trafficserver-selinux-9.2.2-1.fc39 >t 6 6_6,0 D3!92d LuZLdd uZLžCЊ ˥>39ڄr4rtLѢ ]qH"Kmq$\S7[%N82xx[!O`>4WNɱόwWP:1݂H=)yǏA@b{=3}, c ~ ONy6*}YfH0ZmI qe(6>WjzNW *Q?*B"d0Wo@L*1z'>@Zf.GIb7>r }7RK6ba TMں0x"L9 ,Hm:,\^t|g q[Xc@FG1+,{91ČF^" H,vHoOjwme^ l 6sGLOhnC" X:Ak-G9Xf#ڮ|ș sU\b\_Ojo]OYGa%%d$¼3-x=v>"7885098e75b3077c0afdd06982f84ee7a708529eede59defe7ae207e8641af88e29a21d4f808c43d03588b036fa724bb0fce950e2030204388b603e004630440220784b51931b01a74533caf72843f6ee9721de26f1cd9be525b7124d3736603f7202203d45c04dd8518690d6f35529216f88b621674aba94d7f2f4a266888b4ebc0182030204388b603e00463044022006b614567dccdd2004674dabe8e1341a6b15d7008228237e7688cea4145dadfe02200f5adb1b75416dd712c63db99fd000cb95885cd9738556a636031435b81ff156I3!92d LuZLdd uZLdQC8*D^( wT;5%i3kդpVqd,=]ʑY9z/=wX:8o&Z ϯ-჻d~Hq4RY&MgӃ&w(+$0 ="_'N݃MU0KΊ=dZ8.{l$ aq6-CQdR숬y>]i;u4:$CM6˛6ja|IB]_Δ?τҭf4:>`A9?)d % Bhl  , 8  >  D  P        ( 4 L  ( 8 9 (:4=E>M@UG`HlIxX|Y\]^bRd"e'f,l/tHuTv`lpCtrafficserver-selinux9.2.21.fc39trafficserver SELinux policyTrafficserver SELinux policy moduledbuildvm-x86-15.iad2.fedoraproject.org9Fedora ProjectFedora ProjectASL 2.0Fedora ProjectUnspecifiedhttps://trafficserver.apache.org/linuxnoarch if /usr/sbin/selinuxenabled; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/trafficserver.pp.bz2 || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r trafficserver &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi fi .{dddaf9ca27482c005c42ce6de7033f0d4063321e0e5f2ec9348af8904f9ceb08df87984b1d21655015e2516175dc508c2df9340d6d479b94f300811dd5095a838cc@rootrootrootrootrootroottrafficserver-9.2.2-1.fc39.src.rpmtrafficserver-selinux     /bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-138.24-1.fc3938.24-1.fc394.18.92dddZ@cʂ@cR@cc*b@bb&b=b|bs@bobf@b]RbN@aya8Jered Floyd 9.2.2-1Fedora Release Engineering - 9.2.1-2Jered Floyd 9.2.1-1Jered Floyd 9.2.0-1Jered Floyd 9.1.4-1Jered Floyd 9.1.3-2Jered Floyd 9.1.3-2Jered Floyd 9.1.3-1Jered Floyd 9.1.2-9Jered Floyd 9.1.2-8Jered Floyd 9.1.2-7Jered Floyd 9.1.2-6Jered Floyd 9.1.2-5Jered Floyd 9.1.2-4Jered Floyd 9.1.2-3Jered Floyd 9.1.2-2Jered Floyd 9.1.2-1Hiroaki Nakamura 9.1.1-1Hiroaki Nakamura 9.1.0-1- Update to upstream 9.2.2- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild- Update to upstream 9.2.1- Update to upstream 9.2.0- Update to 9.1.4, resolves CVE-2022-32749, CVE-2022-37392, CVE-2022-40743- FTI on EL8 due to lack