rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
42d22b559a
selinux-policy/.gitignore

277 lines
6.5 KiB
Plaintext
Raw Normal View History

auto-import selinux-policy-2.0.0-0.6 on branch devel from selinux-policy-2.0.0-0.6.src.rpm
2005-11-14 23:22:29 +00:00
serefpolicy-2.0.0.tgz
- Initial version
2005-11-16 03:43:46 +00:00
serefpolicy-2.0.1.tgz
- Update to upstream
2005-11-18 21:35:08 +00:00
serefpolicy-2.0.2.tgz
- Start building MLS Policy
2005-11-22 18:59:41 +00:00
serefpolicy-2.0.3.tgz
- Add rules for pegasus and avahi
2005-11-22 22:46:58 +00:00
serefpolicy-2.0.4.tgz
-Update to latest from upstream
2005-11-23 17:11:44 +00:00
serefpolicy-2.0.5.tgz
- Cleanup pegasus and named - Fix spec file - Fix up passwd changing applications
2005-11-29 05:22:53 +00:00
serefpolicy-2.0.6.tgz
- Fixes for dovecot and saslauthd
2005-12-01 18:16:50 +00:00
serefpolicy-2.0.7.tgz
Update from upstream
2005-12-02 22:58:20 +00:00
serefpolicy-2.0.8.tgz
Update from upstream
2005-12-06 04:12:01 +00:00
serefpolicy-2.0.9.tgz
Update from upstream
2005-12-06 17:44:30 +00:00
serefpolicy-2.0.10.tgz
Update from upstream
2005-12-07 01:07:26 +00:00
serefpolicy-2.0.11.tgz
exclude
noarch
nsadiff
nsaserefpolicy
Add xdm policy
2005-12-08 05:02:10 +00:00
serefpolicy-2.1.0.tgz
- Update to upstream - Turn off boolean allow_execstack
2005-12-08 21:56:50 +00:00
serefpolicy-2.1.1.tgz
- Update to upstream - Turn off allow_execmem and allow_execmod booleans - Add tcpd and automount policies
2005-12-10 05:19:29 +00:00
serefpolicy-2.1.2.tgz
- Fixes for hal - Update to upstream
2005-12-13 04:53:03 +00:00
serefpolicy-2.1.4.tgz
- Update from upstream - Allow unconfined_t to transition to rpm_script_t
2005-12-13 22:13:21 +00:00
serefpolicy-2.1.5.tgz
- Add file context for /var/cvs - Dontaudit webalizer search of homedir
2005-12-14 22:47:12 +00:00
serefpolicy-2.1.6.tgz
- Update to upstream
2006-01-04 19:21:36 +00:00
serefpolicy-2.1.7.tgz
- Update to upstream
2006-01-09 20:20:08 +00:00
serefpolicy-2.1.8.tgz
- Update to upstream
2006-01-11 22:25:06 +00:00
serefpolicy-2.1.9.tgz
- Update to upstream
2006-01-13 22:32:06 +00:00
serefpolicy-2.1.10.tgz
- Update to upstream - Fix ftp Man page
2006-01-17 03:55:13 +00:00
serefpolicy-2.1.11.tgz
- Update to upstream
2006-01-17 19:40:15 +00:00
serefpolicy-2.1.12.tgz
- Update to upstream
2006-01-17 22:47:12 +00:00
serefpolicy-2.1.13.tgz
- Update to upstream - Turn off execheap execstack for unconfined users - Add mono/wine policy to allow execheap and execstack for them - Add execheap for Xdm policy
2006-01-19 19:10:47 +00:00
serefpolicy-2.2.2.tgz
- Update to upstream
2006-01-24 15:41:46 +00:00
serefpolicy-2.2.4.tgz
- Many changes for MLS - Turn on strict policy
2006-01-25 16:45:54 +00:00
serefpolicy-2.2.5.tgz
- Update to upstream - Put back in changes for pup/zen
2006-01-26 15:47:02 +00:00
serefpolicy-2.2.6.tgz
- Update to upstream
2006-01-27 07:06:21 +00:00
serefpolicy-2.2.7.tgz
- Update to upstream - Fix rhgb
2006-01-28 04:52:34 +00:00
serefpolicy-2.2.8.tgz
- Update to upstream - Fix rhgb, and other Xorg startups
2006-01-31 00:35:32 +00:00
serefpolicy-2.2.9.tgz
*** empty log message ***
2006-02-03 14:59:07 +00:00
serefpolicy-2.2.10.tgz
*** empty log message ***
2006-02-04 03:03:32 +00:00
serefpolicy-2.2.11.tgz
*** empty log message ***
2006-02-09 13:56:52 +00:00
serefpolicy-2.2.12.tgz
*** empty log message ***
2006-02-11 02:41:50 +00:00
serefpolicy-2.2.13.tgz
*** empty log message ***
2006-02-13 15:55:10 +00:00
serefpolicy-2.2.14.tgz
*** empty log message ***
2006-02-14 17:11:59 +00:00
serefpolicy-2.2.15.tgz
*** empty log message ***
2006-02-19 12:17:15 +00:00
serefpolicy-2.2.16.tgz
*** empty log message ***
2006-02-20 22:11:40 +00:00
serefpolicy-2.2.17.tgz
*** empty log message ***
2006-02-21 15:36:15 +00:00
serefpolicy-2.2.18.tgz
*** empty log message ***
2006-02-21 20:39:54 +00:00
serefpolicy-2.2.19.tgz
*** empty log message ***
2006-02-22 22:46:02 +00:00
serefpolicy-2.2.20.tgz
*** empty log message ***
2006-02-23 15:12:37 +00:00
serefpolicy-2.2.21.tgz
- Update to upstream - Merged my latest fixes - Fix cups policy to handle unix domain sockets
2006-02-27 23:00:40 +00:00
serefpolicy-2.2.22.tgz
- Add hal changes suggested by Jeremy - add policyhelp to point at policy html pages
2006-03-04 14:49:35 +00:00
serefpolicy-2.2.23.tgz
- Update to upstream
2006-03-18 04:09:10 +00:00
serefpolicy-2.2.24.tgz
- Update to upstream
2006-03-21 19:46:10 +00:00
serefpolicy-2.2.25.tgz
- Fix policyhelp
2006-03-24 16:44:06 +00:00
serefpolicy-2.2.26.tgz
- Update to upstream
2006-03-27 22:07:37 +00:00
serefpolicy-2.2.27.tgz
- Update to upstream
2006-03-27 22:47:14 +00:00
serefpolicy-2.2.28.tgz
- Update to upstream
2006-03-31 20:57:44 +00:00
serefpolicy-2.2.29.tgz
- Allow secadm_t ability to relabel all files - Allow ftp to search xferlog_t directories - Allow mysql to communicate with ldap - Allow rsync to bind to rsync_port_t
2006-04-11 20:59:57 +00:00
serefpolicy-2.2.30.tgz
