container-selinux-2:2.12-2.gite7096ce.el7$>gtH)˕k+j'>??d, 0 X (.5K       D t    ( '8 09 :>@$B,GPHpIXYZ[\ ],^bZdefltu4vTwlxCcontainer-selinux2.122.gite7096ce.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Y(`;c1bm.rdu2.centos.orgCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -X 200 -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : fi fi #define license tag if not already defined&6IA큤AAA큤A큤Y(`;YXY(`:Y(`:Y(`:YXY(`:Y(`:093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5d4a6bbd5a69c95c97159a8c60fff4ae48607cbf4ee63acf5ee226f15e867ce6933740cf06669e21a4617b64f4c63a0f98cab7aaea8de8f5afde57ffafa732676drootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.12-2.gite7096ce.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-393.13.1-393.13.1-395.2-14.11.3Y@Y@YtYtX@XO@X+X@XX@XXX@X~@Xv@XtXp@XoXoXoXWLokesh Mandvekar - 2:2.12.2.gite7096ceLokesh Mandvekar - 2:2.12.1.gite7096ceLokesh Mandvekar - 2:2.10-4.git567c3d2Lokesh Mandvekar - 2:2.10-3Dan Walsh - 2:2.10-2Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Resolves: #1427335 - remove module on uninstall at priority 200 - From: Cai Qian - use correct version number 2.12 (previous build listed the wrong version) - Resolves: #1445226 - built container-selinux RHEL-1.12 branch commit e7096ce- Resolves: #1445226 - add shortcommit id to release tag- bump release tag for 7.3.5 extras- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.12-2.gite7096ce.el72:2.12-2.gite7096ce.el72:2.12-2.gite7096ce.el7 2:1.12.5-142:1.12.4-28container-selinux-2.12README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.12//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !PH6NI]"k%(u#qXPNeR@Qwʟ=t!⼋6a\ycMEÁ9>7Qx&,(TE l)cJ{%P8Jk.ݥ5GO{C/cSf/{3Yq/Ȉst_Λ:ž#*G~=1e[Mb}J `eP6')?ђˠ#h!z[ bLwsW9O):\?; id`{ hXP\*42,JՀ˥",Ppuszz-[Fܕ"ɮ/U3N[ K,M e~5c! y]mV*VtO \ `]|,vǬ(;&\4kEWrwRRDSeԡr;~\&?byv >Bp}tؔ Zȉ_/!