| Server IP : 23.254.227.96 / Your IP : 216.73.216.21 Web Server : Apache/2.4.62 (Unix) OpenSSL/1.1.1k System : Linux hwsrv-1277026.hostwindsdns.com 4.18.0-477.13.1.el8_8.x86_64 #1 SMP Tue May 30 14:53:41 EDT 2023 x86_64 User : viralblo ( 1001) PHP Version : 8.1.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /proc/self/root/var/lib/rpm/ |
Upload File : |
� � � �������� �������� �������� �������� �������� �������� �������� �������� �������� �������� D Qo4 z n4 @ � ������������������������� � � 0 h P � U �(8 � 5 � n4 �]M
��4 7 p �� �(8 X! p! 8! 8! 8 ���������������p�������8 � ���������������8�������� � �������� (! �! �������� �������� �������� ��������
�������� �������� ��������
�������� �������� �������� �������� �������� �������� �������� �������� � ���������������P�������� � �������� �������� �� �� p� �� Xv pv �x y �} ~ �� �� � � = = X p 0 ! �� 0� " � � # �� 0� $ H� �^ % �;
� & he ' h� � ( �J P ) �
� * � �0 + @� 8� , `L `�
- (* � . �X � / �� 0 �H �a 1 �� hB 2 �� ��
3 �� `� 4 0 �� 5 � 0� 6 � �@ 7 h x� 8 � �% 9 H�
� : W W ; �N @� < �� �� = @% � > �� � ? � �& @ �j �~ A H� H�
B
� C � ` D p� v E ; 8; F 0> H> G �� �� H �B C I ( �#
J � ] K pb Hf L 0�
H�
M �� 0� N �� �� O �R �� P �� � Q �� �9 R �
�� S �� 8V T �| �� U �0 �2 V � W I
� X � (O Y �z � Z H� ��
[ (� h% \ �� �� ] �F � ^ 0F p� _ � � ` �, `E a p`
X� b �m H c ��
��
d �O �O e �� ر f � �� g ( @ h ~ 0~ i �. �. j � `� k � � l �� � m � x� n �� Pd o HE �� p 8� � q �S
�" r p� �� s 8� @� t � �8 u m H� v 0� | w �� D x H� ' y 8 �� z 8� Ȭ { �0
�� | �. (k
} �� H) ~ �� à (� �H � � �
� �z
�} � ��
@8
� Р p� � 8
�� � ٠� � 0 � � Xn pn � @
X
� �� � �������� � ~ ~ � �n �n � P� H� � 8� `� � �� H� � �� p� � @ + � �< h�
� @� H� � �J �] � xE �E � �������� � �� � � (�������������x������� x ��������������� ��������������� H X����������������������H � � 5 Mk Mk Mk `& ��������������� ���� Q� Lo4 Lo4 & �& H �����������������������H �!�� @ ����������������@������@ Packages @ ���������������� ������@ � ������������������������ X � P'8 h
������$" �$ 4 ���������������� $" #" %" � d to /run/user/USER/
- Allow samba-net to connect to ldap port
- Allow signal for vhostmd
- allow mozilla_plugin_t to read user_home_t socket
- New access required for secure Linux Containers
- zfs now supports xattrs
- Allow quantum to execute sudo and list sysfs
- Allow init to dbus chat with the firewalld
- Allow zebra to read /etc/passwd - Allow svirt_t to create content in the users homedir under ~/.libvirt
- Fix label on /var/lib/heartbeat
- Allow systemd_logind_t to send kill signals to all processes started by a user
- Fuse now supports Xattr Support - upowered needs to setsched on the kernel
- Allow mpd_t to manage log files
- Allow xdm_t to create /var/run/systemd/multi-session-x
- Add rules for missedfont.log to be used by thumb.fc
- Additional access required for virt_qmf_t
- Allow dhclient to dbus chat with the firewalld
- Add label for lvmetad
- Allow systemd_logind_t to remove userdomain sock_files
- Allow cups to execute usr_t files
- Fix labeling on nvidia shared libraries
- wdmd_t needs access to sssd and /etc/passwd
- Add boolean to allow ftp servers to run in passive mode
- Allow namepspace_init_t to relabelto/from a different user system_u from the user the namespace_init running with
- Fix using httpd_use_fusefs
- Allow chrome_sandbox_nacl to write inherited user tmp files as we allow it for chrome_sandbox - Rename rdate port to time port, and allow gnomeclock to connect to it
- We no longer need to transition to ldconfig from rpm, rpm_script, or anaconda
- /etc/auto.* should be labeled bin_t
- Add httpd_use_fusefs boolean
- Add fixes for heartbeat
- Allow sshd_t to signal processes that it transitions to
- Add condor policy
- Allow svirt to create monitors in ~/.libvirt
- Allow dovecot to domtrans sendmail to handle sieve scripts
- Lot of fixes for cfengine - /var/run/postmaster.* labeling is no longer needed
- Alllow drbdadmin to read /dev/urandom
- l2tpd_t seems to use ptmx
- group+ and passwd+ should be labeled as /etc/passwd
- Zarafa-indexer is a socket - Ensure lastlog is labeled correctly
- Allow accountsd to read /proc data about gdm
- Add fixes for tuned
- Add bcfg2 fixes which were discovered during RHEL6 testing
- More fixes for gnome-keyring socket being moved
- Run semanage as a unconfined domain, and allow initrc_t to create tmpfs_t sym links on shutdown
- Fix description for files_dontaudit_read_security_files() interface - Add new policy and man page for bcfg2
- cgconfig needs to use getpw calls
- Allow domains that communicate with the keyring to use cache_home_t instead of gkeyringd_tmpt
- gnome-keyring wants to create a directory in cache_home_t
- sanlock calls getpw - Add numad policy and numad man page
- Add fixes for interface bugs discovered by SEWatch
- Add /tmp support for squid
- Add fix for #799102
* change default labeling for /var/run/slapd.* sockets
- Make thumb_t as userdom_home_reader
- label /var/lib/sss/mc same as pubconf, so getpw domains can read it
- Allow smbspool running as cups_t to stream connect to nmbd
- accounts needs to be able to execute passwd on behalf of users
- Allow systemd_tmpfiles_t to delete boot flags
- Allow dnssec_trigger to connect to apache ports
- Allow gnome keyring to create sock_files in ~/.cache
- google_authenticator is using .google_authenticator
- sandbox running from within firefox is exposing more leaks
- Dontaudit thumb to read/write /dev/card0
- Dontaudit getattr on init_exec_t for gnomeclock_t
- Allow certmonger to do a transition to certmonger_unconfined_t
- Allow dhcpc setsched which is caused by nmcli
- Add rpm_exec_t for /usr/sbin/bcfg2
- system cronjobs are sending dbus messages to systemd_logind
- Thumnailers read /dev/urand - Allow auditctl getcap
- Allow vdagent to use libsystemd-login
- Allow abrt-dump-oops to search /etc/abrt
- Got these avc's while trying to print a boarding pass from firefox
- Devicekit is now putting the media directory under /run/media
- Allow thumbnailers to create content in ~/.thumbails directory
- Add support for proL2TPd by Dominick Grift
- Allow all domains to c x������� �u �8 ��������P������ �8 � ������������������ � ��0�T x ����������������x� x Name @ ����������������p������@ � ����������������0������� X � n'8 ���������������B" �$ R ���������������� B" A" C" � � x���������������������� X � .'8 8� �e " �$ ���������������� " " " � Controlling access to certain kernel usermodehelpers, e.g. cgroup
- release_agent, will require kernel changes to support and cannot be
- addressed here.
- Ideas come from Stephen Smalley and seandroid
- Make rpm_transition_script accept a role
- Make rpm_transition_script accept a role
- Allow NetworkManager to signal and sigkill init scripts
- Allow init_t to work on transitient and snapshot unit files
- Add logging_manage_syslog_config()
- Update sysnet_dns_name_resolve() to allow connect to dnssec port - Remove file_t from the system and realias it with unlabeled_t - Add gluster fixes
- Remove ability to transition to unconfined_t from confined domains
- Additional allow rules to get libvirt-lxc containers working with docker - passwd to create gnome-keyring passwd socket
- systemd_systemctl needs sys_admin capability
- Allow cobbler to search dhcp_etc_t directory
- Allow sytemd_tmpfiles_t to delete all directories
- allow sshd to write to all process levels in order to change passwd when running at a level
- Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range
- Allow apcuspd_t to status and start the power unit file
- Allow udev to manage kdump unit file
- Added new interface modutils_dontaudit_exec_insmod
- Add labeling for /var/lib/servicelog/servicelog.db-journal
- Allow init_t to create tmpfs_t lnk_file
- Add label for ~/.cvsignore
- Allow fprintd_t to send syslog messages
- Add zabbix_var_lib_t for /var/lib/zabbixsrv, also allow zabix to connect to smtp port
- Allow mozilla plugin to chat with policykit, needed for spice
- Allow gssprozy to change user and gid, as well as read user keyrings
- Allow sandbox apps to attempt to set and get capabilties
- Label upgrades directory under /var/www as httpd_sys_rw_content_t, add other filetrans rules to label content correctly
- allow modemmanger to read /dev/urand
- Allow polipo to connect to http_cache_ports
- Allow cron jobs to manage apache var lib content
- Allow yppassword to manage the passwd_file_t
- Allow showall_t to send itself signals
- Allow cobbler to restart dhcpc, dnsmasq and bind services
- Allow rsync_t to manage all non auth files
- Allow certmonger to manage home cert files
- Allow user_mail_domains to write certain files to the /root and ~/ directories
- Allow apcuspd_t to status and start the power unit file
- Allow cgroupdrulesengd to create content in cgoups directories
- Add new access for mythtv
- Allow irc_t to execute shell and bin-t files:
- Allow smbd_t to signull cluster
- Allow sssd to read systemd_login_var_run_t
- Allow gluster daemon to create fifo files in glusterd_brick_t and sock_file in glusterd_var_lib_t
- Add label for /var/spool/cron.aquota.user
- Allow sandbox_x domains to use work with the mozilla plugin semaphore
- Added new policy for speech-dispatcher
- Added dontaudit rule for insmod_exec_t in rasdaemon policy
- Updated rasdaemon policy
- Allow virt_domains to read cert files
- Allow system_mail_t to transition to postfix_postdrop_t
- Clean up mirrormanager policy
- Allow subscription-manager running as sosreport_t to manage rhsmcertd
- Remove ability to do mount/sys_admin by default in virt_sandbox domains
- New rules required to run docker images within libivrt
- Fixed bumblebee_admin() and mip6d_admin()
- Add log support for sensord
- Add label for ~/.cvsignore
- Change mirrormanager to be run by cron
- Add mirrormanager policy
- Additional fixes for docker.te
- Allow cobblerd to read/write undionly.kpxe located in /var/lib/tftpboot
- Add tftp_write_rw_content/tftp_read_rw_content interfaces
- Allow amanda to do backups over UDP - Allow freeipmi_ipmidetectd_t to use freeipmi port
- Update freeipmi_domain_template()
- Allow journalctl running as ABRT to read /run/log/journal
- Allow NM to read dispatcher.d directory
- Update freeipmi policy
- Type transitions with a filename not allowed inside conditionals
- Allow tor to bind to hplip port
- Make new type to texlive files in homedir
- Allow zabbix_agent to transition to dmidecode
- Add rules for docker
- Al� x������������� �������� X � k&8 �M x/ w �$ g ���������������� w v � %D�~$!�'����]WS 5 4H�?�ڄ-ة54�C���p\��Ԃ,�;��iL��7}�>�,���e � ���x�F��+q��JE�=͇��S�Q?�o�O���"]�ؽ�H���,�|�.Z&o�jw��$�=D~#U˽ T�Iu�N��~S{d;������{�4�J n��na��1��b��!/���;o'lv����n�.bXY
.�����M^>(�< 8on%�B����� �$�A#D��U�F�K��EgI���c^� ��i KHS��I175c48d7d6cc711d8be0eed8b52014715ea98978 6c71c0ccfc129a9d1b1594bb870cdfc5648dcd11f4c8f0f3be1947e0f49a9aec g�kW @� g�kV3cb60a040b7b2304d24910d1f55d9dfb48989d529fc00d c2200fc75f8f268d9e8d71072064f64d94497e5abd58abd5ab1506c3a40dbd1a ff22236475c720a2c0c598e18dcaa0c2350de8bb335bcb6bbc994346b688f4e0 31d62ce6350e6ead9fd019cb4d0083364a2c587d2f1f7ed5f7e213e7d73fb1ec 2d776e660519a0af4e766d36c0698101f73e1aed52c30b14588205ee5d76adf1 da9bc3bd4ecc3de2de0b0224b68c2a3300c7fc597269771dee51871d564fb0bc b4b7da39151376fdb0e8f7c35d0dc2335d2f1149fdb23882143ac1604c3f8a43 30b9a5f08480a634e2f016e1e2af957ae34e7bc849600376b8ac6ce2c9d536a6 06ca31064318f9663552ebe98eba86bc3c08dbbea01f0d4b6aa64cf10117113e c39329bc8f9fd0a7bd7faa9256cf3b8e39ec91ff989662066f243466269cc164 f062bf818ec7c394208e4b12db855fbe3765ca1463b2e0cfe05e434f1c293981 b2375a53d4999f59be3cb60a040b7b2304d24910d1f55d9dfb48989d529fc00d c2200fc75f8f268d9e8d71072064f64d94497e5abd58abd5ab1506c3a40dbd1a ff22236475c720a2c0c598e18dcaa0c2350de8bb335bcb6bbc994346b688f4e0 31d62ce6350e6ead9fd019cb4d0083364a2c587d2f1f7ed5f7e213e7d73fb1ec 2d776e660519a0af4e766d36c0698101f73e1aed52c30b14588205ee5d76adf1 da9bc3bd4ecc3de2de0b0224b68c2a3300c7fc597269771dee51871d564fb0bc b4b7da39151376fdb0e8f7c35d0dc2335d2f1149fdb23882143ac1604c3f8a43 30b9a5f08480a634e2f016e1e2af957ae34e7bc849600376b8ac6ce2c9d536a6 9bcdb29af2d6244ad5bffc068fe5bec91bb2daf8a7bdebb1faf95b906c665f0c 41d9917d2ae05249d16711596736e9b1d45453f5020876b4444f61772da266a8 c2228135bc5d8d23e511af634953113a89e4d50cbd0d8375a60b3da879f457ba c193d533d165529f1fc4be5786781fab16f2238bd0c95676610c5eb17f4e50e2 e96869cdc1146d244dee87f0abe3775457d08eb84a50fb5259e273e77c018bc5 2aae1e834b1ba9795f38125f84c06211a201832dfcd1814e5c5c1716d945deb5 092c1b236815302e33b5dafaa68163b77cc7f5fc13618724ef2bf3b99dbb11c0 f487ae1faffded41234af617460737e21fd2f96d59d41b3d49e2e6bdc49b60ae 389ae37e836db8f0dfc79b1f2b8d232c335b39118c831b48c6bb4abf87accb61 82c765bea6a0c5f953d22b2241ec3bf5b2b5f8566d64301314fc1eb8777ff2c2 9178bbf7f3d7895e793966adce6029bb27624950e84c3de39a8fe249a7edc57c 44b30e113bee1acd4f02c811422cb2d9c873c51f85f52087d4d62c532c41025a ad1e9668be5a910e07205f5b825640fec948b460f58ab11d140d6d9bcc35dbc2 c39329bc8f9fd0a7bd7faa9256cf3b8e39ec91ff989662066f243466269cc164 f062bf818ec7c394208e4b12db855fbe3765ca1463b2e0cfe05e434f1c293981 b2375a53d4999f59be3cb60a040b7b2304d24910d1f55d9dfb48989d529fc00d c2200fc75f8f268d9e8d71072064f64d94497e5abd58abd5ab1506c3a40dbd1a ff22236475c720a2c0c598e18dcaa0c2350de8bb335bcb6bbc994346b688f4e0 31d62ce6350e6ead9fd019cb4d0083364a2c587d2f1f7ed5f7e213e7d73fb1ec 2d776e660519a0af4e766d36c0698101f73e1aed52c30b14588205ee5d76adf1 da9bc3bd4ecc3de2de0b0224b68c2a3300c7fc597269771dee51871d564fb0bc b4b7da39151376fdb0e8f7c35d0dc2335d2f1149fdb23882143ac1604c3f8a43 30b9a5f08480a634e2f016e1e2af957ae34e7bc849600376b8ac6ce2c9d536a6 9bcdb29af2d6244ad5bffc068fe5bec91bb2daf8a7bdebb1faf95b906c665f0c 94745c5cd36512e659920b041128048e7fb609a0eb42bf1321b3551b2372150f f062bf818ec7c394208e4b12db855fbe3765ca1463b2e0cfe05e434f1c293981 932aa6107031d823fda0ffd7d5954fee7f007cbb9f6f512b911080a72b8ea17e bb14a6f2cbd5092a755e8f272079822d3e842620dd4542a8dfa1e5e72fc6115b ff22236475c720a2c0c598e18dcaa0c2350de8bb335bcb6bbc994346b688f4e0 d7630e3914cbaadde18d3bf26d806490377ca761ba595d711f6c2ed148df6636 58672646ba335323eaf0c16503b1efccbabcf382f768d53fa8cad2292098bc64 da9bc3bd4ecc3de2de0b0224b68c2a3300c7fc597269771dee51871d564fb0bc cde048b81e2a026517cc707c906aebbd50f5ee3957b6f0c1c04699dffcb7c015 f338558b3eecbed3ad24bb3dc1244f33b164fe9709b2bddc13f988ea8906b1bd e72a108e1a6b58b1c9ac607a916e1692539124363cc489f5869a58dad2cc4865 7352417bf06b6d7e5073e96fe48ae89cebb3a2dd8dc964a51a20c4e8c0549585 c2228135bc5d8d23e511af634953113a89e4d50� x���������������������� X � �%8 �������� .Q �$ > ���������������� .Q -Q � - Fix CVE-2017-6512 (setting arbitrary mode on an arbitrary file in rmtree()
and remove_tree()) (bug #1457834) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 2.12 bump - 2.11 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Perl 5.22 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Perl 5.22 rebuild - Perl 5.20 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Perl 5.20 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Perl 5.18 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Increase release to favour standalone package - Link minimal build-root packages against libperl.so explicitly - Specfile autogenerated by cpanspec 1.78. � 2.15 2.15-2.el8 perl-File-Path Changes README File::Path.3pm.gz File Path.pm /usr/share/doc/ /usr/share/doc/perl-File-Path/ /usr/share/man/man3/ /usr/share/perl5/vendor_perl/ /usr/share/perl5/vendor_perl/File/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 noarch-redhat-linux-gnu directory ASCII text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) Perl5 module source text P R R R R R R R utf-8 1874bc3ed75c7bcf7a3fdb83f41e587f970e4d669988378eb3a430421a5d3108 ? ���@ ���� ` �
Q�d~���"w ���dz ^��e��S\M V[��(�p$� �����C�b���Z�nX��x�<U�h�� R�`��q��
d����{��q
�xo���:�y<G�GXoYr�C���#Dڝd.Ncbѩ�|���*�k[�4 �K�KÄ NL�EGa���p3�� ��C�W`����M%������q�6� C>%�>(`���f��w}� a��T�=���#q����z��;�Mg%� �E 3O�`�� *v����r���F�iA[�T�>H늳'�%p�\�Y]�[ ~�5�UF��иX����2����� �Ѧ' o<��H���U�]1I#P�
O�W�X�"Ŧ�l��f\T�ڒT����fz����:�RP��� �Ǿ���Tq1��ˀ�T�'��b�&��� ` �
Q�d~���#� �z�h�'=��O��<��VC�,#>/;��k�ߥ+� �� c-�ҪW -@���E� �? �|�қ����\�ȴ&��9/���mn��20tv�V��2�_U�� �8"��ivV��S�#11�2�w���� ��U�V\�1v �ɘ�TS�ߚ�c�ՅE� I`�ç�v���6F��8W%^��%Y���:Ks
- B ���ޚi����� jh�tⳅ �ֿW�)���V��1EW(O�>�ˑ�W�i��� �rW�'og� �3��D��z|�q�Cߣ#���L�7�tl��y����, ��;���
�O�Kkc���1����J���Z�F4�,o�o��r�Gb
��b��&[�F��4�N���!��70fe975a2d571ae163997a0e76489c2946b24764 e03878b86805c03dcca9dadadb069a280ffe25c81269fc9da738a754495aff2d g�T� � g�T� � P t hid-cmedia.ko.xz) � O
hid-chicony.ko.xz � N � hid-cherry.ko.xzp � M hid-betopff.ko.xz � L t hid-belkin.ko.xze � K 3 hid-axff.ko.xz | � J 5 hid-aureal.ko.xzL � I 5 hid-asus.ko.xz.py � H K hid-appleir.ko.xz � G p hid-apple.ko.xz � F h hid-alps.ko.xzbre � E z hid-a4tech.ko.xze � B t hid.p � N . hibernate.targetc ~ � n hi_IN | � e hi7.f hhk m { d hfspluscomp.mod � m z 0 hfsplus.modea P � l hfsc.sote m y hfs.modh o z hfi1verbs.driver hfi1_sbus.fw
hfi1_pcie.fw hfi1_fabric.fw hfi1_dc8051.fw m x y hexdump.modma � � I hexdump.1.gzc � � Q � hexdumph � � a hex_codec.pyh � � m hex_codec.cpython-36.pycu � � r hex_codec.cpython-36.opt-2.pyc j � � h hex_codec.cpython-36.opt-1.pyc h � _ �
heuristics.py� x������������� �������� X � g'8 0�������;" �$ + ���������������� ;" :" <" � ge back to etc_t. - Allow cron to search nfs and samba homedirs - Allow NetworkManager to dbus chat with yum-updated - Allow xfs to bind to port 7100 - Allow newalias/sendmail dac_override
- Allow bind to bind to all udp ports - Turn off direct transition - Allow wine to run in system role - Fix java labeling - Define user_home_type as home_type - Allow sendmail to create etc_aliases_t - Allow login programs to read symlinks on homedirs - Update an readd modules - Cleanup spec file - Allow xserver to be started by unconfined process and talk to tty - Upgrade to upstream to grab postgressql changes - Add setransd for mls policy - Add ldconfig_cache_t - Allow sshd to write to proc_t for afs login - Allow xserver access to urand - allow dovecot to search mountpoints - Fix Makefile for building policy modules - Fix dhcpc startup of service - Fix dbus chat to not happen for xguest and guest users - Fix nagios cgi
- allow squid to communicate with winbind - Fixes for ldconfig - Update from upstream - Add nasd support - Fix new usb devices and dmfm - Eliminate mount_ntfs_t policy, merge into mount_t - Allow xserver to write to ramfs mounted by rhgb - Add context for dbus machine id - Update with latest changes from upstream - Fix prelink to handle execmod - Add ntpd_key_t to handle secret data - Add anon_inodefs
- Allow unpriv user exec pam_exec_t
- Fix trigger - Allow cups to use generic usb
- fix inetd to be able to run random apps (git) - Add proper contexts for rsyslogd - Fixes for xguest policy - Allow execution of gconf - Fix moilscanner update problem - Begin adding policy to separate setsebool from semanage
- Fix xserver.if definition to not break sepolgen.if - Add new devices - Add brctl policy - Fix root login to include system_r - Allow prelink to read kernel sysctls - Default to user_u:system_r:unconfined_t - fix squid
- Fix rpm running as uid - Fix syslog declaration - Allow avahi to access inotify
- Remove a lot of bogus security_t:filesystem avcs - Remove ifdef strict policy from upstream - Remove ifdef strict to allow user_u to login - Fix for amands
- Allow semanage to read pp files
- Allow rhgb to read xdm_xserver_tmp - Allow kerberos servers to use ldap for backing store - allow alsactl to read kernel state - More fixes for alsactl
- Transition from hal and modutils
- Fixes for suspend resume.
- insmod domtrans to alsactl
- insmod writes to hal log - Allow unconfined_t to transition to NetworkManager_t
- Fix netlabel policy - Update to latest from upstream - Update to latest from upstream - Update to latest from upstream - Allow pcscd_t to send itself signals - Fixes for unix_update
- Fix logwatch to be able to search all dirs - Upstream bumped the version - Allow consolekit to syslog
- Allow ntfs to work with hal - Allow iptables to read etc_runtime_t - MLS Fixes - Fix path of /etc/lvm/cache directory
- Fixes for alsactl and pppd_t
- Fixes for consolekit - Allow insmod_t to mount kvmfs_t filesystems - Rwho policy
- Fixes for consolekit - fixes for fusefs - Fix samba_net to allow it to view samba_var_t - Update to upstream - Fix Sonypic backlight
- Allow snmp to look at squid_conf_t - Fixes for pyzor, cyrus, consoletype on everything installs - Fix hald_acl_t to be able to getattr/setattr on usb devices
- Dontaudit write to unconfined_pipes for load_policy - Allow bluetooth to read inotifyfs - Fixes for samba domain controller.
- Allow ConsoleKit to look at ttys - Fix interface call - Allow syslog-ng to read /var
- Allow locate to getattr on all filesystems
- nscd needs setcap - Update to upstream - Allow samba to run groupadd - Update to upstream - Allow mdadm to access generic scsi devices - Fix labeling on udev.tbl dirs - Fixes for logwatch - Add fusermount and mount_ntfs policy - Update to upstream
- Allow saslauthd to use kerberos keytabs - Fixes for samba_var_t - Allow networkmanager to setpgid
- Fixes for hal_acl_t - Remove disable_trans booleans
- hald_acl_t needs to talk to nscd - Fix prelink to be able to manage usr dirs. - Allow insmod to launch init scripts -� x�������������xt������� X � I'8 ��������~������ " �$
���������������� " " " � ling for /etc/owncloud/config.php
- Allow setroubleshoot to send analysys to syslogd-journal
- Allow virsh_t to interact with new fenced daemon
- Allow gpg to write to /etc/mail/spamassassiin directories
- Make dovecot_deliver_t a mail server delivery type
- Add label for /var/tmp/DNS25 - Fixes for tomcat_domain template interface - Remove init_systemd and init_upstart boolean, Move init_daemon_domain and init_system_domain to use attributes
- Add attribute to all base os types. Allow all domains to read all ro base OS types - Additional unit files to be defined as power unit files
- Fix more boolean names - Fix boolean name so subs will continue to work - dbus needs to start getty unit files
- Add interface to allow system_dbusd_t to start the poweroff service
- xdm wants to exec telepathy apps
- Allow users to send messages to systemdlogind
- Additional rules needed for systemd and other boot apps
- systemd wants to list /home and /boot
- Allow gkeyringd to write dbus/conf file
- realmd needs to read /dev/urand
- Allow readahead to delete /.readahead if labeled root_t, might get created before policy is loaded - Fixes to safe more rules
- Re-write tomcat_domain_template()
- Fix passenger labeling
- Allow all domains to read man pages
- Add ephemeral_port_t to the 'generic' port interfaces
- Fix the names of postgresql booleans - Stop using attributes form netlabel_peer and syslog, auth_use_nsswitch setsup netlabel_peer
- Move netlable_peer check out of booleans
- Remove call to recvfrom_netlabel for kerberos call
- Remove use of attributes when calling syslog call
- Move -miscfiles_read_localization to domain.te to save hundreds of allow rules
- Allow all domains to read locale files. This eliminates around 1500 allow rules- Cleanup nis_use_ypbind_uncond interface
- Allow rndc to block suspend
- tuned needs to modify the schedule of the kernel
- Allow svirt_t domains to read alsa configuration files
- ighten security on irc domains and make sure they label content in homedir correctly
- Add filetrans_home_content for irc files
- Dontaudit all getattr access for devices and filesystems for sandbox domains
- Allow stapserver to search cgroups directories
- Allow all postfix domains to talk to spamd - Add interfaces to ignore setattr until kernel fixes this to be checked after the DAC check
- Change pam_t to pam_timestamp_t
- Add dovecot_domain attribute and allow this attribute block_suspend capability2
- Add sanlock_use_fusefs boolean
- numad wants send/recieve msg
- Allow rhnsd to send syslog msgs
- Make piranha-pulse as initrc domain
- Update openshift instances to dontaudit setattr until the kernel is fixed. - Fix auth_login_pgm_domain() interface to allow domains also managed user tmp dirs because of #856880 related to pam_systemd
- Remove pam_selinux.8 which conflicts with man page owned by the pam package
- Allow glance-api to talk to mysql
- ABRT wants to read Xorg.0.log if if it detects problem with Xorg
- Fix gstreamer filename trans. interface - Man page fixes by Dan Walsh - Allow postalias to read postfix config files
- Allow man2html to read man pages
- Allow rhev-agentd to search all mountpoints
- Allow rhsmcertd to read /dev/random
- Add tgtd_stream_connect() interface
- Add cyrus_write_data() interface
- Dontaudit attempts by sandboxX clients connectiing to the xserver_port_t
- Add port definition for tcp/81 as http_port_t
- Fix /dev/twa labeling
- Allow systemd to read modules config - Merge openshift policy
- Allow xauth to read /dev/urandom
- systemd needs to relabel content in /run/systemd directories
- Files unconfined should be able to perform all services on all files
- Puppet tmp file can be leaked to all domains
- Dontaudit rhsmcertd-worker to search /root/.local
- Allow chown capability for zarafa domains
- Allow system cronjobs to runcon into openshift domains
- Allow virt_bridgehelper_t to manage content in the svirt_home_t labeled directories - nmbd wants to create /var/nmbd
- Stop transitioning out of anaconda and firstboot, just causes AVC messages
- Allow cl� x��������������c������� X � &8 ��������x� |Q �$ l ���������������� |Q {Q }Q � 23de17ed82f7a85bfb5a794bb54a2f9e4494240e5fe847ea8d1 a8278eba2dd650f3bcbaa7c124154e811d80263afd7d01dde01b821eb122f6f7 43f327229eba9e3b637f8761291ff45fec4aff95cd84b730159b523ad8cf5629 f8dd35c11fe2213eeec21179fb395f4d9ad448872e6e465ade90b19e82503777 0dc12d27cd43e897480e362dd09305addea68a5c7cb5f0752aa16f07ea34a68f 08d570ac73fd51bfc57db169be5877f93a31851c3b488673dfbfa9493c26e105 f6d26e9f2e2a0fce0e306791c87dc540b80c1f7489ebd2225d6d922e14575a65 0330cb02f7424ba7c57f8788937cd6e52d404abc729ab75aa9d45022c0daef21 3c02c448f09f7c523a4736db4bdc1fb9e420f7ea03ceb09518850d5d37918deb 4f6ed64ff72fe20fee99bbdb22d7529bb47749fa0a722fd25c9c480ddebdd1a9 a658e4d6ec9d5380f7322ecea5461d046f44289a916c05c36c1e3ed6f6309755 b274199ae6ff563296b21fdb46917a8df775c9ee225cff73c264be1076f94301 2a653b0bc893d8b813db38a75e873a2eace7352613b0feccea7d3bd705e98320 2479d40e816e9b41d3a1ed909cb5b0218582709b5fc04a27b4075d2a107df75f 5ccdad3654dae5b796ad03f5654127a20b48f69da06c0f3effd1c7fc3e6b787c 79a0f4e846d02f8b6c71393ead1f147cec270e3dab540527e5f2b45ecf6ceae3 8f02231dca6c8ec359bb007b13ba9206080bf7143f3e8c15a448d4c9b26dfdf4 245ba603eb4ce9182e03b9bbeca0aba7d9b56989af5787bbe7434a9769d4efaf 156b5278923ef97e7f0868e19dabe20b50493f55a5635f3170ac83d0a3ba4714 a1291af1111b443aae61b6d99a477e6948c5f4de8be785aea40b32585b5dddee e9b77544932c95da8da9b2a37ecbc75e1742cf2cc01ceab118c7e3d3e13ccebc b4ae8f5879bec95e64b78981364a3b13c378f9da526e23452ab31ea5a9a22373 47e88007f0535c481cb1d6951fc0629dfd550618e6459b34629b31b09fe96531 c544cdd00783bcb9f3d22b02293825abd7dd02f57f601aa5c4e5d61e91d74b64 f13d94fd2081571687c405e688eef7cdc2c62ffb5943d835c250c1546e95e8cf 244430abbbe338a3f5223a9a3d7c1318c135809c5adb0ed4dd7ac6699d3a94d8 f3fc4ee121949863f3767c2cd24599339c7b39b2ce777b9533a9f1c2d5b20b09 1967576239a18095f0ba8d9f02e8fe6095c41cbae556aa441c6d6e8fd50590fd c6c99b11ca5a7046adbfc5188789994f1f75e5799d97605ec0c23cd65ab0c89e 2cd85c02eb63ac5ac93bbb07b3749e4420877b25e91e3d0aefc92e997e55e9ae 94c83329f43a5153ebf9276e8e13d2e61a653c7587fc829b02487751ae664d0d 97bad11d652bdfd7418d6e74c1b1f3563f500d5f21e3127f559068045728be1a 117ea9f1247a46701d9ab54fa5fec9255354aadb8d58a3dd294d2f3b4f7977ee a8d3671951d2d7ee446d331867b04ed3b98cc1d5c4571ae3bdf862eea2b3cfb0 1c61292ac72ebb3e10bdb4b5b465dc068803a1cbf6d27b5097668184e62a2e15 0d5b3b212282e1ad03a24e8a1ef45b3e76fed5b26cd341611fc9e1f3c34d1ae3 eaa36c43178f9392d6d4dffddfae7c511b439cfac3fa59faccf111955fe3514f 156123f274539220e87518206123d823183ae8dcc9ec3418ef1c07647b81d402 d7f829cb7ea0f9070adb826789be0f51730cf90eecd3bba8491fc8248c450128 872a12c3a31d90125001565e207e683298e27cc5582e44367a1fefae63e17ea0 61574340d174560a5275f4b3ef7c9cbe101f76b9b7b425e5cab2208d243de95e 989cd9db5a474b43fc71bf12542fb95426ff3a8df76ab12fd70de4c2f4d22713 0817287e7fd6c392d818e560218b60ab756cd30d6572fa12f0e7c413c3d6ef9e fcd7c306618742a465a65ff4a6077aa1c95dea381f34daee09a809f8af37b90a 43f7ff9a7e9608634bf593bdeb8abdccdaeb103959c0c4be7f7a8c7f3157aa43 a59740dbf7a14bc3bee73940a3a5d4b01b2f814d6b0b554251731addbd7f2439 d761d41a2dc7bed39e6202d3b4e699f8b145df585777721ddc7c56e3f2d66f2f cdadf63b7e347b952cd51b3d129bd28b95283047647c21d7a3cd0dbbfc2e380f a7e4ca3c3fc14ed2452289d1664c59387d60a6ac7857d378ea02551423547464 9998b2138368cae97a6abe88e835f800e0679f948827ae63af9570bc342b42b0 97324ce432e9c5ab066d992adb9f52212131818c22c32c935bfd12711e36d373 265ad9418f8562eaaa995dbfc144d2b2f0b1be7ef61ad403ac4561d8a023c52d f170bf44fa6950a8511556c85235b3e24f6f34455b9df7f04c84309b1b1ec5e5 cd47c9ae56fde5e26c1a4f19afa9eab179f334610678ac514f54af924bd99a13 b4a4c5a7f34d9721807e05950c679256d86b3a2538cbc143cf5d7698e95f8c47 128a19387ad780211a6b4d7f9e94407e8e254572e9e8309997529e5034339a5b f2281a865e9f2c8f7f3e25b3c681f6030734d80a0f823f957823ac5bc7ee0840 012438ae68231c872570e948a541513a6daaac43c793187f5aadf9cf9209e478 ba3a56a70196581695c5d4e46f3413e168a24b33d4a05b543968ef7c590dd59e 9e02db5e30645881cf0f41584a40d325e6453800ff54f3eb013244ae2bda538e 24a02288ce79b3f683721686d7295e6b7036f1aad4e7fd5a740bbf6c44e07139 bfb5efd270b213a5dc0f0cc69a1d46621ef9ff19966fd46a8d915a125a30e7da db9f92186e5cb50ff4b382411f0925d4f9787ddb01a555c02fc73 x�����@�������S������ 6 6 6 �� ���������V������ p� ` � ���������������� q � ?N2��,& � �����������������p � Providename @ x����������������Q������@ � �������������HQ������� X � �&8 ���������} �! �$ U ���������������� �! �! �! � llow audisp_remote_t domain remote logging client to read local audit events from relevant socket.
Resolves: rhbz#1639675
- Add tracefs_t type to mountpoint attribute
Resolves: rhbz#1647819
- Allow useradd_t and groupadd_t domains to send signals to sssd_t
Resolves: rhbz#1651531
- Allow systemd_logind_t domain to remove directories labeled as tmpfs_t BZ(1648636)
- Allow useradd_t and groupadd_t domains to access sssd files because of the new feature in shadow-utils
Resolves: rhbz#1651531 - Update pesign policy to allow pesign_t domain to read bind cache files/dirs
Resolves: rhbz#1644796
- Add dac_override capability to mdadm_t domain
Resolves: rhbz#1599646
- Create ibacm_tmpfs_t type for the ibacm policy
Resolves: rhbz#1581715
- Dontaudit capability sys_admin for dhcpd_t domain
Resolves: rhbz#1635643
- Makes rhsmcertd_t domain an exception to the constraint preventing changing the user identity in object contexts.
Resolves: rhbz#1639181
- Allow abrt_t domain to mmap generic tmp_t files
Resolves:rhbz#1644727
- Label /usr/sbin/wpa_cli as wpa_cli_exec_t
Resolves: rhbz#1644899
- Allow sandbox_xserver_t domain write to user_tmp_t files
Resolves:rhbz#1644315
- Dontaudit thumb_t domain to setattr on lib_t dirs BZ(1643672)
- Dontaudit cupsd_t domain to setattr lib_t dirs BZ(1636766)
- Add dac_override capability to postgrey_t domain BZ(1638954)
- Allow thumb_t domain to execute own tmpfs files BZ(1643698)
- Add nnp transition rule for vnstatd_t domain using NoNewPrivileges systemd feature BZ(1643063)
- Allow l2tpd_t domain to mmap /etc/passwd file BZ(1638948)
- Allow certutil running as ipsec_mgmt_t domain to mmap ipsec_mgmt pid files Dontaudit ipsec_mgmt_t domain to write to the all mountpoints
Resolves: rhbz#1644727
- Add interface files_map_generic_tmp_files()
- Add dac_override capability to the syslogd_t domain
Resolves: rhbz#1644373
- Create systemd_timedated_var_run_t label
- Update systemd_timedated_t domain to allow create own pid files/access init_var_lib_t files and read dbus files BZ(1646202)
- Improve fs_manage_ecryptfs_files to allow caller domain also mmap ecryptfs_t files BZ(1630675)
- kernel/files.fc: Label /run/motd.d(/.*)? as etc_t
- Allow ipsec_mgmt_t process to send signals other than SIGKILL, SIGSTOP, or SIGCHLD to the ipsec_t domains BZ(1638949) - Add dac_override capability to ftpd_t domain
Resolves: rhbz#1641049
- Allow X display manager to check status and reload services which are part of x_domain attribute
Resolves: rhbz#1641082 - Allow gpg_t to create own tmpfs dirs and sockets
- Allow rhsmcertd_t domain to relabel cert_t files
- Add SELinux policy for kpatch
Resolves: rhbz#1630198
- Allow nova_t domain to use pam
- sysstat: grant sysstat_t the search_dir_perms set
- Allow boltd_t domain to dbus chat with fwupd_t domain BZ(1633786)
- Allow caller domains using cron_*_role to have entrypoint permission on system_cron_spool_t files BZ(1625645)
- Add interface cron_system_spool_entrypoint()
- Bolt added d-bus API for force-powering the thunderbolt controller, so system-dbusd needs acces to boltd pipes BZ(1637676)
- Add interfaces for boltd SELinux module
- Add dac_override capability to modemmanager_t domain BZ(1636608)
- Add interface miscfiles_relabel_generic_cert()
- Make kpatch policy active
- Fix userdom_write_user_tmp_dirs() to allow caller domain also read/write user_tmp_t dirs
- Dontaudit sys_admin capability for netutils_t domain
- Label tcp and udp ports 2611 as qpasa_agent_port_t
- Allow systemd to mount boltd_var_run_t dirs BZ(1636823)
- Label correctly /var/named/chroot*/dev/unrandom in bind chroot. - Update rpm macros for selinux policy from sources repository: https://github.com/fedora-selinux/selinux-policy-macros
Resolves: rhbz#1633198
- Allow boltd_t to read fwupd_t processes state
- Turn named_write_master_zones boolean on by default.
Resolves: rhbz#1633158
- Label /etc/rhsm as rhsmcertd_config_t
Resolves: rhbz#1636212
- Allow httpd_t domain to write to httpd_config_t dirs if httpd_run_ipa boolean is turned on
Resolves: rhbz#1624930
- Allow dhcpd_t domain to � x��������������@������� X � �%8 ��������`% ~b �$ n ���������������� ~b }b b � .rc file for procmail to INCLUDERC to enable - Updated for 2.20 release
- made /etc/mail/spamassassin a config directory so local.cf doesn't get wiped out
- added a patch to remove findbin stuff - Updated for 2.1 release - Updates for 2.01 release
- Fixed rc file
- RPM now buildable as non-root
- fixed post_service errors
- fixed provides to include perl modules
- use file find instead of manually specifying files - Updated for 2.0 release - Updated for final 1.5 distribution. - first version of rpm. /bin/sh /bin/sh /bin/sh /bin/sh
! " $ & ( ) * + , - . / 0 1 2 3 4 5 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � 3.4.6-1.el8 3.004006 0.09 0.52 3.4.6-1.el8 3.4.6-1.el8 � x�������������X0������� X � Y&8 ��������� � �$ ���������������� � � � � BC_2.9)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libpthread.so.0(GLIBC_2.3.2)(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.2 [��[�"@[P}@Z�v@Z�v@Z�$�Zz�@Zu�@Y�@Yx�@X��X��X��@Wm �V�=@U�a@S�@S���R���R��Q��Q�U@Q �P��O|7�O]�@O �NBr�NBr�N7�MR��MQ0@MO�L ��K�u�K'z@J���Ji�@I�c�I�2�Hj @HC�G��G��E�L@E��D��@C�@C�C��B�$�B��@B��B�:�Ondřej Lysoněk <olysonek@redhat.com> - 2.1.8-5 Ondřej Lysoněk <olysonek@redhat.com> - 2.1.8-4 Charalampos Stratakis <cstratak@redhat.com> - 2.1.8-3 Steve Dickson <steved@redhat.com> - 2.1.8-2 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.1.8-1 Steve Dickson <steved@redhat.com> - 2.1.8-0 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.22-8 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.0.22-7 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.22-6 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.22-5 Nils Philippsen <nils@redhat.com> - 2.0.22-4 Tomáš Mráz <tmraz@redhat.com> - 2.0.22-3 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.22-2 Orion Poplawski <orion@cora.nwra.com> - 2.0.22-1 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.21-8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.21-7 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.21-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.21-5 Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.21-4 Steve Dickson <steved@redhat.com> 2.0.21-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.21-2 Orion Poplawski <orion@cora.nwra.com> - 2.0.21-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.18-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.18-2 Steve Dickson <steved@redhat.com> 2.0.18-1 Steve Dickson <steved@redhat.com> 2.0.17-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.14-2 Steve Dickson <steved@redhat.com> 2.0.14-1 Steve Dickson <steved@redhat.com> 2.0.13-1 Steve Dickson <steved@redhat.com> 2.0.12-1 Rahul Sundaram <sundaram@fedoraproject.org> - 2.0.10-2 Steve Dickson <steved@redhat.com> 2.0.10-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.14b-2 Steve Dickson <steved@redhat.com> 1.4.14b-1 Tom "spot" Callaway <tcallawa@redhat.com> 1.4.13-2 Steve Dickson <steved@redhat.com> 1.4.13-1 Steve Dickson <steved@redhat.com> 1.4.12-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.10-2 Steve Dickson <steved@redhat.com> 1.4.10-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.5-2 Steve Dickson <steved@redhat.com> 1.4.5-1 Steve Dickson <steved@redhat.com> 1.4.4-1 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.3e-2 Steve Dickson <steved@redhat.com> 1.3e-1 Steve Dickson <steved@redhat.com> 1.3b-1 Steve Dickson <steved@redhat.com> 1.2a-1 Jesse Keating <jkeating@redhat.com> Jesse Keating <jkeating@redhat.com> - 1.1a-3.2 Jesse Keating <jkeating@redhat.com> - 1.1a-3.1 Warren Togami <wtogami@redhat.com> - 1.1a-3 Ralf Ertzinger <ralf@skytale.net> - 1.1a-2 Ralf Ertzinger <ralf@skytale.net> - 1.1a-1 Ralf Ertzinger <ralf@skytale.net> - 1.1-2 Ralf Ertzinger <ralf@skytale.net> - 1.1-1 - Install documentation files to an unversioned directory
- Resolves: rhbz#1638032 - Corrected the License tag
- Resolves: rhbz#1624851 - Port the python scripts to Python 3 - Explicitly express SONAME in the %file section - Fix ownership of pkg-config files
- Remove unneeded Group tag - Updated to the latest upstream release 2.1.8 (bz 1418488) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - don't bu� x�������������� ������� X � �(8 h �5������V �$ F ���������������� V W � C ? � d � � � � � 5 � P � T � p � t � ~ � � � � � � � � � � � ! l ! � !
� ! t ! � !
` ! � !
� ! . T ! �
�
� (
� 8
� 9
� : G � ! H d ! I � ! X
Y @
\ � ! ] ! ^ ( b � d A e F f I l K t d ! u � ! v l � � � � � � � � � � � � � �
d � � � � ! � g � h C almalinux-release 8.8 1.el8 AlmaLinux release file AlmaLinux release files dc�[x64-builder02.almalinux.org ��AlmaLinux AlmaLinux GPLv2 AlmaLinux Packaging Team <packager@almalinux.org> System Environment/Base linux x86_64 ) 3
� ` % � � u � g i �
j - ~
$ F� ������������������������������������������������������A큤A큤���� dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[dc�[74c6dee30f9b788cb995a7c303f361191928cc7c08a5c76236f6655522e34d2f 69681df6b7df69173758b7a2ca67f1fcd73eac8545c0d91d1cae09c6d49dfdd6 33daf29d99964663ff09c89c5b5cf51a99200c14e741b8a8800dc5c7613c7fe2 394924622dfba63003e3b0eb4bdf696c73c71e55c83c12d5a74e87a31c944779 d2be5bc42d81920dfa6bad8671a368f6b3786932db6dec8b2781a1f0fd328cbc 188029a4a5fc320b6157195899bf6d424610d385949a857a811d992602fa48c9 17657f4ee63966a9c7687e97028b9ca514f6e9bcbefec4b7f4e81ac861eb3483 971f30e40baecab740a4f37f8f9b3d32af147e99c69c14c2be9398e1c4481bd6 667d2985912834e0c4c4aa70b7df644e30bb678674ae420ee4dbd79db002010a 7a5fd83acd1c96195e9039c194bb63a7835210fa02373ac5843f0f8ad31b1aef 99b3b6b8d632dffc6863d44bc65c4f5c9b54f0346c5c4f37d33c3e2533c8bdde f459df67d34dbd11200c468f8f3335d3b26cbd49708f4f4e49cee97c4167b014 8213206bfb43c6ce70b9918109ea774f0d17a4efa4f7d48bdd004ec9fea99ef7 a9034bb1cccf779293e49ffd0ce1ab5e12fa33724751e66285e89df8c8e64350 618617b3212c81d6878133f2cafda9d75598eb60d92ce600101b5de4d8eaaf65 53ed0a288c9b4e3c9e95de964d7d8d5bd349c5b60319d341c8e699052ab3e96d ded8496216f8c0bfabf1661dfae888f80d621600f73f64ef06c8bdb75199a1a4 4af88d01100cc5922f02cdab73233d8e8e9abed6c37ea6448c0e74d4f34c4588 198eeb9758b8022ba49589f21ac9768d8447780ac454dad2cab7cfb474116e5b 1fb6bb861a8de25362804cde9d2a1524d8f1288d1cad0022928d49774d53dc1b ac3e811c49cac013f48b46a20a514b1dbc1a55831498dd4d211bf111a0faa3a9 3e885b2b0c0189b5c63d6ec022518b6d52867390bce26bb2c96beba714086ecd 3127b197b9eae62eb84eeed69b0413419612238332006183e36a3fba89578378 82ddbc20a0c03610114ee789058176858d7188988796627db690e3fcfbeb6fd1 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 almalinux-release ../usr/lib/os-release almalinux-release almalinux-release almalinux-release almalinux-release root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root almalinux-release-8.8-1.el8.src.rpm ������������������������������������������������������������������������������������������� x�������������H������� X � 8'8 p^ ������ " �$ ���������������� " "
" � ed to execute the entrypoint without a transition, I can see no case where this is a bad thing, and elminiates a whole class of AVCs.
- Allow staff to getsched all domains, required to run htop
- Add port definition for redis port
- fix selinuxuser_use_ssh_chroot boolean - Add prosody policy written by Michael Scherer
- Allow nagios plugins to read /sys info
- ntpd needs to manage own log files
- Add support for HOME_DIR/.IBMERS
- Allow iptables commands to read firewalld config
- Allow consolekit_t to read utmp
- Fix filename transitions on .razor directory
- Add additional fixes to make DSPAM with LDA working
- Allow snort to read /etc/passwd
- Allow fail2ban to communicate with firewalld over dbus
- Dontaudit openshift_cgreoup_file_t read/write leaked dev
- Allow nfsd to use mountd port
- Call th proper interface
- Allow openvswitch to read sys and execute plymouth
- Allow tmpwatch to read /var/spool/cups/tmp
- Add support for /usr/libexec/telepathy-rakia
- Add systemd support for zoneminder
- Allow mysql to create files/directories under /var/log/mysql
- Allow zoneminder apache scripts to rw zoneminder tmpfs
- Allow httpd to manage zoneminder lib files
- Add zoneminder_run_sudo boolean to allow to start zoneminder
- Allow zoneminder to send mails
- gssproxy_t sock_file can be under /var/lib
- Allow web domains to connect to whois port.
- Allow sandbox_web_type to connect to the same ports as mozilla_plugin_t.
- We really need to add an interface to corenet to define what a web_client_domain is and
- then define chrome_sandbox_t, mozilla_plugin_t and sandbox_web_type to that domain.
- Add labeling for cmpiLMI_LogicalFile-cimprovagt
- Also make pegasus_openlmi_logicalfile_t as unconfined to have unconfined_domain attribute for filename trans rules
- Update policy rules for pegasus_openlmi_logicalfile_t
- Add initial types for logicalfile/unconfined OpenLMI providers
- mailmanctl needs to read own log
- Allow logwatch manage own lock files
- Allow nrpe to read meminfo
- Allow httpd to read certs located in pki-ca
- Add pki_read_tomcat_cert() interface
- Add support for nagios openshift plugins
- Add port definition for redis port
- fix selinuxuser_use_ssh_chroot boolean - Shrink the size of policy by moving to attributes, also add dridomain so that mozilla_plugin can follow selinuxuse_dri boolean.
- Allow bootloader to manage generic log files
- Allow ftp to bind to port 989
- Fix label of new gear directory
- Add support for new directory /var/lib/openshift/gears/
- Add openshift_manage_lib_dirs()
- allow virtd domains to manage setrans_var_run_t
- Allow useradd to manage all openshift content
- Add support so that mozilla_plugin_t can use dri devices
- Allow chronyd to change the scheduler
- Allow apmd to shut downthe system
- Devicekit_disk_t needs to manage /etc/fstab - Make DSPAM to act as a LDA working
- Allow ntop to create netlink socket
- Allow policykit to send a signal to policykit-auth
- Allow stapserver to dbus chat with avahi/systemd-logind
- Fix labeling on haproxy unit file
- Clean up haproxy policy
- A new policy for haproxy and placed it to rhcs.te
- Add support for ldirectord and treat it with cluster_t
- Make sure anaconda log dir is created with var_log_t - Allow lvm_t to create default targets for filesystem handling
- Fix labeling for razor-lightdm binaries
- Allow insmod_t to read any file labeled var_lib_t
- Add policy for pesign
- Activate policy for cmpiLMI_Account-cimprovagt
- Allow isnsd syscall=listen
- /usr/libexec/pegasus/cimprovagt needs setsched caused by sched_setscheduler
- Allow ctdbd to use udp/4379
- gatherd wants sys_nice and setsched
- Add support for texlive2012
- Allow NM to read file_t (usb stick with no labels used to transfer keys for example)
- Allow cobbler to execute apache with domain transition - condor_collector uses tcp/9000
- Label /usr/sbin/virtlockd as virtd_exec_t for now
- Allow cobbler to execute ldconfig
- Allow NM to execute ssh
- Allow mdadm to read /dev/crash
- Allow antivirus domains to connect to snmp port
- Make amav� x���������������������� X � N'8 ��������h������"" �$ 2 ���������������� "" !" #" � w boinc to read passwd
- Allow pads to read kernel network state
- Fix man2html interface for sepolgen-ifgen
- Remove extra /usr/lib/systemd/system/smb
- Remove all /lib/systemd and replace with /usr/lib/systemd
- Add policy for man2html
- Fix the label of kerberos_home_t to krb5_home_t
- Allow mozilla plugins to use Citrix
- Allow tuned to read /proc/sys/kernel/nmi_watchdog
- Allow tune /sys options via systemd's tmpfiles.d "w" type - Dontaudit lpr_t to read/write leaked mozilla tmp files
- Add file name transition for .grl-podcasts directory
- Allow corosync to read user tmp files
- Allow fenced to create snmp lib dirs/files
- More fixes for sge policy
- Allow mozilla_plugin_t to execute any application
- Allow dbus to read/write any open file descriptors to any non security file on the system that it inherits to that it can pass them to another domain
- Allow mongod to read system state information
- Fix wrong type, we should dontaudit sys_admin for xdm_t not xserver_t
- Allow polipo to manage polipo_cache dirs
- Add jabbar_client port to mozilla_plugin_t
- Cleanup procmail policy
- system bus will pass around open file descriptors on files that do not have labels on them
- Allow l2tpd_t to read system state
- Allow tuned to run ls /dev
- Allow sudo domains to read usr_t files
- Add label to machine-id
- Fix corecmd_read_bin_symlinks cut and paste error - Fix pulseaudio port definition
- Add labeling for condor_starter
- Allow chfn_t to creat user_tmp_files
- Allow chfn_t to execute bin_t
- Allow prelink_cron_system_t to getpw calls
- Allow sudo domains to manage kerberos rcache files
- Allow user_mail_domains to work with courie
- Port definitions necessary for running jboss apps within openshift
- Add support for openstack-nova-metadata-api
- Add support for nova-console*
- Add support for openstack-nova-xvpvncproxy
- Fixes to make privsep+SELinux working if we try to use chage to change passwd
- Fix auth_role() interface
- Allow numad to read sysfs
- Allow matahari-rpcd to execute shell
- Add label for ~/.spicec
- xdm is executing lspci as root which is requesting a sys_admin priv but seems to succeed without it
- Devicekit_disk wants to read the logind sessions file when writing a cd
- Add fixes for condor to make condor jobs working correctly
- Change label of /var/log/rpmpkgs to cron_log_t
- Access requires to allow systemd-tmpfiles --create to work.
- Fix obex to be a user application started by the session bus.
