v2.195.1

Readd missing allow rules for container_t

v2.194.0

Allow syslogd_t to use tmpfs files created by container runtime

v2.193.0

What's Changed

• Allow containers to mount tmpfs_t file systems by @rhrazdil in #196
  Label spc_t as a init initrc daemon
  Allow userdomains to run containers

New Contributors

• @rhrazdil made their first contribution in #196

Full Changelog: v2.191.0...v2.193.0

v2.191.0

Create container_logwriter_t type

v2.190.1

What's Changed

• Support BuildKit by @AkihiroSuda in #189
• container.fc: Set label for kata-agent by @ManaSugi in #194
• Support BuildKit (cont.) by @AkihiroSuda in #193
• support nerdctl by @ningmingxiao in #192

New Contributors

• @ManaSugi made their first contribution in #194
• @ningmingxiao made their first contribution in #192

Full Changelog: v2.190.0...v2.190.1

v2.190.0

What's Changed

• Packit: initial enablement by @lsm5 in #185
  Allow iptables to list directories labeled as container_file_t

v2.189.0

Dont audit searching other processes in /proc.

v2.188.0

What's Changed

• Allow confined containers to mount overlay filesystems by @nalind in #181

New Contributors

• @nalind made their first contribution in #181

Full Changelog: v2.187.0...v2.188.0

v2.187.0

Allow container domains to use /dev/zero

v2.186.0

What's Changed

• Create policy for a container_device_t by @rhatdan in #178
  Allow containers to shutdown & setopt userdomain:sockets

Full Changelog: v2.183.0...v2.186.0