Releases: opencontainers/selinux
Releases · opencontainers/selinux
v1.8.2
go.mod: willf/[email protected] -> bits-and-blooms/[email protected]
Changes: https://github.com/bits-and-blooms/bitset/compare/v1.1.11...v1.2.0
v1.8.1
Reserve one Category for the privileged containers to use
ci: switch to go 1.16 final
label_test: nits on errors
label_test: use t.Skip
.pullapprove.yml: remove
ci: switch from travis to github actions
Makefile: rm golangci-lint install, GOPATH check
support mips64le architecture.
doc.go: remove outdated description about the build tag
v1.8.0
v1.7.0
Implement get_default_context_with_level() from libselinux
Wrap some syscalls (lgetattr, lsetattr, fstatfs, statfs) to retry on EINTR.
Improve code quality by turning fixing many problems found by linters
Use bufio.Scanner for parsing labels and policy confilabelg
Cache the value for SELinux policy directory
v1.6.0
selinux: separate API from implementation
selinux: minor reformatting
Makefile: remove check for matching signatures
selinux: use consistent formatting for comment-blocks
selinux: remove goDoc from stubs
Fix compile error on go 1.13
Add glblub implementation
pkg/pwalk: fix data race with err
Document the selinux build tag
Make linters happy
vendor: update pkg/errors v0.9.1
mountLabel can be changed without changing processLabel
Allow the category range to be changed
v1.5.2
v1.5.1
v1.5.0
v1.4.0
Chcon: use pwalk.Walk
pkg/pwalk: add
Chcon: add a benchmark.
Chcon: refactor
make sure the underlying error is checked
Remove unneeded lsetxattr() wrapper
label: consistently use early returns
label: don't stub functions that are already stubbed
selinux: allow stubs to be used for non-linux platforms
label: rename label.go to label_stub.go
label: use aliases instead of wrapper functions
label: deprecate selinux wrappers
label.InitLabels() use selinux instead of local wrappers
Use golangci-lint for linting
use pkg/errors for all errors
Add support for ComputeCreateContext and ClassIndex
v1.3.2
xattr: use x/sys/unix, simplify
Use /proc/thread-self/attr if available
Add/use readAttr/writeAttr
isProcHandle: simplify usage, improve diagnostics
Fix [Set]EnforceMode and SecurityCheckContext
getSELinuxfs: simplify using sync.Once
findSELinuxfsMount: optimize
TestSetEnforceMode: separate and fix for non-root
Remove SelinuxfsMagic
go-selinux/SetKeyLabel: fix for RHEL7 kernels