Changelog for container-selinux-2.188.0-7.2.noarch.rpm :

* Thu Jan 12 2023 Johannes Segitz - Rename spc_timedated.patch to spc.patch- Update spc.patch to allow privileged containers to use localectl (bsc#1207077)
* Wed Jan 11 2023 Johannes Segitz - Add spc_timedated.patch to allow privileged containers to use timedatectl (bsc#1207054)
* Thu Jul 14 2022 Johannes Segitz - Update to version 2.188.0:
* Allow confined containers to mount overlay filesystems Fixed bsc#1201348
* Wed Jun 22 2022 Frederic Crozat - Update to version 2.187.0:
* Allow container domains to use /dev/zero- Changes from 2.186.0:
* Create policy for a container_device_t
* Allow containers to shutdown & setopt userdomain:sockets- Changes from 2.183.0:
* Allow containers to inherit all socket classes from container runtimes.- Changes from 2.182.0:
* Allow containers to inherit all socket classes- Changes from 2.181.0:
* Allow socket activated domains for tcp sockets from init_t and userdomains.
* Tue Mar 22 2022 Johannes Segitz - Add udica templates to the package
* Fri Mar 18 2022 Johannes Segitz - Update to version 2.180.0
* Allow container domains to read/write kvm_device_t
* Update kublet mappings to inlcude /usr/local/
*
* Allow container domains to use container runtime tcp and udp sockets
* Alow containers to use unix_stream_sockets leaked from container runtimes
* Allow userdomains to execute conmon_exec_t and use it as an entrypoint
* Allow conmon_exec_t as an entrypoint
* Add container_use_devices boolean to allow containers to use any device
* Add explicit range transition for conmon
* Add missing dbus class declaration into container_runtime_run()
* Remove lockdown allow rules
* Remove k3s fcontexts
* Allow container domains to be used by user roles- Changed source url to allow for download via source service
* Fri Nov 12 2021 Richard Brown - Update to version 2.171.0
* Define kubernetes_file_t as a config_type
* Allow containers to be socket activated by user domains and by systemd.
* Allow iptables to use fifo files of a container runtime
* Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t
* Allow containers to create lnk_file on tmpfs_t directories.
* Mon Aug 09 2021 Johannes Segitz - Update to version 2.164.2
* Don\'t setup users for writing to pid_sockets
* Allow container engines to be started from the staff user.
* Allow spc_t domains to set bpf rules on any domain
* Add support for k3s
* Fri Apr 23 2021 Johannes Segitz - Fix container runtime binary labels (bsc#1185030). You need to relable at least /usr/sbin if you\'re affected
* Tue Feb 23 2021 Thorsten Kukuk - Update to version 2.158.0 - Add nfs remount support - Allow containers to execmod on nfs, samba and cephs remote shares - Allow confined users to send dbus messages to container_runtime
* Mon Jan 11 2021 Thorsten Kukuk - Update to version 2.154.0 - Allow confined user domains to run confined container domains. - Allow all containers to use nfs shares, iff virt_use_nfs boolean is enabled. - Allow containers to read nsfs file systems. - KVM Container need to use tunnel sockets created by runtime.
* Tue Nov 03 2020 Ludwig Nussel - Don\'t use BuildRequires based on shell script output. OBS can\'t evaluate that.
* Thu Oct 29 2020 Thorsten Kukuk - Update to version 2.150.0 - Add additional allow rules for kvm based containers using virtiofsd.
* Wed Oct 14 2020 Thorsten Kukuk - Update to version 2.145.0 - Add support for kubernetes_file_t - Allow container_t to open existing tun/tap
* Wed Aug 12 2020 Thorsten Kukuk - Minimize BuildRequires
* Mon Aug 10 2020 Thorsten Kukuk - Update to version 2.143.0 - support containerd/cri
* Wed Aug 05 2020 Thorsten Kukuk - Initial version