| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: cockpit-ws-selinux | Distribution: SUSE Linux 16 |
| Version: 338 | Vendor: SUSE LLC <https://www.suse.com/> |
| Release: 160000.1.1 | Build date: Fri May 23 09:46:41 2025 |
| Group: Unspecified | Build host: reproducible |
| Size: 46003 | Source RPM: cockpit-338-160000.1.1.src.rpm |
| Packager: https://www.suse.com/ | |
| Url: https://cockpit-project.org/ | |
| Summary: SELinux security policy for cockpit-ws | |
SELinux policy module for the cockpit-ws package.
LGPL-2.1-or-later
* Fri May 23 2025 alice.brooks@suse.com
- Update branding patch for micro and sle
* Thu May 22 2025 alice.brooks@suse.com
- Bug fixes
- Update theme for patternfly 6
- Update spec from upstream
- Change when selinux policies are installed
* Thu May 08 2025 luna.dragon@suse.com
- update to 338:
Upstream Changes:
- Translation updates
- Bug fixes
- Add check_cockpit_users and add_preexec_cockpit.patch to ensure manually created
users and groups are removed. Also check systemd support is in nsswitch
* Tue Apr 29 2025 luna.dragon@suse.com
- Update cockpit to 337
Upstream Changes:
337:
- Upgraded to Patternfly 6
- Support dnf needs-restarting
336.2:
- storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode"
- Translation updates
336.1:
- storage: Fix passphrase remembering with "Reuse encryption"
- Translation updates
336:
- storage: Implement deletion of multi-device btrfs
- storage: Use mdraid metadata version 1.0 when in Anaconda mode
- Add a channel capabilities system
335:
storage: SMART support
- update various patches to apply on 337
* Mon Apr 28 2025 luna.dragon@suse.com
- Update 0007-Remove-DynamicUser-setting-as-these-conflict-with-re.patch
Update the patch to set ProtectHome and PrivateTmp to yes as it is implied
when DynamicUser is enabled. The patch is also now only applied on leap 15
where it is relevant
* Wed Apr 16 2025 alice.brooks@suse.com
- Add extra requirements for selinux policies to cockpit-selinux-policies
so it can't be installed before selinux or policycoreutils
* Fri Apr 11 2025 alice.brooks@suse.com
- Add a requires for either sudo or polkit for assuming admin rights
(bsc#1240569)
* Mon Apr 07 2025 alice.brooks@suse.com
- Ensure cockpit-selinux-policies always installs the selinux policy
regardless of selinuxenabled status (bsc#1240787 and bsc#1240421)
* Wed Mar 19 2025 miika.alikirri@suse.com
- Patch python bridge to handle dbus message endianness correctly
- added 0008-pybridge-endian-flag.patch
(bsc#1220477)
* Wed Mar 12 2025 luna.dragon@suse.com
- move selinux policies to cockpit-selinux-policies bsc#1236057
* Mon Mar 10 2025 alice.brooks@suse.com
- Update to 334.1
- Various bug fixes and improvements
- Translation updates
- npm modules updated, since new version
* Mon Feb 24 2025 adam.majer@suse.de
- fix build with latest local-npm-registry
* Fri Feb 21 2025 alice.brooks@suse.com
- Always apply 0007-Remove-DynamicUser-setting-as-these-conflict-with-re.patch
for every build system. Fixes bsc#1237451
* Thu Feb 20 2025 miika.alikirri@suse.com
- Add functionality to cockpit-packagekit that allows selecting what updates
should be applied
- Added packagekit-single-install.patch file that adds this functionality
* Fri Feb 07 2025 alice.brooks@suse.com
- Update to 332
