372d802 * Mon May 05 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-160

Authored and Committed by lvrabec 9 years ago
    * Mon May 05 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-160
    - Dontaudit leaked xserver_misc_device_t into plugins
    - Allow all domains to search through all base_file_types, this should
    be back ported to RHEL7 policy
    - Bootloader wants to look at init state
    - init reads kdbump etc files
    - userdom_search_admin_dir() calling needs to be optional in kernel.te
    - Fix labeling for /root/\.yubico
    - Allow httpd_t to kill passenger
    - Add new labeling for /var/spool/smtpd
    - Dontaudit leaked xserver_misc_device_t into plugins
    - Backport exim policy from rawhide to F20
    - Allow apache cgi scripts to use inherited httpd_t unix_stream_sockets
    - Add back kerberos_keytab_template() for exim+f20.
    - ALlow stap-server to get attr on all fs
    - Allow mysql to execute ifconfig if Red Hat OpenStack
    - Fix virt_use_samba in virt.te
    
        
file modified
+266 -267
file modified
+268 -134
file modified
+18 -1