ANN: Reference Policy 2.20220106

Chris PeBenito <[email protected]>
Newsgroups org.kernel.vger.selinux-refpolicy,org.kernel.vger.selinux
Message-ID <[email protected]>
https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20220106

Notable changes:

* Module versions were dropped. Policy module versions were removed in semodule
   many years ago, so they no longer serve a purpose in the policy. The
   policy_module() macro still supports the version argument. If it is missing,
   a default version is set, to satisfy the policy syntax.
* The MCS constraints changed to reflect the usage in systems, primarily for
   separating containers and VMs. To separate a domain by MCS it will now need
   to opt in using the mcs_constrained() interface.
* New support for grouping user domains and their surrogates, e.g. user_t
   surrogates user_wm_t and user_systemd_t, such that allowing the user domain
   to domain transition to a child domain will be allowed for surrogate domains.
   See pull requests #365 and #381 for more information.

New module:
- obfs4proxy


-- 
Chris PeBenito
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.