| Message ID | 20250529115235.469533-1-dominick.grift@defensec.nl |
|---|---|
| State | Handled Elsewhere |
| Delegated to: | Hauke Mehrtens |
| Headers | show
Return-Path:
<openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org>
X-Original-To: incoming@patchwork.ozlabs.org
Delivered-To: patchwork-incoming@legolas.ozlabs.org
Authentication-Results: legolas.ozlabs.org;
dkim=pass (2048-bit key;
secure) header.d=lists.infradead.org header.i=@lists.infradead.org
header.a=rsa-sha256 header.s=bombadil.20210309 header.b=qJm1L8eB;
dkim=fail reason="signature verification failed" (1024-bit key;
unprotected) header.d=defensec.nl header.i=@defensec.nl header.a=rsa-sha256
header.s=default header.b=f23xgAs2;
dkim-atps=neutral
Authentication-Results: legolas.ozlabs.org;
spf=none (no SPF record) smtp.mailfrom=lists.openwrt.org
(client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;
envelope-from=openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org;
receiver=patchwork.ozlabs.org)
Received: from bombadil.infradead.org (bombadil.infradead.org
[IPv6:2607:7c80:54:3::133])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384)
(No client certificate requested)
by legolas.ozlabs.org (Postfix) with ESMTPS id 4b7R4b1Qttz1yFj
for <incoming@patchwork.ozlabs.org>; Thu, 29 May 2025 22:48:29 +1000 (AEST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=lists.infradead.org; s=bombadil.20210309; h=Sender:
Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:
List-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-ID:Date:Subject:Cc
:To:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:
Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:
List-Owner; bh=Rb5NhxC1/2INfu+HDxyliRfdlw3DRobZL+UQfT7xD50=; b=qJm1L8eBDvxNdh
lE2N7abtfeUTRFw0VjSIiR57/XUdadPtXqkln3NtRsekqybDqvRUJsbMmfM0RZv0s55lv3Jg0XFVg
0ScTMr+ZDW6eCjm9nWH/08Qld/ic4PMyme+CFPMuVT9yJBRdXq/irD9QGxMSbBOHR6K+5jqqYGBUz
x5+bth5wEkOKcAJzyKMhDBolM8oQXTvTPvHqxXQGVU9RrXlHTepp+aHgQLjtqBrusykcN+0Mi/ajC
qbHEFefj36NjFDFpvgtjLxEclY0+wJKE/NBpp7BVeyRswo3pf9h0AqmyBGM5jBsEJilYAxlgrL8q0
OwTAqPR67iueQZXRu24g==;
Received: from localhost ([::1] helo=bombadil.infradead.org)
by bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))
id 1uKcfE-0000000Fm0b-1DqU;
Thu, 29 May 2025 12:47:16 +0000
Received: from markus.defensec.nl ([45.80.168.93])
by bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))
id 1uKboX-0000000FgLu-0FyW
for openwrt-devel@lists.openwrt.org;
Thu, 29 May 2025 11:52:50 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=defensec.nl;
s=default; t=1748519567;
bh=aFl6SbGmuWnjPtNW3awRO9/zr33fWfm4TQrE0MX3cRA=;
h=From:To:Cc:Subject:Date:From;
b=f23xgAs2JLkizeqkAFZWtIBIZ9YYQRyO7oaBLQ8/kW1E4ybDBzDOuVw5Qg8IKG+NI
XSKXN2StljcHszSU5uvBJnGseqszIujomeBD/3aUEsrvqj9ijjJE2xV8wGgrAZYD3b
l0B47S9dKnKwvIdwAohkT31aB8/RgSbfSnuXChE4=
Received: from template-20250210123507.. (unknown
[IPv6:2a10:3781:2099:0:67b:cbff:fea9:535f])
by markus.defensec.nl (Postfix) with ESMTPSA id 05B8719CC64;
Thu, 29 May 2025 13:52:46 +0200 (CEST)
From: Dominick Grift <dominick.grift@defensec.nl>
To: openwrt-devel@lists.openwrt.org
Cc: Dominick Grift <dominick.grift@defensec.nl>
Subject: [PATCH] selinux-policy: update to version v2.8.1
Date: Thu, 29 May 2025 13:52:35 +0200
Message-ID: <20250529115235.469533-1-dominick.grift@defensec.nl>
X-Mailer: git-send-email 2.47.2
MIME-Version: 1.0
X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3
X-CRM114-CacheID: sfid-20250529_045249_233324_5E040EA8
X-CRM114-Status: UNSURE ( 8.16 )
X-CRM114-Notice: Please train this message.
X-Spam-Score: -2.8 (--)
X-Spam-Report: Spam detection software,
running on the system "bombadil.infradead.org",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Changes since version v2.6: 171a3cc iwinfo 16ae0c1 haproxy
78bcb69 dufsysagent fix 6d88ac5 dufs fixes filecon c9aa6cd adds dufs
5f15774
net: clean up 02c8e76 unneeded sys.moduleload calls 6334366 README: todo
/usr/bin/fit_check_ [...]
