{"push_id":672162485,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"a38c3be20805dea428e998c687df66805b1efcbb","before":"946d0237d2be451becd7d0a9e349be5098fc2dd3","commits":[{"sha":"58b302957652322288618ceda0771d39e74a9e46","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Update netlink socket classes.\n\nDefine new netlink socket security classes introduced by kernel commit\n223ae516404a7a65f09e79a1c0291521c233336e.\n\nNote that this does not remove the long-since obsolete\nnetlink_firewall_socket and netlink_ip6_fw_socket classes\nfrom refpolicy in case they are still needed for legacy\ndistribution policies.\n\nAdd the new socket classes to socket_class_set.\nUpdate ubac and mls constraints for the new socket classes.\nAdd allow rules for a few specific known cases (netutils, iptables,\nnetlabel, ifconfig, udev) in core policy that require access.\nFurther refinement for the contrib tree will be needed.  Any allow\nrule previously written on :netlink_socket may need to be rewritten or\nduplicated for one of the more specific classes.  For now, we retain the\nexisting :netlink_socket rules for compatibility on older kernels.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/TresysTechnology/refpolicy/commits/58b302957652322288618ceda0771d39e74a9e46"},{"sha":"a38c3be20805dea428e998c687df66805b1efcbb","author":{"email":"afd0674be3d8ca6f9a3bdb7b57fdb0c886370bc8@tresys.com","name":"Chris PeBenito"},"message":"Module version bump for updated netlink sockets from Stephen Smalley","distinct":true,"url":"https://api.github.com/repos/TresysTechnology/refpolicy/commits/a38c3be20805dea428e998c687df66805b1efcbb"}]}