-
Tue May 23 2023 sagar sagar <sagar.sagar@oracle.com> - 3.13.1-268.0.17.2
- Allow unconfined domains to bpf all other domains [Orabug: 35217863]
- Allow unconfined_domain_type to use bpf tools [Orabug: 35217863]
-
Mon Feb 06 2023 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-268.0.15.2
- Allow fsdaemon_t to read nvme devices [Orabug: 35046729]
-
Tue Jul 13 2021 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-268.0.13.2
- Label /dev/sev char device as sev_device_t [Orabug: 33108360]
-
Mon Jun 21 2021 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-268.0.11.2
- Make rhel-import-state work with mls policy [Orabug: 30892790]
-
Mon Jun 14 2021 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-268.0.9.2
- Allow init_t to manage binfmt_misc_fs_t files [Orabug: 32982062]
-
Fri Jun 04 2021 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-268.0.7.2
- Add new interface init_manage_script_tmp_files() [Orabug: 32785674]
- Add new interface init_write_initrc_tmp_pipes() [Orabug: 32785674]
- Allow ldconfig_t domain to manage initrc_tmp_t objects [Orabug: 32785674]
- Allow ldconfig_t domain to manage initrc_tmp_t link files [Orabug: 32785674]
-
Thu Jun 03 2021 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-268.0.5.2
- Make iscsiadm work with mls policy [Orabug: 31891206]
-
Wed Apr 14 2021 Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 3.13.1-268.0.3.2
- Backport Xen related policies [Orabug: 32746407]
-
Tue Nov 10 2020 Kevin Lyons <kevin.x.lyons@oracle.com> - 3.13.1-268.0.1.2
- Make cloud-init work with mls policy [Orabug: 31428176]
- Allow cloud-init to create /var/run/cloud-init dir with net_conf_t SELinux label. [Orabug: 31428176]
- Make various processes work with mls policy [Orabug: 29848756]
- Make unconfined domains part of domain_named_attribute [Orabug: 30700069]
- Make tuned work with mls policy [Orabug: 29778485]
- Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.
-
Thu Oct 29 2020 Zdenek Pytela <zpytela@redhat.com> - 3.13.1-268.2
- Allow certmonger add new entries in a generic certificates directory
Resolves: rhbz#1879496
- Allow slapd add new entries in ldap certificates directory
Resolves: rhbz#1879496
- Add miscfiles_add_entry_generic_cert_dirs() interface
Resolves: rhbz#1879496