orion pushed to rpms/fail2ban (epel8). "Update selinux policy for
Fedora 34+"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-03-31 22:34:03 UTC
From 6dbaddcefe8af280f6c8a224143c7a864a1778c0 Mon Sep 17 00:00:00 2001
From: Richard Shaw <hobbes1069(a)gmail.com>
Date: Jun 06 2021 11:58:43 +0000
Subject: Update selinux policy for Fedora 34+
---
diff --git a/fail2ban.spec b/fail2ban.spec
index 5a069e4..fa9cfd6 100644
--- a/fail2ban.spec
+++ b/fail2ban.spec
@@ -1,6 +1,6 @@
Name: fail2ban
Version: 0.11.2
-Release: 4%{?dist}
+Release: 5%{?dist}
Summary: Daemon to ban hosts that cause multiple authentication errors
License: GPLv2+
@@ -397,6 +397,9 @@ fi
%changelog
+* Sun Jun 06 2021 Richard Shaw <hobbes1069(a)gmail.com> - 0.11.2-5
+- Update selinux policy for Fedora 34+
+
* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.11.2-4
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
diff --git a/fail2ban.te b/fail2ban.te
index 302f4bc..92615ca 100644
--- a/fail2ban.te
+++ b/fail2ban.te
@@ -45,6 +45,7 @@ allow fail2ban_t self:netlink_netfilter_socket create_socket_perms;
read_files_pattern(fail2ban_t, fail2ban_t, fail2ban_t)
+allow fail2ban_t fail2ban_log_t:file watch;
append_files_pattern(fail2ban_t, fail2ban_log_t, fail2ban_log_t)
create_files_pattern(fail2ban_t, fail2ban_log_t, fail2ban_log_t)
setattr_files_pattern(fail2ban_t, fail2ban_log_t, fail2ban_log_t)
@@ -88,7 +89,6 @@ files_read_etc_runtime_files(fail2ban_t)
files_list_var(fail2ban_t)
files_dontaudit_list_tmp(fail2ban_t)
-fs_list_inotifyfs(fail2ban_t)
fs_getattr_all_fs(fail2ban_t)
auth_use_nsswitch(fail2ban_t)
@@ -100,6 +100,10 @@ logging_read_syslog_pid(fail2ban_t)
logging_dontaudit_search_audit_logs(fail2ban_t)
logging_mmap_generic_logs(fail2ban_t)
logging_mmap_journal(fail2ban_t)
+logging_watch_audit_log_files(fail2ban_t)
+logging_watch_audit_log_dirs(fail2ban_t)
+logging_watch_generic_log_dirs(fail2ban_t)
+logging_watch_journal_dir(fail2ban_t)
mta_send_mail(fail2ban_t)
https://src.fedoraproject.org/rpms/fail2ban/c/6dbaddcefe8af280f6c8a224143...
1Â year
orion pushed to rpms/fail2ban (epel8). "Add patch to SCM."
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-03-31 22:34:03 UTC
From 1a7cc53458e9df82063a0aa277c2d0c3f1ee08dd Mon Sep 17 00:00:00 2001
From: Richard Shaw <hobbes1069(a)gmail.com>
Date: Jan 06 2021 13:08:55 +0000
Subject: Add patch to SCM.
---
diff --git a/f259dac74721c00f0184bf45277137771fc747fe.patch b/f259dac74721c00f0184bf45277137771fc747fe.patch
new file mode 100644
index 0000000..ba399ae
--- /dev/null
+++ b/f259dac74721c00f0184bf45277137771fc747fe.patch
@@ -0,0 +1,48 @@
+From 747d4683221b5584f9663695fb48145689b42ceb Mon Sep 17 00:00:00 2001
+From: sebres <info(a)sebres.de>
+Date: Mon, 4 Jan 2021 02:42:38 +0100
+Subject: [PATCH] fixes century selector of %ExY and %Exy in datepattern for
+ tests, considering interval from 2005 (alternate now) to now; + better
+ grouping algorithm for resulting century RE
+
+---
+ fail2ban/server/strptime.py | 24 ++++++++++++++++++++++--
+ 1 file changed, 22 insertions(+), 2 deletions(-)
+
+diff --git a/fail2ban/server/strptime.py b/fail2ban/server/strptime.py
+index 1464a96d1..39fc79586 100644
+--- a/fail2ban/server/strptime.py
++++ b/fail2ban/server/strptime.py
+@@ -36,10 +36,30 @@ def _getYearCentRE(cent=(0,3), distance=3, now=(MyTime.now(), MyTime.alternateNo
+ Thereby respect possible run in the test-cases (alternate date used there)
+ """
+ cent = lambda year, f=cent[0], t=cent[1]: str(year)[f:t]
++ def grp(exprset):
++ c = None
++ if len(exprset) > 1:
++ for i in exprset:
++ if c is None or i[0:-1] == c:
++ c = i[0:-1]
++ else:
++ c = None
++ break
++ if not c:
++ for i in exprset:
++ if c is None or i[0] == c:
++ c = i[0]
++ else:
++ c = None
++ break
++ if c:
++ return "%s%s" % (c, grp([i[len(c):] for i in exprset]))
++ return ("(?:%s)" % "|".join(exprset) if len(exprset[0]) > 1 else "[%s]" % "".join(exprset)) \
++ if len(exprset) > 1 else "".join(exprset)
+ exprset = set( cent(now[0].year + i) for i in (-1, distance) )
+ if len(now) and now[1]:
+- exprset |= set( cent(now[1].year + i) for i in (-1, distance) )
+- return "(?:%s)" % "|".join(exprset) if len(exprset) > 1 else "".join(exprset)
++ exprset |= set( cent(now[1].year + i) for i in xrange(-1, now[0].year-now[1].year+1, distance) )
++ return grp(sorted(list(exprset)))
+
+ timeRE = TimeRE()
+
https://src.fedoraproject.org/rpms/fail2ban/c/1a7cc53458e9df82063a0aa277c...