- Update to latest from upstream - Allow mono and unconfined to talk to initrc_t dbus objects
2006-04-13 21:28:19 +00:00
serefpolicy-2.2.31.tgz
- Update to latest from upstream
2006-04-14 19:50:03 +00:00
serefpolicy-2.2.32.tgz
- Update to latest from upstream - Add James Antill patch for xen - Many fixes for pegasus
2006-04-19 12:10:10 +00:00
serefpolicy-2.2.33.tgz
- Update to latest from upstream - Allow selinux-policy to be removed and kernel not to crash
2006-04-20 17:43:20 +00:00
serefpolicy-2.2.34.tgz
- Update to upstream - Fix postun to only disable selinux on full removal of the packages
2006-04-25 10:59:33 +00:00
selinux-policy-2.2.35-1.src.rpm
- Update to upstream - Fix postun to only disable selinux on full removal of the packages
2006-04-25 11:03:12 +00:00
serefpolicy-2.2.35.tgz
- Update to upstream
2006-05-01 18:41:55 +00:00
serefpolicy-2.2.36.tgz
- Update to upstream
2006-05-04 17:39:16 +00:00
serefpolicy-2.2.37.tgz
- Update to upstream
2006-05-08 19:26:49 +00:00
serefpolicy-2.2.38.tgz
- Update from upstream
2006-05-15 16:20:58 +00:00
serefpolicy-2.2.39.tgz
- Update from upstream
2006-05-17 01:40:53 +00:00
serefpolicy-2.2.40.tgz
- allow hal to read boot_t files - Upgrade to upstream
2006-05-18 16:07:35 +00:00
serefpolicy-2.2.41.tgz
- Upgrade to upstream
2006-05-20 12:01:14 +00:00
serefpolicy-2.2.42.tgz
- Update to upstream
2006-05-28 10:56:26 +00:00
serefpolicy-2.2.43.tgz
- Update from upstream
2006-06-09 03:03:22 +00:00
serefpolicy-2.2.45.tgz
- Update to upstream
2006-06-13 18:26:00 +00:00
serefpolicy-2.2.46.tgz
- Update from Upstream
2006-06-14 15:48:59 +00:00
serefpolicy-2.2.47.tgz
- Update to upstream
2006-06-21 14:01:45 +00:00
serefpolicy-2.2.48.tgz
- Update to upstream
2006-06-22 01:15:06 +00:00
serefpolicy-2.2.49.tgz
- Update to upstream - Add new class for kernel key ring
2006-06-22 19:16:49 +00:00
serefpolicy-2.3.1.tgz
- Update to upstream
2006-07-09 09:51:33 +00:00
serefpolicy-2.3.2.tgz
- Remove spamassassin_can_network boolean
2006-07-17 17:14:27 +00:00
serefpolicy-2.3.3.tgz
- Update to the latest from upstream
2006-08-04 22:58:10 +00:00
serefpolicy-2.3.4.tgz
- Fix setroubleshootd
2006-08-08 00:26:46 +00:00
serefpolicy-2.3.5.tgz
- Quiet down anaconda audit messages
2006-08-08 20:40:36 +00:00
serefpolicy-2.3.6.tgz
- Update from upstream - More java fixes
2006-08-12 11:54:51 +00:00
serefpolicy-2.3.7.tgz
- Fixes for stunnel and postgresql - Update from upstream
2006-08-20 15:11:37 +00:00
serefpolicy-2.3.8.tgz
- Update to upstream
2006-08-23 20:42:38 +00:00
serefpolicy-2.3.9.tgz
- Upgrade to upstream
2006-08-30 20:59:51 +00:00
serefpolicy-2.3.10.tgz
clog
- Update to upstream
2006-09-01 19:45:39 +00:00
serefpolicy-2.3.11.tgz
- Update to upstream
2006-09-05 12:03:37 +00:00
serefpolicy-2.3.12.tgz
- Update from upstream
2006-09-06 18:29:35 +00:00
serefpolicy-2.3.13.tgz
- Upgrade to upstream
2006-09-15 18:28:09 +00:00
serefpolicy-2.3.14.tgz
- Update from upstream
2006-09-22 20:41:12 +00:00
serefpolicy-2.3.15.tgz
- Update with upstream
2006-09-26 14:59:58 +00:00
serefpolicy-2.3.16.tgz
- Update to upstream
2006-09-29 19:19:18 +00:00
serefpolicy-2.3.17.tgz
- Patch for labeled networking
2006-10-03 18:47:06 +00:00
serefpolicy-2.3.18.tgz
- Update to upstream
2006-10-17 18:43:08 +00:00
serefpolicy-2.3.19.tgz
- Refupdate from upstream
2006-10-19 15:52:02 +00:00
serefpolicy-2.4.tgz
Mon Oct 23 2006 Dan Walsh <dwalsh@redhat.com> 2.4-4 - Allow noxattrfs to associate with other noxattrfs
2006-10-23 20:54:50 +00:00
serefpolicy-2.4.1.tgz
- Allow mount.nfs to work
2006-10-27 19:16:43 +00:00
serefpolicy-2.4.2.tgz
- Merge with upstream
2006-11-06 21:15:57 +00:00
serefpolicy-2.4.3.tgz
- Update to upstream
2006-11-15 15:22:30 +00:00
serefpolicy-2.4.4.tgz
- Move to upstream version which accepted my patches
2006-11-17 19:21:40 +00:00
serefpolicy-2.4.5.tgz
- Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571 Resolves: #217611 Resolves: #217640 Resolves: #217725
2006-11-29 20:11:02 +00:00
serefpolicy-2.4.6.tgz
- Begin adding user confinement to targeted policy
2007-01-22 18:15:16 +00:00
serefpolicy-2.5.1.tgz
- Add ability to generate webadm_t policy - Lots of new interfaces for httpd - Allow sshd to login as unconfined_t
2007-01-25 19:07:00 +00:00
serefpolicy-2.5.2.tgz
-
2007-02-12 16:27:42 +00:00
serefpolicy-2.5.3.tgz
- Add sepolgen support - Add bugzilla policy
2007-02-20 17:35:59 +00:00
serefpolicy-2.5.4.tgz
2007-02-26 15:06:22 +00:00
serefpolicy-2.5.5.tgz
- Update to remove security_t:filesystem getattr problems
2007-02-28 21:23:19 +00:00
serefpolicy-2.5.6.tgz
- Update to latest from upstream - Add fail2ban policy
2007-03-01 21:57:47 +00:00
serefpolicy-2.5.7.tgz
- More of my patches from upstream
2007-03-11 05:19:36 +00:00
serefpolicy-2.5.8.tgz
2007-03-20 15:01:28 +00:00
serefpolicy-2.5.9.tgz
- Allow samba to run groupadd
2007-03-23 17:31:13 +00:00
serefpolicy-2.5.10.tgz
- Update to upstream
2007-04-02 15:17:45 +00:00
serefpolicy-2.5.11.tgz
- Update to upstream
2007-04-11 20:55:28 +00:00
serefpolicy-2.5.12.tgz
