<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2">
<package pkgid="f2a6cf1f32d06e983fd070fed4966953d8b517b947beecacb04bda3cb46c254103379eb0495f6272e9b830de948b89a9214695c169e02542587d4001e391ef6c" name="container-selinux" arch="noarch">
  <version epoch="0" ver="2.248.0" rel="160099.4.2"/>
  <changelog author="cathy.hu@suse.com" date="1720612800">- Update to version 2.232.1:
  * Bump to v2.232.1
  * TMT: fix srpm download syntax on rawhide
  * Bump to 2.232.0
  * Packit: remove `update_release` key from downstream jobs (#313)
  * Update container-selinux.8 man page
  * Add ownership of /usr/share/udica (#312)
  * Packit/TMT: upstream maintenance of downstream gating tests
  * extend container_engine_t again
  * Allow spc_t to use localectl
  * Allow spc_t to use timedatectl
  * introduce container_use_xserver_devices boolean to allow GPU access</changelog>
  <changelog author="cathy.hu@suse.com" date="1730980800">- Update to version 2.233.0:
  * container_engine_t: small change to allow non root exec in a container
  * RPM: explicitly list ghosted paths and skip mode verification
  * container-selinux install on non selinux-policy-targeted systems (#332)
  * set container_log_t type for /var/log/kube-apiserver
  * Allow kubelet_t to create a sock file kubelet_var_lib_t
  * dontaudit spc_t to mmap_zero
  * Packit: update targets (#330)
  * container_engine_t: another round of small improvements (#327)
  * Allow container_device_plugin_t to use the network (#325)
  * RPM: cleanup changelog (#324)
  * TMT: Simplify tests</changelog>
  <changelog author="cathy.hu@suse.com" date="1736424000">- Add BuildRequires selinux-policy-%{selinuxtype} to enable building
  for SLFO. Might be removed in the future again when 1231252
  is fixed.</changelog>
  <changelog author="rfrohl@suse.com" date="1736510400">- Update to version 2.234.2:
  * TMT: enable epel idomatically
  * Packit: switch back to fedora-all
  * RPM: Bump Epoch to 4
  * rpm: ship manpage
  * Add proper labeling for RamaLama
  * Packit: remove rhel / epel jobs
  * packit: remove unused file</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- OBS service file: use the tagged commit for archive versioning and don't
  just archive the latest changes from the main branch using the latest tag</changelog>
  <changelog author="cathy.hu@suse.com" date="1741176000">- Update to version 2.235.0:
  * Bump to v2.235.0
  * OWNERS: add wrabcak and zpytela
  * OWNERS: initial commit
  * container_log{reader,writer}_t: allow watch file
  * RPM: Update gating config
  * Enable aarch64 testing
  * TMT: simplify podman tests
  * feat: support /var/lib/crio</changelog>
  <changelog author="jsegitz@suse.com" date="1743422400">- Update to version 2.236.0:
  * Allow super privileged containers to use RealtimeKit for scheduling
  * Add container_ro_file_t to the podman artifact store</changelog>
  <changelog author="jsegitz@suse.com" date="1745928000">- Update to version 2.237.0:
  * bootc/install_t: allow transition to container_runtime_t
  * Allow containers to mask parts of their /proc</changelog>
  <changelog author="jsegitz@suse.com" date="1748865600">- Update to version 2.238.0:
  * label /run/sysctl.d correctly on creation</changelog>
  <changelog author="jsegitz@suse.com" date="1751889600">- Update to version 2.239.0:
  * Allow containers to use hsa devices for ROCM</changelog>
  <changelog author="rfrohl@suse.com" date="1753358400">- Add workaround for rootless docker iptables AVCs (bsc#1246348)
  adding rootless-docker_iptables.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1754395200">- Update to version 2.240.0:
  * Dontaudit dac_override for iptables_t
  * dropping rootless-docker_iptables.patch is upstream
  * Don't allow containers by default setexec setfscreate
  * Containers need to use hsa devices for ROCM</changelog>
  <changelog author="cathy.hu@suse.com" date="1756814400">- Update to version 2.241.0:
  * Allow domains that trans to container_runtime_t bpf:prog_run</changelog>
