28588b - Allow alsa_t signal_perms, we probaly should search for any app that

Authored and Committed by mgrepl 6 years ago
    - Allow alsa_t signal_perms, we probaly should search for any app that
    - Add dontaudit for mozilla_plugin_t looking at the xdm_t sockets
    - Fix deny_ptrace boolean, certain ptrace leaked into the system
    - Allow winbind to manage kerberos_rcache_host
    - Allow spamd to create spamd_var_lib_t directories
    - Remove transition to mozilla_tmp_t by mozilla_t, to allow it to mana
    - Add mising nslcd_dontaudit_write_sock_file() interface
    - one more fix
    - Fix pki_read_tomcat_lib_files() interface
    - Allow certmonger to read pki-tomcat lib files
    - Allow certwatch to execute bin_t
    - Allow snmp to manage /var/lib/net-snmp files
    - Call snmp_manage_var_lib_files(fogorn_t) instead of snmp_manage_var_
    - Fix vmware_role() interface
    - Fix cobbler_manage_lib_files() interface
    - Allow nagios check disk plugins to execute bin_t
    - Allow quantum to transition to openvswitch_t
    - Allow postdrop to stream connect to postfix-master
    - Allow quantum to stream connect to openvswitch
    - Add xserver_dontaudit_xdm_rw_stream_sockets() interface
    - Allow daemon to send dgrams to initrc_t
    - Allow kdm to start the power service to initiate a reboot or powerof
    
        
file modified
+114 -87
file modified
+271 -118
file modified
+26 -2