passt-selinux-0^20240806.gee36266-7.el9_5> M Mv ĉJ4!!%joLne)Ip-Bm5 ']greleng@rockylinux.org p-Bm5 ']>-}+!I|THh');$ I9x p h*4HOyx/z_{?ԐZFe`)Jìҿ*Z5aC{]VA/SMXOކY7V:@F$_SV-7U9"uGjVU$}P(SX36;'>)yn>ւ7GpSH2Jd26&i"~:HBY b=*b87bdf8457aa71c64b2a41945457fc8a3debd7988315272f5512cb33f6b87fbd4877c87e9aed9ef980df5b256e43748318022526Y\|0WG7R9>B M? =d$ , P Zu4 ( 4  :  @  L      / > h t   ( 8 9 <:t=:>B@JGTH`IlXpYt\]^b defltuvCpasst-selinux0^20240806.gee362667.el9_5SELinux support for passt and pastaThis package adds SELinux enforcement to passt(1) and pasta(1).gޗpb-48a2a7a2-d1f3-4c53-8ad1-a04934dcc216-b-i686XRocky Linux 9.5Rocky Enterprise Software FoundationGPL-2.0-or-later AND BSD-3-ClauseRocky Linux Build System (Peridot) System Environment/Daemonshttps://passt.top/linuxnoarch if /usr/sbin/selinuxenabled; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/passt.pp || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/pasta.pp || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r passt &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r pasta &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fiutf4gިgީ2a672844e4ac5e57596b511e24e141810e07aa6d4c8a2479d11138fb434612b0da84603a976f7f01b671de22d087595719f41d440068bf550c2d89ce1673674e21002f72d04d749ec70c0bc73a9c6c1df798250b0e856c68717edd85c673b072rootrootrootrootrootrootpasst-0^20240806.gee36266-7.el9_5.src.rpmpasst-selinux      /bin/sh/bin/sh/bin/sh/bin/shpasstpasstpasstpolicycoreutilspolicycoreutilsrpmlib(CaretInVersions)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policy0^20240806.gee36266-7.el9_54.15.0-13.0.4-14.6.0-14.0-15.4.18-14.16.1.3gw@g@gg gE@f@faf@fy_fM@e|?d@d@dQdd@dK@dStefano Brivio - 0^20240806-gee36266-7Stefano Brivio - 0^20240806-gee36266-6Stefano Brivio - 0^20240806-gee36266-5Stefano Brivio - 0^20240806-gee36266-4Stefano Brivio - 0^20240806-gee36266-3Stefano Brivio - 0^20240806-gee36266-2Stefano Brivio - 0^20240806.gee36266-1Stefano Brivio - 0^20240726.g57a21d2-1Stefano Brivio - 0^20240624.g1ee2eca-1Stefano Brivio - 0^20240510.g7288448-1Stefano Brivio - 0^20231204.gb86afe3-1Stefano Brivio - 0^20230818.g0af928e-4Stefano Brivio - 0^20230818.g0af928e-3Stefano Brivio - 0^20230818.g0af928e-2Stefano Brivio - 0^20230818.g0af928e-1Stefano Brivio - 0^20230222.g4ddbcb9-4Stefano Brivio - 0^20230222.g4ddbcb9-3Stefano Brivio - 0^20230222.g4ddbcb9-2- Resolves: