for docker containers - Update small changes in manpage, like issue with mandatory option '-c' for docker containers - Fix parsing Mountpoints in docker inspect JSON file --- sources | 2 +- udica.spec | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/sources b/sources index c129a51..cbd8a1c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.3.tar.gz) = af25b74b5b7973ec1ae64a2a9ae6e2311a960ee9fe5c86af92488f69795189f999a17058e2c9677f97ea8348a8fa7525739af107e3a4ec7c0593587ec849b5a9 +SHA512 (v0.1.3.tar.gz) = c0ef057f30ae4475c08d5a2972110b3608d535dd02ecb4c8aaeef676cf0510c28410063573613487e3a647f5a4c507b6eb831edaf3ab3c5de06b1fda62e2b603 diff --git a/udica.spec b/udica.spec index 443c642..246915f 100644 --- a/udica.spec +++ b/udica.spec @@ -1,7 +1,7 @@ Summary: A tool for generating SELinux security policies for containers Name: udica Version: 0.1.3 -Release: 1%{?dist} +Release: 2%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ BuildArch: noarch @@ -58,6 +58,11 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Sun Feb 17 2019 Lukas Vrabec - 0.1.3-2 +- Improve capability parsing for docker containers +- Update small changes in manpage, like issue with mandatory option '-c' for docker containers +- Fix parsing Mountpoints in docker inspect JSON file + * Wed Jan 23 2019 Lukas Vrabec - 0.1.3-1 - Fix capability allow rules when capabilities are specified in JSON file - Add additional SELinux allow rules to base container template to allow container to read proc_type types. From 0d94164c944b7e11d29aaa22ac7c42b662e2c714 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Mon, 25 Feb 2019 23:08:35 +0100 Subject: [PATCH 04/11] * Mon Feb 25 2019 Lukas Vrabec - 0.1.3-3 - Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8 - Add check if runtimes are installed on the system --- sources | 2 +- udica.spec | 6 +++++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/sources b/sources index cbd8a1c..25beb93 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.3.tar.gz) = c0ef057f30ae4475c08d5a2972110b3608d535dd02ecb4c8aaeef676cf0510c28410063573613487e3a647f5a4c507b6eb831edaf3ab3c5de06b1fda62e2b603 +SHA512 (v0.1.3.tar.gz) = a9063c940e61a58f779a809c0a3b76841ffafe3f47c101ed8d8cd5abfbd81cfc7e00b0867ddaa9004cb6d99176f1d061f7ade744125b5030e006a9cd7aa9e5b3 diff --git a/udica.spec b/udica.spec index 246915f..4b220a0 100644 --- a/udica.spec +++ b/udica.spec @@ -1,7 +1,7 @@ Summary: A tool for generating SELinux security policies for containers Name: udica Version: 0.1.3 -Release: 2%{?dist} +Release: 3%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ BuildArch: noarch @@ -58,6 +58,10 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Mon Feb 25 2019 Lukas Vrabec - 0.1.3-3 +- Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8 +- Add check if runtimes are installed on the system + * Sun Feb 17 2019 Lukas Vrabec - 0.1.3-2 - Improve capability parsing for docker containers - Update small changes in manpage, like issue with mandatory option '-c' for docker containers From d1888c2cc7149a90160e0c13efa07b211172cdcc Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Mon, 11 Mar 2019 13:44:57 +0100 Subject: [PATCH 05/11] * Mon Mar 11 2019 Lukas Vrabec - 0.1.4-1 - Fix minor problems reported by pylint #11 - Catch FileNotFoundError when inspecting containers #12 - Create basic tests #13 - Restore working directory #14 - udica cannot use the container ID once it is provided #10 --- .gitignore | 1 + sources | 2 +- udica.spec | 11 +++++++++-- 3 files changed, 11 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index