- Add additional filename trans rules for kerberos
- Fix /var/run/heartbeat labeling
- Allow apps that are managing rcache to file trans correctly
- Allow openvpn to authenticate against ldap server
- Containers need to listen to network starting and stopping events - Make systemd unit files less specific - Fix zarafa labeling
- Allow guest_t to fix labeling
- corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
- add lxc_contexts
- Allow accountsd to read /proc
- Allow restorecond to getattr on all file sytems
- tmpwatch now calls getpw
- Allow apache daemon to transition to pwauth domain
- Label content under /var/run/user/NAME/keyring* as gkeyringd_tmp_t
- The obex socket seems to be a stream socket
- dd label for /var/run/nologin - Allow jetty running as httpd_t to read hugetlbfs files
- Allow sys_nice and setsched for rhsmcertd
- Dontaudit attempts by mozilla_plugin_t to bind to ssdp ports
- Allow setfiles to append to xdm_tmp_t
- Add labeling for /export as a usr_t directory
- Add labels for .grl files created by gstreamer - Add labeling for /usr/share/jetty/bin/jetty.sh
- Add jetty policy which contains file type definitios
- Allow jockey to use its own fifo_file and make this the default for all domains
- Allow mozilla_plugins to use spice (vnc_port/couchdb)
- asterisk wants to read the network state
- Blueman now uses /var/lib/blueman- Add label for nodejs_debug
- Allow mozilla_plugin_t to create ~/.pki directory and content - Add clamscan_can_scan_system boolean
- Allow mysqld to read kernel network state
- Allow sshd to re� x�������������8������ X � u%8 `N (! rb �$ b ���������������� rb qb sb � 0dcab3e8ab102c1dcf77e7c8ea bb68789b9406e13c9440fe4473ed7223436c2d8039c9679dd49b7fe3dbc74ebe d9ba752cf7ee41539c40ec501e8ee87807f09c3b8e41379a412346836f4b0b58 19e513a8ba3358dc8cdda04b05e4eef976793e4e84c1cdceaf459de9bf74fc48 3d491d0a0fd15c0803063409d42a8e20287e1af6165c1304390e6c8b05f14385 335171a4f96cbc16bcb55fefd17a4445abdf80ffba8d73562e45fb13d893ba2f 53c5ee66c13ceed5736b22c782a2e0588b48c2cb287ffa36a8add6009872c7ac 4dcb9f3b4f135378ef00fee2f8e0bcae4dd70b8697eac4abb7cfda5f05274af7 d1b46094e40d62f1e22edbd65a9702af17ae0faaeb7723d6f995e325f9f5fd46 b0c016c37f2312ec052676cea86c0715bfa75339430f6b057b42d33027f67df8 ed8227bc1aabbee106a1935d76e71ec66d64625d0f5ac61af2a2fc5fc009d565 d2629650e41ec35bb4e502a76fc37fcd14ca21a15e7f7ed5742c7a2602c87b82 deb7f50b931c99fec086ee37e355597b2f620852874bcaeb05f6e93e70fece98 2b8d73b136e0aa6014d91dcd43dc0ba7b14da8f0f255ab6d9288b0e5196918c1 4ffa40c056d9c8ab66c659b28736d2338fe9a060746db793bc809c8332c41ef5 692789e2f6ab4fde47570c167c503a24de86707e5f8172f1bcb9d36815bc8257 3df1430281457e104ea50fe4ef0df148a41145391e8f76af16ddea0482f53702 20378fd4d58df24f6f08eed21921b1259c3ed4a2c77799c4f1227162cd3bdcd4 6e84eaabcaabee121fd5024fc238a24e5144fb68cdca2ab2ed61e42356863fe8 33c195f4485726828e20cb02c0ea30a95451a4990b422a0a48d8c3542cee45d9 13085f07f78a523adb3cdd6aacf730042ab73771df4a92cedf64a6fb222d240a 4e9815ac290e778f0477c1c03b74d2adcfc6c67b5286d1cb63f0d8d2637c07b9 09464f80e9446373e2ca9f0d9a1502420c1e01918d5d72aae814f4dd5703b65b ed67aabcb7e9fd3a489a5eb57e51d8397d8603ea6b51c494792abb8d19383adc 881501cabb70de7d51e94c2d18feb54abf87aa9348353a7daafb1885ded8aaaf 73717570483e2bf9271fbc1368b31b6bf7ba95f5b8551a728e89afff1693e80b 50e3c7c799e508a6f9e6e21927d264b886e94deb2bb42908f8bf163cdb6d73c0 e937d9c19b9639368fe08c15aae5c198760ae9c4cc823811d69eaf6b898b18a7 e524d7ba71a94e2b949ffb806521f2abb016505dde864f854cac228eca62a808 77247e644a24c7b9f43aa7fcb4406d671a2bfc02fc79fb7d8d4c27a7de5e679f a136fb56410437ae513c5f9fbd4259e6c2020a7c1584dbed59d921e6b97fb24c ab83e9d6335cc255b4db1fa1ad0371bae1fc2b5b3bb0992a8771d264e95b0e33 ce83ced8bc537b41a87ef6278186c5887138fc7f011cc9328f0549660e3bbf62 56cb19fe311cff4514891a199ffd19cd6aaf32bd0a493b3421d03da5ec17344d 9750fe4ee07ea2acaaba4664c97d37db8b9a856679ff244e46965d22cfa7b563 ec1e477bfb2be40a5daec1dee3dbdc713392bcb51d48038d982d0141e0dd318c c646ff04beae3d276e5f6f00ed7c6d258d8876d4881a53b53c03817661796f00 143354409f270781f04fa03ad349c1e12028d58b7c7a39291fa4a111dfa07abb 5ae26179872ba265393069ee56013336ac3413a47fc735d7e501f5b6ecd7a0f9 c963a855ee164affc0d61cb97cba86561b8fd6b5de4333d6b581c08033833510 bd7a25c1bed8db1b84ab047bfca4b0860e9ef182a7bb22bd73849fb21ff38de8 188f5cc23476d265cd1c74292460f857e9b9cc9ad482e0e64f4d3f2caba0616f e18bd047a90f35c11db856fb7d13e05ec23e225bbd9d63693ee54d778337f475 b2ccc8e8aa834856eaa5fe7106581570cc1aa1e1014c0f379084cc4067b3f363 f237879e50b593fd1207816e46484c0f1b4d25585d98f139113eb43e08129d5b 50810a376e35809cf061cba3c0e33a4912af7c132480641b994b47a6b1fdb359 a0cb42bd11d5e5794d71bd30a9f3fea57357c1e5eb2a059797bf08d82e8dd16c 8d03b39e415d64a6be5bd0f10b9caeee8f7e1a71810a7af3f9b3d2f23fb9d5f4 bdc9fc56e77ab4ab3971c69b6675fd97d2c5b9f73fac1d57b5c91c589ad0db8b 1b98654eb7da5eb6e30895f7f235be5a7e34a21d44c3deeb76920376a0cff492 8275a371906ee4d08013c85a8ad32f7b0487d399ac77500dbd0a4bf3633e6ab4 0cab54b94bc56e92b02106180ed865b8db8473d680b7fba5119800e8b8958b6c 2043e311d03bdd96d49fa4f017511da90e55aea8f66192b362c7ede19275132e b8468ef20d263edbce64f061c0031aa015c0f47e288ebba576a32595ca082b32 80aa98f817213fb6fb01656cf395c9d1cc68f421aa82ece361f8e1f53505001c 3502d31f625e84ef7bd8856fe356bcb6fcb4301ff40cdf740109a40158d24ac9 794880e65cb362394b3560ee9aad2923b597586f5780ae16b52106611ded4e0d 7fa0c9293a9e3a5bf75a7b9b64459d0b0dbc05e6320725c2b0de76280e781548 d925523e13fb27b82174d7557c9317730369ae185ea105ed5a3114da32dd6f47 bd1862632307dccc2594a5d95c9ab37f81f422571b3a9496a98d9d4a88a012c9 9d3298770803715cf56f555e29381381aec5f90d5098803db33ac6f7d41009da c6b0e44df02a98ba3a90b06ef5e3bedc487472c9ffce49537f099b599dee620f 9af45554b90ba9183306a8e6744382da95b491280c40bffa55d9be8957fffe7b 4bb8268� x��������������������� X � T%8 ���������� +b �$ ; ���������������� +b ,b � G 0 ? +� d � � " � - � 3 � b � � � � � � � � � � � � � � � � # � [ � a h / $ / � /
� / � / /
< / � / � / � / � L � � ( 8 $ 9 ( : Z G l / H ( / I � / X Y ` \ 8 / ] � / ^ "�
b $q d %� e %� f %� l %� t %� / u &� / v 'L w '� / x (� / y )P � � +� � +� � +� � +� +� +� � -� -� �
/h /� � /� /� / 0 g 0 h 0 C perl-Mail-AuthenticationResults 2.20210112 1.el8 Object Oriented Authentication-Results Headers Object Oriented Authentication-Results email headers. d*��ppc64le-builder01.almalinux.org СAlmaLinux AlmaLinux GPL+ or Artistic AlmaLinux Packaging Team <packager@almalinux.org> Unspecified http://search.cpan.org/dist/Mail-AuthenticationResults/ linux noarch C � 2 � G� � � *
{ � � � � � � ` W \ X U T � #� � :� � �
c D )� � � Q � � f �A큤������A큤������������������������������������A�A큤��A큤����������������A큤������������ d*��_� Y_� Y_� Y_� Yd*��_� Yd*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��d*��_� Y_� Yd*��_� Y_� Y_� Y_� Y_� Y_� Y_� Y_� Y_� Yd*��_� Y_� Y_� Y_� Y_� Y_� Y_� Y 6be72009aef1ccbd43533e83688afc99093cb94eee837933022abe8d62707d72 6589e5e2a71f2c9943ce3eeb53ee1753404da7e82b3999e41952cffa70e715ad 3ceda9c7a4ecbd11204a415a0584c2b1f20647d3bc60495fa8e019987d438b41 33aeae5b226df1e8ca7d67cfe9398e3b984bcc8539d34f0055f757988c5de833 ffaa40feb768566e52d93879fedd2c5483828b6de483874f30a0a4425351555f ee0421a7ee0e3e38aba97477b5ef34fc2ad800b4a5da5e67a8f9e3e8ec5be3fd c06ea4afc666eec00140347ac7d4ba4761ac686440a549a221c4c8c8acb28fb1 dd20d92f2dd6aeb26bed275e627e2efe369dbeda6ae178eaa474e16432f9549b 600180ae187d76072426d7b41a47b1f19db4c00e627e101d173909c7d611c598 46b59f4c8088044f6a02900da7992632aa818159e3fa49c3a5303a7b88d39c53 9b257af09057ef8e7ae4af40ecb50adc7c9551ac38f00e939156b188e9afafc6 f49d3d43accadd6eb26dcc2906b293d66bcf77c689b6bb2e6c5b9bc23dd5653a 2f54cc2a74a4ec9a300014c3e11b7f6f13aff59f9a376afb2321efa39af18a2e df7644752696a07b7752d7cf0a1cdae9fa834d90b1dec8e8979c867697905497 515c6a71c950b9123d62fac7304652d68cab359791c3a35b69f476cc4d2849a2 36c03e6a973ceb2e3458798fbccedf8b72d70bb9423939fc7ae85de752833c11 e959667f406898bc2c48c715272fe473757b4f7dfe43de0226025d2cf5a0a96d e9deb3f46391353db095fb8232796b46edfd86988189491d6ff64eb72aaa6472 eff86c46141725f9a5c3dc3dac21254f2f4a75970aabc06cd2cc9af7b3b516bd 4d6a65844b228add2dea8518e96ccd74d3fc552633a1fb9a7e0c03a2464a4970 42d2fefd79a8f1d0c9afb6ee93370676fa586f2915bf6488f051b2a1d1370155 2a40d0f37460e3e3c89b7a605c0211d0e9e97c293e2a7855ba92fe83da45dbc6 4d77ae64396644d2a922e3aaf52942ccdf6736ba2e94bc8a8dc15496c54a8a64 3a888af30d964b12dd186785585045c8251c3138db04de9398777dfe674e48ef 18d2d7eea2ac1cfad1cf512c385776168d70893ad25f2994c52c48b77afd7114 cdd19c8e20ff5c702291342b97edba9642342cd1300dcaaba332c84304803570 798c7a2668cc01f2b43b49b4a94d6bfe46c26ac14111e8fc89c278c920337494 facda932569f7fb57b4b31893003f432073c6b3eb7db9de36336f9e2f4a8d612 d2eb49a65d7004b352a3d71709c0fa7fccc9453c3766347e7aebf2893269492d e0759afa724661e62048af5137960bffd63786e3e18fa4e482ba64ee0dc9ba90 dd71e6ab354b43c4adb49f20c8937fbc112c076e78cf974� x�������������������� X � �&8 �������H� r! �$ b ���������������� r! q! s! � ae3b0a420aa64ba81363879e9734243e26de606ae08ab 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bac0520a1407d3e3357c528229ccac0da28ea1fa5b0a5fd9ff2903965950300b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c064716565b2512b900950d37a3200ab46225f30a4856653f41589b7f295be51 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 17241a59148887abd5d91a08c603f5fb8df2c864b6651f1a09ff9a902e30fd58 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7ca9d785854f09729d423b770cb87254fa56b9d32d2e40457dabb55fb8e50a65 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 935a5029b6dcec0f26823b21e9d0c57933770296ab0700d09cb3577775be7a95 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 306131e68e7e3db9f59b8304ced1fb0bc8d6f820d881ce3260d0aa0332030c55 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6dc4872773d98d4fad3ba8df092b4d14e582f7f43e23de651e80d9b93f20f8ec 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e62fd29b5237ae6948668b971ee764c6a3a26ae7bb94ac39f46132adf238a9af 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 326e165cbf9efb501d9a64bc68a55d5dc895233f70a7b2b1a06470d26e30649b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf baa49427108c7cbe29ad69795872aeb27c519818f7fa10dadb6452c2b218c1a1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1de7f7dbb4e1a62e5d7d71b6f94bd5181458eeea7f16abb6f3884133da931b17 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f46c75eab0732540dc73f9e8acc13dfab0664f4b2c0e5292fb943f7b8c815e29 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf eefb8f574e21455e1c5e6f6ccd0fa1f4915f2459c60ae8682d8773c78aedc7bd 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e44da6c2405e7ae70427d1b5b1344523367c00044b3c8a10c9425dd2401ced8b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 5c0bdcb9d44d2f951f451651d35a97e88586a8996ea6466569a375bf6b4cc70a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf daaa4bad3ccc49e62d696777f3047471cc2082b9853085f6587d06699016e1ad 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a76519ab23d549bf048178e72664f96d428a06e791f22a5249bcc761b36c33f0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 9ccd337d4e929b3319b30185224f8a45c77f24ae3fee5ab168ca014102c32e37 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b83c8093f6694a7fd64789d0c737b47970f4f3a1bd0a340873872bd00cd5856f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 29fa0fc3ff18528dde6580744a8f001b43ed977771fb7df8ed651ffc62e21ea6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 692dce3262739b34ef71524ba81e4beb39876f17706be39f53e82afcf2ca6d64 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b699c8d807b109a5025bef71ec0562bf06efbe2d0ab14caefffced70512ff6dc 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0567a5c414f0b35efc7876591f656282836f65f887e116e45b6744bd5432453f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3909736c0977233fc18b5ba52851040358c93dc2c88f51b10405050cfd5798f0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8e9cbf424f354fa11851a0b1c490f0e076ec1eb60284f0707a917c18887c4182 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3b63e49195eaf3599cf9b94924b67668e5a7b9ead3b9efde0d27428e07090ac6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf fcd64c1ca6ff1800b75e7b18648058701d323ef5781280164f0b61130f23794b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 392399d5c2d4a3df2e77c0f636eebfa5b13d9b89f321fa84c2b3f6d14d4bf503 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e7b1f9bbd73fed6c1c4bd4e5a2d38e70ec7a62137cc6b24a64c5f93666eae292 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f79ebb44ecd8add8e0d7bd5ecc88d844847161ced028f66429f7e8c43af869f5 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 20b896b8cc6eeff1cb5f3ed23252� x���������������������� X � .%8 ��������8S �a �$ c ���������������� �a �a � �� f/�?;�;��
���Q�6_t� �G��O��F���6�ɳ�V�4F��l&�%���h��{0u�m(}^ �(��,@m���|�ڬ��>�1dd686f8717a18af043347a82b8d1dda49721974 641aa81edb212858ca961da6fdfa3cf7c67095f26300a5cd69d74cbddaa59099 g�U� � g�U�L0 ������\P( �������l�x��lPD( `L�������������h\@4�� ���8679a3421a84ec r � 0 AcyclicTest.php86 r v c Archive4a X G 0 AnyUncompress.pm9 X F d
AnyInflate.pm X - X B 5 Adapter7b J a
Amharic.pm541 J
a Afar.pm < < a Apache.pm
� e AixPluginsSupport.txt � � � c Artistic.txt1 � � 5 Array.pmb � � 5 Abbrev.pm � p H 0 AnyDBM_File.pm2d4 � � 2 AnyDBM_File.3pm.gz17b � � 9 Adlm.pl09 � � � � c Armn.ple9 � � � � f Arab.plbc � � 7 AT.pl � � 2 Assigned.pl24 � � 3 Alnum.pl8 � + 7 Alef.pl99 � * 0 Ain.pl206 � � 5 ATAR.plb9 � � AR.pl � d f Alpha � S 1 Agebd � ) 8 Age.pl6d2 � 4
AmigaOS.pmd3b � e Alias.pma � � � z Artistic z 2 AU8830.confee z 7 AU8820.confaa z b AU8810.confcd z 0 ATIIXP.confbe z 2 ATIIXP-SPDMA.conf z 4 ATIIXP-MODEM.conf j V 5 ARe45 � z 6 ASMO_449.so7f � y 9 ARMSCII-8.sod T � * Asuncion � 0 � Astrakhan z � Asmera
y � Asmara � g � Asia o � Ashkhabad n � Ashgabat S � ) Aruba a � 7 � Arizonan E � Argentina � I e About-NetAddr-IP.txt � V ASN.pm � u ASN1.pod �
ASN1.pmA � ASN1 w A AddrList.pod w r AddrList.pm + w Address.poda� w
Address.pm u x ARTISTIC r * t M AbstractUnitTests.php r # t F r AcyclicTestTest.php a Agafari-14.psfu.gz � t Agafari-12.psfu.gz t � Africa J
a Afar.pm < � � 9 Adlm.pl09 � h � Aden n � D Adelaide w � Addis_Ababa X - X B 5 Adapter7b @ � Adak r � t 0 AcyclicTest.php86 � � [ Acre
v � Accra u � Abidjan � � 5 Abbrev.pm8 9
$ ' ( - . 4 5 6 ; = ? B O Q R T W X ^ ` c
d e i u z � � � � � � � � � � � 8 � � � � L � � " � F � 0 � � ? � 5
G ( 7 + 1 < = � E P
S X � ] ^ o q s � u w x y � �
� � � � \ � � 3 � � � � I �
_
- /
0 8 9 9 w = s > ? F g l p � AUTHORSli z 2 AU8830.confee z 7 AU8820.confaa z b AU8810.confcd z 0 ATIIXP.confbe z 2 ATIIXP-SPDMA.conf z 4 ATIIXP-MODEM.conf � � 5 ATAR.plb9 � � 7 AT.pl � z 6 ASMO_449.so7f S
�
ARUBA_rlc.bin R
a
ARUBA_pfp.bin Q
0 ARUBA_me.bin � y 9 ARMSCII-8.sod A AR6004k AR6003.1� k AR6003 AR6002 B � � AR.pl j V 5 ARe45� x��������������������� X � �'8 �������� _ �Q �$ _ ���������������� �Q �Q �Q � root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root postfix root postfix postfix postfix postfix postfix postfix postfix postfix postfix root postfix postfix postfix postfix root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root postdrop root root root root root root postdrop root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root postdrop root root postdrop root root postfix-3.4.8-2.centos.8+p18.0.24.0+t200128.1353.src.rpm ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� x�������������p�������� X � �&8 ���������� �! �$ C ���������������� �! �! �! � m dbusd client BZ(1478735)
- Allow amanda_t domain to getattr on tmpfs filesystem BZ(1527645)
- Allow named file transition to create rpmrebuilddb dir with proper SELinux context BZ(1461313)
- Dontaudit httpd_passwd_t domain to read state of systemd BZ(1522672)
- Allow thumb_t to mmap non security files BZ(1517393)
- Allow smbd_t to mmap files with label samba_share_t BZ(1530453)
- Fix broken sysnet_filetrans_named_content() interface
- Allow init_t to create tcp sockets for unconfined services BZ(1366968)
- Allow xdm_t to getattr on xserver_t process files BZ(1506116)
- Allow domains which can create resolv.conf file also create it in systemd_resolved_var_run_t dir BZ(1530297)
- Allow X userdomains to send dgram msgs to xserver_t BZ(1515967)
- Add interface files_map_non_security_files() - Make working SELinux sandbox with Wayland. BZ(1474082)
- Allow postgrey_t domain to mmap postgrey_spool_t files BZ(1529169)
- Allow dspam_t to mmap dspam_rw_content_t files BZ(1528723)
- Allow collectd to connect to lmtp_port_t BZ(1304029)
- Allow httpd_t to mmap httpd_squirrelmail_t files BZ(1528776)
- Allow thumb_t to mmap removable_t files. BZ(1522724)
- Allow sssd_t and login_pgm attribute to mmap auth_cache_t files BZ(1530118)
- Add interface fs_mmap_removable_files() - Allow crond_t to read pcp lib files BZ(1525420)
- Allow mozilla plugin domain to mmap user_home_t files BZ(1452783)
- Allow certwatch_t to mmap generic certs. BZ(1527173)
- Allow dspam_t to manage dspam_rw_conent_t objects. BZ(1290876)
- Add interface userdom_map_user_home_files()
- Sytemd introduced new feature when journald(syslogd_t) is trying to read symlinks to unit files in /run/systemd/units. This commit label /run/systemd/units/* as systemd_unit_file_t and allow syslogd_t to read this content. BZ(1527202)
- Allow xdm_t dbus chat with modemmanager_t BZ(1526722)
- All domains accessing home_cert_t objects should also mmap it. BZ(1519810) - Allow thumb_t domain to dosfs_t BZ(1517720)
- Allow gssd_t to read realmd_var_lib_t files BZ(1521125)
- Allow domain transition from logrotate_t to chronyc_t BZ(1436013)
- Allow git_script_t to mmap git_sys_content_t BZ(1517541)
- Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t BZ(1464803)
- Label /run/openvpn-server/ as openvpn_var_run_t BZ(1478642)
- Allow colord_t to mmap xdm pid files BZ(1518382)
- Allow arpwatch to mmap usbmon device BZ(152456)
- Allow mandb_t to read public sssd files BZ(1514093)
- Allow ypbind_t stream connect to rpcbind_t domain BZ(1508659)
- Allow qpid to map files.
- Allow plymouthd_t to mmap firamebuf device BZ(1517405)
- Dontaudit pcp_pmlogger_t to sys_ptrace capability BZ(1416611)
- Update mta_manage_spool() interface to allow caller domain also mmap mta_spool_t files BZ(1517449)
- Allow antivirus_t domain to mmap antivirus_db_t files BZ(1516816)
- Allow cups_pdf_t domain to read cupd_etc_t dirs BZ(1516282)
- Allow openvpn_t domain to relabel networkmanager tun device BZ(1436048)
- Allow mysqld_t to mmap mysqld_tmp_t files BZ(1516899)
- Update samba_manage_var_files() interface by adding map permission. BZ(1517125)
- Allow pcp_pmlogger_t domain to execute itself. BZ(1517395)
- Dontaudit sys_ptrace capability for mdadm_t BZ(1515849)
- Allow pulseaudio_t domain to mmap pulseaudio_home_t files BZ(1515956)
- Allow bugzilla_script_t domain to create netlink route sockets and udp sockets BZ(1427019)
- Add interface fs_map_dos_files()
- Update interface userdom_manage_user_home_content_files() to allow caller domain to mmap user_home_t files. BZ(1519729)
- Add interface xserver_map_xdm_pid() BZ(1518382)
- Add new interface dev_map_usbmon_dev() BZ(1524256)
- Update miscfiles_read_fonts() interface to allow also mmap fonts_cache_t for caller domains BZ(1521137)
- Allow ipsec_t to mmap cert_t and home_cert_t files BZ(1519810)
- Fix typo in filesystem.if
- Add interface dev_map_framebuffer()
- Allow chkpwd command to mmap /etc/shadow BZ(1513704)
- Fix systemd-resolved to run properly with SELinux in enforcing state BZ(1517529)
- Allow thumb_t domain to mmap f� x�������������������� X � R'8 � ��������&" �$ 6 ���������������� &" %" '" � dnssec to work with openswan - Add user_fonts_t alias xfs_tmp_t
- Since depmod now runs as insmod_t we need to write to kernel_object_t
- Allow firewalld to dbus chat with networkmanager
- Allow qpidd to connect to matahari ports
- policykit needs to read /proc for uses not owned by it
- Allow systemctl apps to connecto the init stream - Turn on deny_ptrace boolean - Remove pam_selinux.8 man page. There was a conflict. - Add proxy class and read access for gssd_proxy
- Separate out the sharing public content booleans
- Allow certmonger to execute a script and send signals to apache and dirsrv to reload the certificate
- Add label transition for gstream-0.10 and 12
- Add booleans to allow rsync to share nfs and cifs file sytems
- chrome_sandbox wants to read the /proc/PID/exe file of the program that executed it
- Fix filename transitions for cups files
- Allow denyhosts to read "unix"
- Add file name transition for locale.conf.new
- Allow boinc projects to gconf config files
- sssd needs to be able to increase the socket limit under certain loads
- sge_execd needs to read /etc/passwd
- Allow denyhost to check network state
- NetworkManager needs to read sessions data
- Allow denyhost to check network state
- Allow xen to search virt images directories
- Add label for /dev/megaraid_sas_ioctl_node
- Add autogenerated man pages - Allow boinc project to getattr on fs
- Allow init to execute initrc_state_t
- rhev-agent package was rename to ovirt-guest-agent
- If initrc_t creates /etc/local.conf then we need to make sure it is labeled correctly
- sytemd writes content to /run/initramfs and executes it on shutdown
- kdump_t needs to read /etc/mtab, should be back ported to F16
- udev needs to load kernel modules in early system boot - Need to add sys_ptrace back in since reading any content in /proc can cause these accesses
- Add additional systemd interfaces which are needed fro *_admin interfaces
- Fix bind_admin() interface - Allow firewalld to read urand
- Alias java, execmem_mono to bin_t to allow third parties
- Add label for kmod
- /etc/redhat-lsb contains binaries
- Add boolean to allow gitosis to send mail
- Add filename transition also for "event20"
- Allow systemd_tmpfiles_t to delete all file types
- Allow collectd to ipc_lock - make consoletype_exec optional, so we can remove consoletype policy
- remove unconfined_permisive.patch
- Allow openvpn_t to inherit user home content and tmp content
- Fix dnssec-trigger labeling
- Turn on obex policy for staff_t
- Pem files should not be secret
- Add lots of rules to fix AVC's when playing with containers
- Fix policy for dnssec
- Label ask-passwd directories correctly for systemd - sshd fixes seem to be causing unconfined domains to dyntrans to themselves
- fuse file system is now being mounted in /run/user
- systemd_logind is sending signals to processes that are dbus messaging with it
- Add support for winshadow port and allow iscsid to connect to this port
- httpd should be allowed to bind to the http_port_t udp socket
- zarafa_var_lib_t can be a lnk_file
- A couple of new .xsession-errors files
- Seems like user space and login programs need to read logind_sessions_files
- Devicekit disk seems to be being launched by systemd
- Cleanup handling of setfiles so most of rules in te file
- Correct port number for dnssec
- logcheck has the home dir set to its cache - Add policy for grindengine MPI jobs - Add new sysadm_secadm.pp module
* contains secadm definition for sysadm_t
- Move user_mail_domain access out of the interface into the te file
- Allow httpd_t to create httpd_var_lib_t directories as well as files
- Allow snmpd to connect to the ricci_modcluster stream
- Allow firewalld to read /etc/passwd
- Add auth_use_nsswitch for colord
- Allow smartd to read network state
- smartdnotify needs to read /etc/group - Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory
- lxdm startup scripts should be labeled bin_t, so confined users will work
- mcstransd now creates a pid, needs back port to F16
- qpidd should be allowed to co� x�������������Pz������� X � �'8 @� �������]" �$ M ���������������� ]" \" ^" � � x�������������j������� X � '8 ���������E �! �$ H ���������������� �! �! �! � nel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy
- refpolicy: Define and allow map permission
- init: Add NoNewPerms support for systemd.
- Add nnp_nosuid_transition policycap and related class/perm definitions. - Update for SELinux userspace release 20170804 / 2.7
- Omit precompiled regular expressions from file_contexts.bin files - After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Allow llpdad send dgram to libvirt
- Allow abrt_t domain dac_read_search capability
- Allow init_t domain mounton dirs labeled as init_var_lib_t BZ(1471476)
- Allow xdm_t domain read unique machine-id generated during system installation. BZ(1467036)
- Dontaudit xdm_t to setattr lib_t dirs. BZ(#1458518) - Dontaudit xdm_t to setattr lib_t dirs. BZ(#1458518) - Add new boolean gluster_use_execmem - Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
- Allow iptables to read container runtime files - Allow boinc_t nsswitch
- Dontaudit firewalld to write to lib_t dirs
- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
- Allow thumb_t domain to allow create dgram sockets
- Disable mysqld_safe_t secure mode environment cleansing
- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
- Allow dirsrv domain setrlimit
- Dontaudit staff_t user read admin_home_t files.
- Add interface lvm_manage_metadata
- Add permission open to files_read_inherited_tmp_files() interface - Allow sssd_t to read realmd lib files.
- Fix init interface file. init_var_run_t is type not attribute - Allow rpcbind_t to execute systemd_tmpfiles_exec_t binary files.
- Merge branch 'rawhide' of github.com:wrabcak/selinux-policy-contrib into rawhide
- Allow qemu to authenticate SPICE connections with SASL GSSAPI when SSSD is in use
- Fix dbus_dontaudit_stream_connect_system_dbusd() interface to require TYPE rather than ATTRIBUTE for systemd_dbusd_t.
- Allow httpd_t to read realmd_var_lib_t files
- Allow unconfined_t user all user namespace capabilties.
- Add interface systemd_tmpfiles_exec()
- Add interface libs_dontaudit_setattr_lib_files()
- Dontaudit xdm_t domain to setattr on lib_t dirs
- Allow sysadm_r role to jump into dirsrv_t - Merge pull request #10 from mscherer/fix_tor_dac
- Merge pull request #9 from rhatdan/rawhide
- Merge pull request #13 from vinzent/allow_zabbix_t_to_kill_zabbix_script_t
- Allow kdumpgui to read removable disk device
- Allow systemd_dbusd_t domain read/write to nvme devices
- Allow udisks2 domain to read removable devices BZ(1443981)
- Allow virtlogd_t to execute itself
- Allow keepalived to read/write usermodehelper state
- Allow named_t to bind on udp 4321 port
- Fix interface tlp_manage_pid_files()
- Allow collectd domain read lvm config files. BZ(1459097)
- Merge branch 'rawhide' of github.com:wrabcak/selinux-policy-contrib into rawhide
- Allow samba_manage_home_dirs boolean to manage user content
- Merge pull request #14 from lemenkov/rabbitmq_systemd_notify
- Allow pki_tomcat_t execute ldconfig.
- Merge pull request #191 from rhatdan/udev
- Allow systemd_modules_load_t to load modules - Allow keepalived domain connect to squid tcp port
- Allow krb5kdc_t domain read realmd lib files.
- Allow tomcat to connect on all unreserved ports
- Allow keepalived domain connect to squid tcp port
- Allow krb5kdc_t domain read realmd lib files.
- Allow tomcat to connect on all unreserved ports
- Allow ganesha to connect to all rpc ports
- Update ganesha with few allow rules
- Update rpc_read_nfs_state_data() interface to allow read also lnk_files.
- virt_use_glusterd boolean should be in optional block
- Add new boolean virt_use_glusterd
- Add capability sys_boot for sbd_t domain Allow sbd_t domain to create rpc sysctls.
- Allow ganesha_t domain to manage glusterd_var_run_t pid files.
- Create new interface: glusterd_read_lib_files() Allow ganesha read glust� x��������������Y������� X � r'8 ���������r������F" �$ V ���������������� F" E" G" � ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � 3.14.3-117.el8 3.14.3-117.el8 3.14.3-117.el8
0.10-1 3.14.3-117.el8 2
� x�������������I������� X � H'8 X� @R������ " �$ ���������������� " " " � og now uses kerberos keytabs
- Allow xserver to compromise_kernel access
- Allow nfsd to write to mount_var_run_t when running the mount command
- Add filename transition rule for bin_t directories
- Allow files to read usr_t lnk_files
- dhcpc wants chown
- Add support for new openshift labeling
- Clean up for tunable+optional statements
- Add labeling for /usr/sbin/mkhomedir_helper
- Allow antivirus domain to managa amavis spool files
- Allow rpcbind_t to read passwd
- Allow pyzor running as spamc to manage amavis spool - Add interfaces to read kernel_t proc info
- Missed this version of exec_all
- Allow anyone who can load a kernel module to compromise kernel
- Add oddjob_dbus_chat to openshift apache policy
- Allow chrome_sandbox_nacl_t to send signals to itself
- Add unit file support to usbmuxd_t
- Allow all openshift domains to read sysfs info
- Allow openshift domains to getattr on all domains - MLS fixes from Dan
- Fix name of capability2 secure_firmware->compromise_kerne - Allow xdm to search all file systems
- Add interface to allow the config of all files
- Add rngd policy
- Remove kgpg as a gpg_exec_t type
- Allow plymouthd to block suspend
- Allow systemd_dbus to config any file
- Allow system_dbus_t to configure all services
- Allow freshclam_t to read usr_files
- varnishd requires execmem to load modules - Allow semanage to verify types
- Allow sudo domain to execute user home files
- Allow session_bus_type to transition to user_tmpfs_t
- Add dontaudit caused by yum updates
- Implement pki policy but not activated - tuned wants to getattr on all filesystems
- tuned needs also setsched. The build is needed for test day - Add policy for qemu-qa
- Allow razor to write own config files
- Add an initial antivirus policy to collect all antivirus program
- Allow qdisk to read usr_t
- Add additional caps for vmware_host
- Allow tmpfiles_t to setattr on mandb_cache_t
- Dontaudit leaked files into mozilla_plugin_config_t
- Allow wdmd to getattr on tmpfs
- Allow realmd to use /dev/random
- allow containers to send audit messages
- Allow root mount any file via loop device with enforcing mls policy
- Allow tmpfiles_t to setattr on mandb_cache_t
- Allow tmpfiles_t to setattr on mandb_cache_t
- Make userdom_dontaudit_write_all_ not allow open
- Allow init scripts to read all unit files
- Add support for saphostctrl ports - Add kernel_read_system_state to sandbox_client_t
- Add some of the missing access to kdumpgui
- Allow systemd_dbusd_t to status the init system
- Allow vmnet-natd to request the kernel to load a module
- Allow gsf-office-thum to append .cache/gdm/session.log
- realmd wants to read .config/dconf/user
- Firewalld wants sys_nice/setsched
- Allow tmpreaper to delete mandb cache files
- Firewalld wants sys_nice/setsched
- Allow firewalld to perform a DNS name resolution
- Allown winbind to read /usr/share/samba/codepages/lowcase.dat
- Add support for HTTPProxy* in /etc/freshclam.conf
- Fix authlogin_yubike boolean
- Extend smbd_selinux man page to include samba booleans
- Allow dhcpc to execute consoletype
- Allow ping to use inherited tmp files created in init scripts
- On full relabel with unconfined domain disabled, initrc was running some chcon's
- Allow people who delete man pages to delete mandb cache files - Add missing permissive domains - Add new mandb policy
- ALlow systemd-tmpfiles_t to relabel mandb_cache_t
- Allow logrotate to start all unit files - Add fixes for ctbd
- Allow nmbd to stream connect to ctbd
- Make cglear_t as nsswitch_domain
- Fix bogus in interfaces
- Allow openshift to read/write postfix public pipe
- Add postfix_manage_spool_maildrop_files() interface
- stickshift paths have been renamed to openshift
- gnome-settings-daemon wants to write to /run/systemd/inhibit/ pipes
- Update man pages, adding ENTRYPOINTS - Add mei_device_t
- Make sure gpg content in homedir created with correct label
- Allow dmesg to write to abrt cache files
- automount wants to search virtual memory sysctls
- Add support for hplip logs stored in /var/log/hp/tmp
- Add labe� x��������������8������� X � �(8 �U �H������< �$ , ���������������� < H
� ?
�
�
� � ! � * � X � � � � � � � � � � �
' (
c X
l Y
t
� �
� h
� mQINBFz3zvsBEADJOIIWllGudxnpvJnkxQz2CtoWI7godVnoclrdl83kVjqSQp+2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gpg-pubkey 2f86d6a1 5cf7cefb gpg(Fedora EPEL (8) <epel@fedoraproject.org>) -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.3 (NSS-3)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=84m8
-----END PGP PUBLIC KEY BLOCK-----
\��localhost pubkey Fedora EPEL (8) <epel@fedoraproject.org> Public Keys (none) gpg(Fedora EPEL (8) <epel@fedoraproject.org>) gpg(2f86d6a1) 4.14.3 4:21ea45ab2f86d6a1-5cf7cefb 4:21ea45ab2f86d6a1-5cf7cefb ? ���� 62c26490e79c69d544c2071bc8e34302590375ad g�T�g�T�ility and a ca-legacy.conf configuration file.
By default, legacy roots required for OpenSSL/GnuTLS compatibility
are kept enabled. Using the ca-legacy ut� x��������������'������� X � �&8 � �� {! �$ k ���������������� {! z! |! � 9d41f7e6822983b919e5e952f83cf 71d71e43a4515928c2162bd13729e2ee9eb315b65dd14c95f44b542a2ae6328e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 075a7c3accbff5048b472768c0cc27663bde81649f87eb0a3a746953a4c1c974 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e0a4067e6304fb91b03d25d2ae3943489d211614e8f00fac115169598b2e2072 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 96ac5f49c64792d6c09c03eebb88b7bef26c242389c2bc7fb7866297e3a09874 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bc80d441a82c6b133298ee80f83479dfcc60b2178a689c7a60405f70499ac741 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e62bc67e6bf0e2f0d416d346b46a85ee1a98ae6141babedca13fe171b604b3ad 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7ca4833f899e4ea17ee29c8ce53af1104e211f6c669590ed343ed0f10a661e27 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4756698225a6a2cfa98fa6e7cd7ec80cf6cb0e90e3f7d44de495cbe19807b24e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 94f36e9336da9b5f45c38481ef0b9420a2af3abe3cbfb5e8f47b195be39c3bd7 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b85b2f2c84575c0370a63c00645bb2dec23ad2f1a053df6b8e5e42eda30f758c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 84f98f3dbe88facb0a5e5c30b4367d5a6033c99e4eaa9818a4136a8bb0ac27ce 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 65ef40dfe6c6e47e7d0638d88670702ead61583005a32f8d6369a791db54077c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7a0261e6a58e259ae725fb406add781015c991b95809e33961d52a76ddf4ebed 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2882032225580bdde629b9e5b163e34a9f5ea34c2d4a4606e09e6bb032ec132e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 5fa9c73b9aaabdc65f444ff01502ac458d167e6173ef3fa4f08f6f407a98257f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf fa6a3c7a6162acdb5947e44d5a971f48e001032e539c45224ca99947d0a9cfbe 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 77dcacb0a6c1f900f4935524648dbf4f036357c612dffe0f1c3f849eb3e96efc 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d3ed83101130e650bdbe7d2c269fdd5e7dc123d4e332f072280e28ff6de3d3b8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7ec3bc2a918e95363fcd21e4bff09cdc6d8cd1db0efead72bde1bed18fd15c96 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b17c33f9595ce55f7d93e2fcd835845620aab9f1dde7fd71b4b0edec2be0cfd9 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 5c22e9d88ef65fa7530eaf94ad544a7fd9e13fbedd5c3137bf3ca5211878b6cf 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d88e1a5686fdadd48c1cbab6267906a2386f2a00c81472cd4b3869fe4a2352ce 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a2a7f7ae47f4ec85298dd63f7b8ac6db104dd07abc2804a49072274b3974363e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 953f3df5efe58cdf99bb3466864b85a612f9b177cf98ed92cf670e7cd125d844 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1c49bc1c1f809c1d003c036db46bddf3ffc627ba9a24e80a85865c7bdfc9458d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c3144a9a8917a415d6d3fd373dd69472ea0a2be7e3625d938b70a6fb96a46787 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 38a443e4623ae2962e89870eb997f37637a90a25abd26343fce192a57900edf5 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 9351bcb2cbcc689ea6f57f60d91401a13ed81429edc4cc251888a18e018b9c06 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 569cde4677edd80ac0a9825d2e591eb7dfa0639243028387b529e595aae160c1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf de732d419e6b36812da67bfe2a15845981d53a953bb3cd20e17a59ca4974b43a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 805d142e7dc6d79e7fe4fc2389926da6a500d86ff16a89101ddc47c5531ee465 c7c185caf6b3c944b6bce26a3642b67b3660f32e2f04� x�������������p������� X � �&8 0� 8� �! �$ \ ���������������� �! �! �! � to chat via dbus
- Associate sysctl_kernel_t type with filesystem attribute - Fix typos in zabbix.te file
- Add missing requires
- Allow tomcat domain sends email
- Fix typo in sge policy
- Allow certmonger to sends emails
- Allow tomcat_t do mmap tomcat_tmp_t files
- Improve sge_rw_tcp_sockets interface
- Adding new interface: sge_rw_tcp_sockets()
- Update sge_execd_t domain with few rules
- Add new zabbix_run_sudo boolean
- Allow virtual machines to manage cephfs filesystems.
- Allow rhsmcertd_t domain to read sssd public files and stream connect to sssd
- Add dac_override capability to sendmail_t domain
- Fix typo in netutils.te file
- Update traceroute_t domain to allow create dccp sockets
- Update ssh_keysign policy
- Allow sshd_t domain to read/write sge tcp sockets - Update ctdb domain to support gNFS setup
- Allow authconfig_t dbus chat with policykit
- Allow lircd_t domain to read system state
- Revert "Allow fsdaemon_t do send emails BZ(1582701)"
- Typo in uuidd policy
- Allow tangd_t domain read certs
- Allow vpnc_t domain to read configfs_t files/dirs BZ(1583107)
- Allow vpnc_t domain to read generic certs BZ(1583100)
- Label /var/lib/phpMyAdmin directory as httpd_sys_rw_content_t BZ(1584811)
- Allow NetworkManager_ssh_t domain to be system dbud client
- Allow virt_qemu_ga_t read utmp
- Add capability dac_override to system_mail_t domain
- Update uuidd policy to reflect last changes from base branch
- Add cap dac_override to procmail_t domain
- Allow sendmail to mmap etc_aliases_t files BZ(1578569)
- Add new interface dbus_read_pid_sock_files()
- Allow mpd_t domain read config_home files if mpd_enable_homedirs boolean will be enabled
- Allow fsdaemon_t do send emails BZ(1582701)
- Allow firewalld_t domain to request kernel module BZ(1573501)
- Allow chronyd_t domain to send send msg via dgram socket BZ(1584757)
- Add sys_admin capability to fprint_t SELinux domain
- Allow cyrus_t domain to create own files under /var/run BZ(1582885)
- Allow cachefiles_kernel_t domain to have capability dac_override
- Update policy for ypserv_t domain
- Allow zebra_t domain to bind on tcp/udp ports labeled as qpasa_agent_port_t
- Allow cyrus to have dac_override capability
- Dontaudit action when abrt-hook-ccpp is writing to nscd sockets
- Fix homedir polyinstantion under mls
- Fixed typo in init.if file
- Allow systemd to remove generic tmpt files BZ(1583144)
- Update init_named_socket_activation() interface to also allow systemd create objects in /var/run with proper label during socket activation
- Allow systemd-networkd and systemd-resolved services read system-dbusd socket BZ(1579075)
- Fix typo in authlogin SELinux security module
- Allod nsswitch_domain attribute to be system dbusd client BZ(1584632)
- Allow audisp_t domain to mmap audisp_exec_t binary
- Update ssh_domtrans_keygen interface to allow mmap ssh_keygen_exec_t binary file
- Label tcp/udp ports 2612 as qpasa_agetn_port_t - Add dac_override to exim policy BZ(1574303)
- Fix typo in conntrackd.fc file
- Allow sssd_t to kill sssd_selinux_manager_t
- Allow httpd_sys_script_t to connect to mongodb_port_t if boolean httpd_can_network_connect_db is turned on
- Allow chronyc_t to redirect ourput to /var/lib /var/log and /tmp
- Allow policykit_auth_t to read udev db files BZ(1574419)
- Allow varnishd_t do be dbus client BZ(1582251)
- Allow cyrus_t domain to mmap own pid files BZ(1582183)
- Allow user_mail_t domain to mmap etc_aliases_t files
- Allow gkeyringd domains to run ssh agents
- Allow gpg_pinentry_t domain read ssh state
- Allow gpg_agent_t to send msgs to syslog/journal
- Add dac_override capability to dovecot_t domain
- Allow nscd_t domain to mmap system_db_t files
- Allow tangd_t domain to create tcp sockets and add new interface tangd_read_db_files
- Allow mailman_mail_t domain to search for apache configs
- Allow mailman_cgi_t domain to ioctl an httpd with a unix domain stream sockets.
- Improve procmail_domtrans() to allow mmaping procmail_exec_t
- Allow ptrace arbitrary processes
- Allow jabberd_router_t domain read kerberos ke� x��������������������� X � ,'8 ��������M " �$ ���������������� " �! " � o read /etc/passwd
- Allow docker to write system net ctrls
- Add support for rhnsd unit file
- Add dbus_chat_session_bus() interface
- Add dbus_stream_connect_session_bus() interface
- Fix pcp.te
- Fix logrotate_use_nfs boolean
- Add lot of pcp fixes found in RHEL7
- fix labeling for pmie for pcp pkg
- Change thumb_t to be allowed to chat/connect with session bus type
- Add logrotate_use_nfs boolean
- Allow setroubleshootd to read rpc sysctl - Allow passwd_t to use ipc_lock, so that it can change the password in gnome-keyring
- Allow geoclue to create temporary files/dirs in /tmp
- Add httpd_dontaudit_search_dirs boolean
- Add support for winbind.service
- ALlow also fail2ban-client to read apache logs
- Allow vmtools to getattr on all fs - Add net_admin also for systemd_passwd_agent_t
- Allow Associate usermodehelper_t to sysfs filesystem
- Allow gdm to create /var/gdm with correct labeling
- Allow domains to append rkhunterl lib files. #1057982
- Allow systemd_tmpfiles_t net_admin to communicate with journald
- update libs_filetrans_named_content() to have support for /usr/lib/debug directory
- Adding a new service script to enable setcheckreqprot
- Add interface to getattr on an isid_type for any type of file
- Allow initrc_t domtrans to authconfig if unconfined is enabled
- Add labeling for snapper.log
- Allow tumbler to execute dbusd-daemon in thumb_t
- Add dbus_exec_dbusd()
- Add snapperd_data_t type
- Add additional fixes for snapperd
- FIx bad calling in samba.te
- Allow smbd to create tmpfs
- Allow rhsmcertd-worker send signull to rpm process
- Allow net_admin capability and send system log msgs
- Allow lldpad send dgram to NM
- Add networkmanager_dgram_send()
- rkhunter_var_lib_t is correct type
- Allow openlmi-storage to read removable devices
- Allow system cron jobs to manage rkhunter lib files
- Add rkhunter_manage_lib_files()
- Fix ftpd_use_fusefs boolean to allow manage also symlinks
- Allow smbcontrob block_suspend cap2
- Allow slpd to read network and system state info
- Allow NM domtrans to iscsid_t if iscsiadm is executed
- Allow slapd to send a signal itself
- Allow sslget running as pki_ra_t to contact port 8443, the secure port of the CA.
- Fix plymouthd_create_log() interface
- Add rkhunter policy with files type definition for /var/lib/rkhunter until it is fixed in rkhunter package
- Allow postfix and cyrus-imapd to work out of box
- Remove logwatch_can_sendmail which is no longer used
- Allow fcoemon to talk with unpriv user domain using unix_stream_socket
- snapperd is D-Bus service
- Allow OpenLMI PowerManagement to call 'systemctl --force reboot' - Add haproxy_connect_any boolean
- Allow haproxy also to use http cache port by default
- Fix /usr/lib/firefox/plugin-container decl
- Allow haproxy to work as simple HTTP proxy. HAProxy For TCP And HTTP Based Applications
- Label also /usr/libexec/WebKitPluginProcess as mozilla_plugin_exec_t
- Fix type in docker.te
- Fix bs_filetrans_named_content() to have support for /usr/lib/debug directory
- Adding a new service script to enable setcheckreqprot
- Add interface to getattr on an isid_type for any type of file
- Allow initrc_t domtrans to authconfig if unconfined is enabled
type in docker.te
- Add mozilla_plugin_exec_t labeling for /usr/lib/firefox/plugin-container - init calling needs to be optional in domain.te
- Allow docker and mount on devpts chr_file
- Allow docker to transition to unconfined_t if boolean set
- Label also /usr/libexec/WebKitPluginProcess as mozilla_plugin_exec_t
- Fix type in docker.te
- Add mozilla_plugin_exec_t labeling for /usr/lib/firefox/plugin-container
- Allow docker to use the network and build images
- Allow docker to read selinux files for labeling, and mount on devpts chr_file
- Allow domains that transition to svirt_sandbox to send it signals
- Allow docker to transition to unconfined_t if boolean set - New access needed to allow docker + lxc +SELinux to work together
- Allow apache to write to the owncloud data directory in /var/www/html...
- Cleanup sandbox X AVC's
- Allow consolekit � x�������������P�������� X � �&8 d ��
n! �$ ~ ���������������� n! m! o! � e001542a194e7202991de 08062b1ce71faab6f7a21a62b6cb71a88b275e7f36fad087d29fd7e0f121d13d 8564f22331cfac1d241b73064f15e1a5ffae1133f81f6592187d6d9cf673f277 38987683b036cfcf99f7656992ee4eb62042bd978c8ff6742826f039c5a40909 3740c377103868efd081e872e3f28216ebf17b4535fd4ef3a074333915cff334 e1fa3269417ef83475c62ed5fd9477da3a3f0518b699b35ad6edfb8044ef4f46 dd0f14d1f02077d066f0f4b332fa4ed4ba352c560a62a6f628cb82df4de4a345 c4a79bf016230fdb72a4ee61be011c3e63471c1978071f20cff3d78c36bd9854 6669d66bfcc2aaa964253460196d90e17244d1ca474a7e46ffb3ce986afc3efe b76cc49f30816e6ec08a4bf3f48cab11f3c0c159624e8c3abe52b52f5e6816f0 6a5dac6f77bd507632b1042e967c3374f32e0619365f9f1625439bf28c935582 5df7577357f8bb35e2332bba3c959db0c2bd22f38f8dc5906e7f42c4581a6456 5dd9dd32c0629125704da29c372e56e17e766dec365585bbcacb9259ebeccbd6 7829739ed9feff4578eee8abcc9cb55a647bd73d189c4cc222999de2d4cddd3b 7e88a2ba07eaa2b7130b7ea6ba35f124189a266844ec22baa114d54db17e999f 03296b3f0d372cc054fde17cd56360fd12a18ff640d41ee907d6c43cd619a2ff 03a7f6913b7375ccf9dc5a666a08a788a5c3bdc16a8aac9058c4378e2083b525 0cb844e8fdb86671c44561a38c2116cc8d743f09460746fa7f53bafafcf82e97 8e7fb0018bd239d06926a009de845619163e8f8111596cfae0157d914ec1c10d 2d74091c97b82bdc91d50b5ccde9ce59eb6565dc9a63d3bb9a2049ed72843d09 4762fa117dfad29fd5fbd5e51c562e237f9538204ffd1cc717e77c14e5dd6a28 c7c185caf6b3c944b6bce26a3642b67b3660f32e2f04203c72113984a83b7bda ef53c74ff844d0b66411cecfbb3fe6e301c8a819f78864c126cdf95a15d165fe cedf81a7200afb4054ab296ee3c8468e24118332b6a99f0075e2f8148f5f1d91 f83702c1f209391f7b40d18c10083bffffd9ddcc55d8f27b146d87a5c55bc14e bab5ee4df3e95905a9287de62ed921465a107f2571992a977afc70ecd135ac39 f61bacb21edd90b56135dc33e39207c79a74b4c1bf09a72b6bbe2c3ad6ad5fc9 a599aea3fd4fb4a8dc0b73e87359f7ddff44764f3437c334a02c77464a1b1176 846b94c5da4bfbb019e39000e70ac2c18f0faab6ba254248a5cfbcfdf1c941e6 24126b0a4210e335dea4495f740ac340895979f2fcd803f161a23eb796a62d26 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 553b4ef691f3c348eb7dcea77c14e94f127b2999efb55366fe37753a73345121 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0d46f7f4989897c1387e3039977ac03a89a5bb196ddd9a006e1c945d92fa181e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ba4b17b2273017b13e3bea0576bbf751ee6993dcdbffaf5efa140be34b2a4438 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8943a25183561f677db66724ee6751d3fe05cac8b13eb10f99cf6f363da45bbb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 86aca04e1c79f094301b7ef8deaeda3f09e9e392438af2a6e2c7d698da8a545a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f483f8d11b22f27a7a2a4692dec5ee100dbb1cd264f0226fe4a8012ce0114845 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c8615a4006087dccef8aea639d4e2bbc2b123d34491c0ca00b424e587f56746c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bc8face95ae6897403af7fcdd93586edcc0f5fe4dd6511bcde90df323c077792 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4773ad2f5ef40ae7945fdab79581c508624caf1009ed22861f9371e50c7e067f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1ad1b0fbce699d26e39666786dd24327e7fc07973b0716624e1185d68270d89d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d91dd5b54e35e262cd1df2688dea30f5c727f5908044b53d8387cd7727ebfb3d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b04daffe37882da7ba7b156dce13467490782c2c9a2f48f0381a7b34c548d3e2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf de960d7111d4293aae3c34f3bfaea061e23569dcff8526be4ad2ec570d35800b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1933fc626e69efeb75d2680b31d3020abbef5a3786aecd76389bbea5d7a2c857 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b7f924f7eee28c2ac93461a74ed55fdd0d1ccd3e50e0b1fd3b608cfe9d1bc820 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4d6f8235981e36d75995eaef2abd3eccee0765f95c36e89cef70712728ce598e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e95� x�������������������� X � '8 �� ��������! �$ x ���������������� �! �! �! � asus/pegasus_current.conf.
- Allow fenced node dbus msg when using foghorn witch configured foghorn, snmpd, and snmptrapd.
- cockpit has grown content in /var/run directory
- Add support for /dev/mptctl device used to check RAID status.
- Allow systemd-hostnamed to communicate with dhcp via dbus.
- systemd-logind remove all IPC objects owned by a user on a logout. This covers also SysV memory. This change allows to destroy unpriviledged user SysV shared memory segments.
- Add userdom_destroy_unpriv_user_shared_mem() interface.
- Label /var/run/systemd/shutdown directory as systemd_logind_var_run_t to allow systemd-logind to access it if shutdown is invoked.
- Access needed by systemd-machine to manage docker containers
- Allow systemd-logind to read /run/utmp when shutdown is invoked. - Merge pull request #48 from lkundrak/contrib-openfortivpn
- unbound wants to use ephemeral ports as a default configuration. Allow to use also udp sockets. - The ABRT coredump handler has code to emulate default core file creation The handler runs in a separate process with abrt_dump_oops_t SELinux process type. abrt-hook-ccpp also saves the core dump file in the very same way as kernel does and a user can specify CWD location for a coredump. abrt-hook-ccpp has been made as a SELinux aware apps to create this coredumps with correct labeling and with this commit the policy rules have been updated to allow access all non security files on a system.
- Since /dev/log is a symlink, we need to allow relabelto also symlink. This commit update logging_relabel_devlog_dev() interface to allow it.
- systemd-user has pam_selinux support and needs to able to compute user security context if init_t is not unconfined domain. - Allow fail2ban-client to execute ldconfig. #1268715
- Add interface virt_sandbox_domain()
- Use mmap_file_perms instead of exec_file_perms in setroubleshoot policy to shave off the execute_no_trans permission. Based on a github communication with Dominick Grift.
-all userdom_dontaudit_user_getattr_tmp_sockets instead() of usedom_dontaudit_user_getattr_tmp_sockets().
- Rename usedom_dontaudit_user_getattr_tmp_sockets() to userdom_dontaudit_user_getattr_tmp_sockets().
- Remove auth_login_pgm_domain(init_t) which has been added by accident.
- init_t needs to able to change SELinux identity because it is used as login_pgm domain because of systemd-user and PAM. It allows security_compute_user() returns a list of possible context and then a correct default label is returned by "selinux.get_default_context(sel_user,fromcon)" defined in the policy user config files.
- Add interface auth_use_nsswitch() to systemd_domain_template.
- Revert "auth_use_nsswitch can be used with attribute systemd_domain."
- auth_use_nsswitch can be used with attribute systemd_domain.
- ipsec: fix stringSwan charon-nm
- docker is communicating with systemd-machined
- Add missing systemd_dbus_chat_machined, needed by docker - Build including docker selinux interfaces. - Allow winbindd to send signull to kernel. BZ(#1269193)
- Merge branch 'rawhide-contrib-chrony' into rawhide-contrib
- Fixes for chrony version 2.2 BZ(#1259636)
* Allow chrony chown capability
* Allow sendto dgram_sockets to itself and to unconfined_t domains.
- Merge branch 'rawhide-contrib-chrony' into rawhide-contrib
- Add boolean allowing mysqld to connect to http port. #1262125
- Merge pull request #52 from 1dot75cm/rawhide-base
- Allow systemd_hostnamed to read xenfs_t files. BZ(#1233877)
- Fix attribute in corenetwork.if.in - Allow abrt_t to read sysctl_net_t files. BZ(#1194280)
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Add abrt_stub interface.
- Add support for new mock location - /usr/libexec/mock/mock. BZ(#1270972)
- Allow usbmuxd to access /run/udev/data/+usb:*. BZ(#1269633)
- Allow qemu-bridge-helper to read /dev/random and /dev/urandom. BZ(#1267217)
- Allow sssd_t to manage samba var files/dirs to SSSD's GPO support which is enabled against an Active Directory domain. BZ(#1225200).
- Add samba_mana� x�������������@������� X � '8 �� ������! �$ d ���������������� �! �! �! � 110) - Allow networkmanager manage also openvpn sock pid files. - Allow openvpn to create uuid connections in /var/run/NetworkManager with NM labeling.
- Allow sendmail to create dead.letter. BZ(1165443)
- Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active.
- Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t.
- Label sock file charon.vici as ipsec_var_run_t. BZ(1165065)
- Add additional interfaces for load_policy/setfiles/read_lock related to access checks. - Allow bumblebee to use nsswitch. BZ(1155339)
- Allow openvpn to stream connect to networkmanager. BZ(1164182)
- Allow smbd to create HOMEDIRS is pam_oddjob_mkhomedir in MLS.
- Allow cpuplug rw virtual memory sysctl. BZ (1077831)
- Docker needs to write to sysfs, needs back port to F20,F21, RHEL7 - Add kdump_rw_inherited_kdumpctl_tmp_pipes()
- Added fixes related to linuxptp. BZ (1149693)
- Label keystone cgi files as keystone_cgi_script_exec_t. BZ(1138424
- Dontaudit policykit_auth_t to access to user home dirs. BZ (1157256)
- Fix seutil_dontaudit_access_check_load_policy()
- Add dontaudit interfaces for audit_access in seutil
- Label /etc/strongimcv as ipsec_conf_file_t. - Added interface userdom_dontaudit_manage_user_home_dirs
- Fix unconfined_server_dbus_chat() interface.
- Add unconfined_server_dbus_chat() inteface.
- Allow login domains to create kernel keyring with different level.
- Dontaudit policykit_auth_t to write to user home dirs. BZ (1157256)
- Make tuned as unconfined domain.
- Added support for linuxptp policy. BZ(1149693)
- make zoneminder as dbus client by default.
- Allow bluetooth read/write uhid devices. BZ (1161169)
- Add fixes for hypervkvp daemon
- Allow guest to connect to libvirt using unix_stream_socket.
- Allow all bus client domains to dbus chat with unconfined_service_t.
- Allow inetd service without own policy to run in inetd_child_t which is unconfined domain.
- Make opensm as nsswitch domain to make it working with sssd.
- Allow brctl to read meminfo.
- Allow winbind-helper to execute ntlm_auth in the caller domain.
- Make plymouthd as nsswitch domain to make it working with sssd.
- Make drbd as nsswitch domain to make it working with sssd.
- Make conman as nsswitch domain to make ipmitool.exp runing as conman_t working.
- Add support for /var/lib/sntp directory. - Add support for /dev/nvme controllerdevice nodes created by nvme driver.
- Add 15672 as amqp_port_t
- Allow wine domains to read user homedir content
- Add fixes to allow docker to create more content in tmpfs ,and donaudit reading /proc
- Allow winbind to read usermodehelper
- Allow telepathy domains to execute shells and bin_t
- Allow gpgdomains to create netlink_kobject_uevent_sockets
- Allow abrt to read software raid state. BZ (1157770)
- Fix rhcs_signull_haproxy() interface.
- Add suppor for keepalived unconfined scripts and allow keepalived to read all domain state and kill capability.
- Allow snapperd to dbus chat with system cron jobs.
- Allow nslcd to read /dev/urandom.
- Allow dovecot to create user's home directory when they log into IMAP.
- Label also logrotate.status.tmp as logrotate_var_lib_t. BZ(1158835)
- Allow wine domains to read user homedir content
- Add fixes to allow docker to create more content in tmpfs ,and donaudit reading /proc - Allow keystone_cgi_script_t to bind on commplex_main_port. BZ (#1138424)
- Allow freeipmi_bmc_watchdog rw_sem_perms to freeipmi_ipmiseld
- Allow rabbitmq to read nfs state data. BZ(1122412)
- Allow named to read /var/tmp/DNS_25 labeled as krb5_host_rcache_t.
- Add rolekit policy
- ALlow rolekit domtrans to sssd_t.
- Add kerberos_tmp_filetrans_kadmin() interface.
- rolekit should be noaudit.
- Add rolekit_manage_keys().
- Need to label rpmnew file correctly
- Allow modemmanger to connectto itself - Allow couchdb read sysctl_fs_t files. BZ(1154327)
- Allow osad to connect to jabber client port. BZ (1154242)
- Allow mon_statd to send syslog msgs. BZ (1077821
- Allow apcupsd to get attributes of filesystems with xatt� x��������������������� X � �'8 ��������� �Q �$ F ���������������� �Q �Q �Q � dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=08fc12ad1014b9d258b0da0c1fc93a4bc6c999b0, stripped ASCII text, with overstriking ISO-8859 text, with overstriking ISO-8859 text news or mail, ASCII text ASCII text, with very long lines troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) empty 3 4 L d } � � � � � ' ? W X Y Z [ s t � � � � � < T o � � � � � � 6 L b x � � � � � � R R R R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R #R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R #R R R R R R R R &R 'R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R � x�������������0�������� X � #'8 `= `�������! �$ g ���������������� �! �! �! � tter way)
- Allow avahi_t communicate with pcp_pmproxy_t over dbus. - Allow aide to read random number generator
- Allow pppd to connect to http port. (#1128947)
- sssd needs to be able write krb5.conf.
- Labeli initial-setup as install_exec_t.
- Allow domains to are allowed to mounton proc to mount on files as well as dirs - Label ~/tmp and ~/.tmp directories in user tmp dirs as user_tmp_t
- Add a port definition for shellinaboxd
- Fix labeling for HOME_DIR/tmp and HOME_DIR/.tmp directories
- Allow thumb_t to read/write video devices
- fail2ban 0.9 reads the journal by default.
- Allow sandbox net domains to bind to rawip socket - Allow haproxy to read /dev/random and /dev/urandom.
- Allow mdadm to seng signull kernel_t which is proces type of mdadm on early boot.
- geoclue needs to connect to http and http_cache ports
- Allow passenger to use unix_stream_sockets leaked into it, from httpd
- Add SELinux policy for highly-available key value store for shared configuration.
- drbd executes modinfo.
- Add glance_api_can_network boolean since glance-api uses huge range port.
- Fix glance_api_can_network() definition.
- Allow smoltclient to connect on http_cache port. (#982199)
- Allow userdomains to stream connect to pcscd for smart cards
- Allow programs to use pam to search through user_tmp_t dires (/tmp/.X11-unix)
- Added MLS fixes to support labeled socket activation which is going to be done by systemd
- Add kernel_signull() interface.
- sulogin_t executes plymouth commands
- lvm needs to be able to accept connections on stream generic sockets - Rebuild for rpm bug 1131960 - Allow ssytemd_logind_t to list tmpfs directories
- Allow lvm_t to create undefined sockets
- Allow passwd_t to read/write stream sockets
- Allow docker lots more access.
- Fix label for ports
- Add support for arptables-{restore,save} and also labeling for /usr/lib/systemd/system/arptables.service.
- Label tcp port 4194 as kubernetes port.
