Skip to content

Releases: containers/udica

v0.2.8

29 Nov 10:10
Compare
Choose a tag to compare
  • Add ---devices option
  • Fix generating policy for Crio mounts
  • Improve code readability based on lint and black findings

v0.2.7

22 Jun 11:52
Compare
Choose a tag to compare
  • Make sure each section of the inspect exists before accessing
  • Improve label collection for mounts and devices
  • Add support for containerd via nerdctl inspect
  • Avoid duplicate rules for accessing mounts and devices

v0.2.6

15 Sep 15:58
Compare
Choose a tag to compare
  • Move policy templates to container-selinux repo
  • tests: Make sure policy templates are available

v0.2.5

25 Aug 11:07
Compare
Choose a tag to compare
  • Replace capability dictionary with str.lower()
  • Enable udica to generate policies with fifo class
  • Sort container inspect data before processing

v0.2.4

25 Nov 16:59
Compare
Choose a tag to compare
v0.2.4 Pre-release
Pre-release
  • Added functionality to generate allow rules when --device switch is used for podman e.g: podman run --device /dev/tty0 fedora /bin/bash

v0.2.3

13 Aug 15:26
2c3183d
Compare
Choose a tag to compare
v0.2.3 Pre-release
Pre-release
  • Enable container port, not the host port
  • Refactor engine-specific handling code to use classes
  • Add --version command-line argument

v0.2.2

03 Aug 16:59
f46cbc2
Compare
Choose a tag to compare
v0.2.2 Pre-release
Pre-release
  • sctp socket support
  • Add Code of Conduct
  • Update permission set for generated rules
  • Add Security Policy
  • Use constants for engines
  • Fix some formatting issues in udica man page
  • Fix parsing ports from podman engine v2.0.2
  • Update test suite to align with podman 2.0.2

New parameter --container-engine

25 Oct 20:10
98f6d4e
Compare
Choose a tag to compare
Pre-release
  • New feature: parameter "--container-engine"
  • Update json_is_podman_format() function
  • Make udica code compliant to the PEP-8 style.
  • Add support for python code formatter black in CI
  • Update travis CI to test unit tests also on CentOS 8 image

Support CRI-O container engine

25 Sep 08:14
1ac0f27
Compare
Choose a tag to compare
Pre-release
  • Fix unused imports
  • Add lint target for Makefile
  • Add Dockerfile for udica container
  • Separate unit from integration tests
  • Add basic Makefile
  • Refactor tests so they're run from top directory
  • udica/policy.py: Remove unused imports
  • Update man pages and README because of CRI support
  • Update testsuite for CRI support.
  • Fix gen. policy when no template is used in CRI
  • Add inspect file generated from CRI-O to tests
  • Initial CRI-O support
  • Cirrus: Update VM image name
  • Improve permission set for log_container template
  • Document supported container engine versions
  • Add initial support for Cirrus-CI testing
  • Update tests test_basic.podman.cil, test_basic.docker.cil. Round 2

Special Thanks to: @cevich @JAORMX @WOnder93 for their help on this release!

Multiple features in udica

13 Aug 10:21
6b5482a
Compare
Choose a tag to compare
Pre-release
  • New feature: Cross Container Communication
  • Udica is able append rules based on AVC msgs
  • Increase udica testsuite
  • Fix udica CI tests
  • Prioritize templates from current directory.
  • Update tests test_basic.podman.cil, test_basic.docker.cil