- Upstream bumped the version
2007-04-23 17:00:48 +00:00
serefpolicy-2.6.1.tgz
- Update to latest from upstream
2007-05-01 20:53:29 +00:00
serefpolicy-2.6.2.tgz
- Update to latest from upstream
2007-05-04 17:30:10 +00:00
serefpolicy-2.6.3.tgz
- Update to latest from upstream
2007-05-14 18:10:58 +00:00
serefpolicy-2.6.4.tgz
2007-05-21 18:54:40 +00:00
serefpolicy-2.6.5.tgz
- Remove ifdef strict policy from upstream
2007-05-31 18:40:35 +00:00
serefpolicy-3.0.1.tgz
- Default to user_u:system_r:unconfined_t
2007-07-03 19:20:47 +00:00
serefpolicy-3.0.2.tgz
- Allow execution of gconf
2007-07-19 14:45:16 +00:00
serefpolicy-3.0.3.tgz
- Update with latest changes from upstream
2007-07-26 17:54:24 +00:00
serefpolicy-3.0.4.tgz
- Update from upstream
2007-08-03 19:53:44 +00:00
serefpolicy-3.0.5.tgz
- Add setransd for mls policy
2007-08-22 14:46:21 +00:00
serefpolicy-3.0.6.tgz
- Update an readd modules
2007-08-27 21:43:05 +00:00
serefpolicy-3.0.7.tgz
- Allow cron to search nfs and samba homedirs
2007-09-18 15:09:11 +00:00
serefpolicy-3.0.8.tgz
- Update to upstream
2007-10-23 23:13:09 +00:00
serefpolicy-3.1.0.tgz
- Update to upstream
2007-11-10 14:14:41 +00:00
serefpolicy-3.1.1.tgz
- Merge with upstream - Allow xsever to read hwdata_t - Allow login programs to setkeycreate
2007-11-27 04:11:10 +00:00
serefpolicy-3.1.2.tgz
- Remove user based home directory separation
2007-11-30 22:33:18 +00:00
serefpolicy-3.2.1.tgz
- Update to upstream - Allow httpd_sys_script_t to search users homedirs
2007-12-05 03:19:13 +00:00
serefpolicy-3.2.2.tgz
- Add polkit policy - Symplify userdom context, remove automatic per_role changes
2007-12-11 06:08:33 +00:00
serefpolicy-3.2.3.tgz
- Update to upstream
2007-12-13 21:40:00 +00:00
serefpolicy-3.2.4.tgz
- Fix definiton of admin_home_t
2007-12-19 18:00:58 +00:00
serefpolicy-3.2.5.tgz
- Update to upstream - Add libvirt policy - add qemu policy
2008-02-02 06:30:04 +00:00
serefpolicy-3.2.6.tgz
- Update to upstream
2008-02-06 21:47:42 +00:00
serefpolicy-3.2.7.tgz
- Merge with upstream
2008-02-18 21:31:18 +00:00
serefpolicy-3.2.8.tgz
- Fixes from yum-cron - Update to latest upstream
2008-02-20 18:52:50 +00:00
serefpolicy-3.2.9.tgz
- Add xace support
2008-02-22 20:32:52 +00:00
serefpolicy-3.3.0.tgz
- Update to upstream fixes
2008-02-26 13:45:23 +00:00
serefpolicy-3.3.1.tgz
Update for rawhide
2008-05-19 13:02:56 +00:00
serefpolicy-3.4.1.tgz
- Update to upstream
2008-06-12 14:50:00 +00:00
serefpolicy-3.4.2.tgz
- Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
2008-07-17 19:53:32 +00:00
serefpolicy-3.5.1.tgz
- Allow system-config-selinux to work with policykit
2008-08-07 12:22:07 +00:00
serefpolicy-3.5.2.tgz
- Update to upstream
2008-08-07 20:05:57 +00:00
serefpolicy-3.5.3.tgz
- Update to upstream
2008-08-11 21:19:25 +00:00
serefpolicy-3.5.4.tgz
- Allow ifconfig_t to read dhcpc_state_t
2008-08-26 14:46:43 +00:00
serefpolicy-3.5.5.tgz
- Update to upstream - New handling of init scripts
2008-09-03 20:16:35 +00:00
serefpolicy-3.5.6.tgz
- Remove gamin policy
2008-09-08 21:01:42 +00:00
serefpolicy-3.5.7.tgz
- Merge upstream changes - Add Xavier Toth patches
2008-09-12 20:36:21 +00:00
serefpolicy-3.5.8.tgz
- Upgrade to upstream
2008-09-26 12:38:56 +00:00
serefpolicy-3.5.9.tgz
- Allow NetworkManager to transition to avahi and iptables - Allow domains to search other domains keys, coverup kernel bug
2008-10-03 15:49:44 +00:00
serefpolicy-3.5.10.tgz
- Update to upstream policy
2008-10-09 10:48:56 +00:00
serefpolicy-3.5.11.tgz
- Update to upstream
2008-10-11 23:57:43 +00:00
serefpolicy-3.5.12.tgz
- Policy cleanup
2008-10-17 22:03:34 +00:00
serefpolicy-3.5.13.tgz
- Fix labeling on /var/spool/rsyslog
2008-11-25 19:18:01 +00:00
serefpolicy-3.6.1.tgz
- Update to upstream
2009-01-05 22:55:20 +00:00
serefpolicy-3.6.2.tgz
- Update to upstream
2009-01-19 17:35:43 +00:00
serefpolicy-3.6.3.tgz
- Upgrade to latest upstream
2009-02-04 04:02:17 +00:00
serefpolicy-3.6.4.tgz
- Add setrans contains from upstream
2009-02-09 22:07:20 +00:00
serefpolicy-3.6.5.tgz
- Re-add corenet_in_generic_if(unlabeled_t)
2009-02-16 22:54:22 +00:00
serefpolicy-3.6.6.tgz
- Update to Latest upstream
2009-03-03 20:10:30 +00:00
serefpolicy-3.6.7.tgz
- Upgrade to latest patches
2009-03-05 21:05:47 +00:00
serefpolicy-3.6.8.tgz
- Upgrade to latest upstream
2009-03-12 15:48:51 +00:00
serefpolicy-3.6.9.tgz
- Add xenner and wine fixes from mgrepl
2009-03-20 18:42:38 +00:00
serefpolicy-3.6.10.tgz
- Dontaudit binds to ports < 1024 for named - Upgrade to latest upstream
2009-04-06 19:27:19 +00:00
serefpolicy-3.6.11.tgz
- Upgrade to latest upstream - Allow devicekit_disk sys_rawio
2009-04-08 11:58:59 +00:00
serefpolicy-3.6.12.tgz
- Upgrade to upstream
2009-05-22 14:37:43 +00:00
serefpolicy-3.6.13.tgz
- Update to upstream
2009-06-09 02:15:29 +00:00
serefpolicy-3.6.14.tgz
- New version for upstream
2009-06-12 18:59:09 +00:00
serefpolicy-3.6.15.tgz
- New version for upstream
2009-06-15 17:59:49 +00:00
serefpolicy-3.6.16.tgz
