container-selinux-2:2.12-2.gite7096ce.el7$>g0|Ni >??d, 0 X (.5K       D t    ( '8 09 :>@$B,GPHpIXYZ[\ ],^bZdefltu4vTwlxCcontainer-selinux2.122.gite7096ce.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Y(`;c1bm.rdu2.centos.orgCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -X 200 -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : fi fi #define license tag if not already defined&6IA큤AAA큤A큤Y(`;YXY(`:Y(`:Y(`:YXY(`:Y(`:093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5d4a6bbd5a69c95c97159a8c60fff4ae48607cbf4ee63acf5ee226f15e867ce6933740cf06669e21a4617b64f4c63a0f98cab7aaea8de8f5afde57ffafa732676drootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.12-2.gite7096ce.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-393.13.1-393.13.1-395.2-14.11.3Y@Y@YtYtX@XO@X+X@XX@XXX@X~@Xv@XtXp@XoXoXoXWLokesh Mandvekar - 2:2.12.2.gite7096ceLokesh Mandvekar - 2:2.12.1.gite7096ceLokesh Mandvekar - 2:2.10-4.git567c3d2Lokesh Mandvekar - 2:2.10-3Dan Walsh - 2:2.10-2Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Resolves: #1427335 - remove module on uninstall at priority 200 - From: Cai Qian - use correct version number 2.12 (previous build listed the wrong version) - Resolves: #1445226 - built container-selinux RHEL-1.12 branch commit e7096ce- Resolves: #1445226 - add shortcommit id to release tag- bump release tag for 7.3.5 extras- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.12-2.gite7096ce.el72:2.12-2.gite7096ce.el72:2.12-2.gite7096ce.el7 2:1.12.5-142:1.12.4-28container-selinux-2.12README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.12//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !PH6MBI]"k%u#qXPNeR@Q]ɝS!Cc(Mxu^[̿pO .Y>Iq![5jԴaOX(i؜NPS{Nkms5shׄqw buDC-u׸ĵepH_#w ^+W:ދVH,bsJiZ7 LB|k#;Kt޷ 6\ՆD_mDx0TqvQƬHA% °ZjfW]d$!