trafficserver-selinux-9.2.3-2.fc40 >t 6 6_604 @3!]W>D] 'p~[yeΉ 'p~[yM{@4cO3ꯁC5(c~IIj1f|0> `6c^ ie֝#{*SRsoE%>*O ^P_A'^ ͜?&hG)"boûڃ9S,O<KqCwN;d$ƃA'F窱MF#;I FeaF -z:?QBxrwL†xir[q[`'FS"/wT\JR?5}]Z!~Xn|բ x+.lT*m}cqPРEE3x1;">` ԋv\JJ'L=Y؟݉^U; DZ"wpG)[kY '>D ,̿'S )Q`cc Б'nJiu nkqҽΦұ[꼶&'5DF=+5bb98181f3c09ca9fa887d55d647d0995a0d089881890bb4c146ef0c746c1328abfc047803f6acfddbf0c6c2db62fcfb51b9aead030204a3204a9e0046304402206fabc633e16a320a4368b625d4fe3619e1323a18fc648c2f725e154813f6c7150220601ddf28f644c916c32191bc517193bde87e67e3cdaccdbe422116c3763147c7030204a3204a9e00483046022100f5d157f6de6d64525bcca7d62cb456c8dd0c32b935d94625b7fb6a3c837a0efc022100aba95e1dc004aa801530dbb1b192d15ee88e483a782b4243b21a712d653c098cOF3!]W>D] 'p~[yeΉ 'p~[ŷ TY8_YKu IݍQ{Ti:ӐFcxѴ?>;7|+U^'CÔSn(+  bX񏊄n<34()<ϙ:\PRQk럒1%Ⱥx+FB0F/( W|Q+`zsUv\%Y ȝC ,2%ֈM.F}O(bqWeL {y+}ck/Xuб? OEva1针+"iuin("ܑQy\?݉3(݂aHl5J~%dJʻg<%֊SԢ5UvA #nM+$gŘAR.X'M=²B22=SQ(j_ OcdTm>ӳ#,u+@< /3UiJw<>`A?d % Bhl  , 8  >  D  P        ( 4 L  ( 8 9 :Z=>@GHIXY\(]4^hbdefltuv5;|Ctrafficserver-selinux9.2.32.fc40trafficserver SELinux policyTrafficserver SELinux policy modulee%buildvm-x86-08.iad2.fedoraproject.org:Fedora ProjectFedora ProjectASL 2.0Fedora ProjectUnspecifiedhttps://trafficserver.apache.org/linuxnoarch if /usr/sbin/selinuxenabled; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/trafficserver.pp.bz2 || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r trafficserver &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi fi 0]eGeGeGaf9ca27482c005c42ce6de7033f0d4063321e0e5f2ec9348af8904f9ceb08df81fb4af4f8ec6876abfaf79e409e0ef00fcd5b0d75a9a9530bf30bd4b6220d16b@rootrootrootrootrootroottrafficserver-9.2.3-2.fc40.src.rpmtrafficserver-selinux     /bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-140.1040.104.19.1e@e&@eSdddZ@cʂ@cR@cc*b@bb&b=b|bs@bobf@b]RbN@Fedora Release Engineering - 9.2.3-2Jered Floyd 9.2.3-1Jered Floyd 9.2.2-2Jered Floyd 9.2.2-1Fedora Release Engineering - 9.2.1-2Jered Floyd 9.2.1-1Jered Floyd 9.2.0-1Jered Floyd 9.1.4-1Jered Floyd 9.1.3-2Jered Floyd 9.1.3-2Jered Floyd 9.1.3-1Jered Floyd 9.1.2-9Jered Floyd 9.1.2-8Jered Floyd 9.1.2-7Jered Floyd 