30f8c04 * Thu May 13 2021 Zdenek Pytela <zpytela@redhat.com> - 34.7-1

Authored and Committed by zpytela 2 years ago
    * Thu May 13 2021 Zdenek Pytela <zpytela@redhat.com> - 34.7-1
    - Allow tgtd read and write infiniband devices
    - Add a comment on virt_sandbox booleans with empty content
    - Deprecate duplicate dev_write_generic_sock_files() interface
    - Allow vnstatd_t map vnstatd_var_lib_t files
    - Allow privoxy execmem
    - Allow pmdakvm read information from the debug filesystem
    - Add lockdown integrity into kernel_read_debugfs() and kernel_manage_debugfs()
    - Add permissions to delete lnk_files into gnome_delete_home_config()
    - Remove rules for inotifyfs
    - Remove rules for anon_inodefs
    - Allow systemd nnp_transition to login_userdomain
    - Allow unconfined_t write other processes perf_event records
    - Allow sysadm_t dbus chat with tuned
    - Allow tuned write profile files with file transition
    - Allow tuned manage perf_events
    - Make domains use kernel_write_perf_event() and kernel_manage_perf_event()
    
        
file modified
+21 -2
file modified
+2 -2