RHEL-83155- Resolves: RHEL-75645- Resolves: RHEL-74301- Resolves: RHEL-73251- Resolves: RHEL-68948- Resolves: RHEL-54268- Resolves: RHEL-53189- Resolves: RHEL-52638- Resolves: RHEL-44837- Resolves: RHEL-37647- Resolves: RHEL-19590- Switch to copies instead of links for pasta: previous workaround unreliable - Resolves: RHELPLAN-155811- Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links - Resolves: RHELPLAN-155811- Drop user_namespace create allow rule, incompatible with current el9 kernel - Resolves: RHELPLAN-155811- Rebase from Fedora 39 - Resolves: RHELPLAN-155811- Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file! - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089) - Don't install useless SELinux interface file for pasta (rhbz#2183106)- Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089) - Don't install useless SELinux interface file for pasta (rhbz#2183106)- udp: Actually use host resolver to forward DNS queries (rhbz#2177075) - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075) - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075) - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084) - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084) - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084) - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084) - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084) - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813) - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813) - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813) - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813) - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813) - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813) - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813) - fedora: Install SELinux interface files to shared include directory (rhbz#2176813) - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080) - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080) - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080) - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083) - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813) - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813/bin/sh/bin/sh/bin/sh0^20240806.gee36266-7.el9_5passt.ifpasst.pppasta.pp/usr/share/selinux/devel/include/distributed//usr/share/selinux/packages/targeted/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19i686-redhat-linux-gnuASCII text if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi/bin/shutf-8019714c6a0d3eccca7396c61b141d9e1210e010f9448bcfa76c85d6bf00a18bccc429a23cfd607457b9bfc9ee27b9245b6659ae5b65f55872048deed9fdb0721?