0e33d35 - Add port definition for osapi_compute port

Authored and Committed by mgrepl 11 years ago
    - Add port definition for osapi_compute port
    - User accounts need to dbus chat with accountsd daemon
    - fsadm_t sends audit messages in reads kernel_ipc_info when doing livecd-iso-to-
    - Allow NetworkManager to transition to ipsec_t, for running strongswan
    - Lots of access required by lvm_t to created encrypted usb device
    - Allow users to dbus chat with systemd_localed
    - Fix handling of .xsession-errors in xserver.if, so kde will work
    - Make sure we label content under /var/run/lock as <<none>>
    - Allow daemon and systemprocesses to search init_var_run_t directory
    - Add boolean to allow xdm to write xauth data to the home directory
    - Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them
    - Allow httpd_t to connect to osapi_compute port using httpd_use_openstack bolean
    - Fix apache_read_sys_content_rw_dirs() interface
    - Fix sys_nice for cups_domain
    - Allow postfix_postdrop to acces postfix_public socket
    - Allow sched_setscheduler for cupsd_t
    - Looks like certmaster sends mail
    - Allow logrotate to read /var/log/z-push dir
    - Allow fsdaemon to send signull to all domains
    - yum-cron runs rpm from within it.
    - Allow tuned to transition to dmidecode
    - Allow firewalld to do net_admin
    - Call mailman_domain
    - FIx ircssi_home_t type to irssi_home_t
    - Correct file transition rul for qpidd_tmp
    - Fix qpidd policy
    - Add mailman_domain attribute
    - Allow openvswitch to execute shell
    - Allow qpidd to use kerberos
    - Allow mailman to use fusefs, needs back port to RHEL6
    - Allow apache and its scripts to use anon_inodefs
    - Realmd needs to connect to samba ports, needs back port to F18 also
    - Allow adcli running as realmd_t to connect to ldap port
    - Allow NetworkManager to transition to ipsec_t, for running strongswan
    - Make openshift_initrc_t an lxc_domain
    - Fix labeling for drupal an wp-content in subdirs of /var/www/html
    - Allow abrt to read utmp_t file
    - Fix openshift policy to transition lnk_file, sock-file an fifo_file when create
    - Allow gssd to manage user_tmp_t files
    - Fix handling of irclogs in users homedir
    - firewalld needs to be able to write to network sysctls
    
        
file modified
+426 -255
file modified
+346 -178
file modified
+53 -1