fapolicyd-1.3.3-100.el9 | Build Info | Inferit OS Build System

Information for build fapolicyd-1.3.3-100.el9

19765

Package Name

fapolicyd

Version

1.3.3

Release

100.el9

Epoch

Source

git+http://git.inferitos.ru/rpms/fapolicyd#54fe72ef31f68b4c593b5861d4fa7fd103151ff5

Summary

Application Whitelisting Daemon

Description

Fapolicyd (File Access Policy Daemon) implements application whitelisting to decide file access rights. Applications that are known via a reputation source are allowed access while unknown applications are not. The daemon makes use of the kernel's fanotify interface to determine file access rights.

Built by

tigro

State

complete

Volume

DEFAULT

Started

Tue, 08 Oct 2024 12:36:08 MSK

Completed

Tue, 08 Oct 2024 12:42:00 MSK

Task

build (inferit-9_5-bootstrap, /rpms/fapolicyd/:changed/i9c-beta/fapolicyd-1.3.3-100.el9)

Extra

{'source': {'original_url': 'git+http://git.inferitos.ru/rpms/fapolicyd/?#changed/i9c-beta/fapolicyd-1.3.3-100.el9'}}

Tags

inferit-9_5-bootstrap

inferit-9_5-init

inferit-9_6-init

RPMs

src
	fapolicyd-1.3.3-100.el9.src.rpm (info) (download)
aarch64
	fapolicyd-1.3.3-100.el9.aarch64.rpm (info) (download)
	fapolicyd-debuginfo-1.3.3-100.el9.aarch64.rpm (info) (download)
	fapolicyd-debugsource-1.3.3-100.el9.aarch64.rpm (info) (download)
i686
	fapolicyd-1.3.3-100.el9.i686.rpm (info) (download)
	fapolicyd-debuginfo-1.3.3-100.el9.i686.rpm (info) (download)
	fapolicyd-debugsource-1.3.3-100.el9.i686.rpm (info) (download)
noarch
	fapolicyd-selinux-1.3.3-100.el9.noarch.rpm (info) (download)
x86_64
	fapolicyd-1.3.3-100.el9.x86_64.rpm (info) (download)
	fapolicyd-debuginfo-1.3.3-100.el9.x86_64.rpm (info) (download)
	fapolicyd-debugsource-1.3.3-100.el9.x86_64.rpm (info) (download)

Logs

aarch64
	root.log
	state.log
	mock_output.log
	installed_pkgs.log
	hw_info.log
	build.log
i686
	noarch_rpmdiff.json
	root.log
	state.log
	mock_output.log
	installed_pkgs.log
	hw_info.log
	build.log
x86_64
	noarch_rpmdiff.json
	root.log
	state.log
	mock_output.log
	installed_pkgs.log
	hw_info.log
	build.log

Changelog

* Wed Jul 19 2023 Radovan Sroka <rsroka@redhat.com> - 1.3.3-100 RHEL 9.5.0 ERRATUM - rebase to fapolicyd-1.3.3 and fapolicyd-selinux-0.7 Resolves: RHEL-36285 * Wed Jul 19 2023 Radovan Sroka <rsroka@redhat.com> - 1.3.2-100 RHEL 9.3.0 ERRATUM - Rebase fapolicyd to the latest stable version Resolves: RHEL-430 - fapolicyd can leak FDs and never answer request, causing target process to hang forever Resolves: RHEL-621 - RFE: send rule number to fanotify so it gets audited Resolves: RHEL-624 - fapolicyd needs to make sure the FD limit is never reached Resolves: RHEL-623 - fapolicyd still allows execution of a program after "untrusting" it Resolves: RHEL-622 - Default q_size doesn't match manpage's one Resolves: RHEL-627 - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D') Resolves: RHEL-817 - Fix broken backwards compatibility backend numbers Resolves: RHEL-730 - SELinux prevents the fapolicyd from reading symlink (cert_t) Resolves: RHEL-816 * Fri Apr 14 2023 MSVSphere Packaging Team <packager@msvsphere.ru> - 1.1.3-104 - Rebuilt for MSVSphere 9.2 beta * Mon Jan 30 2023 Radovan Sroka <rsroka@redhat.com> - 1.1.3-104 RHEL 9.2.0 ERRATUM - statically linked app can execute untrusted app Resolves: rhbz#2097077 - fapolicyd ineffective with systemd DynamicUser=yes Resolves: rhbz#2136802 - Starting manually fapolicyd while the service is already running breaks the system Resolves: rhbz#2160517 - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled Resolves: rhbz#2160518 - fapolicyd: Introduce filtering of rpmdb Resolves: RHEL-192 * Fri Aug 05 2022 Radovan Sroka <rsroka@redhat.com> - 1.1.3-102 RHEL 9.1.0 ERRATUM - rebase fapolicyd to the latest stable vesion Resolves: rhbz#2100041 - fapolicyd gets way too easily killed by OOM killer Resolves: rhbz#2097385 - fapolicyd does not correctly handle SIGHUP Resolves: rhbz#2070655 - Introduce ppid rule attribute Resolves: rhbz#2102558 - fapolicyd often breaks package updates Resolves: rhbz#2111244 - drop libgcrypt in favour of openssl Resolves: rhbz#2111938 - Remove dnf plugin Resolves: rhbz#2113959 - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works Resolves: rhbz#2115849 * Thu Jun 16 2022 Radovan Sroka <rsroka@redhat.com> - 1.1-104 RHEL 9.1.0 ERRATUM - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path Resolves: rhbz#2069123 - Faulty handling of static applications Resolves: rhbz#2096457 * Sun Apr 03 2022 Radovan Sroka <rsroka@redhat.com> - 1.1-101 RHEL 9.1.0 ERRATUM - fapolicyd denies access to /usr/lib64/ld-2.28.so Resolves: rhbz#2067493 * Wed Feb 16 2022 Radovan Sroka <rsroka@redhat.com> - 1.1-100 RHEL 9.0.0 ERRATUM - rebase to 1.1 Resolves: rhbz#2032408 - introduce rules.d Resolves: rhbz#2054740 - remove pretrans scriptlet Resolve: rhbz#2051481 * Tue Dec 14 2021 Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101 RHEL 9.0.0 ERRATUM - rebase to 1.0.4 - added rpm_sha256_only option - added trust.d directory - allow file names with whitespaces in trust files - use full paths in trust files Resolves: rhbz#2032408 - fix libc.so getting identified as application/x-executable Resolves: rhbz#2015307 - fix selinux DSP module definition in spec file Resolves: rhbz#2014449 * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.0.3-4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Tue Jul 20 2021 Radovan Sroka <rsroka@redhat.com> - 1.0.3-3 RHEL 9 BETA - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm Resolves: rhbz#1932225 Resolves: rhbz#1977731

Main Site Links:

Information for build fapolicyd-1.3.3-100.el9