containers
/
container-selinux
mirror of https://github.com/containers/container-selinux.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • bf186343d1
         Merge 2d37166851 into 4637aaa900 Robert 2025-07-16 14:53:46 +0200
  • 2d37166851
         Allow dac_override for iptables_t Robert Frohl 2025-07-16 14:35:45 +0200
  • 6ad407424b
         Merge a1914b9166 into 4637aaa900 Max Chernoff 2025-07-15 14:46:11 +0200
  • 4dc0b38dbe
         Merge pull request #387 from lsm5/rhaos-maint-backports rhaos-maint openshift-merge-bot[bot] 2025-07-14 20:28:30 +0000
  • 8b3c1740c6
         Don't allow containers by default setexec setfscreate Daniel J Walsh 2025-07-14 12:10:09 -0400
  • 28bf8a33ad
         Containers need to use hsa devices for ROCM Daniel J Walsh 2025-07-02 07:06:02 -0400
  • cc98284da2
         BUmp to v2.238.0 Daniel J Walsh 2025-05-30 11:43:54 -0400
  • bf7b8c64de
         label /run/sysctl.d correctly on creation Paul Holzinger 2025-05-30 15:51:56 +0200
  • 0252129b57
         bump version to 2.237.0 Lokesh Mandvekar 2025-04-23 19:22:16 +0530
  • bc3aa6b007
         Bump to v2.236.0 Daniel J Walsh 2025-03-11 13:47:29 -0400
  • 4637aaa900 Don't allow containers by default setexec setfscreate main Daniel J Walsh 2025-07-14 12:10:09 -0400
  • 1c1ac28586
         Don't allow containers by default setexec setfscreate Daniel J Walsh 2025-07-14 12:10:09 -0400
  • 00d0e21ca2
         Merge f926b5db05 into 9693071320 Lokesh Mandvekar 2025-07-10 08:37:17 +0200
  • 229e8d8bf8
         Merge branch 'main' of github.com:containers/container-selinux v2.239.0 Daniel J Walsh 2025-07-04 07:03:41 -0400
  • d06812ab1a
         Merge b952559da8 into 9693071320 Pat Riehecky 2025-07-03 21:39:10 +0200
  • 9693071320 Containers need to use hsa devices for ROCM Daniel J Walsh 2025-07-02 07:06:02 -0400
  • 2dc187f144
         Containers need to use hsa devices for ROCM Daniel J Walsh 2025-07-02 07:06:02 -0400
  • a1914b9166
         Ignore some harmless AVC denials Max Chernoff 2025-06-19 22:58:41 -0600
  • 0d8b09e1bf
         Allow confined users to run "podman build" Max Chernoff 2025-06-19 22:55:12 -0600
  • 7bf4b24ea2
         Allow systemd to kill containers Max Chernoff 2025-06-19 20:24:55 -0600
  • bc5c2ccd51
         Allow systemd socket activation of containers ran by confined users Max Chernoff 2025-06-05 00:35:57 -0600
  • 498d415b0b
         Allow building rpm-ostree images in containers ran by a confined users Max Chernoff 2025-06-05 00:32:47 -0600
  • e27600f236
         Allow "bootc status" to work for SELinux confined users Max Chernoff 2025-06-05 00:19:11 -0600
  • 729136a1a3
         Label prometheus-podman-exporter as container_runtime_exec_t Max Chernoff 2025-06-04 23:56:32 -0600
  • 36e8f213b7
         Merge pull request #381 from rhatdan/main v2.238.0 openshift-merge-bot[bot] 2025-05-30 16:00:49 +0000
  • d84ae02fff
         BUmp to v2.238.0 Daniel J Walsh 2025-05-30 11:43:54 -0400
  • ed59a19f5d
         Merge pull request #380 from Luap99/netavark-sysctl Daniel J Walsh 2025-05-30 11:42:45 -0400
  • aff164fb3e
         label /run/sysctl.d correctly on creation Paul Holzinger 2025-05-30 15:51:56 +0200
  • f926b5db05
         TMT: fetch criu rpm info Lokesh Mandvekar 2025-05-28 11:19:35 -0400
  • 23b564ae7e
         fetch selinux denials on every failed test Lokesh Mandvekar 2025-05-28 10:43:23 -0400
  • 9bf5c124b0
         check crun rpm as well Lokesh Mandvekar 2025-05-28 10:38:31 -0400
  • 63910745d6
         Get selinux denials if tests failed Lokesh Mandvekar 2025-05-28 10:09:17 -0400
  • 681d9e1a34
         disable centos-stream-10 tests Lokesh Mandvekar 2025-05-28 09:21:12 -0400
