62e50a * Wed Mar 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-158.11

Authored and Committed by lvrabec 4 years ago
    * Wed Mar 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-158.11
    - Dontaudit logrotate to setrlimit itself. rhbz#1309604
    - Label /etc/redis-sentinel.conf as redis_conf_t. Allow redis_t write to redis_conf_t. Allow redis_t to connect on redis tcp port.
    - Remove declaration of empty booleans in virt policy.
    - Fix typo in drbd policy
    - Add new drbd file type: drbd_var_run_t. Allow drbd_t to manage drbd_var_run_t files/dirs.
    - Label /etc/ctdb/events.d/* as ctdb_exec_t. Allow ctdbd_t to setattr on ctdbd_exec_t files.
    - Allow setrans daemon to read /proc/meminfo.
    - Allow systemd_notify_t to write to kmsg_device_t when 'systemd.log_target=kmsg' option is used.
    - Remove bin_t label for /etc/ctdb/events.d/. We need to label this scripts as ctdb_exec_t.
file modified
+29 -28
file modified
+157 -120
file modified
+12 -1