`0?iTg1i'K:\9,(tg5NTCsmm*6"PwyRe@L1=a v3pG7NG -- iv,s{G'odK%kيWfDm)%%3fxkdA\'+O0 ԠwЬ_B&dWl*&:^@?.GCyzSjVogdk@'ħCДwH]dRe=0wciC)w+[ZE^)Jv&68ݚT Q<AŻf҅GASnID.3!kyAGl٪a!Σkl/'1JJGFNCTM=8d5Wtf4օ7'䷨2tK}3X93grOS8a>"]ߵ~k|;:7g+h@T6R\U8g !aY嚽g`t"q$ >~։ʄCHߣbVML< (oc @1=M2/)<;–U%e2Ld#azC pٚn@\<B&kԴc5yAh~-QTLxA [* fLč*mX~IțfeQyC^т}S҆RhFKV7Qqk`>-j`^} .U"ƜpgkX{HOb봀͜hGS°c#)QMSưa, gGk6e\Ob<pU X/AtF3]ĢO$|R(e{~7]c TRVdiݵhUw( T$c@ܕ8?/0 ^9}aMyH Uź%xlU[D^+ih4}y&B+m8/ӜJY>2v) Xޒ%3J[J""7w70UW=G3׷| ^rJ:5|?E$" ~n*hu` x>̬a/)Ȋ\^ qg'RH7:]ckwǀ 5$+^v8u:M7HWoVyg0|eeTqm!Ek6X sO孮& q=PRJXF,a'f ?(@18{n 5o~ 9Hg,[s mWa]vƦ^$W*>,z |D!\TGyG((5yL8GfV&Jx2WNbk6ыcDjwݜ$*[ѭ>ʟ:V482'bRS s!}m kls2,+ߝ@&`g؉%X"jDuT@~l#UM2Cj$nm+QgtdH`׹4u ,OD4 :kcHHG=Ҙ~X$q T MZhǮh)}~oyXBת;|{D|R}S :fv䨥 pqzw-?/҈h+Y/ח1¬dWI5GԎeOHC9ȑm }5U E2H)Quy "ٱre@ ;;Cވ^} ;xb26l(`YdKVgZƒuX0ò15Lrb"+n5[ۣY%f٪_|.Ow'H{7F,<PdU҃fD;jt1[)Jlg)l'#MzQ~!V]u3KÛci1W-TB n*,48 &*(H"pv(8* Qy3iJ."( $H_Q=9f)`%Yz IYitYR"Y.?zނ,NIz;\3:ÒN^SN5qBqRyA\>: RD58+^|/k6-Amx^?UiO9س5.Жxc ]Oz*?͚ϕI^'8&ks e|Hblx5+c>_s`, j@hX. ir29v E( >tj F(FIHa&&XpҤq'U]=J4tb.SWA>ML(55ϡ4r>C5.K?}%R37-r$\q[xFݘ.N J )>a}H`ykqɮno SLMf;` K#e\F&~>Yim79DfW>ȒaRc5ϼo ky0_ }5o܌HaW[ yHh3\R{|*etbr -]"b`cGzŏ%gcBOȒ82!M1JR4#yb]DbZq7anePt'mc١^XjW^5IT~tKe"D MA+Ǥ =Y;a(Lt> S@FJnyNySVW=ܯpMvK#bgXlX$R8?FQHJXuD֙NspWF2xlb|E\u1vÊvF^E4>o Ոu)47g,{ү{?ߦ笕K]~n$sisg Σe 05.v{ `1*M[xE@\XrldA#^KS#>R)޹W}M383J0HC&WbŎxJAE|J:>Vkc8B5 &0V9HY2D+ EIC;菬Y3>Y36\inȤkJ][^Z Oe]n g Wim ɻn 9٭($P!ڿ#j' ydLL_Ŭ#}@&DE ­;UHI?'w5N!@R~* l>zsl_"ˤ |T ypY2vTٷ)' -{t(=nk9h#0~L]{'4ܲj&!WȰHwZ@qe瑆dp-`*|A17d 8noIT?-XN}^UȗHAqo%zkC9;0aFzw4ڵ ESE$7rgd{zF4 \x̰#Hl/dVLOKQNb57! 5bjeÖ:P8b5[S\o%F$a /g%Xp_zQ!m,ayb 7"A ,<տOE%n;:+(2/pչt|׫ҽR sԓuiNT4HoNK3Ά_g4H2` Ђȟ+!Rʣ2L]OP(pUnGu{kq4ĻB!ѠiB͖DJ璩f$%;pmR xΦqu9!ĸq.^S- SWЌYakj0$ա0jghw!GPEo럶L]o SӅ "&n-<~ DŃ^ݠ]{S˖)|1:sHE2uDOq|qL.J`9&(%i U/?