ΙunUyQk~r]v¨EKӁB}WO:R t"Oj{)"*@ᖐG-@{#/$yLj\HU1ѯ38 ƭ"^v1wֳ5f6ǜd#MNb~" î=S[ZLFr}Hi}.iKYyC}VMOO3uCy52x֥o1 XmX1V5dMӷP=@ꚜ''8!m.~S@fP[SDR%XjkJ3Jg>z ?O9Zs70L~"r$ 񞏺q ?AEҋOڏM~$c:00/!n<$&CX6UU{nb^@N<K@SW=e;AM,ѕw>_·:w֖|˱6ҲqܟOJP[yYBv*W\Aef|7aOM4YK#Pi8 mNA䙙%> ;L)L*iJVcAgz,?w5+1~[KfU'L;{Yb;pGK`ϏvnGe c1^x^&/QkB2}N (v{4@."SCsC5F,fXJxӵ1yt $-V Q6YWPCְ9TK $4:LAV؊kEv0)1犽9X 9чUZǚ ဧMܙ{3z>˟Oe%=5wն#a \R>˄_s[s:gφ=͹M%8ԱyA뤜F0a®$ fv-Bۼ9zexe(~GXZZ;#䒒)K3$͛C;^ێNao|{i7qV/*s1|Ń,SFʭ{#Z.~wt*pDPg $6Aʼ ^Aw&2{tgA/u:c05Nѥ罴Eކ>sNpv Q!|@PYE^iMt72,f'AmnE BmՊe6Q<4h_dY}L? hɜ[kSj\t'wiNFQBPHޯ͡BU]<-QMݐI;Nh5#`5MN͓nji2r!jv`yB:gh4WP+Բ1]]r{V1%=Hvo4rs4ѕ ЁvhO*[8; RI_ci*-/=.Xj2%wr=i@3EmmADF<zmp%O/([UTئo[qA?!@VUF*xɨ\L$~N-XFS @|QTu0klNw*#}@tK^R8)-qj8j7S*оrTH^ܸR92]:h;aEIF  Z_[QR:=/MĒ ڌ71ݏ +=1=OL cįuc Cx?#W}E1Fͩiu{Ј+-*CNơh+e^1; }s֢y&hz^}0(;_E89j.c˹>;XFk Hx>{ i%_")ks0{֎ؾlȧFbPaR l Cn_-lʠ7ϔxTl 1]=97*Ku |.@n}>@L lu >6g_7Ώ|-](s_T ܑD (%8=0(aB)la>,ÜxHv3KJ˞A(^ ?mh(9HjK̷6p f_}6]\ %X%4`q4>,7-+Tz x}J 臵'yo1/Cjm]r54!mi?u.Nc^v'bRU_WANۯqio6!`H9$FFrxX ~Zk~ROA%K܊H}w8}}bќ*0.]g^ qmLp͵ZLQ1ZU4n-/:= jVC-7@w _},Z'M1yOU2Ϲ4ۘZ:,s(!'#gr]Ɇإ8vAҁ_%-mGee6)hj` yd w{ ojsBkԬ_Y_q? ޷E,"Y56Y@q89]pX$RWO藅^zO_%+ k sLV~ s8:,K  Y.34bސNV@ xz636\:$㻍Yq[uetrs:vX\$pin`oyK@ªܳt \E2JizQ~ ' >bvqiFGQCMd֡PN6. N|vV毄`@jg#w}_s#Vz&q˵Ac^>**FESTQgH{-nRC!ͩ)E}Y?1fA]^܇{㖗>/H/=W4` й?tF7w"s[DO8HD_Ԙ[TuF'8.=ݡeaD\6qTLRQފHU|EVRFŏ2sN)/*kQh ̆%v ;t=1YW+Jur<Qo`m9d>Zv0WS6To\h+ik֩5V^ _dh9_(AKO Zas J)gT95o꡸%K]:T`][e_{w&Hi;Z9Zwz$K8%1jj!.3pG}`QJ$Ԃck%L0Df# D7_[L ,@NCq Z (P -oO-cc(ц ge.5[ Ahu-/[oRRn}%;ĶM ?FL.TJ}Ęl1CٞZ87p|BaZe "t度e7o6xmlHPX\|6 BrR=&d0J뇅ml%3Jzh]}u+F,h8Zl4L$ G\4:aD\NŒOAϚYrzJnZb|ˡ'uĬ*MZ2-2Urv3deSGrܮwd 6VY|Fh>JLb$(ͦ( .qc!SR{JNeX^@8(B>%)\3cK69iT?8i]*J`89WQyb)&{5@57'؍.'Jk{$$RÜЋ&yUܿ\ f?>n^7:|c$c3evTs ܨ2\z)N tYdI1¾sT_h*.xcg(Mp(8pU" "_$=;>~,m * *,Su $,POJ%;ਵ)Y̩ӂ!ֺ.XmYj'|i{]S xn#?-non6 TFO/3?I97.&hֺ [Z{t'[ǐ)ä9`cTFt`|a J[1H:LDn򮜃Յ&*m]ݏR௶U8/ڐWmG<2k_qLXqLmʂ팃E@{i|Arxk VRoǨR'  TǪN: jmy|jv;֮aF]Z (8p*N 8N`TN<2-v`kq C+*e¬WMR'(0{n "DV-@ S>i28-ůdzy^H-^y-FIZce$p_C#:b3 #PE4[]YYn-Ϋ6Mj]/i?