- Additional access required for passenger_t
- sandbox domains should be allowed to use libraries which require execmod
- Allow qpid to read passwd files BZ (#1130086)
- Remove cockpit port, it is now going to use websm port
- Add getattr to the list of access to dontaudit on unix_stream_sockets
- Allow sendmail to append dead.letter located in var/spool/nagios/dead.letter. - docker needs to be able to look at everything in /dev
- Allow all processes to send themselves signals
- Allow sysadm_t to create netlink_tcpdiag socket
- sysadm_t should be allowed to communicate with networkmanager
- These are required for bluejeans to work on a unconfined.pp disabled machine
- docker needs setfcap
- Allow svirt domains to manage chr files and blk files for mknod commands
- Allow fail2ban to read audit logs
- Allow cachefilesd_t to send itself signals
- Allow smokeping cgi script to send syslog messages
- Allow svirt sandbox domains to relabel content
- Since apache content can be placed anywhere, we should just allow apache to search through any directory
- These are required for bluejeans to work on a unconfined.pp disabled machin - shell_exec_t should not be in cockip.fc - Add additional fixes for abrt-dump-journal-oops which is now labeled as abrt_dump_oops_exec_t.
- Allow denyhosts to enable synchronization which needs to connect to tcp/9911 port.
- Allow nacl_helper_boo running in :chrome_sandbox_t to send SIGCHLD to chrome_sandbox_nacl_t.
- Dontaudit write access on generic cert files. We don't audit also access check.
- Add support for arptables.
- Add labels and filenametrans rules for ostree repo directories which needs to be writable by subscription-manager. - fix license handling - Add new mozilla_plugin_bind_unreserved_ports boolean to allow mozilla plugin to use tcp/udp unreserved ports. There is a lot of plugins which binds ports without SELinux port type. We want to allow users to use these plugins properly using this boolean. (#1109681)
- Allow smokeping cgi scripts to accept connection on httpd stream socket.
- docker does a getattr on all file systems
- Label all abort-dump pro� x���������������������� X � '8 ���������� �! �$ K ���������������� �! �! �! � ad/write nvme_device_t
- Remove httpd_user_*_content_t domains from user_home_type attribute. This tighten httpd policy and acces to user data will be more strinct, and also fix mutual influente between httpd_enable_homedirs and httpd_read_user_content
- Add interface dev_rw_nvme
- Label all files containing hostname substring in /etc/ created by systemd_hostnamed_t as hostname_etc_t. BZ(1433555) - Label all files containing hostname substring in /etc/ created by systemd_hostnamed_t as hostname_etc_t. BZ(1433555) - Allow vdagent domain to getattr cgroup filesystem
- Allow abrt_dump_oops_t stream connect to sssd_t domain
- Allow cyrus stream connect to gssproxy
- Label /usr/libexec/cockpit-ssh as cockpit_session_exec_t and allow few rules
- Allow colord_t to read systemd hwdb.bin file
- Allow dirsrv_t to create /var/lock/dirsrv labeled as dirsrc_var_lock_t
- Allow certmonger to manage /etc/krb5kdc_conf_t
- Allow kdumpctl to getenforce
- Allow ptp4l wake_alarm capability
- Allow ganesha to chat with unconfined domains via dbus
- Add nmbd_t capability2 block_suspend
- Add domain transition from sosreport_t to iptables_t
- Dontaudit init_t to mounton modules_object_t
- Add interface files_dontaudit_mounton_modules_object
- Allow xdm_t to execute files labeled as xdm_var_lib_t
- Make mtrr_device_t mountpoint.
- Fix path to /usr/lib64/erlang/erts-5.10.4/bin/epmd - Update fwupd policy
- /usr/libexec/udisks2/udisksd should be labeled as devicekit_disk_exec_t
- Update ganesha policy
- Allow chronyd to read adjtime
- Merge pull request #194 from hogarthj/certbot_policy
- get the correct cert_t context on certbot certificates bz#1289778
- Label /dev/ss0 as gpfs_device_t - Allow abrt_t to send mails. - Add radius_use_jit boolean
- Allow nfsd_t domain to create sysctls_rpc_t files
- add the policy required for nextcloud
- Allow can_load_kernmodule to load kernel modules. BZ(1426741)
- Create kernel_create_rpc_sysctls() interface - Remove ganesha from gluster module and create own module for ganesha
- FIx label for /usr/lib/libGLdispatch.so.0.0.0 - Dontaudit xdm_t wake_alarm capability2
- Allow systemd_initctl_t to create and connect unix_dgram sockets
- Allow ifconfig_t to mount/unmount nsfs_t filesystem
- Add interfaces allowing mount/unmount nsfs_t filesystem
- Label /usr/lib/libGLdispatch.so.0.0.0 as textrel_shlib_t BZ(1419944) - Allow syslog client to connect to kernel socket. BZ(1419946) - Allow shiftfs to use xattr SELinux labels
- Fix ssh_server_template by add sshd_t to require section. - Merge pull request #187 from rhatdan/container-selinux
- Allow rhsmcertd domain signull kernel.
- Allow container-selinux to handle all policy for container processes
- Fix label for nagios plugins in nagios file conxtext file
- su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization. Resolves: rhbz#1146987
- Add SELinux support for systemd-initctl daemon
- Add SELinux support for systemd-bootchart
- su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization. Resolves: rhbz#1146987
- Add module_load permission to can_load_kernmodule
- Add module_load permission to class system
- Add the validate_trans access vector to the security class
- Restore connecto permssions for init_t - Allow kdumpgui domain to read nvme device
- Add amanda_tmpfs_t label. BZ(1243752)
- Fix typo in sssd interface file
- Allow sssd_t domain setpgid BZ(1411437)
- Allow ifconfig_t domain read nsfs_t
- Allow ping_t domain to load kernel modules.
- Allow systemd to send user information back to pid1. BZ(1412750)
- rawhide-base: Fix wrong type/attribute flavors in require blocks - Allow libvirt daemon to create /var/chace/libvirt dir.
- Allow systemd using ProtectKernelTunables securit feature. BZ(1392161)
- F26 Wide change: Coredumps enabled by default. Allowing inherits process limits to enable coredumps.BZ(1341829) - After the latest changes in nfsd. We should allow nfsd_t to read raw fixed disk. For more info see: BZ(1403017)
- Tighten security on containe � x������������� �������� X � *'8 xU �R �! �$ n ���������������� �! �! �! � boolea
- Add support for ipset
- Add support for /dev/sclp_line0
- Add modutils_signal_insmod()
- Add files_relabelto_all_mountpoints() interface
- Allow the docker daemon to mounton tty_device_t
- Allow all systemd domains to read /proc/1
- Login programs talking to journald are attempting to net_admin, add dontaudit
- init is not gettar on processes as shutdown time
- Add systemd_hostnamed_manage_config() interface
- Make unconfined_service_t valid in enforcing
- Remove transition for temp dirs created by init_t
- gdm-simple-slave uses use setsockopt
- Add lvm_read_metadata() - Make unconfined_service_t valid in enforcing
- Remove transition for temp dirs created by init_t
- gdm-simple-slave uses use setsockopt
- Treat usermodehelper_t as a sysctl_type
- xdm communicates with geo
- Add lvm_read_metadata()
- Allow rabbitmq_beam to connect to jabber_interserver_port
- Allow logwatch_mail_t to transition to qmail_inject and queueu
- Added new rules to pcp policy
- Allow vmtools_helper_t to change role to system_r
- Allow NM to dbus chat with vmtools - Add labeling for /usr/sbin/amavi
- Colin asked for this program to be treated as cloud-init
- Allow ftp services to manage xferlog_t
- Fix vmtools policy to allow user roles to access vmtools_helper_t
- Allow block_suspend cap2 for ipa-otpd
- Allow certmonger to search home content
- Allow pkcsslotd to read users state
- Allow exim to use pam stack to check passwords
- Add labeling for /usr/sbin/amavi
- Colin asked for this program to be treated as cloud-init
- Allow ftp services to manage xferlog_t
- Fix vmtools policy to allow user roles to access vmtools_helper_t
- Allow block_suspend cap2 for ipa-otpd
- Allow certmonger to search home content
- Allow pkcsslotd to read users state
- Allow exim to use pam stack to check passwords - Add lvm_read_metadata()
- Allow auditadm to search /var/log/audit dir
- Add lvm_read_metadata() interface
- Allow confined users to run vmtools helpers
- Fix userdom_common_user_template()
- Generic systemd unit scripts do write check on /
- Allow init_t to create init_tmp_t in /tmp.This is for temporary content created by generic unit files
- Add additional fixes needed for init_t and setup script running in generic unit files
- Allow general users to create packet_sockets
- added connlcli port
- Add init_manage_transient_unit() interface
- Allow init_t (generic unit files) to manage rpc state date as we had it for initrc_t
- Fix userdomain.te to require passwd class
- devicekit_power sends out a signal to all processes on the message bus when power is going down
- Dontaudit rendom domains listing /proc and hittping system_map_t
- Dontauit leaks of var_t into ifconfig_t
- Allow domains that transition to ssh_t to manipulate its keyring
- Define oracleasm_t as a device node
- Change to handle /root as a symbolic link for os-tree
- Allow sysadm_t to create packet_socket, also move some rules to attributes
- Add label for openvswitch port
- Remove general transition for files/dirs created in /etc/mail which got etc_aliases_t label.
- Allow postfix_local to read .forward in pcp lib files
- Allow pegasus_openlmi_storage_t to read lvm metadata
- Add additional fixes for pegasus_openlmi_storage_t
- Allow bumblebee to manage debugfs
- Make bumblebee as unconfined domain
- Allow snmp to read etc_aliases_t
- Allow lscpu running in pegasus_openlmi_storage_t to read /dev/mem
- Allow pegasus_openlmi_storage_t to read /proc/1/environ
- Dontaudit read gconf files for cupsd_config_t
- make vmtools as unconfined domain
- Add vmtools_helper_t for helper scripts. Allow vmtools shutdonw a host and run ifconfig.
- Allow collectd_t to use a mysql database
- Allow ipa-otpd to perform DNS name resolution
- Added new policy for keepalived
- Allow openlmi-service provider to manage transitient units and allow stream connect to sssd
- Add additional fixes new pscs-lite+polkit support
- Add labeling for /run/krb5kdc
- Change w3c_validator_tmp_t to httpd_w3c_validator_tmp_t in F20
- Allow pcscd to read users proc info
- Dontaudit smbd_t sending o� x���������������������� X � t%8 p ؝ qb �$ a ���������������� qb pb rb � 7d15112fbbfe7fcd72379b3e6ccfea9344933f903835bc33fa05e9a9dcf12f f9b02572bb082538e656b54b4a76dcb879eb59030a65ccb6eedaee9b8e4929c0 ef291a2030d2de3b82ef5db4043579b96a5049f4f800179d2c33902fa5f425cd a7d77acb6ea4349b30085ac5c785e277fb90e63d9a3c160cf88b2bb2b0812ed8 f8aee6e513a9e0d120c21ee80930dc447aab67da8e23ef2685028602f90de734 0d0fd734b22a745ac0c169d9b53a8ad40aa3a66c5b0b0bb469a4ad2c6638600b 87e2c2cea118cfb721d645e6359da981980acc032d64bb2fe3c1a6c42d6f91db 0e96faa207ccc93f93e93c8a0a4309fd69c421bdde8da1cf26c494678e7bbdbb 374656ce4cc128ab8797ab776c22f7a8f2dcf5c9fe8b177993ac7fd73244cca7 22092dda425f39936ea3843b40b40599f1466ba53f56b43992d785886bb70b8e a364df14022a17e37e2a3fd2882163b7e9ef63bd6131f1fe5782ed05f5553f5d f96889e50a3a8eee0a62a386b8be31cf42fe8ee6827c07bcfb6585a4e09c60eb 6b70b97e553e21edbc790b1fca417d16e905b3c5d37c345cc286e22824650db0 3735a4accaf6f15c66baa753261af4bf143b44a2c9a83f67b93b19393f6e4d10 98f417255cdfc6b81d580286155549caef077ea106ba4584438e12ce8db3b381 c21db4a3c03f7efd55e8a6ca2d53f221415d3f2ec4c4644a7a15603e7c637dad 85487485bf6a523f77bd0734324856375bc2b954881c3835998039129bfd355a 7edc29f655825578569ab5dc0e9025a82a4d4f7d4b3b30764bd10d27d76e4c09 45aab4b076e7cddc1d1ba6884f0a8bbac81562d2032a0420840acc185ff4472d 54cd2479b2f70ad072ae6a487eb100cb6ab7fdd94aee02ea0579762f68418471 d3868ae835827c2aab5746572d0b25ecf5964a951cbefe71ea7d9e39bc1c48ce df265338f12bc2460a591672a21d3bde7441c285d85f7075c9f0411706e8dcdd 1a502dad979e2166de0658db827b0f73a8f144fb4fb9e71bde5cd12c2f537eae 9639cc38af64821c17bda2dd2a118ad1f7c346b02a0e0de491e859b57b399034 dc1c49c1d40d3036e438ef106806fe24d3d2b1d468d3ff28cec6f8fad7a2bf13 4e525d9cb8a8220e871750091ccd94722312ebe289d61ac15119930cdfbd0bd4 6c6057abde9a21497a890742cbbdcb63db30c861e5714777811e63a1e72ec2a3 c2259ffc264900b9161d6304f58ef9ab92d1784d38c6bbec804e4a9a59881743 fb859ec41b72e699c0209d1719e86f5633cc192323732e3e412e287ce1a07a5e a9e6ad6c4a9d3661a5414f68c4c64c9a6400bae1f6b06150bd8fd4d78818e152 bf069d0df7b930a6d11c5c295f6dcc16738eb23c733728a88755c9ddbd97a0e6 21fe405f07da0f3275019aac16994a5962964f8dbce677b6e4f9b3e0dce083f0 f02d014a0cee8315f0ff5d0014f1961036460a50957e5e30447a2d4d9815ff7c 26606a4a223636245d3fe6930bfc525c38d26aa973df4e79cafbc3720b65e2dc 9931beadfb97ae94a37027e7d6c20cdc5ed3f540d4cb77fe97bea0d457e92682 6fd7fa2dfcac51281bc074b6430358e89ae6cb60b33bfd49b3e197da6c777661 948904e0d33370f6a8a16a35335b0b0a06fcf68230cd85dc3be56cb47c02716d ee19f77ed0591623618eac29270aea7733a25ffabf5136f40932125eaad94d70 c3c2a011264435832fb285c8db6b8a8733ff53183b723e4db1d0b4a865264ba4 5e05c375e6368dd6ed54464cec8022e44d7e41dbb539f1c1d81c3c058cbfdb08 ea5537caa89ea2d2e1dc2d5fc7707db076c773c9b3b297019703fcb615acd06c b676ed674cb242038d250acd16ec54e18ecf535f3864a75bb900dd94f54aead4 1af4a0ccdb93f6cadbbc5c8482312bb7b95ae615611282d81ad0462e1e3f7df3 6462fad032c8a6a2910e2fd3ca79c21e07866f9516a2cde205a46d534f8b8cb2 958eeba6bfd11db31f1ababf1437993441f4cc2b99ec65b39731aa84d365ef00 e7fe4154f77414b0e89bdf2112fa00e4a72c32f7c1bf95fa9e2e88f4120f40ee 2e3f87a07f22ca3e3ef23079c1aadc8e79b56c4f631fa1eee2dd8f48983e8426 b679872f131bb96134d98f4ec3e9c32ff27a61380cd4b39693fcedf3c80a0ae6 caba30b17997612ff56e975fa70b89610523bcb55cf909f06fd44cb2e9b304fc 2848aa632989aa6042280c4c7f1ba3da49a8996204c01751e8c554d0475d3e0d 92c3cf89d1f059aef63cb1946cc365d8b0666bc6b62a22a1b9cc95351034ee7f 44a84302ed169b351b8b42d7eb7abdb2e379c66d60b5b9b0723a9320ce3a7d29 2203e439824a7b2b8aa61a94c52dab8fd8bb9858a7c1eda2b73ce44b77f0e03f 002c8db6ea7a5aa7e7ddf65a43bc181d047967760f4f873b6f453bebaf8a79b6 5255fe2ac3a5823d56b50dbd2615b4c0c35dac28d0a7186b93df809540995346 b90cf9bb55f654fbd6a1b9b712ac14706847453e88b411ff14a70d5299cd1612 e64b95e11598f8667fcd45199b2c7abae0d82406ecb502cfa1c1f44a36fa8730 76259361f5df40f777964c04c923fdd9a31df791708ec941c1d1d413e2fd7ace 3e51c0a9b9a5612b726d3e6e9bdc23036a72cfb964016545ebfe71426a44f02f c04a019d16e3c0fbda4e603835e2fd3461e2bbd2942e86fb7c2dc229b3d355a4 10fdbc2e73a1a2f629985d7b2dfb37111d6b3d05c0e8ccee332469b0ed4eb044 03054762acca51639cebfe37c75b67030ab7286f2a3398ea5e5ad2dc87b571b8 74ccca159b0319d08a8be45f63ec27d87604ca� x�������������r������� X � �'8 ����������������b" �$ r ���������������� b" a" �18 d�Vusocket
- systemd_systemctl needs sys_admin capability
- Allow cobbler to search dhcp_etc_t directory
- Allow sytemd_tmpfiles_t to delete all directories
- allow sshd to write to all process levels in order to change passwd when running at a level
- Allow updpwd_t to downgrade /etc/passwd file to s0, if it is not running with this range
- Allow apcuspd_t to status and start the power unit file
- Allow udev to manage kdump unit file
- Added new interface modutils_dontaudit_exec_insmod
- Add labeling for /var/lib/servicelog/servicelog.db-journal
- Allow init_t to create tmpfs_t lnk_file
- Add label for ~/.cvsignore
- Allow fprintd_t to send syslog messages
- Add zabbix_var_lib_t for /var/lib/zabbixsrv, also allow zabix to connect to smtp port
- Allow mozilla plugin to chat with policykit, needed for spice
- Allow gssprozy to change user and gid, as well as read user keyrings
- Allow sandbox apps to attempt to set and get capabilties
- Label upgrades directory under /var/www as httpd_sys_rw_content_t, add other filetrans rules to label content correctly
- allow modemmanger to read /dev/urand
- Allow polipo to connect to http_cache_ports
- Allow cron jobs to manage apache var lib content
- Allow yppassword to manage the passwd_file_t
- Allow showall_t to send itself signals
- Allow cobbler to restart dhcpc, dnsmasq and bind services
- Allow rsync_t to manage all non auth files
- Allow certmonger to manage home cert files
- Allow user_mail_domains to write certain files to the /root and ~/ directories
- Allow apcuspd_t to status and start the power unit file
- Allow cgroupdrulesengd to create content in cgoups directories
- Add new access for mythtv
- Allow irc_t to execute shell and bin-t files:
- Allow smbd_t to signull cluster
- Allow sssd to read systemd_login_var_run_t
- Allow gluster daemon to create fifo files in glusterd_brick_t and sock_file in glusterd_var_lib_t
- Add label for /var/spool/cron.aquota.user
- Allow sandbox_x domains to use work with the mozilla plugin semaphore
- Added new policy for speech-dispatcher
- Added dontaudit rule for insmod_exec_t in rasdaemon policy
- Updated rasdaemon policy
- Allow virt_domains to read cert files
- Allow system_mail_t to transition to postfix_postdrop_t
- Clean up mirrormanager policy
- Allow subscription-manager running as sosreport_t to manage rhsmcertd
- Remove ability to do mount/sys_admin by default in virt_sandbox domains
- New rules required to run docker images within libivrt
- Fixed bumblebee_admin() and mip6d_admin()
- Add log support for sensord
- Add label for ~/.cvsignore
- Change mirrormanager to be run by cron
- Add mirrormanager policy
- Additional fixes for docker.te
- Allow cobblerd to read/write undionly.kpxe located in /var/lib/tftpboot
- Add tftp_write_rw_content/tftp_read_rw_content interfaces
- Allow amanda to do backups over UDP - Allow freeipmi_ipmidetectd_t to use freeipmi port
- Update freeipmi_domain_template()
- Allow journalctl running as ABRT to read /run/log/journal
- Allow NM to read dispatcher.d directory
- Update freeipmi policy
- Type transitions with a filename not allowed inside conditionals
- Allow tor to bind to hplip port
- Make new type to texlive files in homedir
- Allow zabbix_agent to transition to dmidecode
- Add r� x��������������a������� X � '8 �������� ��������! �$ v ���������������� �! �! �! � ename transition to interface systemd_filetrans_named_content() that domain will create rfkill dir labeled as systemd_rfkill_var_lib_t instead of init_var_lib_t. rhbz #1290255
- Allow systemd-logind to create .#nologinXXXXXX labeled as systemd_logind_var_run_t in /var/run/systemd/ rhbz#1285019
- Allow systemd_networkd_t to write kmsg, when kernel was started with following params: systemd.debug systemd.log_level=debug systemd.log_target=kmsg rhbz#1311444
- Allow ipsec to read home certs, when connecting to VPN. rhbz#1301319 - Fix macro name from snmp_manage_snmp_var_lib_files to snmp_manage_var_lib_files in cupsd policy.
- Allow hplip driver to write to its MIB index files stored in the /var/lib/net-snmp/mib_indexes. Resolves: rhbz#1291033
- Allow collectd setgid capability Resolves:#1310896
- Allow adcli running as sssd_t to write krb5.keytab file.
- Allow abrt-hook-ccpp to getattr on all executables. BZ(1284304)
- Allow kexec to read kernel module files in /usr/lib/modules.
- Add httpd_log_t for /var/log/graphite-web rhbz#1306981
- Remove redudant rules and fix _admin interface.
- Add SELinux policy for LTTng 2.x central tracing registry session daemon.
- Allow create mongodb unix dgram sockets. rhbz#1306819
- Support for InnoDB Tablespace Encryption.
- Dontaudit leaded file descriptors from firewalld
- Add port for rkt services
- Add support for the default lttng-sessiond port - tcp/5345. This port is used by LTTng 2.x central tracing registry session daemon. - Allow setroubleshoot_fixit_t to use temporary files - Allow abrt_dump_oops_t to getattr filesystem nsfs files. rhbz#1300334
- Allow ulogd_t to create netlink_netfilter sockets. rhbz#1305426
- Create new type fwupd_cert_t Label /etc/pki/(fwupd|fwupd-metadata) dirs as fwupd_cert_t Allow fwupd_t domain to read fwupd_cert_t files|lnk_files rhbz#1303533
- Add interface to dontaudit leaked files from firewalld
- fwupd needs to dbus chat with policykit
- Allow fwupd domain transition to gpg domain. Fwupd signing firmware updates by gpg. rhbz#1303531
- Allow abrt_dump_oops_t to check permissions for a /usr/bin/Xorg. rhbz#1284967
- Allow prelink_cron_system_t domain set resource limits. BZ(1190364)
- Allow pppd_t domain to create sockfiles in /var/run labeled as pppd_var_run_t label. BZ(1302666)
- Fix wrong name for openqa_websockets tcp port.
- Allow run sshd-keygen on second boot if first boot fails after some reason and content is not syncedon the disk. These changes are reflecting this commit in sshd. http://pkgs.fedoraproject.org/cgit/rpms/openssh.git/commit/?id=af94f46861844cbd6ba4162115039bebcc8f78ba rhbz#1299106
- Add interface ssh_getattr_server_keys() interface. rhbz#1299106
- Added Label openqa for tcp port (9526) Added Label openqa-websockets for tcp port (9527) rhbz#1277312
- Add interface fs_getattr_nsfs_files()
- Add interface xserver_exec().
- Revert "Allow all domains some process flags."BZ(1190364) - Allow openvswitch domain capability sys_rawio.
- Revert "Allow NetworkManager create dhcpc pid files. BZ(1229755)"
- Allow openvswitch to manage hugetlfs files and dirs.
- Allow NetworkManager create dhcpc pid files. BZ(1229755)
- Allow apcupsd to read kernel network state. BZ(1282003)
- Label /sys/kernel/debug/tracing filesystem
- Add fs_manage_hugetlbfs_files() interface.
- Add sysnet_filetrans_dhcpc_pid() interface. - Label virtlogd binary as virtd_exec_t. BZ(1291940)
- Allow iptables to read nsfs files. BZ(1296826) - Add fwupd policy for daemon to allow session software to update device firmware
- Label /usr/libexec/ipa/oddjob/org.freeipa.server.conncheck as ipa_helper_exec_t. BZ(1289930)
- Allow systemd services to use PrivateNetwork feature
- Add a type and genfscon for nsfs.
- Fix SELinux context for rsyslog unit file. BZ(1284173) - Allow logrotate to systemctl rsyslog service. BZ(1284173)
- Allow condor_master_t domain capability chown. BZ(1297048)
- Allow chronyd to be dbus bus client. BZ(1297129)
- Allow openvswitch read/write hugetlb filesystem.
- Revert "Allow openvswitch read/write hugetlb filesystem."
- Allow smbcon� x������������� Q������� X � �(8 H��������[������ �$ ���������������� �
���������������xsgbVQE@4/#
���������������ythcWRFA50$ �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
z
u
i
d
X
S
G
B
6
1
%
� � � � � � � � � � � � � � � { v j e Y T H C 7 2 & ! � � � � � � � � � � � � � � � | w k f Z U I D 8 3 ' " �
�
�
�
�
�
�
�
�
�
�
�
�
�
}
x
l
g
[
V
J
E
9
4
(
#
� � � � � � � � � � � � � � ~ y m h \ W K F : 5 ) $ ��������������zni]XLG;6*%���������������{oj^YMH<7+& ���������������|pk_ZNI=8,'
���������������}ql`[OJ>9-( ���������������~rma\PK?:.) ���������������snb]QL@;/ ��d! T� � ݄�n �� � Kv@�Q D� � �� �� � �>T c d\ � Kv@�Q $' � �� �; � �>Tc l� � Kv@tQ 4* � ��& �$ � 4�\�b �o � Kv@GQ T+ � ��� T] � 4�\3 1 � Kv@-Q � � ��� t� � 4�\? �+ � Kv@Q ( � ��� \5 � Sy��b $r � Kv@ , � ��Y �� � r,�b 0b � Kv@� 8 � ��+ � r,nb �\ � Kv@� H- � r,Zb x� � Kv@� | � �� h. � r,Hb - � Kv@� � � ��m �5 � r,:b �( � Kv@� <] � ��@ � � r,+b �4 � Kv@ 8 � ��� �� � r, b �1 � ��e� \� � ��h �� � r,b x0 � ��< <� � r, b �I � �}��P �> � �� �� � r,�a � � �}�nP @ � �� M � r,�a
� X��< H � ��u pr � r,�a �( � ���)P h � ��V Թ � r,�a lm � W���O \� � 9��qa ] � �� d7 � 9��6a �� � W��IO * � ��� � 9��*a � W��*O $8 � ��) �B � 9��a ( � W�� O d0 � ��� \� � 9��a �C � W���N �� � �� �� � �� �� � �� �� � �>T c d\ � Kv@�Q $' � �D� � � ��& �$ � 4�\�b �o � Kv@GQ T+ � �xS�j $2 � ��� t� � 4�\? �+ � Kv@Q ( � ��Y �� � r,�b 0b � Kv@� 8 � Ċ�.j �� � r,Zb x� � Kv@� | � Rܢi �� � ��m �5 � r,:b �( � Kv@� <] � R�di �* � ��� �� � r, b �1 � R�Ei B � ��< <� � r, b �I � �}��P �> � R� i �L � �� M � r,�a
� X��< H � R�h dS � ��V Թ � r,�a lm � W���O \� � R��h � �� d7 � 9��6a �� � W��IO * � R��h ,n � ��) �B � 9��a ( � W�� O d0 � Rܫ �; � ��� HB � 9���` �$ � W���N Ğ � R�a` <� � �� $� � 9���` - � W���N T � �>� � � ��x � � 9���` � � z�3n X( � ��� <_ � 9���` 1 � ��LN �b � YJ�Qh �3 ~ �� � { 9���` � y ��%N �* x YJ��g �P v ��h � s ��N �I p YJЪg �� n �� lH k z��<R � i ���M �f h YJ�jg �� f ��� Dq c �CZ�_ �Y a ��M (" ` YJЕf �> ^ �� �" [ �CZ�_ X% Y ��sM X YJ�)f tu V ��z �* S �CZ�_ �� Q �� M �C P YJ��e B N ��R `( K �CZ�_ �< I ��B �V� H YJВe �� F �� �% C �CZ� �A A ��,B | @ YJ�^e �
> ��� t ; N�� _ �� 9 ���. ā� 8 YJ�<e H6 6 �� d0 3 N��T W 1 ��.. d) 0 �� XA + N�κS �s ) ��- ع ( YJ��d �' & ���O �� ! ��?- � YJ�/d �/ �� P ��rO \7 ��- T� YJ�d �2 ��} `��R �� ��, �� YJЙc �� ��� � `��R 3 ��b, X YJ�ec � ��M h[ `� R �� ��c" � � x�������������x@������� X � �(8 X�������0_�������M �$ n ���������������� �M �M �
C
vTCgbEKtAkXHx/jFDJCYbnJkzrecCSd+a3yQ4Ehp6TCxnywXdseX4WGyNT3E6Ppu
JRIXLKrVwP/5pZxqgBS9EDsQpaqxmkS8iJe9j8Bkzm4mL0K4Y8B5vApIyxRO0i0C
8Eb8UgLSoOwWsZjWpDcYtLgCTNT1CCaOe5lG6qy3HD6Y7LiXinnMgq5uXbfTEKxZ
rUyQ9Jepxe5hk5GJ1mTbQ6vEj0oYOWYWCwLZKOHucRh8BmvYEbhMBGsgBGcMruql
Na+gw1eVIMTknGCdGGwceb3DLNHXGolU3GDTKd8d6lEaXkFx9zXWBicOIDyG72tU
vZMj2RVzmgEhxcw1vKxoJIUOegjpdqBqTJRnM/tnimm4eE65hHhuqRYIngwHWqL0
K+Daxt+J+4l5Xo56AEYc+2i8JA1nGT/nw13KE/7S79wRVaJPzDccI7/mefDKcF3R
EGWG7f9jWqoCB+wvXD+0FpHDcp0TPgDcWTObUs3yBoySbgj8IXL3z2R64wARAQAB
tCJBbG1hTGludXggPHBhY2thZ2VyQGFsbWFsaW51eC5vcmc+iQI+BBMBAgAoBQJf
/YkOAhsBBQkFo5qABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBIj898Ors0
+IsjD/9/F/PIu7kSn4P8Ud9j/iyoO8hH53qXKMimarg920ugt2uUyl6SzaJqV0dK
ACrczvC0VmxrNaJ1jB31TGPpdJZpey5AJbefofu/RgAlxHN6o3QX0Br4bEHahF20
21q2eIjoMrq8eiz8X5D2wfx6CyOA6RZY96MVQ2whXjQHV+hwo65xyMUyjTuFx5Pb
nl7gdYr9EkH3EafdNrpuVurp+Zrgur+973nUrzKq8c2rlDiEQz/ZG+bgasTDYkcz
q6NUPP5OQ5BVpFCkuE9YuziZD+37hxN07P2gyz9NRrfAOZqBXj8er4vqNhpR/lLA
h5QF1erb0mjcMFEhkV8ETN0ceJzL/t829BlQ7MB7LdQ5v9kc5p5cwcsBly54ouI0
l9LjSN95Al0VPoWE8zgjnytecu2UN5+0k12bfcj0zjKdAxEVD3y9Id1MJIze7/PA
6v3LOk+SSs8M0ASmZEnDBTCbDRpXlDDUKEEmMIBRdvpTxjiUnwD2tHwhXR8m6vw6
749i+mdc8fgljTey8sJLKxTabbYNgTHLi9lCMdmPlKU2QJYsIwIBpqF2/eenNyZT
LvlW/aBUU7Li3etUnJeP9ig+V2LuDhyT6TlVPsFKCCruoy7faSjW2/2wlVcasGQp
YqqqqtQJyVDRud6ig7oH3EWSvUySEmywjBp5zfwrMw3jeWkwHbkBjQRf/YnGAQwA
tk5NBR7SCwYwEsmPDUX/SJ98eGHb1nux/cRaX+K2KgX7Yi3hhlFs/InkiiNKs+Au
0N5ZBIXltypguo5jE3MwXQxLr2MfJ74bdDXR7z3BmBB92BMaS+tHNJWroYnqiSQ7
2PXfWRF9PtlChF12NyK6SVrQg58IqJjf5MQ8hodgIk0t21qCvxe/IotktjKHy2Vn
gvKPjtT05qXpAK0CP8N5wtOc4WnFCxvNTI7e1KkYS4dvXHL6V+WvqL3saGIXY5Iy
0jYZW5xMxh691C+HvHQ8/Lof3Enenz3hDJR0X9wvzusxBJWwg/vqRIR8+YYKSHj1
VEFycTabqGLlnPpYpFqDOdqS2gDtdrD6FEsrSpy9pBd98XAzjkn6BW4Rf0PTaJ/z
b3paHsqxEnWbamANs5GYs1Y/1rEIl66jOhZB9Sua22/wfGd3PvfM6nxi825l4coO
bbivRY6U4/WtxQUcK8zdoF97zUlvbNNN0LsluZ0tBF44o5vt7f4aCGXZ8XMVIef1
ABEBAAGJA8QEGAECAA8FAl/9icYCGwIFCQWjmoABqQkQSI/PfDq7NPjA3SAEGQEC
AAYFAl/9icYACgkQUdZkfsIa1upqtQv/R9oLsG3g4Rg2MKDrXYSa94n1CBY5ESDL
1N0mZTWQ5nVdfIWWifnpe72VDBR3Y+r5ootnCHq09DbK+K3q82q2UmGEq968mR96
LKGjWuTS1rY/MCbQbW+jcrnju0T3bCcImggMJoYCzuUnBfIkexObwi/YidqgL92+
nw3NzqeWnq+gu/1Q2ngzhN8Ft4mwOcFr9H0px0476LLvR+7lrSu2HqGeHk+fUA4c
ZNwvsgGYgCAJhz8fPwKCoLrxsE82bkZ86JgUJEcMu0ki4UFo3rg6NmkDwnrYO61l
MOrBCxt/lPJz7d8L9oCLu9pJSBsKH9RNqO10NAoEMppKwnQSz6RQFRJj7WNW+OEs
mjZt7sNrTr0Y+udx58Sqd0C5k7lGUtYWKKGpLfdz0RLnBTTFmjnB3Y2uyOJFc4FS
g251yjk9ds1AFjdRThQ2kFpZzQAo5ei6zMBaZATg0E2uk4HAfpQ58CPGj4f1k3py
1N2hYUA+qksZIVxjFfwYr5LCv4tMZumZl6UP/je7EHh5IGkB1+Bpeyj3dudZblvM
lE6kdGridxInbiJvgqBSdprIksR8wm1Vy/Z1/lHEM6QnUODGyRAbjQHL3kPKloPj
lKr8TNAELbmVTZjBRJowsGw27rhYAaji/qEet/0ALfu2l3QuOQ38dyuPpxlDSTLY
WnajVIgvSJUU3Yl38Lp3UTuHdtdiNWgyHkLOA/11GK14RSWYsjZAamstlSpl24Op
yKLN5z+q4tNAs+tfQrWNRi3SMG7UDroxztJVkHGvuJ2DT/Q6tANigPzipLzSgOIO
8Wa2aQmqtQ4V0eB2S4DxcMckHti3+4fbrzBzeN/PFaIVLwUtdsUdBs+TtSZFdN9e
i0oLUChIYKDvVBGqgmIor6YgenNSSZni3rj+RRA3gQom7jyVrQPgUv7lsv/MLCmg
Ogpibxs3+SDbbZ6tP0D8uxdRnB4NVeENewlqw/ImacgjLtjBHaq+BebjWErIAkdX
VnjWoLdZoV3B4ComKsjFNf7sfbzV/T2Xpg/r/u1WkiSjvD0mkSZ+3seDjd6oL20s
p7jGLnSGZqGsUksJym0tWRvuyspgTELZlcjuMfHKuKmYudYFi+Y48+YsdJ7UetNT
kAIBinjtZwEEAP4GumNNy7f4l4tt1CBy1EgoYtYCcJC5SGyhWMee3L3hLhHe7Iwd
72EHtteVBoVn0eg6
=rEWJ
-----END PGP PUBLIC KEY BLOCK-----
_��localhost pubkey AlmaLinux <packager@almalinux.org> Public Keys (none) gpg(AlmaLinux <packager@almalinux.org>) gpg(3abb34f8) gpg(c21ad6ea) 4.14.3 4:488fcf7c3abb34f8-5ffd890e 4:488fcf7c3abb34f8-5ffd890e 4:51d6647ec21ad6ea-5ffd89c6 ? ���� 7249db0c399640f27958cf967d3b25568bf71a76 d�W�d�W�ic options
- editor: really fix crash when changing system connections (rh #603566) - core: read nm-system-settings.conf before NetworkManager.conf (rh #606160)
- core: fix editing system DSL connections when using keyfile plugin
- core: work around inconsistent proprietary driver associated AP reporting
- core: ensure empty VPN secrets are not used (rh #587784)
- core: don't request WiFi scans when connection is locked to a specific BSSID
- cli: show IPv6 settings and configuration
- applet: update� x��������������/������� X � '8 ���������� �! �$ G ���������������� �! �! �! � ache files
- Allow systemd to exec fprintd BZ(1491808)
- Allow systemd to mounton fprintd lib dir - Allow svirt_t read userdomain state - Allow mozilla_plugins_t domain mmap mozilla_plugin_tmpfs_t files
- Allow automount domain to manage mount pid files
- Allow stunnel_t domain setsched
- Add keepalived domain setpgid capability
- Merge pull request #24 from teg/rawhide
- Merge pull request #28 from lslebodn/revert_1e8403055
- Allow sysctl_irq_t assciate with proc_t
- Enable cgourp sec labeling
- Allow sshd_t domain to send signull to xdm_t processes - Allow passwd_t domain mmap /etc/shadow and /etc/passwd
- Allow pulseaudio_t domain to map user tmp files
- Allow mozilla plugin to mmap mozilla tmpfs files - Add new bunch of map rules
- Merge pull request #25 from NetworkManager/nm-ovs
- Make working webadm_t userdomain
- Allow redis domain to execute shell scripts.
- Allow system_cronjob_t to create redhat-access-insights.log with var_log_t
- Add couple capabilities to keepalived domain and allow get attributes of all domains
- Allow dmidecode read rhsmcertd lock files
- Add new interface rhsmcertd_rw_lock_files()
- Add new bunch of map rules
- Merge pull request #199 from mscherer/add_conntrackd
- Add support labeling for vmci and vsock device
- Add userdom_dontaudit_manage_admin_files() interface - Allow domains reading raw memory also use mmap. - Add rules fixing installing ipa-server-install with SELinux in Enforcing. BZ(1488404)
- Fix denials during ipa-server-install process on F27+
- Allow httpd_t to mmap cert_t
- Add few rules to make tlp_t domain working in enforcing mode
- Allow cloud_init_t to dbus chat with systemd_timedated_t
- Allow logrotate_t to write to kmsg
- Add capability kill to rhsmcertd_t
- Allow winbind to manage smbd_tmp_t files
- Allow groupadd_t domain to dbus chat with systemd.BZ(1488404)
- Add interface miscfiles_map_generic_certs() - Allow abrt_dump_oops_t to read sssd_public_t files
- Allow cockpit_ws_t to mmap usr_t files
- Allow systemd to read/write dri devices. - Add couple rules related to map permissions
- Allow ddclient use nsswitch BZ(1456241)
- Allow thumb_t domain getattr fixed_disk device. BZ(1379137)
- Add interface dbus_manage_session_tmp_dirs()
- Dontaudit useradd_t sys_ptrace BZ(1480121)
- Allow ipsec_t can exec ipsec_exec_t
- Allow systemd_logind_t to mamange session_dbusd_tmp_t dirs - Allow cupsd_t to execute ld_so_cache
- Add cgroup_seclabel policycap.
- Allow xdm_t to read systemd hwdb
- Add new interface systemd_hwdb_mmap_config()
- Allow auditd_t domain to mmap conf files labeled as auditd_etc_t BZ(1485050) - Allow couple map rules - Make confined users working
- Allow ipmievd_t domain to load kernel modules
- Allow logrotate to reload transient systemd unit - Allow postgrey to execute bin_t files and add postgrey into nsswitch_domain
- Allow nscd_t domain to search network sysctls
- Allow iscsid_t domain to read mount pid files
- Allow ksmtuned_t domain manage sysfs_t files/dirs
- Allow keepalived_t domain domtrans into iptables_t
- Allow rshd_t domain reads net sysctls
- Allow systemd to create syslog netlink audit socket
- Allow ifconfig_t domain unmount fs_t
- Label /dev/gpiochip* devices as gpio_device_t - Allow dirsrv_t domain use mmap on files labeled as dirsrv_var_run_t BZ(1483170)
- Allow just map permission insead of using mmap_file_pattern because mmap_files_pattern allows also executing objects.
- Label /var/run/agetty.reload as getty_var_run_t
- Add missing filecontext for sln binary
- Allow systemd to read/write to event_device_t BZ(1471401) - Allow sssd_t domain to map sssd_var_lib_t files
- allow map permission where needed
- contrib: allow map permission where needed
- Allow syslogd_t to map syslogd_var_run_t files
- allow map permission where needed - Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
- Label /usr/libexec/sudo/sesh as shell_exec_t - refpolicy: Infiniband pkeys and endport - Allow osad make executable an anonymous mapping or private file mapping that is writable BZ(1425524)
- After fix in ker� x�������������h ������� X � �&8 C � x! �$ h ���������������� x! w! y! � f933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf efeb6efb1f3c4e8bf8950dde2e63340bfaa2ab7d3cf2a9a3003b352746ad45d8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bbe93e905c67ed35192c51d6526973044e1958d38bf848eaf5edc2c8fe6b70b2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 956031f3b222d6dc59b5274bbeb3ae272d63d893e8ab4c9ab23f8816201e9b20 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 000aad5dd07344e529830a590fc16677d18cca67fbd4fb68362f18f3a5e19794 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6582f60813db6326e48b62f1e136445d652e6aaf33e8d2f5a2f14edb678f8aaf 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d1cb4e6c1d7ea5ff107ca4bed9d5e58044be5b0542dc1d6c8072668786efa998 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e5fff08805f2192507cddaac65482aaeacea7034c506e8c7953e7ca37baa2825 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 71ce0ee63436b36a7cb8cb02236c56e97626ac79963eeeebb00d4ee5be242e41 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 03be2bfe2b725fe14a99bd522a271274ce7eba25c8b77eb3b8e64476290b9036 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ed1d53cbde51bfd88ea84ac7ae88cca263b3e49e48804cfdf456c1a83e0534cc 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7bffd31464eb1b6d10a837729aa12826ed13027c86e853f4af5fc9e70861a286 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d67bf62e85fb14593f6b96ce4e359fd3bdc2e860cdb34f3c74068df48ae145d8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a2109b32b362211347f12f91e62f5b4777db93597e46924b211f56df7e82bbd4 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6294a7c92167a9694afb51a937b0d603b0e3c8eaef14c44e7c13435a33c55e03 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 194eb6ea3043606bdf0fd60a1b32dacd5839e0a29fc7096d2bce7c35257a1234 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ad05766416c4d4be00d789d422ae92f0adff0a82b82880b2f2792fc7befb514a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7acf817d06bba607c38de80f189392fef264b8b55b53fdb8f7f8e23a8abe8fc8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d89aacaf4cd81ee7682a9c0d0bfca3664b638df7b4c8fc2f8c9423eb503e0016 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 19d70c1f68c90594d3072c82f4cc8e02ac8cf6b86e316b6c13834203a2a98060 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d3bf4a1d41677dd6e81924dc6cc2d6671f6814a9200d946f3635f0dd6f36e6ce 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bbb7361fdeee7524c3ec4483cc926cd6cfb32046d2c51970ed438c721a5b0dfa 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d69cac6656ba6288c502e8e35a19af398d9a210b1127e2b6f7405683873d95f9 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2df7c6c4b3d101b750c50c116ec161a175b87c035e416fc2aa8ee8e2efd005a2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ff4a5523f05dfa73748d7de8360ce5854c7757880190358269c08702fb2e3356 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4a564695f4c615ba41ea35a6c065ec7701d8671844e03fa1c9d94efd0dec754e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 158137a6f72bf68065c7e2189ab9c17c57aa8b63b0d68ec4d822c75d957896b2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ceb43d1ea6f8ff22f49868f022d52390e15eb415914b4b7940495fd74261b11e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 899d18c062d7dd26c086304135c8323fca831c98cc0c7d0dd606cd4d6dff7b9b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 76567b861cec3ede5851e469ce5a5375bb563afaeb5161c9f74d7f8494c4bcb2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 53e3592753b8a542d685a4aaeac3aa3691dd43185c2e8b82029fd41dac8cc8e3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bc6ae30ddb672db29bc2b5d84a71804cdf5d5a56fa263c6d7fc8585075fde203 9a2e646ef933bedfa� x��������������������� X � �&8 ���������l �! �$ & ���������������� �! �! �! � y file context
Resolves: rhbz#2111916 - Update samba-dcerpcd policy for kerberos usage 2
Resolves: rhbz#2096825 - Allow domain read usermodehelper state information
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls
Resolves: rhbz#2083504
- Allow samba-dcerpcd work with sssd
Resolves: rhbz#2096825
- Allow winbind_rpcd_t connect to self over a unix_stream_socket
Resolves: rhbz#2096825
- Update samba-dcerpcd policy for kerberos usage
Resolves: rhbz#2096825
- Allow keepalived read the contents of the sysfs filesystem
Resolves: rhbz#2098189
- Update policy for samba-dcerpcd
Resolves: rhbz#2083504
- Remove all kernel_read_usermodehelper_state() interface calls 2/2
Resolves: rhbz#2083504
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2091117 - Allow transition to insights_client named content
Resolves: rhbz#2091117
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2091117 - Add the init_status_config_transient_files() interface
Resolves: rhbz#2091117
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2091117
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2091117
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2091117
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2091117
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2091117
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2091117
- Change space indentation to tab in insights-client
Resolves: rhbz#2091117
- Use socket permissions sets in insights-client
Resolves: rhbz#2091117
- Update policy for insights-client to run additional commands
Resolves: rhbz#2091117
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2091117
- Add rpm setattr db files macro
Resolves: rhbz#2091117
- Fix insights client
Resolves: rhbz#2091117
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2091117 - Update logging_create_generic_logs() to use create_files_pattern()
Resolves: rhbz#2081907
- Add the auth_read_passwd_file() interface
Resolves: rhbz#2083504
- Allow auditd_t noatsecure for a transition to audisp_remote_t
Resolves: rhbz#2081907
- Add support for samba-dcerpcd
Resolves: rhbz#2083504
- Allow rhsmcertd create generic log files
Resolves: rhbz#1852086
- Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
Resolves: rhbz#2090800 - Allow ifconfig_t domain to manage vmware logs
Resolves: rhbz#1721943
- Allow insights-client manage gpg admin home content
Resolves: rhbz#2060834
- Add the gpg_manage_admin_home_content() interface
Resolves: rhbz#2060834
- Label /var/cache/insights with insights_client_cache_t
Resolves: rhbz#2063195
- Allow insights-client search gconf homedir
Resolves: rhbz#2087069
- Allow insights-client create and use unix_dgram_socket
Resolves: rhbz#2087069
- Label more vdsm utils with virtd_exec_t
Resolves: rhbz#2063871
- Label /usr/libexec/vdsm/supervdsmd and vdsmd with virtd_exec_t
Resolves: rhbz#2063871
- Allow sblim-gatherd the kill capability
Resolves: rhbz#2082677
- Allow privoxy execmem
Resolves: rhbz#2083940 - Allow sysadm user execute init scripts with a transition
Resolves: rhbz#2039662
- Change invalid type redisd_t to redis_t in redis_stream_connect()
Resolves: rhbz#1897517
- Allow php-fpm write access to /var/run/redis/redis.sock
Resolves: rhbz#1897517
- Allow sssd read systemd-resolved runtime directory
Resolves: rhbz#2060721
- Allow postfix stream connect to cyrus through runtime socket
Resolves: rhbz#2066005
- Allow insights-client create_socket_perms for tcp/udp sockets
Resolves: rhbz#2073395
- Allow insights-client read rhnsd config files
Resolves: rhbz#2073395
- Allow sblim-sfcbd connect to sblim-reposd stream
Resolves: rhbz#2075810
- Allow rngd drop privile� x�������������X�������� X � �&8 ��������p�������! �$ ���������������� �! �! �! � � x�������������������� X � F'8 ����������������" �$
���������������� " " " � he kernel to load a module
- Allow syslogd_t to read the network state information
- Allow xdm_dbusd_t connect to the system DBUS
- Add support for 7389/tcp port
- Allow domains to read/write all inherited sockets
- Allow staff_t to read kmsg
- Add awstats_purge_apache_log boolean
- Allow ksysguardproces to read /.config/Trolltech.conf
- Allow passenger to create and append puppet log files
- Add puppet_append_log and puppet_create_log interfaces
- Add puppet_manage_log() interface
- Allow tomcat domain to search tomcat_var_lib_t
- Allow pki_tomcat_t to connect to pki_ca ports
- Allow pegasus_t to have net_admin capability
- Allow pegasus_t to write /sys/class/net/<interface>/flags
- Allow mailserver_delivery to manage mail_home_rw_t lnk_files
- Allow fetchmail to create log files
- Allow gnomeclock to manage home config in .kde
- Allow bittlebee to read kernel sysctls
- Allow logrotate to list /root - Fix userhelper_console_role_template()
- Allow enabling Network Access Point service using blueman
- Make vmware_host_t as unconfined domain
- Allow authenticate users in webaccess via squid, using mysql as backend
- Allow gathers to get various metrics on mounted file systems
- Allow firewalld to read /etc/hosts
- Fix cron_admin_role() to make sysadm cronjobs running in the sysadm_t instead of cronjob_t
- Allow kdumpgui to read/write to zipl.conf
- Commands needed to get mock to build from staff_t in enforcing mode
- Allow mdadm_t to manage cgroup files
- Allow all daemons and systemprocesses to use inherited initrc_tmp_t files
- dontaudit ifconfig_t looking at fifo_files that are leaked to it
- Add lableing for Quest Authentication System - Fix filetrans interface definitions
- Dontaudit xdm_t to getattr on BOINC lib files
- Add systemd_reload_all_services() interface
- Dontaudit write access on /var/lib/net-snmp/mib_indexes
- Only stop mcsuntrustedproc from relableing files
- Allow accountsd to dbus chat with gdm
- Allow realmd to getattr on all fs
- Allow logrotate to reload all services
- Add systemd unit file for radiusd
- Allow winbind to create samba pid dir
- Add labeling for /var/nmbd/unexpected
- Allow chrome and mozilla plugin to connect to msnp ports - Fix storage_rw_inherited_fixed_disk_dev() to cover also blk_file
- Dontaudit setfiles reading /dev/random
- On initial boot gnomeclock is going to need to be set buy gdm
- Fix tftp_read_content() interface
- Random apps looking at kernel file systems
- Testing virt with lxc requiers additional access for virsh_t
- New allow rules requied for latest libvirt, libvirt talks directly to journald,lxc setup tool needs compromize_kernel,and we need ipc_lock in the container
- Allow MPD to read /dev/radnom
- Allow sandbox_web_type to read logind files which needs to read pulseaudio
- Allow mozilla plugins to read /dev/hpet
- Add labeling for /var/lib/zarafa-webap
- Allow BOINC client to use an HTTP proxy for all connections
- Allow rhsmertd to domain transition to dmidecod
- Allow setroubleshootd to send D-Bus msg to ABRT - Define usbtty_device_t as a term_tty
- Allow svnserve to accept a connection
- Allow xend manage default virt_image_t type
- Allow prelink_cron_system_t to overide user componant when executing cp
- Add labeling for z-push
- Gnomeclock sets the realtime clock
- Openshift seems to be storing apache logs in /var/lib/openshift/.log/httpd
- Allow lxc domains to use /dev/random and /dev/urandom - Add port defintion for tcp/9000
- Fix labeling for /usr/share/cluster/checkquorum to label also checkquorum.wdmd
- Add rules and labeling for $HOME/cache/\.gstreamer-.* directory
- Add support for CIM provider openlmi-networking which uses NetworkManager dbus API
- Allow shorewall_t to create netlink_socket
- Allow krb5admind to block suspend
- Fix labels on /var/run/dlm_controld /var/log/dlm_controld
- Allow krb5kdc to block suspend
- gnomessytemmm_t needs to read /etc/passwd
- Allow cgred to read all sysctls - Allow all domains to read /proc/sys/vm/overcommit_memory
- Make proc_numa_t an MLS Trusted Object
- Add /proc/numactl support� x�������������8������� X � ]'8 ��
(�����1" �$ ! ���������������� 1" 0" 2" � ard_ports boolean by default
- Allow sysadmin to dbus chat with rpm
- Add interface for rw_tpm_dev
- Allow cron to execute bin
- fsadm needs to write sysfs
- Dontaudit consoletype reading /var/run/pm-utils
- Lots of new privs fro mozilla_plugin_t running java app, make mozilla_plugin
- certmonger needs to manage dirsrv data
- /var/run/pm-utils should be labeled as devicekit_var_run_t - fixes to allow /var/run and /var/lock as tmpfs
- Allow chrome sandbox to connect to web ports
- Allow dovecot to listem on lmtp and sieve ports
- Allov ddclient to search sysctl_net_t
- Transition back to original domain if you execute the shell - Remove duplicate declaration - Update to upstream
- Cleanup for sandbox
- Add attribute to be able to select sandbox types - Allow ddclient to fix file mode bits of ddclient conf file
- init leaks file descriptors to daemons
- Add labels for /etc/lirc/ and
- Allow amavis_t to exec shell
- Add label for gssd_tmp_t for /var/tmp/nfs_0 - Put back in lircd_etc_t so policy will install - Turn on allow_postfix_local_write_mail_spool
- Allow initrc_t to transition to shutdown_t
- Allow logwatch and cron to mls_read_to_clearance for MLS boxes
- Allow wm to send signull to all applications and receive them from users
- lircd patch from field
- Login programs have to read /etc/samba
- New programs under /lib/systemd
- Abrt needs to read config files - Update to upstream
- Dontaudit leaked sockets from userdomains to user domains
- Fixes for mcelog to handle scripts
- Apply patch from Ruben Kerkhof
- Allow syslog to search spool dirs - Allow nagios plugins to read usr files
- Allow mysqld-safe to send system log messages
- Fixes fpr ddclient policy
- Fix sasl_admin interface
- Allow apache to search zarafa config
- Allow munin plugins to search /var/lib directory
- Allow gpsd to read sysfs_t
- Fix labels on /etc/mcelog/triggers to bin_t - Remove saslauthd_tmp_t and transition tmp files to krb5_host_rcache_t
- Allow saslauthd_t to create krb5_host_rcache_t files in /tmp
- Fix xserver interface
- Fix definition of /var/run/lxdm - Turn on mediawiki policy
- kdump leaks kdump_etc_t to ifconfig, add dontaudit
- uux needs to transition to uucpd_t
- More init fixes relabels man,faillog
- Remove maxima defs in libraries.fc
- insmod needs to be able to create tmpfs_t files
- ping needs setcap - Allow groupd transition to fenced domain when executes fence_node
- Fixes for rchs policy
- Allow mpd to be able to read samba/nfs files - Fix up corecommands.fc to match upstream
- Make sure /lib/systemd/* is labeled init_exec_t
- mount wants to setattr on all mountpoints
- dovecot auth wants to read dovecot etc files
- nscd daemon looks at the exe file of the comunicating daemon
- openvpn wants to read utmp file
- postfix apps now set sys_nice and lower limits
- remote_login (telnetd/login) wants to use telnetd_devpts_t and user_devpts_t to work correctly
- Also resolves nsswitch
- Fix labels on /etc/hosts.*
- Cleanup to make upsteam patch work
- allow abrt to read etc_runtime_t - Add conflicts for dirsrv package - Update to upstream
- Add vlock policy - Fix sandbox to work on nfs homedirs
- Allow cdrecord to setrlimit
- Allow mozilla_plugin to read xauth
- Change label on systemd-logger to syslogd_exec_t
- Install dirsrv policy from dirsrv package - Add virt_home_t, allow init to setattr on xserver_tmp_t and relabel it
- Udev needs to stream connect to init and kernel
- Add xdm_exec_bootloader boolean, which allows xdm to execute /sbin/grub and read files in /boot directory - Allow NetworkManager to read openvpn_etc_t
- Dontaudit hplip to write of /usr dirs
- Allow system_mail_t to create /root/dead.letter as mail_home_t
- Add vdagent policy for spice agent daemon - Dontaudit sandbox sending sigkill to all user domains
- Add policy for rssh_chroot_helper
- Add missing flask definitions
- Allow udev to relabelto removable_t
- Fix label on /var/log/wicd.log
- Transition to initrc_t from init when executing bin_t
- Add audit_access permissions to file
- Make removable_t a device_node
- Fix label on /� x��������������������� X � y'8 ([ H� M" �$ ] ���������������� M" L" N" � ome cil hll lang_ext gpg cil hll lang_ext gpm cil hll lang_ext gpsd cil hll lang_ext gssproxy cil hll lang_ext guest cil hll lang_ext hddtemp cil hll lang_ext hostapd cil hll lang_ext hostname cil hll lang_ext hsqldb cil hll lang_ext hwloc cil hll lang_ext hypervkvp cil hll lang_ext ibacm cil hll lang_ext icecast cil hll lang_ext inetd cil hll lang_ext init cil hll lang_ext inn cil hll lang_ext insights_client cil hll lang_ext iodine cil hll lang_ext iotop cil hll lang_ext ipmievd cil hll lang_ext ipsec cil hll lang_ext iptables cil hll lang_ext irc cil hll lang_ext irqbalance cil hll lang_ext iscsi cil hll lang_ext isns cil hll lang_ext jabber cil hll lang_ext jetty cil hll lang_ext jockey cil hll lang_ext journalctl cil hll lang_ext kdbus cil hll lang_ext kdump cil hll lang_ext kdumpgui cil hll lang_ext keepalived cil hll lang_ext kerberos cil hll lang_ext keyboardd cil hll lang_ext keystone cil hll lang_ext kismet cil hll lang_ext kmscon cil hll lang_ext kpatch cil hll lang_ext ksmtuned cil hll lang_ext ktalk cil hll lang_ext l2tp cil hll lang_ext ldap cil hll lang_ext libraries cil hll lang_ext likewise cil hll lang_ext linuxptp cil hll lang_ext lircd cil hll lang_ext livecd cil hll lang_ext lldpad cil hll lang_ext loadkeys cil hll lang_ext locallogin cil hll lang_ext lockdev cil hll lang_ext logadm cil hll lang_ext logging cil hll lang_ext logrotate cil hll lang_ext logwatch cil hll lang_ext lpd cil hll lang_ext lsm cil hll lang_ext lttng-tools cil hll lang_ext lvm cil hll lang_ext mailman cil hll lang_ext mailscanner cil hll lang_ext man2html cil hll lang_ext mandb cil hll lang_ext mcelog cil hll lang_ext mediawiki cil hll lang_ext memcached cil hll lang_ext milter cil hll lang_ext minidlna cil hll lang_ext minissdpd cil hll lang_ext mip6d cil hll lang_ext mirrormanager cil hll lang_ext miscfiles cil hll lang_ext mock cil hll lang_ext modemmanager cil hll lang_ext modutils cil hll lang_ext mojomojo cil hll lang_ext mon_statd cil hll lang_ext mongodb cil hll lang_ext motion cil hll lang_ext mount cil hll lang_ext mozilla cil hll lang_ext mpd cil hll lang_ext mplayer cil hll lang_ext mrtg cil hll lang_ext mta cil hll lang_ext munin cil hll lang_ext mysql cil hll lang_ext mythtv cil hll lang_ext naemon cil hll lang_ext nagios cil hll lang_ext namespace cil hll lang_ext ncftool cil hll lang_ext netlabel cil hll lang_ext netutils cil hll lang_ext networkmanager cil hll lang_ext ninfod cil hll lang_ext nis cil hll lang_ext nova cil hll lang_ext nscd cil hll lang_ext nsd cil hll lang_ext nslcd cil hll lang_ext ntop cil hll lang_ext ntp cil hll lang_ext numad cil hll lang_ext nut cil hll lang_ext nx cil hll lang_ext obex cil hll lang_ext oddjob cil hll lang_ext opafm cil hll lang_ext openct cil hll lang_ext opendnssec cil hll lang_ext openfortivpn cil hll lang_ext openhpid cil hll lang_ext openshift openshift-origin cil hll lang_ext cil hll lang_ext opensm cil hll lang_ext openvpn cil hll lang_ext openvswitch cil hll lang_ext openwsman cil hll lang_ext oracleasm cil hll lang_ext osad cil hll lang_ext pads cil hll lang_ext passenger cil hll lang_ext pcmcia cil hll lang_ext pcp cil hll lang_ext pcscd cil hll lang_ext pdns cil hll lang_ext pegasus cil hll lang_ext permissivedomains cil lang_ext pesign cil hll lang_ext pingd cil hll lang_ext piranha cil hll lang_ext pkcs cil hll lang_ext pkcs11proxyd cil hll lang_ext pki cil hll lang_ext plymouthd cil hll lang_ext podsleuth cil hll lang_ext policykit cil hll lang_ext polipo cil hll lang_ext portmap cil hll lang_ext portreserve cil hll lang_ext postfix cil hll lang_ext postgresql cil hll lang_ext postgrey cil hll lang_ext ppp cil hll lang_ext prelink cil hll lang_ext prelude cil hll lang_ext privoxy cil hll lang_ext procmail cil hll lang_ext prosody cil hll lang_ext psad cil hll lang_ext ptchown cil hll lang_ext publicfile cil hll lang_ext pulseaudio cil hll lang_ext puppet cil hll lang_ext pwauth cil hll lang_ext qmail cil hll lang_ext qpid cil hll lang_ext quantum cil hll lang_ext quota cil hll lang_ext rabbitmq cil hll lang_ext radius cil hll lang_e� x�������������(�������� X � �'8 �������H������[" �$ K ���������������� [" Z" \" � ed/active/modules/100/xguest/ /var/lib/selinux/targeted/active/modules/100/xserver/ /var/lib/selinux/targeted/active/modules/100/zabbix/ /var/lib/selinux/targeted/active/modules/100/zarafa/ /var/lib/selinux/targeted/active/modules/100/zebra/ /var/lib/selinux/targeted/active/modules/100/zoneminder/ /var/lib/selinux/targeted/active/modules/100/zosremote/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection cpio xz 2 noarch-redhat-linux-gnu � x���������������������� X � �'8 H � �Q �$ G ���������������� �Q �Q � R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R #R R R R R R R R &R 'R !R (R $R R R %R R R R "R R R R R R .R R R #R R R R R R R R &R 'R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R R &R 'R !R (R $R R R %R R R R "R R R R R R .R R R #R R R R R R R R &R 'R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R R &R 'R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R !R (R $R R R %R R R R "R R R R R R .R R R R R !R (R $R R R %R R R R "R R R R R R .utf-8 f90b9f05c35a71e5688a2bddda04ce19dba3f321703eeb411c25b7a3f84cd6fb ? ���� #V<��Y���5S��3ө��m -!����/��������K�~^��� info@plesk.com
����K�~�� ���b��� �(����a� �m2��S�6,M�hc�a8p\�%W�m -!����/��������K�~^��� info@plesk.com
����K�~o� �
�/h��=.8R*I��v��� �qs� ϐ�u����� ��y35be532ff4f4d9f1f7c4d613cf491a23e9acacf4 cb06bba1bd24b80c14027bbfe4f5f70598ddf1cf59f44c3f7f8f697251ae588a g�T� 쥠/ g�T�ect.org> - 49.1.1-5 Fedora Release Engineering <rel-eng@lists.fedoraproject.org>� x��������������������� X � 5'8 : H������� " �$ ���������������� " "
" � erited lock files in ifconfig o dhcpc_t - Also sock_file trans rule is needed in lsm
- Fix labeling for fetchmail pid files/dirs
- Add additional fixes for abrt-upload-watch
- Fix polipo.te
- Fix transition rules in asterisk policy
- Add fowner capability to networkmanager policy
- Allow polipo to connect to tor ports
- Cleanup lsmd.if
- Cleanup openhpid policy
- Fix kdump_read_crash() interface
- Make more domains as init domain
- Fix cupsd.te
- Fix requires in rpm_rw_script_inherited_pipes
- Fix interfaces in lsm.if
- Allow munin service plugins to manage own tmpfs files/dirs
- Allow virtd_t also relabel unix stream sockets for virt_image_type
- Make ktalk as init domain
- Fix to define ktalkd_unit_file_t correctly
- Fix ktalk.fc
- Add systemd support for talk-server
- Allow glusterd to create sock_file in /run
- Allow xdm_t to delete gkeyringd_tmp_t files on logout
- Add fixes for hypervkvp policy
- Add logwatch_can_sendmail boolean
- Allow mysqld_safe_t to handle also symlinks in /var/log/mariadb
- Allow xdm_t to delete gkeyringd_tmp_t files on logout - Add selinux-policy-sandbox pkg 0
- Allow rhsmcertd to read init state
- Allow fsetid for pkcsslotd
- Fix labeling for /usr/lib/systemd/system/pkcsslotd.service
- Allow fetchmail to create own pid with correct labeling
- Fix rhcs_domain_template()
- Allow roles which can run mock to read mock lib files to view results
- Allow rpcbind to use nsswitch
- Fix lsm.if summary
- Fix collectd_t can read /etc/passwd file
- Label systemd unit files under dracut correctly
- Add support for pam_mount to mount user's encrypted home When a user logs in and logs out using ssh
- Add support for .Xauthority-n
- Label umount.crypt as lvm_exec_t
- Allow syslogd to search psad lib files
- Allow ssh_t to use /dev/ptmx
- Make sure /run/pluto dir is created with correct labeling
- Allow syslog to run shell and bin_t commands
- Allow ip to relabel tun_sockets
- Allow mount to create directories in files under /run
- Allow processes to use inherited fifo files - Add policy for lsmd
- Add support for /var/log/mariadb dir and allow mysqld_safe to list this directory
- Update condor_master rules to allow read system state info and allow logging
- Add labeling for /etc/condor and allow condor domain to write it (bug)
- Allow condor domains to manage own logs
- Allow glusterd to read domains state
- Fix initial hypervkvp policy
- Add policy for hypervkvpd
- Fix redis.if summary - Allow boinc to connect to @/tmp/.X11-unix/X0
- Allow beam.smp to connect to tcp/5984
- Allow named to manage own log files
- Add label for /usr/libexec/dcc/start-dccifd and domtrans to dccifd_t
- Add virt_transition_userdomain boolean decl
- Allow httpd_t to sendto unix_dgram sockets on its children
- Allow nova domains to execute ifconfig
- bluetooth wants to create fifo_files in /tmp
- exim needs to be able to manage mailman data
- Allow sysstat to getattr on all file systems
- Looks like bluetoothd has moved
- Allow collectd to send ping packets
- Allow svirt_lxc domains to getpgid
- Remove virt-sandbox-service labeling as virsh_exec_t, since it no longer does virsh_t stuff
- Allow frpintd_t to read /dev/urandom
- Allow asterisk_t to create sock_file in /var/run
- Allow usbmuxd to use netlink_kobject
- sosreport needs to getattr on lots of devices, and needs access to netlink_kobject_uevent_socket
- More cleanup of svirt_lxc policy
- virtd_lxc_t now talks to dbus
- Dontaudit leaked ptmx_t
- Allow processes to use inherited fifo files
- Allow openvpn_t to connect to squid ports
- Allow prelink_cron_system_t to ask systemd to reloaddd miscfiles_dontaudit_access_check_cert()
- Allow ssh_t to use /dev/ptmx
- Make sure /run/pluto dir is created with correct labeling
- Allow syslog to run shell and bin_t commands
- Allow ip to relabel tun_sockets
- Allow mount to create directories in files under /run
- Allow processes to use inherited fifo files
- Allow user roles to connect to the journal socket - selinux_set_enforce_mode needs to be used with type
- Add append to the dontaudit for unix_stream_s� x���������������������� X � �&8 w �K � �$ ^ ���������������� � � � � debug package names (Petr Spacek)
- debuginfo-install: use descriptive parameter name in _is_available() (Petr Spacek)
- repoquery: add -l option to list files contained in the package (Petr Spacek)
- 1187773 - replace undefined variable (Miroslav Suchý)
- download: fixed unicode location error (RhBug:1178239) (Jan Silhan)
- builddep recognizes nosrc.rpm pkgs (RhBug:1166126) (Jan Silhan)
- builddep: added nosignatures flag to rpm transaction set (Jan Silhan)
- builddep: more verbose output of non-matching packages (RhBug:1155211) (Jan Silhan)
- package: archive script is the same as in dnf (Jan Silhan)
- spec: exclude __pycache__ dir (Igor Gnatenko) - revert of commit 80ae3f4 (Jan Silhan)
- transifex update (Jan Silhan)
- spec: binded to current dnf version (Jan Silhan)
- generate_completion_cache: use sqlite instead of text files (Igor Gnatenko)
- logging: renamed log file (Related:RhBug:1074715) (Jan Silhan)
- Add reposync. (RhBug:1139738) (Ales Kozumplik)
- download: fix traceback if rpm package has no defined sourcerpm (RhBug: 1144003) (Tim Lauridsen)
- lint: ignore warnings of a test accessing protected attribute. (Ales Kozumplik)
- repoquery lint: logger is not used. (Ales Kozumplik)
- repoquery: support querying of weak deps. (Ales Kozumplik)
- needs_restarting: fix typo (Miroslav Suchý)
- copr: migrate copr plugin form urlgrabber to python-request (Miroslav Suchý)
- Add needs-restarting command. (Ales Kozumplik) - repoquery: output times in UTC. (Ales Kozumplik)
- repoquery: missing help messages. (Ales Kozumplik)
- repoquery: add --info. (RhBug:1135984) (Ales Kozumplik)
- add Jan to AUTHORS. (Ales Kozumplik)
- spec: extended package description with plugin names and commands (Related:RhBug:1132335) (Jan Silhan)
- copr: check for 'ok' in 'output' for json data (RhBug:1134378) (Igor Gnatenko)
- README: changed references to new repo location (Jan Silhan)
- transifex update (Jan Silhan)
- copr: convert key to unicode before guessing lenght (Miroslav Suchý)
- Add pnemade to AUTHORS (Ales Kozumplik)
- debuginfo-install: Use logger as module level variable and not instance attribute since dnf-0.6.0 release (RhBug:1130559) (Parag Nemade)
- copr: Use logger as module level variable and not instance attribute since dnf-0.6.0 release (RhBug:1130559) (Parag Nemade)
- copr: implement help command (Igor Gnatenko)
- debuginfo-install: fix indenting (Igor Gnatenko)
- debuginfo-install: use srpm basename for debuginfo (Igor Gnatenko) - BashCompletionCache: error strings are unicoded (RhBug:1118809) (Jan Silhan)
- transifex update (Jan Silhan)
- debuginfo-install: remove some pylint warnings (Igor Gnatenko)
- debuginfo-install: fix installing when installed version not found in repos, optimize performance (RhBug: 1108321) (Ig
- fix: copr plugin message for repo without builds (RhBug:1116389) (Adam Samalik)
- logging: remove messages about initialization. (Ales Kozumplik) - packaging: add protected_packages.py to the package. (Ales Kozumplik) - protected_packages: prevent removal of the running kernel. (RhBug:1049310) (Ales Kozumplik)
- packaging: create and own /etc/dnf/protected.d. (Ales Kozumplik)
- doc: add documentation for protected_packages. (Ales Kozumplik)
- doc: rename: generate-completion-cache -> generate_completion_cache. (Ales Kozumplik)
- add protected_packages (RhBug:1111855) (Ales Kozumplik)
- build: add python-requests to requires (RHBZ: 1104088) (Miroslav Suchý)
- doc: typo: fix double 'plugin' in release notes. (Ales Kozumplik) - pylint: fix all pylint builddep problems. (Ales Kozumplik)
- builddep: better error reporting on deps that actually don't exist. (Ales Kozumplik)
- builddep: load available repos. (RhBug:1103906) (Ales Kozumplik)
- tests: stop argparse from printing to stdout when tests run. (Ales Kozumplik)
- packaging: all the manual pages with a glob. (Ales Kozumplik)
- fix: packaging problem with query.py. (Ales Kozumplik)
- doc: add reference documentation for repoquery. (Ales Kozumplik)
- repoquery: support --provides, --requires etc. (Ales Kozumplik)
- repoquery: � x�������������z������� X � B'8 ���������������" �$ ���������������� " " " � t of openshift cron jobs
- Allow system cron jobs to create tmp directories
- Make userhelp_conf_t a config file
- Change rpm to use rpm_script_roles
- More fixes for rsync to make rsync <backuphost> wokring
- Allow logwatch to domtrans to mdadm
- Allow pacemaker to domtrans to ifconfig
- Allow pacemaker to setattr on corosync.log
- Add pacemaker_use_execmem for memcheck-amd64 command
- Allow block_suspend capability
- Allow create fifo_file in /tmp with pacemaker_tmp_t
- Allow systat to getattr on fixed disk
- Relabel /etc/ntp.conf to be net_conf_t
- ntp_admin should create files in /etc with the correct label
- Add interface to create ntp_conf_t files in /etc
- Add additional labeling for quantum
- Allow quantum to execute dnsmasq with transition - boinc_cliean wants also execmem as boinc projecs have
- Allow sa-update to search admin home for /root/.spamassassin
- Allow sa-update to search admin home for /root/.spamassassin
- Allow antivirus domain to read net sysctl
- Dontaudit attempts from thumb_t to connect to ssd
- Dontaudit attempts by readahead to read sock_files
- Dontaudit attempts by readahead to read sock_files
- Create tmpfs file while running as wine as user_tmpfs_t
- Dontaudit attempts by readahead to read sock_files
- libmpg ships badly created librarie - Change ssh_use_pts to use macro and only inherited sshd_devpts_t
- Allow confined users to read systemd_logind seat information
- libmpg ships badly created libraries
- Add support for strongswan.service
- Add labeling for strongswan
- Allow l2tpd_t to read network manager content in /run directory
- Allow rsync to getattr any file in rsync_data_t
- Add labeling and filename transition for .grl-podcasts - mount.glusterfs executes glusterfsd binary
- Allow systemd_hostnamed_t to stream connect to systemd
- Dontaudit any user doing a access check
- Allow obex-data-server to request the kernel to load a module
- Allow gpg-agent to manage gnome content (~/.cache/gpg-agent-info)
- Allow gpg-agent to read /proc/sys/crypto/fips_enabled
- Add new types for antivirus.pp policy module
- Allow gnomesystemmm_t caps because of ioprio_set
- Make sure if mozilla_plugin creates files while in permissive mode, they get created with the correct label, user_home_t
- Allow gnomesystemmm_t caps because of ioprio_set
- Allow NM rawip socket
- files_relabel_non_security_files can not be used with boolean
- Add interface to thumb_t dbus_chat to allow it to read remote process state
- ALlow logrotate to domtrans to mdadm_t
- kde gnomeclock wants to write content to /tmp - kde gnomeclock wants to write content to /tmp
- /usr/libexec/kde4/kcmdatetimehelper attempts to create /root/.kde
- Allow blueman_t to rwx zero_device_t, for some kind of jre
- Allow mozilla_plugin_t to rwx zero_device_t, for some kind of jre
- Ftp full access should be allowed to create directories as well as files
- Add boolean to allow rsync_full_acces, so that an rsync server can write all
- over the local machine
- logrotate needs to rotate logs in openshift directories, needs back port to RHEL6
- Add missing vpnc_roles type line
- Allow stapserver to write content in /tmp
- Allow gnome keyring to create keyrings dir in ~/.local/share
- Dontaudit thumb drives trying to bind to udp sockets if nis_enabled is turned on
- Add interface to colord_t dbus_chat to allow it to read remote process state
- Allow colord_t to read cupsd_t state
- Add mate-thumbnail-font as thumnailer
- Allow sectoolm to sys_ptrace since it is looking at other proceses /proc data.