-[wm :;<V\ ^TѶgy U tR=R1AY/F(ĉE&C]PR&ϞP bҍ'͆oz=T\Wqm'cU C8cv b*jiGSRqrႴǒ.AG] Zp%*d@ḏ)ybx_J0`gTEgZ0eE*iFʻuxjT$zcB eOL.ͱtǙ ~Wtc1uxBd.FqCkQ#,{&3h9/_WzTVC<5Oր<81naϕO, ۻtV vs ; 龶،Sٲrau.7q<'m݉ S#Ok~?ڷ؉Ro4\._ZPLyХVg=GLWÞ=.%lF ?!!^U1ϲ,%&fG.e2n49:AvBY@u]UL.GǟZmLI=/"qZs"5% @$$cHx˒{*Suh2_Y&e|_n7gP±sO.P3>О{5,B"<2yӡ@GV1q8j6B_'~E/(rBnA?\dembP:/ݽG|Ʃo//' NփL+P+pRR~s$YP]{G$3[] [rqV$?Ϛ_EDz" 6z4,N.ٴ4R(T ~B iݑ^}Cӥ<'UXn kJ *9jJTN6EO7I\ ŏSGiTal:59 EMBNɐܵk"օ\q$k͔y9xf()',4Ksc4yCX٘5T;`Jt6 *p>n5},`E\">5qO?m䎇|PA$ǘ!FNVcg (/ϭZڃ.]&nt|)υM_c1h? Q%r;jސ<ۅS' i(=64lowD-\RKǒʸDTickk:KkuJy$> ~sXhH!7fEGϖO48{!1B]+2AV.h];aՋ6/bLղL# 浀h|+zC@C">.ፗ͚%DFk[9M[I:MO#]8Y2Yn[ ;'dύKtZf;j/㓤5Y-a3ҞD8 wg^zqUsX&OJŦe>}ש|xSYJN^oưJp!(9ŗKKj= i >{y, !9d}!_[.}Ʊv-Rm4%>N"AZ|ɮ7A5kd.?ud[խ ګQS1ΐiK# RNMʾL$sQtW$c3⭁nQ'BMp@/N>%ۅxzm,D .5Ñ`\r@J`N֟x|sMxyWB 3= kƁӔC k8;juV]|GFHƒw-uGHb$j}{$)i [*d/X~Y%95}?>Ur)_T Jgjdx>m}UЈk[q@)6r'C)*39< 8e}yA|EBpv"ϼ-d /Q0M$jCƉ(),*,XjɭEkT(Fޝt% @ .B/R㡲S# l&vlX~< Jų?&Sr0_xLY;eJ/`Q_Tƹ7+\[HF>d.Љ(|ʁi',8K\ܜǩ0F؁#рRb 6nI<.9Y/Nu RC.?֦yJOQmTzy23ѐ_CIidlrasD({DN9B+'8OH}.&mtu(-ţ^8sj&tvד\S#<E/O톓dBCkGAOUE0Lq@YYXPȿѲKo] 5Zx7paS1[w0)|c Ն j`i5CbL_\*Efްwhfpx5xwBXGbLf:O7b*C&9\ͻ (טRm7*efˬ5k YF^Dʐ D]3 gkgJb2zJVrUB[)9&un;g:R˴:V, 3S}Ў `ErSo)j]oX. 5j"8! y =_lΏ*xMcQf^ީ5GFG#x ÚDr*2_Y_3p/lC{ډqUzFRጻ`w!߮y޶@IйR5:0z^uDz{KV^hL,sǃwVUsp3|6@rPF&Fg0?8~ wDANTBٛM/@ ;` @>Ql *_ڧ ?rr!A3U $JW$%趑4G>n+{Yn'ÉoMAL鵃R*5:x8ud4Y1H@Ojj7rM`) Yw3`3OX%VR{LYQG\¨DO%?D40JOT)Fħh np( 2> Ti!hWqfIJD23%d2ہ8N DMM&A(-&(jYJΪy&=g=-\SـP>l*{m RaP^N rt.VoRj-V G7Xj !A"06?"7{5\Z5I2BCֿ@jZlD{͟z>ޡ$Q(" lA'5֌e*sY-B"iض%ijRLKsV]iUbY"睝uMBO0:`heϦzj\fr8j hHOr'ٴ+ʙiwV_6IKX/;R##1+\&EJ¯̬ 3ZB_Hm[tZ"gw|$\ Xػ5)sa e+b~[?J: bUcyr;`_lkh8iXbP&SFjp٫əJDr=3P ) t]8% 3Bp>hꍓR]j)' BCņ@$~bZɻ|>۳q8.lW7̕;ͬW:xc%#2<ɠ[6ASo.Gy-Bq ;É1Gq$&|\2i2t[Htp?