- Updated naming convention for motd to issue and relevant patches
- Added 0007-Remove-DynamicUser-setting-as-these-conflict-with-re.patch
since dynamic users can't be resolved since systemd is missing in nsswitch
bsc#1230638
* Thu Jan 30 2025 alice.brooks@suse.com
- Remove 0005-cockpit-ws-user-remove-default-deps.patch
- Fix dynamic users for 330 since systemd isn't included in the
nsswitch.conf
- Tidy up pam_oath removal for leap
- Ship a new pam file since Leap15 doesn't have pam_oath
- Don't change motd if we don't have pam_oath
- Properly fix pidfd_getpid
- This can be dropped once we update again as it's been upstreamed
* Fri Dec 06 2024 luna.dragon@suse.com
- Update to 330
- Web server: Increased sandboxing, setuid removal, bootc support
- Development: New install mode using systemd-sysext
* Mon Nov 25 2024 luna.dragon@suse.com
- update to 329.1:
- cockpit.js: Put back cockpit.{resolve,reject}() to fix subscription-manager-cockpit
- Past updates:
* 329
- Shell: Extra warnings when connecting to remote hosts
* 328:
- Bug fixes and performance improvements
* 327:
- Connect to similar servers without Cockpit installed
* 326:
- cockpit-pcp package is now obsolete
- cockpit/ws container: Connect to servers without installed Cockpit
- cockpit/ws container: Support host specific SSH keys
- Storage: Support for Stratis filesystem sizes and limits
* 325:
- client: Properly handle unknown SSH host keys
* 324:
- Bug fixes and performance improvements
* 323.1:
- Translation updates
* 323:
- login: Prevent multiple logins in a single browser session
- Update documentation links
* Wed Oct 09 2024 alice.brooks@suse.com
- suse_docs.patch: update documentation to point at new links (bsc#1226050)
- remove_rh_links.patch: remove additional hardcoded RH refs (bsc#1221336)
- hide-pcp.patch: correct patch to properly disable pcp on micro
(bsc#1226049)
- suse-microos-branding.patch: use suse ID as branding instead of sle-micro
(bsc#1227441)
* Mon Sep 30 2024 alice.brooks@suse.com
- add 0006-totp-motd.patch for guidance to enabling totp to the mtod
* Wed Sep 18 2024 jan.suse@zerebecki.de
- support optional TOTP for authentication, requires pam_oath
* Tue Aug 20 2024 adam.majer@suse.de
- remove requires on pam_oath completely. It will be re-introduced
later when it works with optional enrollment
* Tue Aug 20 2024 alice.brooks@suse.com
- add 0005-cockpit-ws-user-remove-default-deps.patch (bsc#1229146)
* Mon Aug 12 2024 luna.dragon@suse.com
- new version 322:
* shell: Deprecate host switcher
* files: Permissions column in details view
- suse_docs.patch: refreshed
For details, see https://cockpit-project.org/blog/cockpit-322.html
* Thu Aug 08 2024 jan.suse@zerebecki.de
- revert load pam_oath, because it enforces the file for otp secrets to exist,
will try again once pam_oath can have that optional
* Wed Aug 07 2024 herbert@graeber-clan.de
- fix-libexecdir.patch: Fix libexecdir for leap and sle (bsc#1223533)
- Fix systemd units folder for leap and sle (bsc#1226541)
* Wed Aug 07 2024 pallaswept@proton.me
- Recommend cockpit-packagekit if zypper is installed
* Wed Aug 07 2024 jan.suse@zerebecki.de
- load pam_oath for optional TOTP for authentication
* Wed Jul 31 2024 adam.majer@suse.de
- new version 321:
* Bug fixes and performance improvements
- vendor.tar.gz: dropped. Bundling now part of main tarball.
