v2.242.0

What's Changed

• Allow container access to runtime directories for crun masked path optimization by @sohankunkerkar in #393
• selinux: fix containers access for shared runtime directories by @sohankunkerkar in #397
• TMT: enable ELN jobs by @lsm5 in #392
• Allow containers to read TCP diagnostic info by @lsm5 in #399

New Contributors

• @sohankunkerkar made their first contribution in #393

Full Changelog: v2.241.0...v2.242.0

v2.241.0

What's Changed

• Allow domains that trans to container_runtime_t bpf:prog_run by @rhatdan in #389

v2.240.0

What's Changed

• Containers need to use hsa devices for ROCM by @rhatdan in #384
• Don't allow containers by default setexec setfscreate by @rhatdan in #386
• Fix denial for rootless docker by @rfrohl in #388

Full Changelog: v2.238.0...v2.240.0

v2.239.0

What's Changed

• Containers need to use hsa devices for ROCM by @rhatdan in #384

Full Changelog: v2.238.0...v2.239.0

v2.238.0

What's Changed

• label /run/sysctl.d correctly on creation by @Luap99 in #380
• BUmp to v2.238.0 by @rhatdan in #381

Full Changelog: v2.237.0...v2.238.0

v2.237.0

What's Changed

• Allow containers to mask parts of their /proc by @nalind in #367
• RPM: empty placeholder check section to silence rpmlint by @lsm5 in #368
• bootc/install_t: allow transition to container_runtime_t by @lsm5 in #370
• bump version to 2.237.0 by @lsm5 in #374

Full Changelog: v2.236.0...v2.237.0

v2.236.0

What's Changed

• Bump to v2.235.0 by @lsm5 in #358
• rpm/gating.yaml: fix typo by @lsm5 in #359
• add container_ro_file_t to the podman artifact store by @Luap99 in #360
• Allow super privileged containers to use RealtimeKit for scheduling by @debarshiray in #364
• Bump to v2.236.0 by @rhatdan in #365

New Contributors

• @Luap99 made their first contribution in #360
• @debarshiray made their first contribution in #364

Full Changelog: v2.235.0...v2.236.0

v2.235.0

What's Changed

• RPM: Bump Epoch to 4 by @lsm5 in #343
• Cleanup copr targets for packit, manage bats and golang deps idiomatically on TMT by @lsm5 in #341
• feat: support /var/lib/crio by @maage in #350
• TMT: Updates to account for official CentOS Stream and OSCI gating. by @lsm5 in #345
• container_log{reader,writer}_t: allow watch file by @haircommander in #352
• OWNERS: initial commit by @lsm5 in #353
• OWNERS: add wrabcak and zpytela by @lsm5 in #355

New Contributors

• @maage made their first contribution in #350

Full Changelog: v2.234.2...v2.235.0

v2.234.2

What's Changed

• rpm: ship manpage by @lsm5 in #339

Full Changelog: v2.234.1...v2.234.2

v2.234.1

What's Changed

• container_engine_t: another round of small improvements by @haircommander in #327
• Packit: update targets by @lsm5 in #330
• dontaudit spc_t to mmap_zero by @rhatdan in #328
• Allow kubelet_t to create a sock file kubelet_var_lib_t by @rhatdan in #329
• set container_log_t type for /var/log/kube-apiserver by @lsm5 in #333
• container-selinux install on non selinux-policy-targeted systems by @rhatdan in #332
• RPM: explicitly list ghosted paths and skip mode verification by @lsm5 in #335
• container_engine_t: small change to allow non root exec in a container by @haircommander in #337
• Packit cleanup by @lsm5 in #336
• Add proper labeling for RamaLama by @rhatdan in #338

Full Changelog: v2.233.0...v2.234.1