[ol7_latest] selinux-policy-3.13.1-229.0.3.el7_6.9.noarch

SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision  2.20091117

Changelog (Show File list) (Show related packages)

• Thu Feb 28 2019 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-229.0.3

  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]

• Mon Feb 04 2019 Naoki Tanaka <naoki.tanaka@oracle.com> - 3.13.1-229.0.2

  - Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
  - Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
  - Allow chronyd_t to execute shell scripts [Orabug: 28260775]

• Tue Jan 29 2019 EL Errata <el-errata_ww@oracle.com> - 3.13.1-229.0.1

  - SELinux support for cgroup2 filesystem. [OraBug 28127822]
  - refpolicy: Define getrlimit permission for class process [OraBug 28229492]
  - Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
  - Obsolete docker-engine-selinux [OraBug 26439663]
  - Fix container selinux policy [OraBug 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Thu Jan 17 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.9

  - Allow gssd_t domain to manage kernel keyrings of every domain.
  Resolves: rhbz#1665815
  - Add new interface domain_manage_all_domains_keyrings()
  Resolves: rhbz#1665815

• Mon Jan 14 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.8

  - Add interface domain_rw_all_domains_keyrings()
  Resolves: rhbz#1665815
  - Allow gssd_t domain to read/write kernel keyrings of every domain.
  Resolves: rhbz#1665815

• Thu Dec 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.7

  - Update snapperd policy to allow snapperd manage all non security dirs.
  Resolves: rhbz#1661158

• Fri Nov 02 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.6

  - Allow nova_t domain to use pam
  Resolves: rhbz:#1645270
  - sysstat: grant sysstat_t the search_dir_perms set
  Resolves: rhbz#1645271

• Fri Oct 12 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.5

  - Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
  Resolves: rhbz#1638257

• Thu Oct 11 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.4

  - Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
  Resolves: rhbz#1638427

• Thu Oct 11 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.3

  - Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
  Resolves: rhbz#1638257