[ol7_optional_latest] selinux-policy-sandbox-3.13.1-252.0.2.el7_7.6.noarch

SELinux sandbox policy used for the policycoreutils-sandbox package

Changelog (Show File list) (Show related packages)

• Tue Nov 26 2019 EL Errata <el-errata_ww@oracle.com> - 3.13.1-252.0.2

  - Make tuned work with mls policy [Orabug: 29778485]
  - Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
  - Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
  - Allow chronyd_t to execute shell scripts [Orabug: 28260775]
  - SELinux support for cgroup2 filesystem. [OraBug 28127822]
  - refpolicy: Define getrlimit permission for class process [OraBug 28229492]
  - Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
  - Obsolete docker-engine-selinux [OraBug 26439663]
  - Fix container selinux policy [OraBug 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Wed Nov 06 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.6

  - Dontaudit tmpreaper_t getting attributes from sysctl_type files
  Resolves: rhbz#1766095

• Thu Oct 31 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.5

  - Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
  Resolves: rhbz#1766095

• Wed Oct 30 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.4

  - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
  Resolves: rhbz#1766095

• Wed Oct 30 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.3

  - Update tmpreaper_t policy due to fuser command
  Resolves: rhbz#1766095

• Mon Oct 28 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.2

  - Allow tmpreaper_t domain to read all domains state
  Resolves: rhbz#1766095

• Wed Jul 10 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.1

  - Allow sbd_t domain to use nsswitch
  Resolves: rhbz#1728593

• Thu Jun 27 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252

  - Allow ganesha_t domain to connect to tcp portmap_port_t
  Resolves: rhbz#1715088

• Mon Jun 10 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251

  - Allow redis to creating tmp files with own label
  Resolves: rhbz#1646765

• Wed Jun 05 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-250

  - Allow ctdb_t domain to manage samba_var_t files/links/sockets and dirs
  Resolves: rhbz#1716400