  <changelog author="jsegitz@suse.com" date="1757937600">- Update to version 2.242.0:
  * Allow containers to read TCP diagnostic info
  * Allow container domains to access shared host runtime directories under
    /run
  * Allow container access to runtime directories for crun masked path
    optimization</changelog>
  <changelog author="jsegitz@suse.com" date="1762776000">- Update to version 2.243.0:
  * container_engine_t: add necessary permissions to ssh in userns container</changelog>
  <changelog author="cathy.hu@suse.com" date="1765195200">- Update to version 2.244.0:
  * New release: v2.244.0
  * TMT: ELN rootless user has changed
  * Introduce container_write_proc_files interface (bsc#1253469)</changelog>
  <changelog author="cathy.hu@suse.com" date="1765800000">- Update to version 2.245.0:
  * bump to v2.245.0
  * Fix typo in container_selinux(8) man page
  * Add new booleans to container_selinux(8) man page
  * Allow containers to access shared public content
  * Add support for Incus
  * Add ~/.local/share/containers/storage/overlay-containers to .fc (bsc#1253682)</changelog>
  <changelog author="jsegitz@suse.com" date="1771502400">- Update to version 2.246.0:
  * Allow containers to mount on container_var_run_t directories
  * Allow container_runtime_domain runtime fifo_files transition
  * Allow TUN/TAP device access for container_engine_t
  * Add the container_signull() interface</changelog>
  <changelog author="jsegitz@suse.com" date="1773662400">- Update to version 2.247.0:
  * Allow user_u users to run podman containers
  * Allow staff_t and user_t to start podman.socket via systemd
  * Add missing type transitions for overlay-containers directories
  * container_t: allow listen on smc_socket
  * Condition ptrace permission on deny_ptrace boolean</changelog>
  <changelog author="jsegitz@suse.com" date="1778846400">- Update to version 2.248.0:
  * Condition ptrace permission on deny_ptrace boolean</changelog>
</package>
<package pkgid="55845c5363d8d4698cc20102d321326b69a18608f8aff1db70b1a7236b812b7efddefe3ab0b87d35e968f64822234b59beba20237746ce92f9d762c48c01a665" name="container-selinux" arch="src">
  <version epoch="0" ver="2.248.0" rel="160099.4.2"/>
  <changelog author="cathy.hu@suse.com" date="1720612800">- Update to version 2.232.1:
  * Bump to v2.232.1
  * TMT: fix srpm download syntax on rawhide
  * Bump to 2.232.0
  * Packit: remove `update_release` key from downstream jobs (#313)
  * Update container-selinux.8 man page
  * Add ownership of /usr/share/udica (#312)
  * Packit/TMT: upstream maintenance of downstream gating tests
  * extend container_engine_t again
  * Allow spc_t to use localectl
  * Allow spc_t to use timedatectl
  * introduce container_use_xserver_devices boolean to allow GPU access</changelog>
  <changelog author="cathy.hu@suse.com" date="1730980800">- Update to version 2.233.0:
  * container_engine_t: small change to allow non root exec in a container
  * RPM: explicitly list ghosted paths and skip mode verification
  * container-selinux install on non selinux-policy-targeted systems (#332)
  * set container_log_t type for /var/log/kube-apiserver
  * Allow kubelet_t to create a sock file kubelet_var_lib_t
  * dontaudit spc_t to mmap_zero
  * Packit: update targets (#330)
  * container_engine_t: another round of small improvements (#327)
  * Allow container_device_plugin_t to use the network (#325)
  * RPM: cleanup changelog (#324)
  * TMT: Simplify tests</changelog>
  <changelog author="cathy.hu@suse.com" date="1736424000">- Add BuildRequires selinux-policy-%{selinuxtype} to enable building
  for SLFO. Might be removed in the future again when 1231252
  is fixed.</changelog>
  <changelog author="rfrohl@suse.com" date="1736510400">- Update to version 2.234.2:
  * TMT: enable epel idomatically
  * Packit: switch back to fedora-all
  * RPM: Bump Epoch to 4
  * rpm: ship manpage
  * Add proper labeling for RamaLama
  * Packit: remove rhel / epel jobs
