-
Thu Mar 02 2017 EL Errata <el-errata_ww@oracle.com> - 3.13.1-102.0.2.15
- selinux-policy includes updated docker selinux policy [Orabug 24697785] (thomas.tanaka)
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.
-
Tue Feb 07 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.15
- Allow sssd_t domain setpgid
Resolves:rhbz#1419836
-
Wed Jan 11 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.14
- Upgrade fails %post: Re-declaration of type pkcsslotd_t
Resolves: rhbz#1411660
-
Mon Jan 09 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.13
- Allow systemd container to read/write usermodehelperstate
Resolves: rhbz#1408126
- Allow glusterd_t to bind on glusterd_port_t udp ports.
Resolves: rhbz#1408128
-
Wed Jan 04 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.12
- Allow glusterd_t to bind on glusterd_port_t udp ports.
Resolves: rhbz#1408128
- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1408128
- Fixes for containers
- Allow containers to attempt to write to unix_sysctls.
- Allow cotainers to use the FD's leaked to them from parent processes.
Resolves: rhbz#1408126
- Allow systemd to stop glusterd_t domains.
Resolves: rhbz#1408125
-
Mon Dec 19 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.11
- Update ctdbd_t policy to reflect all changes.
Resolves: rhbz#1403266
-
Thu Dec 15 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.10
- Allow ctdbd_t domain transition to rpcd_t
Resolves:rhbz#1403266
-
Tue Dec 13 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.9
- Make working CTDB:NFS: CTDB failover from selinux-policy POV
Resolves: rhbz#1403266
-
Mon Dec 05 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.8
- Allow puppetagent_t to access timedated dbus. Use the systemd_dbus_chat_timedated interface to allow puppetagent_t the access.
Resolves: rhbz#1400505
-
Mon Nov 14 2016 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-102.7
- Update systemd on RHEL-7.2 box to version from RHEL-7.3 and then as a separate yum command update the selinux policy systemd will start generating USER_AVC denials and will start returning "Access Denied" errors to DBus clients.
Resolves: rhbz#1394715