Ŀzcbb04=SE١i"Ġ5R1byn:?4eq5lȡDlO%#g-EDU|Qod&OKԏPƜIFmX70DA ?+?PQj Z5@L0]fYXs1 GZPbR  R~@ 7B/ƍN[x]r B*/Xff)5msIbv+p:ST|=6^ |݁7dxM;A#n;lvtI ]]="" iyR;h>7ɝ'4_J+K%?FkUYʲblB3b^pp\ 䱜EJ țG[wr.-07g k S~l9PP?R|!'IWd36Ss\m#p՘ћNkJzP"/Fe;l0gw p&,&tfź\w5|& 0 CALDoMn|`Dcn73 .A ! Cj.VFKq@3\vmO.WY sIǿ5 `X0ɖB|2="M]M9Nbvpo^@QoA?.S08s!?FyM37yXHDXb\EjAҺ pRݫ7Ó3,~=T- nNw?2m=1(ɏٽGr䞗f% A!lC |h&@R;,B\7Qr]dECT||\6-L p>=g# -*v+_w.j?\\>)s!DÃvŸ["'F9t$@`k5S戌,M֦Y`>ϰr!Se8\ @ͪ׾H5tU-4&gbItTZO,f>Ͻ:`\io8tqEBlL;U磁7C:ab'`\mPg1MDo p54&DTK LCɔ.r ST/̒@$Mt #V ټ S#?\pY~_N& +Kj5|1V}!/:mk59c8ȓ`TgSWQh UӉ0VHSЀR-)S.$KѸՉ$"_D=G7Oޜ Oe,azOxlz8͆/X6kGe?z5_tZG8/l):_i59 B$Ll!ʛ.{we$6ёn}2л_iUs 6))Vye _-nJ DhD`| {f{vX%?wR4Cz_df(9/KPi.ۇrwk sqW]D+qX`M䝠aㅜw{ R澷2~+)Tj?=cf4ӟ *]/PI>i?T tO\~=ڒ5^fº={T8^['6z& nBYhEGp+$hi)™bw&niP`Zkd= @ g\{u>I*ۃ*6pwj8{,f`a]i [mM3| |N7~,kf{l7X"uߦR?Ӊ)~N5l+C vMT(e H"[.6 0ѩl/e4p_i}6LI[*Oăqi*.yІkBD% iF3~ȯeKKQeu\> -1\u)ʤ&k"բ U|Qp@?G"wU|%cxVzT8:cPW*S *^ S}-`2??_c%6`[e+)ONϹ9'qD1 o\V.3z*!#$DuiRv6yK(A/Rq5PlL9O,>C=ɟUr c wӓASk5lJ6sq_^[Pf\;fDT) O?q]jؙN*qHtw ?l# <),ίڐo[B,Bj6R$p#dV n_h%)l{Ʋ!pBҡZ:8Ak]}"l:N \>~U\ 1eq?'7$C2ܠk_CWbfzBX6@ JѸ\8 U]os (@_rDPq %&cK$Q;Cmf3i`,QtxtD-}As9׶Bh)LMWѾKgC0s!± |+לte܇⒉8TuZ9)Ϊ2|+g؝ĵbZ{)s,72U8O颇ﰐ)ˀl%vz] JŐ& fd.$/pc63n/|Ry?sveJl66\elXfU^{KM4ps!DSu8`x~sȊKi;,-fFzGD(y YKA(:S)])(J@Ȟ\|Pc)Kn;$FT:`:mɽ$ 4R 9H@D.?2qmCx%W|{!f+JTj1?f7Vxg'n?4 L\ ̰8u@qY TJ(Q4b~׎f]-1Ue)>)ާ'BYoۻS1^41a6/qUxWojXt.iՐU9E&tء8:w沰^tX`&(2wrH<us:WO7mL-evpeXTJ `^>WD<eb-i\}?8kz8f-"սwsd}/q 4@bVX"sxR#ሽ>V]7j*m-}0{C ֨_ʗx%wR$f̌$8g<5.>EAZ1ln 0xvsnm"7RsZ)ې%-2[w[yKh}ޘMyԻy8_jܨ. av ۵s,4Q]oLv6\9[I0k jZbi$[so j_ݑb6reo}8E&hn#&q,N:׹`vm#Vi%}kuJ6T)r<` LkDׇy|s7đ[D)r̴z(fB<&GpY5<^L` ܂]Bl&ܠ܁@i/?[:lko-y\f XSM/A58й\{جx?73إC%UO'B2ZͩxCv@rױ>Q:ELWz{EZVsrRsv3_c:CPȨ]V2NJ1=lS:NJiZIKS=FA(3&& &bJtS(!duvPJN(wΤP!r4j XQѵ](!77`[>rDAҤȺw}Y]lo@ ~u"]im ,\eLBbx[Wʏ2hh'N/Gt )&hOoC9D@0*ng`tnQ=VI\x5ĵ"rZwx`qf;dw㇆#0a?V;/i)U=3?D[f($ }i.