5bd339f * Fri Sep 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-46

Authored and Committed by lvrabec 4 years ago
    * Fri Sep 13 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-46
    - Add sys_ptrace capability to pcp_pmlogger_t domain BZ(1751816)
    - Allow gssproxy_t domain read state of all processes on system
    - Add travis CI also to F30 selinux-policy contrib repo
    - Add sys_admin capability for keepalived_t labeled processes
    - Allow user_mail_domain attribute to manage files labeled as etc_aliases_t.
    - Fix abrt_upload_watch_t in abrt policy
    - Add setgid and setuid capabilities to keepalived_t domain
    - Allow psad_t domain to create tcp diag sockets BZ(1750324)
    - Allow systemd to mount fwupd_cache_t BZ(1750288)
    - Allow rtkit_daemon_t domain set process nice value in user namespaces BZ(1750024)
    - Dontaudit rhsmcertd_t to write to dirs labeled as lib_t BZ(1556763)
    - Label /var/run/mysql as mysqld_var_run_t
    - Allow chronyd_t domain to manage and create chronyd_tmp_t dirs,files,sock_file objects.
    - Allow sandbox_web_type domains to sys_ptrace and sys_chroot in user namespaces
    - Update gnome_dontaudit_read_config
    - Allow devicekit_var_lib_t dirs to be created by systemd during service startup. BZ(1748997)
    - Update travis-CI file
    - Allow systemd labeled as init_t domain to remount rootfs filesystem
    - Add interface files_remount_rootfs()
    - Allow systemd to relabel all files on system.
    - Allow userdomains to dbus chat with policykit daemon
    
        
  • Build completed
    success
    Built as selinux-policy-3.14.3-46.fc30
    4 years ago
file modified
+2 -0
file modified
+26 -3
file modified
+3 -3