8585d2d * Fri Apr 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283.34

Authored and Committed by lvrabec 6 years ago
    * Fri Apr 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283.34
    - Allow slapd_t domain to mmap slapd_var_run_t files
    - Allow virtd_t domain to relabel virt_var_lib_t files
    - Allow hsqldb_t domain to mmap own temp files
    - We have inconsistency in cgi templates with upstream, we use _content_t, but refpolicy use httpd__content_t. Created aliasses to make it consistence
    - Allow nfsd_t domain to read/write sysctl fs files
    - Allow conman to read system state
    - Allow zebra_t domain to bind on babel udp port
    - Allow freeipmi domain to read sysfs_t files
    - Allow targetd_t domain mmap lvm config files
    - Allow abrt_t domain to manage kdump crash files
    - Allow svirt_t domain mmap svirt_image_t files BZ(1514538)
    - Allow ftpd_t domain to chat with systemd
    - Allow systemd to use virtio console
    - Label /run/ebtables.lock as iptables_var_run_t
    - Allow udev_t domain to manage udev_rules_t char files.
    - Assign babel_port_t label to udp port 6696
    - Add new interface lvm_map_config
    - Allow local_login_t reads of udev_var_run_t context
    
        
file modified
+0 -0
file modified
+102 -78
file modified
+134 -105
file modified
+21 -1