Skip to content

Releases: opencontainers/selinux

v1.5.0

03 Apr 19:58

Choose a tag to compare

Add support for init containers
Add KVMContainerLabels

v1.4.0

11 Mar 11:20

Choose a tag to compare

Chcon: use pwalk.Walk
pkg/pwalk: add
Chcon: add a benchmark.
Chcon: refactor
make sure the underlying error is checked
Remove unneeded lsetxattr() wrapper
label: consistently use early returns
label: don't stub functions that are already stubbed
selinux: allow stubs to be used for non-linux platforms
label: rename label.go to label_stub.go
label: use aliases instead of wrapper functions
label: deprecate selinux wrappers
label.InitLabels() use selinux instead of local wrappers
Use golangci-lint for linting
use pkg/errors for all errors
Add support for ComputeCreateContext and ClassIndex

v1.3.2

20 Feb 22:40

Choose a tag to compare

xattr: use x/sys/unix, simplify
Use /proc/thread-self/attr if available
Add/use readAttr/writeAttr
isProcHandle: simplify usage, improve diagnostics
Fix [Set]EnforceMode and SecurityCheckContext
getSELinuxfs: simplify using sync.Once
findSELinuxfsMount: optimize
TestSetEnforceMode: separate and fix for non-root
Remove SelinuxfsMagic
go-selinux/SetKeyLabel: fix for RHEL7 kernels

v1.3.1

26 Jan 05:18

Choose a tag to compare

Add errors.Wrap to indicate the file relabel failed on
selinux: verify that writes to /proc/... are on procfs

v1.3.0

12 Aug 20:26
bd44319

Choose a tag to compare

Allow users to specify file types was well as process types
Add tests for PeerLabel and SetTaskLabel for non-SELinux systems
Add SetTaskLabel() and PeerLabel()

v1.2.2

24 Apr 12:40

Choose a tag to compare

Ignore attempts to setLabels "" on SELinux disabled systems

v1.2.1

02 Apr 14:20

Choose a tag to compare

  • If users attempts to set process or key labels on a disabled SELinux system to "" then ignore it and return nil.
  • Also move to a more friendly go mod format

v1.2

13 Mar 21:50

Choose a tag to compare

Add interfaces to setup kernel keyring labeling

v1.1

18 Jan 19:47

Choose a tag to compare

Expand the list of relabel exclude paths
Verify labels when user passes them in

Finally declare a version 1.0.0

08 Jan 15:45
51c6c0a

Choose a tag to compare

We have been just vendoring, but in order to package software for debian, they want formal versions. Time to declare version 1.0 of selinux go bindings.