1Â year
orion pushed to rpms/fail2ban (epel8). "Rebuilt for Python 3.10"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-03-31 22:34:03 UTC
From d44049eee64429cdc0b7cd900374a88a995e781a Mon Sep 17 00:00:00 2001
From: Python Maint <python-maint(a)redhat.com>
Date: Jun 04 2021 18:04:02 +0000
Subject: Rebuilt for Python 3.10
---
diff --git a/fail2ban.spec b/fail2ban.spec
index 5a069e4..f2759a2 100644
--- a/fail2ban.spec
+++ b/fail2ban.spec
@@ -1,6 +1,6 @@
Name: fail2ban
Version: 0.11.2
-Release: 4%{?dist}
+Release: 5%{?dist}
Summary: Daemon to ban hosts that cause multiple authentication errors
License: GPLv2+
@@ -397,6 +397,9 @@ fi
%changelog
+* Fri Jun 04 2021 Python Maint <python-maint(a)redhat.com> - 0.11.2-5
+- Rebuilt for Python 3.10
+
* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.11.2-4
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
https://src.fedoraproject.org/rpms/fail2ban/c/d44049eee64429cdc0b7cd90037...
1Â year
orion pushed to rpms/fail2ban (epel8). "Fix SELinux policy to allow
watch on var_log_t (bz#2083923)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-03-31 22:34:03 UTC
From ec52ec24716b4d6e820431dbe7b33aceb20112d0 Mon Sep 17 00:00:00 2001
From: Orion Poplawski <orion(a)nwra.com>
Date: May 18 2022 03:46:41 +0000
Subject: Fix SELinux policy to allow watch on var_log_t (bz#2083923)
---
diff --git a/fail2ban.spec b/fail2ban.spec
index 79c2608..9603304 100644
--- a/fail2ban.spec
+++ b/fail2ban.spec
@@ -1,6 +1,6 @@
Name: fail2ban
Version: 0.11.2
-Release: 11%{?dist}
+Release: 12%{?dist}
Summary: Daemon to ban hosts that cause multiple authentication errors
License: GPLv2+
@@ -407,6 +407,9 @@ fi
%changelog
+* Wed May 18 2022 Orion Poplawski <orion(a)nwra.com> - 0.11.2-12
+- Fix SELinux policy to allow watch on var_log_t (bz#2083923)
+
* Fri Jan 28 2022 Orion Poplawski <orion(a)nwra.com> - 0.11.2-11
- Require /usr/bin/mail instead of mailx
diff --git a/fail2ban.te b/fail2ban.te
index 8cbf7b3..6d36a70 100644
--- a/fail2ban.te
+++ b/fail2ban.te
@@ -45,7 +45,6 @@ allow fail2ban_t self:netlink_netfilter_socket create_socket_perms;
read_files_pattern(fail2ban_t, fail2ban_t, fail2ban_t)
-#allow fail2ban_t fail2ban_log_t:file watch;
append_files_pattern(fail2ban_t, fail2ban_log_t, fail2ban_log_t)
create_files_pattern(fail2ban_t, fail2ban_log_t, fail2ban_log_t)
setattr_files_pattern(fail2ban_t, fail2ban_log_t, fail2ban_log_t)
@@ -100,10 +99,18 @@ logging_read_syslog_pid(fail2ban_t)
logging_dontaudit_search_audit_logs(fail2ban_t)
logging_mmap_generic_logs(fail2ban_t)
logging_mmap_journal(fail2ban_t)
+allow fail2ban_t fail2ban_log_t:file watch;
+# Not in EL9 yet
#logging_watch_audit_log_files(fail2ban_t)
+gen_require(`
+ type var_log_t, auditd_log_t;
+')
+watch_files_pattern(fail2ban_t, auditd_log_t, auditd_log_t)
#logging_watch_audit_log_dirs(fail2ban_t)
-#logging_watch_generic_log_dirs(fail2ban_t)
-#logging_watch_journal_dir(fail2ban_t)
+allow fail2ban_t var_log_t:dir search_dir_perms;
+watch_dirs_pattern(fail2ban_t, auditd_log_t, auditd_log_t)
+logging_watch_generic_log_dirs(fail2ban_t)
+logging_watch_journal_dir(fail2ban_t)
mta_send_mail(fail2ban_t)
https://src.fedoraproject.org/rpms/fail2ban/c/ec52ec24716b4d6e820431dbe7b...
1Â year