- Update to upstream - Additional mail ports - Add virt_use_usb boolean for svirt
2009-06-19 11:41:44 +00:00
serefpolicy-3.6.17.tgz
- Update to upstream cleanup Fri Jun 19 2009 Dan Walsh <dwalsh@redhat.com> 3.6.17-1 - Update to upstream - Additional mail ports - Add virt_use_usb boolean for svirt
2009-06-20 13:59:00 +00:00
serefpolicy-3.6.18.tgz
- Update to upstream add sssd
2009-06-22 22:27:58 +00:00
serefpolicy-3.6.19.tgz
- Update to upstream - Fix nlscd_stream_connect
2009-06-26 20:13:04 +00:00
serefpolicy-3.6.20.tgz
- Update to upstream
2009-07-06 21:16:26 +00:00
serefpolicy-3.6.21.tgz
setroubleshoot-2.2.11.tar.gz
- Update to upstream
2009-07-15 19:12:04 +00:00
serefpolicy-3.6.22.tgz
- Update to upstream
2009-07-23 21:47:41 +00:00
serefpolicy-3.6.23.tgz
- Update to upstream
2009-07-28 19:08:17 +00:00
serefpolicy-3.6.24.tgz
- Fix polkit label - Remove hidebrokensymptoms for nss_ldap fix - Add modemmanager policy - Lots of merges from upstream - Begin removing textrel_shlib_t labels, from fixed libraries
2009-07-30 04:31:53 +00:00
serefpolicy-3.6.25.tgz
- More fixes from upstream
2009-07-30 21:38:54 +00:00
serefpolicy-3.6.26.tgz
- Add policycoreutils-python to pre install
2009-08-18 12:34:26 +00:00
serefpolicy-3.6.27.tgz
- Allow cupsd_config_t to be started by dbus - Add smoltclient policy
2009-08-18 22:43:34 +00:00
serefpolicy-3.6.28.tgz
- Fix system-config-services policy
2009-08-20 17:48:51 +00:00
setroubleshoot-2.2.21.tar.gz
- Update to upstream
2009-08-28 20:55:16 +00:00
serefpolicy-3.6.29.tgz
- Update to upsteam
2009-08-31 21:27:50 +00:00
serefpolicy-3.6.30.tgz
- More fixes
2009-09-09 21:08:02 +00:00
serefpolicy-3.6.31.tgz
- Update to upstream - Dontaudit nsplugin search /root - Dontaudit nsplugin sys_nice
2009-09-16 17:50:32 +00:00
serefpolicy-3.6.32.tgz
- Update to upstream
2009-11-14 05:18:01 +00:00
serefpolicy-3.6.33.tgz
- Update to upstream release 2.20091117
2009-11-18 22:22:56 +00:00
serefpolicy-3.7.1.tgz
- Add asterisk policy back in
2009-11-20 16:55:54 +00:00
serefpolicy-3.7.2.tgz
- Add asterisk policy back in - Update to upstream release 2.20091117
2009-11-25 20:19:12 +00:00
serefpolicy-3.7.3.tgz
- Update to upstream release
2009-12-10 19:20:14 +00:00
serefpolicy-3.7.4.tgz
Update packages
2009-12-18 21:09:01 +00:00
serefpolicy-3.7.5.tgz
- Update to upstream
2010-01-08 22:03:53 +00:00
serefpolicy-3.7.6.tgz
- Move users file to selection by spec file. - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t
2010-01-11 22:06:55 +00:00
serefpolicy-3.7.7.tgz
- Update to upstream
2010-01-18 22:40:25 +00:00
serefpolicy-3.7.8.tgz
- Add gstreamer_home_t for ~/.gstreamer
2010-01-22 15:26:39 +00:00
setroubleshoot-2.2.58.tar.gz
- Merge with upstream
2010-02-16 22:10:14 +00:00
serefpolicy-3.7.9.tgz
- Update to upstream
2010-03-18 15:47:35 +00:00
serefpolicy-3.7.11.tgz
serefpolicy-3.7.12.tgz
serefpolicy-3.7.13.tgz
serefpolicy-3.7.14.tgz
serefpolicy-3.7.15.tgz
- Update to upstream
2010-05-26 21:15:42 +00:00
serefpolicy-3.7.16.tgz
serefpolicy-3.7.17.tgz
serefpolicy-3.7.18.tgz
serefpolicy-3.7.19.tgz
serefpolicy-3.8.1.tgz
- Update to upstream - Allow prelink script to signal itself - Cobbler fixes
2010-06-07 21:15:35 +00:00
serefpolicy-3.8.2.tgz
- Update to upstream
2010-06-08 21:23:21 +00:00
serefpolicy-3.8.3.tgz
-Update to upstream
2010-06-18 20:14:28 +00:00
serefpolicy-3.8.4.tgz
-Update to upstream
2010-06-21 14:31:26 +00:00
serefpolicy-3.8.5.tgz
-Update to upstream
2010-06-28 17:19:34 +00:00
serefpolicy-3.8.6.tgz
- Update to upstream
2010-07-15 13:11:25 +00:00
serefpolicy-3.8.7.tgz
- Update to latest policy
2010-07-20 17:48:36 +00:00
serefpolicy-3.8.8.tgz
- Merge with upstream
2010-08-27 00:35:53 +00:00
*.rpm
serefpolicy*
/serefpolicy-3.9.0.tgz
- Merge with upstream
2010-08-30 21:34:52 +00:00
/serefpolicy-3.9.1.tgz
- Merge upstream fix of mmap_zero - Allow mount to write files in debugfs_t - Allow corosync to communicate with clvmd via tmpfs - Allow certmaster to read usr_t files - Allow dbus system services to search cgroup_t - Define rlogind_t as a login pgm
2010-09-02 17:43:28 +00:00
/serefpolicy-3.9.2.tgz
Allow iptables to read shorewall tmp files Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr intd label vlc as an execmem_exec_t Lots of fixes for mozilla_plugin to run google vidio chat Allow telepath_msn to execute ldconfig and its own tmp files Fix labels on hugepages Allow mdadm to read files on /dev Remove permissive domains and change back to unconfined Allow freshclam to execute shell and bin_t Allow devicekit_power to transition to dhcpc Add boolean to allow icecast to connect to any port
2010-09-08 18:17:07 +00:00
/serefpolicy-3.9.3.tgz
- Update to upstream
2010-09-13 20:17:15 +00:00
/serefpolicy-3.9.4.tgz
- Update to upstream
2010-09-16 11:59:03 +00:00
/serefpolicy-3.9.5.tgz
- Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.
2010-10-18 17:18:55 +00:00
/serefpolicy-3.9.6.tgz
- Update to upstream - Add vlock policy
2010-11-05 16:40:07 +00:00
/serefpolicy-3.9.8.tgz