a5b182f..a75055a 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ /v0.1.1.tar.gz /v0.1.2.tar.gz /v0.1.3.tar.gz +/v0.1.4.tar.gz diff --git a/sources b/sources index 25beb93..eb5bafb 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.3.tar.gz) = a9063c940e61a58f779a809c0a3b76841ffafe3f47c101ed8d8cd5abfbd81cfc7e00b0867ddaa9004cb6d99176f1d061f7ade744125b5030e006a9cd7aa9e5b3 +SHA512 (v0.1.4.tar.gz) = 08afb8b16bbc44c87bc8ec0c91f9893650c9e47a94f8c1f75750ec98ae08bc23a00b25b99968481e7a296d6e3232d17a29358fbfc91f1e15af1e3225b2f5a7c9 diff --git a/udica.spec b/udica.spec index 4b220a0..dfb0d92 100644 --- a/udica.spec +++ b/udica.spec @@ -1,7 +1,7 @@ Summary: A tool for generating SELinux security policies for containers Name: udica -Version: 0.1.3 -Release: 3%{?dist} +Version: 0.1.4 +Release: 1%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ BuildArch: noarch @@ -58,6 +58,13 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Mon Mar 11 2019 Lukas Vrabec - 0.1.4-1 +- Fix minor problems reported by pylint #11 +- Catch FileNotFoundError when inspecting containers #12 +- Create basic tests #13 +- Restore working directory #14 +- udica cannot use the container ID once it is provided #10 + * Mon Feb 25 2019 Lukas Vrabec - 0.1.3-3 - Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8 - Add check if runtimes are installed on the system From 36aeec41a9f297761ac5f6fbf9c7dda3981f78d6 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Fri, 19 Apr 2019 21:03:41 +0200 Subject: [PATCH 06/11] * Fri Apr 19 2019 Lukas Vrabec - 0.1.5-1 - Create mock selinux and semanage module - Update testing section in README - Add travis file for Travis CI - Grammar fixes in the udica.8 manpage file - Support port ranges (Resolves: #16) - Test port ranges --- .gitignore | 1 + sources | 2 +- udica.spec | 10 +++++++++- 3 files changed, 11 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index a75055a..3971a54 100644 --- a/.gitignore +++ b/.gitignore @@ -2,3 +2,4 @@ /v0.1.2.tar.gz /v0.1.3.tar.gz /v0.1.4.tar.gz +/v0.1.5.tar.gz diff --git a/sources b/sources index eb5bafb..33dcb37 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.4.tar.gz) = 08afb8b16bbc44c87bc8ec0c91f9893650c9e47a94f8c1f75750ec98ae08bc23a00b25b99968481e7a296d6e3232d17a29358fbfc91f1e15af1e3225b2f5a7c9 +SHA512 (v0.1.5.tar.gz) = 38cb9b0c9d42f807d05811631d460af80e65db5631e53230ea129d79d9844eeddc9c3f63ff17c121150afb1319b08cf6da085ce3e18945f4bf76b844365f741c diff --git a/udica.spec b/udica.spec index dfb0d92..2909b5f 100644 --- a/udica.spec +++ b/udica.spec @@ -1,6 +1,6 @@ Summary: A tool for generating SELinux security policies for containers Name: udica -Version: 0.1.4 +Version: 0.1.5 Release: 1%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ @@ -58,6 +58,14 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Fri Apr 19 2019 Lukas Vrabec - 0.1.5-1 +- Create mock selinux and semanage module +- Update testing section in README +- Add travis file for Travis CI +- Grammar fixes in the udica.8 manpage file +- Support port ranges (Resolves: #16) +- Test port ranges + * Mon Mar 11 2019 Lukas Vrabec - 0.1.4-1 - Fix minor problems reported by pylint #11 - Catch FileNotFoundError when inspecting containers #12 From afd46407fdfbf09e804947605b7e71edb1a9428d Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Tue, 30 Apr 2019 14:12:42 +0200 Subject: [PATCH 07/11] * Tue Apr 30 2019 Lukas Vrabec - 0.1.5-2 - Add allow rules for container_runtime_t to base_container.cil, Podman version 1.2.0 requires new allow