- Allow qpidd to list /tmp. Needed by ssl
- Only allow init_t to transition to rsync_t domain, not initrc_t. This should be back ported to F17, F18
- - Added systemd support for ksmtuned
- Added booleans
ksmtuned_use_nfs
ksmtuned_use_cifs
- firewalld seems to be creating mmap files which it needs to execute in /run /tmp and /dev/shm. Would like to clean this up but for now we will allow
- Looks like qpidd_t needs to read /dev/random
- Lots of probing avc's caused by execugting gpg from staff_t
- Dontaudit senmail triggering a � x�������������pi������� X � v%8 �������� sb �$ c ���������������� sb rb tb � 2ac70e3b6371459c862a644583284e2e3b27406fe8c40b8c940b7c56c 96e07e9f98f08bf55b88db138c985d4a4fba200c3ad5072e97144094a6bebb92 ad5552fc73d1d2a0435406788fb63f550ec362f3c5229bcb75c49ae10c7d4c5e 80621fecf8590de68996430bb0ebc26eb8c6a55cfaf644aea9abc3d8c89820aa b2a8c78b9485e95c8ef09e7549110393fdd99c756dd7430c7400a10ddf429ec1 e1f38511cf9ec824c3f4b8230bd696723fe2dedf6e68ffcf389f6017a1ef8c29 4937d187167353e52bb10f77620be7b1cd4e3fca7cd4c9d16492e9ed1d6e9d21 b8317cc0b621e572a5a3b5cbb7ae4a8209a911cb80bbbc9a7e28e2f6072b22a5 434851744385de51b7ea9add254a74ed00c5a63daf012797fcddfd13cb105035 e35eabcaad4f6ee4f39b1d35b2cfc433ae6e4ccffa1e29731b9644d9cbe8559f bb125eaa0f5b3742f83be9c073f73accf7319e9aa98a47e78e447a8f3e956720 9a3bf57470b01f917472154d5b62373c951db4d1a20ffc85cb3a8780c9c1704d 61d7554fffbb909164e02ae785f85b112274ab27dbc7b44de85ff36c3f8db35d 1820b5d5f031f5725ec40ad36166df0035deec0150de49e902d316dc5f42d1dd 46b26abeec106be4179f57d97a96d504e0772d2ffbb070d58c5e373e83d7e77a 3e694926e60c2a58c31e9848e60b670e64f8770695c3bc9aa6c7e8f7a76473f4 44208df00662569afb54345c99ec7cf3956e58dff69ae81bc5d4ddf8b087d1ac 6ede44ce06cda07d0847cd493833b140ebf6f7564ba8c9b82b3031b4dfd79dd8 a1fa42f56d9fe6baae1d2f0b57ff190ad0c2119277670d88c5e039d411311596 1eb7dda2748ca1c4c6c1deebda96b63fb1198a79247c91a66cf322dcb48d5dd3 f8d5e5a3b3eef7bf6518f75e743ea163871f0f5ca390127c72f7af0644b20003 d7b71652bd5bcf58a938888395d79fe4080790c9414040ce57bad605fb0fa408 ed85490b0f482f464d3ae079cad5e43ed023d74eb9b8dc3229df107be4db0b61 a2e8067d76b75e55ff224091bb3b7c8afcdda45a5f7581194eb12a299fda79ba dc0cf71e04c0752511194233aff801615fa1cb7ba0c3679617309330241df238 f3fb18c6f8728f45127e7c03d1483564d7669fa800bf0f99d0b5f062dcb4012b 06aae6434015142a685f50181f2b1c882edccc024ee3d33b636ee788c53d84ef 0a51d3d93173c0d5f2d4617979bb42224e9c5952f9365008b92aeff43c8c26d5 aea71badfeefd0472864f50ad9f1ec6b8675c583247c59e49d78b5713f7c8370 f419ff0905ad1408e65bc1a8d910a9cde9a46f3b9cb2888ee2d8fe592c5b12b6 ca13a210c7672f0661409ce2bfe25bf2457c544fad240e3ec3a33ec028750c4c f8a4f33d0c7e4e6db4f4f03a3df604a8aa16b3404c10b55301d684ce531fce19 f4ded5e4f4cfcacf758123edca7a2f155654d7f0714c429e1cdfacee7622c7fd 21ce48b79c62f2870183556276e9768cfd91b1ab9bcf6833703b5ce8eb2a4f29 b1af5fb9d59a5ce5f1cb2926e66c7d240329cbba7d1daa35d9299585513b05f5 0f85b6fa74351dded9f8c5739172f2c723551b5ceee7b7ca694b045fd3bd1394 40be8bc027fa49a2aba7ed7f1ce40b99a6fadadeb668a1e17ca8189f0384cf75 2bb53a094bd5e71005e03e41a19c61a341581b3744fa3b9a49cc5fb24fd37af4 4fe217e31815a19e316c889c00ce0b9dcc7672f2f188492156daf4248fdadbce 172f5689a6e0c671e286c0c3480d85a08c767e93de9bb686e7cb89995743df4a d39fad95ef5e52757a73e2029533e2af2f57670bf1f92717cedf511da7e2a3df e856921d3d3dd8aff4f5f8551010afa45af39041b3fed3e18bcf45d4119519b9 a4354c13113468aed9378e27fca2bf6715d740cb1763b2f14afb314997a5824c 2885f8b99096613b946b2cb57ed4d830aacc85a144f5161aa97cb8804b9b247f f9ea211f2621cc177b5f8e390af2c6fcb4cb14cef993433247c033520ceb185f 1cb9bc1035e21717231aea67ec51930400ab3fd0a484f578abedc366247cc202 d0af9c3c1a324b72f42dcf01af20890d6ee841fc04e64fa052fbdeb5f1e5fafd 4cddfdf9e0517532430d491a2790c69fedff646c95dfc7eedb6caef526d421ad 14c6628ca4723c394d39004eaf09b7ac14dff1ca8659ed3af3e3a477662e6fa7 141024fbadf465dcec3ad8aef4434860c32cdc9478465df8d014573e01cc89d6 8f2d19890c083fad1395de0beb402c20115f68e24c3f814c6b3b0205084e2ec6 f26bf35eadc8a90df7c99998d1f82facd604cb423c0cd4dcd1c6409ad0b8166a 6ea0fac40260a07f0a5956c47edd731b240c987c846d0cba0e677a4b946d7c3d a145c6780f8931743ba38c90b0dea1574d28f855a597f68cabd2137804f31ec7 fa8d78cd317429d758a5bfb96a3e5801e62cc430b5b18eec31aaff3e919ee5f4 7e5ab584e9bd6e049343b5c017697610d939a736ed6ef3c59b9d605004268473 58fec54ad18a41d38c5c68b45fdf518a43f3558744f192cf3889f987dff488d5 1dd93d0ecfe4ce87cf1a370c9cfca19cc708ab892698a317a598e62d57ef6326 382bc06115ab85c556338a8b5f454576fe5b2c6b8085c2768bb6183e3d79fb76 cb5e0a50ab30605a9b989839634c00712e47cf114ca5543346e9fb2d30874a6d b050a197ba8d47af5ab42efcfacb00c554bce05c8847cc9823f8c313ab968631 547235a3ba0b72e4e467d7ab35d32e716718f9a9f3c6f24d50757c4c74c5f6de 73206bf464cc1b2439b3ca75571ec4c3ba7061232f82b� x��������������X������� X � !'8 u �u�������! �$ e ���������������� �! �! �! � rs - Allow systemd-networkd to be running as dhcp client.
- Label /usr/bin/cockpit-bridge as shell_exec_t.
- Add label for /var/run/systemd/resolve/resolv.conf.
- ALlow listen and accept on tcp socket for init_t in MLS. Previously it was for xinetd_t.
- Allow systemd-networkd to be running as dhcp client.
- Label /usr/bin/cockpit-bridge as shell_exec_t.
- Add label for /var/run/systemd/resolve/resolv.conf.
- ALlow listen and accept on tcp socket for init_t in MLS. Previously it was for xinetd_t. - Dontaudit aicuu to search home config dir. BZ (#1104076)
- couchdb is using erlang so it needs execmem privs
- ALlow sanlock to send a signal to virtd_t.
- Allow mondogdb to 'accept' accesses on the tcp_socket port.
- Make sosreport as unconfined domain.
- Allow nova-console to connect to mem_cache port.
- Allow mandb to getattr on file systems
- Allow read antivirus domain all kernel sysctls.
- Allow lmsd_plugin to read passwd file. BZ(1093733)
- Label /usr/share/corosync/corosync as cluster_exec_t.
- ALlow sensord to getattr on sysfs.
- automount policy is non-base module so it needs to be called in optional block.
- Add auth_use_nsswitch for portreserve to make it working with sssd.
- Fix samba_export_all_ro/samba_export_all_rw booleans to dontaudit search/read security files.
- Allow openvpn to execute systemd-passwd-agent in systemd_passwd_agent_t to make openvpn working with systemd.
- Allow openvpn to access /sys/fs/cgroup dir.
- Allow nova-scheduler to read certs
- Add support for /var/lib/swiftdirectory.
- Allow neutron connections to system dbus.
- Allow mongodb to manage own log files.
- Allow opensm_t to read/write /dev/infiniband/umad1.
- Added policy for mon_statd and mon_procd services. BZ (1077821)
- kernel_read_system_state needs to be called with type. Moved it to antivirus.if.
- Allow dnssec_trigger_t to execute unbound-control in own domain.
- Allow all RHCS services to read system state.
- Added monitor device
- Add interfaces for /dev/infiniband
- Add infiniband_device_t for /dev/infiniband instead of fixed_disk_device_t type.
- Add files_dontaudit_search_security_files()
- Add selinuxuser_udp_server boolean
- ALlow syslogd_t to create /var/log/cron with correct labeling
- Add support for /etc/.updated and /var/.updated
- Allow iptables read fail2ban logs. BZ (1147709)
- ALlow ldconfig to read proc//net/sockstat. - Allow nova domains to getattr on all filesystems.
- ALlow zebra for user/group look-ups.
- Allow lsmd to search own plguins.
- Allow sssd to read selinux config to add SELinux user mapping.
- Allow swift to connect to all ephemeral ports by default.
- Allow NetworkManager to create Bluetooth SDP sockets
- Allow keepalived manage snmp var lib sock files. BZ(1102228)
- Added policy for blrtty. BZ(1083162)
- Allow rhsmcertd manage rpm db. BZ(#1134173)
- Allow rhsmcertd send signull to setroubleshoot. BZ (#1134173)
- Label /usr/libexec/rhsmd as rhsmcertd_exec_t
- Fix broken interfaces
- Added sendmail_domtrans_unconfined interface
- Added support for cpuplug. BZ (#1077831)
- Fix bug in drbd policy, BZ (#1134883)
- Make keystone_cgi_script_t domain. BZ (#1138424)
- fix dev_getattr_generic_usb_dev interface
- Label 4101 tcp port as brlp port
- Allow libreswan to connect to VPN via NM-libreswan.
- Add userdom_manage_user_tmpfs_files interface - Allow all domains to read fonts
- Allow rabbitmq_t read rabbitmq_var_lib_t lnk files. BZ (#1147028)
- Allow pki-tomcat to change SELinux object identity.
- Allow radious to connect to apache ports to do OCSP check
- Allow git cgi scripts to create content in /tmp
- Allow cockpit-session to do GSSAPI logins. - Make sure /run/systemd/generator and system is labeled correctly on creation.
- Additional access required by usbmuxd
- Allow sensord read in /proc BZ(#1143799) - Allow du running in logwatch_t read hwdata.
- Allow sys_admin capability for antivirus domians.
- Use nagios_var_lib_t instead of nagios_lib_t in nagios.fc.
- Add support for pnp4nagios.
- Add missing labeling for /var/lib/cockpit.
- Label resolv.conf as docker_share_� x�������������`H������� X � �&8 D �� �! �$ ���������������� �! �! �! � 93151249a05ada4fd448d871507f00653b17bb9e9b6af80729be57f16940b1e 17873cd8d74094918bd4aebe30f437bfdf46ef57e9991d6f2f5b35f9a6cd8bc9 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 505d1c8c897987ad559894909eb162fe5b3ce48bce9b552dda3d8ed9af3e8497 a61b264c854f10a9163878c4e2ae7c9861ab40aa74e315cfd67e744709b89ba4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e da8a7ebbf56ab7d8307f051c8daa9bf611c9c0abf356fcf4117e2cf7c288c2fe 5d334ced0a079064807cbf62e0efb658e38047b2af6af5530d92343d664aefd7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 983d54aef4203372e3bee7188781782b06e66520c0b416b5ed35a93d5cfb5e90 4da96772344ebb19284eedd9f22dfddcdcb364949d05b305b1750ef4e8630fcc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a405e4fb3f348c85e46cc22aadc25010d4ec6086212479e26c71cf57645c128c 5d41aa84b4bd8f3b600e4a7a0e24f61347157bbc2921179955d9cffe32a0be14 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 51268ad7d73b84aeddedda6fd2a61166434ea74af2d1c5c13f61aee86752ab2d 2c0b00d05c9e0f6e78608693a4e7ea084202f8b08e45d7355236b5446fec8cb1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e de9c74f03e175e0ea18bd33471e2b3201347bfc74bcafad6fc1a36d0cbd9a33d 502e674cafa8dfdad986ac9c32ae5e403d34762d9b6167ffa7440cc1bd64fafe d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d44ef8f20585f133ebffd9ae432e730011a466cf56cb86e457885a984ef02a06 01af6aac2430e5166ea1f872502b9bee811e1368f5ceed804f71c0ebdbe8a1d2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0bc9ff028d12370c660502e9341532513f1e579fc76b402c7ab3de903932bccd 1b3a2c20484b28f81af586cbaaa0d63b2c94c8826bfe23d0464089093b3ee320 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e cf718b7206a874c8bfd7cc8e85cc088fc315db2c644718d9966ec38cd99c3b81 8526cad12abfb90de0f051a620288e24c8c510562a186824be7cc6cd483f6ed7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3a5ac6fc480584b6a3f6b244484c05ff3351d74a84919703f8bee8fe6f99ef67 971bb38f6a73bcd4f06af3f0c974a2cfdc668602a03b8c8f96af86f56b96560d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 24a15df471bd3d913574a95d2a9ffca012a0bfc36b92685fe61e2b378560e18a c8a422fd950bc5d51ef687ea567b0ae419a158dc2e3045bfdbac19e4157360e7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ffd74d69c5994e8c1669cee8c4857a64add6e3fabf09d842684d34c18a61ab49 fab81fca11ef716f35fef08f903ad198c614d561896c5e7c56f866e96aeeeb44 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ffa253c26c1b402757597e51fc651d1f6cd74f94e86d2ab02a6d2ff1c1a3e02f 9f7e6b1c65109540dde082dd347bdceebde8b7aaeb039c7594ca49ab7d561dc9 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 36b2722662a2e780529fd220d33049e55d99b4d49c2d6e6bd541d445f4113c4e f9cbdc6a8d779bfd6f044ba4ccf5dc68d8dadab9c9b59a3442708d85af5de694 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bb0da4f4c6723cba0abaf596aa79bf9f852ace44e0999d3c4654f49c716bee96 cf45f58e14f3219777c51ab7fdacbc2f1fcb83d1e41b671df7e359fd33f8e4ef d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 683befb7614fa7c60fc600cb397d2b3b5c70b8cedf786a93fa64942a72701010 c08d371519df8b68980baad78c8c14b7f193c002c04027dd28624c7fb835c832 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b1aeb673703e3da61801515338e1e4091e07c00f633f69ae2120e83579d7c011 48b5e7f2fdd2513eeceb4d09c3644dbc99cd8d98e82cd631db9b433324a8a219 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3d58ea957e4fe014b4a88710e0fd7ae988bcf936d4c500f48418dfb82597fb2c 02154122bacb0d63de5b75b33ce9a699bef6febf821bf058b326d88efa82b1e4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a6694a32e5f8571c36925a2131563e784763496ae568dc25c7ff8828c565f733 5330988c770ba0b16ccddc07d502ec3cb048a19e8a00ad524f04ebf7c9a728c3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 71d71e43a4515928c2162bd13729e2ee9eb315b65dd14c95f44b542a2ae6328e cebd4cf3b8e7136713bc698775b9bf4c285f28e3b8a12d2e58e29f7947f899f0 d53315bea08cec50d2591� x��������������7������� X � �'8 �t �M������U" �$ E ���������������� U" T" V" � es/100/unprivuser/ /usr/share/selinux/targeted/default/active/modules/100/updfstab/ /usr/share/selinux/targeted/default/active/modules/100/usbmodules/ /usr/share/selinux/targeted/default/active/modules/100/usbmuxd/ /usr/share/selinux/targeted/default/active/modules/100/userdomain/ /usr/share/selinux/targeted/default/active/modules/100/userhelper/ /usr/share/selinux/targeted/default/active/modules/100/usermanage/ /usr/share/selinux/targeted/default/active/modules/100/usernetctl/ /usr/share/selinux/targeted/default/active/modules/100/uucp/ /usr/share/selinux/targeted/default/active/modules/100/uuidd/ /usr/share/selinux/targeted/default/active/modules/100/varnishd/ /usr/share/selinux/targeted/default/active/modules/100/vdagent/ /usr/share/selinux/targeted/default/active/modules/100/vhostmd/ /usr/share/selinux/targeted/default/active/modules/100/virt/ /usr/share/selinux/targeted/default/active/modules/100/vlock/ /usr/share/selinux/targeted/default/active/modules/100/vmtools/ /usr/share/selinux/targeted/default/active/modules/100/vmware/ /usr/share/selinux/targeted/default/active/modules/100/vnstatd/ /usr/share/selinux/targeted/default/active/modules/100/vpn/ /usr/share/selinux/targeted/default/active/modules/100/w3c/ /usr/share/selinux/targeted/default/active/modules/100/watchdog/ /usr/share/selinux/targeted/default/active/modules/100/wdmd/ /usr/share/selinux/targeted/default/active/modules/100/webadm/ /usr/share/selinux/targeted/default/active/modules/100/webalizer/ /usr/share/selinux/targeted/default/active/modules/100/wine/ /usr/share/selinux/targeted/default/active/modules/100/wireshark/ /usr/share/selinux/targeted/default/active/modules/100/xen/ /usr/share/selinux/targeted/default/active/modules/100/xguest/ /usr/share/selinux/targeted/default/active/modules/100/xserver/ /usr/share/selinux/targeted/default/active/modules/100/zabbix/ /usr/share/selinux/targeted/default/active/modules/100/zarafa/ /usr/share/selinux/targeted/default/active/modules/100/zebra/ /usr/share/selinux/targeted/default/active/modules/100/zoneminder/ /usr/share/selinux/targeted/default/active/modules/100/zosremote/ /var/lib/selinux/targeted/ /var/lib/selinux/targeted/active/ /var/lib/selinux/targeted/active/modules/100/ /var/lib/selinux/targeted/active/modules/100/abrt/ /var/lib/selinux/targeted/active/modules/100/accountsd/ /var/lib/selinux/targeted/active/modules/100/acct/ /var/lib/selinux/targeted/active/modules/100/afs/ /var/lib/selinux/targeted/active/modules/100/aiccu/ /var/lib/selinux/targeted/active/modules/100/aide/ /var/lib/selinux/targeted/active/modules/100/ajaxterm/ /var/lib/selinux/targeted/active/modules/100/alsa/ /var/lib/selinux/targeted/active/modules/100/amanda/ /var/lib/selinux/targeted/active/modules/100/amtu/ /var/lib/selinux/targeted/active/modules/100/anaconda/ /var/lib/selinux/targeted/active/modules/100/antivirus/ /var/lib/selinux/targeted/active/modules/100/apache/ /var/lib/selinux/targeted/active/modules/100/apcupsd/ /var/lib/selinux/targeted/active/modules/100/apm/ /var/lib/selinux/targeted/active/modules/100/application/ /var/lib/selinux/targeted/active/modules/100/arpwatch/ /var/lib/selinux/targeted/active/modules/100/asterisk/ /var/lib/selinux/targeted/active/modules/100/auditadm/ /var/lib/selinux/targeted/active/modules/100/authconfig/ /var/lib/selinux/targeted/active/modules/100/authlogin/ /var/lib/selinux/targeted/active/modules/100/automount/ /var/lib/selinux/targeted/active/modules/100/avahi/ /var/lib/selinux/targeted/active/modules/100/awstats/ /var/lib/selinux/targeted/active/modules/100/bacula/ /var/lib/selinux/targeted/active/modules/100/base/ /var/lib/selinux/targeted/active/modules/100/bcfg2/ /var/lib/selinux/targeted/active/modules/100/bind/ /var/lib/selinux/targeted/active/modules/100/bitlbee/ /var/lib/selinux/targeted/active/modules/100/blkmapd/ /var/lib/selinux/targeted/active/modules/100/blueman/ /var/lib/selinux/targeted/active/modules/100/bluetooth/ /var/lib/selinux/targeted/active/modules/100/boinc/ /var/lib/selinux/targeted/active/modules/100/boltd/ /var/lib/selinux/targete� x�������������@'������� X � �%8 ��������P� - �$ = ���������������� - , . � 4aff62cbb36b4a452ce67eb261c 90e35325bf9b6b9562bd0882128ea4650b65c9389b35edf9ff534dc3a48e8bed 73e650aeccc3ef0a7c2e1bbab934b0882b61f19569e96e4615d069dc50b6becd d19ab2cc69000c1206f1b8460952857f05d154158da8b89273ac2900a5c80ec0 9a36cf3e93b6374521c81fa4f302350d3c04b95573f5570717284107689188e6 427d138cfba0b64e4090d53031ba5a470589ca0229336c6334e280e5eeadfc84 af2491bf39f41b9f7c919ba47ed9ab03f87e943bc3b12417f98e5580d8077bc7 91731c3e8eefc36254118d8771bea069ec08c33d3e44496fd861a8316e73f6f1 eec539275ef2140da652e19102f259ee84ae3432f2c94a862cc22da8957e4b27 85cab4eb35c168aa76abbf955e5404008580e264115dc2ec5466373223e0dfa6 1eff60219165b7a7c6eda22e3b38946fd805408c13229ff88b4b10fc3bfec2f2 aeffb4257e2466974f6af0eb1cc8d76345dbdf470748b3d12bb2f6d6b4bdbc8c 29d842963a96d305bf7aa2c616f751c216add1be731a1e0f0066b223797a55d3 069c4c188fa9dbaeb56026aee5cfd6478487a203455ec7fa32655665177756c5 540dd248e77cab6e64ab4f5eca49e60ceb141ab26b240fafc751813806a2f520 17c0a3669a0653bded7ae9c0ab80d57155ac9072c2cd8f029db11e4e9eda42c5 287273783ae837b0c4a305edbbe89d184cde13eea217c1ddf505642e093000f9 dae116c2ae672acfb0a1bec9b1310ef9a16d32b5239e4bb69657a12791af5b70 ce568524684789cba926d99c3b0762851196739a345c004419f233f1f6d63f33 471241ce10a7ddd389d9b1362eea4fd465368d47f0b39bef7cf06d42a3ae7a4c 5eb27de2cd89c6b86dc7d42f1533e8d360da44c4d0ccede67f3abe68675dc227 0cc8f0091358ddcc3c035e9f22bc32d26881f2af192b2b51106af9c5856486de 0f08a9138e23a5b3486a80cd70071e491585ec3db71a6ca10bbfd747c35d1c0c 08c64a0e6f2829acbf7d0c231c69a567370fae017723e3bdf7c084f55fa99818 e46d81975f080477d1108f16ab905af6b1aedadcfaf08fa82ef6ce3a81ab5fd4 2576c3e027fd804e5be5e556edd0cad620fa93d36ca88e49b6e928a39a0ad116 151ee9f01c4c167079be5154a6306ef4ecaf33194dcd258f4eac60b57387c0fb 3feb38a3f52a644040c40487676f44f3b224e544e358de4bd55ba9fe1f438446 24cb67648655eb2b5fc02169682b4c75b6893c4c75ecedf9f321855f76f3d70a 878af120b6cd2784cd6e7c06744a2c3e658d822875602ca5e340ccdf1e257f5a c6b994618d955397c9f65fcde13112b7687a36b7348abb735ae01e433061d202 bf0fc89e388fd8ec6bbeffec95b4bed7e84c72d5dda294dd0678b0a8bae9fd9b 528f0c22b9dac09073d3c6eaa9a2b969a00ac89dcb70f5e80c64867ef1bc0afb 0cdc2bee61da7bea7a3926d9c03d2954395af0c29289578d9a0dbd1ebe64b9a5 e41a38b26bc33393500a19d0da2258663b97a35752be03dc27c68bd468cfff50 6704deb1ffbc890823aa6fb665f3e8ef87b67d6735a5e0c89d5364ef87fe739a 0df4a2a4e704e77e91d48f8de140623fe8d6a6cc0637233b6c1ae3c1b1ee1a3b 5dcd75b89d489ada277ba91d580e9196db3abeba747052c989eebc2861b51016 074ab500d78083cb9592b401d16ddde10b1c7ee1b4f7aa0f6a53c001c9027dcf 75287aeb4a969eeb6f3d0e50a1447e7642993c3b5ad9f5d115b24863f748c648 f3f8209dab67c5f2bca4b1da2e320918634fd56620ac1d57945567902129d285 c228c53237348e14e2cd1a8a99bfe13535dfe90ee43721a636adddccc2cd017a fdec2bf141c66667991ce9ab6bbd2b7564ee6c2b58c8a7199506111e9996a469 ac85475d9a7719345ba6631daf034f24e5ab350624087fcd28a25a03b5b754e9 9e3e759f0b3fff99671711fb9a36e4b1402209d1bfd3457d212b708770a21b73 ee20dad6dc3b95776045f512a583a82184137b010dd8ecaf0ac194813147749f f0cd1d31a160dab7f469318c67e0dbdd84b7c0492d3110f4602978a35280a4b3 bf6badb791f0937ce1b36b8fb164b343caeaf8bee248ecbae5fabda69c2a39f1 311e1cfe112c62af1daf0b559b9520ccd03a197c5dc632d76f44964ee1330153 2e273cab5e878ec6260b9c39a682f7b00ebb44cac5a6926c96969551faf464b3 f45f6c9252153fb37b2b028a1c142d44003b4103b1b1500ecaf63a4eb30fa4bf d0bfe7f450cecea00db42a58be347babcb52cfd14c27a05b634dfa701e299404 8e9e2f54207ba37554d1d18656c6694c0abe68d2a91f32abb87118c8390fb1f4 93c8f610a08974b9a91af0015a85b7cd4e1fc6298807ba37a5c7d17e351216f0 990351cf2e3207dba678570d1de900e60f2550e95e2fb36fc8cbb773dc77ef0a d1e96b750dafd6a9079a0fc65d9be1d8df9fce856094a6e3e6c557f137393c85 bcd8e3d5fee6dbbc9d21258bfd099fa4d3eb15d87706bd7933a52c370ab0401c 7d205b37f0a6a8bda2fd6ba20a0b20f57c17586719b373a5fadec41646090be8 c6f3296e8384b4133e0d25c64bf0557862c1b691201ba7f14c168994ac93d21d d39edcd3e8516156927b6844a37dd8415ecb3a3fecbae6f2933ef7d06ddcb765 d9881b672584afa6d10871be7e12aba0c14dc5fe78c9b848cceda9aba5ad4f9a cdc3f886fdac5927ff7f065396d622e380f989a7926949e5372dfc2a00ffdfb8 d00d4796f466f75860d98ad528403ed6b94fc15c38be06c07a269effb06686fc 288de55c684� x��������������������� X � '8 � x8�������! �$ { ���������������� �! �! �! � nfined_exec_read_lnk_files()
- Allow pmweb daemon to exec shell. BZ(1256127)
- Allow pmweb daemon to read system state. BZ(#1256128)
- Add file transition that cermonger can create /run/ipa/renewal.lock with label ipa_var_run_t.
- Revert "Revert default_range change in targeted policy"
- Allow dhcpc_t domain transition to chronyd_t - Allow pmlogger to create pmlogger.primary.socket link file. BZ(1254080)
- Allow NetworkManager send sigkill to dnssec-trigger. BZ(1251764)
- Add interface dnssec_trigger_sigkill
- Allow smsd use usb ttys. BZ(#1250536)
- Fix postfix_spool_maildrop_t,postfix_spool_flush_t contexts in postfix.fc file.
- Revert default_range change in targeted policy
- Allow systemd-sysctl cap. sys_ptrace BZ(1253926) - Add ipmievd policy creaed by vmojzis@redhat.com
- Call kernel_load_module(vmware_host_t) to satisfy neverallow assertion for sys_moudle in MLS where unconfined is disabled.
- Allow NetworkManager to write audit log messages
- Add new policy for ipmievd (ipmitool).
- mirrormanager needs to be application domain and cron_system_entry needs to be called in optional block.
- Allow sandbox domain to be also /dev/mem writer
- Fix neverallow assertion for sys_module capability for openvswitch.
- kernel_load_module() needs to be called out of boolean for svirt_lxc_net_t.
- Fix neverallow assertion for sys_module capability.
- Add more attributes for sandbox domains to avoid neverallow assertion issues.
- Add neverallow asserition fixes related to storage.
- Allow exec pidof under hypervkvp domain. Allow hypervkvp daemon create connection to the system DBUS
- Allow openhpid_t to read system state.
- Add temporary fixes for sandbox related to #1103622. It allows to run everything under one sandbox type.
- Added labels for files provided by rh-nginx18 collection
- Dontaudit block_suspend capability for ipa_helper_t, this is kernel bug. Allow ipa_helper_t capability net_admin. Allow ipa_helper_t to list /tmp. Allow ipa_helper_t to read rpm db.
- Allow rhsmcertd exec rhsmcertd_var_run_t files and rhsmcerd_tmp_t files. This rules are in hide_broken_sympthons until we find better solution.
- Update files_manage_all_files to contain auth_reader_shadow and auth_writer_shadow tosatisfy neverallow assertions.
- Update files_relabel_all_files() interface to contain auth_relabelto_shadow() interface to satisfy neverallow assertion.
- seunshare domains needs to have set_curr_context attribute to resolve neverallow assertion issues.
- Add dev_raw_memory_writer() interface
- Add auth_reader_shadow() and auth_writer_shadow() interfaces
- Add dev_raw_memory_reader() interface.
- Add storage_rw_inherited_scsi_generic() interface.
- Update files_relabel_non_auth_files() to contain seutil_relabelto_bin_policy() to make neverallow assertion working.
- Update kernel_read_all_proc() interface to contain can_dump_kernel and can_receive_kernel_messages attributes to fix neverallow violated issue for proc_kcore_t and proc_kmsg_t.
- Update storage_rw_inherited_fixed_disk_dev() interface to use proper attributes to fix neverallow violated issues caused by neverallow check during build process. - Allow samba_net_t to manage samba_var_t sock files.
- Allow httpd daemon to manage httpd_var_lib_t lnk_files.
- Allow collectd stream connect to pdns.(BZ #1191044)
- Add interface pdns_stream_connect()
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Allow chronyd exec systemctl
- Merge pull request #30 from vmojzis/rawhide-contrib
- Hsqldb policy upgrade -Allow sock_file management
- Add inteface chronyd_signal Allow timemaster_t send generic signals to chronyd_t.
- Hsqldb policy upgrade. -Disallow hsqldb_tmp_t link_file management
- Hsqldb policy upgrade: -Remove tmp link_file transition -Add policy summary -Remove redundant parameter for "hsqldb_admin" interface
- Label /var/run/chrony-helper dir as chronyd_var_run_t.
- Allow lldpad_t to getattr tmpfs_t. Label /dev/shm/lldpad.* as lldapd_tmpfs_t
- Fix label on /var/tmp/kiprop_0
- Add mountpoint dontaudit a� x��������������������� X � �&8 �� (e m! �$ } ���������������� m! l! n! � r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(rd(rd(rd(rd(rd(rd(q�d(q� b0c1f69bfbe35da666b5504b5a64104778d2a65dedc492d83cfb8ad49bc83011 7433cf7d3d6d35d0790bbb0f49bc32986dc13483407d7eca5611cb8b2b0eedd4 8d2beb838d537959a01dd6026a545b8209182c1708a604489667af9ccd7e9a8a 33115c8ae83b6d571d45099e1758b571209e2808eed26389ffc50c1d5409cb37 f380d2bee554ce43f49b1a0ee94e83074a00d49c64149161e45942fedaaeb5ef 8583ca57f622a7ef83c25b1234a40fe8ac5e89cba4e75b8f20da4f206c830a48 50e3c030d2451b2871ca4084e1cb1da2fc20e1cc0d1ff717d9a86ab8c9224bf8 f61bacb21edd90b56135dc33e39207c79a74b4c1bf09a72b6bbe2c3ad6ad5fc9 a599aea3fd4fb4a8dc0b73e87359f7ddff44764f3437c334a02c77464a1b1176 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 8f207adf1e635face28f33487992e084a45367149c1� x���������������������� X � G'8 ��������������" �$ ���������������� " " " � for confined users
- Allow ssh_t to connect to any port > 1023
- Add openvswitch domain
- Pulseaudio tries to create directories in gnome_home_t directories
- New ypbind pkg wants to search /var/run which is caused by sd_notify
- Allow NM to read certs on NFS/CIFS using use_nfs_*, use_samba_* booleans
- Allow sanlock to read /dev/random
- Treat php-fpm with httpd_t
- Allow domains that can read named_conf_t to be able to list the directories
- Allow winbind to create sock files in /var/run/samba - Add smsd policy
- Add support for OpenShift sbin labelin
- Add boolean to allow virt to use rawip
- Allow mozilla_plugin to read all file systems with noxattrs support
- Allow kerberos to write on anon_inodefs fs
- Additional access required by fenced
- Add filename transitions for passwd.lock/group.lock
- UPdate man pages
- Create coolkey directory in /var/cache with the correct label - Fix label on /etc/group.lock
- Allow gnomeclock to create lnk_file in /etc
- label /root/.pki as a home_cert_t
- Add interface to make sure rpcbind.sock is created with the correct label
- Add definition for new directory /var/lib/os-probe and bootloader wants to read udev rules
- opendkim should be a part of milter
- Allow libvirt to set the kernel sched algorythm
- Allow mongod to read sysfs_t
- Add authconfig policy
- Remove calls to miscfiles_read_localization all domains get this
- Allow virsh_t to read /root/.pki/ content
- Add label for log directory under /var/www/stickshift - Allow getty to setattr on usb ttys
- Allow sshd to search all directories for sshd_home_t content
- Allow staff domains to send dbus messages to kdumpgui
- Fix labels on /etc/.pwd.lock and friends to be passwd_file_t
- Dontaudit setfiles reading urand
- Add files_dontaudit_list_tmp() for domains to which we added sys_nice/setsched
- Allow staff_gkeyringd_t to read /home/$USER/.local/share/keyrings dir
- Allow systemd-timedated to read /dev/urandom
- Allow entropyd_t to read proc_t (meminfo)
- Add unconfined munin plugin
- Fix networkmanager_read_conf() interface
- Allow blueman to list /tmp which is needed by sys_nic/setsched
- Fix label of /etc/mail/aliasesdb-stamp
- numad is searching cgroups
- realmd is communicating with networkmanager using dbus
- Lots of fixes to try to get kdump to work - Allow loging programs to dbus chat with realmd
- Make apache_content_template calling as optional
- realmd is using policy kit - Add new selinuxuser_use_ssh_chroot boolean
- dbus needs to be able to read/write inherited fixed disk device_t passed through it
- Cleanup netutils process allow rule
- Dontaudit leaked fifo files from openshift to ping
- sanlock needs to read mnt_t lnk files
- Fail2ban needs to setsched and sys_nice - Change default label of all files in /var/run/rpcbind
- Allow sandbox domains (java) to read hugetlbfs_t
- Allow awstats cgi content to create tmp files and read apache log files
- Allow setuid/setgid for cupsd-config
- Allow setsched/sys_nice pro cupsd-config
- Fix /etc/localtime sym link to be labeled locale_t
- Allow sshd to search postgresql db t since this is a homedir
- Allow xwindows users to chat with realmd
- Allow unconfined domains to configure all files and null_device_t service - Adopt pki-selinux policy - pki is leaking which we dontaudit until a pki code fix
- Allow setcap for arping
- Update man pages
- Add labeling for /usr/sbin/mcollectived
- pki fixes
- Allow smokeping to execute fping in the netutils_t domain - Allow mount to relabelfrom unlabeled file systems
- systemd_logind wants to send and receive messages from devicekit disk over dbus to make connected mouse working
- Add label to get bin files under libreoffice labeled correctly
- Fix interface to allow executing of base_ro_file_type
- Add fixes for realmd
- Update pki policy
- Add tftp_homedir boolean
- Allow blueman sched_setscheduler
- openshift user domains wants to r/w ssh tcp sockets - Additional requirements for disable unconfined module when booting
- Fix label of systemd script files
- semanage can use -F /dev/stdin to get input
- sysl� x�������������p������ X � �&8 0� x �! �$ ���������������� �! �! �! � c91da60e1db0fc2332d650107681fdcf3036df6db00507fa b2aac9c29e71bb6ece4bdb0f4290df1226bdea7631d6d87d9e3d22fb588c38f4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6d140717219fbf4f208575a087b5b3fc874cf208b9d3c2b0e25e0ae16eb152db 7a2ad84cf4efaa9de6fa5faa133a346a108f7404be9c1024ed43fc4f5aec0b1b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d5c19e58881ae497385296be296d564c4112e1b2861749ad944ce097c9e4c44d 4a34f35d67c0d13d7843a3478c23b930ffdfaf4d0b0f692c38385efe0bd5871e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e dfdc1c0f61a1c3dc4bfbe2dda47344de360447b3aa2a48276dc53f512bacc095 44f5e84588651442aa48ceaf4ef792a676df286c63d9b8a99210e20cb807dc03 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c31e79d5b261a09e2682211815a47f7a75c0c3c82b09e12051fb0ead0576196a 5f8b4ae23fc4b9f73eef0eab1a60cf2935b8db294001ba7d874d601380822c98 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 55f2e2852c374ddfa860c48a2833857fca76f33609290121c0e8cb582f97cc42 37c961aea2cc993211f5fad4db9d9955504c0bb66d278ee1088016c82c993891 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 991a350bd410a9008f5c9d60f28957ecf6c5f7392bbef846b86abb7a95e2b7b4 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 25a83d560382d31d344f1ce47f817fd12667bf031512425d5d624ab004989cb1 f827e97f229c4e7c81bc9230272878647562a2dc8122ce9d38a2ba35a7105507 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0dd2a8d862517d99ec4b8b6ee5fa9511ee60fda2e9b17499b58e64a5ca041c7f 33ccb9d20232aba0fd6c6db86232391fab665d2d36657f6f2f0a9c8699801808 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 714eb68865449ef2b9c19c20c548270366a458e08e700b8aa07a8241317702e3 13e0f615338af3215779ce56df5aa5a3b999b5c7fca52c0b75f006f0804e8026 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1ba776cfeb19305e2bcf8993bc9c327fac18038aaeac36340dbcc60fc83e5209 69f720d23684f254b6ea3e89ea250f9bc42f6c2544cbef9c7dc95497f693fac5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c4e48152c2910feceb4bdb286faab218e4fa99ccab28b414959522c5038732ce 789505090f03428167673031622dd67bc56406dc8f86ff977e0532ab54c9ffa3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c426d9fb46166d8cbf90aa18621f84ebbe974bd7479a37f6a18818cba8b0e54b 016d4834d1e1ae4544a2faf9fa7fd510eda436c8e7e105f0a057cfe38bded4db d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 249bcc53bc15f9fbaf28622355aa345b23010ce9d8d11889e2ba170b70eece9a 4d6c8b94043e3e9647ee275f741095d9153f0602ef6aad4d6de3a29165dfe12d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7baf64b22d831afa28741054bc11551ab3361d4e7612bc3d6add4d8d84bb9505 8f13e732febd6776b595afd205a22cd3b5a32821ef577c6751af9b45dd6edca6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0e66f4d9866b0dd7fe639d6814fe21f17ee355e0ec08c8da33a0a85c5d2eec2b 76e8b074506af89c093f06305a0ade3e629fd864dd4745906758a599349b3d29 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e cd5c9912d50c5cd0e92c1894175e8c62935fe95a841f51802605fc9562015118 4426e70c0659aa2096cb6161b98b9fde0bb89eb1e916fe0b2aa3d847663a1fa4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 98cf961de828a1fac8e3352595334685e4c82d07c2aaca5bae6194e19335f411 87ad3f1339892fc83f1a21fd14200c23f46ffdf935b95b15487fea7aadc3a0b2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e3bee1b1ecb14f7090d7cc795564bc2506be917d3211306610cda0a0586f7d62 f0842e9b6195ff4b56c9f982bab8f17d307977a796672cb15f07e8e42e1d7929 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1fa4c2f7f6265831c3ede22a66608482ed6b4279d73a8f2e055347a3634dac0b da24932f91e22dc405997e1b4daf81427cfb65e130fbbf848b548001b7c47e33 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 370f70e269887c369baa5bd818d8807af3e12d831a261d27eb8de43484c1c30d 48797f93b05428771264fd7e6d422389ebf844de13334d1d9eee483cdfc7aab0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 620a7a217da50c11a23f2046bc69d04862c� x��������������������� X � �&8 ��������� �! �$ - ���������������� �! �! �! � llow keepalived manage its private type runtime directories
Resolves: rhbz#1815281
- Run ipa_helper_noatsecure(oddjob_t) only if the interface exists
Resolves: rhbz#1853432
- Allow oddjob_t process noatsecure permission for ipa_helper_t
Resolves: rhbz#1853432
- Allow domain dbus chat with systemd-resolved
Resolves: rhbz#1852378
- Define file context for /var/run/netns directory only
Related: rhbz#1815281 - Allow systemd_private_tmp(dirsrv_tmp_t) instead of dirsrv_t
Resolves: rhbz#1836820 - Allow virtlogd_t manage virt lib files
Resolves: rhbz#1832756
- Allow pdns server to read system state
Resolves: rhbz#1801214
- Support systemctl --user in machinectl
Resolves: rhbz#1788616
- Allow chkpwd_t read and write systemd-machined devpts character nodes
Resolves: rhbz#1788616
- Allow init_t write to inherited systemd-logind sessions pipes
Resolves: rhbz#1788616
- Label systemd-growfs and systemd-makefs as fsadm_exec_t
Resolves: rhbz#1820798
- Allow staff_u and user_u setattr generic usb devices
Resolves: rhbz#1783325
- Allow sysadm_t dbus chat with accountsd
Resolves: rhbz#1828809 - Fix description tag for the sssd_connect_all_unreserved_ports tunable
Related: rhbz#1826748
- Allow journalctl process set its resource limits
Resolves: rhbz#1825894
- Add sssd_access_kernel_keys tunable to conditionally access kernel keys
Resolves: rhbz#1802062
- Make keepalived work with network namespaces
Resolves: rhbz#1815281
- Create sssd_connect_all_unreserved_ports boolean
Resolves: rhbz#1826748
- Allow hypervkvpd to request kernel to load a module
Resolves: rhbz#1842414
- Allow systemd_private_tmp(dirsrv_tmp_t)
Resolves: rhbz#1836820
- Allow radiusd connect to gssproxy over unix domain stream socket
Resolves: rhbz#1813572
- Add fwupd_cache_t file context for '/var/cache/fwupd(/.*)?'
Resolves: rhbz#1832231
- Modify kernel_rw_key() not to include append permission
Related: rhbz#1802062
- Add kernel_rw_key() interface to access to kernel keyrings
Related: rhbz#1802062
- Modify systemd_delete_private_tmp() to use delete_*_pattern macros
Resolves: rhbz#1836820
- Allow systemd-modules to load kernel modules
Resolves: rhbz#1823246
- Add cachefiles_dev_t as a typealias to cachefiles_device_t
Resolves: rhbz#1814796 - Remove files_mmap_usr_files() call for particular domains
Related: rhbz#1801214
- Allow dirsrv_t list cgroup directories
Resolves: rhbz#1836795
- Create the kerberos_write_kadmind_tmp_files() interface
Related: rhbz#1841488
- Allow realmd_t dbus chat with accountsd_t
Resolves: rhbz#1792895
- Allow nagios_plugin_domain execute programs in bin directories
Resolves: rhbz#1815621
- Update allow rules set for nrpe_t domain
Resolves: rhbz#1750821
- Allow Gluster mount client to mount files_type
Resolves: rhbz#1753626
- Allow qemu-kvm read and write /dev/mapper/control
Resolves: rhbz#1835909
- Introduce logrotate_use_cifs boolean
Resolves: rhbz#1795923
- Allow ptp4l_t sys_admin capability to run bpf programs
Resolves: rhbz#1759214
- Allow rhsmd mmap /etc/passwd
Resolves: rhbz#1814644
- Remove files_mmap_usr_files() call for systemd_localed_t
Related: rhbz#1801214
- Allow domain mmap usr_t files
Resolves: rhbz#1801214
- Allow libkrb5 lib read client keytabs
Resolves: rhbz#1831769
- Add files_dontaudit_manage_boot_dirs() interface
Related: rhbz#1803868
- Create files_create_non_security_dirs() interface
Related: rhbz#1840265
- Add new interface dev_mounton_all_device_nodes()
Related: rhbz#1840265
- Add new interface dev_create_all_files()
Related: rhbz#1840265
- Allow sshd write to kadmind temporary files
Resolves: rhbz#1841488
- Create init_create_dirs boolean to allow init create directories
Resolves: rhbz#1832231
- Do not audit staff_t and user_t attempts to manage boot_t entries
Resolves: rhbz#1803868
- Allow systemd to relabel all files on system.
