985fc61 * Wed Jun 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-26

Authored and Committed by lvrabec 5 years ago
    * Wed Jun 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-26
    - Allow psad domain to setrlimit. Allow psad domain to stream connect to dbus Allow psad domain to exec journalctl_exec_t binary
    - Update cups_filetrans_named_content() to allow caller domain create ppd directory with cupsd_etc_rw_t label
    - Allow abrt_t domain to write to rhsmcertd pid files
    - Allow pegasus_t domain to eexec lvm binaries and allow read/write access to lvm control
    - Add vhostmd_t domain to read/write to svirt images
    - Update kdump_manage_kdumpctl_tmp_files() interface to allow caller domain also mmap kdumpctl_tmp_t files
    - Allow sssd_t and slpad_t domains to mmap generic certs
    - Allow chronyc_t domain use inherited user ttys
    - Allow stapserver_t domain to mmap own tmp files
    - Update nscd_dontaudit_write_sock_file() to dontaudit also stream connect to nscd_t domain
    - Merge pull request #60 from vmojzis/rawhide
    - Allow tangd_t domain stream connect to sssd
    - Allow oddjob_t domain to chat with systemd via dbus
    - Allow freeipmi domains to mmap sysfs files
    - Fix typo in logwatch interface file
    - Allow sysadm_t and staff_t domains to use sudo io logging
    - Allow sysadm_t domain create sctp sockets
    - Allow traceroute_t domain to exec bin_t binaries
    - Allow systemd_passwd_agent_t domain to list sysfs Allow systemd_passwd_agent_t domain to dac_override
    - Add new interface dev_map_sysfs()
    
        
file modified
+2 -0
file modified
+25 -3
file modified
+3 -3