rules. --- ...for-container_runtime_t-to-base_cont.patch | 29 +++++++++++++++++++ udica.spec | 6 +++- 2 files changed, 34 insertions(+), 1 deletion(-) create mode 100644 0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch diff --git a/0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch b/0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch new file mode 100644 index 0000000..14761cb --- /dev/null +++ b/0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch @@ -0,0 +1,29 @@ +From 129555625ceca2d73faf862501c10fb3ee49b473 Mon Sep 17 00:00:00 2001 +From: Jan Zarsky +Date: Tue, 30 Apr 2019 11:41:10 +0200 +Subject: [PATCH] Add allow rules for container_runtime_t to base_container.cil + +Podman version 1.2.0 requires new allow rules. + +Fixes: +type=AVC msg=audit(1556617434.540:447): avc: denied { create } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 +type=AVC msg=audit(1556617434.541:448): avc: denied { search } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 +type=AVC msg=audit(1556617434.541:449): avc: denied { view } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 +type=AVC msg=audit(1556617434.541:450): avc: denied { setattr } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 +--- + udica/templates/base_container.cil | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/udica/templates/base_container.cil b/udica/templates/base_container.cil +index 88bb39b..ab9b776 100644 +--- a/udica/templates/base_container.cil ++++ b/udica/templates/base_container.cil +@@ -5,4 +5,5 @@ + (typeattributeset container_domain (process )) + (allow process proc_type (file (getattr open read))) + (allow process cpu_online_t (file (getattr open read))) ++(allow container_runtime_t process (key (create link read search setattr view write))) + ) +-- +2.20.1 + diff --git a/udica.spec b/udica.spec index 2909b5f..5c77856 100644 --- a/udica.spec +++ b/udica.spec @@ -1,7 +1,7 @@ Summary: A tool for generating SELinux security policies for containers Name: udica Version: 0.1.5 -Release: 1%{?dist} +Release: 2%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ BuildArch: noarch @@ -13,6 +13,7 @@ Requires: python3 python3-libsemanage python3-libselinux BuildRequires: python2 python2-devel python2-setuptools Requires: python2 libsemanage-python libselinux-python %endif +patch00: 0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch %description Tool for generating SELinux security profiles for containers based on @@ -20,6 +21,7 @@ inspection of container JSON file. %prep %setup -q +%patch00 -p1 %build %if 0%{?fedora} || 0%{?rhel} > 7 @@ -58,6 +60,8 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Tue Apr 30 2019 Lukas Vrabec - 0.1.5-2 +- Add allow rules for container_runtime_t to base_container.cil, Podman version 1.2.0 requires new allow rules. * Fri Apr 19 2019 Lukas Vrabec - 0.1.5-1 - Create mock selinux and semanage module - Update testing section in README From eea938468caa23fc66ab6eec5e8f0fbdfc168b4c Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Thu, 16 May 2019 19:54:37 +0200 Subject: [PATCH 08/11] * Thu May 16 2019 Lukas Vrabec - 0.1.6-1 - New rebase with upstream adding new tests --- .gitignore | 1 + sources | 2 +- udica.spec | 9 +++++---- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index 3971a54..0aad5ab 100644 --- a/.gitignore +++ b/.gitignore @@ -3,3 +3,4 @@ /v0.1.3.tar.gz /v0.1.4.tar.gz /v0.1.5.tar.gz +/v0.1.6.tar.gz diff --git a/sources b/sources index 33dcb37..c6861a0 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.5.tar.gz) = 