b7685b2 * Tue Dec 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283.19

Authored and Committed by lvrabec 6 years ago
    * Tue Dec 19 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283.19
    - Allow crond_t to read pcp lib files BZ(1525420)
    - Allow mozilla plugin domain to mmap user_home_t files BZ(1452783)
    - Allow slapd_t domain to mmap files labeled as slpad_db_t BZ(1505414)
    - Allow certwatch_t to mmap generic certs. BZ(1527173)
    - Allow dspam_t to manage dspam_rw_conent_t objects. BZ(1290876)
    - Allow ypbind_t stream connect to rpcbind_t domain BZ(1508659)
    - Add support for sytem_dbusd_tmpfs_t BZ(1518864)
    - Fix couple AVCs appearing during confined user login BZ(1515961)
    - Allow memcached_t to mmap memcached_exec_t
    - Add interface userdom_map_user_home_files()
    - Sytemd introduced new feature when journald(syslogd_t) is trying to read symlinks to unit files in /run/systemd/units. This commit label /run/systemd/units/* as systemd_unit_file_t and allow syslogd_t to read this content. BZ(1527202)
    - Allow xdm_t dbus chat with modemmanager_t BZ(1526722)
    - All domains accessing home_cert_t objects should also mmap it. BZ(1519810)
    - Add new mmap permission set and pattern support macros.
    - Add missing mmap_*_files_pattern macros.
    
        
file modified
+0 -0
file modified
+291 -204
file modified
+127 -80
file modified
+18 -1