<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2">
<package pkgid="502140bd9041d06074289d5af53da48ca011f296584d067a1159d4eb3689d445f3522a373a54464016f50e7c587b3cc53ef7a132b665da72c322121458d4fdfc" name="container-selinux" arch="noarch">
  <version epoch="0" ver="2.250.0" rel="160099.4.8"/>
  <changelog author="rfrohl@suse.com" date="1736510400">- Update to version 2.234.2:
  * TMT: enable epel idomatically
  * Packit: switch back to fedora-all
  * RPM: Bump Epoch to 4
  * rpm: ship manpage
  * Add proper labeling for RamaLama
  * Packit: remove rhel / epel jobs
  * packit: remove unused file</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- OBS service file: use the tagged commit for archive versioning and don't
  just archive the latest changes from the main branch using the latest tag</changelog>
  <changelog author="cathy.hu@suse.com" date="1741176000">- Update to version 2.235.0:
  * Bump to v2.235.0
  * OWNERS: add wrabcak and zpytela
  * OWNERS: initial commit
  * container_log{reader,writer}_t: allow watch file
  * RPM: Update gating config
  * Enable aarch64 testing
  * TMT: simplify podman tests
  * feat: support /var/lib/crio</changelog>
  <changelog author="jsegitz@suse.com" date="1743422400">- Update to version 2.236.0:
  * Allow super privileged containers to use RealtimeKit for scheduling
  * Add container_ro_file_t to the podman artifact store</changelog>
  <changelog author="jsegitz@suse.com" date="1745928000">- Update to version 2.237.0:
  * bootc/install_t: allow transition to container_runtime_t
  * Allow containers to mask parts of their /proc</changelog>
  <changelog author="jsegitz@suse.com" date="1748865600">- Update to version 2.238.0:
  * label /run/sysctl.d correctly on creation</changelog>
  <changelog author="jsegitz@suse.com" date="1751889600">- Update to version 2.239.0:
  * Allow containers to use hsa devices for ROCM</changelog>
  <changelog author="rfrohl@suse.com" date="1753358400">- Add workaround for rootless docker iptables AVCs (bsc#1246348)
  adding rootless-docker_iptables.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1754395200">- Update to version 2.240.0:
  * Dontaudit dac_override for iptables_t
  * dropping rootless-docker_iptables.patch is upstream
  * Don't allow containers by default setexec setfscreate
  * Containers need to use hsa devices for ROCM</changelog>
  <changelog author="cathy.hu@suse.com" date="1756814400">- Update to version 2.241.0:
  * Allow domains that trans to container_runtime_t bpf:prog_run</changelog>
  <changelog author="jsegitz@suse.com" date="1757937600">- Update to version 2.242.0:
  * Allow containers to read TCP diagnostic info
  * Allow container domains to access shared host runtime directories under
    /run
  * Allow container access to runtime directories for crun masked path
    optimization</changelog>
  <changelog author="jsegitz@suse.com" date="1762776000">- Update to version 2.243.0:
  * container_engine_t: add necessary permissions to ssh in userns container</changelog>
  <changelog author="cathy.hu@suse.com" date="1765195200">- Update to version 2.244.0:
  * New release: v2.244.0
  * TMT: ELN rootless user has changed
  * Introduce container_write_proc_files interface (bsc#1253469)</changelog>
  <changelog author="cathy.hu@suse.com" date="1765800000">- Update to version 2.245.0:
  * bump to v2.245.0
  * Fix typo in container_selinux(8) man page
  * Add new booleans to container_selinux(8) man page
  * Allow containers to access shared public content
  * Add support for Incus
  * Add ~/.local/share/containers/storage/overlay-containers to .fc (bsc#1253682)</changelog>
  <changelog author="jsegitz@suse.com" date="1771502400">- Update to version 2.246.0:
  * Allow containers to mount on container_var_run_t directories
  * Allow container_runtime_domain runtime fifo_files transition
  * Allow TUN/TAP device access for container_engine_t
  * Add the container_signull() interface</changelog>
  <changelog author="jsegitz@suse.com" date="1773662400">- Update to version 2.247.0:
  * Allow user_u users to run podman containers
  * Allow staff_t and user_t to start podman.socket via systemd
  * Add missing type transitions for overlay-containers directories
  * container_t: allow listen on smc_socket
  * Condition ptrace permission on deny_ptrace boolean</changelog>
  <changelog author="jsegitz@suse.com" date="1778846400">- Update to version 2.248.0:
  * Condition ptrace permission on deny_ptrace boolean</changelog>
  <changelog author="cathy.hu@suse.com" date="1780660800">- Update to version 2.249.0:
  * bump to v2.249.0
  * Allow rpmdb to manage files on mounted container filesystems</changelog>
  <changelog author="cathy.hu@suse.com" date="1782734400">- Introduce container_can_execstack boolean for older Java applications
  and allow execmem (bsc#1268490)
  - Add patch: allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1782993600">- Update to version 2.250.0:
  * Allow rpmdb to manage files on mounted container filesystems
  * Add the container_runtime_signull() interface
  * give container_domain perms on container_file_t fifo_files
  * Suppress mmap_zero denials for container_runtime_t
  * rpm: Require policycoreutils &gt;= 3.10 for policydb version 24 support
  * Add the container_spc_signull() interface
  * Allow spc_t execstack and execmem (bsc#1268490)
- Drop allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch: included upstream</changelog>