Resolves: rhbz#1818981
- Make dbus-broker service working on s390x arch
Resolves: rhbz#1840265 - Make boinc_var_lib_t label system mountdir attribute
Resolves: rhbz#1779070
- Allow aide to be executed by systemd with correct (aide_t) domain
Resolves: rhbz#1814809
- Allow � x�������������`������� X � O&8 �������� � c �$ ���������������� c c c � com> 5.5-10 Jindrich Novy <jnovy@redhat.com> 5.5-9 Petr Raszyk <praszyk@redhat.com> 5.5-8 Petr Raszyk <praszyk@redhat.com> 5.5-1 Jesse Keating <jkeating@redhat.com> Petr Raszyk <praszyk@redhat.com> 5.4-23 Petr Raszyk <praszyk@redhat.com> 5.4-22 Petr Raszyk <praszyk@redhat.com> 5.4-21 Bill Nottingham <notting@redhat.com> 5.4-20 5.4-19 <praszyk@redhat.com> 5.4-19 Karsten Hopp <karsten@redhat.de> 5.4-18 Petr Rockai <prockai@redhat.com> - 5.4-17 Petr Rockai <prockai@redhat.com> Adrian Havill <havill@redhat.com> 5.4-15 Adrian Havill <havill@redhat.com> 5.4-14 Adrian Havill <havill@redhat.com> 5.4-13 Adrian Havill <havill@redhat.com> 5.4-12 Adrian Havill <havill@redhat.com> 5.4-11 Adrian Havill <havill@redhat.com> 5.4-10 Adrian Havill <havill@redhat.com> 5.4-9.fc3 Adrian Havill <havill@redhat.com> 5.4-9.fc2 Adrian Havill <havill@redhat.com> 5.4-9 Elliot Lee <sopwith@redhat.com> Florian La Roche <Florian.LaRoche@redhat.de> Joe Orton <jorton@redhat.com> 5.4-6 Adrian Havill <havill@redhat.com> 5.4-5 Elliot Lee <sopwith@redhat.com> Adrian Havill <havill@redhat.com> 5.4-3 Adrian Havill <havill@redhat.com> 5.4-3 Elliot Lee <sopwith@redhat.com> Adrian Havill <havill@redhat.com> 5.4-1 Adrian Havill <havill@redhat.com> 5.3-10 Matt Wilson <msw@redhat.com> 5.3-9.3 Matt Wilson <msw@redhat.com> 5.3-9.2 Adrian Havill <havill@redhat.com> 5.3-9.1 Adrian Havill <havill@redhat.com> 5.3-9 Adrian Havill <havill@redhat.com> 5.3-8.1 Adrian Havill <havill@redhat.com> 5.3-8 Adrian Havill <havill@redhat.com> 5.3-7 Elliot Lee <sopwith@redhat.com> 5.3-6.1 Elliot Lee <sopwith@redhat.com> Adrian Havill <havill@redhat.com> 5.3-5 Bill Nottingham <notting@redhat.com> 5.3-4 Adrian Havill <havill@redhat.com> 5.3-3 Tim Powers <timp@redhat.com> Adrian Havill <havill@redhat.com> 5.3-1 Elliot Lee <sopwith@redhat.com> 5.2-29 Tim Powers <timp@redhat.com> Tim Powers <timp@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> 5.2-26 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-25 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-24 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-23 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-21 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-20 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-19 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-18 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-17 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-16 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-14 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-13 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-12 Bernhard Rosenkraenzer <bero@redhat.com> 5.2-11 Helge Deller <hdeller@redhat.de> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Harald Hoyer <harald@redhat.de> Yukihiro Nakai <ynakai@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Prospector <bugzilla@redhat.com> Matt Wilson <msw@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Jeff Johnson <jbj@redhat.com> Preston Brown <pbrown@redhat.com> Bernhard Rosenkränzer <bero@redhat.com> Bernhard Rosenkränzer <bero@redhat.com> Bernhard Rosenkränzer <bero@redhat.com> Bernhard Rosenkränzer <bero@redhat.com> Bernhard Rosenkränzer <bero@redhat.com> Bernhard Rosenkränzer <bero@redhat.com> Cristian Gafton <gafton@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Cristian Gafton <gafton@redhat.com> Preston Brown <pbrown@redhat.com> Preston Brown <pbrown@redhat.com> Cristian Gafton <gafton@redhat.com> Preston Brown <pbrown@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Preston Brown <pbrown@redhat.com> Preston Brown <pbrown@redhat.com> Cristian Gafton <gafton@redhat.com> Cristian Gafton <gafton@redhat.com> Jeff Johnson <jbj@redhat.com> Cristian Gafton <ga� x�������������س������� X � L'8 ��������������� " �$ 0 ���������������� " " !" � for confined users
- Label /etc/security/opasswd as shadow_t
- Add label for /dev/ecryptfs
- Allow condor_startd_t to start sshd with the ranged
- Allow lpstat.cups to read fips_enabled file
- Allow pyzor running as spamc_t to create /root/.pyzor directory
- Add labelinf for amavisd-snmp init script
- Add support for amavisd-snmp
- Allow fprintd sigkill self
- Allow xend (w/o libvirt) to start virtual machines
- Allow aiccu to read /etc/passwd
- Allow condor_startd to Make specified domain MCS trusted for setting any category set for the processes it executes
- Add condor_startd_ranged_domtrans_to() interface
- Add ssd_conf_t for /etc/sssd
- accountsd needs to fchown some files/directories
- Add ICACLient and zibrauserdata as mozilla_filetrans_home_content
- SELinux reports afs_t needs dac_override to read /etc/mtab, even though everything works, adding dontaudit
- Allow xend_t to read the /etc/passwd file - Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t
- Add init_access_check() interface
- Fix label on /usr/bin/pingus to not be labeled as ping_exec_t
- Allow tcpdump to create a netlink_socket
- Label newusers like useradd
- Change xdm log files to be labeled xdm_log_t
- Allow sshd_t with privsep to work in MLS
- Allow freshclam to update databases thru HTTP proxy
- Allow s-m-config to access check on systemd
- Allow abrt to read public files by default
- Fix amavis_create_pid_files() interface
- Add labeling and filename transition for dbomatic.log
- Allow system_dbusd_t to stream connect to bluetooth, and use its socket
- Allow amavisd to execute fsav
- Allow tuned to use sys_admin and sys_nice capabilities
- Add php-fpm policy from Bryan
- Add labeling for aeolus-configserver-thinwrapper
- Allow thin domains to execute shell
- Fix gnome_role_gkeyringd() interface description
- Lot of interface fixes
- Allow OpenMPI job running as condor_startd_ssh_t to manage condor lib files
- Allow OpenMPI job to use kerberos
- Make deltacloudd_t as nsswitch_domain
- Allow xend_t to run lsscsi
- Allow qemu-dm running as xend_t to create tun_socket
- Add labeling for /opt/brother/Printers(.*/)?inf
- Allow jockey-backend to read pyconfig-64.h labeled as usr_t
- Fix clamscan_can_scan_system boolean
- Allow lpr to connectto to /run/user/$USER/keyring-22uREb/pkcs11 - initrc is calling exportfs which is not confined so it attempts to read nfsd_files
- Fixes for passenger running within openshift.
- Add labeling for all tomcat6 dirs
- Add support for tomcat6
- Allow cobblerd to read /etc/passwd
- Allow jockey to read sysfs and and execute binaries with bin_t
- Allow thum to use user terminals
- Allow cgclear to read cgconfig config files
- Fix bcf2g.fc
- Remove sysnet_dns_name_resolve() from policies where auth_use_nsswitch() is used for other domains
- Allow dbomatic to execute ruby
- abrt_watch_log should be abrt_domain
- Allow mozilla_plugin to connect to gatekeeper port - add ptrace_child access to process
- remove files_read_etc_files() calling from all policies which have auth_use_nsswith()
- Allow boinc domains to manage boinc_lib_t lnk_files
- Add support for boinc-client.service unit file
- Add support for boinc.log
- Allow mozilla_plugin execmod on mozilla home files if allow_ex
- Allow dovecot_deliver_t to read dovecot_var_run_t
- Allow ldconfig and insmod to manage kdumpctl tmp files
- Move thin policy out from cloudform.pp and add a new thin poli
- pacemaker needs to communicate with corosync streams
- abrt is now started on demand by dbus
- Allow certmonger to talk directly to Dogtag servers
- Change labeling for /var/lib/cobbler/webui_sessions to httpd_c
- Allow mozila_plugin to execute gstreamer home files
- Allow useradd to delete all file types stored in the users hom
- rhsmcertd reads the rpm database
- Add support for lightdm - Add tomcat policy
- Remove pyzor/razor policy
- rhsmcertd reads the rpm database
- Dontaudit thumb to setattr on xdm_tmp dir
- Allow wicd to execute ldconfig in the networkmanager_t domain
- Add /var/ru� x�������������P�������� X � �'8 (� й������Y" �$ I ���������������� Y" X" Z" � ve/modules/100/polipo/ /var/lib/selinux/targeted/active/modules/100/portmap/ /var/lib/selinux/targeted/active/modules/100/portreserve/ /var/lib/selinux/targeted/active/modules/100/postfix/ /var/lib/selinux/targeted/active/modules/100/postgresql/ /var/lib/selinux/targeted/active/modules/100/postgrey/ /var/lib/selinux/targeted/active/modules/100/ppp/ /var/lib/selinux/targeted/active/modules/100/prelink/ /var/lib/selinux/targeted/active/modules/100/prelude/ /var/lib/selinux/targeted/active/modules/100/privoxy/ /var/lib/selinux/targeted/active/modules/100/procmail/ /var/lib/selinux/targeted/active/modules/100/prosody/ /var/lib/selinux/targeted/active/modules/100/psad/ /var/lib/selinux/targeted/active/modules/100/ptchown/ /var/lib/selinux/targeted/active/modules/100/publicfile/ /var/lib/selinux/targeted/active/modules/100/pulseaudio/ /var/lib/selinux/targeted/active/modules/100/puppet/ /var/lib/selinux/targeted/active/modules/100/pwauth/ /var/lib/selinux/targeted/active/modules/100/qmail/ /var/lib/selinux/targeted/active/modules/100/qpid/ /var/lib/selinux/targeted/active/modules/100/quantum/ /var/lib/selinux/targeted/active/modules/100/quota/ /var/lib/selinux/targeted/active/modules/100/rabbitmq/ /var/lib/selinux/targeted/active/modules/100/radius/ /var/lib/selinux/targeted/active/modules/100/radvd/ /var/lib/selinux/targeted/active/modules/100/raid/ /var/lib/selinux/targeted/active/modules/100/rasdaemon/ /var/lib/selinux/targeted/active/modules/100/rdisc/ /var/lib/selinux/targeted/active/modules/100/readahead/ /var/lib/selinux/targeted/active/modules/100/realmd/ /var/lib/selinux/targeted/active/modules/100/redis/ /var/lib/selinux/targeted/active/modules/100/remotelogin/ /var/lib/selinux/targeted/active/modules/100/rhcs/ /var/lib/selinux/targeted/active/modules/100/rhev/ /var/lib/selinux/targeted/active/modules/100/rhgb/ /var/lib/selinux/targeted/active/modules/100/rhnsd/ /var/lib/selinux/targeted/active/modules/100/rhsmcertd/ /var/lib/selinux/targeted/active/modules/100/ricci/ /var/lib/selinux/targeted/active/modules/100/rkhunter/ /var/lib/selinux/targeted/active/modules/100/rkt/ /var/lib/selinux/targeted/active/modules/100/rlogin/ /var/lib/selinux/targeted/active/modules/100/rngd/ /var/lib/selinux/targeted/active/modules/100/rolekit/ /var/lib/selinux/targeted/active/modules/100/roundup/ /var/lib/selinux/targeted/active/modules/100/rpc/ /var/lib/selinux/targeted/active/modules/100/rpcbind/ /var/lib/selinux/targeted/active/modules/100/rpm/ /var/lib/selinux/targeted/active/modules/100/rrdcached/ /var/lib/selinux/targeted/active/modules/100/rshd/ /var/lib/selinux/targeted/active/modules/100/rssh/ /var/lib/selinux/targeted/active/modules/100/rsync/ /var/lib/selinux/targeted/active/modules/100/rtas/ /var/lib/selinux/targeted/active/modules/100/rtkit/ /var/lib/selinux/targeted/active/modules/100/rwho/ /var/lib/selinux/targeted/active/modules/100/samba/ /var/lib/selinux/targeted/active/modules/100/sambagui/ /var/lib/selinux/targeted/active/modules/100/sandboxX/ /var/lib/selinux/targeted/active/modules/100/sanlock/ /var/lib/selinux/targeted/active/modules/100/sasl/ /var/lib/selinux/targeted/active/modules/100/sbd/ /var/lib/selinux/targeted/active/modules/100/sblim/ /var/lib/selinux/targeted/active/modules/100/screen/ /var/lib/selinux/targeted/active/modules/100/secadm/ /var/lib/selinux/targeted/active/modules/100/sectoolm/ /var/lib/selinux/targeted/active/modules/100/selinuxutil/ /var/lib/selinux/targeted/active/modules/100/sendmail/ /var/lib/selinux/targeted/active/modules/100/sensord/ /var/lib/selinux/targeted/active/modules/100/setrans/ /var/lib/selinux/targeted/active/modules/100/setroubleshoot/ /var/lib/selinux/targeted/active/modules/100/seunshare/ /var/lib/selinux/targeted/active/modules/100/sge/ /var/lib/selinux/targeted/active/modules/100/shorewall/ /var/lib/selinux/targeted/active/modules/100/slocate/ /var/lib/selinux/targeted/active/modules/100/slpd/ /var/lib/selinux/targeted/active/modules/100/smartmon/ /var/lib/selinux/targeted/active/modules/100/smokeping/ /var/lib/selinux/targeted/active/modul� x�������������Ȓ������� X � '8 �
��������! �$ ���������������� �! �! �! � audit interface for kdumpctl_tmp_t
- Rename xodbc-connect port to xodbc_connect
- Label tcp port 6632 as xodbc-connect port. BZ (1179809)
- Label tcp port 6640 as ovsdb port. BZ (1179809) - Allow NetworkManager write to sysfs. BZ(1234086)
- Fix bogus line in logrotate.fc.
- Add dontaudit interface for kdumpctl_tmp_t
- Use userdom_rw_user_tmp_files() instead of userdom_rw_user_tmpfs_files() in gluster.te
- Add postgresql support for systemd unit files.
- Fix missing bracket
- Pull request by ssekidde. https://github.com/fedora-selinux/selinux-policy/pull/18
- Fixed obsoleted userdom_delete_user_tmpfs_files() inteface - Allow glusterd to interact with gluster tools running in a user domain
- rpm_transition_script() is called from rpm_run. Update cloud-init rules.
- Call rpm_transition_script() from rpm_run() interface.
- Allow radvd has setuid and it requires dac_override. BZ(1224403)
- Add glusterd_manage_lib_files() interface.
- Allow samba_t net_admin capability to make CIFS mount working.
- S30samba-start gluster hooks wants to search audit logs. Dontaudit it.
- Reflect logrotate change which moves /var/lib/logrotate.status to /var/lib/logrotate/logrotate.status. BZ(1228531)
- ntop reads /var/lib/ntop/macPrefix.db and it needs dac_override. It has setuid/setgid. BZ(1058822)
- Allow cloud-init to run rpm scriptlets to install packages. BZ(1227484)
- Allow nagios to generate charts.
- Allow glusterd to send generic signals to systemd_passwd_agent processes.
- Allow glusterd to run init scripts.
- Allow glusterd to execute /usr/sbin/xfs_dbin glusterd_t domain.
- Calling cron_system_entry() in pcp_domain_template needs to be a part of optional_policy block.
- Allow samba-net to access /var/lib/ctdbd dirs/files.
- Allow glusterd to send a signal to smbd.
- Make ctdbd as home manager to access also FUSE.
- Allow glusterd to use geo-replication gluster tool.
- Allow glusterd to execute ssh-keygen.
- Allow glusterd to interact with cluster services.
- Add rhcs_dbus_chat_cluster()
- systemd-logind accesses /dev/shm. BZ(1230443)
- Label gluster python hooks also as bin_t.
- Allow sshd to execute gnome-keyring if there is configured pam_gnome_keyring.so.
- Allow gnome-keyring executed by passwd to access /run/user/UID/keyring to change a password. - We need to restore contexts on /etc/passwd*,/etc/group*,/etc/*shadow* during install phase to get proper labeling for these files until selinux-policy pkgs are installed. BZ(1228489) - Add ipsec_rw_inherited_pipes() interface.
- Allow ibus-x11 running as xdm_t to connect uder session buses. We already allow to connect to userdomains over unix_stream_socket.
- Label /usr/libexec/Xorg.wrap as xserver_exec_t.
- Allow systemd-networkd to bind dhcpc ports if DHCP=yes in *.network conf file.
- Add fixes for selinux userspace moving the policy store to /var/lib/selinux.
- Remove optional else block for dhcp ping (needed by CIL)
- Label all gluster hooks in /var/lib/gluster as bin_t. They are not created on the fly.
- Access required to run with unconfine.pp disabled
- Fix selinux_search_fs() interface.
- Update selinux_search_fs(domain) rule to have ability to search /etc/selinuc/ to check if /etc/selinux/config exists.
- Add seutil_search_config() interface.
- Make ssh-keygen as nsswitch domain to access SSSD.
- Label ctdb events scripts as bin_t.
- Add support for /usr/sbin/lvmpolld.
- Allow gvfsd-fuse running as xdm_t to use /run/user/42/gvfs as mountpoint.
- Add support for ~/.local/share/networkmanagement/certificates and update filename transitions rules.
- Allow login_pgm domains to access kernel keyring for nsswitch domains.
- Allow hypervkvp to read /dev/urandom and read addition states/config files.
- Add cgdcbxd policy.
- Allow hypervkvp to execute arping in own domain and make it as nsswitch domain.
- Add labeling for pacemaker.log.
- Allow ntlm_auth running in winbind_helper_t to access /dev/urandom.
- Allow lsmd plugin to connect to tcp/5989 by default.
- Allow lsmd plugin to connect to tcp/5988 by default.
- Allow setuid/setgid for selinux_child.
� x�������������@�������� X � @'8 ����������������" �$ ���������������� " " " � Add labeling for /var/run/hplip - Fix POSTIN scriptlet - Merge rgmanger, corosync,pacemaker,aisexec policies to cluster_t in rhcs.pp - Fix authconfig.py labeling
- Make any domains that write homedir content do it correctly
- Allow glusterd to read/write anyhwere on the file system by default
- Be a little more liberal with the rsync log files
- Fix iscsi_admin interface
- Allow iscsid_t to read /dev/urand
- Fix up iscsi domain for use with unit files
- Add filename transition support for spamassassin policy
- Allow web plugins to use badly formated libraries
- Allow nmbd_t to create samba_var_t directories
- Add filename transition support for spamassassin policy
- Add filename transition support for tvtime
- Fix alsa_home_filetrans_alsa_home() interface
- Move all userdom_filetrans_home_content() calling out of booleans
- Allow logrotote to getattr on all file sytems
- Remove duplicate userdom_filetrans_home_content() calling
- Allow kadmind to read /etc/passwd
- Dontaudit append .xsession-errors file on ecryptfs for policykit-auth
- Allow antivirus domain to manage antivirus db links
- Allow logrotate to read /sys
- Allow mandb to setattr on man dirs
- Remove mozilla_plugin_enable_homedirs boolean
- Fix ftp_home_dir boolean
- homedir mozilla filetrans has been moved to userdom_home_manager
- homedir telepathy filetrans has been moved to userdom_home_manager
- Remove gnome_home_dir_filetrans() from gnome_role_gkeyringd()
- Might want to eventually write a daemon on fusefsd.
- Add policy fixes for sshd [net] child from plautrba@redhat.com
- Tor uses a new port
- Remove bin_t for authconfig.py
- Fix so only one call to userdom_home_file_trans
- Allow home_manager_types to create content with the correctl label
- Fix all domains that write data into the homedir to do it with the correct label
- Change the postgresql to use proper boolean names, which is causing httpd_t to
- not get access to postgresql_var_run_t
- Hostname needs to send syslog messages
- Localectl needs to be able to send dbus signals to users
- Make sure userdom_filetrans_type will create files/dirs with user_home_t labeling by default
- Allow user_home_manger domains to create spam* homedir content with correct labeling
- Allow user_home_manger domains to create HOMEDIR/.tvtime with correct labeling
- Add missing miscfiles_setattr_man_pages() interface and for now comment some rules for userdom_filetrans_type to make build process working
- Declare userdom_filetrans_type attribute
- userdom_manage_home_role() needs to be called withoout usertype attribute because of userdom_filetrans_type attribute
- fusefsd is mounding a fuse file system on /run/user/UID/gvfs - Man pages are now generated in the build process
- Allow cgred to list inotifyfs filesystem - Allow gluster to get attrs on all fs
- New access required for virt-sandbox
- Allow dnsmasq to execute bin_t
- Allow dnsmasq to create content in /var/run/NetworkManager
- Fix openshift_initrc_signal() interface
- Dontaudit openshift domains doing getattr on other domains
- Allow consolehelper domain to communicate with session bus
- Mock should not be transitioning to any other domains, we should keep mock_t as mock_t
- Update virt_qemu_ga_t policy
- Allow authconfig running from realmd to restart oddjob service
- Add systemd support for oddjob
- Add initial policy for realmd_consolehelper_t which if for authconfig executed by realmd
- Add labeling for gnashpluginrc
- Allow chrome_nacl to execute /dev/zero
- Allow condor domains to read /proc
- mozilla_plugin_t will getattr on /core if firefox crashes
- Allow condor domains to read /etc/passwd
- Allow dnsmasq to execute shell scripts, openstack requires this access
- Fix glusterd labeling
- Allow virtd_t to interact with the socket type
- Allow nmbd_t to override dac if you turned on sharing all files
- Allow tuned to created kobject_uevent socket
- Allow guest user to run fusermount
- Allow openshift to read /proc and locale
- Allow realmd to dbus chat with rpm
- Add new interface for virt
- Remove depracated interfaces
- � x��������������q������� X � �&8 � ������! �$ ] ���������������� �! �! �! � ytabs BZ(1573945)
- Allow certmonger to geattr of filesystems BZ(1578755)
- Allow hypervvssd_t domain to read fixed disk devices
- Allow several domains to manage ecryptfs_t filesystem
- Allow userdom_use_user_ttys for loadkeys_t domain
- Add dac_override capability to cachefiles_kernel_t domain
- Allow blueman to execute ldconfig BZ(1577581)
- Allow gpg_pinentry_t domain to read state of gpg_t processes
- Add dac_override capability to cgconfig_t domain BZ(1574649)
- Add dac_override to glusterd_t domain BZ(1578501)
- Allow fsdaemon_t to create own fsdaemon_var_lib_t dirs BZ(1569724)
- Allow plymouth_t domain to read/write systemd sockets BZ(1578882)
- Allow use of U2F Yubikey as authentication for a sudo command BZ(1578915)
- Append map permission to apache_read_modules() interface
- Allow certwatch_t domain to getattr of extended attributes fs_t filesystem
- Add new interface: dirsrv_noatsecure()
- Add dac_override capability to remote_login_t domain
- Allow chrome_sandbox_t to mmap tmp files
- Update ulogd SELinux security policy
- Allow sysadm_u use xdm
- Allow xdm_t domain to listen ofor unix dgram sockets BZ(1581495)
- Add interface ssh_read_state()
- Fix typo in sysnetwork.if file
- Update dev_map_xserver_misc interface to allo mmaping char devices instead of files
- Allow noatsecure permission for all domain transitions from systemd.
- Allow systemd to read tangd db files
- Fix typo in ssh.if file
- Allow xdm_t domain to mmap xserver_misc_device_t files
- Allow xdm_t domain to execute systemd-coredump binary
- Add bridge_socket, dccp_socket, ib_socket and mpls_socket to socket_class_set
- Improve modutils_domtrans_insmod() interface to mmap insmod_exec_t binaries
- Improve iptables_domtrans() interface to allow mmaping iptables_exec_t binary
- Improve auth_domtrans_login_programinterface to allow also mmap login_exec_t binaries
- Improve auth_domtrans_chk_passwd() interface to allow also mmaping chkpwd_exec_t binaries.
- Allow mmap dhcpc_exec_t binaries in sysnet_domtrans_dhcpc interface
- Improve running xorg with proper SELinux domain even if systemd security feature NoNewPrivileges is used
- Associate sysctl_vm_overcommit_t with fs_t
- Allow systemd creating bluetooth sockets
- Allow ssh client to read network sysctl BZ(1574170)
- Allow systemd_resolved_t and systemd_networkd_t to read dbus pid files
- Allow sysadm user to sys_ptrace cap_userns
- Allow udev execute /usr/libexec/gdm-disable-wayland in xdm_t domain which allows create /run/gdm/custom.conf with proper xdm_var_run_t label.
- Allow ssh client to read network state BZ(1574174)
- Allow ssh basic client to read/write to tun tap devices BZ(1574184)
- Allow ssh basic client to create tun sockets BZ(1574186)
- Disable secure mode environment cleansing for dirsrv_t - Disable secure mode environment cleansing for dirsrv_t
- - Allow udev execute /usr/libexec/gdm-disable-wayland in xdm_t domain which allows create /run/gdm/custom.conf with proper xdm_var_run_t label. - Add dac_override capability to remote_login_t domain
- Allow chrome_sandbox_t to mmap tmp files
- Update ulogd SELinux security policy
- Allow rhsmcertd_t domain send signull to apache processes
- Allow systemd socket activation for modemmanager
- Allow geoclue to dbus chat with systemd
- Fix file contexts on conntrackd policy
- Temporary fix for varnish and apache adding capability for DAC_OVERRIDE
- Allow lsmd_plugin_t domain to getattr lsm_t unix stream sockets
- Add label for /usr/sbin/pacemaker-remoted to have cluster_exec_t
- Allow nscd_t domain to be system dbusd client
- Allow abrt_t domain to read sysctl
- Add dac_read_search capability for tangd
- Allow systemd socket activation for rshd domain
- Add label for /usr/libexec/cyrus-imapd/master as cyrus_exec_t to have proper SELinux domain transition from init_t to cyrus_t
- Allow kdump_t domain to map /boot files
- Allow conntrackd_t domain to send msgs to syslog
- Label /usr/sbin/nhrpd and /usr/sbin/pimd binaries as zebra_exec_t
- Allow swnserve_t domain to stream connect to sasl domain
- Allow smbcontrol_t� x�������������0a������� X � �&8 �������� �������! �$ ���������������� �! �! �! � 7e7c5722aa11264a683f461d8c3dc 833bb5ac3dd28c5e583c13139226e5b29b4b6288d3f3cf85f9578abc839e1bd2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6b3d9a1cc957957cd917da31eccd5bd1c19ac36e99fed8271d96a84ce5ee240d 50dad05352457959811345c31fda92d18dc6dd4eeb2bbaa633ac2b29ec3caa93 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 26003d7c53dc76577a59c58aa71f3ac11041be88b30e0afb8400c708cdc7af6c 84490b06c085dfb8f05427df4f08747fb6d9e43bb0d84f910717198b286cdcb2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b10e6be0fbfc7503d22a131a4725b0f2602ab9fc9acc13d56dd1d71bb86c132e 5e8cfbb39e7ebeaf743a2a2026c2876314c877dbd3f7b0f77b9f3ce60544b1e6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a113f1825e798cc0b4f46545544bbb5a0e8c7895e61ade1697c1842a2e73f367 0d71aa389431c8bc7b289c09d2e407e4824803b92ac06ec3118fca2be3b2d02e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a7ff48e05a15904e58b088ad156862c58685891e2c9647f4fddc1b2f9cc90447 ab5284deb7884b557e4af77867a74995ef9cb5fa589d88610a60567a18d26ad8 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0d65b115eaa4d5d553f9797fdeaa86ee8ca14e28fbc9d84d655873331393a1f1 d919cbbf130066a3778082fc9c8d5183e4cbb43db00d26bb8ef0ac71c1e5079d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0c0ead4394eda96e3b15eb596e355558b8a53feed0b2d5389407ac692952cb42 4717b931c4231ffef983cdcbd2cedbb505af01bc16fbf13a0684e27c5ec0be81 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6518d937413d40cd34a5329a43109f71a076c0878bd3538e2a78e019b08ec999 1164bafc91f84057c47ed392a53fa14b0ff78a7c6442b27f39dda94a2d68273c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 13c9732a39fcd812c676aaab8aa194ec62d3a19ea7de95f9d8534366704c260c c5d8dbefa8d9fc64c9875db08a4c9fd5a0733ce198cad6354d87d213372d2cfb d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 13047958c8d238effa002051098d7a2952251de6bcf0fbffcaf304f8c8555d19 463093c63653d60407a01d053e131294759c585317d999e2e74de0e7156f653a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f591ead48b59f89a872191d00c8927fecdf26620c80071259a20bb01b0061054 ef88740507668c31dbefa0e86a7c0360c1d5fdbb5df25836e854f4f0d1c1c6dd d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8eb2f10bbab70ba12adc4f72bab2919af26bcab71561cac32037da08a0cba4ac 1a0ccd1d716546b44e199b2500d0448bf2d3c191fbba7bb73baf581ca0bbbb93 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e cced5db13a6083925d071ea29d9caa5e1038baaf1abd4472a8e7f8ba4fda9582 a4f9d5635fc807174ff7f012db6df9e5cf1844b0c76b00d9fd623a5c4d161d67 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 90bea19ff27b872a83ae0b1df47e75262693d7492ec271d21ce22904852056f9 50fda34dcf0453b1f8c1d10bc06092715a6d0e5b3d82fb07cd846fc590be6755 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d02866df36e836fb971bfb555fa5e57f4da46db0cbaefdfb55f2a3564d0048cf f425520e0ee241ca7b34ced647027b816008039e9dcae540ba700ad6c33748dc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bcfb51a6726e4c0c6a3d6e60dd69894ed12fe9581fa222e712bf0baf603e00c8 8979a12e30171d6ecf50fe8ea673736cbb0b4e0f0d5b7ee835bebc52f9c54881 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ca6cc86e6315ff9a996af8da1b7d0752ce5ec39eb8600a879c082695016811a2 5f92aa99c8b959e3528ddc0b5b477aea8b4fde5e839b6fc7a4fc1725074e78cf d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d66f028fd9108982e67ee98ff654ac8b4ba6fc2e85e46cb415e4e80e36b15b78 4f1bee356d039b720a5056af5bd46f12ffd041b59dce399a34293780e63d24cb d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 21696e0f675e1bdc350b2db72e7c6a2a10fc14c7a25363b36fc91f99e21359db bd6fbcde7e49139e2aef727510699b3da0788fb3f9b87c60fd40bd18094ea889 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1b6b29eebdf72ba24e9a0b8685eb4679ecd28609ed2057663853670278b3629f 11c1f4c08f105e43efbb69a34d1ddef1359221403dba5d6f52a5915fee3a281c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3� x��������������P������� X � �&8 �� `{������t! �$ d ���������������� t! s! u! � b8a30bbca4f545dab0d63c93031 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 616fb7d60e5c0ee6b125a250e0997a13595dd7f41474bc3614927e4c93953d92 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 236b93023b017a61c135365c3df88b639b1f21bec48232adce43f2daa4728094 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7a9dc67498db602e80c22730c69466d2e26912e81960bd827b6249c899f67409 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4d770fbe4df8d436328e3837a2400ae6d447ebc6464f92bd38da61dec2466709 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 112528331627b9d5a85807f29feac215374d0a012ac4804dc6cfdf848ac53e20 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 644d5cda3604d39db09a80c1c7e0b3aa766b1c40914b47f70fd4ab4d8a942d62 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7893a826bb23848d1575dd25babfa3f54cda427248b396bf204861131d57a961 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2a439b7e2413410a123af449459f7a6882c5f401c826ffa8e72bd29ac1a97f5b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 910613502a8a1d558b68ebb05e4e9b79ab3a85e5f12b250dedfd6e75b2ade512 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 02bd089e7ae98e86181155675a82d55f274d215c5ec208f778c0598e10abf62c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a10211eee15c21589eab4ea944767b830c086f453cd779487d1b806ced6fa664 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d0da36518a76c536637f7a2e88f0b515a80085923c53d4142652a175db6565bb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ebd6aa7129af5c5e1b16591a56a3fb10bf90403d713ea65871608d670d9ae890 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4bac3dc61814bc230c5fc3fb786f7f93ec7940863e7fa03b43aea44b54cf9d82 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c53ba54a64a080e4bf32aa9636ddd525ce51506bf0304f6329c3ace1384ae775 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e6c11e83e67187dd78ea5c2d042fe8a31a2c5f5586287833fdfa4dfad388b236 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf fa4dacb825e630bdb309f0d5af13550d9a70ea0cafb473dbce4e623f09d4277c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 57930a9681852228722a777fec3eaa8e2c611a5a86ac98b36bafcfd4c2f53967 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 24303c49014195b267643f2eee5673b835457dc74396d1e64f8fff8ab034590a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1e0d2975da706b796fb40718e2d9ae26798f5b0640dcc83688c9404b9fca874f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 70c85b2b6aeeb935e6474446edf6141fa29cd1d40de1117ea0c5220a547aec06 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c9ed5d26dbfb39ec2cbeb2190ddbf5f36c77807549ad1d7233214fc56d957344 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a21759021761317eecb6f097405236332bafebf244e104ae4e5886d62f78f3f7 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6d414494a3c8f990400f9e731a50bb5452c3fe818fa53577a642eb59674773bf 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6f9e538139bd775b99f84fb19e1d10012f7c91c6e4e28129f2a7cb1166e73aa3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b172fbd5436df1c213de3c99eb1f13a2671417306ed6aba14c420ee270e1d652 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e75c2bfb7a5df265a2aa3d9ca91173c710b607ce38168593b6f2baf37c843c2c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf cc0e0c392b0764fa32b82c12043274eaae3ccec82ba657fb855a800bbdf7dd71 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 9513616a205078c92e1cf865011cdfe783dc73f0a9f59e1856d581a4b38bca1e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 52f5be88e75274572e7004d901fec17f65874b73b0d5854e864eaf7c844e7147 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf dd3dac98d827edf35d224ee4898731570c5c749c4944eb� x������������� @������� X � �%8 ��������H�
k �$ ���������������� k k k � c68d5686cb9a6004c553b7c14a0db87648c e8c815f30e2a1e92a099baeabb83d9d81e69ea3acb2731b56825392c34bc9c99 37515f78be386f2edad4746f2947c928f480728c56d9a94e25302ebbdaef3c96 26c909942e8a6bc82725e9c402f393aed9e32d94190257ddf71e1b5f819b4e5e 8afae3abf006beb39fd9d4d4bae38745cdf08a91e6217ddf25833c8d4b04751b 603e58ab31ed75b7e0ab09a2ca94e99955f7fbc63310466321ce27c906227eb4 e5fb27ce00678527937c13adced6c3854a1f0b367bdcd4d6e40bc1ec3482dfa2 c561df72d5b987ccbd022059fdb1bcb6899c3e94b403997a0576ef3e1afb0f94 05291a7d38bb1d0da1ed01c09fe85fa2b1f4d5bc708e06bb930efec672db08d5 09a584495fe7ab531727890332993b426667218a1b1c0345df2af0b55572bc13 81e60e8a8d99b28bc723c14b156d7f7fc8ff663d98a857a3f5aea90431f577e3 dcd64d184855b245e5c7acf21910a0aaca590f1faf094e400da5d30551d11eb0 9c487a607198358ea0c6895dbc7d6d2f10cac78e4341a80be1e44f9dfdffaabf 542742a4736b2055c40186ef35d6fa2b11205667edf78edb7935c61eb5ff8a00 f0dd2c5850968b76bad25ddaa09ec4314e4fbc9e7e82ec631acbdf46df92c338 c0608830973c4e1a71219e477b470b7ed77b211dc870410776ec13a1b7bb759a 3b3365afc4f4a2bbc711c2eaacce05f99ae3cc34db1a391c5249213d905a159d 8c44b91c2eb6e509905e1becec6b98f8ac006709bfa5d85d86e34a46eb9013cc 7125083b8096dd146e6498a61f38bf3bc7215c1c9237e92469550bb355545bab 8155ea909015a2be47270ed1a1c0389ac4adbd0857420065086c05923f53764b 3db5ded9d98a694e8c7196a06690b2e816ec6bb82689940d281f6504533f37e1 7d94a894bed0b9490967e8dbcd53725c0f2af9559e58d4b19bd14d3707974ee3 d20a8fe1fadfc389db0a6dbcfa72009d5362a69a0a954dce3ccde78399efe773 2dd69e3bb41c334b106319352a640bdb098c40160c45ecfefaf219436c5261e2 6cc0b123a6a96108fc1c13535d0b74d9540437d0c51e0cbcaf000273f1f85566 d6299fbc46fc57e7d14635cd5cf69125710ed021ab7305586c84644a03a39f8e 63619500aa6095b881f62d7a255bd31eeeab9a829cf34ec40e20a62729323efc 18c79aff476a848d714bdf6d6680f120b16f957663b57dc90fc0ab076eda93a8 988882d92abbed436bc19c276ea6650d8087a55fa6f656f0c3196104239e464c 0e25bb6feea22eaf5cc2a7100b21ade79b8be003abc0b61f6f200c60e38adbfa 821f1d77c5358779d41c06b4dcb0ba204503ad85a80ee43e465cbc4f298d6b2a e724615727de0765f96c05dc1a1187aaf4c2c1c0eddcce127806c373c96e1c87 e9a310a50b8a14aeea4bde3e8b623506631de37a7a37dc422757f3275fc93755 0909a593d7f6dfae1ca5cef6cf1e62b6a67aaa586e50f6215f3622a47be854d4 e7bdda3f42eb0633850ed150fef0a0cf6193cbba8fa740e7505925424a595566 08a01b91752dc9dda93eb0f8c571e2c57fbb67b9768f5c23ad180fd0894e97a3 d96a2452da0d933941273d11d1048ea525f033306892835b0a7a0999b13853aa 7321a39e4baa04e5d730bfe4e52d00ce82f2ae62dbd8292a4a6a3073b6ae3593 8d903d5048221c66a2d9e43e0677bf33d34b1e393143a0e46ebe00674663e262 07ff100385f6c91d9d9de7ad235fde9c41522f928ca1b861b0c12017a887353b faa85379e8a47f0b5635d7fa2802f0c351224b88735dc9217e87b51a34afbf7f 61a1396b112b06e77aeca29e66bff44502dc4c1ce475ca0132d597599b917c45 bde71fc31de5351d5d8a60208aed9d9b8c3c6a21a7d4f519be6bf99cb78138f6 7b5da304b7feb60f7f3de1958da0d776ac877139984e2409fd0e5a35a6d10df1 125eee5e2fe7803510a8298e56f7d1aaac209a69a8bfff9620505d86fc3ef5bd 77ed15dcb81c6f5a6680864917ca2d00225d2d1e1e228f05350a0e94572f5799 e9ba2b87a976a4d0401a4b48a70a6c1fa0b67537eae026963fa25f8fc881878f e1e04f5511e386c7bf0c8bf99779653338818bbe4b28c8fa27b366a62d4cf65e e6af7fca0769f4555a8658f28bffa8311e0ee613fe41a57c3142ca0df11a4ab0 341ce6a98a66f0a4e80eedf2bc7e0ab781a965fbb15d1d41511ac43e51c7d644 a032a706b165a0e188c01eb88f41e231162b3db2efb94030e82a9c4573d06d71 696a7affeff1760c70247545a1ac963ae8d1b874a31e707f96dd606f76220512 716d8459074e2a082d65a28192b32eddbfd7587348372395b1c283a723ae4c18 762bed801022105fadcf6402f07b5b7669245cf8da4e6fe3b7bdc4fe9e3d609f 4006a96f6669481cb2439885450452aae5560c7c07b173b6b1b709cf3a59d2e4 e7218cc8cc969af256ea307920bcf936860aede75734c83319a2f05c18ea2a54 0b04a3a8802b697326aa3848677135f21c360092bba8d1e75c39c0710f38bb84 88b5f045a108435977c146fa1ec49dca5f2724b2a65e4d76dee0a312c5c421ad 510d11a13f1d59c5d79fcb694f433b34629d71180b5a78297b3ad224a66c1e1a 8ee8360c2595abf101e5dcec1ce82995ad1eb7afd2c7269dc9883823e87be12c ea07d8bdb631602f49feb304ad69344a71f32acab4265a17af7ce9045243ce19 4a3ea57a73e97d999f9bedb59472af4f04ce62db06be3c2df2afe31426770103 ed9a5942030346cc1624bc18b3db3bc51274674a3c2688b9681d31b65622df3f c81� x��������������/������� X � '8 ��������H� �! �$ L ���������������� �! �! �! � types
- Make working cracklib_password_check for MariaDB service
- Label 20514 tcp/udp ports as syslogd_port_t Label 10514 tcp/udp portas as syslog_tls_port_t BZ(1410505) -Allow thumb domain sendto via dgram sockets. BZ(1398813)
- Add condor_procd_t domain sys_ptrace cap_userns BZ(1411077)
- Allow cobbler domain to create netlink_audit sockets BZ(1384600)
- Allow networkmanager to manage networkmanager_var_lib_t lnk files BZ(1408626)
- Add dhcpd_t domain fowner capability BZ(1409963)
- Allow thumb to create netlink_kobject_uevent sockets. BZ(1410942)
- Fix broken interfaces
- Allow setfiles_t domain rw inherited kdumpctl tmp pipes BZ(1356456)
- Allow user_t run systemctl --user BZ(1401625) - Add tlp_var_lib_t label for /var/lib/tlp directory BZ(1409977)
- Allow tlp_t domain to read proc_net_t BZ(1403487)
- Merge pull request #179 from rhatdan/virt1
- Allow tlp_t domain to read/write cpu microcode BZ(1403103)
- Allow virt domain to use interited virtlogd domains fifo_file
- Fixes for containers
- Allow glusterd_t to bind on glusterd_port_t udp ports.
- Update ctdbd_t policy to reflect all changes.
- Allow ctdbd_t domain transition to rpcd_t - Allow pptp_t to read /dev/random BZ(1404248)
- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
- Allow systemd to stop glusterd_t domains.
- Merge branch 'rawhide-base' of github.com:fedora-selinux/selinux-policy into rawhide-base
- Label /usr/sbin/sln as ldconfig_exec_t BZ(1378323)
- Revert "Allow an domain that has an entrypoint from a type to be allowed to execute the entrypoint without a transition, I can see no case where this is a bad thing, and elminiates a whole class of AVCs." - Label /usr/bin/rpcbind as rpcbind_exec_t
- Dontaudit mozilla plugin rawip socket creation. BZ(1275961)
- Merge pull request #174 from rhatdan/netlink - Label /usr/bin/rpcbind as rpcbind_exec_t. Label /usr/lib/systemd/systemd/rpcbind.service
- Allot tlp domain to create unix_dgram sockets BZ(1401233)
- Allow antivirus domain to create lnk_files in /tmp
- Allow cupsd_t to create lnk_files in /tmp. BZ(1401634)
- Allow svnserve_t domain to read /dev/random BZ(1401827)
- Allow lircd to use nsswitch. BZ(1401375)
- Allow hostname_t domain to manage cluster_tmp_t files - Fix some boolean descriptions.
- Add fwupd_dbus_chat() interface
- Allow tgtd_t domain wake_alarm
- Merge pull request #172 from vinzent/allow_puppetagent_timedated
- Dontaudit logrotate_t to getattr nsfs_t BZ(1399081)
- Allow systemd_machined_t to start unit files labeled as init_var_run_t
- Add init_manage_config_transient_files() interface
- In Atomic /usr/local is a soft symlink to /var/usrlocal, so the default policy to apply bin_t on /usr/...bin doesn't work and binaries dumped here get mislabeled as var_t.
- Allow systemd to raise rlimit to all domains.BZ(1365435)
- Add interface domain_setrlimit_all_domains() interface
- Allow staff_t user to chat with fwupd_t domain via dbus
- Update logging_create_devlog_dev() interface to allow calling domain create also sock_file dev-log. BZ(1393774)
- Allow systemd-networkd to read network state BZ(1400016)
- Allow systemd-resolved bind to dns port. BZ(1400023)
- Allow systemd create /dev/log in own mount-namespace. BZ(1383867)
- Add interface fs_dontaudit_getattr_nsfs_files()
- Label /usr/lib/systemd/resolv.conf as lib_t to allow all domains read this file. BZ(1398853) - Dontaudit logrotate_t to getattr nsfs_t BZ(1399081)
- Allow pmie daemon to send signal pcmd daemon BZ(1398078)
- Allow spamd_t to manage /var/spool/mail. BZ(1398437)
- Label /run/rpc.statd.lock as rpcd_lock_t and allow rpcd_t domain to manage it. BZ(1397254)
- Merge pull request #171 from t-woerner/rawhide-contrib
- Allow firewalld to getattr open search read modules_object_t:dir
- Allow systemd create /dev/log in own mount-namespace. BZ(1383867)
- Add interface fs_dontaudit_getattr_nsfs_files()
- Label /usr/lib/systemd/resolv.conf as lib_t to allow all domains read this file. BZ(1398853)
- Dontaudit systemd_journal sys_ptrace userns capability. BZ(1374187)� x������������� ������� X � �&8 ���������E �! �$ ���������������� �! �! �! � f7ceaa34e 2df28816f6279358dd67ecdb343d30f593bc63db907c90cdcbbd83233d54b168 576e76a0dc751a0f012accc1ba70737ff4d46a3aa1f912368dd0aa00d8f4a58b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3d59293a957fbee9c6037922516e18822b10ff755501d901590de0f0108f2200 483974e56f960c9ddd36f67f5fae67baa5a58ea6cf49ed68986c78156ba030df d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ff1b06ab48ccc2b75d6298c9c7e3e8306a0830b4f1f54eb09758754d9a52b372 650285edbb323b7c997139da6849d330e0b850bb8ca67fc66e115f2b4eb9d303 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7b32e4e34e5c9fa1c259299970e696cf867011409b4518790858eaee27ed0e45 8ec46aa5eb61771a99245f4e17b8207dc6abc70db372239faaab064adc013e0c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 48caeb464c4b17bfc9fb241fe384b99d30ab17066f0eed71aa744c6253993b7d 18d6263fa1a25bb7a458531cbc35175319c5b138e4f2dcd5d596bc56f976ec1f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c33eae384aae24378df28a9e0b738b3d34134480646d9a9978d4423b8408199f a37a6e9eabdb24f42d2df08c5f0ca527a8f7ea16bad46972351367ddfc6dd593 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ee088a483edfa1835b5cec5f02351735a02fd89271b72ec16d28a287068e1336 fa09b1706d857af7f97658ac4798bd2ff1fa4fe64729799df8f9df0b3cc9b443 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e be4b867d246cacfa10bc8918b6550a5c1d234435c0fa2c71a8a923bb8735e7bd 0090d9924db6cebed77d396ba0b8ae0067bfc737e1e5aa70d078d4c4d7981569 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e fa4ef980af05b2f402f07716539546790ff137463269bc7ea426b64f7770a527 3da9686c0a6bf5f769e58a83c2fbbc23630ba773c52c493094c7a06b48998b5d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0a5c0545d0b346fa1f6c298e875f89f26374961d061c323536358900ee614589 bdd5ecbef8e4d4a213cae71989932544dbbb5d381c95e4cc2f8c7321b0705c78 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e efeb6efb1f3c4e8bf8950dde2e63340bfaa2ab7d3cf2a9a3003b352746ad45d8 1f4b15aecd9877f8c49065e628caed165ccd99f69d988cba1d7be8ed14d0b60c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bbe93e905c67ed35192c51d6526973044e1958d38bf848eaf5edc2c8fe6b70b2 609f9e9b004f49ce643d2a0201a1c70f76f150ce59832288b171db478cb3b182 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 956031f3b222d6dc59b5274bbeb3ae272d63d893e8ab4c9ab23f8816201e9b20 aec19958dd70f46e51f0747a0504a56334a3ef2ca346044559709a8baf38a395 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 000aad5dd07344e529830a590fc16677d18cca67fbd4fb68362f18f3a5e19794 46c6062bb1f8da8eda85b278e6cdebfb8b85b059b24ce95302ae5987a5f9ddfa d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6582f60813db6326e48b62f1e136445d652e6aaf33e8d2f5a2f14edb678f8aaf ae6e311d87b00db82b0edb9f52f34b1beb4537ad8324d2b71857f07ef90e5db2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d1cb4e6c1d7ea5ff107ca4bed9d5e58044be5b0542dc1d6c8072668786efa998 c9e263d26023bcf46ea8a31e991c2c2b2fb71ef4a0fa615d3305520a87e193cc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e5fff08805f2192507cddaac65482aaeacea7034c506e8c7953e7ca37baa2825 c83c9c87b4ec10689bc3fb16ac805fa6a19318298a4e7cb099994e2dc339cd57 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 71ce0ee63436b36a7cb8cb02236c56e97626ac79963eeeebb00d4ee5be242e41 ef173e50caa292117d9faa09da8daf926aecca4b80df1968941fef15ab84e1a1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 03be2bfe2b725fe14a99bd522a271274ce7eba25c8b77eb3b8e64476290b9036 48f4fdef5a26e74724e2b765073e050f179f4876119722d39605bc16dd7ea543 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ed1d53cbde51bfd88ea84ac7ae88cca263b3e49e48804cfdf456c1a83e0534cc 9f32a8d60561b78f09de80a3d47c7150a92b8b55c689cad9678cf395353ed091 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7bffd31464eb1b6d10a837729aa12826ed13027c86e853f4af5fc9e70861a286 324469c79a79daf840fa8847cf9830b35437b3dd86ca07c087688f7af8ed05c7 d53315bea� x��������������������� X � s'8 ��������(������G" �$ W ���������������� G" F" H" � ! ! " " # # $ $ % % & & ' ' ( ( ) ) * * + + , , - - . . / / 0 0 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 9 9 : : ; ; < < = = > > ? ? @ @ A A B B C C D D E E F F G G H H I I J J K K L L M M N N O O P P Q Q R R S S T T U U V V W W X X Y Y Z Z [ [ \ \ ] ] ^ ^ _ _ ` ` a a b b c c d d e e f f g g h h i i j j k k l l m m n n o o p p q q r r s s t t u u v v w w x x y y z z { { | | } } ~ ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! ! " " # # $ $ % % & & ' ' ( ( ) ) * * + + , , - - . . / / 0 0 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 9 9 : : ; ; < < = = > > ? ? @ @ A A B B C C D D E E F F G G H H I I J J K K L L M M N N O O P P Q Q R R S S T T U U V V W W X X Y Y Z Z [ [ \ \ ] ] ^ ^ _ _ ` ` a a b b c c d d e� x������������� �������� X � �(8 0R������������W �$ G ���������������� W V X � ������������������������������������������almalinux-release almalinux-release(upstream) almalinux-release(x86-64) almalinux-release-eula base-module(platform:el8) centos-release centos-release(upstream) centos-release-eula config(almalinux-release) redhat-release redhat-release-eula system-release system-release(releasever)
config(almalinux-release) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 8.8-1.el8 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 dcp@cx�@ck�@ch�@b�@b�1@bzS�bE��a�@a^�@a�@`�O@`y|@`[)�`#�`U�Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-1 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-3 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-2 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-1 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-2 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-1 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.1 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.0 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1.1 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-3 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-2 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-1 Andrei Lukoshko <alukoshko@almalinux.org> - 8.3-4 Andrei Lukoshko <alukoshko@cloudlinux.com> - 8.3-3 Anatholy Scryabin <ascryabin@cloudlinux.com> - 8.3-2 - 8.8 stable release - Fixed ownership of dirs (albz#328) - Add stream dnf variable for CentOS SIG repos compatibility - 8.7 stable release
- Add SAP and SAPHANA repos - Add more compatibility variables to /etc/os-release - Bump release - 8.6 stable release - 8.6 beta release
- Add RT and NFV repos for x86_64 - Add RS repo - 8.5 beta release - disable fastestmirror dnf plugin for all repos - 8.4 stable release
- Disable PowerTools repo by default and move it to separate file - 8.4 beta release - 8.3 stable release - Switch repos to mirrorlists and enable fastestmirror plugin
- Use full release version for ALMALINUX_MANTISBT_PROJECT_VERSION
- Add HighAvailability repo - Initial build for AlmaLinux
! 8.8-1.el8 8.8 8.8-1.el8 8.8-1.el8 8.8 8.8-1.el8 8.8-0.8 8.8-0.8 8
almalinux-release almalinux-release-upstream centos-release contentdir infra stream issue issue.net os-release RPM-GPG-KEY-AlmaLinux redhat-release macros.dist system-release system-release-cpe almalinux-ha.repo almalinux-nfv.repo almalinux-plus.repo almalinux-powertools.repo almalinux-resilientstorage.repo almalinux-rt.repo almalinux-sap.repo almalinux-saphana.repo almalinux.repo os-release 85-display-manager.preset 90-default.preset 99-default-disable.preset almalinux-release EULA almalinux-release GPL redhat-release redhat-release /etc/ /etc/dnf/vars/ /etc/pki/rpm-gpg/ /etc/rpm/ /etc/yum.repos.d/ /usr/lib/ /usr/lib/systemd/system-preset/ /usr/share/ /usr/share/almalinux-release/ /usr/share/doc/ /usr/share/doc/almalinux-release/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ASCII text directory utf-8 90ba77� x�������������x������ X � X&8 )�������t � �$ ���������������� � � � G 7H ? 3P d � � � � � H � � � � � � � � � � � � � F � R � g � m t �
< � y
p � j � � �
� ( � 8
6 9
� 6 : � 6 G 'd H '� I (, X (H Y (d \ (� ] (� ^ *� b +� d -1 e -6 f -9 l -; t -T u -� v . w 14 x 1� y 1� A � 3 � 3 � 3
� 3L 3` 3d � 5 5 �
6� 6� � 7 7 7< g 7@ h 7D C libevent 2.1.8 5.el8 Abstract asynchronous event notification library The libevent API provides a mechanism to execute a callback function
when a specific event occurs on a file descriptor or after a timeout
has been reached. libevent is meant to replace the asynchronous event
loop found in event driven network servers. An application just needs
to call event_dispatch() and can then add or remove events dynamically
without having to change the event loop. ]� mbuild.cloudlinux.com
nCloudLinux CloudLinux BSD and ISC CloudLinux Packaging Team <packager@cloudlinux.com> Unspecified http://libevent.org/ linux x86_64 3 0 1 4 + � � M� pP .h �6 �A�A�A�A�A�A�������������A큤A큤 ]� l]� l]� l]� l]� l]� l]� l]� l]� l]� l]� l]� k]� l]� k]� l]� k]� l]� k]� l]� k]� l]� lX�(.]� lW� 3 c03017efaf2d3688c73b644cadac7b00b56943ea3ff40e170ce947303c555a48 e6cf51bb19a3e1d9f2b150b3e0d3043558e1fc09a7422737a973722c583ed8b2 240997006a2800643e9f25fe9369f8d1f30fb5753e848a2f610e35830df95df5 c814bdfd9d00365f87dd9545fc5beb41cac93236ec894ed061b23efc4271f271 9991b589cfc436decbd2e06cf8e2c70b61d47de968f28bdb80913c0e4ce39d61 fb338bc673f3644128e9318e2ac708d6bc2f99c84c816d1193d04792e2e09400 ff02effc9b331edcdac387d198691bfa3e575e7d244ad10cb826aa51ef085670 ../../../../usr/lib64/libevent_openssl-2.1.so.6.0.2 ../../../../usr/lib64/libevent_core-2.1.so.6.0.2 ../../../../usr/lib64/libevent_extra-2.1.so.6.0.2 ../../../../usr/lib64/libevent_pthreads-2.1.so.6.0.2 ../../../../usr/lib64/libevent-2.1.so.6.0.2 libevent-2.1.so.6.0.2 libevent_core-2.1.so.6.0.2 libevent_extra-2.1.so.6.0.2 libevent_openssl-2.1.so.6.0.2 libevent_pthreads-2.1.so.6.0.2 �root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root libevent-2.1.8-5.el8.src.rpm ������������������������������������������������������������������������������������ ���� ����libevent libevent(x86-64) libevent-2.1.so.6()(64bit) libevent_core-2.1.so.6()(64bit) libevent_extra-2.1.so.6()(64bit) libevent_openssl-2.1.so.6()(64bit) libevent_pthreads-2.1.so.6()(64bit) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ libc.so.6()(64bit) libc.so.6(GLIBC_2.10)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLI� x��������������������� X � _'8 �� �����3" �$ # ���������������� 3" 2" 4" � roc
- Allow firewallgui to sys_rawio which seems to be required to setup masqerading
- Allow all domains to search through default_t directories, in order to find differnet labels. For example people serring up /foo/bar to be share via samba.
