Skip to content

Releases: opencontainers/selinux

v1.8.2

02 Jun 22:59
Compare
Choose a tag to compare
go.mod: willf/bitset@v1.1.11 -> bits-and-blooms/bitset@v1.2.0
Changes: https://github.com/bits-and-blooms/bitset/compare/v1.1.11...v1.2.0

v1.8.1

11 May 18:09
Compare
Choose a tag to compare
Reserve one Category for the privileged containers to use
ci: switch to go 1.16 final
label_test: nits on errors
label_test: use t.Skip
.pullapprove.yml: remove
ci: switch from travis to github actions
Makefile: rm golangci-lint install, GOPATH check
support mips64le architecture.
doc.go: remove outdated description about the build tag

v1.8.0

15 Dec 10:26
Compare
Choose a tag to compare

Remove the "selinux" build tag.

v1.7.0

08 Dec 12:18
Compare
Choose a tag to compare

Implement get_default_context_with_level() from libselinux
Wrap some syscalls (lgetattr, lsetattr, fstatfs, statfs) to retry on EINTR.
Improve code quality by turning fixing many problems found by linters
Use bufio.Scanner for parsing labels and policy confilabelg
Cache the value for SELinux policy directory

v1.6.0

07 Jul 10:45
Compare
Choose a tag to compare
selinux: separate API from implementation
selinux: minor reformatting
Makefile: remove check for matching signatures
selinux: use consistent formatting for comment-blocks
selinux: remove goDoc from stubs
Fix compile error on go 1.13
Add glblub implementation
pkg/pwalk: fix data race with err
Document the selinux build tag
Make linters happy
vendor: update pkg/errors v0.9.1
mountLabel can be changed without changing processLabel
Allow the category range to be changed

v1.5.2

25 May 10:48
Compare
Choose a tag to compare
Remove potential race condition, where MCS label is freed

v1.5.1

06 Apr 17:33
Compare
Choose a tag to compare
Make sure selinux and nonselinux exported functions match

v1.5.0

03 Apr 19:58
Compare
Choose a tag to compare
Add support for init containers
Add KVMContainerLabels

v1.4.0

11 Mar 11:20
Compare
Choose a tag to compare
Chcon: use pwalk.Walk
pkg/pwalk: add
Chcon: add a benchmark.
Chcon: refactor
make sure the underlying error is checked
Remove unneeded lsetxattr() wrapper
label: consistently use early returns
label: don't stub functions that are already stubbed
selinux: allow stubs to be used for non-linux platforms
label: rename label.go to label_stub.go
label: use aliases instead of wrapper functions
label: deprecate selinux wrappers
label.InitLabels() use selinux instead of local wrappers
Use golangci-lint for linting
use pkg/errors for all errors
Add support for ComputeCreateContext and ClassIndex

v1.3.2

20 Feb 22:40
Compare
Choose a tag to compare
xattr: use x/sys/unix, simplify
Use /proc/thread-self/attr if available
Add/use readAttr/writeAttr
isProcHandle: simplify usage, improve diagnostics
Fix [Set]EnforceMode and SecurityCheckContext
getSELinuxfs: simplify using sync.Once
findSELinuxfsMount: optimize
TestSetEnforceMode: separate and fix for non-root
Remove SelinuxfsMagic
go-selinux/SetKeyLabel: fix for RHEL7 kernels