selinux-sandbox-3.8.1-bp160.1.1 RPM for s390x

From OpenSuSE Leap 16.0 for s390x

Run an application within a tightly confined SELinux domain. The default
sandbox domain only allows applications the ability to read and write stdin,
stdout and any other file descriptors handed to it.

Provides

• selinux-sandbox
• policycoreutils-sandbox
• selinux-sandbox(s390-64)

Requires

• /bin/bash
• /bin/sh
• /bin/sh
• /usr/bin/mkdir
• /usr/bin/python3
• /usr/bin/touch
• fillup
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.27)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libcap-ng.so.0()(64bit)
• libselinux.so.1()(64bit)
• libselinux.so.1(LIBSELINUX_1.0)(64bit)
• permissions
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(RichDependencies) <= 4.12.0-1
• selinux-policy-sandbox

License

GPL-2.0-or-later

Changelog

* Thu Jul 09 2026 Robert Frohl <rfrohl@suse.com>
  - Incorporate changes from the policycoreutils sandbox subpackage,
    which was briefly re-introduced (bsc#1266226, bsc#1270534)
      add sandbox-fix-cleanup.patch
      add sandbox-sandbox-fix-saving-file-changes.patch
  - Move seunshare from /usr/sbin to /usr/bin (bsc#1268256)
      add sandbox_seunshare_move_usr_bin.patch
  - Apply hardening from newer version (bsc#1268256)
      add sandbox-seunshare-drop-k-kill-support.patch
* Fri Mar 07 2025 Cathy Hu <cathy.hu@suse.com>
  - Update to version 3.8.1
    https://github.com/SELinuxProject/selinux/releases/tag/3.8.1
    * no source change
* Tue Feb 04 2025 Robert Frohl <rfrohl@suse.com>
  - Update to version 3.8
    https://github.com/SELinuxProject/selinux/releases/tag/3.8
    * No functional change
  - For a more in depth list of changes see
    https://github.com/SELinuxProject/selinux/releases/download/3.8/shortlog-3.8.txt
  - keyring: Update Petr Lautrbach <lautrbach@redhat.com>
    * removed 0xBC3905F235179CF1 (expired: 2024-10-25)
    * added 0xFB4C685B5DC1C13E (expires: 2026-11-04)
* Mon Jul 01 2024 Cathy Hu <cathy.hu@suse.com>
  - Update to version 3.7
    https://github.com/SELinuxProject/selinux/releases/tag/3.7
    User-visible changes:
    * sandbox: Add support for Wayland
    Bugfixes:
    * sandbox: do not run window manager if it's not a session
    * sandbox: do not fail without xmodmap
    * sandbox: do not override warning CFLAGS
* Tue Dec 19 2023 Cathy Hu <cathy.hu@suse.com>
  - Update to version 3.6
    https://github.com/SELinuxProject/selinux/releases/tag/3.6
    * Add notself support for neverallow rules
    * Improve man pages
    * man pages: Remove the Russian translations
    * Add notself and other support to CIL
    * Add support for deny rules
    * Translations updated from
      https://translate.fedoraproject.org/projects/selinux/
    * Bug fixes
  - Remove keys from keyring since they expired:
    - E853C1848B0185CF42864DF363A8AD4B982C4373
      Petr Lautrbach <plautrba@redhat.com>
    - 63191CE94183098689CAB8DB7EF137EC935B0EAF
      Jason Zaman <jasonzaman@gmail.com>
  - Add key to keyring:
    - B8682847764DF60DF52D992CBC3905F235179CF1
      Petr Lautrbach <lautrbach@redhat.com>
* Fri Feb 24 2023 Johannes Segitz <jsegitz@suse.com>
  - Update to version 3.5
    * Improved tmpdir handling
  - Added additional developer key (Jason Zaman)
* Mon May 09 2022 Johannes Segitz <jsegitz@suse.com>
  - Initial package

Files

/usr/bin/sandbox
/usr/bin/seunshare
/usr/share/doc/packages/selinux-sandbox
/usr/share/doc/packages/selinux-sandbox/SANDBOX-README.md
/usr/share/fillup-templates/sysconfig.sandbox
/usr/share/man/man5/sandbox.5.gz
/usr/share/man/man8/sandbox.8.gz
/usr/share/man/man8/seunshare.8.gz
/usr/share/sandbox
/usr/share/sandbox/sandboxX.sh
/usr/share/sandbox/start

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Aug 14 23:45:38 2026