- Update to upstream - Dontaudit leaked sockets from userdomains to user domains - Fixes for mcelog to handle scripts - Apply patch from Ruben Kerkhof - Allow syslog to search spool dirs
2010-11-16 08:46:19 +00:00
/serefpolicy-3.9.9.tgz
- Update to upstream - Cleanup for sandbox - Add attribute to be able to select sandbox types
2010-11-25 12:21:34 +00:00
/serefpolicy-3.9.10.tgz
- Update to upstream - Fix version of policy in spec file
2010-12-15 11:03:25 +00:00
/serefpolicy-3.9.11.tgz
Update to upstream
2010-12-20 17:43:48 +00:00
/serefpolicy-3.9.12.tgz
- Update to upstream
2011-01-17 18:42:12 +00:00
/serefpolicy-3.9.13.tgz
Commit removes big SELinux policy patches against tresys refpolicy. We're quite diverted from upstream policy. This change will use tarballs from github projects: https://github.com/fedora-selinux/selinux-policy https://github.com/fedora-selinux/selinux-policy-contrib
2017-12-24 13:31:11 +00:00
/selinux-policy-9ae373e.tar.gz
/selinux-policy-contrib-e269450.tar.gz
/container-selinux.tgz
Update new sources to reflect changes related to python3 dependency
2018-01-08 17:44:57 +00:00
/selinux-policy-contrib-a749579.tar.gz
/selinux-policy-f6aa4d6.tar.gz
* Mon Jan 15 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-2 - Allow aide to mmap usr_t files BZ(1534182) - Allow ypserv_t domain to connect to tcp ports BZ(1534245) - Allow vmtools_t domain creating vmware_log_t files - Allow openvswitch_t domain to acces infiniband devices - Allow dirsrv_t domain to create tmp link files - Allow pcp_pmie_t domain to exec itself. BZ(153326) - Update openvswitch SELinux module - Allow virtd_t to create also sock_files with label virt_var_run_t - Allow chronyc_t domain to manage chronyd_keys_t files. - Allow logwatch to exec journal binaries BZ(1403463) - Allow sysadm_t and staff_t roles to manage user systemd services BZ(1531864) - Update logging_read_all_logs to allow mmap all logfiles BZ(1403463) - Add Label systemd_unit_file_t for /var/run/systemd/units/
2018-01-15 16:33:37 +00:00
/selinux-policy-cc4a892.tar.gz
/selinux-policy-contrib-68a780b.tar.gz
* Fri Jan 19 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-3 - Merge pull request #45 from jlebon/pr/rot-sd-dbus-rawhide - Allow virt_domains to acces infiniband pkeys. - Allow systemd to relabelfrom tmpfs_t link files in /var/run/systemd/units/ BZ(1535180) - Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t - Allow audisp_remote_t domain write to files on all levels
2018-01-19 11:48:25 +00:00
/selinux-policy-0087f3e.tar.gz
/selinux-policy-contrib-93c9a53.tar.gz
* Tue Jan 30 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-4 - rpm: Label /usr/share/rpm usr_t (ostree/Atomic systems) - Update dbus_role_template() BZ(1536218) - Allow lldpad_t domain to mmap own tmpfs files BZ(1534119) - Allow blueman_t dbus chat with policykit_t BZ(1470501) - Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t BZ(1507110) - Allow postfix_master_t and postfix_local_t to connect to system dbus. BZ(1530275) - Allow system_munin_plugin_t domain to read sssd public files and allow stream connect to ssd daemon BZ(1528471) - Allow rkt_t domain to bind on rkt_port_t tcp BZ(1534636) - Allow jetty_t domain to mmap own temp files BZ(1534628) - Allow sslh_t domain to read sssd public files and stream connect to sssd. BZ(1534624) - Consistently label usr_t for kernel/initrd in /usr - kernel/files.fc: Label /usr/lib/sysimage as usr_t - Allow iptables sysctl load list support with SELinux enforced - Label HOME_DIR/.config/systemd/user/* user unit files as systemd_unit_file_t BZ(1531864)
2018-01-30 11:57:41 +00:00
/selinux-policy-747f4e6.tar.gz
/selinux-policy-contrib-4fe9943.tar.gz
* Tue Jan 30 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-5 - Allow opendnssec daemon to execute ods-signer BZ(1537971)
2018-01-30 16:04:16 +00:00
/selinux-policy-contrib-a1cd00e.tar.gz
* Tue Feb 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-6 - Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets - Add new interface ppp_filetrans_named_content() - Allow keepalived_t read sysctl_net_t files - Allow puppetmaster_t domtran to puppetagent_t - Allow kdump_t domain to read kernel ring buffer - Allow boinc_t to mmap boinc tmpfs files BZ(1540816) - Merge pull request #47 from masatake/keepalived-signal - Allow keepalived_t create and write a file under /tmp - Allow ipsec_t domain to exec ifconfig_exec_t binaries. - Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock - Allow updpwd_t domain to create files in /etc with shadow_t label
2018-02-06 08:58:08 +00:00
/selinux-policy-642cc91.tar.gz
/selinux-policy-contrib-b657ba0.tar.gz
* Thu Feb 08 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-7 - Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t - Allow certmonger_t domain to access /etc/pki/pki-tomcat BZ(1542600) - Allow keepalived_t domain getattr proc filesystem - Allow init_t to create UNIX sockets for unconfined services (BZ1543049) - Allow ipsec_mgmt_t execute ifconfig_exec_t binaries Allow ipsec_mgmt_t nnp domain transition to ifconfig_t - Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