- Add label for /var/log/slim.log - Pull in cleanups from dgrift
- Allow mozilla_plugin_t to execute mozilla_home_t
- Allow rpc.quota to do quotamod - Cleanup policy via dgrift
- Allow dovecot_deliver to append to inherited log files
- Lots of fixes for consolehelper - Fix up Xguest policy - Add vnstat policy
- allow libvirt to send audit messages
- Allow chrome-sandbox to search nfs_t - Update to upstream - Add the ability to send audit messages to confined admin policies
- Remove permissive domain from cmirrord and dontaudit sys_tty_config
- Split out unconfined_domain() calls from other unconfined_ calls so we can d
- virt needs to be able to read processes to clearance for MLS - Allow all domains that can use cgroups to search tmpfs_t directory
- Allow init to send audit messages - Update to upstream - Allow mdadm_t to create files and sock files in /dev/md/ - Add policy for ajaxterm - Handle /var/db/sudo
- Allow pulseaudio to read alsa config
- Allow init to send initrc_t dbus messages Allow iptables to read shorewall tmp files
Change chfn and passwd to use auth_use_pam so they can send dbus messages to fpr
intd
label vlc as an execmem_exec_t
Lots of fixes for mozilla_plugin to run google vidio chat
Allow telepath_msn to execute ldconfig and its own tmp files
Fix labels on hugepages
Allow mdadm to read files on /dev
Remove permissive domains and change back to unconfined
Allow freshclam to execute shell and bin_t
Allow devicekit_power to transition to dhcpc
Add boolean to allow icecast to connect to any port - Merge upstream fix of mmap_zero
- Allow mount to write files in debugfs_t
- Allow corosync to communicate with clvmd via tmpfs
- Allow certmaster to read usr_t files
- Allow dbus system services to search cgroup_t
- Define rlogind_t as a login pgm - Allow mdadm_t to read/write hugetlbfs - Dominic Grift Cleanup
- Miroslav Grepl policy for jabberd
- Various fixes for mount/livecd and prelink - Merge with upstream - More access needed for devicekit
- Add dbadm policy - Merge with upstream - Allow seunshare to fowner - Allow cron to look at user_cron_spool links
- Lots of fixes for mozilla_plugin_t
- Add sysv file system
- Turn unconfined domains to permissive to find additional avcs - Update policy for mozilla_plugin_t - Allow clamscan to read proc_t
- Allow mount_t to write to debufs_t dir
- Dontaudit mount_t trying to write to security_t dir - Allow clamscan_t execmem if clamd_use_jit set
- Add policy for firefox plugin-container - Fix /root/.forward definition - label dead.letter as mail_home_t - Allow login programs to search /cgroups - Fix cert handling - Fix devicekit_power bug
- Allow policykit_auth_t more access. - Fix nis calls to allow bind to ports 512-1024
- Fix smartmon - Allow pcscd to read sysfs
- systemd fixes
- Fix wine_mmap_zero_ignore boolean - Apply Miroslav munin patch
- Turn back on allow_execmem and allow_execmod booleans - Merge in fixes from dgrift repository - Update boinc policy
- Fix sysstat policy to allow sys_admin
- Change failsafe_context to unconfined_r:unconfined_t:s0 - New paths for upstart - New permissions for syslog
- New labels for /lib/upstart - Add mojomojo policy - Allow systemd to setsockcon on sockets to immitate other services - Remove debugfs label - Update to latest policy - Fix eclipse labeling from IBMSupportAssasstant packageing - Make boot with systemd in enforcing mode - Update to upstream - Add boolean to turn off port forwarding in sshd. - Add support for ebtables
- Fixes for rhcs and corosync policy -Update to upstream -Update to upstream -Update to upstream - Add Zarafa policy - Cleanup of aiccu policy
- initial mock policy - Lots of random fixes - Update to upstream - Update to upstream
- Allow prelink script to signal itself
- Cobbler fixes - Add xdm_var_run_t to xserver_stream_connect_xdm� x�������������h������� X � -'8 �; �� " �$ ���������������� " " " � to create log dir
- Add support for icinga CGI scripts
- Add support for icinga
- Allow kdumpctl_t to create kdump lock file
- Allow kdump to create lnk lock file
- Allow ABRT write core_pattern
- Allwo ABRT to read core_pattern
- Add policy for Geoclue. Geoclue is a D-Bus service that provides location information
- Allow nscd_t block_suspen capability
- Allow unconfined domain types to manage own transient unit file
- Allow systemd domains to handle transient init unit files
- No longer need the rpm_script_roles line since rpm_transition_script now does this for us
- Add/fix interfaces for usermodehelper_t
- Add interfaces to handle transient
- Fixes for new usermodehelper and proc_securit_t types, added to increase security on /proc and /sys file systems - Add cron unconfined role support for uncofined SELinux user
- Call kernel_rw_usermodehelper_state() in init.te
- Call corenet_udp_bind_all_ports() in milter.te
- Allow fence_virtd to connect to zented port
- Fix header for mirrormanager_admin()
- Allow dkim-milter to bind udp ports
- Allow milter domains to send signull itself
- Allow block_suspend for yum running as mock_t
- Allow beam.smp to manage couchdb files
- Add couchdb_manage_files()
- Add labeling for /var/log/php_errors.log
- Allow bumblebee to stream connect to xserver
- Allow bumblebee to send a signal to xserver
- gnome-thumbnail to stream connect to bumblebee
- Fix calling usermodehelper to use _state in interface name
- Allow xkbcomp running as bumblebee_t to execute bin_t
- Allow logrotate to read squid.conf
- Additional rules to get docker and lxc to play well with SELinux
- Call kernel_read_usermodhelper/kernel_rw_usermodhelper
- Make rpm_transition_script accept a role
- Added new policy for pcp
- Allow bumbleed to connect to xserver port
- Allow pegasus_openlmi_storage_t to read hwdata - Make rpm_transition_script accept a role
- Clean up pcp.te
- Added new policy for pcp
- Allow bumbleed to connect to xserver port
- Added support for named-sdb in bind policy
- Allow NetworkManager to signal and sigkill init scripts
- Allow pegasus_openlmi_storage_t to read hwdata
- Fix rhcs_rw_cluster_tmpfs()
- Allow fenced_t to bind on zented udp port
- Fix mirrormanager_read_lib_files()
- Allow mirromanager scripts running as httpd_t to manage mirrormanager pid files
- Dontaudit read/write to init stream socket for lsmd_plugin_t
- Allow automount to read nfs link files
- Allow lsm plugins to read/write lsmd stream socket
- Allow svirt_lxc domains to umount dockersocket filesytem
- Allow gnome keyring domains to create gnome config dirs
- Allow rpm scritplets to create /run/gather with correct labeling
- Add sblim_filetrans_named_content() interface
- Allow ctdb to create sock files in /var/run/ctdb
- Add also labeling for /var/run/ctdb
- Add missing labeling for /var/lib/ctdb
- ALlow tuned to manage syslog.conf. Should be fixed in tuned. #1030446
- Dontaudit hypervkvp to search homedirs
- Dontaudit hypervkvp to search admin homedirs
- Allow hypervkvp to execute bin_t and ifconfig in the caller domain
- Dontaudit xguest_t to read ABRT conf files
- Add abrt_dontaudit_read_config()
- Allow namespace-init to getattr on fs
- Add thumb_role() also for xguest
- Add filename transitions to create .spamassassin with correct labeling
- Allow apache domain to read mirrormanager pid files
- Allow domains to read/write shm and sem owned by mozilla_plugin_t
- Allow alsactl to send a generic signal to kernel_t
- Allow plymouthd to read run/udev/queue.bin
- Allow sys_chroot for NM required by iodine service
- Change glusterd to allow mounton all non security
- Labeled ~/.nv/GLCache as being gstreamer output
- Restrict the ability to set usermodehelpers and proc security settings.
- Limit the ability to write to the files that configure kernel i
- usermodehelpers and security-sensitive proc settings to the init domain. i
- Permissive domains can also continue to set these values.
- The current list is not exhaustive, just an initial set.
- Not all of these files will exist on all kernels/devices.
- � x�������������������� X � �&8 �� P� �! �$ Z ���������������� �! �! �! � ow radiusd_t domain to mmap radius_etc_rw_t files
- Allow git_script_t domain to read and mmap gitosis_var_lib_t files BZ(1591729)
- Add dac_read_search capability to thumb_t domain
- Add dac_override capability to cups_pdf_t domain BZ(1594271)
- Add net_admin capability to connntrackd_t domain BZ(1594221)
- Allow gssproxy_t domain to domtrans into gssd_t domain BZ(1575234)
- Fix interface init_dbus_chat in oddjob SELinux policy BZ(1590476)
- Allow motion_t to mmap video devices BZ(1590446)
- Add dac_override capability to mpd_t domain BZ(1585358)
- Allow fsdaemon_t domain to write to mta home files BZ(1588212)
- Allow virtlogd_t domain to chat via dbus with systemd_logind BZ(1589337)
- Allow sssd_t domain to write to general cert files BZ(1589339)
- Allow l2tpd_t domain to sends signull to ipsec domains BZ(1589483)
- Allow cockpit_session_t to read kernel network state BZ(1596941)
- Allow devicekit_power_t start with nnp systemd security feature with proper SELinux Domain transition BZ(1593817)
- Allows systemd to get attribues of core kernel interface BZ(1596928)
- Dontaudit syslogd to watching top llevel dirs when imfile module is enabled
- Revert "Allow unconfined and sysadm users to use bpftool BZ(1591440)"
- Allow userdomain sudo domains to use generic ptys
- Allow systemd labeled as init_t to get sysvipc info BZ(1600877)
- Label /sbin/xtables-legacy-multi and /sbin/xtables-nft-multi as iptables_exec_t BZ(1600690)
- Remove duplicated userdom_delete_user_home_content_files
- Add systemd_dbus_chat_resolved interface
- Allow load_policy_t domain to read/write to systemd sockets BZ(1582812)
- Add new interface init_prog_run_bpf()
- Allow unconfined and sysadm users to use bpftool BZ(1591440)
- Label /run/cockpit/motd as etc_t BZ(1584167)
- Allow systemd_machined_t domain to sendto syslogd_t over unix dgram sockets
- Add interface userdom_dontaudit_mmap_user_home_content_files()
- Allow systemd to listen bluetooth sockets BZ(1592223)
- Allow systemd to remove user_home_t files BZ(1418463)
- Allow xdm_t domain to mmap and read cert_t files BZ(1553761)
- Allow nsswitch_domain to mmap passwd_file_t files BZ(1518655)
- Allow systemd to delete user temp files BZ(1595189)
- Allow systemd to mounton core kernel interface
- Add dac_override capability to ipsec_t domain BZ(1589534)
- Allow systemd domain to mmap lvm config files BZ(1594584)
- Allow systemd to write systemd_logind_inhibit_var_run_t fifo files
- Allow systemd_modules_load_t to access unabeled infiniband pkeys - Add ibacm policy
- Label /usr/sbin/rhn_check-[0-9]+.[0-9]+ as rpm_exec_t
- Allow kdumpgui_t domain to allow execute and mmap all binaries labeled as kdumpgui_tmp_t
- Allow rpm to check if SELinux will check original protection mode or modified protection mode (read-implies-exec) for mmap/mprotect. Allow rpm to reload systemd services
- Allow crond_t domain to create netlink selinux sockets and dac_override cap.
- Allow radiusd_t domain to have dac_override capability
- Allow amanda_t domain to have setgid capability
- Allow psad domain to setrlimit. Allow psad domain to stream connect to dbus Allow psad domain to exec journalctl_exec_t binary
- Update cups_filetrans_named_content() to allow caller domain create ppd directory with cupsd_etc_rw_t label
- Allow abrt_t domain to write to rhsmcertd pid files
- Allow pegasus_t domain to eexec lvm binaries and allow read/write access to lvm control
- Add vhostmd_t domain to read/write to svirt images
- Update kdump_manage_kdumpctl_tmp_files() interface to allow caller domain also mmap kdumpctl_tmp_t files
- Allow sssd_t and slpad_t domains to mmap generic certs
- Allow chronyc_t domain use inherited user ttys
- Allow stapserver_t domain to mmap own tmp files
- Update nscd_dontaudit_write_sock_file() to dontaudit also stream connect to nscd_t domain
- Merge pull request #60 from vmojzis/rawhide
- Allow tangd_t domain stream connect to sssd
- Allow oddjob_t domain to chat with systemd via dbus
- Allow freeipmi domains to mmap sysfs files
- Fix typo in logwatch interface file
- Allow spamd_t� x�������������X�������� X � O'8 ���������������#" �$ 3 ���������������� #" "" $" � ad/write condor lib files
- Allow sshd to read/write condor-startd tcp socket
- Fix description on httpd_graceful_shutdown
- Allow glance_registry to communicate with mysql
- dbus_system_domain is using systemd to lauch applications
- add interfaces to allow domains to send kill signals to user mail agents
- Remove unnessary access for svirt_lxc domains, add privs for virtd_lxc_t
- Lots of new access required for secure containers
- Corosync needs sys_admin capability
- ALlow colord to create shm
- .orc should be allowed to be created by any app that can create gstream home content, thumb_t to be specific
- Add boolean to control whether or not mozilla plugins can create random content in the users homedir
- Add new interface to allow domains to list msyql_db directories, needed for libra
- shutdown has to be allowed to delete etc_runtime_t
- Fail2ban needs to read /etc/passwd
- Allow ldconfig to create /var/cache/ldconfig
- Allow tgtd to read hardware state information
- Allow collectd to create packet socket
- Allow chronyd to send signal to itself
- Allow collectd to read /dev/random
- Allow collectd to send signal to itself
- firewalld needs to execute restorecon
- Allow restorecon and other login domains to execute restorecon - Allow logrotate to getattr on systemd unit files
- Add support for tor systemd unit file
- Allow apmd to create /var/run/pm-utils with the correct label
- Allow l2tpd to send sigkill to pppd
- Allow pppd to stream connect to l2tpd
- Add label for scripts in /etc/gdm/
- Allow systemd_logind_t to ignore mcs constraints on sigkill
- Fix files_filetrans_system_conf_named_files() interface
- Add labels for /usr/share/wordpress/wp-includes/*.php
- Allow cobbler to get SELinux mode and booleans - Add unconfined_execmem_exec_t as an alias to bin_t
- Allow fenced to read snmp var lib files, also allow it to read usr_t
- ontaudit access checks on all executables from mozilla_plugin
- Allow all user domains to setexec, so that sshd will work properly if it call setexec(NULL) while running withing a user mode
- Allow systemd_tmpfiles_t to getattr all pipes and sockets
- Allow glance-registry to send system log messages
- semanage needs to manage mock lib files/dirs - Add policy for abrt-watch-log
- Add definitions for jboss_messaging ports
- Allow systemd_tmpfiles to manage printer devices
- Allow oddjob to use nsswitch
- Fix labeling of log files for postgresql
- Allow mozilla_plugin_t to execmem and execstack by default
- Allow firewalld to execute shell
- Fix /etc/wicd content files to get created with the correct label
- Allow mcelog to exec shell
- Add ~/.orc as a gstreamer_home_t
- /var/spool/postfix/lib64 should be labeled lib_t
- mpreaper should be able to list all file system labeled directories
- Add support for apache to use openstack
- Add labeling for /etc/zipl.conf and zipl binary
- Turn on allow_execstack and turn off telepathy transition for final release - More access required for virt_qmf_t
- Additional assess required for systemd-logind to support multi-seat
- Allow mozilla_plugin to setrlimit
- Revert changes to fuse file system to stop deadlock - Allow condor domains to connect to ephemeral ports
- More fixes for condor policy
- Allow keystone to stream connect to mysqld
- Allow mozilla_plugin_t to read generic USB device to support GPS devices
- Allow thum to file name transition gstreamer home content
- Allow thum to read all non security files
- Allow glance_api_t to connect to ephemeral ports
- Allow nagios plugins to read /dev/urandom
- Allow syslogd to search postfix spool to support postfix chroot env
- Fix labeling for /var/spool/postfix/dev
- Allow wdmd chown
- Label .esd_auth as pulseaudio_home_t
- Have no idea why keyring tries to write to /run/user/dwalsh/dconf/user, but we can dontaudit for now - Add support for clamd+systemd
- Allow fresclam to execute systemctl to handle clamd
- Change labeling for /usr/sbin/rpc.ypasswd.env
- Allow yppaswd_t to execute yppaswd_exec_t
- Allow yppaswd_t to read /etc/passwd
- Gnomekeyring socket has been move� x�������������������� X � �&8 �6�������3 |! �$ l ���������������� |! {! }! � 203c72113984a83b7bda c7c185caf6b3c944b6bce26a3642b67b3660f32e2f04203c72113984a83b7bda cedf81a7200afb4054ab296ee3c8468e24118332b6a99f0075e2f8148f5f1d91 cedf81a7200afb4054ab296ee3c8468e24118332b6a99f0075e2f8148f5f1d91 7336e4cf97adf5f0114759176842596133e86e735d249d5151f04b5fc35b289c 7336e4cf97adf5f0114759176842596133e86e735d249d5151f04b5fc35b289c 78e8e53ddfb76f2e0a8e10348d2d97a4bf68043c0e9600fbffbcb49383d64818 45816683d793b5c85812c2c4718eb2041c80dffe12712aa40c7e5c011f96a19f 60ecfeac01883c0a21e5ec5e1e02a631028f1c3bfcdfc834fb8c20c0c0efb9ab bab5ee4df3e95905a9287de62ed921465a107f2571992a977afc70ecd135ac39 f61bacb21edd90b56135dc33e39207c79a74b4c1bf09a72b6bbe2c3ad6ad5fc9 a599aea3fd4fb4a8dc0b73e87359f7ddff44764f3437c334a02c77464a1b1176 846b94c5da4bfbb019e39000e70ac2c18f0faab6ba254248a5cfbcfdf1c941e6 24126b0a4210e335dea4495f740ac340895979f2fcd803f161a23eb796a62d26 2028e3079c74aea91e03ebd59c906a0aad9fe40cbc9a91b2ae5fb880fbb57318 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 553b4ef691f3c348eb7dcea77c14e94f127b2999efb55366fe37753a73345121 dbefdc9f507a1bb52b837db76aa4b5727daa0754bf86410d873ad0a1c3d7e3a0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0d46f7f4989897c1387e3039977ac03a89a5bb196ddd9a006e1c945d92fa181e 0d03e0f492d86c6546afd161fc9a283effbb015ddd30e54fd232965e0cb5cf42 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ba4b17b2273017b13e3bea0576bbf751ee6993dcdbffaf5efa140be34b2a4438 e084cbd1db60623043191eef7f35978db42b65a3f427d08e33c0a2b562558bb6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8943a25183561f677db66724ee6751d3fe05cac8b13eb10f99cf6f363da45bbb ed0b6bed8217da7210e9f38d7663ba7efaf1d05d11467a80c846824d6ef1e071 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 86aca04e1c79f094301b7ef8deaeda3f09e9e392438af2a6e2c7d698da8a545a fc8316ee8b4c2045181020f098f91f7fa7d4736bea7509624771b5b3ebe1a8a5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f483f8d11b22f27a7a2a4692dec5ee100dbb1cd264f0226fe4a8012ce0114845 d3507f42dcf8e88493873b3e6e6340c8eb6dded44141743bef22c95b81f6758e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c8615a4006087dccef8aea639d4e2bbc2b123d34491c0ca00b424e587f56746c d6f6794712d32669f0898d3781b87f8ff4a95aee789a40085531798dbbe27332 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bc8face95ae6897403af7fcdd93586edcc0f5fe4dd6511bcde90df323c077792 91e78ffa29e5c8f57aee586c4c00dba5c44c9e31dfe3e3dec190ecbaaa8ade5d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4773ad2f5ef40ae7945fdab79581c508624caf1009ed22861f9371e50c7e067f a6090abc6fe14ec4bc645e6a0267ecad7dcea543824dbc309f2e0754c34072fc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1ad1b0fbce699d26e39666786dd24327e7fc07973b0716624e1185d68270d89d 9f726f73b81c2e3b97f26104aaddaaa0b05985da8b995e37eb3915d5a8f72f1b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d91dd5b54e35e262cd1df2688dea30f5c727f5908044b53d8387cd7727ebfb3d 5d43876f8f1ef0e74cff16d731437a38f557354acf30df66645bc2a4b787c9f0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b04daffe37882da7ba7b156dce13467490782c2c9a2f48f0381a7b34c548d3e2 4a6d73f3595d6cdbd98a9aa1fe67ba5012f231f544d8e188025f2192be11a601 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e de960d7111d4293aae3c34f3bfaea061e23569dcff8526be4ad2ec570d35800b 0d25e8360975b6503705c8db76d5c0f584d9c92163c8c2bff583de3a10af0894 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1933fc626e69efeb75d2680b31d3020abbef5a3786aecd76389bbea5d7a2c857 40aa3f6337250923fb7bdc5b80ac37ab157bae18e595c99c96210905f6e0bfe5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b7f924f7eee28c2ac93461a74ed55fdd0d1ccd3e50e0b1fd3b608cfe9d1bc820 da2dc958e1c0019df355bb2207c1bfe18c67f2db6e500434e714fc6b96a2e76a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4d6f8235981e36d75995eaef2abd3eccee0765f95c36e89cef70712728ce598e d437e09b0067429ff6970f95f3b633a32064af88a8eec4c27a9351a00584797e � x�������������H�������� X � �&8 (�
، s! �$ c ���������������� s! r! t! � 60c0b3322d023b9f13d1e4612e04067de49b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6a24585a53a597aaa04ff24ad4a2deca244a683fb36d9fe625365e27852caeda 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 296133cca4890e1615234c4fcb4da9b0a8664391b2a64b6b2842c7d8df20ea3b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 089191e2c00b8010d76d55ccee77f2e2f0b554737ddca1049c76169b636919a6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4efa15e802efc67922e7d4dc05df833985a72e4ebf75f48af483b68f938c88d0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ed24c1839d767402b7421743e3a6b61410711abc626b0a68ac6c34b6592ba88f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 878fd702fc53dfeca0ffa72556f10ad21f014a105cdee85bdcc138d551eb57a5 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 385b25aad1f9f288bc32789b3db80e2b7b83a2a1a845df30a581f62b9f3c318e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 74db268677044f8fccdf6e2e608d265c20d757bacde1fb6c8156ed23d0fcbf3d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ec7d68ebe3530d0497b39c34ca00f20a8fe217c81e380c056bdd4c4733df560b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 16bf768e7701c2f724d0aa6e0b369e9403612cbaf855a1aff53e6e0e316b8613 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf cc9210b85a27826d1bb9c3165145a4b64b3879fa7e796c8a0c0bb445849af65c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6c1f8c7a3f2eaff2ca9cf79bc84c627e2149bcb9487462c8e5236d65c23eeae1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0583c8f3a7808de8503d7d4717994cf3e5e40e1548b9c0227b82dfc6996cb09f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 73eeabc86ee7d8a618834a8cd38c27555d9ae8a5b542b2291312cc77a5b77a4a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 386c07b87ce07f7c9aba4d610cc66dea4b4dc0c934046f5973b787f544077dcd 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0b3e7ac26c59ac96b28b5e5689d4e9bc4c79fcaebec63ed5a83a6e093047b113 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1d10f822eaabcf1db689686e6cf93a7d08e96ce9489ff7469481194b49440502 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1208b222465ad704ca391d1ab12d47c7311a1ab44c02dca9eb87c62f1d8a2d13 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 117d38da931cd70a0eefa1bd9426646e1bc756f567157d425e08785a0f939764 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf db9dfca6be9612e03990aee409051033b27e762f82b7b066a431c1bdd36a8489 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 522a57b3cdf97927647f749e0936ad794f186e6bf1fecad651a84630a51d2c16 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 979cbbd2b669fb3837315f5e2f49c9dc04c0035c9f8fdfb41fe08dd2713ac0e0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f5bbe3ffb096ccd408bc79f9b0472793bf6aa94c7119c5eb566b483c98f53247 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 50ec74b86729d0b412333cacff59e0334eae4af6e5386dc2816daa5f8bda733b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 646f551293163add854b995ff8029f846205a72eaf7dbc758897549177b2ba75 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a1c908a9d579181219c3379d3a6d1041ec9db11fa3cfe75c2b331f626cc2a666 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 88b43a5dcfca446770f2bb197106e318fcf7e8cfe0c594dd9809b332a849a3cf 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7eee6ae3163199b9a18a29855ad61e9e63a35b991a3ced5b2a4e002f1a2f5764 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 475fa2f5ec0393b97602c4b93c82b56235f0217f7237bb545c92cfd3613b9a5c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1388dc717e59bbc1f7ce9b94c20cbf0ef69032cc91837c2fb1b7ae2471cef579 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 64bdde6842375a402f4ad4114ba097b37d0b1� x��������������y������� X � �&8 �������~ �! �$ > ���������������� �! �! �! � alsh@redhat.com> 3.5.13-14 Dan Walsh <dwalsh@redhat.com> 3.5.13-13 Dan Walsh <dwalsh@redhat.com> 3.5.13-12 Dan Walsh <dwalsh@redhat.com> 3.5.13-11 Dan Walsh <dwalsh@redhat.com> 3.5.13-9 Dan Walsh <dwalsh@redhat.com> 3.5.13-8 Dan Walsh <dwalsh@redhat.com> 3.5.13-7 Dan Walsh <dwalsh@redhat.com> 3.5.13-6 Dan Walsh <dwalsh@redhat.com> 3.5.13-5 Dan Walsh <dwalsh@redhat.com> 3.5.13-4 Dan Walsh <dwalsh@redhat.com> 3.5.13-3 Dan Walsh <dwalsh@redhat.com> 3.5.13-2 Dan Walsh <dwalsh@redhat.com> 3.5.13-1 Dan Walsh <dwalsh@redhat.com> 3.5.12-3 Dan Walsh <dwalsh@redhat.com> 3.5.12-2 Dan Walsh <dwalsh@redhat.com> 3.5.12-1 Dan Walsh <dwalsh@redhat.com> 3.5.11-1 Dan Walsh <dwalsh@redhat.com> 3.5.10-3 Dan Walsh <dwalsh@redhat.com> 3.5.10-2 Dan Walsh <dwalsh@redhat.com> 3.5.10-1 Dan Walsh <dwalsh@redhat.com> 3.5.9-4 Dan Walsh <dwalsh@redhat.com> 3.5.9-3 Dan Walsh <dwalsh@redhat.com> 3.5.9-2 Dan Walsh <dwalsh@redhat.com> 3.5.9-1 Dan Walsh <dwalsh@redhat.com> 3.5.8-7 Dan Walsh <dwalsh@redhat.com> 3.5.8-6 Dan Walsh <dwalsh@redhat.com> 3.5.8-5 Dan Walsh <dwalsh@redhat.com> 3.5.8-4 Dan Walsh <dwalsh@redhat.com> 3.5.8-3 Dan Walsh <dwalsh@redhat.com> 3.5.8-1 Dan Walsh <dwalsh@redhat.com> 3.5.7-2 Dan Walsh <dwalsh@redhat.com> 3.5.7-1 Dan Walsh <dwalsh@redhat.com> 3.5.6-2 Dan Walsh <dwalsh@redhat.com> 3.5.6-1 Dan Walsh <dwalsh@redhat.com> 3.5.5-4 Dan Walsh <dwalsh@redhat.com> 3.5.5-3 Dan Walsh <dwalsh@redhat.com> 3.5.5-2 Dan Walsh <dwalsh@redhat.com> 3.5.4-2 Dan Walsh <dwalsh@redhat.com> 3.5.4-1 Dan Walsh <dwalsh@redhat.com> 3.5.3-1 Dan Walsh <dwalsh@redhat.com> 3.5.2-2 Dan Walsh <dwalsh@redhat.com> 3.5.1-5 Dan Walsh <dwalsh@redhat.com> 3.5.1-4 Dan Walsh <dwalsh@redhat.com> 3.5.1-3 Dan Walsh <dwalsh@redhat.com> 3.5.1-2 Dan Walsh <dwalsh@redhat.com> 3.5.1-1 Dan Walsh <dwalsh@redhat.com> 3.5.0-1 Dan Walsh <dwalsh@redhat.com> 3.4.2-14 Dan Walsh <dwalsh@redhat.com> 3.4.2-13 Dan Walsh <dwalsh@redhat.com> 3.4.2-12 Dan Walsh <dwalsh@redhat.com> 3.4.2-11 Dan Walsh <dwalsh@redhat.com> 3.4.2-10 Dan Walsh <dwalsh@redhat.com> 3.4.2-9 Dan Walsh <dwalsh@redhat.com> 3.4.2-8 Dan Walsh <dwalsh@redhat.com> 3.4.2-7 Dan Walsh <dwalsh@redhat.com> 3.4.2-6 Dan Walsh <dwalsh@redhat.com> 3.4.2-5 Dan Walsh <dwalsh@redhat.com> 3.4.2-4 Dan Walsh <dwalsh@redhat.com> 3.4.2-3 Dan Walsh <dwalsh@redhat.com> 3.4.2-2 Dan Walsh <dwalsh@redhat.com> 3.4.2-1 Dan Walsh <dwalsh@redhat.com> 3.4.1-5 Dan Walsh <dwalsh@redhat.com> 3.4.1-3 Dan Walsh <dwalsh@redhat.com> 3.4.1-2 Dan Walsh <dwalsh@redhat.com> 3.4.1-1 Dan Walsh <dwalsh@redhat.com> 3.3.1-48 Dan Walsh <dwalsh@redhat.com> 3.3.1-47 Dan Walsh <dwalsh@redhat.com> 3.3.1-46 Dan Walsh <dwalsh@redhat.com> 3.3.1-45 Dan Walsh <dwalsh@redhat.com> 3.3.1-44 Dan Walsh <dwalsh@redhat.com> 3.3.1-43 Dan Walsh <dwalsh@redhat.com> 3.3.1-42 Dan Walsh <dwalsh@redhat.com> 3.3.1-41 Dan Walsh <dwalsh@redhat.com> 3.3.1-39 Dan Walsh <dwalsh@redhat.com> 3.3.1-37 Dan Walsh <dwalsh@redhat.com> 3.3.1-36 Dan Walsh <dwalsh@redhat.com> 3.3.1-33 Dan Walsh <dwalsh@redhat.com> 3.3.1-32 Dan Walsh <dwalsh@redhat.com> 3.3.1-31 Dan Walsh <dwalsh@redhat.com> 3.3.1-30 Dan Walsh <dwalsh@redhat.com> 3.3.1-29 Dan Walsh <dwalsh@redhat.com> 3.3.1-28 Dan Walsh <dwalsh@redhat.com> 3.3.1-27 Dan Walsh <dwalsh@redhat.com> 3.3.1-26 Dan Walsh <dwalsh@redhat.com> 3.3.1-25 Dan Walsh <dwalsh@redhat.com> 3.3.1-24 Dan Walsh <dwalsh@redhat.com> 3.3.1-23 Dan Walsh <dwalsh@redhat.com> 3.3.1-22 Dan Walsh <dwalsh@redhat.com> 3.3.1-21 Dan Walsh <dwalsh@redhat.com> 3.3.1-20 Dan Walsh <dwalsh@redhat.com> 3.3.1-19 Dan Walsh <dwalsh@redhat.com> 3.3.1-18 Dan Walsh <dwalsh@redhat.com> 3.3.1-17 Dan Walsh <dwalsh@redhat.com> 3.3.1-16 Dan Walsh <dwalsh@redhat.com> 3.3.1-15 Bill Nottingham <notting@redhat.com> 3.3.1-14 Dan Walsh <dwalsh@redhat.com> 3.3.1-13 Dan Walsh <dwalsh@redhat.com> 3.3.1-12 Dan Walsh <dwalsh@redhat.com> 3.3.1-11 Dan Walsh <dwalsh@redhat.com> 3.3.1-10 Dan Walsh <dwalsh@redhat.com> 3.3.1-9 Dan Walsh <dwalsh@redhat.com> 3.3.1-8 Dan Walsh <dwalsh@redhat.com> 3.3.1-6 Dan Walsh <dwalsh@redhat.com> 3.3.1-5 Dan Walsh <dwalsh@redhat.com> 3.3.1-4 Dan Walsh <dwalsh@redh� x�������������8i������� X � o'8 ��������������C" �$ S ���������������� C" B" D" �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3� x��������������X������� X � &8 �� x�������wQ �$ g ���������������� wQ vQ xQ � � df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df� df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��3ff5fa47acda1151821d033a7c4e6e1580efa7f6a540b853737ecd52699228a1 3ff5fa47acda1151821d033a7c4e6e1580efa7f6a540b853737ecd52699228a1 24ade0e65ef1b3ac9a43fb272b3ae5b1c8668ddd1f0eddb30fb2a5fc4f4289c0 319f2374f99145ec96cdd0d9b508766ea6eba7e804a1f1f35e22f4e0ab227ceb 243f0d9554a5cae051ed2678441b8ece4420afce0e16bf075ca45f8bb1345307 3bcb33adc642fda10bddc272a4b3bf0d447bbc3d2ba69fa4e901670cd31464bf 5baf2d3875ff1d6c92b2e144fd757c8e56e21dab19b3faa2570ac53df159217e 9660776b7b6622dd999b22f497e28ea08fb20966820c927fbbc7a87bbf74ece3 1d493cbc33b4c2d2cf79831da26f40aa46e84bfd17249a7d8d205c1b3cda9ad0 09c5e2ee35ee18d9043d95273f1cd37bc82e80567fd1372a1eb134c809c39504 b9b04da4edea7ea7af3ae4901d38ad1fb9e06a896606773329857467841795d4 af3d93fd39ac15dc187be68af9eef36fe60def865f628999da8bd894cc1211c1 02cce578326ffb0393234fd16f4d4d2ce62deec827a6e62454df27e5a2d3d22a d368f4970279a97a108268c6e8399977f6fe221ad34b31d753495ab9b6f9d99c 2042fd2fc694a0e9e01c33007dcfd998abadfbd19d90c4a92f4898746650a11e 29b1db7f52d761940ad4108122fb75c6be6fd260ed4a0d42b11d64d6b3416487 6a412dc9e7127247d33be22a7be4c915109770dbed47c6c368a192387967a82f 8941dd9aad3f7eef4d813803005bdaa4d22dac9984c64da1acfb3b8759c1ba76 00ccb4fff6e9b6aed9433cdbca27b6c560d974976fbb4d052b15841a2e6ad908 89f0f212c8770d7f228b0baac725f330e3c449de8c67ecd456da4fe4c3134022 387acf63e8458b3a74e73d76b9d13920618e02915764644ceb2b8a7861456305 765cc5b8ee54b1be3a3181d2b23fc1d4fdceef50c0c4788ce99a62d28f5c98ef 904bfbb5c47c28ed4df69d251e7d90318d7ac7c01179ba9de1a28660eb65c9a4 ae2e21488091ab272522de6910158f06d32382aa89f75c84581d0ecaf5ea3eb1 ab85471a807140aaca7ebb7016a9df26f28a2bbf3bc300fdafbcf0326581e064 778488f657288470f14c6c4d421aeda7e970943c27c049830532d653bec3854b 1746eab95926b59d351e1116c6f6a417f12f181d3493e27372a62a56bb33f432 82fb2b55e7e8627c6b04e6109332e8418d5a9c163236e3c2a5e13c5cb85b523f ce35f295b7d125d886e647b4416ffe59caff6eb4af4656ecf86dc1a61c18aa66 e3fd2963a1b19c6a1b24327e16e459fbec9db7cea9f5331e097c3b884697b7a8 2824d3679b1719c4a66579e9ce114c665eaad2ff40b4f2514e34b794226ec8c6 8ea14d655372ddb30ffeec94aa14bbcb98cd051fb6c1956fca772e822bd4cc4e 6fde33345662b9b836e21fad1cca827f83bde6054fac9958e8d9d31de4d0a738 992a918a4e8d2c2927b1bc8048837457cb6d15552438fcbf3b13286ce82e4ba3 1f86d2801601f1a01bfa1fa4f139aec07b928e9093920e8147e9f7f75aa491af 9db0bea641ebf0b141893419866d356227a1ec5c88ea7a4e905988cbd7a43769 4783b58b9c76980f10ab90d0286c46622cc58f36a1a0f7602caf00230f883df1 97f4c8f29caf6f1d924385406847e55bf72164a2ade71e5617471dc95a3f8d56 35cfea97083d732e7a005b8392e271993aa5ef38dd09061c905617f2224e2a9a 76b9390613ccd94c05� x�������������(H������� X � ''8 ������f�������! �$ k ���������������� �! �! �! � support for tcp/9697
- Fix labeling for /var/run/user/<UID>/gvfs
- Add support for us_cli ports
- fix sysnet_use_ldap
- Allow mysql to execute ifconfig if Red Hat OpenStack
- ALlow stap-server to get attr on all fs
- Fix mail_pool_t to mail_spool_t
- Dontaudit leaked xserver_misc_device_t into plugins
- Need to allow sssd_t to manage kernel keyrings in login programs since they don't get labeled with user domains
- Add new labeling for /var/spool/smtpd
- Allow httpd_t to kill passenger
- Allow apache cgi scripts to use inherited httpd_t unix_stream_sockets
- Allow nova-scheduler to read passwd/utmp files
- Additional rules required by openstack, needs backport to F20 and RHEL7
- Additional access required by docker
- ALlow motion to use tcp/8082 port - Fix virt_use_samba boolean
- Looks like all domains that use dbus libraries are now reading /dev/urand
- Add glance_use_fusefs() boolean
- Allow tgtd to read /proc/net/psched
- Additional access required for gear management of openshift directories
- Allow sys_ptrace for mock-build
- Fix mock_read_lib_files() interface
- Allow mock-build to write all inherited ttys and ptys
- Allow spamd to create razor home dirs with correct labeling
- Clean up sysnet_use_ldap()
- systemd calling needs to be optional
- Allow init_t to setattr/relabelfrom dhcp state files - mongod should not be a part of cloudforms.pp
- Fix labeling in snapper.fc
- Allow docker to read unconfined_t process state
- geoclue dbus chats with NetworkManager
- Add cockpit policy
- Add interface to allow tools to check the processes state of bind/named
- Allow myslqd to use the tram port for Galera/MariaDB - Allow init_t to setattr/relabelfrom dhcp state files
- Allow dmesg to read hwdata and memory dev
- Allow strongswan to create ipsec.secrets with correct labeling in /etc/strongswan
- Dontaudit antivirus domains read access on all security files by default
- Add missing alias for old amavis_etc_t type
- Additional fixes for instack overcloud
- Allow block_suspend cap for haproxy
- Allow OpenStack to read mysqld_db links and connect to MySQL
- Remove dup filename rules in gnome.te
- Allow sys_chroot cap for httpd_t and setattr on httpd_log_t
- Add labeling for /lib/systemd/system/thttpd.service
- Allow iscsid to handle own unit files
- Add iscsi_systemctl()
- Allow mongod also create sock_file with correct labeling in /run
- Allow aiccu stream connect to pcscd
- Allow rabbitmq_beam to connect to httpd port
- Allow httpd to send signull to apache script domains and don't audit leaks
- Fix labeling in drbd.fc
- Allow sssd to connect to the smbd port for handing logins using active directory, needs back port for rhel7
- Allow all freeipmi domains to read/write ipmi devices
- Allow rabbitmq_epmd to manage rabbit_var_log_t files
- Allow sblim_sfcbd to use also pegasus-https port
- Allow chronyd to read /sys/class/hwmon/hwmon1/device/temp2_input
- Add httpd_run_preupgrade boolean
- Add interfaces to access preupgrade_data_t
- Add preupgrade policy
- Add labeling for puppet helper scripts Rename puppet_t to puppetagent_t and used it only for puppet agent which can be started by init. Also make it as unconfined_noaudit because there is no reason to confine it but we wantto avoid init_t. - Change hsperfdata_root to have as user_tmp_t
- Allow rsyslog low-level network access
- Fix use_nfs_home_dirs/use_samba_home_dirs for xdm_t to allow append .xsession-errors by lightdm
- Allow conman to resolve DNS and use user ptys
- update pegasus_openlmi_admin_t policy
- nslcd wants chown capability
- Dontaudit exec insmod in boinc policy - Add labels for /var/named/chroot_sdb/dev devices
- Add support for strongimcv
- Add additional fixes for yubikeys based on william@firstyear.id.au
- Allow init_t run /sbin/augenrules
- Remove dup decl for dev_unmount_sysfs_fs
- Allow unpriv SELinux user to use sandbox
- Fix ntp_filetrans_named_content for sntp-kod file
- Add httpd_dbus_sssd boolean
- Dontaudit exec insmod in boinc policy
- Add dbus_filetrans_named_content_system()
- We want to label only /usr/bin/start� x��������������7������� X � �'8 �; �� T" �$ D ���������������� T" S" U" � re/selinux/targeted/default/active/modules/100/secadm/ /usr/share/selinux/targeted/default/active/modules/100/sectoolm/ /usr/share/selinux/targeted/default/active/modules/100/selinuxutil/ /usr/share/selinux/targeted/default/active/modules/100/sendmail/ /usr/share/selinux/targeted/default/active/modules/100/sensord/ /usr/share/selinux/targeted/default/active/modules/100/setrans/ /usr/share/selinux/targeted/default/active/modules/100/setroubleshoot/ /usr/share/selinux/targeted/default/active/modules/100/seunshare/ /usr/share/selinux/targeted/default/active/modules/100/sge/ /usr/share/selinux/targeted/default/active/modules/100/shorewall/ /usr/share/selinux/targeted/default/active/modules/100/slocate/ /usr/share/selinux/targeted/default/active/modules/100/slpd/ /usr/share/selinux/targeted/default/active/modules/100/smartmon/ /usr/share/selinux/targeted/default/active/modules/100/smokeping/ /usr/share/selinux/targeted/default/active/modules/100/smoltclient/ /usr/share/selinux/targeted/default/active/modules/100/smsd/ /usr/share/selinux/targeted/default/active/modules/100/snapper/ /usr/share/selinux/targeted/default/active/modules/100/snmp/ /usr/share/selinux/targeted/default/active/modules/100/snort/ /usr/share/selinux/targeted/default/active/modules/100/sosreport/ /usr/share/selinux/targeted/default/active/modules/100/soundserver/ /usr/share/selinux/targeted/default/active/modules/100/spamassassin/ /usr/share/selinux/targeted/default/active/modules/100/speech-dispatcher/ /usr/share/selinux/targeted/default/active/modules/100/squid/ /usr/share/selinux/targeted/default/active/modules/100/ssh/ /usr/share/selinux/targeted/default/active/modules/100/sslh/ /usr/share/selinux/targeted/default/active/modules/100/sssd/ /usr/share/selinux/targeted/default/active/modules/100/staff/ /usr/share/selinux/targeted/default/active/modules/100/stapserver/ /usr/share/selinux/targeted/default/active/modules/100/stratisd/ /usr/share/selinux/targeted/default/active/modules/100/stunnel/ /usr/share/selinux/targeted/default/active/modules/100/su/ /usr/share/selinux/targeted/default/active/modules/100/sudo/ /usr/share/selinux/targeted/default/active/modules/100/svnserve/ /usr/share/selinux/targeted/default/active/modules/100/swift/ /usr/share/selinux/targeted/default/active/modules/100/sysadm/ /usr/share/selinux/targeted/default/active/modules/100/sysadm_secadm/ /usr/share/selinux/targeted/default/active/modules/100/sysnetwork/ /usr/share/selinux/targeted/default/active/modules/100/sysstat/ /usr/share/selinux/targeted/default/active/modules/100/systemd/ /usr/share/selinux/targeted/default/active/modules/100/tangd/ /usr/share/selinux/targeted/default/active/modules/100/targetd/ /usr/share/selinux/targeted/default/active/modules/100/tcpd/ /usr/share/selinux/targeted/default/active/modules/100/tcsd/ /usr/share/selinux/targeted/default/active/modules/100/telepathy/ /usr/share/selinux/targeted/default/active/modules/100/telnet/ /usr/share/selinux/targeted/default/active/modules/100/tftp/ /usr/share/selinux/targeted/default/active/modules/100/tgtd/ /usr/share/selinux/targeted/default/active/modules/100/thin/ /usr/share/selinux/targeted/default/active/modules/100/thumb/ /usr/share/selinux/targeted/default/active/modules/100/timedatex/ /usr/share/selinux/targeted/default/active/modules/100/tlp/ /usr/share/selinux/targeted/default/active/modules/100/tmpreaper/ /usr/share/selinux/targeted/default/active/modules/100/tomcat/ /usr/share/selinux/targeted/default/active/modules/100/tor/ /usr/share/selinux/targeted/default/active/modules/100/tuned/ /usr/share/selinux/targeted/default/active/modules/100/tvtime/ /usr/share/selinux/targeted/default/active/modules/100/udev/ /usr/share/selinux/targeted/default/active/modules/100/ulogd/ /usr/share/selinux/targeted/default/active/modules/100/uml/ /usr/share/selinux/targeted/default/active/modules/100/unconfined/ /usr/share/selinux/targeted/default/active/modules/100/unconfineduser/ /usr/share/selinux/targeted/default/active/modules/100/unlabelednet/ /usr/share/selinux/targeted/default/active/modul� x�������������'������� X � '8 � PH�������! �$ z ���������������� �! �! �! � need to speak to polkit/logind for authorization. BZ(#1264988)
- Allow dnssec-trigger to send generic signal to Network-Manager. BZ(#1242578)
- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
- Revert "Add apache_read_pid_files() interface"
- Allow dirsrv-admin read httpd pid files.
- Add apache_read_pid_files() interface
- Add label for dirsrv-admin unit file.
- Allow qpid daemon to connect on amqp tcp port.
- Allow dirsrvadmin-script read /etc/passwd file Allow dirsrvadmin-script exec systemctl
- Add labels for afs binaries: dafileserver, davolserver, salvageserver, dasalvager
- Add lsmd_plugin_t sys_admin capability, Allow lsmd_plugin_t getattr from sysfs filesystem.
- Allow rhsmcertd_t send signull to unconfined_service_t domains.
- Revert "Allow pcp to read docker lib files."
- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled. BZ(#1262993)
- Allow pcp to read docker lib files.
- Revert "init_t needs to be login_pgm domain because of systemd-users + pam_selinux.so"
- Add login_userdomain attribute also for unconfined_t.
- Add userdom_login_userdomain() interface.
- Label /etc/ipa/nssdb dir as cert_t
- init_t needs to be login_pgm domain because of systemd-users + pam_selinux.so
- Add interface unconfined_server_signull() to allow domains send signull to unconfined_service_t
- Call userdom_transition_login_userdomain() instead of userdom_transition() in init.te related to pam_selinux.so+systemd-users.
- Add userdom_transition_login_userdomain() interface
- Allow user domains with login_userdomain to have entrypoint access on init_exec. It is needed by pam_selinux.so call in systemd-users. BZ(#1263350)
- Add init_entrypoint_exec() interface.
- Allow init_t to have transition allow rule for userdomain if pam_selinux.so is used in /etc/pam.d/systemd-user. It ensures that systemd user sessions will run with correct userdomain types instead of init_t. BZ(#1263350) - named wants to access /proc/sys/net/ipv4/ip_local_port_range to get ehphemeral range. BZ(#1260272)
- Allow user screen domains to list directorires in HOMEDIR wit user_home_t labeling.
- Dontaudit fenced search gnome config
- Allow teamd running as NetworkManager_t to access netlink_generic_socket to allow multiple network interfaces to be teamed together. BZ(#1259180)
- Fix for watchdog_unconfined_exec_read_lnk_files, Add also dir search perms in watchdog_unconfined_exec_t.
- Sanlock policy update. #1255307 - New sub-domain for sanlk-reset daemon
- Fix labeling for fence_scsi_check script
- Allow openhpid to read system state Aloow openhpid to connect to tcp http port.
- Allow openhpid to read snmp var lib files.
- Allow openvswitch_t domains read kernel dependencies due to openvswitch run modprobe
- Fix regexp in chronyd.fc file
- systemd-logind needs to be able to act with /usr/lib/systemd/system/poweroff.target to allow shutdown system. BZ(#1260175)
- Allow systemd-udevd to access netlink_route_socket to change names for network interfaces without unconfined.pp module. It affects also MLS.
- Allow unconfined_t domains to create /var/run/xtables.lock with iptables_var_run_t
- Remove bin_t label for /usr/share/cluster/fence_scsi_check\.pl - Allow passenger to getattr filesystem xattr
- Revert "Allow pegasus_openlmi_storage_t create mdadm.conf.anacbak file in /etc."
- Label mdadm.conf.anackbak as mdadm_conf_t file.
- Allow dnssec-ttrigger to relabel net_conf_t files. BZ(1251765)
- Allow dnssec-trigger to exec pidof. BZ(#1256737)
- Allow blueman to create own tmp files in /tmp. (#1234647)
- Add new audit_read access vector in capability2 class
- Add "binder" security class and access vectors
- Update netlink socket classes.
- Allow getty to read network state. BZ(#1255177)
- Remove labeling for /var/db/.*\.db as etc_t to label db files as system_db_t. - Allow watchdog execute fenced python script.
- Added inferface watchdog_unco� x��������������������� X � T'8 p� X)������(" �$ 8 ���������������� (" '" )" � output for nacl
- NetworkManager needs to write to /sys/class/net/ib*/mode - Allow abrt to request the kernel to load a module
- Make sure mozilla content is labeled correctly
- Allow tgtd to read system state
- More fixes for boinc
* allow to resolve dns name
* re-write boinc policy to use boinc_domain attribute
- Allow munin services plugins to use NSCD services - Allow mozilla_plugin_t to manage mozilla_home_t
- Allow ssh derived domain to execute ssh-keygen in the ssh_keygen_t domain
- Add label for tumblerd - Fixes for xguest package - Fixes related to /bin, /sbin
- Allow abrt to getattr on blk files
- Add type for rhev-agent log file
- Fix labeling for /dev/dmfm
- Dontaudit wicd leaking
- Allow systemd_logind_t to look at process info of apps that exchange dbus messages with it
- Label /etc/locale.conf correctly
- Allow user_mail_t to read /dev/random
- Allow postfix-smtpd to read MIMEDefang
- Add label for /var/log/suphp.log
- Allow swat_t to connect and read/write nmbd_t sock_file
- Allow systemd-tmpfiles to setattr for /run/user/gdm/dconf
- Allow systemd-tmpfiles to change user identity in object contexts
- More fixes for rhev_agentd_t consolehelper policy - Use fs_use_xattr for squashf
- Fix procs_type interface
- Dovecot has a new fifo_file /var/run/dovecot/stats-mail
- Dovecot has a new fifo_file /var/run/stats-mail
- Colord does not need to connect to network
- Allow system_cronjob to dbus chat with NetworkManager
- Puppet manages content, want to make sure it labels everything correctly - Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it
- Allow all postfix domains to use the fifo_file
- Allow sshd_t to getattr on all file systems in order to generate avc on nfs_t
- Allow apmd_t to read grub.cfg
- Let firewallgui read the selinux config
- Allow systemd-tmpfiles to delete content in /root that has been moved to /tmp
- Fix devicekit_manage_pid_files() interface
- Allow squid to check the network state
- Dontaudit colord getattr on file systems
- Allow ping domains to read zabbix_tmp_t files - Allow mcelog_t to create dir and file in /var/run and label it correctly
- Allow dbus to manage fusefs
- Mount needs to read process state when mounting gluster file systems
- Allow collectd-web to read collectd lib files
- Allow daemons and system processes started by init to read/write the unix_stream_socket passed in from as stdin/stdout/stderr
- Allow colord to get the attributes of tmpfs filesystem
- Add sanlock_use_nfs and sanlock_use_samba booleans
- Add bin_t label for /usr/lib/virtualbox/VBoxManage - Add ssh_dontaudit_search_home_dir
- Changes to allow namespace_init_t to work
- Add interface to allow exec of mongod, add port definition for mongod port, 27017
- Label .kde/share/apps/networkmanagement/certificates/ as home_cert_t
- Allow spamd and clamd to steam connect to each other
- Add policy label for passwd.OLD
- More fixes for postfix and postfix maildro
- Add ftp support for mozilla plugins
- Useradd now needs to manage policy since it calls libsemanage
- Fix devicekit_manage_log_files() interface
- Allow colord to execute ifconfig
- Allow accountsd to read /sys
- Allow mysqld-safe to execute shell
- Allow openct to stream connect to pcscd
- Add label for /var/run/nm-dns-dnsmasq\.conf
- Allow networkmanager to chat with virtd_t - Pulseaudio changes
- Merge patches - Merge patches back into git repository. - Remove allow_execmem boolean and replace with deny_execmem boolean - Turn back on allow_execmem boolean - Add more MCS fixes to make sandbox working
- Make faillog MLS trusted to make sudo_$1_t working
- Allow sandbox_web_client_t to read passwd_file_t
- Add .mailrc file context
- Remove execheap from openoffice domain
- Allow chrome_sandbox_nacl_t to read cpu_info
- Allow virtd to relabel generic usb which is need if USB device
- Fixes for virt.if interfaces to consider chr_file as image file type - Remove Open Office policy
- Remove execmem policy - MCS fixes
- quota fixes - Remove transitions to consoletype - Make nvidia* to be labeled cor� x�������������������� X � �&8 ��������8 ������h! �$ x ���������������� h! g! i! � ��A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�A���������A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�A���������A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A�����A���������������������A���������A�A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�A�������������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�A�������������� x���������������������� X � u'8 �s �������I" �$ Y ���������������� I" H" J" � u u u � v v v � w w w � x x x � y y y � z z z � { { { � | | | � } } } � ~ ~ ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
� � �
� � � � � � � � � � � � � � � � � � � � ! ! ! � " " " � # # # � $ $ $ � % % % � & & & � ' ' ' � ( ( ( � ) ) ) � * * * � + + + � , , , � - - - � . . . � / / / � 0 0 0 � 1 1 1 � 2 2 2 � 3 3 3 � 4 4 4 � 5 5 5 � 6 6 6 � 7 7 7 � 8 8 8 � 9 9 9 � : : : � ; ; ; � < < < � = = = � > > > � ? ? ? � @ @ @ � A A A � B B B � C C C � D D D � E E E � F F F � G G G � H H H � I I I � J J J � K K K � L L L � M M M � N N N � O O O � P P P � Q Q Q � R R R � S S S � T T T � U U U � V V V � � � � � � � � �targeted .policy.sha512 booleans.subs_dist contexts customizable_types dbus_contexts default_contexts default_type failsafe_context files file_contexts file_contexts.bin file_contexts.homedirs file_contexts.homedirs.bin file_contexts.local file_contexts.local.bin file_contexts.subs file_contexts.subs_dist media initrc_context lxc_contexts openssh_contexts removable_context securetty_types sepgsql_contexts snapperd_contexts s� x�������������������� X � �&8 @b������ � q! �$ a ���������������� q! p! r! � a378198aeedcd624f9313e200b126a21900aa01228926d35590302 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 135e336323082f5d0b54043e337699dc866c3cbb639b7dd67ed3de3596c9e534 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c3ac3f00db5ec8db007700d27c657d83480b11dcb10a5114063d2b1a8eea7564 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1736f9652ec84becd4be94fce27af29ab317229d358e24166f36b88c08670f87 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e9e6959ad7d64ca8c9b2fac9c6e171e9f87aa10feae7a2f357f9f65110f13f4e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 5f85764b529becd1698e1040a674c4818336c72142035e98ffc7681ecba543d1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f47ca8db833d16499b6f36f16014713d7a35a9d2f40d4b0c144f9598e7dbdb6d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b0f0e134f6406e02d3c9f0abd4603b9b2abcd70fb43075fdf1c69ec0b6e935e1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 03d80183e0a444d733da3241824fd4e6957c5e94909fb7f8c8438edc9b9c4961 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d41ce8b263dea6ef27ca64d22189ec82d454d0a4b5c7ecef26a79db8f6f5a414 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a756b027d41cdd33406006816f577a9e8d2aa24154a3b0e59f92aa09047adc28 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 5ea1bce15d16c5935e1cfe4679605327228a1269261833ffb519d921236fd67d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 07e2a8eb0b177d0fc5dc895d7834e9c347679c1c4bda2c316d14bac03b68fc33 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bba3b53814183c152ead6040bd0493be48d09750ad3ff2e9734c018f4e33452a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b5796719ea9efe550051195d3eceafbb296481bd49891c949e79417f6b943289 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0d7f8fe7d7601c628fd304d33571a665e5f25be874981df1955453728a53e847 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 48d3feecd81deebb58aeb3b442c4bd365cf696002c68dd0c866f1a4fbbac4386 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1e815188f0fa6ff88da316214c7c450f37303df29a08c6619f3d90b524aac421 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b8ffc863d1ccbdf474c4534dbf04dec460ea4eb78dab6344bd297f69828053f7 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3f94d2f7390c78956eab804f52da97bec4293c8911c799b62f91810e1181c090 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6a3e648a63ed4e7fd81f54d09cd906c6c315968ddfd9831a9f554dc17224ffb1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 22d01f3dbdfaecc2006e77de498c0d1a51dac06898955daa8ba6d8afeff65013 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 16b20a1d0c475300a52cbe49412fa498d9e2e56e48ab8d4db07633862ec3b86c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 76ec337b5114611964483536243f4a51570a6573b33c4f0be403a705251ca430 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a28ee77b6a5d3c8557823007f46283651afb7dd732a73ed6f15521b1695a49d6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bdbe68f6951d8b481196a65281c11f4414d66a070d43490be9f090fb5bfa6765 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 9dccfe5f8c27b7fd51ceaf0a6be430a67b923461455323bfd421ba9391c4b7f8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c0a8ef18a0a9b4fabbc5c5a9ca19f770c6ab6c7136d8cb1a4aef8a5519c187f4 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf af1a8fa9185e34b2680ceed508c9c96450efc0ca88d77508255dab40c670893f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c70c7f599745d5748f5b7bf72e11920b58f471a0a0fec401cebba2492192a822 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b02ffda7f9fd3be02eae05e800fc55de7407d3bb39607adb2150ac40b5d52993 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bf69295a391da9d9e7e� x�������������p������� X � '8 ���������Y�������! �$ M ���������������� �! �! �! � - Adding policy for tlp
- Add interface dev_manage_sysfs()
- Allow ifconfig domain to manage tlp pid files. - Allow systemd_logind_t domain to communicate with devicekit_t domain via dbus bz(1393373) - Allow watching netflix using Firefox - nmbd_t needs net_admin capability like smbd
- Add interface chronyd_manage_pid() Allow logrotate to manage chrony pids
- Add wake_alarm capability2 to openct_t domain
- Allow abrt_t to getattr on nsfs_t files.
- Add cupsd_t domain wake_alarm capability.
- Allow sblim_reposd_t domain to read cert_f files.
- Allow abrt_dump_oops_t to drop capabilities. bz(1391040)
- Revert "Allow abrt_dump_oops_t to drop capabilities. bz(1391040)"
- Allow isnsd_t to accept tcp connections - Allow abrt_dump_oops_t to drop capabilities. bz(1391040)
- Add named_t domain net_raw capability bz(1389240)
- Allow geoclue to read system info. bz(1389320)
- Make openfortivpn_t as init_deamon_domain. bz(1159899)
- Allow nfsd domain to create nfsd_unit_file_t files. bz(1382487)
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Add interace lldpad_relabel_tmpfs
- Merge pull request #155 from rhatdan/sandbox_nfs
- Add pscsd_t wake_alarm capability2
- Allow sandbox domains to mount fuse file systems
- Add boolean to allow sandbox domains to mount nfs
- Allow hypervvssd_t to read all dirs.
- Allow isnsd_t to connect to isns_port_t
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Allow GlusterFS with RDMA transport to be started correctly. It requires ipc_lock capability together with rw permission on rdma_cm device.
- Make tor_var_lib_t and tor_var_log_t as mountpoints.
- Allow systemd-rfkill to write to /proc/kmsg bz(1388669)
- Allow init_t to relabel /dev/shm/lldpad.state
- Merge pull request #168 from rhatdan/docker
- Label tcp 51954 as isns_port_t
- Lots of new domains like OCID and RKT are user container processes - Add container_file_t into contexts/customizable_types. - Disable container_runtime_typebounds() due to typebounds issues which can not be resolved during build.
- Disable unconfined_typebounds in sandbox.te due to entrypoint check which exceed for sandbox domains unconfined_t domain.
- Disable unconfined_typebounds due to entrypoint check which exceed for sandbox domains unconfined_t domain.
- Merge pull request #167 from rhatdan/container
- Add transition rules for sandbox domains
- container_typebounds() should be part of sandbox domain template
- Fix broken container_* interfaces
- unconfined_typebounds() should be part of sandbox domain template
- Fixed unrecognized characters at sandboxX module
- unconfined_typebounds() should be part of sandbox domain template
- svirt_file_type is atribute no type.
- Merge pull request #166 from rhatdan/container
- Allow users to transition from unconfined_t to container types
- Add dbus_stream_connect_system_dbusd() interface.
- Merge pull request #152 from rhatdan/network_filetrans
- Fix typo in filesystem module
- Allow nss_plugin to resolve host names via the systemd-resolved. BZ(1383473) - Dontaudit leaked file descriptors for thumb. BZ(1383071)
- Fix typo in cobbler SELinux module
- Merge pull request #165 from rhatdan/container
- Allow cockpit_ws_t to manage cockpit_lib_t dirs and files. BZ(1375156)
- Allow cobblerd_t to delete dirs labeled as tftpdir_rw_t
- Rename svirt_lxc_net_t to container_t
- Rename docker.pp to container.pp, causes change in interface name
- Allow httpd_t domain to list inotify filesystem.
- Fix couple AVC to start roundup properly
- Allow dovecot_t send signull to dovecot_deliver_t
- Add sys_ptrace capability to pegasus domain
- Allow firewalld to stream connect to NetworkManager. BZ(1380954)
- rename docker intefaces to container
- Merge pull request #164 from rhatdan/docker-base
- Rename docker.pp to container.pp, causes change in interface name
- Allow gvfs to read /dev/nvme* devices BZ(1380951) - Revert addition of systemd service for factory reset, since it is
basically worse than what we had before� x��������������������� X � �&8 xU � �! �$ [ ���������������� �! �! �! � to manage logwatch_cache_t files/dirs
- Allow dnsmasw_t domain to create own tmp files and manage mnt files
- Allow fail2ban_client_t to inherit rlimit information from parent process
- Allow nscd_t to read kernel sysctls
- Label /var/log/conman.d as conman_log_t
- Add dac_override capability to tor_t domain
- Allow certmonger_t to readwrite to user_tmp_t dirs
- Allow abrt_upload_watch_t domain to read general certs
- Allow chornyd_t read phc2sys_t shared memory
- Add several allow rules for pesign policy:
- Add setgid and setuid capabilities to mysqlfd_safe_t domain
- Add tomcat_can_network_connect_db boolean
- Update virt_use_sanlock() boolean to read sanlock state
- Add sanlock_read_state() interface
- Allow zoneminder_t to getattr of fs_t
- Allow rhsmcertd_t domain to send signull to postgresql_t domain
- Add log file type to collectd and allow corresponding access
- Allow policykit_t domain to dbus chat with dhcpc_t
- Adding new boolean keepalived_connect_any()
- Allow amanda to create own amanda_tmpfs_t files
- Allow gdomap_t domain to connect to qdomap_port_t
- /usr/libexec/bluetooth/obexd should have only obexd_exec_t instead of bluetoothd_exec_t type
- Allow ntop_t domain to create/map various sockets/files.
