rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Commit Graph

  • 4548b66f2e * Thu Jul 29 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.11-1 - Allow hostapd bind UDP sockets to the dhcpd port Resolves: rhbz#1979968 - Allow mdadm read iscsi pid files Resolves: rhbz#1976073 - Unconfined domains should not be confined Resolves: rhbz#1977986 - Allow NetworkManager_t to watch /etc Resolves: rhbz#1980000 - Allow using opencryptoki for ipsec Resolves: rhbz#1977915 Zdenek Pytela 2021-07-29 17:11:36 +0200
  • c0ea3a13a7 * Wed Jul 14 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.10-1 - Allow bacula get attributes of cgroup filesystems Resolves: rhbz#1976917 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: rhbz#1972382 - Add the lockdown integrity permission to dev_map_userio_dev() Resolves: rhbz#1966758 - Allow virtlogd_t to create virt_var_lockd_t dir Resolves: rhbz#1974875 Zdenek Pytela 2021-07-14 16:11:07 +0200
  • 86f64b8b19 gating.yaml: add missing '}' Zdenek Pytela 2021-07-07 10:46:03 +0200
  • 52a5aa8d34 Add gating.yaml to enable functional gating tests Zdenek Pytela 2021-04-22 15:49:46 +0200
  • 37bcc175cd * Tue Jun 22 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.9-1 - Allow systemd-coredump getattr nsfs files and net_admin capability Resolves: rhbz#1965372 - Label /run/libvirt/common with virt_common_var_run_t Resolves: rhbz#1969209 - Label /usr/bin/arping plain file with netutils_exec_t Resolves: rhbz#1952515 - Make usbmuxd_t a daemon Resolves: rhbz#1965411 - Allow usbmuxd get attributes of cgroup filesystems Resolves: rhbz#1965411 - Label /dev/dma_heap/* char devices with dma_device_t - Revert "Label /dev/dma_heap/* char devices with dma_device_t" - Revert "Label /dev/dma_heap with dma_device_dir_t" - Revert "Associate dma_device_dir_t with device filesystem" Resolves: rhbz#1967818 - Label /var/lib/kdump with kdump_var_lib_t Resolves: rhbz#1965989 - Allow systemd-timedated watch runtime dir and its parent Resolves: rhbz#1970865 - Label /run/fsck with fsadm_var_run_t Resolves: rhbz#1970911 Zdenek Pytela 2021-06-22 14:41:30 +0200
  • 042fffd52c * Thu Jun 10 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.8-1 - Associate dma_device_dir_t with device filesystem Resolves: rhbz#1954116 - Add default file context specification for dnf log files Resolves: rhbz#1955223 - Allow using opencryptoki for certmonger Resolves: rhbz#1961756 - Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans() Resolves: rhbz#1961756 - Allow httpd_sys_script_t read, write, and map hugetlbfs files Resolves: rhbz#1964890 - Dontaudit daemon open and read init_t file Resolves: rhbz#1965412 - Allow sanlock get attributes of cgroup filesystems Resolves: rhbz#1965217 Zdenek Pytela 2021-06-10 23:07:44 +0200
  • 5d2a514c72 * Tue Jun 08 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.7-1 - Set default file context for /var/run/systemd instead of /run/systemd Resolves: rhbz#1966492 Zdenek Pytela 2021-06-08 19:26:12 +0200
  • a0031a1fc3 * Mon Jun 07 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.6-1 - Label /dev/dma_heap with dma_device_dir_t Resolves: rhbz#1954116 - Allow pkcs-slotd create and use netlink_kobject_uevent_socket Resolves: rhbz#1963252 - Label /run/systemd/default-hostname with hostname_etc_t Resolves: rhbz#1966492 Zdenek Pytela 2021-06-07 16:34:34 +0200
  • 14a2757535 * Thu May 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.5-1 - Label /dev/trng with random_device_t Resolves: rhbz#1962260 - Label /dev/zram[0-9]+ block device files with fixed_disk_device_t Resolves: rhbz#1954116 - Label /dev/udmabuf character device with dma_device_t Resolves: rhbz#1954116 - Label /dev/dma_heap/* char devices with dma_device_t Resolves: rhbz#1954116 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: rhbz#1954116 - Allow fcoemon create sysfs files Resolves: rhbz#1952292 Zdenek Pytela 2021-05-27 14:57:41 +0200