2018-02-08 13:38:23 +00:00
/selinux-policy-contrib-0311bf8.tar.gz
/selinux-policy-ef9ecd7.tar.gz
* Tue Feb 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-9 - Fix broken cups Security Module - Allow dnsmasq_t domain dbus chat with unconfined users. BZ(1532079) - Allow geoclue to connect to tcp nmea port BZ(1362118) - Allow pcp_pmcd_t to read mock lib files BZ(1536152) - Allow abrt_t domain to mmap passwd file BZ(1540666) - Allow gpsd_t domain to get session id of another process BZ(1540584) - Allow httpd_t domain to mmap httpd_tmpfs_t files BZ(1540405) - Allow cluster_t dbus chat with systemd BZ(1540163) - Add interface raid_stream_connect() - Allow nscd_t to mmap nscd_var_run_t files BZ(1536689) - Allow dovecot_delivery_t to mmap mail_home_rw_t files BZ(1531911) - Make cups_pdf_t domain system dbusd client BZ(1532043) - Allow logrotate to read auditd_log_t files BZ(1525017) - Improve snapperd SELinux policy BZ(1514272) - Allow virt_domain to read virt_image_t files BZ(1312572) - Allow openvswitch_t stream connect svirt_t - Update dbus_dontaudit_stream_connect_system_dbusd() interface - Allow openvswitch domain to manage svirt_tmp_t sock files - Allow named_filetrans_domain domains to create .heim_org.h5l.kcm-socket sock_file with label sssd_var_run_t BZ(1538210) - Merge pull request #50 from dodys/pkcs - Label tcp and udp ports 10110 as nmea_port_t BZ(1362118) - Allow systemd to access rfkill lib dirs BZ(1539733) - Allow systemd to mamange raid var_run_t sockfiles and files BZ(1379044) - Allow vxfs filesystem to use SELinux labels - Allow systemd to setattr on systemd_rfkill_var_lib_t dirs BZ(1512231) - Allow few services to dbus chat with snapperd BZ(1514272) - Allow systemd to relabel system unit symlink to systemd_unit_file_t. BZ(1535180) - Fix logging as staff_u into Fedora 27 - Fix broken systemd_tmpfiles_run() interface
2018-02-20 08:25:14 +00:00
/selinux-policy-8a10ba8.tar.gz
/selinux-policy-contrib-6777a17.tar.gz
* Thu Feb 22 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-2 - refpolicy: Define extended_socket_class policy capability and socket classes - Make bluetooth_var_lib_t as mountpoint BZ(1547416) - Allow systemd to request load kernel module BZ(1547227) - Allow ipsec_t domain to read l2tpd pid files - Allow sysadm to read/write trace filesystem BZ(1547875) - Allow syslogd_t to mmap systemd coredump tmpfs files BZ(1547761)
2018-02-22 14:13:02 +00:00
/selinux-policy-contrib-27f5e51.tar.gz
/selinux-policy-2c13be1.tar.gz
Add forgotten sources file
2018-03-05 15:27:57 +00:00
/selinux-policy-e16d205.tar.gz
/selinux-policy-contrib-9facb1c.tar.gz
* Tue Mar 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-4 - Allow l2tpd_t domain to create pppox sockets - Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_lib_t link files BZ(1544251) - Add interface abrt_map_cache() - Update gnome_manage_home_config() to allow also map permission BZ(1544270) - Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770) - Dontaudit kernel bug when several services requesting load kernel module - Allow traceroute and unconfined domains creating sctp sockets - Add interface corenet_sctp_bind_generic_node() - Allow ping_t domain to create icmp sockets - Allow staff_t to mmap abrt_var_cache_t BZ(1544273) - Fix typo bug in dev_map_framebuffer() interface BZ(1551842) - Dontaudit kernel bug when several services requesting load kernel module
2018-03-06 15:16:43 +00:00
/selinux-policy-contrib-f564072.tar.gz
/selinux-policy-bd7ad92.tar.gz
* Mon Mar 12 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-5 - Allow bluetooth_t domain to create alg_socket BZ(1554410) - Allow tor_t domain to execute bin_t files BZ(1496274) - Allow iscsid_t domain to mmap kernel modules BZ(1553759) - Update minidlna SELinux policy BZ(1554087) - Allow motion_t domain to read sysfs_t files BZ(1554142) - Allow snapperd_t domain to getattr on all files,dirs,sockets,pipes BZ(1551738) - Allow l2tp_t domain to read ipsec config files BZ(1545348) - Allow colord_t to mmap home user files BZ(1551033) - Dontaudit httpd_t creating kobject uevent sockets BZ(1552536) - Allow ipmievd_t to mmap kernel modules BZ(1552535) - Allow boinc_t domain to read cgroup files BZ(1468381) - Backport allow rules from refpolicy upstream repo - Allow gpg_t domain to bind on all unereserved udp ports - Allow systemd to create systemd_rfkill_var_lib_t dirs BZ(1502164) - Allow netlabel_mgmt_t domain to read sssd public files, stream connect to sssd_t BZ(1483655) - Allow xdm_t domain to sys_ptrace BZ(1554150) - Allow application_domain_type also mmap inherited user temp files BZ(1552765) - Update ipsec_read_config() interface - Fix broken sysadm SELinux module - Allow ipsec_t to search for bind cache BZ(1542746) - Allow staff_t to send sigkill to mount_t domain BZ(1544272) - Label /run/systemd/resolve/stub-resolv.conf as net_conf_t BZ(1471545) - Label ip6tables.init as iptables_exec_t BZ(1551463) - Allow hostname_t to use usb ttys BZ(1542903) - Add fsetid capability to updpwd_t domain BZ(1543375) - Allow systemd machined send signal to all domains BZ(1372644) - Dontaudit create netlink selinux sockets for unpriv SELinux users BZ(1547876) - Allow sysadm_t to create netlink generic sockets BZ(1547874) - Allow passwd_t domain chroot - Dontaudit confined unpriviliged users setuid capability