9.1.2-6Jered Floyd 9.1.2-5Jered Floyd 9.1.2-4Jered Floyd 9.1.2-3Jered Floyd 9.1.2-2Jered Floyd 9.1.2-1- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild- Update to upstream 9.2.3 - Resolves CVE-2023-44487, CVE-2023-41752, CVE-2023-39456- Use OpenSSL 1.1.x from EPEL on RHEL 7 to fix Chrome 117+ bugs- Update to upstream 9.2.2- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild- Update to upstream 9.2.1- Update to upstream 9.2.0- Update to 9.1.4, resolves CVE-2022-32749, CVE-2022-37392, CVE-2022-40743- FTI on EL8 due to lack of libbrotli pkg; use RPM autodeps instead- Update dependencies to enable brotli compression (RHBZ#2125520)- Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150, CVE-2022-28129, CVE-2022-31780 - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282- Don't try to use Crypto Policies on RHEL 7- Cherry-pick OpenSSL 3 compatibility required for RHEL 9 - Switch to OpenSSL 3 on f36+ - Include automake in BuildRequires- Exclude s390x architecture -- not supported upstream- Further changes based on package review; perl dependencies, paths- Changes based on spec review; change "RedHat" capitalization, and add link to upstream file layout discussion- Changes based on spec review- Allow self:process setsched, requested on EL8- Set SELinux policy to be more restrictive on privileged UDP ports- Initial revision - Adapt to modern rpm conventions - Add draft SELinux policy - Don't run as root, just claim CAP_NET_BIND_SERVICE for privileged ports - Merge and cleanup of upstream .spec file along with Copr version maintained by Hiroaki Nakamura , based on long-ophaned package. ChangeLog included below for reference./bin/sh/bin/sh/bin/sh9.2.3-2.fc40trafficserver.iftrafficserver.pp.bz2trafficserver/usr/share/selinux/devel/include/distributed//usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointercpiozstd19x86_64-redhat-linux-gnuASCII texthttps://bugz.fedoraproject.org/trafficserverutf-8d2fbc99081c85392568dbb878c18168bdaaefe7b2c0133e0f8185eb8e523c979aba07ed3ba28385a419fa83635f9d17975a39fa612f7976d6cd4812b4e86e475?