  * packit: remove unused file</changelog>
  <changelog author="rfrohl@suse.com" date="1738670400">- OBS service file: use the tagged commit for archive versioning and don't
  just archive the latest changes from the main branch using the latest tag</changelog>
  <changelog author="cathy.hu@suse.com" date="1741176000">- Update to version 2.235.0:
  * Bump to v2.235.0
  * OWNERS: add wrabcak and zpytela
  * OWNERS: initial commit
  * container_log{reader,writer}_t: allow watch file
  * RPM: Update gating config
  * Enable aarch64 testing
  * TMT: simplify podman tests
  * feat: support /var/lib/crio</changelog>
  <changelog author="jsegitz@suse.com" date="1743422400">- Update to version 2.236.0:
  * Allow super privileged containers to use RealtimeKit for scheduling
  * Add container_ro_file_t to the podman artifact store</changelog>
  <changelog author="jsegitz@suse.com" date="1745928000">- Update to version 2.237.0:
  * bootc/install_t: allow transition to container_runtime_t
  * Allow containers to mask parts of their /proc</changelog>
  <changelog author="jsegitz@suse.com" date="1748865600">- Update to version 2.238.0:
  * label /run/sysctl.d correctly on creation</changelog>
  <changelog author="jsegitz@suse.com" date="1751889600">- Update to version 2.239.0:
  * Allow containers to use hsa devices for ROCM</changelog>
  <changelog author="rfrohl@suse.com" date="1753358400">- Add workaround for rootless docker iptables AVCs (bsc#1246348)
  adding rootless-docker_iptables.patch</changelog>
  <changelog author="cathy.hu@suse.com" date="1754395200">- Update to version 2.240.0:
  * Dontaudit dac_override for iptables_t
  * dropping rootless-docker_iptables.patch is upstream
  * Don't allow containers by default setexec setfscreate
  * Containers need to use hsa devices for ROCM</changelog>
  <changelog author="cathy.hu@suse.com" date="1756814400">- Update to version 2.241.0:
  * Allow domains that trans to container_runtime_t bpf:prog_run</changelog>
  <changelog author="jsegitz@suse.com" date="1757937600">- Update to version 2.242.0:
  * Allow containers to read TCP diagnostic info
  * Allow container domains to access shared host runtime directories under
    /run
  * Allow container access to runtime directories for crun masked path
    optimization</changelog>
  <changelog author="jsegitz@suse.com" date="1762776000">- Update to version 2.243.0:
  * container_engine_t: add necessary permissions to ssh in userns container</changelog>
  <changelog author="cathy.hu@suse.com" date="1765195200">- Update to version 2.244.0:
  * New release: v2.244.0
  * TMT: ELN rootless user has changed
  * Introduce container_write_proc_files interface (bsc#1253469)</changelog>
  <changelog author="cathy.hu@suse.com" date="1765800000">- Update to version 2.245.0:
  * bump to v2.245.0
  * Fix typo in container_selinux(8) man page
  * Add new booleans to container_selinux(8) man page
  * Allow containers to access shared public content
  * Add support for Incus
  * Add ~/.local/share/containers/storage/overlay-containers to .fc (bsc#1253682)</changelog>
  <changelog author="jsegitz@suse.com" date="1771502400">- Update to version 2.246.0:
  * Allow containers to mount on container_var_run_t directories
  * Allow container_runtime_domain runtime fifo_files transition
  * Allow TUN/TAP device access for container_engine_t
  * Add the container_signull() interface</changelog>
  <changelog author="jsegitz@suse.com" date="1773662400">- Update to version 2.247.0:
  * Allow user_u users to run podman containers
  * Allow staff_t and user_t to start podman.socket via systemd
  * Add missing type transitions for overlay-containers directories
  * container_t: allow listen on smc_socket
  * Condition ptrace permission on deny_ptrace boolean</changelog>
  <changelog author="jsegitz@suse.com" date="1778846400">- Update to version 2.248.0:
  * Condition ptrace permission on deny_ptrace boolean</changelog>
</package>
</otherdata>