- Enable the dictd to communicate via D-bus.
- Allow inetd_child process to chat via dbus with abrt
- Allow zabbix_agent_t domain to connect to redis_port_t
- Allow rhsmcertd_t domain to read xenfs_t files
- Allow zabbix_agent_t to run zabbix scripts
- Fix openvswith SELinux module
- Fix wrong path in tlp context file BZ(1586329)
- Update brltty SELinux module
- Allow rabbitmq_t domain to create own tmp files/dirs
- Allow policykit_t mmap policykit_auth_exec_t files
- Allow ipmievd_t domain to read general certs
- Add sys_ptrace capability to pcp_pmie_t domain
- Allow squid domain to exec ldconfig
- Update gpg SELinux policy module
- Allow mailman_domain to read system network state
- Allow openvswitch_t domain to read neutron state and read/write fixed disk devices
- Allow antivirus_domain to read all domain system state
- Allow targetd_t domain to red gconf_home_t files/dirs
- Label /usr/libexec/bluetooth/obexd as obexd_exec_t
- Allow init_t domain to create netlink rdma sockets for ibacm policy
- Update corecmd_exec_shell() interface to allow caller domain to mmap shell_exec_t files
- Allow lvm_t domain to write files to all mls levels
- Add to su_role_template allow rule for creating netlink_selinux sockets
- Allow sysadm_t domain to mmap hwdb db
- Allow udev_t domain to mmap kernel modules
- Allow sysadm_screen_t to have capability dac_override and chown
- Allow sysadm_t domain to mmap journal
- Merge branch 'rawhide' of github.com:fedora-selinux/selinux-policy into rawhide
- Label /etc/systemd/system.control/ dir as systemd_unit_file_t
- Merge pull request #215 from bachradsusi/merge-conf-from-fedora
- Allow sysadm_t and staff_t domains to use sudo io logging
- Allow sysadm_t domain create sctp sockets
- Add snapperd_contexts to the policy
- Use system_u:system_r:unconfined_t:s0 in userhelper_context
- Remove unneeded system_u seusers mapping.
- Fedora targeted default user is unconfined_u, root is unconfined_u as well
- Update config to reflect changes in default context for SELinux users related to pam_selinux.so which is now used in systemd-users.
- Change failsafe_context to unconfined_r:unconfined_t:s0
- Update lxc_contexts from Fedora config.tgz
- Add lxc_contexts config file
- Allow traceroute_t domain to exec bin_t binaries
- Allow systemd_passwd_agent_t domain to list sysfs Allow systemd_passwd_agent_t domain to dac_override
- Add new interface dev_map_sysfs()
- Allow sshd_keygen_t to execute plymouthd
- Allow systemd_networkd_t create and relabel tun sockets
- Add new interface postgresql_signull()
- Merge pull request #214 from wrabcak/fb-dhcpc
- Allow dhcpc_t creating own socket files inside /var/run/ Allow dhcpc_t creating netlink_kobject_uevent_socket, netlink_generic_socket, rawip_socket BZ(1585971)
- Allow confined users get AFS tokens
- Allow sysadm_t domain � x�������������`�������� X � �&8 ��������`� l! �$ | ���������������� l! k! m! � d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(r d(r d(rd(rd(rd(rd(rd(rd(rd(rd(rd(rd(rd(rd(rd(rd(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(r d(� x�������������آ������� X � �(8 ~ �������X �$ H ���������������� X W p bf840cdf7270ded1b85c68b42e0e579a71ecea4ae5e21ed1705eacf82c ? ���� S�� !�<��ΰ��Q�d~���dc��
Q�d~����< �%��t�J�)�bf����2mDq���A&]�� +H��w �XZ�0��� �Z7�_g>
uV�t�)�
�6���&G�����<��r�M�g��u� �5�d���U�7M��dsΌ��B�4�b&r�T�oќ ���<[y��SS�ǯ�
UNR3�{W0��}w����dV�IY��-�z�wC:�/r1��G.7͘� 1�T}�O ����P+���Iu�FTN� M��Z�m+q��N�v����Z�>Aa�\ҡ)W������A��.�x9�F��ҊG��[O�sD�Ͽ��o/ ��tBM��
��qM��}&+�:-t&R�� ^��vN��c��� 8�a:�6���$�nv�*�e�V�;%�f�� �E ��%0��[��g�*���� !�<���Q�d~���dc��
Q�d~��꼀 �}�b�0��Zr;�ʷO@�떴�� ���H ��� ���[3�FP�I
;����� �m�-�Nb��h2�e���js,�Mߒ ������!F��U�e��(�� `�Tډ�jS��J��:%�,�z���ɣ1!�0��Z1�7�}����ԩ�yV�cY��Fa�ؿ����,� 9� Y�X�]1}{�0��>j~!����pH�E�v����H��Ӎ)|4 �l��/���� �������c���n�V�q��Q� �u�uQ�˜U�m�"!. �)'@}L���J͗�e��� .���齽��Y���{���� -��{I��g�>H�o���Ȟ�����F r�
�q ����b39� ��x�i�TH��m>rDee5835447297b0256dcf9b397c5557b29a8279854 b12398bd46c9e219b0976fc555782ce75a91991f03b10f4df439a6e16d0989cc d�V� �H d�Vu88ecb0289973d1c784550fa540223bb41f49213b20af59f2267359e0c5a09 0a57d51cd676b98e3313463dccf7fa9aadafe52a45216b7a919a379cd8f07f1d f04d8fdc0a0a301ccbbf543a2b470108c64ee341360f3450ed4fa9bbee04337c 7f735b7254527ce7cae84a854211879a4b85d6a77a92210c4d92bcf12a35618b bf4cfc23ee952a3d82ef33a0f5f87853201c98f1bed034876a910f354f37862d ab4d5012393aed59dc76e27d6e11d1c8f821ab24c3005436dee8d799b6298224 a250275c81c626de4379591d367624b7d9da99a665a946738e657217a9d9e53e ffb7180db84dfa77171ab920412f68bfc801b4c5d0f89252b9effdedafb3ff7c 5ad7af8a9605a23bf714e612313b55b8cf8b152cea19ad49d8744f6c602dcc5a 81168034d5def08bf779028f22e7e908cd09880a42395b3f407050c139339af8 e1695dbfbc6aa7bb3182615bd47905e2df808317e4050878e50bb24285b37068 68fa32b257afe4cc0df4af8e527c30596852be4c0df7b96efa6e6b5298010bb0 3af6b09690b36c30693feb86dd11c1f9783a29fcf5b792e877ccf644c3db98ff 33b8c016cdacfb3fb8c92546e63a8f122e8024b307a841d531ffca110e429730 18d5c080fa0fa289652c0388012f646da1f8ca20193c13cf23cfe9e2a8988c84 15e752538c1bba9c4f862bfff02f6fed657a34d77799439ee030f57f2baac973 4872dfc92b499ac6910db198ea2e3a550b1ff6fdf4b6da825a9713ca60b20e2a cd4c5acb2adad71ae22542fe1641af1cac648ccde40489b666e373ee2794945d 86fb4db30cb93608723a72e04bb15d459ce547d6b14708233cc4204954d8f128 7715a28ade5f02ef0241679265e3b0183c0b58ade46c3ffa275b6696b2c3d7d2 d2a33304cfa10b6fb3b527d29ec93a6309a78df5e75fe9050bdf31053075e219 52407d3133ececb9df0aa7e727f108ac26b59cc6bafd42b004b4c2fce7bcdce5 33a01019659b662ff0a6b99309365c0bf071d1594e010c6278ffe720393b099c 62bae9a8bf57455226087be866595e305260fd4c0a737e3df0d11880bb1d8eb1 7cf8b826e6fc84a7abab4f97ff5b25cfc88c43484029079d148d307037a32944 67e84d0d15af80829c11ded98eef783c7351c135a0a6ecd5853b4a144d3a043c cd41e30adc3969e7eedbc7010481426b1c06a0607a38e99a3234f463afef22cc 049861e1b211f84b59788c57a4f85c9708e8925d4b4874f5d07d6c961e386bc0 7ddd16ecf00c50878305505d39f3484e0e24c95622e089db7d22da9a32acb0b4 1367f9b66bf7173a4b06b11791ee1e9016ba33fd4e51f15b11d037fb01963830 2f44c04710bb6eb10ae435c7e68022090a38545182a4ce212c2e0688f2d8b736 1367f9b66bf7173a4b06b11791ee1e9016ba33fd4e51f15b11d037fb01963830 2f44c04710bb6eb10ae435c7e68022090a38545182a4ce212c2e0688f2d8b736 95265eedcac22f4e186517a8a8207e24494f970538c6e1e84b0d1a1254dd6ab1 f0fdac025744d0f9d55b0eb80bac2854ac9236ed93937ceaf1284be4a404d707 95265eedcac22f4e186517a8a8207e24494f970538c6e1e84b0d1a1254dd6ab1 f0fdac025744d0f9d55b0eb80bac2854ac9236ed93937ceaf1284be4a404d707 3de67c094126a77b0372aa0cb4ba04aafde32ecd2223128bda460fb37bbb2111 3a9e0167264a9e8e170a39c6849c95873149bf7f74d1507e1308ace946a6e222 22b1e4f61ab6812aeda749470bd55b1dbf1111e5f6360910ab4dd408dceb1b75 f91b9ae7887ebedc1f9c42bb72afbffef58d86107f45c05c02a12167aab35e0d 470fcada6746862dfc571d7caf4238772684bf715d683e5edd25bcc197aa4d3d 0ef814d08fdede386a31d95600657a6851aa249e0d14fae3e1bd4c917ca6af94 615d8b79439d5c1328b8a8992a581bb7a532e063118c405184d3f193d42490d9 30f1a23046dbd7c59adbf4dc9d22e7424b2� x�������������P�������� X ~&8 �� ��������n �$ ~ ���������������� n m � P � ? �< d � � � " � ) � > � � � � � � � � � � � � � � � ) � 5 � q � w � ] � ] � ]
h ] � ] � ]
4 ] � ] y ] "J "t ] #� $� % %� &H &T &� ( &� 8 &� o 9 (| o : <� o B �c G � ] H ь ] I � ] X Ә Y Ӵ Z � [ �, \ �T ] ] �� ] ^ �� * b � d � e �
f �
l � t �( ] u � ] v � w �( ] x � ] y � 3 � �� � �� � �� � �� � �� � � � �8 �L �P 6 � � 6
�� � � �8 �< ] � g � h � C python3-dnf-plugins-core 4.0.21 25.el8 Core Plugins for DNF Core Plugins for DNF, Python 3 interface. This package enhances DNF with builddep,
config-manager, copr, debug, debuginfo-install, download, needs-restarting,
groups-manager, repoclosure, repograph, repomanage, reposync, changelog,
repodiff, system-upgrade, offline-upgrade and offline-distrosync commands.
Additionally provides generate_completion_cache passive plugin. f��s390x-builder01.almalinux.org
��AlmaLinux AlmaLinux GPLv2+ AlmaLinux Packaging Team <packager@almalinux.org> Unspecified https://github.com/rpm-software-management/dnf-plugins-core linux noarch _ O O [ [ P� P� *A *A � � %. %. !� !� '� '� @ @ 3 3
�
� { { (� (� Y� Y� $� g *� vZ 1 +L 0* l 4� .` � ,� � )J 98 h� � � � B Y � � F� 1P 3v d� 4� N� ` 3 �X Q� ^@ � 4� �& �l g� � kF < A� �F � f d e i@ �H �( Z( ��A큤������������������������������������������������������������������������������������������������A큤A큤��������A큤��A큤���������������������������������������������������������� `tg�f��`tg�f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��`tg�`tg�f��`tg�`tg�`tg�`tg�f��f��`tg�`tg�`tg�f��f��f��f��`tg�f��f��f��f��f��f��f��f��`tg�f��`tg�f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��f��37e657939cf24783ab4ead7e58718173f4370d25af1e292413afe38c2536b669 88a070b6abbd97161cfc34ae51c121ba04b09752b15b2ecb2616d13c3ea58aef ba9a4e709122afb3acfc2f895dc1a4a428677140a7df01fda2d9a53537d6363f ba9a4e709122afb3acfc2f895dc1a4a428677140a7df01fda2d9a53537d6363f 812e1a20df820f4d163d7eae1ae0287c6178766a9c47ed6a1b5cc737d4e1a0de 812e1a20df820f4d163d7eae1ae0287c6178766a9c47ed6a1b5cc737d4e1a0de 8b62a4c0febdb4fb967f0129a8064232752fd5f2a436cf41fca5328ab9201650 8b62a4c0febdb4fb967f0129a8064232752fd5f2a436cf41fca5328ab9201650 2b3966679ea44645ed10399e27d4b54ccd42161f5d6236aabaecc217321c76f9 2b3966679ea44645ed10399e27d4b54ccd42161f5d6236aabaecc217321c76f9 41c9f8d10e4e9d8256a1926ce81f450754c82f5ead0dd25b6d5d26d8022cee47 41c9f8d10e4e9d8256a1926ce81f450754c82f5ead0dd25b6d5d26d8022cee47 6d5e576bfe982891d377b189ec3c037906bd7ff23b872090e73695068ea70d13 6d5e576bfe982891d377b189ec3c037906bd7ff23b872090e73695068ea70d13 d728274d38d358053c20577fd0ce80ca02fb39d63f83b1170536bb1d3dc307ab d728274d38d358053c20577fd0ce80ca02fb39d63f83b11705� x���������������������� X �&8 ��������`��������! �$ Y ���������������� �! �! �! � blim_sfcbd_t domain to mmap own tmpfs files
- Allow nfsd_t domain to read krb5 keytab files
- Allow nfsd_t domain to manage fadm pid files
- Allow virt_domain to create icmp sockets BZ(1609142)
- Dontaudit oracleasm_t domain to request sys_admin capability
- Update logging_manage_all_logs() interface to allow caller domain map all logfiles - Allow aide to mmap all files
- Revert "Allow firewalld_t do read iptables_var_run_t files"
- Revert "Allow firewalld to create rawip sockets"
- Allow svirt_tcg_t domain to read system state of virtd_t domains
- Update rhcs contexts to reflects the latest fenced changes
- Allow httpd_t domain to rw user_tmp_t files
- Fix typo in openct policy
- Allow winbind_t domian to connect to all ephemeral ports
- Allow firewalld_t do read iptables_var_run_t files
- Allow abrt_t domain to mmap data_home files
- Allow glusterd_t domain to mmap user_tmp_t files
- Allow mongodb_t domain to mmap own var_lib_t files
- Allow firewalld to read kernel usermodehelper state
- Allow modemmanager_t to read sssd public files
- Allow openct_t domain to mmap own var_run_t files
- Allow nnp transition for devicekit daemons
- Allow firewalld to create rawip sockets
- Allow firewalld to getattr proc filesystem
- Dontaudit sys_admin capability for pcscd_t domain
- Revert "Allow pcsd_t domain sys_admin capability"
- Allow fetchmail_t domain to stream connect to sssd
- Allow pcsd_t domain sys_admin capability
- Allow cupsd_t to create cupsd_etc_t dirs
- Allow varnishlog_t domain to list varnishd_var_lib_t dirs
- Allow mongodb_t domain to read system network state BZ(1599230)
- Allow zoneminder_t to getattr of fs_t
- Allow tgtd_t domain to create dirs in /var/run labeled as tgtd_var_run_t BZ(1492377)
- Allow iscsid_t domain to mmap sysfs_t files
- Allow httpd_t domain to mmap own cache files
- Add sys_resource capability to nslcd_t domain
- Fixed typo in logging_audisp_domain interface
- Add interface files_mmap_all_files()
- Add interface iptables_read_var_run()
- Allow systemd to mounton init_var_run_t files
- Update policy rules for auditd_t based on changes in audit version 3
- Allow systemd_tmpfiles_t do mmap system db files
- Don't setup unlabeled_t as an entry_type
- Allow unconfined_service_t to transition to container_runtime_t
- Improve domain_transition_pattern to allow mmap entrypoint bin file. - Allow cupsd_t domain to mmap cupsd_etc_t files
- Allow kadmind_t domain to mmap krb5kdc_principal_t
- Allow virtlogd_t domain to read virt_etc_t link files
- Allow dirsrv_t domain to read crack db
- Dontaudit pegasus_t to require sys_admin capability
- Allow mysqld_t domain to exec mysqld_exec_t binary files
- Allow abrt_t odmain to read rhsmcertd lib files
- Allow winbind_t domain to request kernel module loads
- Allow tomcat_domain to read cgroup_t files
- Allow varnishlog_t domain to mmap varnishd_var_lib_t files
- Allow innd_t domain to mmap news_spool_t files
- Label HOME_DIR/mozilla.pdf file as mozilla_home_t instead of user_home_t
- Allow fenced_t domain to reboot
- Allow amanda_t domain to read network system state
- Allow abrt_t domain to read rhsmcertd logs
- Fix typo in radius policy
- Update zoneminder policy to reflect latest features in zoneminder BZ(1592555)
- Label /usr/bin/esmtp-wrapper as sendmail_exec_t
- Update raid_access_check_mdadm() interface to dontaudit caller domain to mmap mdadm_exec_t binary files
- Dontaudit thumb to read mmap_min_addr
- Allow chronyd_t to send to system_cronjob_t via unix dgram socket BZ(1494904)
- Allow mpd_t domain to mmap mpd_tmpfs_t files BZ(1585443)
- Allow collectd_t domain to use ecryptfs files BZ(1592640)
- Dontaudit mmap home type files for abrt_t domain
- Allow fprintd_t domain creating own tmp files BZ(1590686)
- Allow collectd_t domain to bind on bacula_port_t BZ(1590830)
- Allow fail2ban_t domain to getpgid BZ(1591421)
- Allow nagios_script_t domain to mmap nagios_log_t files BZ(1593808)
- Allow pcp_pmcd_t domain to use sys_ptrace usernamespace cap
- Allow sssd_selinux_manager_t to read/write to systemd sockets BZ(1595458)
- All� x�������������0q������� X �&8 ��������������! �$ + ���������������� �! �! �! � allow systemd-sleep transition to sysstat_t
Resolves: rhbz#1927551
- Change param description in cron interfaces to userdomain_prefix
Resolves: rhbz#1801249
- Add missing declaration in rpm_named_filetrans()
Resolves: rhbz#1801249 - Allow pluto IKEv2 / ESP over TCP
Resolves: rhbz#1931848
- Label SDC(scini) Dell Driver
Resolves: rhbz#1936882
- Add file context specification for /var/tmp/tmp-inst
Resolves: rhbz#1919253
- Allow virtlogd_t to create virt_var_lockd_t dir
Resolves: rhbz#1941464
- Allow cups-lpd read its private runtime socket files
Resolves: rhbz#1919399 - Allow systemd the audit_control capability conditionally
Resolves: rhbz#1861771 - Disallow user_t run su/sudo and staff_t run su
Resolves: rhbz#1907517 - Relabel /usr/sbin/charon-systemd as ipsec_exec_t
Resolves: rhbz#1889542 - Allow unconfined_t and kprop_t to create krb5_0.rcache2 with the right context
Resolves: rhbz#1874527
Resolves: rhbz#1877044
- Allow rhsmcertd bind tcp sockets to a generic node
Resolves: rhbz#1923985
- Allow ipsec_mgmt_t mmap ipsec_conf_file_t files
Resolves: rhbz#1889542
- Allow strongswan start using swanctl method
Resolves: rhbz#1889542
- Allow systemd-importd manage machines.lock file
Resolves: rhbz#1788055 - Allow rtkit_daemon_t domain set process nice value in user namespaces
Resolves: rhbz#1910507
- Allow gpsd read and write ptp4l_t shared memory.
Resolves: rhbz#1803845
- Label /var/run/pcsd-ruby.socket socket with cluster_var_run_t type
Resolves: rhbz#1804626
- Allow Certmonger to use opencryptoki services
Resolves: rhbz#1894132
- Dontaudit vhostmd to write in /var/lib/rpm/ dir and allow signull rpm
Resolves: rhbz#1815603
- Allow rhsmcertd_t read kpatch lib files
Resolves: rhbz#1895322
- Allow ipsec_t connectto ipsec_mgmt_t
Resolves: rhbz#1848355
- Allow IPsec to use opencryptoki services
Resolves: rhbz#1894132
- Allow systemd-importd create /run/systemd/machines.lock file
Resolves: rhbz#1788055 - Allow rhsmcertd_t domain transition to kpatch_t
Resolves: rhbz#1895322
- Revert "Add kpatch_exec() interface"
Resolves: rhbz#1895322
- Revert "Allow rhsmcertd execute kpatch"
Resolves: rhbz#1895322
- Dontaudit NetworkManager_t domain to write to kdump temp pipies
Resolves: rhbz#1842897
- Allow NetworkManager_t domain to get status of samba services
Resolves: rhbz#1781806
- Allow openvswitch create and use xfrm netlink sockets
Resolves: rhbz#1916046
- Allow openvswitch_t perf_event write permission
Resolves: rhbz#1916046
- Add write_perf_event_perms object permission set
Related: rhbz#1916046 - Add kpatch_exec() interface
Resolves: rhbz#1895322
- Allow rhsmcertd execute kpatch
Resolves: rhbz#1895322
- Allow openvswitch_t perf_event open permission
Resolves: rhbz#1916046
- Allow openvswitch fowner capability and create netlink sockets
Resolves: rhbz#1883980
- Add net_broadcast capability to openvswitch_t domain
Resolves: rhbz#1883980
- Update interface modutils_read_module_deps to allow caller domain also mmap modules_dep_t files
Resolves: rhbz#1883980
- Allow machinectl to run pull-tar
Resolves: rhbz#1788055 - Allow wireshark create and use rdma socket
Resolves: rhbz#1844370
- Allow to use nnp_transition in pulseaudio_role
Resolves: rhbz#1854471
- Allow certmonger fsetid capability
Resolves: rhbz#1873211
- Add rsync_sys_admin tunable to allow rsync sys_admin capability
Resolves: rhbz#1889673
- Allow sysadm read and write /dev/rfkill
Resolves: rhbz#1831630
- Allow staff_u run pam_console_apply
Resolves: rhbz#1817690
- Label /dev/vhost-vdpa-[0-9]+ as vhost_device_t
Resolves: rhbz#1907485 - Add cron_dbus_chat_system_job() interface
Resolves: rhbz#1883906
- Dontaudit firewalld dac_override capability
Resolves: rhbz#1759010
- Allow tcsd the setgid capability
Resolves: rhbz#1898694
- Allow timedatex dbus chat with cron system domain
Resolves: rhbz#1883906
- Allow systemd_hostnamed_t domain to dbus chat with sosreport_t domain
Resolves: rhbz#1854299
- Allow pcp-pmcd manage perf_events
Resolves: rhbz#1901958
- Label /dev/isst_interface as cpu_device_t
Resolves: rhbz#1902227
- Allow ipsec set the context of a SPD en� x��������������`������� X �&8 ��
�� �! �$ @ ���������������� �! �! �! � sition from gssproxy_t to httpd_t domains BZ(1548439)
- Allow httpd_t to mmap user_home_type files if boolean httpd_read_user_content is enabled BZ(1555359)
- Allow snapperd to relabel snapperd_data_t
- Improve bluetooth_stream_socket interface to allow caller domain also send bluetooth sockets
- Allow tcpd_t bind on sshd_port_t if ssh_use_tcpd() is enabled
- Allow insmod_t to load modules BZ(1544189)
- Allow systemd_rfkill_t domain sys_admin capability BZ(1557595)
- Allow systemd_networkd_t to read/write tun tap devices
- Add shell_exec_t file as domain entry for init_t
- Label also /run/systemd/resolved/ as systemd_resolved_var_run_t BZ(1556862)
- Dontaudit kernel 4.16 bug when lot of domains requesting load kernel module BZ(1557347)
- Improve userdom_mmap_user_home_content_files
- Allow systemd_logind_t domain to setattributes on fixed disk devices BZ(1555414)
- Dontaudit kernel 4.16 bug when lot of domains requesting load kernel module
- Allow semanage_t domain mmap usr_t files
- Add new boolean: ssh_use_tcpd() - Improve bluetooth_stream_socket interface to allow caller domain also send bluetooth sockets
- Allow tcpd_t bind on sshd_port_t if ssh_use_tcpd() is enabled
- Allow semanage_t domain mmap usr_t files
- Add new boolean: ssh_use_tcpd() - Update screen_role_template() to allow also creating sockets in HOMEDIR/screen/
- Allow newrole_t dacoverride capability
- Allow traceroute_t domain to mmap packet sockets
- Allow netutils_t domain to mmap usmmon device
- Allow netutils_t domain to use mmap on packet_sockets
- Allow traceroute to create icmp packets
- Allos sysadm_t domain to create tipc sockets
- Allow confined users to use new socket classes for bluetooth, alg and tcpdiag sockets - Allow rpcd_t domain dac override
- Allow rpm domain to mmap rpm_var_lib_t files
- Allow arpwatch domain to create bluetooth sockets
- Allow secadm_t domain to mmap audit config and log files
- Update init_abstract_socket_activation() to allow also creating tcp sockets
- getty_t should be ranged in MLS. Then also local_login_t runs as ranged domain.
- Add SELinux support for systemd-importd
- Create new type bpf_t and label /sys/fs/bpf with this type - allow bluetooth_t domain to create alg_socket bz(1554410)
- allow tor_t domain to execute bin_t files bz(1496274)
- allow iscsid_t domain to mmap kernel modules bz(1553759)
- update minidlna selinux policy bz(1554087)
- allow motion_t domain to read sysfs_t files bz(1554142)
- allow snapperd_t domain to getattr on all files,dirs,sockets,pipes bz(1551738)
- allow l2tp_t domain to read ipsec config files bz(1545348)
- allow colord_t to mmap home user files bz(1551033)
- dontaudit httpd_t creating kobject uevent sockets bz(1552536)
- allow ipmievd_t to mmap kernel modules bz(1552535)
- allow boinc_t domain to read cgroup files bz(1468381)
- backport allow rules from refpolicy upstream repo
- allow gpg_t domain to bind on all unereserved udp ports
- allow systemd to create systemd_rfkill_var_lib_t dirs bz(1502164)
- allow netlabel_mgmt_t domain to read sssd public files, stream connect to sssd_t bz(1483655)
- allow xdm_t domain to sys_ptrace bz(1554150)
- allow application_domain_type also mmap inherited user temp files bz(1552765)
- update ipsec_read_config() interface
- fix broken sysadm selinux module
- allow ipsec_t to search for bind cache bz(1542746)
- allow staff_t to send sigkill to mount_t domain bz(1544272)
- label /run/systemd/resolve/stub-resolv.conf as net_conf_t bz(1471545)
- label ip6tables.init as iptables_exec_t bz(1551463)
- allow hostname_t to use usb ttys bz(1542903)
- add fsetid capability to updpwd_t domain bz(1543375)
- allow systemd machined send signal to all domains bz(1372644)
- dontaudit create netlink selinux sockets for unpriv selinux users bz(1547876)
- allow sysadm_t to create netlink generic sockets bz(1547874)
- allow passwd_t domain chroot
- dontaudit confined unpriviliged users setuid capability - Allow l2tpd_t domain to create pppox sockets
- Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_l� x������������� P������� X �&8 � �~ �! �$ " ���������������� �! �! �! � dwalsh@redhat.com> 2.3.3-14 Dan Walsh <dwalsh@redhat.com> 2.3.3-13 Dan Walsh <dwalsh@redhat.com> 2.3.3-12 Dan Walsh <dwalsh@redhat.com> 2.3.3-11 Dan Walsh <dwalsh@redhat.com> 2.3.3-10 Dan Walsh <dwalsh@redhat.com> 2.3.3-9 Dan Walsh <dwalsh@redhat.com> 2.3.3-8 Dan Walsh <dwalsh@redhat.com> 2.3.3-7 Dan Walsh <dwalsh@redhat.com> 2.3.3-6 Dan Walsh <dwalsh@redhat.com> 2.3.3-5 Dan Walsh <dwalsh@redhat.com> 2.3.3-4 Dan Walsh <dwalsh@redhat.com> 2.3.3-3 Dan Walsh <dwalsh@redhat.com> 2.3.3-2 Dan Walsh <dwalsh@redhat.com> 2.3.3-1 Dan Walsh <dwalsh@redhat.com> 2.3.2-4 Dan Walsh <dwalsh@redhat.com> 2.3.2-3 Dan Walsh <dwalsh@redhat.com> 2.3.2-2 Dan Walsh <dwalsh@redhat.com> 2.3.2-1 Dan Walsh <dwalsh@redhat.com> 2.3.1-1 Dan Walsh <dwalsh@redhat.com> 2.2.49-1 Dan Walsh <dwalsh@redhat.com> 2.2.48-1 Dan Walsh <dwalsh@redhat.com> 2.2.47-5 Dan Walsh <dwalsh@redhat.com> 2.2.47-4 Dan Walsh <dwalsh@redhat.com> 2.2.47-3 Dan Walsh <dwalsh@redhat.com> 2.2.47-1 Dan Walsh <dwalsh@redhat.com> 2.2.46-2 Dan Walsh <dwalsh@redhat.com> 2.2.46-1 Dan Walsh <dwalsh@redhat.com> 2.2.45-3 Dan Walsh <dwalsh@redhat.com> 2.2.45-2 Dan Walsh <dwalsh@redhat.com> 2.2.45-1 Dan Walsh <dwalsh@redhat.com> 2.2.44-1 Dan Walsh <dwalsh@redhat.com> 2.2.43-4 Dan Walsh <dwalsh@redhat.com> 2.2.43-3 Dan Walsh <dwalsh@redhat.com> 2.2.43-2 Dan Walsh <dwalsh@redhat.com> 2.2.43-1 Dan Walsh <dwalsh@redhat.com> 2.2.42-4 Dan Walsh <dwalsh@redhat.com> 2.2.42-3 Dan Walsh <dwalsh@redhat.com> 2.2.42-2 Dan Walsh <dwalsh@redhat.com> 2.2.42-1 Dan Walsh <dwalsh@redhat.com> 2.2.41-1 Dan Walsh <dwalsh@redhat.com> 2.2.40-2 Dan Walsh <dwalsh@redhat.com> 2.2.40-1 Dan Walsh <dwalsh@redhat.com> 2.2.39-2 Dan Walsh <dwalsh@redhat.com> 2.2.39-1 Dan Walsh <dwalsh@redhat.com> 2.2.38-6 Dan Walsh <dwalsh@redhat.com> 2.2.38-5 Dan Walsh <dwalsh@redhat.com> 2.2.38-4 Dan Walsh <dwalsh@redhat.com> 2.2.38-3 Dan Walsh <dwalsh@redhat.com> 2.2.38-2 Dan Walsh <dwalsh@redhat.com> 2.2.38-1 Dan Walsh <dwalsh@redhat.com> 2.2.37-1 Dan Walsh <dwalsh@redhat.com> 2.2.36-2 Dan Walsh <dwalsh@redhat.com> 2.2.36-1 James Antill <jantill@redhat.com> 2.2.35-2 Dan Walsh <dwalsh@redhat.com> 2.2.35-1 Dan Walsh <dwalsh@redhat.com> 2.2.34-3 Dan Walsh <dwalsh@redhat.com> 2.2.34-2 Dan Walsh <dwalsh@redhat.com> 2.2.34-1 Dan Walsh <dwalsh@redhat.com> 2.2.33-1 Dan Walsh <dwalsh@redhat.com> 2.2.32-2 Dan Walsh <dwalsh@redhat.com> 2.2.32-1 Dan Walsh <dwalsh@redhat.com> 2.2.31-1 Dan Walsh <dwalsh@redhat.com> 2.2.30-2 Dan Walsh <dwalsh@redhat.com> 2.2.30-1 Dan Walsh <dwalsh@redhat.com> 2.2.29-6 Russell Coker <rcoker@redhat.com> 2.2.29-5 Dan Walsh <dwalsh@redhat.com> 2.2.29-4 Dan Walsh <dwalsh@redhat.com> 2.2.29-3 Dan Walsh <dwalsh@redhat.com> 2.2.29-2 Dan Walsh <dwalsh@redhat.com> 2.2.29-1 Dan Walsh <dwalsh@redhat.com> 2.2.28-3 Dan Walsh <dwalsh@redhat.com> 2.2.28-2 Dan Walsh <dwalsh@redhat.com> 2.2.28-1 Dan Walsh <dwalsh@redhat.com> 2.2.27-1 Dan Walsh <dwalsh@redhat.com> 2.2.25-3 Dan Walsh <dwalsh@redhat.com> 2.2.25-2 Dan Walsh <dwalsh@redhat.com> 2.2.24-1 Dan Walsh <dwalsh@redhat.com> 2.2.23-19 Dan Walsh <dwalsh@redhat.com> 2.2.23-18 Dan Walsh <dwalsh@redhat.com> 2.2.23-17 Karsten Hopp <karsten@redhat.de> 2.2.23-16 Dan Walsh <dwalsh@redhat.com> 2.2.23-15 Dan Walsh <dwalsh@redhat.com> 2.2.23-14 Dan Walsh <dwalsh@redhat.com> 2.2.23-13 Dan Walsh <dwalsh@redhat.com> 2.2.23-12 Jeremy Katz <katzj@redhat.com> - 2.2.23-11 Jeremy Katz <katzj@redhat.com> - 2.2.23-10 Dan Walsh <dwalsh@redhat.com> 2.2.23-9 Dan Walsh <dwalsh@redhat.com> 2.2.23-8 Dan Walsh <dwalsh@redhat.com> 2.2.23-7 Dan Walsh <dwalsh@redhat.com> 2.2.23-5 Dan Walsh <dwalsh@redhat.com> 2.2.23-4 Dan Walsh <dwalsh@redhat.com> 2.2.23-3 Dan Walsh <dwalsh@redhat.com> 2.2.23-2 Dan Walsh <dwalsh@redhat.com> 2.2.23-1 Dan Walsh <dwalsh@redhat.com> 2.2.22-2 Dan Walsh <dwalsh@redhat.com> 2.2.22-1 Dan Walsh <dwalsh@redhat.com> 2.2.21-9 Dan Walsh <dwalsh@redhat.com> 2.2.21-8 Dan Walsh <dwalsh@redhat.com> 2.2.21-7 Dan Walsh <dwalsh@redhat.com> 2.2.21-6 Dan Walsh <dwalsh@redhat.com> 2.2.21-5 Dan Walsh <dwalsh@redhat.com> 2.2.21-4 Dan Walsh <dwalsh@redhat.com> 2.2.21-3 Dan Walsh <d� x��������������?������� X �%8 ��������������2 �$ " ���������������� 2 3 1 � obert@fedoraproject.org> - 0.11.7-1 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.0-10 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.0-9 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.0-8 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.0-7 Jeff Law <law@redhat.com> - 0.10.0-5 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.0-4 Jeff Law <law@redhat.com> - 0.10.0-3 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.0-2 Eric Smith <brouhaha@fedoraproject.org> - 0.10.0-1 Fedora Release Engineering <releng@fedoraproject.org> - 0.9.1-4 Fedora Release Engineering <releng@fedoraproject.org> - 0.9.1-3 Fedora Release Engineering <releng@fedoraproject.org> - 0.9.1-2 Eric Smith <brouhaha@fedoraproject.org> - 0.9.1-1 Eric Smith <brouhaha@fedoraproject.org> - 0.8.6-3 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.6-2 Jens Petersen <petersen@redhat.com> - 0.8.6-1 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.3-5 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.3-4 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.3-3 Eric Smith <brouhaha@fedoraproject.org> - 0.8.3-2 Eric Smith <brouhaha@fedoraproject.org> - 0.8.3-1 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-4 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.0-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.0-2 Eric Smith <brouhaha@fedoraproject.org> - 0.7.0-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.0-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.0-2 Eric Smith <brouhaha@fedoraproject.org> - 0.6.0-1 Eric Smith <brouhaha@fedoraproject.org> - 0.5.2-3 Eric Smith <brouhaha@fedoraproject.org> - 0.5.2-2 Eric Smith <brouhaha@fedoraproject.org> - 0.5.2-1 Eric Smith <brouhaha@fedoraproject.org> - 0.5.1-2 Eric Smith <brouhaha@fedoraproject.org> - 0.5.1-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-3 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-2 Eric Smith <eric@brouhaha.com> - 0.4.2-1 Eric Smith <eric@brouhaha.com> - 0.4.1-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3.0-2 Eric Smith <eric@brouhaha.com> - 0.3.0-1 Eric Smith <eric@brouhaha.com> - 0.2.0-3 Eric Smith <eric@brouhaha.com> - 0.2.0-2 Eric Smith <eric@brouhaha.com> - 0.2.0-1 - Update to 0.12.2 (#2257217) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Port configure script to C99 - Add runtime requirement on libmd-devel to libbsd-devel (#2148612) - Update to 0.11.7 (#1742611) - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use symver attribute for symbol versioning
Fix configure test compromised by LTO
Fix nlist test compromised by LTO
Re-enable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.10.1. (#1742611) - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Update to 0.9.1. (#1538853) - Mark explicit_bzero() and reallocarray() as compat symbols. (#1408465) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 0.8.6 (#1462722)
- fixes manpage conflict (#1504831)
- condition the gcc deprecation patch on epel < 7
- clean up spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mas� x�������������/������� X �&8 ����������������! �$ 8 ���������������� �! �! �! � at.com> 3.11.1-9 Dan Walsh <dwalsh@redhat.com> 3.11.1-8 Dan Walsh <dwalsh@redhat.com> 3.11.1-7 Dan Walsh <dwalsh@redhat.com> 3.11.1-6 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-5 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-4 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-3 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-1 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-0 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-15 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-14 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-13 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.11.0-11 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-10 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-9 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-7 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-5 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-4 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-2 Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-128 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-127 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-126 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-125 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-124 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-123 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-122 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-121 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-120 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-119 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-118 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-117 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-116 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-115 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-114 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-113 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-112 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-111 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-110 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-109 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-108 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-107 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-106 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-105 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-104 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-103 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-102 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-101 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-100 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-99 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-98 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-97 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-96 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-95 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-94 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-93 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-92 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-91 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-90 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-89 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-88 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-87 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-86 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-85 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-84 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-83 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-82 Dan Walsh <dwalsh@redhat.com> 3.10.0-81.2 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-81 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-79 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-78 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-77 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-76 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-75 Dan Walsh <dwalsh@redhat.com> 3.10.0-74.2 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-74 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-73 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-71 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-70 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-69 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-68 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-67 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-66 Miroslav Grepl <mgrepl@redhat.� x�������������� ������� X �&8 ����������������j! �$ z ���������������� j! i! k! � d(rd(r d(r
d(r
d(r
d(q�d(q�d(q�d(q�d(rd(rd(rd(rd(rd(r
d(r
d(r
d(r
d(q�d(q�d(q�d(q�d(q�d(r
d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(q�d(r
d(rd(rd(r
d(rd(s�d(rd(rd(rd(rd(rd(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(� x������������� ������� X $'8 ������X+�������! �$ h ���������������� �! �! �! � grams
- Allow alsa to create lock file to see if it fixes.
- Add support for zabbix external scripts for which zabbix_script_t domain has been created. This domain is unconfined by default and user needs to run "semodule -d unconfined" to make system running without unconfined domains. The default location of these scripts is /usr/lib/zabbix/externalscripts. If a user change DATADIR in CONFIG_EXTERNALSCRIPTS then he needs to set labeling for this new location.
- Add interface for journalctl_exec
- Add labels also for glusterd sockets.
- Change virt.te to match default docker capabilies
- Add additional booleans for turning on mknod or all caps.
- Also add interface to allow users to write policy that matches docker defaults
- for capabilies.
- Label dhcpd6 unit file.
- Add support also for dhcp IPv6 services.
- Added support for dhcrelay service
- Additional access for bluejeans
- docker needs more access, need back port to RHEL7
- Allow mdadm to connect to own socket created by mdadm running as kernel_t.
- Fix pkcs, Remove pkcs_lock_filetrans and Add files_search_locks
- Allow bacula manage bacula_log_t dirs
- Allow pkcs_slotd_t read /etc/passwd, Label /var/lock/opencryptoki as pkcs_slotd_lock_t
- Fix mistakes keystone and quantum
- Label neutron var run dir
- Label keystone var run dir
- Fix bad labeling for /usr/s?bin/(oo|rhc)-restorer-wrapper.sh in openshift.fc.
- Dontaudit attempts to access check cert dirs/files for sssd.
- Allow sensord to send a signal.
- Allow certmonger to stream connect to dirsrv to make ipa-server-install working.
- Label zabbix_var_lib_t directories
- Label conmans pid file as conman_var_run_t
- Label also /var/run/glusterd.socket file as gluster_var_run_t
- Fix policy for pkcsslotd from opencryptoki
- Update cockpik policy from cockpit usptream.
- Allow certmonger to exec ldconfig to make ipa-server-install working.
- Added support for Naemon policy
- Allow keepalived manage snmp files
- Add setpgid process to mip6d
- remove duplicate rule
- Allow postfix_smtpd to stream connect to antivirus
- Dontaudit list /tmp for icecast
- Allow zabbix domains to access /proc//net/dev. - Allow zabbix domains to access /proc//net/dev.
- Dontaudit list /tmp for icecast (#894387)
- Allow postfix_smtpd to stream connect to antivirus (#1105889)
- Add setpgid process to mip6d
- Allow keepalived manage snmp files(#1053450)
- Added support for Naemon policy (#1120789).
- Allow certmonger to exec ldconfig to make ipa-server-install working. (#1122110)
- Update cockpik policy from cockpit usptream. - Revert labeling back to /var/run/systemd/initctl/fifo
- geoclue dbus chats with modemmanger
- Bluejeans wants to connect to port 5000
- geoclue dbus chats with modemmange - Allow sysadm to dbus chat with systemd
- Add logging_dontaudit_search_audit_logs()
- Add new files_read_all_mountpoint_symlinks()
- Fix labeling path from /var/run/systemd/initctl/fifo to /var/run/initctl/fifo.
- Allow ndc to read random and urandom device (#1110397)
- Allow zabbix to read system network state
- Allow fprintd to execute usr_t/bin_t
- Allow mailserver_domain domains to append dead.letter labeled as mail_home_t
- Add glance_use_execmem boolean to have glance configured to use Ceph/rbd
- Dontaudit search audit logs for fail2ban
- Allow mailserver_domain domains to create mail home content with right labeling
- Dontaudit svirt_sandbox_domain doing access checks on /proc
- Fix files_pid_filetrans() calling in nut.te to reflect allow rules.
- Use nut_domain attribute for files_pid_filetrans() for nut domains.
- Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs
- Fix nut domains only have type transition on dirs in /run/nut directory.
- Allow net_admin/net_raw capabilities for haproxy_t. haproxy uses setsockopt()
- Clean up osad policy. Remove additional interfaces/rules - Allow systemd domains to check lvm status
- Allow getty to execute plymouth.#1112870
- Allow sshd to send signal to chkpwd_t
- initrctl fifo file has been renamed
- Set proper labeling on /var/run/sddm
� x�������������x�������� X '8 @s��������������! �$ c ���������������� �! �! �! �
- Remove sysnet_filetrans_named_content from fail2ban - Fix labels on new location of resolv.conf
- syslog is not writing to the audit socket
- seunshare is doing getattr on unix_stream_sockets leaked into it
- Allow sshd_t to manage gssd keyring
- Allow apps that create net_conf_t content to create .resolv.conf.NetworkManager
- Posgresql listens on port 9898 when running PCP (pgpool Control Port)
- Allow svirt sandbox domains to read /proc/mtrr
- Allow polipo_deamon connect to all ephemeral ports. BZ(1187723)
- Allow dovecot domains to use sys_resouce
- Allow sshd_t to manage gssd keyring
- gpg_pinentry_t needs more access in f22 - Allow docker to attach to the sandbox and user domains tun devices
- Allow pingd to read /dev/urandom. BZ(1181831)
- Allow virtd to list all mountpoints
- Allow sblim-sfcb to search images
- pkcsslotd_lock_t should be an alias for pkcs_slotd_lock_t.
- Call correct macro in virt_read_content().
- Dontaudit couchdb search in gconf_home_t. BZ(1177717)
- Allow docker_t to changes it rlimit
- Allow neutron to read rpm DB.
- Allow radius to connect/bind radsec ports
- Allow pm-suspend running as virt_qemu_ga to read /var/log/pm-suspend.log.
- Add devicekit_read_log_files().
- Allow virt_qemu_ga to dbus chat with rpm.
- Allow netutils chown capability to make tcpdump working with -w.
- Label /ostree/deploy/rhel-atomic-host/deploy directory as system_conf_t.
- journald now reads the netlink audit socket
- Add auditing support for ipsec. - Bump release - remove duplicate filename transition rules.
- Call proper interface in sosreport.te.
- Allow fetchmail to manage its keyring
- Allow mail munin to create udp_sockets
- Allow couchdb to sendto kernel unix domain sockets - Add /etc/selinux/targeted/contexts/openssh_contexts - Allow logrotate to read hawkey.log in /var/cache/dnf/ BZ(1163438)
- Allow virt_qemu_ga_t to execute kmod.
- Add missing files_dontaudit_list_security_dirs() for smbd_t in samba_export_all_ro boolean
- Add additionnal MLS attribute for oddjob_mkhomedir to create homedirs.
- Add support for /usr/share/vdsm/daemonAdapter.
- Docker has a new config/key file it writes to /etc/docker
- Allow bacula to connect also to postgresql. - Allow admin SELinux users mounting / as private within a new mount namespace as root in MLS.
- Fix miscfiles_manage_generic_cert_files() to allow manage link files
- Allow pegasus_openlmi_storage_t use nsswitch. BZ(1172258)
- Add support for /var/run/gluster.
- Allow openvpn manage systemd_passwd_var_run_t files. BZ(1170085) - Add files_dontaudit_list_security_dirs() interface.
- Added seutil_dontaudit_access_check_semanage_module_store interface.
- Allow docker to create /root/.docker
- Allow rlogind to use also rlogin ports
- dontaudit list security dirs for samba domain
- Dontaudit couchdb to list /var - Update to have all _systemctl() interface also init_reload_services()
- Dontaudit access check on SELinux module store for sssd.
- Label /var/lib/rpmrebuilddb/ as rpm_var_lib_t. BZ (1167946) - Allow reading of symlinks in /etc/puppet
- Added TAGS to gitignore
- I guess there can be content under /var/lib/lockdown #1167502
- Allow rhev-agentd to read /dev/.udev/db to make deploying hosted engine via iSCSI working.
- Allow keystone to send a generic signal to own process.
- Allow radius to bind tcp/1812 radius port.
- Dontaudit list user_tmp files for system_mail_t
- label virt-who as virtd_exec_t
- Allow rhsmcertd to send a null signal to virt-who running as virtd_t
- Add virt_signull() interface
- Add missing alias for _content_rw_t
- Allow .snapshots to be created in other directories, on all mountpoints
- Allow spamd to access razor-agent.log
- Add fixes for sfcb from libvirt-cim TestOnly bug. (#1152104)
- Allow .snapshots to be created in other directories, on all mountpoints
- Label tcp port 5280 as ejabberd port. BZ(1059930)
- Make /usr/bin/vncserver running as unconfined_service_t
- Label /etc/docker/certs.d as cert_t
- Allow all systemd domains to search file systems - Allow NetworkManager stream connect on openvpn. BZ(1165� x�������������������� X
�&8 �t � �! �$ = ���������������� �! �! �! � n Walsh <dwalsh@redhat.com> 3.6.12-37 Dan Walsh <dwalsh@redhat.com> 3.6.12-36 Dan Walsh <dwalsh@redhat.com> 3.6.12-35 Dan Walsh <dwalsh@redhat.com> 3.6.12-34 Dan Walsh <dwalsh@redhat.com> 3.6.12-33 Dan Walsh <dwalsh@redhat.com> 3.6.12-31 Dan Walsh <dwalsh@redhat.com> 3.6.12-30 Dan Walsh <dwalsh@redhat.com> 3.6.12-29 Dan Walsh <dwalsh@redhat.com> 3.6.12-28 Dan Walsh <dwalsh@redhat.com> 3.6.12-27 Dan Walsh <dwalsh@redhat.com> 3.6.12-26 Dan Walsh <dwalsh@redhat.com> 3.6.12-25 Dan Walsh <dwalsh@redhat.com> 3.6.12-24 Dan Walsh <dwalsh@redhat.com> 3.6.12-23 Dan Walsh <dwalsh@redhat.com> 3.6.12-22 Dan Walsh <dwalsh@redhat.com> 3.6.12-21 Dan Walsh <dwalsh@redhat.com> 3.6.12-20 Dan Walsh <dwalsh@redhat.com> 3.6.12-19 Dan Walsh <dwalsh@redhat.com> 3.6.12-16 Dan Walsh <dwalsh@redhat.com> 3.6.12-15 Dan Walsh <dwalsh@redhat.com> 3.6.12-14 Dan Walsh <dwalsh@redhat.com> 3.6.12-13 Dan Walsh <dwalsh@redhat.com> 3.6.12-12 Dan Walsh <dwalsh@redhat.com> 3.6.12-11 Dan Walsh <dwalsh@redhat.com> 3.6.12-10 Dan Walsh <dwalsh@redhat.com> 3.6.12-9 Dan Walsh <dwalsh@redhat.com> 3.6.12-8 Dan Walsh <dwalsh@redhat.com> 3.6.12-7 Dan Walsh <dwalsh@redhat.com> 3.6.12-6 Dan Walsh <dwalsh@redhat.com> 3.6.12-5 Dan Walsh <dwalsh@redhat.com> 3.6.12-4 Dan Walsh <dwalsh@redhat.com> 3.6.12-3 Dan Walsh <dwalsh@redhat.com> 3.6.12-2 Dan Walsh <dwalsh@redhat.com> 3.6.12-1 Dan Walsh <dwalsh@redhat.com> 3.6.11-1 Dan Walsh <dwalsh@redhat.com> 3.6.10-9 Dan Walsh <dwalsh@redhat.com> 3.6.10-8 Dan Walsh <dwalsh@redhat.com> 3.6.10-7 Dan Walsh <dwalsh@redhat.com> 3.6.10-6 Dan Walsh <dwalsh@redhat.com> 3.6.10-5 Dan Walsh <dwalsh@redhat.com> 3.6.10-4 Dan Walsh <dwalsh@redhat.com> 3.6.10-3 Dan Walsh <dwalsh@redhat.com> 3.6.10-2 Dan Walsh <dwalsh@redhat.com> 3.6.10-1 Dan Walsh <dwalsh@redhat.com> 3.6.9-4 Dan Walsh <dwalsh@redhat.com> 3.6.9-3 Dan Walsh <dwalsh@redhat.com> 3.6.9-2 Dan Walsh <dwalsh@redhat.com> 3.6.9-1 Dan Walsh <dwalsh@redhat.com> 3.6.8-4 Dan Walsh <dwalsh@redhat.com> 3.6.8-3 Dan Walsh <dwalsh@redhat.com> 3.6.8-2 Dan Walsh <dwalsh@redhat.com> 3.6.8-1 Dan Walsh <dwalsh@redhat.com> 3.6.7-2 Dan Walsh <dwalsh@redhat.com> 3.6.7-1 Dan Walsh <dwalsh@redhat.com> 3.6.6-9 Dan Walsh <dwalsh@redhat.com> 3.6.6-8 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.6.6-7 Dan Walsh <dwalsh@redhat.com> 3.6.6-6 Dan Walsh <dwalsh@redhat.com> 3.6.6-5 Dan Walsh <dwalsh@redhat.com> 3.6.6-4 Dan Walsh <dwalsh@redhat.com> 3.6.6-3 Dan Walsh <dwalsh@redhat.com> 3.6.6-2 Dan Walsh <dwalsh@redhat.com> 3.6.6-1 Dan Walsh <dwalsh@redhat.com> 3.6.5-3 Dan Walsh <dwalsh@redhat.com> 3.6.5-1 Dan Walsh <dwalsh@redhat.com> 3.6.4-6 Dan Walsh <dwalsh@redhat.com> 3.6.4-5 Dan Walsh <dwalsh@redhat.com> 3.6.4-4 Dan Walsh <dwalsh@redhat.com> 3.6.4-3 Dan Walsh <dwalsh@redhat.com> 3.6.4-2 Dan Walsh <dwalsh@redhat.com> 3.6.4-1 Dan Walsh <dwalsh@redhat.com> 3.6.3-13 Dan Walsh <dwalsh@redhat.com> 3.6.3-12 Dan Walsh <dwalsh@redhat.com> 3.6.3-11 Dan Walsh <dwalsh@redhat.com> 3.6.3-10 Dan Walsh <dwalsh@redhat.com> 3.6.3-9 Dan Walsh <dwalsh@redhat.com> 3.6.3-8 Dan Walsh <dwalsh@redhat.com> 3.6.3-7 Dan Walsh <dwalsh@redhat.com> 3.6.3-6 Dan Walsh <dwalsh@redhat.com> 3.6.3-3 Dan Walsh <dwalsh@redhat.com> 3.6.3-2 Dan Walsh <dwalsh@redhat.com> 3.6.3-1 Dan Walsh <dwalsh@redhat.com> 3.6.2-5 Dan Walsh <dwalsh@redhat.com> 3.6.2-4 Dan Walsh <dwalsh@redhat.com> 3.6.2-3 Dan Walsh <dwalsh@redhat.com> 3.6.2-2 Dan Walsh <dwalsh@redhat.com> 3.6.2-1 Dan Walsh <dwalsh@redhat.com> 3.6.1-15 Dan Walsh <dwalsh@redhat.com> 3.6.1-14 Dan Walsh <dwalsh@redhat.com> 3.6.1-13 Dan Walsh <dwalsh@redhat.com> 3.6.1-12 Dan Walsh <dwalsh@redhat.com> 3.6.1-11 Dan Walsh <dwalsh@redhat.com> 3.6.1-10 Dan Walsh <dwalsh@redhat.com> 3.6.1-9 Dan Walsh <dwalsh@redhat.com> 3.6.1-8 Dan Walsh <dwalsh@redhat.com> 3.6.1-7 Dan Walsh <dwalsh@redhat.com> 3.6.1-4 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 3.6.1-2 Dan Walsh <dwalsh@redhat.com> 3.5.13-19 Dan Walsh <dwalsh@redhat.com> 3.5.13-18 Dan Walsh <dwalsh@redhat.com> 3.5.13-17 Dan Walsh <dwalsh@redhat.com> 3.5.13-16 Dan Walsh <dwalsh@redhat.com> 3.5.13-15 Dan Walsh <dw� x�������������h������� X &8 �" �������xQ �$ h ���������������� xQ wQ yQ � bdc36fe3db99045367d4d4aafde70e4ccfd0b4b87a44ba a6bd8e0469a084dd94c7d02b91894c4751c7d4bbe34b959c9542c5999b98e006 3ce6907debe2def269d5d671d27f270dd50bf2079b605745189b8ca179628797 916707f3cabc5a7f916edb9f9fe3fb5ab0fb157c7e7ce363cb1b3870a56e143f 1c5cadf55ab35a697eeb75eaa70ee5357b004eea1075c2472e8a17be5f6511c8 69ded63ce7d43d253b9fbfe65301fb3b66f014d75e8baf87d6b881c96e20be09 7045ec732c90a900defb195c46e27caf395a01ef11db2cdf87622e40e88adfa5 43e0fd8734653e0f961a9d1cbe967c42dc9f8e3521d2b86ac60ef3a89ca0109d 91d2a32970f5b6e3608dcbe9f7989d022d6db56ec70aa4e8141fa0a3e894a3a5 23d3de13e92514357936e365d020e9cf48b080e221573bc3f8d961409489cf26 f398bef6bed2636d979fc93996656ea6c167ae7061140f3c7202a556cd54e8fd cc39f873398911bcc612461a65883228b860e27848cb7fe2f34dbf8661583203 df573a2bb638885128b6cced51ff3c4b0408f947029442943a46b4c28a2ac37d 1d2222314056c1335fb35d44f8ebed3a495ca01d3a6341d2df736c02389ef5b4 8ad21844d01ed73921b8abb013ae9309192bdf66d2aa1c03e2d27aa1b6a0cf76 6d2f4db2958686865e84f5ba4c7607a248572dad03436d7081aeb0cf08a3ae26 246b860bc2ed3412981baac7f97aa85859b62e37ed8958b414ed8cf056314a88 7e79d967b8868952068ea2bef7cdca731d7ec33320e837b94e114e225619156c daea05ed03ea0d4a2b14f15e03dffa64c09c0d36c877ffea7f5021e0b61b2e8c d7736c1dded57ea85fdd810eba19fb031c2b40f55ce81d2298a3d6ee7fd58f77 aa4e58a0a3f84af6d95fca713ec3bc5ff217ad7bcd5fa71077e0746312e6031e a3791b64af3c7c98369c4df4d4ffac8dd81f1409992a77e6443e59c4dd7bef09 39ff1f864396081ca9013dc474c7d397327e0a43f8a254c6a8e9746164f0eb57 ec357291b13066c85e01eaf248cab2d82eef2c143d8f3fc415e4dd83310af7a0 7b4b53aa02a6addaf2c902a58b0f56d23ec5e6b11ab574674ec4afed5ea6d8eb f6231fd82124bbc68f7a020c52e2320da465414fd56b89c60e2f67978ba1fd9e ad6ccf04bd5ab88efe4a73dfcd6ea1759e0050bf031e10f20824604f061bb9be fe5d535f3693e76f4a7331194a0c5a49ea869532dae1606742568c7537923210 ae8164ea0de68a2b2d5ad5ade6b9e66866d73d1406110a64763111c58c8177df aa877ba2d7e12e258fce21d60a6e31ca0e138c1e1eafbcbdec4315353c60baaf a0cb44adb86ad045bd7d6a0db504daa3f080147a58004825dd32b7d65bdd2b89 1351e6d41ac3a297c76002de48e098d5c384fe1df2b0330384eac15b8a4f75d0 5803681b1fb451476c8a7b48d12d0648098ff999e664311e5318520b4beb5bba abfe9a38143dcd0db00b50caab33854143693dfeee4d4f7fd24fe702c81d8a7e 2b2f7da719606d5ab86d7a2be75e2eceb347c7b555910a5332d1abfdf814bf67 443450095e1e1c71d2d33fb8a48c3bd4e783c3e21a3740ca891d9302dc680272 530eef33641b4cf46dc872a9e0439eb68dda5be083b721a2a96e07ade2e42198 e5da7a47358758adadc46a7ee09dbfd5733fca75a28d87c77ab83d8afcc0edd9 31d97ed34ae67bbd5c85acc6954040624cce479425c5acf48a5cf3c8068d7420 68e43951c277a5ff773f0914be789d4f6e9c0b85d3d91ccc8b2f409fbdd888df 7786b0e1cfd2f6effa653e18297bb93d8e72505a995f386481eec3422333b67e 116b2b811fd5622b40b97ad7ee2ed7681fb70806bf5039f9801e5299dc471657 09e539dfee0e836fdeae456fe6f3165028a27d743ff744982f2172fc818e9ff1 2f94df9c1ae05b53990dceb51635ac3f4624c1c160fdc4723baf4070745bd5ec 60a89de30b759ab04d8d012429a32a29b04a8b8381c5f1ed1caed718c76cd8d0 9e4c32f20cb3df5c3d0c6fc041f251606a288630f6a0432f39ffaa8b357df027 cd75cbdb55e34b2ab3a57f518f9b12441159897c3e6bb185871c8a731c5e215b fc9f212d3afbb0dc39c4286fcc18d23afaa7c144c3ca09aabd864bd0628fe421 12eb0df8b6ed9313b1f7f738cd360e827afb83883cf805a3017c1366cb8ee71c 96b61cc56937153f628bcb7c3eeab19031d68ca11482e2d8815d0139426713ac b8a24d9ffc68599934e7d13fa3bc4786fd6bb1604c8962ed6b97e7550456b816 4579234c4e84224f24857961c20cac6689824dc08b3ffbf128b04bade8a6a373 119d4c48e7860c6e03bddae68fc0654ec594f9e6ca28bf6cf02127178394a98f 95109632e42bc5bd7783bbd6d7a52c8d3436f63335d953a559d5bbc70194d7fa 2b764c68c361168c8e777b55484dbdabc19ca72c979bd8026c53ae2fb61261e0 235702b743691f735a6ad4de208907a177d60a4988ceeabc71e199bbe7ba2ee4 491342f6939b50d728a80650ecdc4025e8e18a864273e776b7eeadda82df51ce 18d7ad3a92a4e4043065832519ebc687a30bc8a977fada6397b10dd06d9ff7f3 0b5d5ed4097d58bf288af30f7a5cf78bda2409beb60616e52f1429c857e8778b 4a7ae4b30070399f44d699a0c979d738a8d70c1a512758dd93f60a8a9d142f70 190d8e4e9b3bb63997c16908c958cc20d2e523ca1c23c2ba0e03d4942edccefb 8c0c67b2e86323339d9e4bc3328990bc6f8f09ea9f291bb2305ec9c43b9a84ad 5f2342bdc8940f002512b693205d� x��������������������� X �%8 ��������ؿ 3 �$ # ���������������� 3 2 � H ,� ? 'l d � � � � � Q � H � L � t � x � � � � � � � ) � I � O X
�
�
�
�
�
D
v
� �
� � � ( � 8 � 2 9 � 2 : � 2 G !�
H !�
I !�
X !� Y "0 \ "\
] "�
^ "� b #� d $� e $� f $� l $� t %
u %0
v %X w &
x &,
y &T ( � &� � &� � ' � '$ � 'h '| '� 6 )� )� 6
+� ,% � ,h ,l
,x g ,| h ,� C libbsd 0.12.2 1.el8 Library providing BSD-compatible functions for portability libbsd provides useful functions commonly found on BSD systems, and
lacking on others like GNU systems, thus making it easier to port
projects with strong BSD origins, without needing to embed the same
code over and over again on each project. f�dbuildhw-x86-02.iad2.fedoraproject.org ��Fedora Project Fedora Project Beerware AND BSD-2-Clause AND BSD-3-Clause AND ISC AND libutil-David-Nugent AND MIT AND LicenseRef-Fedora-Public-Domain Fedora Project Unspecified https://libbsd.freedesktop.org/ linux x86_64 & ; � W|A�A�����A큤��A큤 f�cf�cf�cf�af�af�ce��te�Qf�ce��� 526a917f672bc38d32aba44fe6a5963480f8b52b4b6bd27ac17cd64e0ac33a56 265dd6961833394f198f6f78d13a797045759cefc034e048e651d486f677c50e a09e19251ce4c69d3fd4b5887aeaa46ee4723c43d7e99c54843891f9ab0832e3 978426553ab7b9cfb4503d98e578a77b8c3142c099100aa9791fd21be5a95f97 ../../../../usr/lib64/libbsd.so.0.12.2 libbsd.so.0.12.2 �root root root root root root root root root root root root root root root root root root root root libbsd-0.12.2-1.el8.src.rpm ����������������������������������������libbsd libbsd(x86-64) libbsd.so.0()(64bit) libbsd.so.0(LIBBSD_0.0)(64bit) libbsd.so.0(LIBBSD_0.1)(64bit) libbsd.so.0(LIBBSD_0.10.0)(64bit) libbsd.so.0(LIBBSD_0.11.0)(64bit) libbsd.so.0(LIBBSD_0.12.0)(64bit) libbsd.so.0(LIBBSD_0.2)(64bit) libbsd.so.0(LIBBSD_0.3)(64bit) libbsd.so.0(LIBBSD_0.4)(64bit) libbsd.so.0(LIBBSD_0.5)(64bit) libbsd.so.0(LIBBSD_0.6)(64bit) libbsd.so.0(LIBBSD_0.7)(64bit) libbsd.so.0(LIBBSD_0.8)(64bit) libbsd.so.0(LIBBSD_0.9)(64bit) libbsd.so.0(LIBBSD_0.9.1)(64bit) @ @ @ @ @ @ @ @ @ @ @
@ libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.25)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.8)(64bit) libmd.so.0()(64bit) libmd.so.0(LIBMD_0.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 fg@e�M@e�@d�!�c�0�c��c���c\�b�?�a�N�`�]�`@_X�_ @^�z�^1s�]^��]9��\T4�[H�@[@[@Zz�@Z@Y�@Yx�@X��@X]�X[�@V�=@U�a@S�@S�;@S���Q��Q�Q�X@Q�@Q���Q�y�Q��Q �P��O�v@O�Q�O �N�;@Kb�Kb�Ka|@Robert Scheck <robert@fedoraproject.org> - 0.12.2-1 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.7-7 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.7-6 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.7-5 Fedora Release Engineering <releng@fedoraproject.org> - 0.11.7-4 Florian Weimer <fweimer@redhat.com> - 0.11.7-3 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.11.7-2 Robert Scheck <r� x�������������X�������� X
'8 ��������� �! �$ F ���������������� �! �! �! � sb ttys.
