[ol7_latest] selinux-policy-mls-3.13.1-252.0.1.el7.noarch

SELinux Reference policy mls base module.

Changelog (Show File list) (Show related packages)

• Wed Aug 07 2019 EL Errata <el-errata_ww@oracle.com> - 3.13.1-252.0.1

  - Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
  - Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
  - Allow chronyd_t to execute shell scripts [Orabug: 28260775]
  - SELinux support for cgroup2 filesystem. [OraBug 28127822]
  - refpolicy: Define getrlimit permission for class process [OraBug 28229492]
  - Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
  - Obsolete docker-engine-selinux [OraBug 26439663]
  - Fix container selinux policy [OraBug 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Thu Jun 27 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252

  - Allow ganesha_t domain to connect to tcp portmap_port_t
  Resolves: rhbz#1715088

• Mon Jun 10 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251

  - Allow redis to creating tmp files with own label
  Resolves: rhbz#1646765

• Wed Jun 05 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-250

  - Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
  Resolves: rhbz#1716400

• Wed May 22 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249

  - Allow nrpe_t domain to read process state of systemd_logind_t
  - Add interface systemd_logind_read_state()
  Resolves: rhbz#1653309

• Tue May 21 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-248

  - Label /etc/rhsm as rhsmcertd_config_t
  Resolves: rhbz#1703573

• Fri May 17 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247

  - Fix typo in gpg SELinux module
  - Update gpg policy to make ti working with confined users
  Resolves: rhbz#1535109
  - Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
  Resolves: rhbz#1653309
  - Allow nrpe_t domain to be dbus cliennt
  Resolves: rhbz#1653309
  - Add interface sssd_signull()
  Resolves: rhbz#1653309
  - Update userdomains to allow confined users to create gpg keys
  Resolves: rhbz#1535109

• Thu May 02 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246

  - Allow ngaios to use chown capability
  Resolves: rhbz#1653309
  - Dontaudit gpg_domain to create netlink_audit sockets
  Resolves: rhbz#1535109
  - Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
  Resolves: rhbz#1558836
  - Update domain_can_mmap_files() boolean to allow also mmap lnk files

• Thu Apr 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-245

  - Allow rhsmcertd_t domain to read yum.log file labeled as rpm_log_t
  Resolves: rhbz#1695342

• Tue Apr 23 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-244

  - Update Nagios policy when sudo is used
  Resolves: rhbz#1653309