- update_version.sh: use instead of `osc service mr` to do version
updates. updated README.packaging
* Wed Jul 03 2024 luna.dragon@suse.com
- new version 320:
* pam-ssh-add: Fix insecure killing of session ssh-agent
(bsc#1226040, CVE-2024-6126)
- changes in older versions:
* Storage: Btrfs snapshots
* Podman: Add image pull action
* Files: Bookmark support
* webserver: System user changes
* Metrics: Grafana setup now prefers Valkey
- 0001-users-Support-for-watching-lastlog2.patch,
0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch
removed, upstreamed
* Wed Jul 03 2024 alice.brooks@suse.com
- fix suse_docs.patch causing invalid json against the storaged manifest bsc#1227299
* Thu Jun 13 2024 luna.dragon@suse.com
- disable selinux on leap versions without selinux
- set libexec dir to %_libexecdir (bsc#1223533)
* Thu May 16 2024 luna.dragon@suse.com
- new version 316:
* cockpit.js API: Fix format_bytes() units
- add 0001-users-Support-for-watching-lastlog2.patch (bsc#1220551)
- add 0002-users-Support-for-watching-lastlog2-and-wutmp-on-overview-page.patch (bsc#1220551)
* Wed Apr 17 2024 adam.majer@suse.de
- new version 315:
* Networking: Show additional ports for each firewall zone
* Networking: List Firewall active zones when unprivileged
* Inline documentation
* Support for transient virtual machines
* UEFI for virtual machines
* Unattended virtual machines installation
* Localize times
* Better support for various TLS certificate formats
* Overview: Add CPU utilization to usage card
* Dashboard: Support SSH identity unlocking when adding new machines
* SElinux: Introduce an Ansible automation script
* Machines: Support “bridge” type network interfaces
* Machines: Support “bus” type disk configuration
- suse_docs.patch, storage-btrfs.patch: refreshed
* Tue Apr 16 2024 adam.majer@suse.de
- Do not require setroubleshoot in cockpit-selinux on Leap.
It's not there
* Mon Mar 04 2024 adam.majer@suse.de
- cockpit.pam: respect /etc/cockpit/disallowed-users
This means by default root cannot login with password to cockpit
(bsc#1216080)
* Thu Feb 29 2024 cathy.hu@suse.com
- Remove SELinux file context for /usr/bin/cockpit-bridge, this
is already defined in the main selinux-policy package (bsc#1220385).
Modified selinux_libdir.patch
* Mon Feb 26 2024 dimstar@opensuse.org
- Use %patch -P N instead of deprecated %patchN.
* Thu Feb 15 2024 adam.majer@suse.de
- suse-microos-branding.patch: fix branding for SLE Micro
(bsc#1219929)
- don't clobber existing links with empty files
* Wed Jan 31 2024 adam.majer@suse.de
- new version 309:
* storage redesign
* initial btrfs support
https://cockpit-project.org/blog/cockpit-309.html
* Thu Jan 25 2024 luna.dragon@suse.com
- suse_docs.patch: replace with suse docs and move docs with out eqiv
to docs-rh (bsc#1219088)
- hide-docs.patch: obsolete by above, removed
* Thu Jan 25 2024 dimstar@opensuse.org
- Provide users/groups cockpit-wsinstance and cockpit-ws: they are
generated by cockpit-ws %pre script.
* Wed Jan 24 2024 adam.majer@suse.de
- hide-docs.patch: hide RHEL docs in shell/manifest.json
* Fri Jan 12 2024 adam.majer@suse.de
- enable python-bridge for suse distros
- vendor.tar.gz -- submodules in vendor/ subdirectory. These are not part
of original tarball because obs service wants to bundle node_modules
there too....
