-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 04 Oct 2021 15:06:54 +1100 Source: refpolicy Architecture: source Version: 2:2.20210203-8 Distribution: unstable Urgency: medium Maintainer: Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org> Changed-By: Russell Coker <russell@coker.com.au> Changes: refpolicy (2:2.20210203-8) unstable; urgency=medium . * Label /etc/ppp/ip-pre-up as pppd_initrc_exec_t * Allow wireshark to rw DRI devices, read crypto sysctls, rw the xserver mesa shader cache, read the kernel network state, have execmem access (probably needed for one of the many shared objects it uses), have setsched access, execute lib files (for it's helper programs), manage xdg config files (gives warning if it can't do this), manage xdg cache, and read xdg data files. * Allow acngtool_t the dac_override capability for managing log files * Allow pppd to connect create and ioctl pppox_socket and allow it to map pppd_runtime_t files. * Allow kmod_t, ifconfig_t, and ping_t to use unallocated ttys (for sysadmin login on boot failure) * Allow ntpd_t to start and stop generic units when systemd is used, for systemd-timesyncd. Checksums-Sha1: 8f9996930adfe22b6b7e6700258a48fe66eb3c72 2448 refpolicy_2.20210203-8.dsc 5e90802ad89fdf22337423244d15bae847e16855 101176 refpolicy_2.20210203-8.debian.tar.xz 7202c383296371a8440b75f32d9c82b507a0b66f 8098 refpolicy_2.20210203-8_amd64.buildinfo Checksums-Sha256: 95b6b1721ab1d924b8748f5c756a95283a8461c38133b0e862288b9cf9ce9401 2448 refpolicy_2.20210203-8.dsc c4984bcfec22d050917d793029c04cb877d0ce358b47cdb2d2814bb0706c1541 101176 refpolicy_2.20210203-8.debian.tar.xz 7ef3ffad920dc10306f633b065df9496c3deb5bc9dfde9edb4167fe8deeb3d24 8098 refpolicy_2.20210203-8_amd64.buildinfo Files: 27cc50712a6c6b49d142956f6801c7e8 2448 admin optional refpolicy_2.20210203-8.dsc 7ca8e8ca31e568f5b365712eb34853c3 101176 admin optional refpolicy_2.20210203-8.debian.tar.xz 3c315eefddcf2c8f293a4120bc919bab 8098 admin optional refpolicy_2.20210203-8_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEn31hncwG9XwCqmbH0UHNMPxLj3kFAmFhU7kACgkQ0UHNMPxL j3lq4A//c9yzHvStajSOqvpUdnF7kJZxkex1bj5qzfEVsgnmVtxGdjJp1d1CLimg Si6ko3N2R18SvjHv0O2IwCvT1i2fHJyJ3SI3LHEjKp8IFEOrdcQoZ8K5+VXuFgu8 qYwpgiTig1n35mAmnVB0+XeG0o4U2H7fgXOSuu4i7US6KuoQRPcCIcwq2ito4CgJ eVuZeFpCf8ScT5Z0McIb0km48XXm8Pf2KitwQZ3rfjv953Bq23bwY76J/BLKe+Ip Ps7pbWsjhE0V4u+RSlVSJ+Gokw07UWe2E4JlIiQnVa4csF1FaAB9FlC5i8pgckMD eoNScjL4XTsWltJblDdFdz2HpDa9rL0jKnxM7LRur6ejY8SZy4zSylZVbXIQm4AW 1S/OWcIaoAyAptDO1T+PosIXuH+oWESEYEmfxnwh1NSQ8hsAqqKD7+WEPQRvaX5o hlsWLL/R1FiAqEssjMt4dB1txTNdItuI529DCIgDULU35v4saZFwmtz4Sg+QDLsw 2D8tiHkjwdC+pt1WiZYFJiA4PbfogTqel6cDsNV6uawE2X6MpJh37A92iQ1GOxzQ izFZdt7odIYnp8SmWD4dkXLHZe1cpOigSdFLjn033tlpJSCZi7KV06K6wKkk2FBh PZJ67c3pPzsAPedXpUqgbBIpX1gZzsV69iDc3XVwp1JwjSp4jJU= =rFxC -----END PGP SIGNATURE-----