[ol7_latest_archive] selinux-policy-targeted-3.13.1-102.0.2.el7_3.4.noarch

SELinux Reference policy targeted base module.

Changelog (Show File list) (Show related packages)

• Mon Nov 07 2016 Livy Ge <livy.ge@oracle.com> - 3.13.1-102.0.2.4

  - selinux-policy includes updated docker selinux policy [Orabug 24697785] (thomas.tanaka)

• Fri Nov 04 2016 EL Errata <el-errata_ww@oracle.com> - 3.13.1-102.0.1.4

  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Wed Oct 19 2016 Miroslav Grepl <mgrepl@redhat.com> - 3.13.1-102.4

  - Allow GlusterFS with RDMA transport to be started correctly. It requires ipc_lock capability together with rw permission on rdma_cm device.
  Resolves:#1386620
  - Allow glusterd to get attributes on /sys/kernel/config directory.
  Resolves:#1386621

• Wed Oct 12 2016 Petr Lautrbach <plautrba@redhat.com> - 3.13.1-102.3

  - Use selinux-policy-migrate-local-changes.sh instead of migrateStore* macros
  Resolves: rhbz#1383450
  - Add selinux-policy-migrate-local-changes service
  Resolves: rhbz#1383450

• Fri Sep 30 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.1

  - Allow sssd_selinux_manager_t to manage also dir class.
  Resolves: rhbz#1380687
  - Add interface seutil_manage_default_contexts_dirs()
  Resolves: rhbz#1380687

• Tue Sep 27 2016 Dan Walsh <dwalsh@redhat.com> - 3.13.1-102

  - Add virt_sandbox_use_nfs -> virt_use_nfs boolean substitution.
  Resolves: rhbz#1355783

• Tue Sep 27 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-101

  - Allow pcp_pmcd_t domain transition to lvm_t Add capability kill and sys_ptrace to pcp_pmlogger_t
  Resolves: rhbz#1309883

• Wed Sep 21 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-100

  - Allow ftp daemon to manage apache_user_content
  Resolves: rhbz#1097775
  - Label /etc/sysconfig/oracleasm as oracleasm_conf_t
  Resolves: rhbz#1331383
  - Allow oracleasm to rw inherited fixed disk device
  Resolves: rhbz#1331383
  - Allow collectd to connect on unix_stream_socket
  Resolves: rhbz#1377259

• Wed Sep 14 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-99

  - Allow iscsid create netlink iscsid sockets.
  Resolves: rhbz#1358266
  - Improve regexp for power_unit_file_t files. To catch just systemd power unit files.
  Resolves: rhbz#1375462

• Tue Sep 13 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-98

  - Update oracleasm SELinux module that can manage oracleasmfs_t blk files. Add dac_override cap to oracleasm_t domain.
  Resolves: rhbz#1331383
  - Add few rules to pcp SELinux module to make ti able to start pcp_pmlogger service
  Resolves: rhbz#1206525