  • 61280fbdd0 * Wed May 12 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.4-1 - Allow sysadm_t dbus chat with tuned Resolves: rhbz#1953643 - Allow tuned write profile files with file transition Resolves: rhbz#1953643 - Allow tuned manage perf_events Resolves: rhbz#1953643 - Make domains use kernel_write_perf_event() and kernel_manage_perf_event() Resolves: rhbz#1953643 - Add kernel_write_perf_event() and kernel_manage_perf_event() Resolves: rhbz#1953643 - Allow syslogd_t watch root and var directories Resolves: rhbz#1957792 - Allow tgtd create and use rdma socket Resolves: rhbz#1955559 - Allow aide connect to init with a unix socket Resolves: rhbz#1926343 Zdenek Pytela 2021-05-12 15:45:13 +0200
  • 997ca10921 * Wed Apr 28 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.3-1 - Allow domain create anonymous inodes Resolves: rhbz#1954145 - Add anon_inode class to the policy Resolves: rhbz#1954145 - Allow pluto IKEv2 / ESP over TCP Resolves: rhbz#1951471 - Add brltty new permissions required by new upstream version Resolves: rhbz#1947842 - Label /var/lib/brltty with brltty_var_lib_t Resolves: rhbz#1947842 - Allow login_userdomain create cgroup files Resolves: rhbz#1951114 - Allow aide connect to systemd-userdbd with a unix socket Resolves: rhbz#1926343 - Allow cups-lpd read its private runtime socket files Resolves: rhbz#1947397 - Label /etc/redis as redis_conf_t Resolves: rhbz#1947874 - Add file context specification for /usr/libexec/realmd Resolves: rhbz#1946495 Zdenek Pytela 2021-04-28 15:25:09 +0200
  • d48e2527dc * Thu Apr 22 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.2-1 - Further update make-rhat-patches.sh for RHEL 9.0 beta - Add file context specification for /var/tmp/tmp-inst Resolves: rhbz#1924656 Zdenek Pytela 2021-04-22 13:47:13 +0200
  • 40e9a7fb1f * Wed Apr 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.1-1 - Update selinux-policy.spec and make-rhat-patches.sh for RHEL 9.0 beta - Allow unconfined_service_t confidentiality and integrity lockdown Resolves: rhbz#1950267 Zdenek Pytela 2021-04-21 20:32:21 +0200
  • b8bce4d7d2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 Mohan Boddu 2021-04-16 05:35:15 +0000
  • 0c7d2cb554 Merged update from upstream sources DistroBaker 2021-04-04 19:30:25 +0000
  • e671ae4028 Merged update from upstream sources DistroBaker 2021-03-31 18:45:22 +0000
  • ba2607aba9 Merged update from upstream sources DistroBaker 2021-03-28 20:10:28 +0000
  • d69f76993a Merged update from upstream sources DistroBaker 2021-03-15 19:41:15 +0000
  • 4508ded93f Merged update from upstream sources DistroBaker 2021-02-20 17:32:55 +0000
  • 7d8a7d8d32 Merged update from upstream sources DistroBaker 2021-02-17 12:42:58 +0100
  • 0d835ab10a Merged update from upstream sources DistroBaker 2021-02-17 08:17:18 +0000
  • f521412d05 Merged update from upstream sources DistroBaker 2021-02-13 00:52:48 +0000
  • ece0d0b7b5 Merged update from upstream sources DistroBaker 2021-02-12 06:32:55 +0000
  • eea0ee325a Merged update from upstream sources DistroBaker 2021-02-09 04:48:56 +0000
  • 8e575c9c13 Merged update from upstream sources DistroBaker 2021-02-05 19:32:49 +0000
  • ed75dbd813 Merged update from upstream sources DistroBaker 2021-01-22 10:21:40 +0000
  • 0397c4c5ec Merged update from upstream sources DistroBaker 2021-01-09 09:21:37 +0000
  • a2fc5fba64 Merged update from upstream sources DistroBaker 2020-12-17 21:38:57 +0000
  • 7cee52182d Merged update from upstream sources DistroBaker 2020-12-17 03:03:39 +0000
  • 14735eb5eb Merged update from upstream sources DistroBaker 2020-12-01 19:27:05 +0000
  • cafbcb567e Merged update from upstream sources DistroBaker 2020-11-25 16:25:36 +0000
  • 2fc3743e24 RHEL 9.0.0 Alpha bootstrap Troy Dawson 2020-11-16 14:01:44 -0800
  • c0c357c156 Merged update from upstream sources DistroBaker 2020-11-06 00:43:32 +0000
  • 478f57b9e8 Merged update from upstream sources DistroBaker 2020-10-27 22:21:32 +0100
  • 7975d49f67 RHEL 9.0.0 Alpha bootstrap Troy Dawson 2020-10-15 09:28:03 -0700
  • cc2b4860c9 New branch setup Release Configuration Management 2020-10-09 04:31:37 +0000