8ed1f59 * Thu Oct 08 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-150

Authored and Committed by lvrabec 8 years ago
    * Thu Oct 08 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-150
    - Allow pcp_pmlogger to read system state. BZ(1258699)
    - Allow cupsd to connect on socket. BZ(1258089)
    - Allow named to bind on ephemeral ports. BZ(#1259766)
    - Allow iscsid create netlink iscsid sockets.
    - We need allow connect to xserver for all sandbox_x domain because we have one type for all sandbox processes.
    - Add missing labeling for /usr/libexec/abrt-hook-ccpp as a part of #1245477 and #1242467 bugs.
    - Allow search dirs in sysfs types in kernel_read_security_state.
    - Fix kernel_read_security_state interface that source domain of this interface can search sysctl_fs_t dirs.
    - Allow systemd-logind read access to efivarfs - Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables). #1244973, #1267207 (partial solution)
    - Add interface to allow reading files in efivarfs - contains Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables)
    
        
file modified
+312 -310
file modified
+70 -55
file modified
+13 -1