of libbrotli pkg; use RPM autodeps instead- Update dependencies to enable brotli compression (RHBZ#2125520)- Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150, CVE-2022-28129, CVE-2022-31780 - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282- Don't try to use Crypto Policies on RHEL 7- Cherry-pick OpenSSL 3 compatibility required for RHEL 9 - Switch to OpenSSL 3 on f36+ - Include automake in BuildRequires- Exclude s390x architecture -- not supported upstream- Further changes based on package review; perl dependencies, paths- Changes based on spec review; change "RedHat" capitalization, and add link to upstream file layout discussion- Changes based on spec review- Allow self:process setsched, requested on EL8- Set SELinux policy to be more restrictive on privileged UDP ports- Initial revision - Adapt to modern rpm conventions - Add draft SELinux policy - Don't run as root, just claim CAP_NET_BIND_SERVICE for privileged ports - Merge and cleanup of upstream .spec file along with Copr version maintained by Hiroaki Nakamura , based on long-ophaned package. ChangeLog included below for reference.- Update to 9.1.1- Update to 9.1.0 - Disable mime-sanity-check which is usable only in debug build/bin/sh/bin/sh/bin/sh9.2.2-1.fc39trafficserver.iftrafficserver.pp.bz2trafficserver/usr/share/selinux/devel/include/distributed//usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointercpiozstd19x86_64-redhat-linux-gnuASCII texthttps://bugz.fedoraproject.org/trafficserverutf-85d018608c8791c326b589968287014f9f6d727a7153f5964a345a0362f4b12c97be797ddfd281796f2bb0400e9cac19777860b872a08962a5d39c757cf627c39?(/hb071081a40164d2d7a8803f./usr/share/selinux/devel/include/distributed/trafficserver.if ## policy for D allowed tonsitio/ interface(`',` gen_require( typt,; ') corecmd_search_bin($1) _patt) Aspecifiedreadconfigura filesaccesrolecap/_ etl_dir R's log gingsAppenaManagemlnkConnectment socketc_runrw22e7bbpacks/targepp.bz2BZh91AY&SYeB;Q>u$#C| ] :BZz@@( 8)) 4Ѧz4gꉡ jiɴ 4i=M4ɓ&4hd0 ROڞoU)Q4d@@ hh4424je&L@ bzMd#=H& hi0M0= F@=JSК LLM0&M0a0`#M&`&#CJ$FM@h􆆀h&LPhh &@@@ 2IM4M= hA hhd =CA2z=O2W*bIL,v׉$$JL$H._iz|wa:^tW~:g[=w>}a>C׶8^229,S+eo9gG}N Ukuev]qnߧ}0x<.?؜V/c?'k7sټAh-.Ozn]lv[=mn7;{HU4[φ>?37:q 3 fF UWAs=:Ŝ`k୯8V\-K bO@"@BA$@"?J~75֍P/1[ m%Bs΃' ]&|v3GKYm]@09eѯE׷(SaI[foC[TO۟qt2Վ7x #Hw~5^"`[`ڤ$  FA {}QAM\c㾽_^([QT@ߝ˧Nx0 S>u{̀<nyc9&|^8Do_؇-57߀q8x_ N1CO\m\x q1q WY7-IBjl pΒSL}^?recugu zs@n&?