dfabfa9 * Wed Jan 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-74

Authored and Committed by mgrepl 11 years ago
    * Wed Jan 30 2013 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-74
    - Dontaudit r/w cache_home_t for thumb_t
    - Allow rsync to getattr any file in rsync_data_t
    - Allow l2tpd_t to read network manager content in /run directory
    - Allow named to block_suspend capability
    - Allow gnomesystemmm_t caps because of ioprio_set
    - Allow NM rawip socket
    - Add interface to thumb_t dbus_chat to allow it to read remote proce
    - ALlow logrotate to domtrans to mdadm_t
    - kde gnomeclock wants to write content to /tmp
    - kde gnomeclock wants to write content to /tmp
    - /usr/libexec/kde4/kcmdatetimehelper attempts to create /root/.kde
    - Allow blueman_t to rwx zero_device_t, for some kind of jre
    - Allow mozilla_plugin_t to rwx zero_device_t, for some kind of jre
    - Ftp full access should be allowed to create directories as well as
    - Add boolean to allow rsync_full_acces, so that an rsync server can
    - over the local machine
    - logrotate needs to rotate logs in openshift directories
    - comment files_relabel_non_security_files for now, it does not work
    - boinc_cliean wants also execmem as boinc projecs have
    - Allow sa-update to search admin home for /root/.spamassassin
    - Allow sa-update to search admin home for /root/.spamassassin
    - Allow antivirus domain to read net sysctl
    - Dontaudit attempts from thumb_t to connect to ssd
    - Dontaudit attempts by readahead to read sock_files
    - Dontaudit attempts by readahead to read sock_files
    - Allow application_domains to send sigchld to login programs
    - Change ssh_use_pts to use macro and only inherited sshd_devpts_t
    - Allow confined users to read systemd_logind seat information
    
        
file modified
+291 -275
file modified
+329 -137
file modified
+31 -1