* Thu Dec 21 2023 adam.majer@suse.de
- new version 307:
https://cockpit-project.org/blog/cockpit-307.html
https://cockpit-project.org/blog/cockpit-306.html
https://cockpit-project.org/blog/cockpit-305.html
https://cockpit-project.org/blog/cockpit-304.html
https://cockpit-project.org/blog/cockpit-303.html
https://cockpit-project.org/blog/cockpit-302.html
https://cockpit-project.org/blog/cockpit-301.html
- css-overrides.patch, storage-btrfs.patch: refreshed
* Wed Sep 20 2023 miika.alikirri@suse.com
- Port SLE selinux bug fix from SLE Micro 5.5
* Copied selinux_libdir.patch from SLEM package
* Fri Sep 08 2023 adam.majer@suse.de
- new version 300.1
https://cockpit-project.org/blog/cockpit-300.html
https://cockpit-project.org/blog/cockpit-299.html
* Fri Sep 08 2023 adam.majer@suse.de
- Re-add pwscore dependency for SLE
* Thu Aug 31 2023 miika.alikirri@suse.com
- Fix building for SLE15.5 and SLE15.4
* Fri Aug 18 2023 adam.majer@suse.de
- new version 298:
https://cockpit-project.org/blog/cockpit-298.html
* Tue Aug 15 2023 zkubala@suse.cz
- set setroubleshoot-server dependency and do not apply
0002-selinux-temporary-remove-setroubleshoot-section-patch for
cockpit-selinux when build for SLE Micro 5.5
* Thu Aug 03 2023 adam.majer@suse.de
- new version 297:
- https://cockpit-project.org/blog/cockpit-297.html
- hide-docs.patch: refreshed
* Mon Jul 17 2023 adam.majer@suse.de
- new version 296:
- https://cockpit-project.org/blog/cockpit-296.html
- https://cockpit-project.org/blog/cockpit-295.html
- https://cockpit-project.org/blog/cockpit-294.html
- 0004-leap-gnu18-removal.patch: added support for Leap thanks to Lubos
* Tue Jun 13 2023 adam.majer@suse.de
- Add fake openSUSE branding target when building on non-openSUSE
builds so branding does not need to be removed
- Remove tests package so we don't have to ship a test PAM module
* Fri Jun 02 2023 adam.majer@suse.de
- new version 293:
- https://cockpit-project.org/blog/cockpit-293.html
- refreshed: css-overrides.patch
* Tue May 30 2023 adam.majer@suse.de
- new version 292:
- https://cockpit-project.org/blog/cockpit-292.html
- refreshed patches: css-overrides.patch, hide-pcp.patch,
0001-selinux-allow-login-to-read-motd-file.patch
* Tue Feb 07 2023 schubi@suse.com
- Migration of PAM settings to /usr/lib/pam.d.
* Wed Jan 25 2023 luna.dragon@suse.com
- restore dependency on /usr/bin/pwscore (bsc#1202277)
- remove remove-pwscore.patch
* Mon Nov 28 2022 zkubala@suse.cz
- enable build of cockpit-selinux module
- changes to keep it sync with sle micro
(0002-selinux-temporary-remove-setroubleshoot-section.patch)
* Tue Sep 20 2022 adam.majer@suse.de
- new version 276.1
- login: Use valid selectors when testing for :is() / :where() support.
- stability and performance improvements
- previous changes https://cockpit-project.org/blog/cockpit-275.html
- css-overrides.patch, hide-docs.patch, remove-pwscore.patch: refreshed
- kdump-close.patch, kdump-refactor.patch, kdump-suse.patch: upstreamed
and removed
* Tue Sep 13 2022 adam.majer@suse.de
- Fix cockpit-storage dependencies
- Merge SUSE branding into cockpit package
* Mon Sep 05 2022 jtomasiak@suse.com
- Update kdump-suse.patch to match upstream.
* Wed Aug 24 2022 jtomasiak@suse.com
- Add kdump-close.patch required by patches below.
- Add kdump-refactor.patch and kdump-suse.patch to support SUSE
kdump config management in cockpit.
* Wed Aug 24 2022 adam.majer@suse.de
- Use a list of available brandings to include in cockpit-ws
package instead of resolving by symlinks.
* Thu Jul 28 2022 jtomasiak@suse.com
- Update suse-microos-branding.patch for new /etc/os-release ID.
- Add storage-btrfs.patch to enable BTRFS use in cockpit-storage.
* Thu Jun 23 2022 adam.majer@suse.de
- Add conflict between cockpit-networkmanager and cockpit-wicked
as they use the same URL paths.
* Mon Jun 20 2022 adam.majer@suse.de
- Re-arrange patches and apply them manually again.
