[ol8_baseos_latest] selinux-policy-sandbox-3.14.3-41.0.1.el8_2.2.noarch

SELinux sandbox policy used for the policycoreutils-sandbox package

Changelog (Show File list) (Show related packages)

• Tue May 05 2020 EL Errata <el-errata_ww@oracle.com> - 3.14.3-41.0.1.el8_2.2

  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671] (Naoki Tanaka)
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511] (Naoki Tanaka)
  - Allow init_t to relabel all lock files [Orabug: 29846265] (Naoki Tanaka)
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Obsolete docker-engine-selinux [Orabug: 26439663]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

• Thu Apr 16 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-41.2

  - Allow glusterd synchronize between master and slave
  Resolves: rhbz#1824662

• Mon Apr 13 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-41.1

  - Allow ssh-keygen create file in /var/lib/glusterd
  Resolves: rhbz#1821759
  - Update ctdbd_manage_lib_files() to also allow mmap ctdbd_var_lib_t files
  Resolves: rhbz#1821226
  - Remove container interface calling by named_filetrans_domain.

• Mon Mar 16 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-41

  - Allow NetworkManager read its unit files and manage services
  - Mark nm-cloud-setup systemd units as NetworkManager_unit_file_t
  Resolves: rhbz#1806894

• Tue Feb 18 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-40

  - Update virt_read_qemu_pid_files inteface
  Resolves: rhbz#1782925

• Sat Feb 15 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-39

  - Allow vhostmd communication with hosted virtual machines
  - Add and update virt interfaces
  Resolves: rhbz#1782925

• Tue Jan 28 2020 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-38

  - Dontaudit timedatex_t read file_contexts_t and validate security contexts
  Resolves: rhbz#1779098

• Tue Jan 21 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-37

  - Make stratisd_t domain unconfined for RHEL-8.2
  Resolves: rhbz#1791557
  - stratisd_t policy updates
  Resolves: rhbz#1791557

• Thu Jan 16 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-36

  - Label /stratis as stratisd_data_t
  Resolves: rhbz#1791557

• Tue Jan 14 2020 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-35

  - Allow stratisd_t domain to read/write fixed disk devices and removable devices.
  Resolves: rhbz#1790795