7d54492 * Fri Feb 19 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-22

Authored and Committed by zpytela 3 years ago
    * Fri Feb 19 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-22
    - Allow systemd-sleep get attributes of fixed disk device nodes
    - Complete initial policy for systemd-coredump
    - Label SDC(scini) Dell Driver
    - Allow upowerd to send syslog messages
    - Remove the disk write permissions from tlp_t
    - Label NVMe devices as fixed_disk_device_t
    - Allow rhsmcertd bind tcp sockets to a generic node
    - Allow systemd-importd manage machines.lock file
    - Allow unconfined integrity lockdown permission
    - Relocate confidentiality lockdown rule from unconfined_domain_type to unconfined
    - Allow systemd-machined manage systemd-userdbd runtime sockets
    - Enable systemd-sysctl domtrans for udev
    - Introduce kernel_load_unsigned_module interface and use it for couple domains
    - Allow gpg watch user gpg secrets dirs
    - Build also the container module in CI
    - Remove duplicate code from kernel.te
    - Allow restorecond to watch all non-auth directories
    - Allow restorecond to watch its config file
    
        
file modified
+22 -2
file modified
+2 -2