rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

- Fixed destined form libvirt-sandbox

Browse Source 
- Allow apps that list sysfs to also read sympolicy links in this filesystem
- Add ubac_constrained rules for chrome_sandbox
- Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
- Allow postgresql to be executed by the caller
- Standardize interfaces of daemons
- Add new labeling for mm-handler
- Allow all matahari domains to read network state and etc_runtime_t files
This commit is contained in:
Miroslav 2012-01-11 13:13:07 +01:00
parent 7cf580ebcc
commit 69a8d0687a
2 changed files with 892 additions and 260 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1140
policy-F16.patch
View File

File diff suppressed because it is too large Load Diff

12
selinux-policy.spec
View File

@ -16,7 +16,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.10.0 Version: 3.10.0
Release: 72%{?dist} Release: 73%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -471,6 +471,16 @@ SELinux Reference policy mls base module.
%endif %endif
%changelog %changelog
* Wed Jan 11 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-73
- Fixed destined form libvirt-sandbox
- Allow apps that list sysfs to also read sympolicy links in this filesystem
- Add ubac_constrained rules for chrome_sandbox
- Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
- Allow postgresql to be executed by the caller
- Standardize interfaces of daemons
- Add new labeling for mm-handler
- Allow all matahari domains to read network state and etc_runtime_t files
* Wed Jan 4 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72 * Wed Jan 4 2012 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72
- New fix for seunshare, requires seunshare_domains to be able to mounton / - New fix for seunshare, requires seunshare_domains to be able to mounton /
- Allow systemctl running as logrotate_t to connect to private systemd socket - Allow systemctl running as logrotate_t to connect to private systemd socket