=2<])HwSQ>,j>0 M6YJ]~wGb]~ <+ymᤞGpXګ=cC d5?sxj5u㓯 {ΖPfŻz^Xv?i6XBy;@ߖՒ;[I/)Ij4{U]LHIiB &]t8-j2;n,ׇ{^/&!?x*)kM(xsĚ)VT&?ķ sv^ւ+bb1Vllw/dWŝd{a %jA` Tqؘo ?GTU1M hVc>(`uu1$+ۇb!E#qh*3W%-aPs ܪ2%, K9U4ےGR͕Ù:_ oF9uRI&}LjJ7.M~S'IQ:c\fH#r[6.~6mM IC#>@aLjpua)wj||kTÃ2BTMէHFyT.rVk)!ҟ:r T6GWj_S|uByŐjZG}\!b1^m򰑱cm7p2i(˱ ٻ-'Ea ߁RԕETi* dZiK?ӦAEYCa$])ЏicroR3(I[4.^B7;o,p'J3^bYYɫ:uvf`; gr? ^="Qh,J'͘~N+3J3gu@ nN@Wdy'.u^' nd79M&VfѲn5um=L}%~CR+v94A WSI9 Wm$03cYoSl[)qh[5+ܒܨbVd<+i5sշW&W+-؎xn(ڛے1)sk6S'OsFlMﰛ,&YvB OL|[@05CW$HEK 6}J+V`I,?"2t@fC|ڒD혪:w1JSa~5oз$ 6-hoNЛe_L5^K#!PmSkv>Tײ#?ܩ%1 -r8yma&Rc(4jvԎ.se; O?5XNm ~O Ȯ|FG[ߏ|j>ɂ1Go=|r^q}L]qi]ؒ2PD>\>es:&;^ 46DZ~iηұIk)Il[;1 `pQ̩P5!SX椊WO2 ò9WY~Y&6 J'PKWcuMs&Ϛ}L?}5·G.oLUͅH'v;.akgeTdϹq)Z̚GRNjXzPhj{L%5S81Ba^^1x0Cdzm%**]s̠U߷GdYU'tO$IHL_f2ZY',2͝z1Zl&to?>h ڝ6~Wd>[#R  wkQ[ZyuM:yDм2DvSvg죰_K'gp4Y@{9juai؁z ?a,'p ʪkd;Yj}r]"?"utB+JX3mZlJ2?A`?ycmFEW!>S*A֦9lLs۝cr*I{ՈSyਾڝPp8uceRexVػKHc&2ᦜI%u%; _'׌NN^WCE^BCк.U0cם7/ʎAwhXmYau͌_a01c#v/`thG=I h}{P2d6ߝX$m#Τq\| F -rxgcRj^MJT4Rp4Y -w]wk8zg]VU.f՞o0@pB=ː9kHH*v}/%JRA,f|4MCLE>F+09bRlEpw<,!B\oR)F{,ҽ U5 W&E }]8W|Hf.0-#9)>Ɖ iD:X2$*y9ӵJG-o9Q!;} eX-FdF)lvd1{?0aFVО*סs$IѶg* ; (|W$@̭z7mdxq{)ZA!t k"WsVƱ{b϶d< pGl&jWncln~@Hu$E{(t2Sd2t^^c0ޝ"hU< [ MJ"b[Vքoٽ(F=:[)UVɾY.g4VNbƒap]W]6 ӥy@bK䣈''&\*CHo@WG{mqG'h#I:egv-[='c7SuǮ`PKB e"xYrii![Џe:e:[Au"PWCIʻe ԑ^C̜[Ww`CE4Rzb* 5Qεr LO GrWw=0PFO8mwn!ӛd~\CC4/S6J:,[tgh*Ef.1+o>j [d8}zo[/6 BmG xٻʁen= xFFݨ8X*@64OyE]Į/l)[ߜX)Dc5+xϢcVVk(uC%wl1UzDPG .4ƩjFAS$ְAP^mv*A薟vw0^KA--}!rHib"-Ĝ,5JJ( VZ2= }{BF;px 0ad~"3 2 ȫ7\LjVIW@+ϠZFx3_!P *} }An:Iif7Da8/*o`:V pVYHS^OO/Sw {l]>S O[Yԇ8FxCU fzmZG+7УĦ%>-=:4 txN [vc=B@-~iݓQM%ZR4qw;ĺƏn{}?+ lWD/:1`WO/8{=2\RZD8h5A#n~L̈mTUpeʝ+ü~YxZ,D/\xrN.Pu CcL0;ʯ@zCƟ+~ѫ~%[^1Vjkf?)t`pW)-Uy a+[ZҡFL, GJyo5Y&ƷAsxyn-FuK:K(]DHTn`6͕2+0lfiРl"9C诧2QpHǬgpDU Ƚn.bg:?t>]06$E|Te\n1K%AX_@uOP?{=Cύ&~皼kD ZivD?fsN Lt|Ղ!יUEy^ݔaFBeƩIB5n!סN5 =֜NҾJ N6N_PGLU0B!l_G׹- gLؓlJ YZ