[ol7_optional_archive] selinux-policy-sandbox-3.13.1-60.0.1.el7_2.9.noarch

SELinux sandbox policy used for the policycoreutils-sandbox package

Changelog (Show File list) (Show related packages)

• Wed Sep 14 2016 EL Errata <el-errata_ww@oracle.com> - 3.13.1-60.0.1.9

  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Thu Sep 01 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.9

  - Dontaudit ldconfig read gluster lib files.
  Resolves: rhbz#1372182
  - Add interface glusterd_dontaudit_read_lib_dirs()
  Resolves: rhbz#1372182
  - Dontaudit Occasionally observing AVC's while running geo-rep automation
  Resolves: rhbz#1372182
  - Allow glusterd to manage socket files labeled as glusterd_brick_t.
  Resolves: rhbz#1372191

• Wed Aug 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.8

  - Add SELinux support for ceph filesystem.
  Resolves: rhbz#1365640
  - Allow sanlock service to read/write cephfs_t files
  Resolves: rhbz#1365640

• Fri Jun 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.7

  - Allow glusterd domain read krb5_keytab_t files.
  Resolves: rhbz#1344630

• Fri May 27 2016 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-60.6

  - Allow ganesha-ha.sh script running under unconfined_t domain communicate with glusterd_t domains via dbus.
  Resolves:#1340365

• Mon May 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.5

  - Label /var/log/ganesha.log as gluster_log_t
  - Allow glusterd_t domain to create glusterd_log_t files.
  - Label /var/run/ganesha.pid as gluster_var_run_t.
  Resolves: rhbz#1333903

• Mon May 09 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.4

  - Label /usr/bin/ganesha.nfsd as glusterd_exec_t to run ganesha as glusterd_t.
  - Allow glusterd_t stream connect to rpbind_t.
  - Allow cluster_t to create symlink /var/lib/nfs labeled as var_lib_nfs_t.
  - Add interface rpc_filetrans_var_lib_nfs_content()
  - Add new boolean: rpcd_use_fusefs to allow rpcd daemon use fusefs.
  Resolves: rhbz#1333875
  Resolves: rhbz#1333903

• Wed Jan 27 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.3

  - Allow openvswitch domain capability sys_rawio
  Resolves: rhbz#1299405

• Tue Jan 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.2

  - Add fs_manage_hugetlbfs_files() interface.
  Resolves: rhbz#1299405
  - Allow openvswitch to manage hugetlfs files and dirs
  Resolves: rhbz#1299405

• Mon Jan 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.1

  - Allow openvswitch read/write hugetlb filesystem.
  Resolves: rhbz#1299405
  - Allow smbcontrol domain to send sigchld to ctdbd domain.
  Resolves: rhbz#1301522