(/he071081a4165b4478a83f./usr/share/selinux/devel/include/distributed/trafficserver.if ## policy for D allowed tonsitio/ interface(`',` gen_require( typt,; ') corecmd_search_bin($1) _patt) Aspecifireadconfigura filesaccesrolecap/_ etl_dir R's log gingsAppenaManagemlnkConnectment socketc_runrw2305dbcks/targepp.bz2BZh91AY&SYvB[b@T^\`Xl)eƀp!:D&W@:@P**4z4?T L54dhjz4FɀF2dɦ!F@ 4 3TQ(44@4@ 4 2m'?TyGP4=Ah!SҪLL (6CQhOTC 4ɡi3S&! AM4iL3H1"H dBe4E=MD=Fi@F 43 ] dFB0.[I LNI$1\I"G 38p bX%M!tH * UW-+ HN&uMp"u7 @^WsJ3iX&ty积vg7O_?G]/jl4Ma<=h!H@ "%{ED$"%~2`H(lJL%Ҩr UP,_Y`9mRjͩϸs=ǹq}KEC[Um[6]=b)SnҗjyWr}{zŀ>?|?_]c~~8L/_OvL?+G%er{e1fAhzM.Owf]lv[=7;{q/+bqX|F/ 1~C#2\_{?jtڝVYk guowq8n?#S9a<G8ݒnm!d~ή ( B FJc(siA7KJ(ON] u-H?x A\C~d|/NJ7s<G)B(G!BBץv-/N, zsolmt-;^%P{7/ڷ)^)D"( @b{+4r~>;Q}?w;xB~:O.D tH3~Ѐ"e%}O?^N4qpǯcP1q|.i^ʩnX68/°Ź# >0>QAM\c}Q;Na)cS? ~s‰9ގH÷_~ѕ? ")BEߦ|[{8L`sZD91xD'!m|/TL.лib;h զdEs)!~=+W ^jL@XTͥ`,b㘿 |tVŏN]rxg{.Z,x͘8@3rٹd1xyC9^,su)y̽N[Yl]厂&MCxn4Wr~`:~xNSΜψp/KtN' @ 0NPd嫣?3va.0R$i /ц4$ 瑷l cf/i:!uʧǖnK.Zz"rq Weӗ^:·] V:ն0؏ `f-2 Jzov-_gys6oc9a_LLJl߿njK,K{aU 3p/E|@e {l?*goߩ= NO.+v|᧶<\}g -{r=O9S#w~~U׿.Yӎ>=qzoąc^=>#  ;`<@a@OwnX{lZgUM4GKeM2zDS䠉ϯ|IҢ- B$yh#|g<),"j%dY,K%=TQTn~g9j-BUE"('1" D*>T)PRD!rҀ pʈ&{X*Ȣ7jb(ʚ%R6  i3ܨu)m]~;gv;\oW‘V'ބ톧exoLnf11LYռ4RuznLz~L=A9]+hh'dɳPl{=\].8PqBP=~39[m2`B%mػ5EBTI< h(Coz{wd=6Yc3r80rpط0I$ak'9_=(L穳1)Y^a3k+vZi"Ly^j@Y{zk7gnԉ؈:b FB$ +- Ip! PLII7fp$T}Ϥ~6OXY9gR"! |!pRJ\ܥ')@Mqk5Zĭ^V*y-4VMiq-t |{Q#(Y_F, ?+~OO]l:F"'}Mӧ'ͽ' ;{ҠL"D$HΨSħkD*.RTLK+z`y}_P olJ@}Wa\D rs{s/t-_s'զN]:$IC0Ǎz7jy9i~='\puç[V|ͣK{3~bp{#Z/UO"-|.t<pdeӏ:|7˻yJ'kuwq[=V|xe?8P(n[U*7.m͋0>o2EBmgR;foșExw j%^b̗ͤ"R^1Lw҆@bUp֬MQWEc9!()5"E,,7! 5´hElVRt85P檛86 8ʉfsYu{콧roprF;`Vo ^eP[n-ss䪳!vwչ [^_.扔ź*1WQV-+956W H*2TKq#+sݺN)E3"̘ydK{Xrg&ddS]E+!CdO1Ҏ81CYjY!ƚnDBDOl((w;"k/DHabXxyx2ac5@;È_;\0D g 52HO;\_dVgaq=t,6~Ss)*QAtbxK }Kv\>8hak'lEjtܴ??=Xv^ˢ"DI&GS!U>t$MY"sΓr*nm,snXo<mYzf3Y5DE*/0U*sǾǿOHh)g(c+LVyط| {^{C$"B@}ɏF@r8;" awA5EL&U\s= HR\Cqb$rsg R/r\ e\Xl:.XQj9D%ZVDvƀ|'d x󌏈{퇭(.x_B8T58XGkK48UZx8;vKD-S{}Ķ\,x "\e;|h1 O>xZ()TST1 LuR(dzQ|DLU0NrxZPmn E?$3L2A}A0xxk_? BA;cVGi}MmuA#dbR(,e׹< p@3ht'(*$' ><>7u\\wG8XO\Kzr 1;sd$3+W|>˙?:q.~Nr) (&|~{k2ۚq.