Skip to content

Releases: containers/udica

Udica supports podman version 1.4.0+

11 Jul 11:05
Compare
Choose a tag to compare
Pre-release
  • Fix udica parsing podman json file
  • Unify exit codes
  • Clean up the test helper
  • Update .gitignore to ignore pycache dirs
  • Improve parse error handling
  • Get SELinux context of mountpoint from xattr
  • Make base udica container part of domain attribute

Udica supports deploying policies

12 Jun 11:51
b373291
Compare
Choose a tag to compare
Pre-release
  • Add logo for udica project.
  • README: Explain the project name
  • Do not reset CWD in tests
  • Deploy udica policies, using ansible
  • Tests for "Deploy policies using ansible" feature
  • Overwrite playbook path

Updated tests and new rules in base template

16 May 17:18
606c7c4
Compare
Choose a tag to compare
  • Add allow rules for container_runtime_t to base_container.cil
  • Add an option for running tests with real modules
  • Allow running test_main.py directly
  • Update Testing section in README

Support port ranges and update tests

19 Apr 18:35
93d9a3c
Compare
Choose a tag to compare
Pre-release
  • Create mock selinux and semanage module
  • Update testing section in README
  • Add travis file for Travis CI
  • Grammar fixes in the udica.8 manpage file
  • Support port ranges (Resolves: #16)
  • Test port ranges

Added unit tests and several bug fixes

11 Mar 12:40
c382e15
Compare
Choose a tag to compare
Pre-release
  • Fix minor problems reported by pylint #11
  • Catch FileNotFoundError when inspecting containers #12
  • Create basic tests #13
  • Restore working directory #14
  • udica cannot use the container ID once it is provided #10

Special thanks to @janzarsky for pull requests and tests.

Capability bugfixes

23 Jan 15:57
45f51a4
Compare
Choose a tag to compare
Capability bugfixes Pre-release
Pre-release
  • Fix capability allow rules when capabilities are specified in JSON file
  • Add additional SELinux allow rules to base container template to allow container to read proc_type types.

Fix invalid syntax of policy when using one template.

03 Jan 23:15
5a0ad39
Compare
Choose a tag to compare

Invalid syntax when only using one template
Resolves#6

Add License headers to source files

23 Oct 08:21
d338970
Compare
Choose a tag to compare
Pre-release
  • Add License headers to source files

Add support for docker containers

13 Oct 21:24
e587a99
Compare
Choose a tag to compare
Pre-release

Udica now supports podman and also docker inspection for creating new SELinux policies

Updated x_container

08 Oct 13:00
f726155
Compare
Choose a tag to compare
Updated x_container Pre-release
Pre-release
  • Update x_container template based on testing container related to Nvidia