38cb9b0c9d42f807d05811631d460af80e65db5631e53230ea129d79d9844eeddc9c3f63ff17c121150afb1319b08cf6da085ce3e18945f4bf76b844365f741c +SHA512 (v0.1.6.tar.gz) = 1da3cd6e6c4a70b9ad76f3ccc6eb5f2418544ab778ec07145d1c44a7df6092d769a0afe4335e3b8afac444399e7fa720de65d1dfe2badb9a232ed70a3ea36386 diff --git a/udica.spec b/udica.spec index 5c77856..b99c36c 100644 --- a/udica.spec +++ b/udica.spec @@ -1,7 +1,7 @@ Summary: A tool for generating SELinux security policies for containers Name: udica -Version: 0.1.5 -Release: 2%{?dist} +Version: 0.1.6 +Release: 1%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ BuildArch: noarch @@ -13,7 +13,6 @@ Requires: python3 python3-libsemanage python3-libselinux BuildRequires: python2 python2-devel python2-setuptools Requires: python2 libsemanage-python libselinux-python %endif -patch00: 0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch %description Tool for generating SELinux security profiles for containers based on @@ -21,7 +20,6 @@ inspection of container JSON file. %prep %setup -q -%patch00 -p1 %build %if 0%{?fedora} || 0%{?rhel} > 7 @@ -60,6 +58,9 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Thu May 16 2019 Lukas Vrabec - 0.1.6-1 +- New rebase with upstream adding new tests + * Tue Apr 30 2019 Lukas Vrabec - 0.1.5-2 - Add allow rules for container_runtime_t to base_container.cil, Podman version 1.2.0 requires new allow rules. * Fri Apr 19 2019 Lukas Vrabec - 0.1.5-1 From 588aa5320f2475e021ff81f77006c15ed83b87f7 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Thu, 16 May 2019 19:58:58 +0200 Subject: [PATCH 09/11] Remove unused patch --- ...for-container_runtime_t-to-base_cont.patch | 29 ------------------- 1 file changed, 29 deletions(-) delete mode 100644 0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch diff --git a/0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch b/0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch deleted file mode 100644 index 14761cb..0000000 --- a/0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch +++ /dev/null @@ -1,29 +0,0 @@ -From 129555625ceca2d73faf862501c10fb3ee49b473 Mon Sep 17 00:00:00 2001 -From: Jan Zarsky -Date: Tue, 30 Apr 2019 11:41:10 +0200 -Subject: [PATCH] Add allow rules for container_runtime_t to base_container.cil - -Podman version 1.2.0 requires new allow rules. - -Fixes: -type=AVC msg=audit(1556617434.540:447): avc: denied { create } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 -type=AVC msg=audit(1556617434.541:448): avc: denied { search } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 -type=AVC msg=audit(1556617434.541:449): avc: denied { view } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 -type=AVC msg=audit(1556617434.541:450): avc: denied { setattr } for pid=4692 comm="runc:[2:INIT]" scontext=unconfined_u:system_r:container_runtime_t:s0 tcontext=system_u:system_r:my_container.process:s0:c157,c366 tclass=key permissive=1 ---- - udica/templates/base_container.cil | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/udica/templates/base_container.cil b/udica/templates/base_container.cil -index 88bb39b..ab9b776 100644 ---- a/udica/templates/base_container.cil -+++ b/udica/templates/base_container.cil -@@ -5,4 +5,5 @@ - (typeattributeset container_domain (process )) - (allow process proc_type (file (getattr open read))) - (allow process cpu_online_t (file (getattr open read))) -+(allow container_runtime_t process (key (create link read search setattr view write))) - ) --- -2.20.1 - From de58cf80c7fffee0aa753dbf8fe14fe63a729537 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Wed, 