</package>
<package pkgid="8a345406e471b6b2511c95fc6d7f3c1cc1d4ba2a83676536fcd873c89e2eb2aa2d911b0457efbbafe2df434f64a6616439d2f7319407dfc7ce70c4f2c52dd2b1" name="container-selinux" arch="src">
  <version epoch="0" ver="2.250.0" rel="160099.4.8"/>
  <changelog author="rfrohl@suse.com" date="1736510400">- Update to version 2.234.2:
  * TMT: enable epel idomatically
  * Packit: switch back to fedora-all
  * RPM: Bump Epoch to 4
  * rpm: ship manpage
  * Add proper labeling for RamaLama
  * Packit: remove rhel / epel jobs
  * packit: remove unused file</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- OBS service file: use the tagged commit for archive versioning and don't
  just archive the latest changes from the main branch using the latest tag</changelog>
  <changelog author="cathy.hu@suse.com" date="1741176000">- Update to version 2.235.0:
  * Bump to v2.235.0
  * OWNERS: add wrabcak and zpytela
  * OWNERS: initial commit
  * container_log{reader,writer}_t: allow watch file
  * RPM: Update gating config
  * Enable aarch64 testing
  * TMT: simplify podman tests
  * feat: support /var/lib/crio</changelog>
  <changelog author="jsegitz@suse.com" date="1743422400">- Update to version 2.236.0:
  * Allow super privileged containers to use RealtimeKit for scheduling
  * Add container_ro_file_t to the podman artifact store</changelog>
  <changelog author="jsegitz@suse.com" date="1745928000">- Update to version 2.237.0:
  * bootc/install_t: allow transition to container_runtime_t
  * Allow containers to mask parts of their /proc</changelog>
  <changelog author="jsegitz@suse.com" date="1748865600">- Update to version 2.238.0:
  * label /run/sysctl.d correctly on creation</changelog>
  <changelog author="jsegitz@suse.com" date="1751889600">- Update to version 2.239.0:
  * Allow containers to use hsa devices for ROCM</changelog>
  <changelog author="rfrohl@suse.com" date="1753358400">- Add workaround for rootless docker iptables AVCs (bsc#1246348)
  adding rootless-docker_iptables.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1754395200">- Update to version 2.240.0:
  * Dontaudit dac_override for iptables_t
  * dropping rootless-docker_iptables.patch is upstream
  * Don't allow containers by default setexec setfscreate
  * Containers need to use hsa devices for ROCM</changelog>
  <changelog author="cathy.hu@suse.com" date="1756814400">- Update to version 2.241.0:
  * Allow domains that trans to container_runtime_t bpf:prog_run</changelog>
  <changelog author="jsegitz@suse.com" date="1757937600">- Update to version 2.242.0:
  * Allow containers to read TCP diagnostic info
  * Allow container domains to access shared host runtime directories under
    /run
  * Allow container access to runtime directories for crun masked path
    optimization</changelog>
  <changelog author="jsegitz@suse.com" date="1762776000">- Update to version 2.243.0:
  * container_engine_t: add necessary permissions to ssh in userns container</changelog>
  <changelog author="cathy.hu@suse.com" date="1765195200">- Update to version 2.244.0:
  * New release: v2.244.0
  * TMT: ELN rootless user has changed
  * Introduce container_write_proc_files interface (bsc#1253469)</changelog>
  <changelog author="cathy.hu@suse.com" date="1765800000">- Update to version 2.245.0:
  * bump to v2.245.0
  * Fix typo in container_selinux(8) man page
  * Add new booleans to container_selinux(8) man page
  * Allow containers to access shared public content
  * Add support for Incus
  * Add ~/.local/share/containers/storage/overlay-containers to .fc (bsc#1253682)</changelog>
  <changelog author="jsegitz@suse.com" date="1771502400">- Update to version 2.246.0:
  * Allow containers to mount on container_var_run_t directories
  * Allow container_runtime_domain runtime fifo_files transition
  * Allow TUN/TAP device access for container_engine_t
  * Add the container_signull() interface</changelog>
  <changelog author="jsegitz@suse.com" date="1773662400">- Update to version 2.247.0:
  * Allow user_u users to run podman containers
  * Allow staff_t and user_t to start podman.socket via systemd
  * Add missing type transitions for overlay-containers directories
  * container_t: allow listen on smc_socket
  * Condition ptrace permission on deny_ptrace boolean</changelog>
  <changelog author="jsegitz@suse.com" date="1778846400">- Update to version 2.248.0:
  * Condition ptrace permission on deny_ptrace boolean</changelog>
  <changelog author="cathy.hu@suse.com" date="1780660800">- Update to version 2.249.0:
  * bump to v2.249.0
  * Allow rpmdb to manage files on mounted container filesystems</changelog>
  <changelog author="cathy.hu@suse.com" date="1782734400">- Introduce container_can_execstack boolean for older Java applications
  and allow execmem (bsc#1268490)
  - Add patch: allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1782993600">- Update to version 2.250.0:
  * Allow rpmdb to manage files on mounted container filesystems
  * Add the container_runtime_signull() interface
  * give container_domain perms on container_file_t fifo_files
  * Suppress mmap_zero denials for container_runtime_t
  * rpm: Require policycoreutils &gt;= 3.10 for policydb version 24 support
  * Add the container_spc_signull() interface
  * Allow spc_t execstack and execmem (bsc#1268490)
- Drop allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch: included upstream</changelog>
</package>
</otherdata>