c3e0d21 * Thu Jul 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-128.9

Authored and Committed by lvrabec 8 years ago
    * Thu Jul 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-128.9
    - Allow virt_qemu_ga_t domtrans to passwd_t.
    - Allow redis to read kernel parameters.
    - Label /etc/rt dir as httpd_sys_rw_content_t BZ(#1185500)
    - Allow hostapd to manage sock file in /va/run/hostapd Add fsetid cap. for hostapd Add net_raw cap. for hostpad BZ(#1237343)
    - Allow bumblebee to seng kill signal to xserver
    - glusterd call pcs utility which calls find for cib.* files and runs pstree under glusterd. Dontaudit access to security files and update gluster boolean to reflect these changes.
    - Allow drbd to get attributes from filesystems.
    - Allow glusterd to communicate with cluster domains over stream socket.
    - Allow drbd to read configuration options used when loading modules.
    - Allow glusterd to communicate with cluster domains over stream socket.
    - Added Booleans: pcp_read_generic_logs.
    - Allow pcp_pmcd daemon to read postfix config files. Allow pcp_pmcd daemon to search postfix spool dirs.
    - Remove diplicate sftpd_write_ssh_home boolean rule.
    - Allow sysadm to administrate ldap environment and allow to bind ldap port to allow to setup an LDAP server (389ds).
    - Label /usr/sbin/chpasswd as passwd_exec_t.
    - Allow audisp_remote_t to read/write user domain pty.
    - Allow audisp_remote_t to start power unit files domain to allow halt system.
    
        
file modified
+55 -36
file modified
+62 -26
file modified
+20 -1