[ol9_appstream] fapolicyd-1.1.3-102.0.1.el9.aarch64

Fapolicyd (File Access Policy Daemon) implements application whitelisting
to decide file access rights. Applications that are known via a reputation
source are allowed access while unknown applications are not. The daemon
makes use of the kernel's fanotify interface to determine file access rights.

Changelog (Show File list) (Show related packages)

• Thu Sep 29 2022 Darren Archibald <darren.archibald@oracle.com> - 1.1.3-102.0.1

  - Increase db_max_size to 100M

• Fri Aug 05 2022 Radovan Sroka <rsroka@redhat.com> - 1.1.3-102

  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849

• Thu Jun 16 2022 Radovan Sroka <rsroka@redhat.com> - 1.1-104

  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457

• Sun Apr 03 2022 Radovan Sroka <rsroka@redhat.com> - 1.1-101

  RHEL 9.1.0 ERRATUM
  - fapolicyd denies access to /usr/lib64/ld-2.28.so
  Resolves: rhbz#2067493

• Wed Feb 16 2022 Radovan Sroka <rsroka@redhat.com> - 1.1-100

  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481

• Tue Dec 14 2021 Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101

  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449

• Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.0.3-4

  - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688

• Tue Jul 20 2021 Radovan Sroka <rsroka@redhat.com> - 1.0.3-3

  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731

• Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 1.0.3-2

  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

• Thu Apr 01 2021 Radovan Sroka <rsroka@redhat.com> - 1.0.3-1

  - rebase to 1.0.3
  - sync fedora with rhel