Content analysis details: (-2.8 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low
trust
[45.80.168.93 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature,
not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK
signature
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.80.168.93 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.80.168.93 listed in
sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.80.168.93 listed in bl.score.senderscore.com]
X-BeenThere: openwrt-devel@lists.openwrt.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: OpenWrt Development List <openwrt-devel.lists.openwrt.org>
List-Unsubscribe: <https://lists.openwrt.org/mailman/options/openwrt-devel>,
<mailto:openwrt-devel-request@lists.openwrt.org?subject=unsubscribe>
List-Archive: <http://lists.openwrt.org/pipermail/openwrt-devel/>
List-Post: <mailto:openwrt-devel@lists.openwrt.org>
List-Help: <mailto:openwrt-devel-request@lists.openwrt.org?subject=help>
List-Subscribe: <https://lists.openwrt.org/mailman/listinfo/openwrt-devel>,
<mailto:openwrt-devel-request@lists.openwrt.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "openwrt-devel" <openwrt-devel-bounces@lists.openwrt.org>
Errors-To:
openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org
|
| Series |
selinux-policy: update to version v2.8.1
|
expand
|
diff --git a/package/system/selinux-policy/Makefile b/package/system/selinux-policy/Makefile index b3a3165b49..4a165fb90c 100644 --- a/package/system/selinux-policy/Makefile +++ b/package/system/selinux-policy/Makefile @@ -8,8 +8,8 @@ include $(TOPDIR)/rules.mk PKG_NAME:=selinux-policy PKG_SOURCE_PROTO:=git PKG_SOURCE_URL:=https://git.defensec.nl/selinux-policy.git -PKG_VERSION:=2.6 -PKG_MIRROR_HASH:=3604ce2d2874f58a7fc03998daa81628fca43aa8ac0a7436f07612365b6ce7ad +PKG_VERSION:=2.8.1 +PKG_MIRROR_HASH:=5b676004981ae86b67a2025959ea8254cd973d41bd656574c6f0f76422e60e83 PKG_SOURCE_VERSION:=v$(PKG_VERSION) PKG_BUILD_DEPENDS:=secilc/host policycoreutils/host
Changes since version v2.6: 171a3cc iwinfo 16ae0c1 haproxy 78bcb69 dufsysagent fix 6d88ac5 dufs fixes filecon c9aa6cd adds dufs 5f15774 net: clean up 02c8e76 unneeded sys.moduleload calls 6334366 README: todo /usr/bin/fit_check_sign 12b659f README: add reminder on polvers 3e93844 related to bpi-r4 Linux 6.12 449cb74 sysagent: use logintermdev (no differences) 20ad31d unlabeled/invalid: these are relative to . 9c85622 iproute2sysagent: ss c2a7863 README 6d7ad1c adds swaptools swapfile 5b69b63 rpcd related to luci mount tab afeee67 hotplugcall: iwinfo 6ca7996 adds ttyGS0 tty login serial f8b2fba wget: read shouldnt be needed e2faf89 bmon adds ~/.bmonrc 5ede79b adds seccompconffile 3034b20 some comments 9b4b44e loginsysagent: loose end fe0973c README ea06908 loginsysagent 2405c46 loginsysagent 9413988 loginsysagent: adds skel for wrapper retry 22929cb Revert "login.cil: skel for login.sh wrapper" fbcccf4 login.cil: skel for login.sh wrapper 1addde4 Revert "iproute2 ip protocol not supported" f38fd20 iproute2 ip protocol not supported 5abde97 openssl for openssl s_client -connect ip:port 642ddd9 ttyd be00125 iproute2 ip 1fbba89 iproute2 ip 342c981 no cap_userns d241cfb iproute2 ip netns related 6778504 iproute2 ip netns related 491d3c4 iproute2 ip d2dce16 iproute ip 8b43b1c iproute2 ip basic netns support 107e63f iproute2 ip 1b39905 README: looks like this is a no-go b081dba acme note about expected removal of /tmp/run/acme/lock 4df51dd haproxy ee825c8 coreutils: these dont have busybox equivalent 46f4a8b Revert "ucode: needed for custom rules in /etc/nftables.d" 048337a ucode: needed for custom rules in /etc/nftables.d 76b5a69 haproxy pid file c90f840 openssl s_client -connect dbbe475 haproxy local logging 7f58831 haproxy /etc/haproxy for stuff like proxy maps 050afc7 acmesysagent 031e0f3 README 2acf047 haproxy and iproute2 c5d1ce4 README b9304a5 haproxy whitespace b07c524 adds haproxy and iproute2 ss rules 9bc53b1 acme 6031379 openssl 8d6aaba adds sysfsutils skel fc24d0c README 12cc1d4 openssl 79cf372 apk leaks memfd 9912075 adds socat dataexecfile 011bf9a adds wget (consolidate uclient-fetch) 0ba70c0 adds ftp reserved ports 5b35e96 README bd02d73 README 4f6895f netifd comment fix bd46c1f coreutils ad13688 dnsmasq: more robust filecon d5d6dd3 README 74f73d1 fwtool: do_stage2: online sysupgrade sdcard 8251117 README badfb57 iw/tmux socket creation is implied in macros 5663f89 iwsysagent and readme 6815a6c README bde5a56 README 6b89f0a hotplug and netif unconfined.exec.file underline "trusted" 862da9b unknown netifd protocols with netif.unconfined.exec.file Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> --- package/system/selinux-policy/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)