9cc47d1 * Sun Nov 03 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-52

Authored and Committed by lvrabec 4 years ago
    * Sun Nov 03 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-52
    - Label /var/cache/nginx as httpd_cache_t
    - Allow abrt_upload_watch_t domain to send dgram msgs to kernel processes and stream connect to journald
    - Allow capability dac_override in logwatch_mail_t domain
    - Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
    - Allow rhsmcertd_t domain to read/write rtas_errd_var_lock_t files
    - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
    - Label /etc/postfix/chroot-update as postfix_exec_t
    - Update tmpreaper_t policy due to fuser command
    - Allow kdump_t domain to create netlink_route and udp sockets
    - Allow fail2ban_t domain to create netlink netfilter sockets.
    - Allow dovecot get filesystem quotas
    
        
  • Build completed
    success
    Built as selinux-policy-3.14.3-52.fc30
    4 years ago
file modified
+1 -0
file modified
+15 -2
file modified
+2 -2