Changelog for
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm :
* Wed Jul 19 2023 Radovan Sroka
- 1.3.2-100RHEL 9.3.0 ERRATUM- Rebase fapolicyd to the latest stable versionResolves: RHEL-430- fapolicyd can leak FDs and never answer request, causing target process to hang foreverResolves: RHEL-621- RFE: send rule number to fanotify so it gets auditedResolves: RHEL-624- fapolicyd needs to make sure the FD limit is never reachedResolves: RHEL-623- fapolicyd still allows execution of a program after \"untrusting\" itResolves: RHEL-622- Default q_size doesn\'t match manpage\'s oneResolves: RHEL-627- fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state \'D\')Resolves: RHEL-817- Fix broken backwards compatibility backend numbersResolves: RHEL-730- SELinux prevents the fapolicyd from reading symlink (cert_t)Resolves: RHEL-816
* Mon Jan 30 2023 Radovan Sroka - 1.1.3-104RHEL 9.2.0 ERRATUM- statically linked app can execute untrusted appResolves: rhbz#2097077- fapolicyd ineffective with systemd DynamicUser=yesResolves: rhbz#2136802- Starting manually fapolicyd while the service is already running breaks the systemResolves: rhbz#2160517- Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabledResolves: rhbz#2160518- fapolicyd: Introduce filtering of rpmdbResolves: RHEL-192
* Fri Aug 05 2022 Radovan Sroka - 1.1.3-102RHEL 9.1.0 ERRATUM- rebase fapolicyd to the latest stable vesionResolves: rhbz#2100041- fapolicyd gets way too easily killed by OOM killerResolves: rhbz#2097385- fapolicyd does not correctly handle SIGHUPResolves: rhbz#2070655- Introduce ppid rule attributeResolves: rhbz#2102558- fapolicyd often breaks package updatesResolves: rhbz#2111244- drop libgcrypt in favour of opensslResolves: rhbz#2111938- Remove dnf pluginResolves: rhbz#2113959- fapolicyd.rules doesn\'t advertise that using a username/groupname instead of uid/gid also worksResolves: rhbz#2115849
* Thu Jun 16 2022 Radovan Sroka - 1.1-104RHEL 9.1.0 ERRATUM- CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so pathResolves: rhbz#2069123- Faulty handling of static applicationsResolves: rhbz#2096457
* Sun Apr 03 2022 Radovan Sroka - 1.1-101RHEL 9.1.0 ERRATUM- fapolicyd denies access to /usr/lib64/ld-2.28.soResolves: rhbz#2067493
* Wed Feb 16 2022 Radovan Sroka - 1.1-100RHEL 9.0.0 ERRATUM- rebase to 1.1Resolves: rhbz#2032408- introduce rules.dResolves: rhbz#2054740- remove pretrans scriptletResolve: rhbz#2051481
* Tue Dec 14 2021 Zoltan Fridrich - 1.0.4-101RHEL 9.0.0 ERRATUM- rebase to 1.0.4- added rpm_sha256_only option- added trust.d directory- allow file names with whitespaces in trust files- use full paths in trust filesResolves: rhbz#2032408- fix libc.so getting identified as application/x-executableResolves: rhbz#2015307- fix selinux DSP module definition in spec fileResolves: rhbz#2014449
* Mon Aug 09 2021 Mohan Boddu - 1.0.3-4- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688
* Tue Jul 20 2021 Radovan Sroka - 1.0.3-3RHEL 9 BETA- SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shmResolves: rhbz#1932225Resolves: rhbz#1977731