Skip to content

2.20220106
Compare
Choose a tag to compare
@pebenito pebenito released this 06 Jan 19:35
· 553 commits to master since this release
RELEASE_2_20220106
5343d31

Notable changes:

  • Module versions were dropped. Policy module versions were removed in semodule many years ago, so they no longer serve a purpose in the policy. The policy_module() macro still supports the version argument. If it is missing, a default version is set, to satisfy the policy syntax.
  • The MCS constraints changed to reflect the usage in systems, primarily for separating containers and VMs. To separate a domain by MCS it will now need to opt in using the mcs_constrained() interface.
  • New support for grouping user domains and their surrogates, e.g. user_t surrogates user_wm_t and user_systemd_t, such that allowing the user domain to domain transition to a child domain will be allowed for surrogate domains. See pull requests #365 and #381 for more information.

New module:

  • obfs4proxy
Name SHA-256 SUM
refpolicy-2.20220106.tar.bz2 965f98f0b68a24fd0b8e8d973d319332aea88973e1d6c455ef9c2a31aefaeaa6
Assets 3