0c420ac * Mon Jun 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34.12-1

Authored and Committed by zpytela 2 years ago
    * Mon Jun 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34.12-1
    - Label /dev/dma_heap/* char devices with dma_device_t
    - Revert "Label /dev/dma_heap/* char devices with dma_device_t"
    - Revert "Label /dev/dma_heap with dma_device_dir_t"
    - Revert "Associate dma_device_dir_t with device filesystem"
    - Add the lockdown integrity permission to dev_map_userio_dev()
    - Allow systemd-modules-load read/write tracefs files
    - Allow sssd watch /run/systemd
    - Label /usr/bin/arping plain file with netutils_exec_t
    - Label /run/fsck with fsadm_var_run_t
    - Label /usr/bin/Xwayland with xserver_exec_t
    - Allow systemd-timesyncd watch dbus runtime dir
    - Allow asterisk watch localization files
    - Allow iscsid read all process stat
    - iptables.fc: Add missing legacy-restore and legacy-save entries
    - Label /run/libvirt/common with virt_common_var_run_t
    - Label /.k5identity file allow read of this file to rpc.gssd
    - Make usbmuxd_t a daemon
    
        
file modified
+21 -2
file modified
+2 -2