import container-selinux-2.162.0-1.module+el8.4.0+11311+9da8acfb

.container-selinux.metadata

-bb18101c1ab06b47a88b51df2fd87dcfa3d51412 SOURCES/v2.158.0.tar.gz
+9f59d0fd517d036e7169de7ebc2fcc3a65bcdbff SOURCES/v2.162.0.tar.gz

.gitignore

-SOURCES/v2.158.0.tar.gz
+SOURCES/v2.162.0.tar.gz

SOURCES/rhel-fix.patch

+diff -up container-selinux-2.161.1/container.te.orig container-selinux-2.161.1/container.te
+--- container-selinux-2.161.1/container.te.orig	2021-05-06 14:55:57.952216763 +0200
++++ container-selinux-2.161.1/container.te	2021-05-06 14:56:02.027287991 +0200
+@@ -114,7 +114,7 @@ mls_trusted_object(container_runtime_t)
+ #
+ allow container_runtime_domain self:capability { chown kill fowner fsetid mknod net_admin net_bind_service net_raw setfcap sys_resource };
+ allow container_runtime_domain self:tun_socket { create_socket_perms relabelto };
+-allow container_runtime_domain self:lockdown { confidentiality integrity };
++#allow container_runtime_domain self:lockdown { confidentiality integrity };
+ allow container_runtime_domain self:process ~setcurrent;
+ allow container_runtime_domain self:passwd rootok;
+ allow container_runtime_domain self:fd use;

SPECS/container-selinux.spec

@@ -19,12 +19,13 @@
 
 Epoch: 2
 Name: container-selinux
-Version: 2.158.0
+Version: 2.162.0
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
 Source0: %{git0}/archive/v%{version}.tar.gz
+Patch0: rhel-fix.patch
 BuildArch: noarch
 BuildRequires: git
 BuildRequires: pkgconfig(systemd)
@@ -106,6 +107,23 @@ fi
 %{_datadir}/containers/selinux/contexts
 
 %changelog
+* Tue May 11 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
+- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
+- Related: #1954702
+
+* Thu May 06 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-2
+- do not use lockdown class yet - it is not available in RHEL
+- Related: #1954702
+
+* Thu May 06 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-1
+- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1
+- Related: #1954702
+
+* Thu Apr 29 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.160.2-1
+- update to
+  https://github.com/containers/container-selinux/releases/tag/v2.160.2
+- Related: #1954702
+
 * Fri Feb 12 2021 Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
 - update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
 - Related: #1883490