[ol7_optional_latest] selinux-policy-sandbox-3.13.1-166.0.2.el7.noarch

SELinux sandbox policy used for the policycoreutils-sandbox package

Changelog (Show File list) (Show related packages)

• Wed Aug 02 2017 EL Errata <el-errata_ww@oracle.com> - 3.13.1-166.0.2

  - Obsolete docker-engine-selinux [OraBug 26439663]
  - Fix container selinux policy [OraBug 26427364]

• Wed Aug 02 2017 EL Errata <el-errata_ww@oracle.com> - 3.13.1-166.0.1

  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Mon Jul 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-166

  - Add new boolean gluster_use_execmem
  Resolves: rhbz#1469027
  - Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
  Resolves: rhbz#1468581

• Mon Jun 26 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-165

  - Dontaudit staff_t user read admin_home_t files.
  Resolves: rhbz#1290633

• Wed Jun 21 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-164

  - Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
  Resolves: rhbz#1424621
  - Add interface lvm_manage_metadata
  Resolves: rhbz#1424621

• Tue Jun 20 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-163

  - Allow sssd_t to read realmd lib files.
  Resolves: rhbz#1436689
  - Add permission open to files_read_inherited_tmp_files() interface
  Resolves: rhbz#1290633
  Resolves: rhbz#1457106

• Thu Jun 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-162

  - Allow unconfined_t user all user namespace capabilties.
  Resolves: rhbz#1461488

• Thu Jun 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-161

  - Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689

• Tue Jun 06 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-160

  - Allow named_t to bind on udp 4321 port
  Resolves: rhbz#1312972
  - Allow systemd-sysctl cap. sys_ptrace
  Resolves: rhbz#1458999

• Mon Jun 05 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-159

  - Allow pki_tomcat_t execute ldconfig.
  Resolves: rhbz#1436689