4d5373a - Dontaudit net_admin capability for sendmail

Authored and Committed by mgrepl 11 years ago
    - Dontaudit net_admin capability for sendmail
    - Logwatch does access check on mdadm binary
    - Add raid_access_check_mdadm() iterface
    - Allow gpg_t to manage all gnome files
    - Add ~/.quakelive as mozilla_home_t content
    - Dontaudit mdadm_t running ps command which is causing sys_ptrace avcs
    - Allow virtd_t to create stream socket perms for svirt_socket_t, so that it can use guestmount.
    - Need to allow virtd_t to write to /proc in order to open namespace sockets for write.
    - Add a couple of dontaudit rules to silence the noice
    - Allow zarafa_deliver_t to bind to lmtp port, also consolodate signal_perms and setrlimit and kill to use zarafa_doma
    - Add mate-thumbnail-font as thumnailer
    - Add pcscd_read_pid_files() interface
    - Lots of probing avc's caused by execugting gpg from staff_t
    - Looks like qpidd_t needs to read /dev/random
    - firewalld seems to be creating mmap files which it needs to execute in /run /tmp and /dev/shm.  Would like to clean
    - Added systemd support for ksmtuned
    - Added booleans
           ksmtuned_use_nfs
           ksmtuned_use_cifs
    - Add definition for 2003 as an lmtp port
    - Add filename transition for opasswd
    
        
file modified
+29 -6
file modified
+363 -132
file modified
+24 -1