(/h̎LR񳳳O OO > b`uh@%IU@c43[X@7Bm?&HdZ9y@ l ̘Tp>BÉ)V=eY2.urTL'LѽKs'3lxzK 6]LHүzm?6՞Ku8gjN65j:aʌ, ,ur)WRGpZK,Rf`ko_kxòhx8 2,+W naڢZ 8 Gl)HWկp`s;sl5h`b۽]-9(ȀNimq7j w3l̆ccS0cȴ*VR*:v*/eR]Z}͢DzrR`Z:T{yA"*tBxpw)ya̅HB&O֛鮦D a,vtrz%miD8缃df HqYzzaF\~E&FtK;6JCKqƬ5Bg}y.]j- %rL["ikz*6\ɏjC8zn=XgךB65P+rK1$8CȒ*O.qF'#ca\!G;LtiK^ .? Q?;b >ECy`9 ^b^s&C8Ai32nJ9ZO})Rêo?ߴzxg2 C:kfكҥ]{:~E@@53  @Eu6LVkt湟y9}*RV YWҚ,Q*⼜ňեZ͍y|#Ҫr|<u8GLʉAFLh* ndGc7g}I/i7Q`TLC=w x# *uq@Zo\ZjX@V7a1,R^-^lRod4*p?'ėeA]Ka_+jR.n'˺Fs@"Y>#d.'$h ܹi~݋KJFr_нxKvb%e@K'ì1DH+jK&6K;4k\aA^5lxF .8 iR-zFdhA͠Z '^h9q"%t($TAiQe 'dTPq* ʇʩ"T,/C\xAIŴbT2FĴ"6FKqdTHl_lB%$Y2.D (d~a}K|uhRMk,YuZYBR1La m>!L(](t J &#OCVc ν7\f\:ݸ@Lj3~!u“ 0)pG6gl1ru/F0i:EֵN*wZx֞= =-/p+哿Nbði#eҧRs\KLM+"L4ÛTsd0<-HRxU/-m؝ ؊3~P*.^:0 Q$)d8C ˅$AsyȜAp$XE! 6 bbKCwO;ooz8Eˉ5 8VRHhA=}v=կ._3 UOrv~J v*(Q;3`͎}~DE17M1=rϯZܸR'vMZ7IuvgUfpkݼp1sh!V1Ȉ?,wp3I\ulTM93s6-,O*ä[v% :Mҏ^DMHUzB-/?yYRsrPS=r'S<\Bg+h>e_C>#fࢦ"3,Cvۀ$ZumŞk=sB5lQlyNZhQq @ndkhg-w6H K*Ȟ5ç_0@?S-D3dM\q;}b>Uv^`{3@bДvSa.imluJ5sHmUJ)#Y|jۛ !\jç]HRa!.'ʈP+Jsh*PAcݮ@od+g&Y_cvI&lR8JE(y ˧dj blcfRX1ؐ`  tpE͊L?`ul+vnJ.~q>t5qk[ TùC$TD{gx&1m0LEiR_xuPaNtH%Lߚ27Ec̮˅ƹ2 DtPs aRq wu4 %UK A/qm/, MTqs|(]4s}{$A™v=,d70h`TBvqvƨ\>mI*3HHN!oU=P6C'&nŷ7rB:DNW+ FEA|_8{3+KT.5)-`uL.>yt-`T?(VMAz_;M-p-;B91i2=bWLlaDR A=2-RKDݏQ+ aQ%^[!-h[;I.khsŠ"L-ehiU5 |w(pHZ$hT2C}b&j6T}NĞ5W}E*G" SqIGF[01% A';&ejd=JX"ȕ}o׷L2$NH"#>٨htPfgЅ( }#skiGDFpěd0=n;`)OKhAϻint0d0x]FJukyIFz.nGk*cYFs+r._mxcːaتj1tdˢe2u72/W 10ҷbDK6-;6Ceu30rQөIjGbq#]!+D uHFy)ġ&D.mL\ςpQk'|N΢p pk,q4|>Op\,.JvhzkRbF0y5k|Csg A+VGcjWw#e!wI'k 6q 8=˙P:Lj%_h0V" BW$מL.H¤IDN%;k8Z]ŷQN3 QȪFyhj>O䆎Jpz8 }#A9 $ML);p$+]tNQXRijh42uE,v'2cet k=P.D|IoְG1ZKo4ߔᴼKҡ.D=&2pHA'VM)xe_hk3C XA"{+M#TLT3 ]8K¼%$#s&G0+fuu%*rR)ܕ'PC9 tDƑ?ްsKE A#8AZ?rKyVP-{_3~+۹L>!:B`zfa qZ{T:Zw-ɍFXw 9o߳nنm,YCM7hp(h782ۖqQZ6,1hq9ir6֋29F_Fqd3[R+mW&Q6JR3"zA Fݠ`;iXly2Y1S yroPw(}(cA#P#~zK#*ZsJg=):CB7c0x$3tcq D"d%3i+RFcw`J+:XM"`@VHbikOf! n9^YF꣫(fi5b*TDtzYXeFl]#y.9_Ui5LX5Ebe8T^n8=4DGD`b)F&J-5јCwpנphȿK"ω"e0f@a^cFW{򊁠#?iq? “9aıOGy%ӗP4 BI=eDXuL{{Jcc<ʣd8&>Ff6:5̔'wiڏ29Pg8 ̵>>-lp ÈGu~(ah1 f($pC}( i T,k5 x;pKP! YY??