Some were accidentally added and should be sle only
* Fri Jun 17 2022 adam.majer@suse.de
- css-overrides.patch: css overrides for better theming support
* Fri Jun 10 2022 adam.majer@suse.de
- new version 271
https://cockpit-project.org/blog/cockpit-271.html
- cockpit-redhatfont.diff: not needed, dropped
- 0001-selinux-allow-login-to-read-motd-file.patch, hide-docs.patch,
hide-pcp.patch remove-pwscore.patch: refreshed
* Fri Mar 18 2022 jtomasiak@suse.com
- re-add suse-microos-branding.patch from GitHub
- add hide-docs.patch (bsc#1197003)
* Tue Mar 15 2022 jtomasiak@suse.com
- make package compatible with OBS version (bsc#1197224):
* move branding images to distribution-logos-SLE package
* re-add dependency on distribution-logos
* remove branding patch and assets (suse-microos-branding.patch,
suse-microos-branding.tar.gz); moved to GitHub fork
* remove local __python3 macro
* apply SLE specific patches only on SLE
* Mon Feb 28 2022 jtomasiak@suse.com
- add hide-pcp.patch to hide references to PCP (Performance
Co-Pilot) and metric collection (bsc#1195943). The cockpit-pcp
package is not included in SLE Micro 5.2 base and these parts
require it.
* Mon Jan 31 2022 jtomasiak@suse.com
- change self-signed cert group from cockpit-wsintance to
cockpit-ws on upgrade
* Mon Jan 31 2022 jtomasiak@suse.com
- update to new LTS version from openSUSE:Factory
- port remove-pwscore.patch
* remove dependency on pwscore (bsc#1182924)
* remove password strenth indicator
- port branding changes as suse-microos "theme"
* remove suse_cockpit_assets.tar.gz
* add suse-microos-branding.tar.gz
* remove branding_tests.patch
* add suse-microos-branding.patch
- remove files not needed to build this version anymore
* webpack-warnings-are-not-errors.patch
* github_package.patch
* nodejs_output_helper.bash
- remove cockpit.permissions workaround (bsc#1169614)
* Fri Jan 28 2022 adam.majer@suse.de
- new version 251.3
* https://cockpit-project.org/blog/cockpit-251.html
with additional fixes
* Fix "Administrative Access" prompt for "Duo" MFA
* Thu Aug 19 2021 lnussel@suse.de
- add --legacy-peer-deps to fix build
* Tue Aug 03 2021 lnussel@suse.de
- new version 250
https://cockpit-project.org/blog/cockpit-250.html
- fix pam_motd selinux denial (0001-selinux-allow-login-to-read-motd-file.patch)
* Thu May 27 2021 adam.majer@suse.de
- new version 245
https://cockpit-project.org/blog/cockpit-245.html
* Tue May 18 2021 lnussel@suse.de
- new version 244.1
https://cockpit-project.org/blog/cockpit-244.html
- enable SELinux
* Mon May 03 2021 lnussel@suse.de
- install all of pkg/lib in -devel package. Cockpit-machines needs more
* Fri Apr 30 2021 lnussel@suse.de
- new version 243
https://cockpit-project.org/blog/cockpit-243.html
https://cockpit-project.org/blog/cockpit-242.html
https://cockpit-project.org/blog/cockpit-241.html
https://cockpit-project.org/blog/cockpit-240.html
https://cockpit-project.org/blog/cockpit-239.html
* Wed Feb 24 2021 adam.majer@suse.de
- new version 238.1
https://cockpit-project.org/blog/cockpit-238.html
https://cockpit-project.org/blog/cockpit-237.html
- No longer recompress tarball at buildtime
* Thu Feb 04 2021 lnussel@suse.de
- Rebuild from git leveraging local-npm-registry (needs
cockpit-redhatfont.diff)
* Fri Jan 22 2021 lnussel@suse.de
- new version 236
https://cockpit-project.org/blog/cockpit-236.html
* Fri Jan 22 2021 lnussel@suse.de
- new version 235
