9d1d99 Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t

Authored and Committed by Dan Walsh 12 years ago
    Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t
    
    - Add init_access_check() interface
    - Fix label on /usr/bin/pingus to not be labeled as ping_exec_t
    - Allow tcpdump to create a netlink_socket
    - Label newusers like useradd
    - Change xdm log files to be labeled xdm_log_t
    - Allow sshd_t with privsep to work in MLS
    - Allow freshclam to update databases thru HTTP proxy
    - Allow s-m-config to access check on systemd
    - Allow abrt to read public files by default
    - Fix amavis_create_pid_files() interface
    - Add labeling and filename transition for dbomatic.log
    - Allow system_dbusd_t to stream connect to bluetooth, and use its socket
    - Allow amavisd to execute fsav
    - Allow tuned to use sys_admin and sys_nice capabilities
    - Add php-fpm policy from Bryan
    - Add labeling for aeolus-configserver-thinwrapper
    - Allow thin domains to execute shell
    - Fix gnome_role_gkeyringd() interface description
    - Lot of interface fixes
    - Allow OpenMPI job running as condor_startd_ssh_t to manage condor lib files
    - Allow OpenMPI job to use kerberos
    - Make deltacloudd_t as nsswitch_domain
    - Allow xend_t to run lsscsi
    - Allow qemu-dm running as xend_t to create tun_socket
    - Add labeling for /opt/brother/Printers(.*/)?inf
    - Allow jockey-backend to read pyconfig-64.h labeled as usr_t
    - Fix clamscan_can_scan_system boolean
    - Allow lpr to connectto to /run/user/$USER/keyring-22uREb/pkcs11
    
        
file modified
+1 -1