  • 87e53a25c8
         TMT: re-enable podman e2e revdep tests Lokesh Mandvekar 2025-05-26 15:30:56 -0400
  • d7e420a116
         Merge pull request #374 from lsm5/2-237-0 v2.237.0 openshift-merge-bot[bot] 2025-04-28 14:29:12 +0000
  • fd56d33ed8
         bump version to 2.237.0 Lokesh Mandvekar 2025-04-23 19:22:16 +0530
  • 40b86213d2
         Merge pull request #373 from openshift-cherrypick-robot/cherry-pick-367-to-rhaos-maint openshift-merge-bot[bot] 2025-04-23 12:26:52 +0000
  • 801dd1876d Allow containers to mask parts of their /proc Nalin Dahyabhai 2025-03-26 17:50:00 -0400
  • ef7a12d3c1
         Merge pull request #371 from openshift-cherrypick-robot/cherry-pick-370-to-rhaos-maint Daniel J Walsh 2025-04-23 07:36:00 -0400
  • 5eb79c6f36
         Merge pull request #372 from openshift-cherrypick-robot/cherry-pick-368-to-rhaos-maint openshift-merge-bot[bot] 2025-04-23 10:12:13 +0000
  • 3337ed1db1 RPM: empty placeholder check section to silence rpmlint Lokesh Mandvekar 2025-04-21 19:13:21 +0530
  • 75124050e6 bootc/install_t: allow transition to container_runtime_t Lokesh Mandvekar 2025-04-21 18:17:28 +0530
  • 1331eb275f bootc/install_t: allow transition to container_runtime_t Lokesh Mandvekar 2025-04-21 18:17:28 +0530
  • d2bef1d2ff bootc/install_t: allow transition to container_runtime_t Lokesh Mandvekar 2025-04-21 18:17:28 +0530
  • 1f3f0f368b
         Merge pull request #368 from lsm5/rpmlint openshift-merge-bot[bot] 2025-04-22 18:09:32 +0000
  • b952559da8
         Add lables for /var/kubernetes and /var/lib/kubernetes Pat Riehecky 2025-04-21 09:25:54 -0500
  • 38779f40ee
         RPM: empty placeholder check section to silence rpmlint Lokesh Mandvekar 2025-04-21 19:13:21 +0530
  • cb32eed6d1
         Merge pull request #367 from nalind/allow-container-mask-proc Daniel J Walsh 2025-03-29 07:43:33 -0400
  • 4f9fd47087 Allow containers to mask parts of their /proc Nalin Dahyabhai 2025-03-26 17:50:00 -0400
  • 4244f856ea
         Merge pull request #365 from rhatdan/main v2.236.0 Daniel J Walsh 2025-03-13 16:24:19 -0400
  • ae94810449
         Bump to v2.236.0 Daniel J Walsh 2025-03-11 13:47:29 -0400
  • 2c6d8b8598
         Merge pull request #364 from debarshiray/wip/rishi/rtkit_scheduled-spc_t-fedora-bug-2298800 openshift-merge-bot[bot] 2025-03-09 05:38:36 +0000
  • 37d2cf1142 Allow super privileged containers to use RealtimeKit for scheduling Debarshi Ray 2025-03-08 00:41:23 +0100
  • 98b17f39d1
         Merge pull request #363 from openshift-cherrypick-robot/cherry-pick-360-to-rhaos-maint Daniel J Walsh 2025-02-27 11:40:23 -0500
  • 85dfa7e874 add container_ro_file_t to the podman artifact store Paul Holzinger 2025-02-24 14:51:56 +0100
  • fa2662e691
         Merge pull request #362 from openshift-cherrypick-robot/cherry-pick-358-to-rhaos-maint openshift-merge-bot[bot] 2025-02-27 15:53:38 +0000
  • 0221da3fb1
         Merge pull request #361 from openshift-cherrypick-robot/cherry-pick-359-to-rhaos-maint openshift-merge-bot[bot] 2025-02-27 15:50:52 +0000
  • f895647873 Bump to v2.235.0 Lokesh Mandvekar 2025-02-19 16:57:06 +0530
  • 60bae7b10b rpm/gating.yaml: fix typo Lokesh Mandvekar 2025-02-24 17:19:50 +0530
  • 28a89f7059
         Merge pull request #360 from Luap99/artifacts Daniel J Walsh 2025-02-26 11:24:47 -0500
  • c318a63178
         add container_ro_file_t to the podman artifact store Paul Holzinger 2025-02-24 14:51:56 +0100
  • 1726b0baa2
         Merge pull request #357 from lsm5/rhaos-maint-backports Daniel J Walsh 2025-02-26 10:44:19 -0500
  • 27e970d942
         Merge pull request #359 from lsm5/fix-rpm-gating-yaml openshift-merge-bot[bot] 2025-02-26 14:27:11 +0000