+08᳗R81o<ހ{{GNGlt;5Հj, hlG"7W{ލ6Q``C`j5ma!b@Dj*)j55}$z^u˚NrFe.SU{we2wU=g$bQq4ξծ88j<*92|7S#{n(,VTsǗ޿ <j9L7QXi j5io0mbm 5KKq!5 9Ćj8L[f'0Q=G^ w5Rw{u"ӻ,J %EsfGi},\a{-YOJ%RLV+#ԺtWCQٖc[|tl@TgǍFqౠ1j6+0cɏm&F`Yzz#DoUJsji7x$61y;Pwoy#*nʞw7pN3j|]U34|;Y'̚Ou97#t̪H ʡwQ˱fmZMQ @j5&L^`&(Gh7Fy緝ہ\DnN-$ N7%X`k&{LCۏ _{RffF1nHJsm|N0rI*I*pEf4L0`u3.0W0eaVca$CllZCF^ǜĜS)('ޟO7^#I+G+ aLXWR7"sw;[r"1>:B=y=yUk屽k\/1K-c\lH#PvK0@5 0"`7R0aO3NP ca{y0 3#Q߹y~owo\wz{Sgk9ɵ.s<}O6p!ٙQs@d=̩o߂X]c]7|TEI]c}QkfPdUXj5X]G i.0deFSi$.e5 ,e0Dz5> :}sP*l@₂J1:۵v&,O @K$hC 2dPL,WaZe2`&*Lґ Ђ%%) a"d d42I&J$dI&HM&& &I+M$(f Crw8K'z3S=VíZOS9)r'{ζ.jwS58YN4f,y5=1)`o푆lw=V{47 6*@q@ߊ@IsSw' #qUMU`Ϊ78~sg%á'눬Cd\~xC/+,mkZ&>P75Ծ\ Zfbf^ eYpp.geڷǟ?TtJ eݞӋ\ښZ1LK ~zd+%RRm4gi,D 8T\d@aqC_QB¢1r9MUBL4j1Y=P,`ؠ T+s+ns,N ]{@أRvbrĕ73Oot =ÏMC0&%`I+h2]V\ L_!$d"k1 Ag nz# Kqlq4xyh!$*%,CB!ĽOxjgϟ#`6/ P 4 +]?B .,ludqdwp:DOwH̴4oL}, !fnN[^ET}!Ҩ,}e1EvT @P#7) hu -I 'f@ $! vT 46` J 1Ԣt<0Jƥ$t>Ff@a$a3ҋX-Z],/~@dL` \m8r2JJ@Q<'R6LI ofȭ(*7b&ސEẈt2 ȀDx"x RR "zEno}^Y( 5)k%K `QMiFQsE}Qc`kҥp43x/ 0̪HJWfڢU3.w1ܼ{p`hcs1$ ODVlۼq,CMo?%hU^NB@Bp3ZJIҥ$l +&Pq tv]D UF8a_=8ef*5EDL(0zٷUT$][3T9H!_~q 2 p{[NPFmIXa%J/*W( w,@dB7>+ PɹM \_spr5s aw5P, ?10T 4'JcfZ̜W<@LWH*{\Kd\6.MOv42xvUi4/\y!Ep"`a7t̠,AQ摠'ǂ XHvYa5g+!ha؆JQ }M\fuA^%(A!:>cөDdEl8mDab64❿!Ez|bZ 1A? ES=̓IA,&<籞}|1n*2"c?/V}BbJ19ZJ]0>UJ_Z灱[_FNAOX fU1@CURYfpmǡcA2@s>V ioh`]sD@0~eb!A0.asq9d%Z|H:{ !mlLˑpC< 4:9:( ,9:*kZ6xM\Bٺu^_ZH\yM[&%X?+ D@yE H !~햿4HR{ ;9vNU0Ȅi_;r0(RҠ@TfV`d}I" zrj˘OP;w/4P MQNF ӫb[E,"J' I Q2ʡ4^DA OǙ!PCBVy}^ `C 5=6!ctQ_,Xx"X/dn`q9&g():D|ǜ񑀫{ :lm/Xu.s5(ˀ<GJ4#`n{ fFG!7Р,=s $vEk\|, +ĥ/}ҋɭ6)BPRFYm$C*B:0&c3ks0zcZyt5u;'C rZ{`j d3 >} 0=I\.bB֠)UEVhxev Vk`ăd v7E:i%"L(- Zʚf ZPӎ$ s- s<񐃁BWvFAhO HZNy U J `$Jd L+ ucPtҤX$J)(z1 Iڊ!,[Ez׫+X A\ iWFKKaqKdmKND++y) D"gk bbE(0pȀ,K+1TRU F(\p.e &Szq-+ b (U DHBH2fi`(֕\71 /uH6DȞ[v{&rI"o|g(r Eu*Xא;(Ex@uJDC%A>%UUU%pt/Si\X22!A|nHJ=B 3WH\-x#˂)~Чs[=PݍO+t\H""q:{S`iYB{l{>z+Ʉ6>NNS· @A~'.-SU95YƏ$"KN-Css nj @2٢@rV5ÖYP 6m.^\0-yGCʭnޖ3,MOS;*f\hؿ"q)-t̽ zvII!u+$BOIEp%%%'$Z (T눃s;/x(+($ 'dEvH=@(∸&I  ]BBzE`TRAILER!!!!# D$ Dfi@tBZ$ cB !"#"D3Ajɿr3 EysCL!$>7 NMP\'EH5g(ѺSgJT+V50z9FhvmBq YnthSӨ+JαSe }rZ􎍛[z;bUmHNC~` \+I>Hr/Ҧ?.2_׹U7^ sas Tk-0$ЩPJ^4B A |X>$C~S-1x80a\joǗC/p-G0Q{]~n"+m^ՠ*,|a vlj<^>"q,mg#Ue=WO(ʺe.C3->57)2M_51գK8a$T:k9=W|Lb-WznQFvzLC4fǖ)7d¤t 29