ʆOAln|Gpt5Fǎy'sV@=i'{m ;dT8s(-2tY-(2[Bz k .]F *gFQfX0G;u7L3~KJ^K,p9HmoNDdEʝdѓݣg_$u3y5I+~I3:]+8ۅxqgH V£}4g f]"W_ȄmuSaJ`#}amddm%IA}1j.n y@hJ84pweKX_xJLkT:,MsnClv#h;5 " KR038[ҽu%7)OKH5Jt9Pv_z@:ݶ: -CpT][MS.P,KwM0V*R|/۰x{[^$P(4aba,G/\z.o7_ :{ EF|L{VHtg2c8+̬ gr[Xp.Ho z ?UbsiO (` p)<4NlmJ,>|jL1,#^ջ6b;ꚞoSH9gcE] 2"W JW_Kuδ¹sB 4 xjhPgECq͗/$MAeU|ݐ?y1O |?e9xrTSI"T3HƚԒ7/mLIfT>\UޤWG[>vߑCpx<&E<w5͐ᴜ1HOPǝ oTծ×$`./h!CN<nK04ȓ2A~QܓGvl:O@ΎS3 5r S_AMP U땆ET>Sv;t·E+t}Fu~Ȗrjq8zPS }oZR5x$R_2m|0v="⭃ic*(l& I=|zl|N_cY <CA2Rg:AJZ[xJb}hIZ]gLw?cl J>|Ĺ3zsNW4"12<.pCqZwcStGuA;]/ a;i3c)뾄ACĈN5R3V~J~&((S\vX h_xQ5::z;N:*ॎ81̀Vh]w1-Mq㟤3eVRQ) \TkFx9g H 2aYݮneEr^gw &v3^=j<}FQ κe'_)Ԭ -ÿ6Н+Jr1( Z2!l`H黑_٫, p3̗nk;-D`zȫT!۪Yp؞]z?_)ٚO MRI ɏ4i_oӥ>yOA%=UaȹbM[3cG8,%d}gX&} (<)|=U$}>^*C -LMjLnXѴh0@]Rb!Y<&VF/ AZ"c\|\26p  x3}9nIZGJ|ðZA5bmÇvPxĨZ׵E?Zox L*xW+QCj_{3~Ø^weR,> 9AteBM{qkm#Qƥ )fhQ5S Aۧ-k2狚jdfIKiWE4Ѷn/5ᄒQԕu[`m)5tsZ%吢zKTk{#t3Իd)BeHY ĒNjdXbK:hb#ln ʂ9:(z87]~k#NĜ>.t0Rv8Y@RqI46빥YRC5"0Ú{3וg^V޳Hvy9_-˰SJjV8(k=G69aLYKgK*1g1Fr'C~FaԫvFbr*[d[q>ϔM 4=ut%CxO[ñrͽӵ1K@#u)qP_ҪqD4-CK@ HK޼Mp9 i,wm\8稩$ jUtgƂFNs):ĎpZ_^oЕ=]@tԋeqef e}D'ms- R-NFxX'9 XwpPo~ϝ͊qk+,}w>3#fS1aw\ZA@/@q:rf烻 &>C ~ǐ*}\ͬZ# "-<"rA1JnY{^:CeRvD̸KRÆjrF {>s"nkc tg.hhes^CӁkń,{䲗b'@}n @A_NTOءת޻`7V}aĚhHTyd H:0'3-]\ 4]p7 L$WjqBOo"{?]C&4MU{7'פ?, fg5Ia&:/Rk/xj#[|T+o <)dW?<,o/ċ 7 W]ZF:1u0\J ;zM *Ȃ@vHI4b # e NuJzbUÌg;ZuƱGYŐI@ŢM@޶tgM~ WAo$RA^u#Z{ Cҝu?6oXch9h s6NjPr!wB"fD[#ZW[FT6 sof.=j\ \.|Db[@R Er`Nazb FO gaA߸/BqKPZKr9%SSBmt02f} %ƾb=BᅗMO\.ߚ1Eʧ^i^lڕw q44ɞAN̚;9R,I&u̳^tpƚ 1C3j!/hv+,86Su1gp(A#K,\"|~!H6uE1c9DkWI\)cV啃B*nH+<hMe_)"CXCb_We%3G@sJ\}2Z?io|[!cΣՕT\Hv%Zh>f$~tmyPڄV@EGf[ɲ諧[ui3=,v4|V}r ڗfB59xݵ;e~"BΎy9 }BNN`~W}\ j&iit1j@˥#z1|ZSj'6y'k5nL]a)+&;ph{HRZAA%I<*Fƽ"!Q"QG#N2>u\i *NtvwJz7KXaw k̈+0uSF~6ߔyk4C<)5M*v?#m7+7[Jgk4e#7R^{-Ozŷ8)iyO0>U˧p9.Y΁\z=dE&v#E;":(HZ5Y!B`7{*8EQ{7]^q'όY}80D{+M r<>q/@Sd@jILX~~+a_Nh,ꧢftb}PRPnei+Hmjz|*|Y;`?W_E`@Cg3ӏg*ёYfæ@2 ᷝvu#GD0 ` c(ѭWhu$~O+Ht>:03^g ^u*Fӆ=>SzˬϔE r~6 ;ϩLcx}ͿdC2lټɒÚ򈉶 YZ