2809c70 * Mon Apr 08 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-9

Authored and Committed by lvrabec 5 years ago
    * Mon Apr 08 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-9
    - Merge #18 `Add check for config file consistency`
    - Allow tlp_t domain also write to nvme_devices block devices BZ(1696943)
    - Fix typo in rhsmcertd SELinux module
    - Allow dnsmasq_t domain to manage NetworkManager_var_lib_t files
    - Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
    - Allow unconfined users to use vsock unlabeled sockets
    - Add interface kernel_rw_unlabeled_vsock_socket()
    - Allow unconfined users to use smc unlabeled sockets
    - Add interface kernel_rw_unlabeled_smc_socket
    - Allow systemd_resolved_t domain to read system network state BZ(1697039)
    - Allow systemd to mounton kernel sysctls BZ(1696201)
    - Add interface kernel_mounton_kernel_sysctl() BZ(1696201)
    - Allow systemd to mounton several systemd direstory to increase security of systemd Resolves: rhbz#1696201
    
        
  • Build completed
    success
    Built as selinux-policy-3.14.4-9.fc31
    5 years ago
file modified
+2 -0
file modified
+18 -3
file modified
+3 -3