f2ef036 * Wed Feb 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-158.5

Authored and Committed by lvrabec 8 years ago
    * Wed Feb 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-158.5
    - Allow svirt sandbox_domains to read all content in /proc
    - Allow abrt_dump_oops_t to getattr filesystem nsfs files. rhbz#1300334
    - Allow ulogd_t to create netlink_netfilter sockets. rhbz#1305426
    - Allow abrt_dump_oops_t to check permissions for a /usr/bin/Xorg. rhbz#1284967
    - Fix wrong name for openqa_websockets tcp port.
    - Added Label openqa for tcp port (9526) Added Label openqa-websockets for tcp port (9527) rhbz#1277312
    - Add interface fs_getattr_nsfs_files()
    - Add interface xserver_exec().
    - Added policy for systemd-coredump service. Added domain transition from kernel_t to systemd_coredump_t. Allow syslogd_t domain to read/write tmpfs systemd-coredump files. Make new domain uconfined for now.
    - Revert "Allow all domains some process flags."
    
        
file modified
+390 -597
file modified
+19 -12
file modified
+13 -1