͗]KNBݤWs{ ]>߯\?」 ! s5AÂxݶ1\e.G@tT~ bCV˖&n(+K*lZS_!}OzejNq+l >9^41٨VfugO ˦3X!~L7?AOdh_]dM X"+/*lG0HF;2ٛi*'',>j *79ۻ pr° 9^Pc(U9|nJ%xМf*Kng~a`lB]gdW1rjћq%lR!O|%G"s-#DKn/wl<6:z"nkn5og`cH:JkYƁM g#r$xH-|'m$2|LϹ_J,rעS[ ll:쩸-?r<*p i`_a)oӾ$7XU!%ǯspsԡ9m1w}|Nu[<{0"<#H*f{|֜EieB`ISi 48*>ba&NV?t "G %@J~~vLMj4")Ѩ,31ΚzWy׽YUՐ܏uΐ9E'E{"j{E+tJddր cԹ_N`ŁU"=dv;քrThIPSѽ[MfOtb,FjKEV kXxeTZASr(S%f\#0a,JͽB/-_76 KPbc#5Nh1r\ wCzL";+of 9KN(߇>dNbG0RLlR7E|HS&҈VF03r1+<Z"h&'3X>uwG H?FfnA ؁r7Ntt  pa ibalge   tcpcme dcsdn  ssmcnodfdtunbpf hxdp ifv p2PpD!Q1 D03!"9iZ,ZA k+#J.E+8Iȓ.wݩ;!W,ʹެds]pa@>g#Tnf h|Z4CCLqacr2EP G[8 k_خ{Z'NOƹzOXj2hܐ`8I9Mkv& :eP2-^;DuێG4`c!'=#mNâNwo,389:6yyH}F?._u}8%nRppЊ*'5﷏4<_Xۑ w8.o `I7n$ɰ&Pc宛MH'}s'_0>9'u ^0GVFPY^Ev2lS A8bt͉j($"11XD4abƀעv9lEvcc!`<% f*7f˾\&؉FΑzLjʷVGV5 U~5>B|\9߰SH\j[=Պl҄[@Ls H -8Bϧ1碑@y=𡀭g/ l@PT,A6CP4_, =tK@x&Xy-ʹ(H+˷X^ \@.U"<}38$R ސ >E vZ'|q$E7I(/ݴJ lŰhbRɦۀ_Smg'p}MD)oQ8j:|!K"&$$]NBVaD5,_T @$I0C@D8?VzrBrL'LhQk{#ptDr.jM[y:AoZ¨v"VWumX_-) lR %M$'MLN+ 쇙f%J^ΔE]B~adL0叺H+$tS a&x]Z~2Sq qTWDI(+VKB*Zx\qxbq(!sXRNxՎσM+n@@  !xgᵰ>3Dz0Ez׳3zWG5a|$h㷭^\ 3aĔ*̪?YOZ}'H.=w7iev N߉ƺFt-9y+{҆y/_ӥnXiq_ L}<0ŸI3}~AW "S/W|ɿ]--;ԯi~@VX2 |q%w~qer&T.ڭC|o5ηv|H^@<~` {iS'ЃBZ$~5oFoX}Tj>ir`ܪdXY( r[L'ܕOc>,1NJQġ0"dl1|anvuĬh:md# !:Htsq`GBCx-➊- fn)ö W)COj~eb !-!`+I #Ahz %?yZ7R>}7>ǯoeO%kg0w!b6tԢF/72fs3KaɣhUB)0hu]n6!I:W90]LX8D=72LDf&_ ˯܋P4-s_‚pGn-O3B P8Ei8rt)7vm|_p'9+D:Txph{j$M`Mv_oV#F`yUdOaP+d=2>7}fxF^Cb=5O+kƉs[Wb,&tl(aY6#C5a BR1-bV('CRP:N2- ;h-d?H,z%'S;( i3' ȻWS㻜f MEvއC.Nn{G7}l6nHk$Z&EQL&b i9F^8[jÔ ꓐI-'IE{y4A-PӢȳKTTZeN"L垳<+J6_yЇ\iP_&zכ({009[!ͱP9C/"*9rÐH'hzJ{1: D?FXHK]ºզ:r|W 5<#M#qıVJI]9y\T4Äſ9t@BAm}3 d8M8Ü):}Nl-> ğ0٭bkPRzPqth_-@8Y񙲾&×9ަ:ݴsm0KoXu;- ,:ڳlDaHuE yk|zGt|3CdɌ,)bio9|Tf/xHF_93 `֯X#$((P(AMoAQFr8͓5q#>ppz\h*+iHƹj"h O6$A sBD:°DC B D$hFDJRe3vxehJ^KҬG U-D\]GHOubwq$]]齊$1dTGPKb+x5z!\8WG+$dx~`v@or=rE#A6CB'dHAI7)`r.{å߉@)={CK9'G~QF(~VN/AjDmexFQcz2"u:pN&\}@ݑ&@#"8QSK*Ŕvf1B[ ˏZ2Ca(4h2 I  K  B! !Ʃ'ɰ18{||st(Ls 1Jؖ wTo}k6ĔԼ\y>D@Yhw$6Y.]fJ. m> \hiF>H_d'F0w:ɟ/Ҵ/(,DSU0fJD (JdcPȅ0LA9!U66 -vo恼"t ?HI4C# 5O1AL5P&PO!`sl.UVl8:AqtHg޽ItG ֈQg71,2GS G2|Sm}d[q9Hg~8\G/#c^=Lr 7~m}[j_ i3!XL)TM e]'~BŠk>y 6 nJ1RuVԜy(ID4[Sm={VIoQ 1Xy5T}8%rˠuϢ?|:=ŮHux&ϛFSj@r=uXLoA:_z*JBZp}prB2$^L)q(A[LuOO Qbu<78PQJϹJEv> 0|șN 'lda^z{ g86p8D[VtW̓(uoՌReEG;o ,-D\║ 1ҰE,n/u<6 ~aEZ|{|N"v*]FmR]3$e!ϫՃK fAU;(.Sii 2c; ]\,P{*֦jSYv+ɛYdl= UvG=*[lhm{O` w(<zBZ.'2p.jɰr#D7eʊCԵ{#e!eZBH- k2"f۩gɡ]ޭuχ$LW;