=:I_xrb}cm2D $:qcJPHD2+OB\`KH,SokX3"+M! ҰEp1u-Zfi5n&~Tds,jfx@0Ez1q_@I+b'/ (v3v .Z0-ph{"ܶnx-[M/ [7%v&?pجv#kbшv~٬nexmm CEE,aY+BFr0X qw*O28 s3 +#NiMx/81q 4"6.wHV4!#.bK{;G )4ם5YS]i)WسnTšʚMxW]iiթTM~rݼdgZw??uy[Q01. l^^ֳPjП?'k,j)JR&RjRg!pq] <%#tWo5@h{e}@Gt"o9cbbfD-a,%XK g miaf6YʹILҡ3cuc>k Y0ׄۆA4ǻ[~}yX~v. CPO=m-ܞ=t@zח,ÎְJ.ft:ʭ~x YYq%ml 7ֻtW/r8F͹} V3%ho<{v2qYatybJZ[\oEPp?p L1Gk{O4W 8"u <=3 [}Hæa,==~Ex=Nzۻ,᥼|oGv>3y{xu3#3ˏ}{ǟ=Ypxypgw" fx;rb>Εm'+YYvs0DN}||U%# *D:-oB'%$MDY,K%T 'y FkEB j b)PPAx$*TR"pH( Hks=-8ܴBNTA3ݠUOVE VhGTQ*ٶ HH P,+•8^O=_*zvv[:v?bwIG{-Y-l]lNϴ[-3lL}l{]A6~l:*;} Px  h##BD"!F{E)*ЭB YRʖR*D "+1' `0UI -!L̈jٿ?=uI30LIW{o`RI$$I $H<~ޞ{ !S؎240}SIЙXZT pĵwI)i$ڊ H&USkTZ<<}%@ .oe/Z@k,Q@Y B)B "! P`D\ADTbXt߬a$#I$#bD!$NQIڏԀ,baOqJw ݁'!d#ǒ9I@]wzeEK!DKw,ߜ~o}Db gP#YejV;V V12dL ._`hU%H#! FFrH$S'#hw@\,2˗-&9s32Uhs9pM8kSX;D'߽c'OI\iu2(&S_*?R˒Ugzq>@2Ef>oCqnA~v8oǗ@`K.mʬ"D%5*Ԫ盋sZ9c9qsg<\n7ٳf͛>{+9s6le]kk$p9g.EȹÙZ9/:euyr\r"_x7 yܼ^vykם;ͻFd.K<^5+ ԇxH?q@7,yP-T~z\xvfiaH0IaQȹC @V{_ <[(VEv讱AIky`Z'>i\34 N g9`؜U]憠f_`7Љ+۞|\TS[rNLq8Կ~++?M/RIoE9I7Խ;~v4 QcF*jx}R"dy״:a[au2}BA/0}vqYel1 G ls"~VHBI pQ$$ 5 aRDAu?S'G Cjï~z35\O*#h^6ʹP* st]E r%ZVDvƀ|'dG:I=*}R9H %=sMxсc }t=CP3i eMi0/qCj4ۮ\+obcDH8~Ek`P}2ҏ;:)^W< V^, !xT(/C/HQ{Y0*R8DrP<`GZ-΋E0چ8TIEJJ Z{Kd-`Pk=j< >;}oCP'cG|O$V3ʪY[rjZrO c$!>%7벜2mȋvq[;d_zh@E$bfLFtf sIAir\#7-)YLmC' Ik }P1jФ(@a&<1Vu3Ixy궛2DZ<p++xlq8K/-f̄#,3Ɂ"H m*Oj뭩o ? }2{~ 1!Q$IT>N}M;7ɔu\\wG8>6~bvHgG/}V >Ǚ?*q. =?wE6Oo{~y={Ϙ.p_>*ϟ>|o+ym)JS\rr\Jzs3Ƶ 5JR(4L`uܺ=3sk^靻|zyߛfyT)\+m?:݃[#ZұO`$hJG*$Z^6[h-Rl$.],e2pK@$ KJ {pd(>얷Ͼ,,}tsIJ J?e ;lQ@E"3TeSUX?k!紐#j륍~KeCEa`ȹ<[P _ZֵKYBZhocVq55+@.323/Fd2"؃8PJa` @Ar:ɠ̗ff Fo3 !Ǎ'%_B8_sJQPG=\-dxG-[&Q$ c!zV8Q2PP Mc׿ol62&U_QډPȈb󪨖Y!qXA r< hO2Ϝp`}kBf0@G&X" TM?TB'2l=|+A=:i>@vD-dD8z"`' pC< 4:9:( ,9*kh4 Ǻ#7ndשSu-w[a7/%5f0.[AVh yrŀQrN$Ë T$ZA2 &e\GB50=I\.bB֕"WZKݗ8iZ[$%DAD۱(o;M.aAhLBvTMW,1ϲqp.Q!ǙhM˙dpG ;IEsO}"ĠZ Z*|I$yʥagHY>q_}8xd,䉸 Y$q+\8YWW(38"(dpugLEsy會41VN\[yYN{ɦz4xJ]]l\vl6BܰA07-ᦨip D c-|sˇZ.@ۅÖY<rma\#fy oȱ5=㘩ggs9ϱ}(E[DF٦ Վ!@`HE-D$K@Y@ @TCӄ `1O,"(VP)DJ "x?b"$ 4QH""@H$w$S YlTRAILER!!!dCH!B"""H$qrr(A(C)"#"QiT3e x*G i]|Uܚat`) t[\0yKZVcu*> KlO| 4;4iQ 0 b&< &/ E=OSv0Y&eɚʴYmi;{M${VOL-NM z0bD'ʙExPZyd9O$-Fj y-)t09CNxꋄ5aFwWWSlO<Q/Z\'Qq3}zwh&t?L&E,0sUo' ŕcbKq Bl GygAӄW[OLaF|~1]W,Yk1Bw.'qo8wb*!Y5;B\AX$IX&眔pbDdόbR`vae;#2.w+ , *t_֣C{L0D2ǁ+c}JU;V%?m֪ UhOyݣCl9@#ćPzX`ųv?Js"?B_!3<&xk;uYP텗p NE3̠L>&ۏjgϔJuvxz]X1qw]#NOˉT*Y6sw@L8h3kK Iѫhmt