https://cockpit-project.org/blog/cockpit-235.html
https://cockpit-project.org/blog/cockpit-234.html
https://cockpit-project.org/blog/cockpit-233.html
* Fri Nov 27 2020 lnussel@suse.de
- new version 232
https://cockpit-project.org/blog/cockpit-232.html
https://cockpit-project.org/blog/cockpit-231.html
* Thu Oct 15 2020 lnussel@suse.de
- new version 230
https://cockpit-project.org/blog/cockpit-230.html
* Tue Oct 06 2020 lnussel@suse.de
- new version 229
https://cockpit-project.org/blog/cockpit-229.html
* Thu Oct 01 2020 lnussel@suse.de
- new version 228
https://cockpit-project.org/blog/cockpit-228.html
https://cockpit-project.org/blog/cockpit-227.html
https://cockpit-project.org/blog/cockpit-226.html
- enable cockpit-machines to manage libvirt
* Thu Sep 10 2020 lnussel@suse.de
- adjust spec file to match upstream
* Fri Sep 04 2020 kukuk@suse.com
- cockpit-ws: don't require systemd (allows to build a very small
cockpit-ws container)
* Mon Aug 31 2020 lnussel@suse.de
- Add README.packaging for packagers
* Fri Aug 14 2020 lnussel@suse.de
- new version 225:
https://cockpit-project.org/blog/cockpit-223.html
https://cockpit-project.org/blog/cockpit-224.html
https://cockpit-project.org/blog/cockpit-225.html
* Wed Aug 12 2020 kukuk@suse.com
- Require group wheel
- Add permission macros [bsc#1169614]
- Create tmpfiles in %post install
* Fri Jun 26 2020 lnussel@suse.de
- new version 222:
https://cockpit-project.org/blog/cockpit-222.html
changelog from 221:
https://cockpit-project.org/blog/cockpit-221.html
- enable docker module
* Tue Jun 09 2020 lnussel@suse.de
- new version 220:
https://cockpit-project.org/blog/cockpit-220.html
* Tue Jun 09 2020 lnussel@suse.de
- disable selinux, sosreport and machines subpackages due to missing
dependencies
* Wed Apr 29 2020 lnussel@suse.de
- remove badness overrides to allow Factory submission
* Wed Apr 29 2020 lnussel@suse.de
- remove branding with stale symlinks. Can't rely on /etc/os-release as OBS may
use the dummy-release package.
* Tue Apr 28 2020 lnussel@suse.de
- use pkgconfig(systemd) and pkgconfig(krb5)
- fix build with glib update (0001-bridge-Pass-connectable-to-TLS-client-connection.patch)
* Fri Mar 27 2020 lnussel@suse.de
- new version 215
* Thu Aug 22 2019 lnussel@suse.de
- new version 200
* Fri Jun 21 2019 boris@steki.net
- updated to latest release 195
* Thu Mar 07 2019 aevseev@gmail.com
- New upstream version - 189
* Mon Feb 04 2019 aevseev@gmail.com
- New upstream version - 186
* Wed Oct 24 2018 aevseev@gmail.com
- New upstream version - 180
* Fri Sep 07 2018 aevseev@gmail.com
- New upstream version - 177
* Mon Aug 27 2018 aevseev@gmail.com
- First build. Version - 176.
* Tue Oct 13 2015 kkaempf@suse.com
- Update to 0.79
* Vagrant file for Cockpit development
* Use libvirt for testing
* Display only last lines of Kubernetes container logs
See https://github.com/cockpit-project/cockpit/releases
- Add branding-symlinks.patch, SUSE doesn't carry Fedora pixmaps
* Sat Feb 07 2015 kkaempf@suse.com
- Initial release 0.38
/usr/share/licenses/cockpit-ws-selinux /usr/share/licenses/cockpit-ws-selinux/COPYING /usr/share/man/man8/cockpit_session_selinux.8cockpit.gz /usr/share/man/man8/cockpit_ws_selinux.8cockpit.gz /usr/share/selinux/packages/targeted/cockpit.pp.bz2 /var/lib/selinux/targeted/active/modules/200/cockpit
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Jun 10 00:34:12 2025