-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 19 Oct 2025 16:57:18 +1100
Source: refpolicy
Architecture: source
Version: 2:2.20250213-11
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>
Changed-By: Russell Coker <russell@coker.com.au>
Changes:
refpolicy (2:2.20250213-11) unstable; urgency=medium
.
* Added usbguard policy
* Allow chromium to stat xattr filesystems, read xkb libs, and give fifo
files to the window manager (to stop it crashing on paste)
* Allow pulseaudio_client domains (including the $1_wm_t domains) to mmap
the tmpfs files related to pulseaudio (for Chrome mostly)
* Allow systemd_passwd_agent_t to watch user runtime dirs for systemd
daemon restart
* Allow dhcpd_t to execute ntpd_exec_t in ntpd_t for dhcp scripts and start
generic units
* Allow systemd-nspawn to use user terminal devices for directly running by
sysadmin and allow managing mnt_t files
Checksums-Sha1:
ef15d64364500a066c3f327e4543cceef259a028 2502 refpolicy_2.20250213-11.dsc
05e963243a5c6b4b7b3f4d985916330924b055c8 118740 refpolicy_2.20250213-11.debian.tar.xz
e5e76aa52acc4ff81f2542063f9043f152d27441 8509 refpolicy_2.20250213-11_amd64.buildinfo
Checksums-Sha256:
97af2ec9b034aadc805331b6866837a3059840524d90b4ad350ab41ba3f8fed5 2502 refpolicy_2.20250213-11.dsc
e4704a228484f944fe43faf275be10944e34b9643010786e2d0aa3634e8454b6 118740 refpolicy_2.20250213-11.debian.tar.xz
2c53bc77ddd66cd2111ca6bdfcea9d1eb5aab5cd983c8c1b1ff7318eae404f18 8509 refpolicy_2.20250213-11_amd64.buildinfo
Files:
59497a4b79145518a6f2789356af1504 2502 admin optional refpolicy_2.20250213-11.dsc
7a54d1a9d667ead77260c86f470b9441 118740 admin optional refpolicy_2.20250213-11.debian.tar.xz
e7d2429af6f1d7bb44dbf75bca54b4df 8509 admin optional refpolicy_2.20250213-11_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=6fLj
-----END PGP SIGNATURE-----