[ol8_baseos_latest] selinux-policy-minimum-3.14.1-61.0.2.el8_0.2.noarch

SELinux Reference policy minimum base module.

Changelog (Show File list) (Show related packages)

• Wed Sep 11 2019 Jingdong Lu <jingdong.lu@oracle.com> - 3.14.1-61.2.0.2

  - Allow init_t to relabel all lock files [Orabug: 29846265] (Naoki Tanaka)
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Allow chronyd_t to execute shell scripts [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Obsolete docker-engine-selinux [Orabug: 26439663]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Mon Aug 05 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-61.2

  - Allow sbd_t domain to use nsswitch
  Resolves: rhbz#1733905

• Fri May 10 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-61.1

  - Allow unconfined users to use smc unlabeled sockets
  Resolves: rhbz#1708098

• Fri Feb 22 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-61

  - Add dac_override capability for sbd_t SELinux domain
  Resolves: rhbz#1677325
  - Allow syslogd_t domain to send null signal to all domains on system
  Resolves: rhbz#1676923

• Fri Feb 15 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-60

  - Update kdump_manage_crash() interface to allow also manage dirs by caller domain
  Resolves: rhbz#1627861

• Mon Feb 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-59

  - Add dac_override capability to spamd_t domain
  Resolves: rhbz#1567073

• Mon Feb 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-58

  - Allow ibacm_t domain to read system state and label all ibacm sockets and symlinks as ibacm_var_run_t in /var/run
  Resolves: rhbz#1635674
  - Update mount_read_pid_files macro to allow also list mount_var_run_t dirs
  Resolves: rhbz#1664448
  - Allow userdomain to stop systemd user session during logout.
  Resolves: rhbz#1664448

• Wed Feb 06 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-57

  - Allow read network state of system for processes labeled as ibacm_t
  Resolves: rhbz#1635674
  - Allow ibacm_t domain to send dgram sockets to kernel processes
  Resolves: rhbz#1635674
  - Allow virt_doamin to read/write dev device
  Resolves: rhbz#1672188
  - Update ibacm_t policy after testing lastest version of this component
  Resolves: rhbz#1635674
  - Allow sensord_t domain to mmap own log files
  Resolves:rhbz#1656055
  - Label /dev/sev char device as sev_device_t
  Resolves: rhbz#1672188

• Wed Feb 06 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-56

  - Allow virt_doamin to read/write dev device
  Resolves: rhbz#1672188
  - Update ibacm_t policy after testing lastest version of this component
  Resolves: rhbz#1635674
  - Allow sensord_t domain to mmap own log files
  Resolves:rhbz#1656055
  - Add dac_override capability for ipa_helper_t
  Resolves: rhbz#1668168
  - Allow sensord_t domain to use nsswitch and execute shell
  Resolves: rhbz#1656055
  - Allow opafm_t domain to execute lib_t files
  Resolves: rhbz#1627861
  - Allow opafm_t domain to manage kdump_crash_t files and dirs
  Resolves: rhbz#1627861
  - Label /dev/sev char device as sev_device_t
  Resolves: rhbz#1672188

• Fri Feb 01 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-55

  - Fix broken config files because of missing level specification in user_t contexts
  Resolves: rhbz#1664448