2018-03-12 16:20:32 +00:00
/selinux-policy-9bd65d3.tar.gz
/selinux-policy-contrib-fbc0290.tar.gz
* Thu Mar 15 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-6 - Allow rpcd_t domain dac override - Allow rpm domain to mmap rpm_var_lib_t files - Allow arpwatch domain to create bluetooth sockets - Allow secadm_t domain to mmap audit config and log files - Update init_abstract_socket_activation() to allow also creating tcp sockets - getty_t should be ranged in MLS. Then also local_login_t runs as ranged domain. - Add SELinux support for systemd-importd - Create new type bpf_t and label /sys/fs/bpf with this type
2018-03-15 19:41:40 +00:00
/selinux-policy-contrib-ce817e6.tar.gz
/selinux-policy-370bcfb.tar.gz
Update also sources
2018-03-20 11:21:39 +00:00
/selinux-policy-4b1f9bd.tar.gz
/selinux-policy-contrib-d2dd0ad.tar.gz
* Wed Mar 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-8 - Improve bluetooth_stream_socket interface to allow caller domain also send bluetooth sockets - Allow tcpd_t bind on sshd_port_t if ssh_use_tcpd() is enabled - Allow semanage_t domain mmap usr_t files - Add new boolean: ssh_use_tcpd()
2018-03-21 18:15:49 +00:00
/selinux-policy-contrib-7ecfe28.tar.gz
/selinux-policy-116b85e.tar.gz
* Sun Mar 25 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-9 - Allow smbcontrol_t to mmap samba_var_t files and allow winbind create sockets BZ(1559795) - Allow nagios to exec itself and mmap nagios spool files BZ(1559683) - Allow nagios to mmap nagios config files BZ(1559683) - Fixing Ganesha module - Fix typo in NetworkManager module - Fix bug in gssproxy SELinux module - Allow abrt_t domain to mmap container_file_t files BZ(1525573) - Allow networkmanager to be run ssh client BZ(1558441) - Allow pcp domains to do dc override BZ(1557913) - Dontaudit pcp_pmie_t to reaquest lost kernel module - Allow pcp_pmcd_t to manage unpriv userdomains semaphores BZ(1554955) - Allow httpd_t to read httpd_log_t dirs BZ(1554912) - Allow fail2ban_t to read system network state BZ(1557752) - Allow dac override capability to mandb_t domain BZ(1529399) - Allow collectd_t domain to mmap collectd_var_lib_t files BZ(1556681) - Dontaudit bug in kernel 4.16 when domains requesting loading kernel modules BZ(1555369) - Add Domain transition from gssproxy_t to httpd_t domains BZ(1548439) - Allow httpd_t to mmap user_home_type files if boolean httpd_read_user_content is enabled BZ(1555359) - Allow snapperd to relabel snapperd_data_t - Improve bluetooth_stream_socket interface to allow caller domain also send bluetooth sockets - Allow tcpd_t bind on sshd_port_t if ssh_use_tcpd() is enabled - Allow insmod_t to load modules BZ(1544189) - Allow systemd_rfkill_t domain sys_admin capability BZ(1557595) - Allow systemd_networkd_t to read/write tun tap devices - Add shell_exec_t file as domain entry for init_t - Label also /run/systemd/resolved/ as systemd_resolved_var_run_t BZ(1556862) - Dontaudit kernel 4.16 bug when lot of domains requesting load kernel module BZ(1557347) - Improve userdom_mmap_user_home_content_files - Allow systemd_logind_t domain to setattributes on fixed disk devices BZ(1555414) - Dontaudit kernel 4.16 bug when lot of domains requesting load kernel module - Allow semanage_t domain mmap usr_t files - Add new boolean: ssh_use_tcpd()
2018-03-25 00:02:58 +00:00
/selinux-policy-154a8cf.tar.gz
/selinux-policy-contrib-504d76b.tar.gz
* Thu Mar 29 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-11 - Allow accountsd_t domain to dac override BZ(1561304) - Allow cockpit_ws_t domain to read system state BZ(1561053) - Allow postfix_map_t domain to use inherited user ptys BZ(1561295) - Allow abrt_dump_oops_t domain dac override BZ(1561467) - Allow l2tpd_t domain to run stream connect for sssd_t BZ(1561755) - Allow crontab domains to do dac override - Allow snapperd_t domain to unmount fs_t filesystems - Allow pcp processes to read fixed_disk devices BZ(1560816) - Allow unconfined and confined users to use dccp sockets - Allow systemd to manage bpf dirs/files - Allow traceroute_t to create dccp_sockets
2018-03-29 17:27:36 +00:00
/selinux-policy-01924d8.tar.gz
/selinux-policy-contrib-1255203.tar.gz
