- Add /usr/lib/systemd/systemd-networkd policy - Add sysnet_manage_config_dirs() - Add support for /var/run/systemd/network and labeled it as net_conf_t - Allow unpriv SELinux users to dbus chat with firewalld - Add lvm_write_metadata() - Label /etc/yum.reposd dir as system_conf_t. Should be safe because system_conf_t is base_ro_file_type - Add support for /dev/vmcp and /dev/sclp - Add docker_connect_any boolean - Fix zabbix policy - Allow zabbix to send system log msgs - Allow pegasus_openlmi_storage_t to write lvm metadata - Updated pcp_bind_all_unreserved_ports - Allow numad to write scan_sleep_millisecs - Turn on entropyd_use_audio boolean by default - Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf. - Allow lscpu running as rhsmcertd_t to read /proc/sysinfo
23 lines
353 B
Plaintext
23 lines
353 B
Plaintext
policy_module(permissivedomains,21)
|
|
|
|
optional_policy(`
|
|
gen_require(`
|
|
type osad_t;
|
|
')
|
|
permissive osad_t;
|
|
')
|
|
|
|
optional_policy(`
|
|
gen_require(`
|
|
type docker_t;
|
|
')
|
|
permissive docker_t;
|
|
')
|
|
|
|
optional_policy(`
|
|
gen_require(`
|
|
type systemd_networkd_t;
|
|
')
|
|
permissive systemd_networkd_t;
|
|
')
|