  • dbaa35aced
         rpm/gating.yaml: fix typo Lokesh Mandvekar 2025-02-24 17:19:50 +0530
  • 2180789173
         Merge pull request #358 from lsm5/2-235-0 openshift-merge-bot[bot] 2025-02-20 15:30:29 +0000
  • c9b3eca0e1
         Bump to v2.235.0 v2.235.0 Lokesh Mandvekar 2025-02-19 16:57:06 +0530
  • e995881b4b
         OWNERS: add wrabcak and zpytela Lokesh Mandvekar 2025-02-11 17:39:40 +0530
  • b6789c389f
         OWNERS: initial commit Lokesh Mandvekar 2025-02-06 16:12:58 +0530
  • c6b29a4cdc
         RPM: Update gating config Lokesh Mandvekar 2024-12-13 16:54:02 +0530
  • fbde066ab9
         Enable aarch64 testing Lokesh Mandvekar 2024-12-13 16:46:07 +0530
  • 75d671b4c9
         TMT: simplify podman tests Lokesh Mandvekar 2024-12-26 14:54:34 +0530
  • 9c0949dd85
         feat: support /var/lib/crio Markus Linnala 2025-01-18 20:38:43 +0200
  • 6a25eeee35
         [DO NOT MERGE] Test Mergebot Lokesh Mandvekar 2025-02-19 16:27:35 +0530
  • 5a26485b9e
         Merge pull request #355 from lsm5/selinux-owners Daniel J Walsh 2025-02-11 09:28:35 -0500
  • 1b5db5c9a7
         OWNERS: add wrabcak and zpytela Lokesh Mandvekar 2025-02-11 17:39:40 +0530
  • bf26c8d373 OWNERS: initial commit Lokesh Mandvekar 2025-02-06 16:12:58 +0530
  • a543dc9b8e container_log{reader,writer}_t: allow watch file Peter Hunt 2025-02-04 15:32:10 -0500
  • b255211728 container_log{reader,writer}_t: allow watch file Peter Hunt 2025-02-04 15:32:10 -0500
  • 7f84f9988f
         OWNERS: initial commit Lokesh Mandvekar 2025-02-06 16:12:58 +0530
  • 973d57e58a container_log{reader,writer}_t: allow watch file Peter Hunt 2025-02-04 15:32:10 -0500
  • 16a50b269e container_log{reader,writer}_t: allow watch file Peter Hunt 2025-02-04 15:32:10 -0500
  • b27a1d0c7f RPM: Update gating config Lokesh Mandvekar 2024-12-13 16:54:02 +0530
  • b6f01abdd3 Enable aarch64 testing Lokesh Mandvekar 2024-12-13 16:46:07 +0530
  • 3f2d85afe4 TMT: simplify podman tests Lokesh Mandvekar 2024-12-26 14:54:34 +0530
  • e8677a4326
         RPM: Update gating config Lokesh Mandvekar 2024-12-13 16:54:02 +0530
  • f1f157d261
         Enable aarch64 testing Lokesh Mandvekar 2024-12-13 16:46:07 +0530
  • e19ee03da4
         TMT: simplify podman tests Lokesh Mandvekar 2024-12-26 14:54:34 +0530
  • 7c024e3305
         Merge pull request #350 from maage/var-lib-crio-1 Daniel J Walsh 2025-01-20 10:09:52 -0500
  • f848c3ea61 feat: support /var/lib/crio Markus Linnala 2025-01-18 20:38:43 +0200
  • 21006094ea
         TMT: simplify podman tests Lokesh Mandvekar 2024-12-26 14:54:34 +0530
  • 77c681fffd Revert "Allow kubelet_t to create a sock file kubelet_var_lib_t" Daniel J Walsh 2024-09-19 06:57:49 -0400
  • 0e8f4e31a2
         Revert "Allow kubelet_t to create a sock file kubelet_var_lib_t" Daniel J Walsh 2024-09-19 06:57:49 -0400
  • 293eef3ddb
         TMT: Fix for official c9s environments Lokesh Mandvekar 2024-12-13 16:42:28 +0530
  • 7fdbd0e8c4 TMT: enable epel idomatically Lokesh Mandvekar 2024-11-28 17:25:17 +0530
  • 7ea797b511 Packit: switch back to fedora-all Lokesh Mandvekar 2024-11-28 14:55:53 +0530
  • f088287f47
         Merge branch 'main' into main-f39-eol Daniel J Walsh 2024-12-09 09:17:28 -0500
  • 97e888b107
         Merge pull request #343 from lsm5/rpm-bump-epoch Daniel J Walsh 2024-12-09 09:16:42 -0500
  • 4567d0dd60
         RPM: Bump Epoch to 4 Lokesh Mandvekar 2024-12-09 19:03:02 +0530
  • 1b5a4fbff5 container_engine_t: allow access to user_tmp_t dir for ioctl Sohan Kunkerkar 2024-12-06 14:12:36 -0500
  • c051c74333
         TMT: enable epel idomatically Lokesh Mandvekar 2024-11-28 17:25:17 +0530