12 Jun 2019 13:54:49 +0200 Subject: [PATCH 10/11] * Wed Jun 12 2019 Lukas Vrabec - 0.1.7-1 - New rebase with upstream adding new param --ansible, to generate ansible playbook for deploying policies. https://github.com/containers/udica/releases/tag/v0.1.7 --- .gitignore | 1 + sources | 2 +- udica.spec | 7 ++++++- 3 files changed, 8 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 0aad5ab..d314a70 100644 --- a/.gitignore +++ b/.gitignore @@ -4,3 +4,4 @@ /v0.1.4.tar.gz /v0.1.5.tar.gz /v0.1.6.tar.gz +/v0.1.7.tar.gz diff --git a/sources b/sources index c6861a0..a3976f7 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.6.tar.gz) = 1da3cd6e6c4a70b9ad76f3ccc6eb5f2418544ab778ec07145d1c44a7df6092d769a0afe4335e3b8afac444399e7fa720de65d1dfe2badb9a232ed70a3ea36386 +SHA512 (v0.1.7.tar.gz) = 010dd2b7583a9b6598149395cd16038ff6fbf56c02c739c58903fc55e5651e35e83cdc54c8463ed0a3efe3919c1afd8d98fd6118cc01e76f5aeff6e7213283f6 diff --git a/udica.spec b/udica.spec index b99c36c..433a7c0 100644 --- a/udica.spec +++ b/udica.spec @@ -1,6 +1,6 @@ Summary: A tool for generating SELinux security policies for containers Name: udica -Version: 0.1.6 +Version: 0.1.7 Release: 1%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ @@ -44,7 +44,9 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %{_mandir}/man8/udica.8* %{_bindir}/udica %dir %{_datadir}/udica +%dir %{_datadir}/udica/ansible %dir %{_datadir}/udica/templates +%{_datadir}/udica/ansible/* %{_datadir}/udica/templates/* %if 0%{?fedora} || 0%{?rhel} > 7 @@ -58,6 +60,9 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Wed Jun 12 2019 Lukas Vrabec - 0.1.7-1 +- New rebase with upstream adding new param --ansible, to generate ansible playbook for deploying policies. https://github.com/containers/udica/releases/tag/v0.1.7 + * Thu May 16 2019 Lukas Vrabec - 0.1.6-1 - New rebase with upstream adding new tests From 02ceff9ee0926036640d38389f4de573a6f3b2f9 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Thu, 11 Jul 2019 13:08:38 +0200 Subject: [PATCH 11/11] * Thu Jul 11 2019 Lukas Vrabec - 0.1.8-1 - New rebase https://github.com/containers/udica/releases/tag/v0.1.8 --- .gitignore | 1 + sources | 2 +- udica.spec | 5 ++++- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index d314a70..1990382 100644 --- a/.gitignore +++ b/.gitignore @@ -5,3 +5,4 @@ /v0.1.5.tar.gz /v0.1.6.tar.gz /v0.1.7.tar.gz +/v0.1.8.tar.gz diff --git a/sources b/sources index a3976f7..4fb2ded 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v0.1.7.tar.gz) = 010dd2b7583a9b6598149395cd16038ff6fbf56c02c739c58903fc55e5651e35e83cdc54c8463ed0a3efe3919c1afd8d98fd6118cc01e76f5aeff6e7213283f6 +SHA512 (v0.1.8.tar.gz) = ada8f3183904ac0aa1715e564f708ce3bda02719ecc2587e3774205bba39e585f2df7392861317a4324e8ea2c2f6fa031c3a0f440be6ca5408398b238089b891 diff --git a/udica.spec b/udica.spec index 433a7c0..d64ad0a 100644 --- a/udica.spec +++ b/udica.spec @@ -1,6 +1,6 @@ Summary: A tool for generating SELinux security policies for containers Name: udica -Version: 0.1.7 +Version: 0.1.8 Release: 1%{?dist} Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz License: GPLv3+ @@ -60,6 +60,9 @@ install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8 %endif %changelog +* Thu Jul 11 2019 Lukas Vrabec - 0.1.8-1 +- New rebase https://github.com/containers/udica/releases/tag/v0.1.8 + * Wed Jun 12 2019 Lukas Vrabec - 0.1.7-1 - New rebase with upstream adding new param --ansible, to generate ansible playbook for deploying policies. https://github.com/containers/udica/releases/tag/v0.1.7