• Accepted refpolicy 2:2.20250213-6 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Sat May 24 09:10:02 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sat, 24 May 2025 16:54:19 +1000
    Source: refpolicy
    Architecture: source
    Version: 2:2.20250213-6
    Distribution: unstable
    Urgency: medium
    Maintainer: Debian SELinux maintainers <[email protected]> Changed-By: Russell Coker <[email protected]>
    Changes:
    refpolicy (2:2.20250213-6) unstable; urgency=medium
    .
    * Allow fail2ban to watch the audit log
    * Dontaudit needrestart statting device nodes and writing /var dirs
    * Allow needrestart to read vm overcommit sysctl and logind sessions
    allow it to send signull to sshd and xdm, allow it to stat generic ptys
    * Allow semanage to read vm overcommit sysctl
    * Allow utempter to create dgram sockets and stat localisaton files
    * Allow systemd-nspawn to read init runtime files (for MAC generation),
    to write to /dev/kmsg, to send syslog messages
    * Allow systemd-machined to create dirs of type systemd_machined_runtime_t
    under init_runtime_t, to see systemd-nspawn processes, to manage it's
    runtime dirs, and to create and unlink runtime sock_files.
    * Add policy for opensnitch
    * Label /etc/kernel/entry-tokenaas etc_runtime_t
    * Allow NetworkManager_t to read systemd networkd runtime and to get init
    status
    Checksums-Sha1:
    e1fa9e8f6ba857691def83a8e076ee545bd1d98e 2498 refpolicy_2.20250213-6.dsc
    431664912f6c88cde93e2a3fbba6074756b10138 113368 refpolicy_2.20250213-6.debian.tar.xz
    9943af2af331af09bf00194d5cff4236ca09fe3d 8439 refpolicy_2.20250213-6_amd64.buildinfo
    Checksums-Sha256:
    578c707f72e5af81e432a7774b0e4208fc1dae0e5a6b190d0b96744ee4407c89 2498 refpolicy_2.20250213-6.dsc
    0f947455ae5f40954de85289b8a7e52ce2ac4e612f44079b9aad1c45d3efb3c1 113368 refpolicy_2.20250213-6.debian.tar.xz
    1b007fb411f876eac1c98472f705fab2c51d72f39528d15c6030f05b87d36cd1 8439 refpolicy_2.20250213-6_amd64.buildinfo
    Files:
    c0881702b7fec60e0f2a96dbb3aacd3b 2498 admin optional refpolicy_2.20250213-6.dsc
    e326f3f4c9f054b5e05562ab22046af6 113368 admin optional refpolicy_2.20250213-6.debian.tar.xz
    b333afeb484b533fc62c04da04dd84fe 8439 admin optional refpolicy_2.20250213-6_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEn31hncwG9XwCqmbH0UHNMPxLj3kFAmgxbm4ACgkQ0UHNMPxL j3lUFA/+NtRefnZrEhKsarOeWQprKY9wCNx27RUWmt9Tcmwmx1RBgC7W2uQwMpoh VlGFpFmNTnJuiGN7j8MkFHLQ8oXDpA+XgsCJ2m4eYXyQ2ZNNssdfZ/wT4G9UKlqT cOs/3w5aTw169DERqGRZ1sfflt8H5svB45M44l8DH4n3/uMlVBlF/+NUvlm2drxq ZthpdToI7Y1eQrzhkfnwLooSFWQUe28j9H6o0M68fgPQ5T4arvhFsg7EKbYnFxh8 WpKxH0S9/cq7YsEj7aDFazDQ7r8kB3MZrkS9D44zOLt6Z26fSyN6xqdhukuaO019 kXQ0AAXb2zSCwrOYYvRchpjp6ugxcgroGIgPJsWA+HC8DtAhdagPmz+FyfANCVMU cd6hHhqjCsYWMU1/upP1jwV83tYYsbkgrU6hZdCiCHnA7pKRiHjnwgrCl2nPmyZW qhRd3ZcskVEm3tucvsHQ+W1CzMXi3FVVmTdWOlB3B2fJkUY2Svr52hSVVUg+zZrd vyNQHfVN4rKdzyGRajUNXOezmQOpAEA+/lzYVATuGROtp+zyFSRDjc+s+A1iMM4x hdzMmi5xs1lEAB7SSmtQ7lQ53wXRZSNPEfxsARvGIiK/5MwE05Q3aXqRgjZKrK6R IcXN0ftEyx1kzdmzoBiaF74+wV53b/JgM3MQ8IRsQ8VCwtC1+sI=
    =0mHJ
    -----END PGP SIGNATURE-----


    --==============T95972489635126121=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaDFvfAAKCRCb9qggYcy5 IRmPAP9qWVRsCpuyfxZaq0TWz+9QDoNBgbcZnq+Nj4unJSM5lQEA0WSxRMlloLMd zMPPZFkLXTGny7kMR8tf8Mf95omCbAk=i9s/
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)