cccaf8f - geard seems to do a lot of relabeling

Authored and Committed by mgrepl 9 years ago
    - geard seems to do a lot of relabeling
    - Allow system_mail_t to append to munin_var_lib_t
    - Allow mozilla_plugin to read alsa_rw_ content
    - Allow asterisk to connect to the apache ports
    - Dontaudit attempts to read fixed disk
    - Dontaudit search gconf_home_t
    - Allow rsync to create  swift_server.lock with swift.log labeling
    - Add labeling for swift lock files
    - Use swift_virt_lock in swift.te
    - Allow openwsman to getattr on sblim_sfcbd executable
    - Fix sblim_stream_connect_sfcb() to contain also sblim_tmp_t
    - Allow openwsman_t to read/write sblim-sfcb shared mem
    - Allow openwsman to stream connec to sblim-sfcbd
    - Allow openwsman to create tmpfs files/dirs
    - dontaudit acces to rpm db if rpm_exec for swift_t and sblim_sfcb
    - Allow sblim_sfcbd to execute shell
    - Allow swift to create lock file
    - Allow openwsman to use tcp/80
    - Allow neutron to create also dirs in /tmp
    - Allow seunshare domains to getattr on all executables
    - Allow ssh-keygen to create temporary files/dirs needed by OpenSt
    - Allow named_filetrans_domain to create /run/netns
    - Allow ifconfig to create /run/netns
    
        
file modified
+126 -102
file modified
+260 -69
file modified
+26 -1