* Mon May 12 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-162
- More rules needed for openshift/gear in rhel7
- svirt sandbox domains to read gear content in /run. Allow gear_t to
manage openshift files
- Allow mozilla plugins to use /dev/sr0
- Dontaudit logrotate executing systemctl command attempting to
net_admin
- Allow neutron execute arping in neutron_t
- Allow nova-scheduler to read passwd file
- Fix zabbix_can_network boolean to have this boolean for all zabbix
domains
- Allow openwsman to execute chkpwd and make this domain as unconfined
for F20.
- Add openwsman_tmp_t rules
- Allow ulogd to request the kernel to load a module
- Add support for /usr/local/Brother labeling. We removed
/usr/local equiv.
- Systectl_net_t can be a lnk_file
- Fix path to mmap_min_addr
- Any app that executes systemctl will attempt a net_admin