[ol7_latest] selinux-policy-minimum-3.13.1-192.0.1.el7_5.3.noarch

SELinux Reference policy minimum base module.

Changelog (Show File list) (Show related packages)

• Fri Apr 13 2018 EL Errata <el-errata_ww@oracle.com> - 3.13.1-192.0.1.3

  - Obsolete docker-engine-selinux [OraBug 26439663]
  - Fix container selinux policy [OraBug 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Wed Mar 28 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-192.3

  - Allow snapperd_t domain to unmount fs_t filesystems
  Resolves: rhbz#1561424

• Mon Mar 26 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-192.2

  - Allow snapperd_t to set priority for kernel processes
  Resolves: rhbz#1558656

• Wed Mar 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-192.1

  - Backport several changes for snapperdfrom Fedora Rawhide
  Resolves: rhbz#1558656

• Tue Feb 27 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-192

  - Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
  Resolves: rhbz#1546721

• Mon Feb 19 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-191

  - Allow openvswitch_t stream connect svirt_t
  Resolves: rhbz#1540702

• Fri Feb 16 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-190

  - Allow openvswitch domain to manage svirt_tmp_t sock files
  Resolves: rhbz#1540702
  - Fix broken systemd_tmpfiles_run() interface

• Wed Feb 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-189

  - Allow dirsrv_t domain to create tmp link files
  Resolves: rhbz#1536011
  - Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
  Resolves: rhbz#1428568
  - Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
  - Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
  Resolves: rhbz#1539416

• Wed Feb 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-188

  - Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
  Resolves: rhbz#1540702
  - Allow keepalived_t domain getattr proc filesystem
  Resolves: rhbz#1477542
  - Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
  Resolves: rhbz#1538544
  - Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
  Resolves: rhbz:#1539416
  - Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
  Resolves: rhbz#1479350

• Tue Feb 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-187

  - Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
  Resolves: rhbz#1535196
  - Add new interface ppp_filetrans_named_content()
  Resolves: rhbz#1530601
  - Allow keepalived_t read sysctl_net_t files
  Resolves: rhbz#1477542
  - Allow puppetmaster_t domtran to puppetagent_t
  Resolves: rhbz#1376893
  - Allow kdump_t domain to read kernel ring buffer
  Resolves: rhbz#1540004
  - Allow ipsec_t domain to exec ifconfig_exec_t binaries.
  Resolves: rhbz#1539416
  - Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
  Resolves: rhbz#1530601
  - Allow updpwd_t domain to create files in /etc with shadow_t label
  Resolves: rhbz#1412838
  - Allow iptables sysctl load list support with SELinux enforced
  Resolves: rhbz#1535572