2.20220106
pebenito
released this
06 Jan 19:35
·
553 commits
to master
since this release
Notable changes:
- Module versions were dropped. Policy module versions were removed in semodule many years ago, so they no longer serve a purpose in the policy. The
policy_module()
macro still supports the version argument. If it is missing, a default version is set, to satisfy the policy syntax. - The MCS constraints changed to reflect the usage in systems, primarily for separating containers and VMs. To separate a domain by MCS it will now need to opt in using the
mcs_constrained()
interface. - New support for grouping user domains and their surrogates, e.g.
user_t
surrogatesuser_wm_t
anduser_systemd_t
, such that allowing the user domain to domain transition to a child domain will be allowed for surrogate domains. See pull requests #365 and #381 for more information.
New module:
- obfs4proxy
Name | SHA-256 SUM |
---|---|
refpolicy-2.20220106.tar.bz2 | 965f98f0b68a24fd0b8e8d973d319332aea88973e1d6c455ef9c2a31aefaeaa6 |