[ol7_optional_archive] selinux-policy-sandbox-3.13.1-60.0.1.el7_2.3.noarch

SELinux sandbox policy used for the policycoreutils-sandbox package

Changelog (Show File list) (Show related packages)

• Tue Feb 16 2016 EL Errata <el-errata_ww@oracle.com> - 3.13.1-60.0.1.3

  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Wed Jan 27 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.3

  - Allow openvswitch domain capability sys_rawio
  Resolves: rhbz#1299405

• Tue Jan 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.2

  - Add fs_manage_hugetlbfs_files() interface.
  Resolves: rhbz#1299405
  - Allow openvswitch to manage hugetlfs files and dirs
  Resolves: rhbz#1299405

• Mon Jan 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-60.1

  - Allow openvswitch read/write hugetlb filesystem.
  Resolves: rhbz#1299405
  - Allow smbcontrol domain to send sigchld to ctdbd domain.
  Resolves: rhbz#1301522

• Wed Oct 14 2015 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-60

  Allow hypervvssd to list all mountpoints to have VSS live backup working correctly.
  Resolves:#1247880

• Tue Oct 13 2015 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-59

  - Revert Add missing labeling for /usr/libexec/abrt-hook-ccpp patch
  Resolves: #1254188

• Thu Oct 08 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-58

  - Allow search dirs in sysfs types in kernel_read_security_state.
  Resolves: #1254188
  - Fix kernel_read_security_state interface that source domain of this interface can search sysctl_fs_t dirs.
  Resolves: #1254188

• Wed Oct 07 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-57

  - Add missing labeling for /usr/libexec/abrt-hook-ccpp as a part of #1245477 and #1242467 bugs
  Resolves: #1254188
  - We need allow connect to xserver for all sandbox_x domain because we have one type for all sandbox processes.
  Resolves:#1261938

• Fri Oct 02 2015 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-56

  - Remove labeling for modules_dep_t file contexts to have labeled them as modules_object_t.
  - Update files_read_kernel_modules() to contain modutils_read_module_deps_files() calling because module deps labeling could remain and it allows to avoid regressions.
  Resolves:#1266928

• Tue Sep 29 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-55

  - We need to require sandbox_web_type attribute in sandbox_x_domain_template(). 
  Resolves: #1261938
  - ipsec: The NM helper needs to read the SAs
  Resolves: #1259786
  - ipsec: Allow ipsec management to create ptys
  Resolves: #1259786