* Sat Apr 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-12 - Add new boolean redis_enable_notify() - Label /var/log/shibboleth-www(/.*) as httpd_sys_rw_content_t - Add new label for vmtools scripts and label it as vmtools_unconfined_t stored in /etc/vmware-tools/ - Allow svnserve_t domain to manage kerberos rcache and read krb5 keytab - Add dac_override and dac_read_search capability to hypervvssd_t domain - Label /usr/lib/systemd/systemd-fence_sanlockd as fenced_exec_t - Allow samba to create /tmp/host_0 as krb5_host_rcache_t - Add dac_override capability to fsdaemon_t BZ(1564143) - Allow abrt_t domain to map dos files BZ(1564193) - Add dac_override capability to automount_t domain - Allow keepalived_t domain to connect to system dbus bus - Allow nfsd_t to read nvme block devices BZ(1562554) - Allow lircd_t domain to execute bin_t files BZ(1562835) - Allow l2tpd_t domain to read sssd public files BZ(1563355) - Allow logrotate_t domain to do dac_override BZ(1539327) - Remove labeling for /etc/vmware-tools to bin_t it should be vmtools_unconfined_exec_t - Add capability sys_resource to systemd_sysctl_t domain - Label all /dev/rbd* devices as fixed_disk_device_t - Allow xdm_t domain to mmap xserver_log_t files BZ(1564469) - Allow local_login_t domain to rread udev db - Allow systemd_gpt_generator_t to read /dev/random device - add definition of bpf class and systemd perms
2018-04-07 18:34:23 +00:00
/selinux-policy-contrib-10b75cc.tar.gz
/selinux-policy-bb22502.tar.gz
* Thu Apr 12 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-13 - refpolicy: Update for kernel sctp support - Allow smbd_t send to nmbd_t via dgram sockets BZ(1563791) - Allow antivirus domain to be client for system dbus BZ(1562457) - Dontaudit requesting tlp_t domain kernel modules, its a kernel bug BZ(1562383) - Add new boolean: colord_use_nfs() BZ(1562818) - Allow pcp_pmcd_t domain to check access to mdadm BZ(1560317) - Allow colord_t to mmap gconf_home_t files - Add new boolean redis_enable_notify() - Label /var/log/shibboleth-www(/.*) as httpd_sys_rw_content_t - Add new label for vmtools scripts and label it as vmtools_unconfined_t stored in /etc/vmware-tools/ - Remove labeling for /etc/vmware-tools to bin_t it should be vmtools_unconfined_exec_t
2018-04-12 10:51:18 +00:00
/selinux-policy-b8ddd7e.tar.gz
/selinux-policy-contrib-4b13776.tar.gz
* Fri Apr 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-14 - Add dac_override capability to mailman_mail_t domain - Add dac_override capability to radvd_t domain - Update openvswitch policy - Add dac_override capability to oddjob_homedir_t domain - Allow slapd_t domain to mmap slapd_var_run_t files - Rename tang policy to tangd - Allow virtd_t domain to relabel virt_var_lib_t files - Allow logrotate_t domain to stop services via systemd - Add tang policy - Allow mozilla_plugin_t to create mozilla.pdf file in user homedir with label mozilla_home_t - Allow snapperd_t daemon to create unlabeled dirs. - Make httpd_var_run_t mountpoint - Allow hsqldb_t domain to mmap own temp files - We have inconsistency in cgi templates with upstream, we use _content_t, but refpolicy use httpd__content_t. Created aliasses to make it consistence - Allow Openvswitch adding netdev bridge ovs 2.7.2.10 FDP - Add new Boolean tomcat_use_execmem - Allow nfsd_t domain to read/write sysctl fs files - Allow conman to read system state - Allow brltty_t domain to be dbusd system client - Allow zebra_t domain to bind on babel udp port - Allow freeipmi domain to read sysfs_t files - Allow targetd_t domain mmap lvm config files - Allow abrt_t domain to manage kdump crash files - Add capability dac_override to antivirus domain - Allow svirt_t domain mmap svirt_image_t files BZ(1514538) - Allow ftpd_t domain to chat with systemd - Allow systemd init named socket activation for uuidd policy - Allow networkmanager domain to write to ecryptfs_t files BZ(1566706) - Allow l2tpd domain to stream connect to sssd BZ(1568160) - Dontaudit abrt_t to write to lib_t dirs BZ(1566784) - Allow NetworkManager_ssh_t domain transition to insmod_t BZ(1567630) - Allow certwatch to manage cert files BZ(1561418) - Merge pull request #53 from tmzullinger/rawhide - Merge pull request #52 from thetra0/rawhide - Allow abrt_dump_oops_t domain to mmap all non security files BZ(1565748) - Allow gpg_t domain mmap cert_t files Allow gpg_t mmap gpg_agent_t files - Allow NetworkManager_ssh_t domain use generic ptys. BZ(1565851) - Allow pppd_t domain read/write l2tpd pppox sockets BZ(1566096) - Allow xguest user use bluetooth sockets if xguest_use_bluetooth boolean is turned on. - Allow pppd_t domain creating pppox sockets BZ(1566271) - Allow abrt to map var_lib_t files - Allow chronyc to read system state BZ(1565217) - Allow keepalived_t domain to chat with systemd via dbus - Allow git to mmap git_(sys|user)_content_t files BZ(1518027) - Allow netutils_t domain to create bluetooth sockets - Allow traceroute to bind on generic sctp node - Allow traceroute to search network sysctls - Allow systemd to use virtio console - Label /dev/op_panel and /dev/opal-prd as opal_device_t
2018-04-27 09:50:21 +00:00
/selinux-policy-fee4738.tar.gz
/selinux-policy-contrib-6c883f6.tar.gz
Reference in New Issue Copy Permalink