232d13 * Mon Jan 30 2023 Zdenek Pytela <zpytela@redhat.com> - 38.6-1

Authored and Committed by Zdenek Pytela 2 years ago
    * Mon Jan 30 2023 Zdenek Pytela <zpytela@redhat.com> - 38.6-1
    - Boolean: allow qemu-ga read ssh home directory
    - Allow kernel_t to read/write all sockets
    - Allow kernel_t to UNIX-stream connect to all domains
    - Allow systemd-resolved send a datagram to journald
    - Allow kernel_t to manage and have "execute" access to all files
    - Fix the files_manage_all_files() interface
    - Allow rshim bpf cap2 and read sssd public files
    - Allow insights-client work with su and lpstat
    - Allow insights-client tcp connect to all ports
    - Allow nm-cloud-setup dispatcher plugin restart nm services
    - Allow unconfined user filetransition for sudo log files
    - Allow modemmanager create hardware state information files
    - Allow ModemManager all permissions for netlink route socket
    - Allow wg to send msg to kernel, write to syslog and dbus connections
    - Allow hostname_t to read network sysctls.
    - Dontaudit ftpd the execmem permission
    - Allow svirt request the kernel to load a module
    - Allow icecast rename its log files
    - Allow upsd to send signal to itself
    - Allow wireguard to create udp sockets and read net_conf
    - Use %autosetup instead of %setup
    - Pass -p 1 to %autosetup
    
        
file modified
+27 -3
file modified
+2 -2