| selinux-policy-3.13.1-268.el7_9.2.noarch
[496 KiB] |
Changelog
by Zdenek Pytela (2020-10-29):
- Allow certmonger add new entries in a generic certificates directory
Resolves: rhbz#1879496
- Allow slapd add new entries in ldap certificates directory
Resolves: rhbz#1879496
- Add miscfiles_add_entry_generic_cert_dirs() interface
Resolves: rhbz#1879496
|
| selinux-policy-3.13.1-268.el7.noarch
[496 KiB] |
Changelog
by Zdenek Pytela (2020-05-12):
- Allow rhsmd read process state of all domains and kernel threads
Resolves: rhbz#1837461
- Allow ipa-adtrust-install restart sssd and dirsrv services
Resolves: rhbz#1820298
- Allow nagios_plugin_domain execute programs in bin directories
Resolves: rhbz#1824625
- selinux policy: add the right context for org.freeipa.server.trust-enable-agent
Related: rhbz#1820298
|
| selinux-policy-3.13.1-266.el7_8.1.noarch
[495 KiB] |
Changelog
by Zdenek Pytela (2020-05-15):
- Allow nagios_plugin_domain execute programs in bin directories
Resolves: rhbz#1832219
|
| selinux-policy-3.13.1-252.el7_7.6.noarch
[491 KiB] |
Changelog
by Lukas Vrabec (2019-11-06):
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095
|
| selinux-policy-3.13.1-252.el7.1.noarch
[490 KiB] |
Changelog
by Lukas Vrabec (2019-07-10):
- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593
|
| selinux-policy-3.13.1-229.el7_6.6.noarch
[481 KiB] |
Changelog
by Lukas Vrabec (2018-11-02):
- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271
|
| selinux-policy-3.13.1-229.el7_6.5.noarch
[481 KiB] |
Changelog
by Lukas Vrabec (2018-10-12):
- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257
|
| selinux-policy-3.13.1-229.el7.noarch
[480 KiB] |
Changelog
by Lukas Vrabec (2018-09-26):
- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318
|
| selinux-policy-3.13.1-192.el7_5.3.noarch
[451 KiB] |
Changelog
by Lukas Vrabec (2018-03-28):
- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424
|
| selinux-policy-3.13.1-166.el7_4.9.noarch
[435 KiB] |
Changelog
by Lukas Vrabec (2018-02-21):
- Update openvswitch policy from Fedora
Resolves: rhbz#1538936
|
| selinux-policy-3.13.1-166.el7_4.7.noarch
[435 KiB] |
Changelog
by Lukas Vrabec (2017-11-16):
- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075
|
| selinux-policy-3.13.1-166.el7_4.5.noarch
[435 KiB] |
Changelog
by Lukas Vrabec (2017-08-30):
- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552
|
| selinux-policy-3.13.1-166.el7.noarch
[434 KiB] |
Changelog
by Lukas Vrabec (2017-07-10):
- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581
|
| selinux-policy-3.13.1-102.el7_3.16.noarch
[413 KiB] |
Changelog
by Lukas Vrabec (2017-03-09):
- Allow openvswitch read script state.
- Allow openvswitch exec hostname and readinitrc_t files
Resolves: rhbz#1430751
|
| selinux-policy-3.13.1-102.el7_3.15.noarch
[412 KiB] |
Changelog
by Lukas Vrabec (2017-02-07):
- Allow sssd_t domain setpgid
Resolves:rhbz#1419836
|
| selinux-policy-3.13.1-102.el7_3.4.noarch
[410 KiB] |
Changelog
by Miroslav Grepl (2016-10-19):
- Allow GlusterFS with RDMA transport to be started correctly. It requires ipc_lock capability together with rw permission on rdma_cm device.
Resolves:#1386620
- Allow glusterd to get attributes on /sys/kernel/config directory.
Resolves:#1386621
|
| selinux-policy-3.13.1-60.el7.noarch
[373 KiB] |
Changelog
by Miroslav Grepl (2015-10-14):
Allow hypervvssd to list all mountpoints to have VSS live backup working correctly.
Resolves:#1247880
|
| selinux-policy-3.13.1-23.el7.noarch
[353 KiB] |
Changelog
by Miroslav Grepl (2015-01-30):
- Update seutil_manage_config() interface.
Resolves:#1185962
- Allow pki-tomcat relabel pki_tomcat_etc_rw_t.
- Turn on docker_transition_unconfined by default
|