- Allow systemd_machined to read mock lib files. BZ(1504493)
- Allow systemd_resolved_t to dbusd chat with NetworkManager_t BZ(1505081) - Fix typo in virt file contexts file
- allow ipa_dnskey_t to read /proc/net/unix file
- Allow openvswitch to run setfiles in setfiles_t domain.
- Allow openvswitch_t domain to read process data of neutron_t domains
- Fix typo in ipa_cert_filetrans_named_content() interface
- Fix typo bug in summary of xguest SELinux module
- Allow virtual machine with svirt_t label to stream connect to openvswitch.
- Label qemu-pr-helper script as virt_exec_t so this script won't run as unconfined_service_t - Merge pull request #19 from RodrigoQuesadaDev/snapper-fix-1
- Allow httpd_t domain to mmap httpd_user_content_t files. BZ(1494852)
- Add nnp transition rule for services using NoNewPrivileges systemd feature
- Add map permission into dev_rw_infiniband_dev() interface to allow caller domain mmap infiniband chr device BZ(1500923)
- Add init_nnp_daemon_domain interface
- Allow nnp transition capability
- Merge pull request #204 from konradwilk/rhbz1484908
- Label postgresql-check-db-dir as postgresql_exec_t - Allow boinc_t to mmap files with label boinc_project_var_lib_t BZ(1500088)
- Allow fail2ban_t domain to mmap journals. BZ(1500089)
- Add dac_override to abrt_t domain BZ(1499860)
- Allow pppd domain to mmap own pid files BZ(1498587)
- Allow webserver services to mmap files with label httpd_sys_content_t BZ(1498451)
- Allow tlp domain to read sssd public files Allow tlp domain to mmap kernel modules
- Allow systemd to read sysfs sym links. BZ(1499327)
- Allow systemd to mmap systemd_networkd_exec_t files BZ(1499863)
- Make systemd_networkd_var_run as mountpoint BZ(1499862)
- Allow noatsecure for java-based unconfined services. BZ(1358476)
- Allow systemd_modules_load_t domain to mmap kernel modules. BZ(1490015) - Allow cloud-init to create content in /var/run/cloud-init
- Dontaudit VM to read gnome-boxes process data BZ(1415975)
- Allow winbind_t domain mmap samba_var_t files
- Allow cupsd_t to execute ld_so_cache_t BZ(1478602)
- Update dev_rw_xserver_misc() interface to allo source domains to mmap xserver devices BZ(1334035)
- Add dac_override capability to groupadd_t domain BZ(1497091)
- Allow unconfined_service_t to start containers - Drop policyhelp utility BZ(1498429) - Allow cupsd_t to execute ld_so_cache_t BZ(1478602)
- Allow firewalld_t domain to change object identity because of relabeling after using firewall-cmd BZ(1469806)
- Allow postfix_cleanup_t domain to stream connect to all milter sockets BZ(1436026)
- Allow nsswitch_domain to read virt_var_lib_t files, because of libvirt NSS plugin. BZ(1487531)
- Add unix_stream_socket recvfrom perm for init_t domain BZ(1496318)
- Allow systemd to maange sysfs BZ(1471361) - Switch default value of SELinux boolean httpd_graceful_shutdown to off. - Allow virtlogd_t domain to write inhibit systemd pipes.
- Add dac_override capability to openvpn_t domain
- Add dac_override capability to xdm_t domain
- Allow dac_override to groupadd_t domain BZ(1497081)
- Allow cloud-init to create /var/run/cloud-init dir with net_conf_t SELinux label.BZ(1489166) - Allow tlp_t domain stream connect to sssd_t domain
- Add missing dac_override capability
- Add systemd_tmpfiles_t dac_override capability - Remove all unnecessary dac_override capability in SELinux modules - Allow init noatsecure httpd_t
- Allow mysqld_t domain to mmap mysqld db files. BZ(1483331)
- Allow unconfined_t domain to create new users with proper SELinux lables
- Allow init noatsecure httpd_t
- Label tcp port 3269 as ldap_port_t - Add new boolean tomcat_read_rpm_db()
- Allow tomcat to connect on mysqld tcp ports
- Add new interface apache_delete_tmp()
- Add interface fprintd_exec()
- Add interface fprintd_mounton_var_lib()
- Allow mozilla plugin to mmap video devices BZ(1492580)
- Add ctdbd_t domain sys_source capability and allow setrlimit
- Allow systemd-logind to use ypbind
- Allow systemd to remove apache tmp files
- Allow ldconfig domain to mmap ldconfig c� x�������������������� X 7'8 P������� " �$ ���������������� "
" " � d working if audit is configured to perform SINGLE action on disk error
- Add interfaces to handle systemd units
- Make systemd-notify working if pcsd is used
- Add support for netlabel and label /usr/sbin/netlabelctl as iptables_exec_t
- Instead of having all unconfined domains get all of the named transition rules,
- Only allow unconfined_t, init_t, initrc_t and rpm_script_t by default.
- Add definition for the salt ports
- Allow xdm_t to create link files in xdm_var_run_t
- Dontaudit reads of blk files or chr files leaked into ldconfig_t
- Allow sys_chroot for useradd_t
- Allow net_raw cap for ipsec_t
- Allow sysadm_t to reload services
- Add additional fixes to make strongswan working with a simple conf
- Allow sysadm_t to enable/disable init_t services
- Add additional glusterd perms
- Allow apache to read lnk files in the /mnt directory
- Allow glusterd to ask the kernel to load a module
- Fix description of ftpd_use_fusefs boolean
- Allow svirt_lxc_net_t to sys_chroot, modify policy to tighten up svirt_lxc_domain capabilties and process controls, but add them to svirt_lxc_net_t
- Allow glusterds to request load a kernel module
- Allow boinc to stream connect to xserver_t
- Allow sblim domains to read /etc/passwd
- Allow mdadm to read usb devices
- Allow collectd to use ping plugin
- Make foghorn working with SNMP
- Allow sssd to read ldap certs
- Allow haproxy to connect to RTP media ports
- Add additional trans rules for aide_db
- Add labeling for /usr/lib/pcsd/pcsd
- Add labeling for /var/log/pcsd
- Add support for pcs which is a corosync and pacemaker configuration tool - Label /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t
- Add labeling for /usr/libexec/kde4/polkit-kde-authentication-agent-1
- Allow all domains that can domtrans to shutdown, to start the power services script to shutdown
- consolekit needs to be able to shut down system
- Move around interfaces
- Remove nfsd_rw_t and nfsd_ro_t, they don't do anything
- Add additional fixes for rabbitmq_beam to allow getattr on mountpoints
- Allow gconf-defaults-m to read /etc/passwd
- Fix pki_rw_tomcat_cert() interface to support lnk_files - Add support for gluster ports
- Make sure that all keys located in /etc/ssh/ are labeled correctly
- Make sure apcuspd lock files get created with the correct label
- Use getcap in gluster.te
- Fix gluster policy
- add additional fixes to allow beam.smp to interact with couchdb files
- Additional fix for #974149
- Allow gluster to user gluster ports
- Allow glusterd to transition to rpcd_t and add additional fixes for #980683
- Allow tgtd working when accessing to the passthrough device
- Fix labeling for mdadm unit files - Add mdadm fixes - Fix definition of sandbox.disabled to sandbox.pp.disabled - Allow mdamd to execute systemctl
- Allow mdadm to read /dev/kvm
- Allow ipsec_mgmt_t to read l2tpd pid content - Allow nsd_t to read /dev/urand
- Allow mdadm_t to read framebuffer
- Allow rabbitmq_beam_t to read process info on rabbitmq_epmd_t
- Allow mozilla_plugin_config_t to create tmp files
- Cleanup openvswitch policy
- Allow mozilla plugin to getattr on all executables
- Allow l2tpd_t to create fifo_files in /var/run
- Allow samba to touch/manage fifo_files or sock_files in a samba_share_t directory
- Allow mdadm to connecto its own unix_stream_socket
- FIXME: nagios changed locations to /log/nagios which is wrong. But we need to have this workaround for now.
- Allow apache to access smokeping pid files
- Allow rabbitmq_beam_t to getattr on all filesystems
- Add systemd support for iodined
- Allow nup_upsdrvctl_t to execute its entrypoint
- Allow fail2ban_client to write to fail2ban_var_run_t, Also allow it to use nsswitch
- add labeling for ~/.cache/libvirt-sandbox
- Add interface to allow domains transitioned to by confined users to send sigchld to screen program
- Allow sysadm_t to check the system status of files labeled etc_t, /etc/fstab
- Allow systemd_localed to start /usr/lib/systemd/system/systemd-vconsole-setup.service
- Allow an domain that has an entrypoint from a type to be allow� x�������������H�������� X a'8 ����������������5" �$ % ���������������� 5" 4" 6" � apache to send audit messages when using pam
- Allow asterisk to bind and connect to sip tcp ports
- Fixes for dovecot 2.0
- Allow initrc_t to setattr on milter directories
- Add procmail_home_t for .procmailrc file - Fixes for labels during install from livecd - Fix /cgroup file context
- Fix broken afs use of unlabled_t
- Allow getty to use the console for s390 - Fix cgroup handling adding policy for /cgroup
- Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set - Merge patches from dgrift - Update upstream
- Allow abrt to write to the /proc under any process - Fix ~/.fontconfig label
- Add /root/.cert label
- Allow reading of the fixed_file_disk_t:lnk_file if you can read file
- Allow qemu_exec_t as an entrypoint to svirt_t - Update to upstream
- Allow tmpreaper to delete sandbox sock files
- Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
- Fixes for gitosis
- No transition on livecd to passwd or chfn
- Fixes for denyhosts - Add label for /var/lib/upower
- Allow logrotate to run sssd
- dontaudit readahead on tmpfs blk files
- Allow tmpreaper to setattr on sandbox files
- Allow confined users to execute dos files
- Allow sysadm_t to kill processes running within its clearance
- Add accountsd policy
- Fixes for corosync policy
- Fixes from crontab policy
- Allow svirt to manage svirt_image_t chr files
- Fixes for qdisk policy
- Fixes for sssd policy
- Fixes for newrole policy - make libvirt work on an MLS platform - Add qpidd policy - Update to upstream - Allow boinc to read kernel sysctl
- Fix snmp port definitions
- Allow apache to read anon_inodefs - Allow shutdown dac_override - Add device_t as a file system
- Fix sysfs association - Dontaudit ipsec_mgmt sys_ptrace
- Allow at to mail its spool files
- Allow nsplugin to search in .pulse directory - Update to upstream - Allow users to dbus chat with xdm
- Allow users to r/w wireless_device_t
- Dontaudit reading of process states by ipsec_mgmt - Fix openoffice from unconfined_t - Add shutdown policy so consolekit can shutdown system - Update to upstream - Update to upstream - Update to upstream - These are merges of my patches
- Remove 389 labeling conflicts
- Add MLS fixes found in RHEL6 testing
- Allow pulseaudio to run as a service
- Add label for mssql and allow apache to connect to this database port if boolean set
- Dontaudit searches of debugfs mount point
- Allow policykit_auth to send signals to itself
- Allow modcluster to call getpwnam
- Allow swat to signal winbind
- Allow usbmux to run as a system role
- Allow svirt to create and use devpts - Add MLS fixes found in RHEL6 testing
- Allow domains to append to rpm_tmp_t
- Add cachefilesfd policy
- Dontaudit leaks when transitioning - Change allow_execstack and allow_execmem booleans to on
- dontaudit acct using console
- Add label for fping
- Allow tmpreaper to delete sandbox_file_t
- Fix wine dontaudit mmap_zero
- Allow abrt to read var_t symlinks - Additional policy for rgmanager - Allow sshd to setattr on pseudo terms - Update to upstream - Allow policykit to send itself signals - Fix duplicate cobbler definition - Fix file context of /var/lib/avahi-autoipd - Merge with upstream - Allow sandbox to work with MLS - Make Chrome work with staff user - Add icecast policy
- Cleanup spec file - Add mcelog policy - Lots of fixes found in F12 - Fix rpm_dontaudit_leaks - Add getsched to hald_t
- Add file context for Fedora/Redhat Directory Server - Allow abrt_helper to getattr on all filesystems
- Add label for /opt/real/RealPlayer/plugins/oggfformat\.so - Add gstreamer_home_t for ~/.gstreamer - Update to upstream - Fix git - Turn on puppet policy
- Update to dgrift git policy - Move users file to selection by spec file.
- Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t - Update to upstream - Remove most of the permissive domains from F12. - Add cobbler policy from dgrift - add usbmon device
- Add allow rulse for devicekit_disk - Lots of fixes found in F12, fixes from Tom London - Cleanups from dgrift - Add� x���������������������� X �&8 p< Ht �! �$ _ ���������������� �! �! �! � ptys. BZ(1565851)
- Allow pppd_t domain read/write l2tpd pppox sockets BZ(1566096)
- Allow xguest user use bluetooth sockets if xguest_use_bluetooth boolean is turned on.
- Allow pppd_t domain creating pppox sockets BZ(1566271)
- Allow abrt to map var_lib_t files
- Allow chronyc to read system state BZ(1565217)
- Allow keepalived_t domain to chat with systemd via dbus
- Allow git to mmap git_(sys|user)_content_t files BZ(1518027)
- removed boinc dev_getattr_*_dev
- Allow iptables_t domain to create dirs in etc_t with system_conf_t labels
- Allow x userdomain to mmap xserver_tmpfs_t files
- Allow sysadm_t to mount tracefs_t
- Allow unconfined user all perms under bpf class BZ(1565738)
- Allow SELinux users (except guest and xguest) to using bluetooth sockets
- Add new interface files_map_var_lib_files()
- Allow user_t and staff_t domains create netlink tcpdiag sockets
- Allow systemd-networkd to read sysctl_t files
- Allow systemd_networkd_t to read/write tun tap devices
- refpolicy: Update for kernel sctp support - Add new boolean redis_enable_notify()
- Label /var/log/shibboleth-www(/.*) as httpd_sys_rw_content_t
- Add new label for vmtools scripts and label it as vmtools_unconfined_t stored in /etc/vmware-tools/
- Allow svnserve_t domain to manage kerberos rcache and read krb5 keytab
- Add dac_override and dac_read_search capability to hypervvssd_t domain
- Label /usr/lib/systemd/systemd-fence_sanlockd as fenced_exec_t
- Allow samba to create /tmp/host_0 as krb5_host_rcache_t
- Add dac_override capability to fsdaemon_t BZ(1564143)
- Allow abrt_t domain to map dos files BZ(1564193)
- Add dac_override capability to automount_t domain
- Allow keepalived_t domain to connect to system dbus bus
- Allow nfsd_t to read nvme block devices BZ(1562554)
- Allow lircd_t domain to execute bin_t files BZ(1562835)
- Allow l2tpd_t domain to read sssd public files BZ(1563355)
- Allow logrotate_t domain to do dac_override BZ(1539327)
- Remove labeling for /etc/vmware-tools to bin_t it should be vmtools_unconfined_exec_t
- Add capability sys_resource to systemd_sysctl_t domain
- Label all /dev/rbd* devices as fixed_disk_device_t
- Allow xdm_t domain to mmap xserver_log_t files BZ(1564469)
- Allow local_login_t domain to rread udev db
- Allow systemd_gpt_generator_t to read /dev/random device
- add definition of bpf class and systemd perms - Allow accountsd_t domain to dac override BZ(1561304)
- Allow cockpit_ws_t domain to read system state BZ(1561053)
- Allow postfix_map_t domain to use inherited user ptys BZ(1561295)
- Allow abrt_dump_oops_t domain dac override BZ(1561467)
- Allow l2tpd_t domain to run stream connect for sssd_t BZ(1561755)
- Allow crontab domains to do dac override
- Allow snapperd_t domain to unmount fs_t filesystems
- Allow pcp processes to read fixed_disk devices BZ(1560816)
- Allow unconfined and confined users to use dccp sockets
- Allow systemd to manage bpf dirs/files
- Allow traceroute_t to create dccp_sockets Fedora Atomic host using for temp files /sysroot/tmp patch, we should label same as /tmp adding file context equivalence BZ(1559531) - Allow smbcontrol_t to mmap samba_var_t files and allow winbind create sockets BZ(1559795)
- Allow nagios to exec itself and mmap nagios spool files BZ(1559683)
- Allow nagios to mmap nagios config files BZ(1559683)
- Fixing Ganesha module
- Fix typo in NetworkManager module
- Fix bug in gssproxy SELinux module
- Allow abrt_t domain to mmap container_file_t files BZ(1525573)
- Allow networkmanager to be run ssh client BZ(1558441)
- Allow pcp domains to do dc override BZ(1557913)
- Dontaudit pcp_pmie_t to reaquest lost kernel module
- Allow pcp_pmcd_t to manage unpriv userdomains semaphores BZ(1554955)
- Allow httpd_t to read httpd_log_t dirs BZ(1554912)
- Allow fail2ban_t to read system network state BZ(1557752)
- Allow dac override capability to mandb_t domain BZ(1529399)
- Allow collectd_t domain to mmap collectd_var_lib_t files BZ(1556681)
- Dontaudit bug in kernel 4.16 when domains requesting loading kernel modules BZ(1555369)
- Add Domain tran� x�������������8y������� X �&8 ���������v �! �$ / ���������������� �! �! �! � request load modules
Resolves: rhbz#1726259
- Allow stratisd to connect to dbus
Resolves: rhbz#1726259
- Run stratisd service as stratisd_t
Resolves: rhbz#1726259
- Add support for smart card authentication in cockpit BZ(1690444)
Resolves: rhbz#1771414
- cockpit: Support split-out TLS proxy
Resolves: rhbz#1771414
- cockpit: Allow cockpit-session to read cockpit-tls state
Resolves: rhbz#1771414
- Update cockpit policy
Resolves: rhbz#1771414
- cockpit: Support https instance factory
Resolves: rhbz#1771414
- cockpit: Allow cockpit-session to read cockpit-tls state directory
Resolves: rhbz#1771414
- Fix nonexisting types in rtas_errd_rw_lock interface
Resolves: rhbz#1744234 - Allow timedatex_t domain to read relatime clock and adjtime_t files
Resolves: rhbz#1771513 - Update timedatex policy to add macros
Resolves: rhbz#1771513 - Allow timedatex_t domain dbus chat with both confined and unconfined users
Resolves: rhbz#1771513
- Fix typo bugs in rtas_errd_read_lock() interface
Resolves: rhbz#1750096
- Allow timedatex_t domain to systemctl chronyd domains
Resolves: rhbz#1771513
- Fix typo in dev_filetrans_all_named_dev()
Resolves: rhbz#1750096 - New policy for rrdcached
Resolves: rhbz#1726255
- Update timedatex policy
- Update timedatex SELinux policy to to sychronizate time with GNOME and add new macro chronyd_service_status to chronyd.if
- Add new macro systemd_timedated_status to systemd.if to get timedated service status
Resolves: rhbz#1730204
- Update lldpad_t policy module
Resolves: rhbz#1726246
- Dontaudit sandbox web types to setattr lib_t dirs
Resolves: rhbz#1739858
- Fix typo in cachefiles device
Resolves: rhbz#1750096 - Allow sssd_t domain to read gnome config and named cache files
Resolves: rhbz#1743907
- Allow httpd_t to signull mailman_cgi_t process
Resolves: rhbz#1686462
- Update virt_read_content interface to allow caller domain mmap virt_content_t block devices and files
Resolves: rhbz#1758545
- Allow cachefilesd_t domain to read/write cachefiles_device_t devices
Resolves: rhbz#1750096
- Remove setting label for /dev/cachefilesd char device from cachefilesd policy. This should be added in base policy
Resolves: rhbz#1750096
- Allow pcp_pmcd_t domain to bind on udp port labeled as statsd_port_t
Resolves:rhbz#1746511
- Label libvirt drivers as virtd_exec_t
Resolves: rhbz#1745076
- Update apache and pkcs policies to make active opencryptoki rules
Resolves: rhbz#1744198
- Introduce new bolean httpd_use_opencryptoki
Resolves: rhbz#1744198
- Allow gssproxy_t domain read state of all processes on system
Resolves: rhbz#1752031
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1730204
- Added macro for timedatex to chat over dbus.
Resolves: rhbz#1730204
- Run timedatex service as timedatex_t
Resolves: rhbz#1730204
- Run lldpd service as lldpad_t.
Resolves: rhbz#1726246
- Allow abrt_upload_watch_t domain to send dgram msgs to kernel processes and stream connect to journald
- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1765065
- Allow rhsmcertd_t domain to read/write rtas_errd_var_lock_t files
Resolves: rhbz#1744234
- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1765065
- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1765065
- Allow fail2ban_t domain to create netlink netfilter sockets.
Resolves: rhbz#1766415
- Label /dev/cachefilesd as cachefiles_device_t
Resolves: rhbz#1750096
- Label udp 8125 port as statsd_port_t
Resolves: rhbz#1746511
- Allow systemd(init_t) to load kernel modules
Resolves: rhbz#1758255
- Dontaudit sys_admin capability for auditd_t domains
Resolves: rhbz#1669040
- Allow x_userdomain to dbus_chat with timedatex.
Resolves: rhbz#1730204 - Allow confined users to run newaliases
Resolves:rhbz#1750405
- Add interface mysql_dontaudit_rw_db()
Resolves: rhbz#1747926
- Label /var/lib/xfsdump/inventory as amanda_var_lib_t
Resolves: rhbz#1739137
- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1765065
- Allow ipa_ods_exporter_t domain to� x��������������h������� X &8 0t �� vQ �$ f ���������������� vQ uQ wQ � df�df�df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df� df��df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df��df�
df�df�
df�df��df�
df�df�
df�df�
df�df��df�
df�
df�df�df��df�
df�df�
df�df�
df�df�
df�df�
df�df��df�
df�df�
df�df�
df�df�
df�df�
df�df��df�
df�df��df��df�
df�df�
df�df�
df�df�
df�df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df��df� df� df� df� df� df��df��df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df��df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df� df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df� df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df�df� df� df� df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df�
df� df� df� df� df� df� df� df� df� x�������������(X������� X :'8 �������Pe������" �$ ���������������� "
" " � svirt_t to getpw* calls
- sandbox domains are trying to look at parent process data
- Allow courior auth to create its pid file in /var/spool/courier subdir
- Add fixes for beam to have it working with couchdb
- Add labeling for /run/nm-xl2tpd.con
- Allow apache to stream connect to thin
- Add systemd support for amand
- Make public types usable for fs mount points
- Call correct mandb interface in domain.te
- Allow iptables to r/w quantum inherited pipes and send sigchld
- Allow ifconfig domtrans to iptables and execute ldconfig
- Add labels for ~/.manpath
- Allow systemd to read iscsi lib files
- seunshare is trying to look at parent process data - Fix openshift_search_lib
- Add support for abrt-uefioops-oops
- Allow colord to getattr any file system
- Allow chrome processes to look at each other
- Allow sys_ptrace for abrt_t
- Add new policy for gssproxy
- Dontaudit leaked file descriptor writes from firewalld
- openshift_net_type is interface not template
- Dontaudit pppd to search gnome config
- Update openshift_search_lib() interface
- Add fs_list_pstorefs()
- Fix label on libbcm_host.so since it is built incorrectly on raspberry pi, needs back port to F18
- Better labels for raspberry pi devices
- Allow init to create devpts_t directory
- Temporarily label rasbery pi devices as memory_device_t, needs back port to f18
- Allow sysadm_t to build kernels
- Make sure mount creates /var/run/blkid with the correct label, needs back port to F18
- Allow userdomains to stream connect to gssproxy
- Dontaudit leaked file descriptor writes from firewalld
- Allow xserver to read /dev/urandom
- Add additional fixes for ipsec-mgmt
- Make SSHing into an Openshift Enterprise Node working - Add transition rules to unconfined domains and to sysadm_t to create /etc/adjtime
- with the proper label.
- Update files_filetrans_named_content() interface to get right labeling for pam.d conf files
- Allow systemd-timedated to create adjtime
- Add clock_create_adjtime()
- Additional fix ifconfing for #966106
- Allow kernel_t to create boot.log with correct labeling
- Remove unconfined_mplayer for which we don't have rules
- Rename interfaces
- Add userdom_manage_user_home_files/dirs interfaces
- Fix files_dontaudit_read_all_non_security_files
- Fix ipsec_manage_key_file()
- Fix ipsec_filetrans_key_file()
- Label /usr/bin/razor-lightdm-greeter as xdm_exec_t instead of spamc_exec_t
- Fix labeling for ipse.secrets
- Add interfaces for ipsec and labeling for ipsec.info and ipsec_setup.pid
- Add files_dontaudit_read_all_non_security_files() interface
- /var/log/syslog-ng should be labeled var_log_t
- Make ifconfig_var_run_t a mountpoint
- Add transition from ifconfig to dnsmasq
- Allow ifconfig to execute bin_t/shell_exec_t
- We want to have hwdb.bin labeled as etc_t
- update logging_filetrans_named_content() interface
- Allow systemd_timedate_t to manage /etc/adjtime
- Allow NM to send signals to l2tpd
- Update antivirus_can_scan_system boolean
- Allow devicekit_disk_t to sys_config_tty
- Run abrt-harvest programs as abrt_t, and allow abrt_t to list all filesystem directories
- Make printing from vmware working
- Allow php-cgi from php54 collection to access /var/lib/net-snmp/mib_indexes
- Add virt_qemu_ga_data_t for qemu-ga
- Make chrome and mozilla able to connect to same ports, add jboss_management_port_t to both
- Fix typo in virt.te
- Add virt_qemu_ga_unconfined_t for hook scripts
- Make sure NetworkManager files get created with the correct label
- Add mozilla_plugin_use_gps boolean
- Fix cyrus to have support for net-snmp
- Additional fixes for dnsmasq and quantum for #966106
- Add plymouthd_create_log()
- remove httpd_use_oddjob for which we don't have rules
- Add missing rules for httpd_can_network_connect_cobbler
- Add missing cluster_use_execmem boolean
- Call userdom_manage_all_user_home_type_files/dirs
- Additional fix for ftp_home_dir
- Fix ftp_home_dir boolean
- Allow squit to recv/send client squid packet
- Fix nut.te to have nut_domain attribute
- Add support for ejabberd; TODO: revisit jabberd and rabbi� x��������������G������� X z'8 � �b������N" �$ ^ ���������������� N" M" O" � xt radvd cil hll lang_ext raid cil hll lang_ext rasdaemon cil hll lang_ext rdisc cil hll lang_ext readahead cil hll lang_ext realmd cil hll lang_ext redis cil hll lang_ext remotelogin cil hll lang_ext rhcs cil hll lang_ext rhev cil hll lang_ext rhgb cil hll lang_ext rhnsd cil hll lang_ext rhsmcertd cil hll lang_ext ricci cil hll lang_ext rkhunter cil hll lang_ext rkt cil hll lang_ext rlogin cil hll lang_ext rngd cil hll lang_ext rolekit cil hll lang_ext roundup cil hll lang_ext rpc cil hll lang_ext rpcbind cil hll lang_ext rpm cil hll lang_ext rrdcached cil hll lang_ext rshd cil hll lang_ext rssh cil hll lang_ext rsync cil hll lang_ext rtas cil hll lang_ext rtkit cil hll lang_ext rwho cil hll lang_ext samba cil hll lang_ext sambagui cil hll lang_ext sandboxX cil hll lang_ext sanlock cil hll lang_ext sasl cil hll lang_ext sbd cil hll lang_ext sblim cil hll lang_ext screen cil hll lang_ext secadm cil hll lang_ext sectoolm cil hll lang_ext selinuxutil cil hll lang_ext sendmail cil hll lang_ext sensord cil hll lang_ext setrans cil hll lang_ext setroubleshoot cil hll lang_ext seunshare cil hll lang_ext sge cil hll lang_ext shorewall cil hll lang_ext slocate cil hll lang_ext slpd cil hll lang_ext smartmon cil hll lang_ext smokeping cil hll lang_ext smoltclient cil hll lang_ext smsd cil hll lang_ext snapper cil hll lang_ext snmp cil hll lang_ext snort cil hll lang_ext sosreport cil hll lang_ext soundserver cil hll lang_ext spamassassin cil hll lang_ext speech-dispatcher cil hll lang_ext squid cil hll lang_ext ssh cil hll lang_ext sslh cil hll lang_ext sssd cil hll lang_ext staff cil hll lang_ext stapserver cil hll lang_ext stratisd cil hll lang_ext stunnel cil hll lang_ext su cil hll lang_ext sudo cil hll lang_ext svnserve cil hll lang_ext swift cil hll lang_ext sysadm cil hll lang_ext sysadm_secadm cil hll lang_ext sysnetwork cil hll lang_ext sysstat cil hll lang_ext systemd cil hll lang_ext tangd cil hll lang_ext targetd cil hll lang_ext tcpd cil hll lang_ext tcsd cil hll lang_ext telepathy cil hll lang_ext telnet cil hll lang_ext tftp cil hll lang_ext tgtd cil hll lang_ext thin cil hll lang_ext thumb cil hll lang_ext timedatex cil hll lang_ext tlp cil hll lang_ext tmpreaper cil hll lang_ext tomcat cil hll lang_ext tor cil hll lang_ext tuned cil hll lang_ext tvtime cil hll lang_ext udev cil hll lang_ext ulogd cil hll lang_ext uml cil hll lang_ext unconfined cil hll lang_ext unconfineduser cil hll lang_ext unlabelednet cil hll lang_ext unprivuser cil hll lang_ext updfstab cil hll lang_ext usbmodules cil hll lang_ext usbmuxd cil hll lang_ext userdomain cil hll lang_ext userhelper cil hll lang_ext usermanage cil hll lang_ext usernetctl cil hll lang_ext uucp cil hll lang_ext uuidd cil hll lang_ext varnishd cil hll lang_ext vdagent cil hll lang_ext vhostmd cil hll lang_ext virt cil hll lang_ext vlock cil hll lang_ext vmtools cil hll lang_ext vmware cil hll lang_ext vnstatd cil hll lang_ext vpn cil hll lang_ext w3c cil hll lang_ext watchdog cil hll lang_ext wdmd cil hll lang_ext webadm cil hll lang_ext webalizer cil hll lang_ext wine cil hll lang_ext wireshark cil hll lang_ext xen cil hll lang_ext xguest cil hll lang_ext xserver cil hll lang_ext zabbix cil hll lang_ext zarafa cil hll lang_ext zebra cil hll lang_ext zoneminder cil hll lang_ext zosremote cil hll lang_ext modules_checksum policy.kern policy.linked seusers seusers.linked users_extra users_extra.linked semanage.read.LOCK semanage.trans.LOCK /etc/selinux/ /etc/selinux/targeted/ /etc/selinux/targeted/contexts/ /etc/selinux/targeted/contexts/files/ /etc/selinux/targeted/contexts/users/ /etc/selinux/targeted/policy/ /usr/share/selinux/ /usr/share/selinux/targeted/ /usr/share/selinux/targeted/default/ /usr/share/selinux/targeted/default/active/ /usr/share/selinux/targeted/default/active/modules/ /usr/share/selinux/targeted/default/active/modules/100/ /usr/share/selinux/targeted/default/active/modules/100/abrt/ /usr/share/selinux/targeted/default/active/modules/100/accountsd/ /usr/share/selinux/targeted/default/active/modules/100/acct/ /usr/share/sel� x�������������7������� X �'8 ��������0V������`" �$ p ���������������� `" _" a" � � x��������������&������� X �&8 ���������o�������! �$ ���������������� �! �! �! � 427372d0d600af538513be2bb211d63c0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1de7f7dbb4e1a62e5d7d71b6f94bd5181458eeea7f16abb6f3884133da931b17 cf5b1139a05a42ecb5f691c669f401c29eaa064a360960b984b65e51fab18d43 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f46c75eab0732540dc73f9e8acc13dfab0664f4b2c0e5292fb943f7b8c815e29 74e19f8717b853af8e7139fa1d5c91befe05049d7a6e609ce9f0d2f4fd51c64f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e eefb8f574e21455e1c5e6f6ccd0fa1f4915f2459c60ae8682d8773c78aedc7bd 481783cad87511100c5f8f80da1200ebcb42acc52c1dbceeaac7c2bd4b8c59e9 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e44da6c2405e7ae70427d1b5b1344523367c00044b3c8a10c9425dd2401ced8b 32f8d29b2f98e0f0a67980f0d9c0b52089607a9066d7f7ce56b84fcdc9b79131 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 5c0bdcb9d44d2f951f451651d35a97e88586a8996ea6466569a375bf6b4cc70a 15c9c5ab1829ed03ba35fd1436efb6e50286617208b6656982279285564ef9b4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e daaa4bad3ccc49e62d696777f3047471cc2082b9853085f6587d06699016e1ad c2f0167b80d911bdf3281e47373a560f5aba93ccc6e0ccf169b60c90db54433c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a76519ab23d549bf048178e72664f96d428a06e791f22a5249bcc761b36c33f0 d7dfdf8bac8db9b9339f55369abcf87d25844f5873d5dbfb4397402ba0883cf2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 9ccd337d4e929b3319b30185224f8a45c77f24ae3fee5ab168ca014102c32e37 86d03386a7ad0152ccda5f34bd31ee78a39b14140291378443f179323efce60f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b83c8093f6694a7fd64789d0c737b47970f4f3a1bd0a340873872bd00cd5856f 70e03a82b1763e9b8feb96a209920b4294e45ea762f4187667ece1818abc8062 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 29fa0fc3ff18528dde6580744a8f001b43ed977771fb7df8ed651ffc62e21ea6 d5ad5871296685111cbd9b56a7bda8fa1edefe27d85f13270390007d87f8a01f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 692dce3262739b34ef71524ba81e4beb39876f17706be39f53e82afcf2ca6d64 01370bf39f75c3fa34c169a50013e9345e1a3facca326f98014671169dda5cf6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b699c8d807b109a5025bef71ec0562bf06efbe2d0ab14caefffced70512ff6dc 26be395b4f274a08ef16fd39f5e15b8fda8f536f4c15d5ea54b70025d2a1ad82 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0567a5c414f0b35efc7876591f656282836f65f887e116e45b6744bd5432453f ad1aff6d8fd226718c28efc490625f98d359be923596fe82beb8dd97e9be6297 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3909736c0977233fc18b5ba52851040358c93dc2c88f51b10405050cfd5798f0 e78aac4d4a4fd2f1c99fa6af474d3e781bbb4e4fa249f90d28e0fc9dcbf40478 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8e9cbf424f354fa11851a0b1c490f0e076ec1eb60284f0707a917c18887c4182 7fa452587cf0bd3a9e2bf93daa2a90c0e8aa77168aafa3b2909ae2230acf6003 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3b63e49195eaf3599cf9b94924b67668e5a7b9ead3b9efde0d27428e07090ac6 d31dc29a2645162b012c25a228717f7ed6727b5d1868577cea794d2eaecf8828 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e fcd64c1ca6ff1800b75e7b18648058701d323ef5781280164f0b61130f23794b 0fd207e98320854d8d5b7c95f3ceee6299188ec0966f4e7bd7f058660aa4bb2d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 392399d5c2d4a3df2e77c0f636eebfa5b13d9b89f321fa84c2b3f6d14d4bf503 f77da158218beb98466cf4842786475eef69ee294d4953f9cf08d07dea07be85 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e7b1f9bbd73fed6c1c4bd4e5a2d38e70ec7a62137cc6b24a64c5f93666eae292 ec6f740cc2e51606243fc956234a0de720a723509f5e92d54ce234428b51b6b1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f79ebb44ecd8add8e0d7bd5ecc88d844847161ced028f66429f7e8c43af869f5 7d527cfd599f7fb7013c9122da5850302098cc30c1aeeef66a474dd8f05eda37 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 20b896b8cc6eeff1cb5f3ed2325260c0b3322d023b9f13d1e4� x�������������������� X >'8 ��������9������" �$ � ���������������� " " " � port
- Allow unconfined to create /etc/hostname with correct labeling
- Add systemd_filetrans_named_hostname() interface - Fix file_contexts.subs to label /run/lock correctly - Try to label on controlC devices up to 30 correctly
- Add mount_rw_pid_files() interface
- Add additional mount/umount interfaces needed by mock
- fsadm_t sends audit messages in reads kernel_ipc_info when doing livecd-iso-to-disk
- Fix tabs
- Allow initrc_domain to search rgmanager lib files
- Add more fixes which make mock working together with confined users
* Allow mock_t to manage rpm files
* Allow mock_t to read rpm log files
* Allow mock to setattr on tmpfs, devpts
* Allow mount/umount filesystems
- Add rpm_read_log() interface
- yum-cron runs rpm from within it.
- Allow tuned to transition to dmidecode
- Allow firewalld to do net_admin
- Allow mock to unmont tmpfs_t
- Fix virt_sigkill() interface
- Add additional fixes for mock. Mainly caused by mount running in mock_t
- Allow mock to write sysfs_t and mount pid files
- Add mailman_domain to mailman_template()
- Allow openvswitch to execute shell
- Allow qpidd to use kerberos
- Allow mailman to use fusefs, needs back port to RHEL6
- Allow apache and its scripts to use anon_inodefs
- Add alias for git_user_content_t and git_sys_content_t so that RHEL6 will update to RHEL7
- Realmd needs to connect to samba ports, needs back port to F18 also
- Allow colord to read /run/initial-setup-
- Allow sanlock-helper to send sigkill to virtd which is registred to sanlock
- Add virt_kill() interface
- Add rgmanager_search_lib() interface
- Allow wdmd to getattr on all filesystems. Back ported from RHEL6 - Allow realmd to create tmp files
- FIx ircssi_home_t type to irssi_home_t
- Allow adcli running as realmd_t to connect to ldap port
- Allow NetworkManager to transition to ipsec_t, for running strongswan
- Make openshift_initrc_t an lxc_domain
- Allow gssd to manage user_tmp_t files
- Fix handling of irclogs in users homedir
- Fix labeling for drupal an wp-content in subdirs of /var/www/html
- Allow abrt to read utmp_t file
- Fix openshift policy to transition lnk_file, sock-file an fifo_file when created in a tmpfs_t, needs back port to RHEL6
- fix labeling for (oo|rhc)-restorer-wrapper.sh
- firewalld needs to be able to write to network sysctls
- Fix mozilla_plugin_dontaudit_rw_sem() interface
- Dontaudit generic ipc read/write to a mozilla_plugin for sandbox_x domains
- Add mozilla_plugin_dontaudit_rw_sem() interface
- Allow svirt_lxc_t to transition to openshift domains
- Allow condor domains block_suspend and dac_override caps
- Allow condor_master to read passd
- Allow condor_master to read system state
- Allow NetworkManager to transition to ipsec_t, for running strongswan
- Lots of access required by lvm_t to created encrypted usb device
- Allow xdm_t to dbus communicate with systemd_localed_t
- Label strongswan content as ipsec_exec_mgmt_t for now
- Allow users to dbus chat with systemd_localed
- Fix handling of .xsession-errors in xserver.if, so kde will work
- Might be a bug but we are seeing avc's about people status on init_t:service
- Make sure we label content under /var/run/lock as <<none>>
- Allow daemon and systemprocesses to search init_var_run_t directory
- Add boolean to allow xdm to write xauth data to the home directory
- Allow mount to write keys for the unconfined domain
- Add unconfined_write_keys() interface - Add labeling for /usr/share/pki
- Allow programs that read var_run_t symlinks also read var_t symlinks
- Add additional ports as mongod_port_t for 27018, 27019, 28017, 28018 and 28019 ports
- Fix labeling for /etc/dhcp directory
- add missing systemd_stub_unit_file() interface
- Add files_stub_var() interface
- Add lables for cert_t directories
- Make localectl set-x11-keymap working at all
- Allow abrt to manage mock build environments to catch build problems.
- Allow virt_domains to setsched for running gdb on itself
- Allow thumb_t to execute user home content
- Allow pulseaudio running as mozilla_plugin_t to read /run/systemd/users� x��������������������� X e'8 ��������������9" �$ ) ���������������� 9" 8" :" � w gdm to read rpm database
- Allow nsplugin to read mplayer config files - Allow vpnc to run ifconfig - Allow confined users to use postgres
- Allow system_mail_t to exec other mail clients
- Label mogrel_rails as an apache server - Apply unconfined_execmem_exec_t to haskell programs - Fix prelude file context - allow hplip to talk dbus
- Fix context on ~/.local dir - Prevent applications from reading x_device - Add /var/lib/selinux context - Update to upstream - Add livecd policy - Dontaudit search of admin_home for init_system_domain
- Rewrite of xace interfaces
- Lots of new fs_list_inotify
- Allow livecd to transition to setfiles_mac - Begin XAce integration - Merge Upstream - Allow amanada to create data files - Fix initial install, semanage setup - Allow system_r for httpd_unconfined_script_t - Remove dmesg boolean
- Allow user domains to read/write game data - Change unconfined_t to transition to unconfined_mono_t when running mono
- Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work - Remove old booleans from targeted-booleans.conf file - Add boolean to mmap_zero
- allow tor setgid
- Allow gnomeclock to set clock - Don't run crontab from unconfined_t - Change etc files to config files to allow users to read them - Lots of fixes for confined domains on NFS_t homedir - dontaudit mrtg reading /proc
- Allow iscsi to signal itself
- Allow gnomeclock sys_ptrace - Allow dhcpd to read kernel network state - Label /var/run/gdm correctly
- Fix unconfined_u user creation - Allow transition from initrc_t to getty_t - Allow passwd to communicate with user sockets to change gnome-keyring - Fix initial install - Allow radvd to use fifo_file
- dontaudit setfiles reading links
- allow semanage sys_resource
- add allow_httpd_mod_auth_ntlm_winbind boolean
- Allow privhome apps including dovecot read on nfs and cifs home
dirs if the boolean is set - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
- Allow syslog to manage innd logs.
- Allow procmail to ioctl spamd_exec_t - Allow initrc_t to dbus chat with consolekit. - Additional access for nsplugin
- Allow xdm setcap/getcap until pulseaudio is fixed - Allow mount to mkdir on tmpfs
- Allow ifconfig to search debugfs - Fix file context for MATLAB
- Fixes for xace - Allow stunnel to transition to inetd children domains
- Make unconfined_dbusd_t an unconfined domain - Fixes for qemu/virtd - Fix bug in mozilla policy to allow xguest transition
- This will fix the
libsemanage.dbase_llist_query: could not find record value
libsemanage.dbase_llist_query: could not query record value (No such file or
directory)
bug in xguest - Allow nsplugin to run acroread - Add cups_pdf policy
- Add openoffice policy to run in xguest - prewika needs to contact mysql
- Allow syslog to read system_map files - Change init_t to an unconfined_domain - Allow init to transition to initrc_t on shell exec.
- Fix init to be able to sendto init_t.
- Allow syslog to connect to mysql
- Allow lvm to manage its own fifo_files
- Allow bugzilla to use ldap
- More mls fixes - fixes for init policy (#436988)
- fix build - Additional changes for MLS policy - Fix initrc_context generation for MLS - Fixes for libvirt - Allow bitlebee to read locale_t - More xselinux rules - Change httpd_$1_script_r*_t to httpd_$1_content_r*_t - Prepare policy for beta release
- Change some of the system domains back to unconfined
- Turn on some of the booleans - Allow nsplugin_config execstack/execmem
- Allow nsplugin_t to read alsa config
- Change apache to use user content - Add cyphesis policy - Fix Makefile.devel to build mls modules
- Fix qemu to be more specific on labeling - Update to upstream fixes - Allow staff to mounton user_home_t - Add xace support - Add fusectl file system - Fixes from yum-cron
- Update to latest upstream - Fix userdom_list_user_files - Merge with upstream - Allow udev to send audit messages - Add additional login users interfaces
- userdom_admin_login_user_template(staff) - More fixes for polkit - Eliminate transition from unconfined� x������������������� X �&8 B P� �! �$ < ���������������� �! �! �! � 8-5 Dan Walsh <dwalsh@redhat.com> 3.7.8-4 Dan Walsh <dwalsh@redhat.com> 3.7.8-3 Dan Walsh <dwalsh@redhat.com> 3.7.8-2 Dan Walsh <dwalsh@redhat.com> 3.7.8-1 Dan Walsh <dwalsh@redhat.com> 3.7.7-3 Dan Walsh <dwalsh@redhat.com> 3.7.7-2 Dan Walsh <dwalsh@redhat.com> 3.7.7-1 Dan Walsh <dwalsh@redhat.com> 3.7.6-1 Dan Walsh <dwalsh@redhat.com> 3.7.5-8 Dan Walsh <dwalsh@redhat.com> 3.7.5-7 Dan Walsh <dwalsh@redhat.com> 3.7.5-6 Dan Walsh <dwalsh@redhat.com> 3.7.5-5 Dan Walsh <dwalsh@redhat.com> 3.7.5-4 Dan Walsh <dwalsh@redhat.com> 3.7.5-3 Dan Walsh <dwalsh@redhat.com> 3.7.5-2 Dan Walsh <dwalsh@redhat.com> 3.7.5-1 Dan Walsh <dwalsh@redhat.com> 3.7.4-4 Dan Walsh <dwalsh@redhat.com> 3.7.4-3 Dan Walsh <dwalsh@redhat.com> 3.7.4-2 Dan Walsh <dwalsh@redhat.com> 3.7.4-1 Dan Walsh <dwalsh@redhat.com> 3.7.3-1 Dan Walsh <dwalsh@redhat.com> 3.7.1-1 Dan Walsh <dwalsh@redhat.com> 3.6.33-2 Dan Walsh <dwalsh@redhat.com> 3.6.33-1 Dan Walsh <dwalsh@redhat.com> 3.6.32-17 Dan Walsh <dwalsh@redhat.com> 3.6.32-16 Dan Walsh <dwalsh@redhat.com> 3.6.32-15 Dan Walsh <dwalsh@redhat.com> 3.6.32-13 Dan Walsh <dwalsh@redhat.com> 3.6.32-12 Dan Walsh <dwalsh@redhat.com> 3.6.32-11 Dan Walsh <dwalsh@redhat.com> 3.6.32-10 Dan Walsh <dwalsh@redhat.com> 3.6.32-9 Dan Walsh <dwalsh@redhat.com> 3.6.32-8 Dan Walsh <dwalsh@redhat.com> 3.6.32-7 Dan Walsh <dwalsh@redhat.com> 3.6.32-6 Dan Walsh <dwalsh@redhat.com> 3.6.32-5 Dan Walsh <dwalsh@redhat.com> 3.6.32-4 Dan Walsh <dwalsh@redhat.com> 3.6.32-3 Dan Walsh <dwalsh@redhat.com> 3.6.32-2 Dan Walsh <dwalsh@redhat.com> 3.6.32-1 Dan Walsh <dwalsh@redhat.com> 3.6.31-5 Dan Walsh <dwalsh@redhat.com> 3.6.31-4 Dan Walsh <dwalsh@redhat.com> 3.6.31-3 Dan Walsh <dwalsh@redhat.com> 3.6.31-2 Dan Walsh <dwalsh@redhat.com> 3.6.30-6 Dan Walsh <dwalsh@redhat.com> 3.6.30-5 Dan Walsh <dwalsh@redhat.com> 3.6.30-4 Dan Walsh <dwalsh@redhat.com> 3.6.30-3 Dan Walsh <dwalsh@redhat.com> 3.6.30-2 Dan Walsh <dwalsh@redhat.com> 3.6.30-1 Dan Walsh <dwalsh@redhat.com> 3.6.29-2 Dan Walsh <dwalsh@redhat.com> 3.6.29-1 Dan Walsh <dwalsh@redhat.com> 3.6.28-9 Dan Walsh <dwalsh@redhat.com> 3.6.28-8 Dan Walsh <dwalsh@redhat.com> 3.6.28-7 Dan Walsh <dwalsh@redhat.com> 3.6.28-6 Dan Walsh <dwalsh@redhat.com> 3.6.28-5 Dan Walsh <dwalsh@redhat.com> 3.6.28-4 Dan Walsh <dwalsh@redhat.com> 3.6.28-3 Dan Walsh <dwalsh@redhat.com> 3.6.28-2 Dan Walsh <dwalsh@redhat.com> 3.6.28-1 Dan Walsh <dwalsh@redhat.com> 3.6.27-1 Dan Walsh <dwalsh@redhat.com> 3.6.26-11 Dan Walsh <dwalsh@redhat.com> 3.6.26-10 Dan Walsh <dwalsh@redhat.com> 3.6.26-9 Bill Nottingham <notting@redhat.com> 3.6.26-8 Dan Walsh <dwalsh@redhat.com> 3.6.26-7 Dan Walsh <dwalsh@redhat.com> 3.6.26-6 Dan Walsh <dwalsh@redhat.com> 3.6.26-5 Dan Walsh <dwalsh@redhat.com> 3.6.26-4 Dan Walsh <dwalsh@redhat.com> 3.6.26-3 Dan Walsh <dwalsh@redhat.com> 3.6.26-2 Dan Walsh <dwalsh@redhat.com> 3.6.26-1 Dan Walsh <dwalsh@redhat.com> 3.6.25-1 Dan Walsh <dwalsh@redhat.com> 3.6.24-1 Dan Walsh <dwalsh@redhat.com> 3.6.23-2 Dan Walsh <dwalsh@redhat.com> 3.6.23-1 Dan Walsh <dwalsh@redhat.com> 3.6.22-3 Dan Walsh <dwalsh@redhat.com> 3.6.22-1 Dan Walsh <dwalsh@redhat.com> 3.6.21-4 Dan Walsh <dwalsh@redhat.com> 3.6.21-3 Tom "spot" Callaway <tcallawa@redhat.com> 3.6.21-2 Dan Walsh <dwalsh@redhat.com> 3.6.21-1 Dan Walsh <dwalsh@redhat.com> 3.6.20-2 Dan Walsh <dwalsh@redhat.com> 3.6.20-1 Dan Walsh <dwalsh@redhat.com> 3.6.19-5 Dan Walsh <dwalsh@redhat.com> 3.6.19-4 Dan Walsh <dwalsh@redhat.com> 3.6.19-3 Dan Walsh <dwalsh@redhat.com> 3.6.19-2 Dan Walsh <dwalsh@redhat.com> 3.6.19-1 Dan Walsh <dwalsh@redhat.com> 3.6.18-1 Dan Walsh <dwalsh@redhat.com> 3.6.17-1 Dan Walsh <dwalsh@redhat.com> 3.6.16-4 Dan Walsh <dwalsh@redhat.com> 3.6.16-3 Dan Walsh <dwalsh@redhat.com> 3.6.16-2 Dan Walsh <dwalsh@redhat.com> 3.6.16-1 Dan Walsh <dwalsh@redhat.com> 3.6.14-3 Dan Walsh <dwalsh@redhat.com> 3.6.14-2 Dan Walsh <dwalsh@redhat.com> 3.6.14-1 Dan Walsh <dwalsh@redhat.com> 3.6.13-3 Dan Walsh <dwalsh@redhat.com> 3.6.13-2 Dan Walsh <dwalsh@redhat.com> 3.6.13-1 Dan Walsh <dwalsh@redhat.com> 3.6.12-39 Dan Walsh <dwalsh@redhat.com> 3.6.12-38 Da� x�������������p������ X ;'8 �� �����" �$ ���������������� " " " � t policy
- Fix amanda policy
- Add more fixes for domains which use libusb
- Make domains which use libusb working correctly
- Allow l2tpd to create ipsec key files with correct labeling and manage them
- Fix cobbler_manage_lib_files/cobbler_read_lib_files to cover also lnk files
- Allow rabbitmq-beam to bind generic node
- Allow l2tpd to read ipse-mgmt pid files
- more fixes for l2tpd, NM and pppd from #967072 - Dontaudit to getattr on dirs for dovecot-deliver
- Allow raiudusd server connect to postgresql socket
- Add kerberos support for radiusd
- Allow saslauthd to connect to ldap port
- Allow postfix to manage postfix_private_t files
- Add chronyd support for #965457
- Fix labeling for HOME_DIR/\.icedtea
- CHange squid and snmpd to be allowed also write own logs
- Fix labeling for /usr/libexec/qemu-ga
- Allow virtd_t to use virt_lock_t
- Allow also sealert to read the policy from the kernel
- qemu-ga needs to execute scripts in /usr/libexec/qemu-ga and to use /tmp content
- Dontaudit listing of users homedir by sendmail Seems like a leak
- Allow passenger to transition to puppet master
- Allow apache to connect to mythtv
- Add definition for mythtv ports - Add additional fixes for #948073 bug
- Allow sge_execd_t to also connect to sge ports
- Allow openshift_cron_t to manage openshift_var_lib_t sym links
- Allow openshift_cron_t to manage openshift_var_lib_t sym links
- Allow sge_execd to bind sge ports. Allow kill capability and reads cgroup files
- Remove pulseaudio filetrans pulseaudio_manage_home_dirs which is a part of pulseaudio_manage_home_files
- Add networkmanager_stream_connect()
- Make gnome-abrt wokring with staff_t
- Fix openshift_manage_lib_files() interface
- mdadm runs ps command which seems to getattr on random log files
- Allow mozilla_plugin_t to create pulseaudit_home_t directories
- Allow qemu-ga to shutdown virtual hosts
- Add labelling for cupsd-browsed
- Add web browser plugins to connect to aol ports
- Allow nm-dhcp-helper to stream connect to NM
- Add port definition for sge ports - Make sure users and unconfined domains create .hushlogin with the correct label
- Allow pegaus to chat with realmd over DBus
- Allow cobblerd to read network state
- Allow boicn-client to stat on /dev/input/mice
- Allow certwatch to read net_config_t when it executes apache
- Allow readahead to create /run/systemd and then create its own directory with the correct label - Transition directories and files when in a user_tmp_t directory
- Change certwatch to domtrans to apache instead of just execute
- Allow virsh_t to read xen lib files
- update policy rules for pegasus_openlmi_account_t
- Add support for svnserve_tmp_t
- Activate account openlmi policy
- pegasus_openlmi_domain_template needs also require pegasus_t
- One more fix for policykit.te
- Call fs_list_cgroups_dirs() in policykit.te
- Allow nagios service plugin to read mysql config files
- Add labeling for /var/svn
- Fix chrome.te
- Fix pegasus_openlmi_domain_template() interfaces
- Fix dev_rw_vfio_dev definiton, allow virtd_t to read tmpfs_t symlinks
- Fix location of google-chrome data
- Add support for chome_sandbox to store content in the homedir
- Allow policykit to watch for changes in cgroups file system
- Add boolean to allow mozilla_plugin_t to use spice
- Allow collectd to bind to udp port
- Allow collected_t to read all of /proc
- Should use netlink socket_perms
- Should use netlink socket_perms
- Allow glance domains to connect to apache ports
- Allow apcupsd_t to manage its log files
- Allow chrome objects to rw_inherited unix_stream_socket from callers
- Allow staff_t to execute virtd_exec_t for running vms
- nfsd_t needs to bind mountd port to make nfs-mountd.service working
- Allow unbound net_admin capability because of setsockopt syscall
- Fix fs_list_cgroup_dirs()
- Label /usr/lib/nagios/plugins/utils.pm as bin_t
- Remove uplicate definition of fs_read_cgroup_files()
- Remove duplicate definition of fs_read_cgroup_files()
- Add files_mountpoint_filetrans interface to be used by quotadb_t and snapperd
- Additi� x��������������������� X q'8 `������������E" �$ U ���������������� E" D" F" � - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
!
"
#
$
%
&
'
(
)
*
+
,
-
.
/
0
1
2
3
4
5
6
7
8
9
:
;
<
=
>
?
@
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
[
\
]
^
_
`
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z
{
|
}
~
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
! " # $ % &� x�������������`������� X '8 �� p��������! �$ E ���������������� �! �! �! � dm_t domain to mmap and execute files in xdm_var_run_t BZ(1513883)
- Unconfined domains, need to create content with the correct labels
- Container runtimes are running iptables within a different user namespace
- Add interface files_rmdir_all_dirs() - Allow jabber domains to connect to postgresql ports
- Dontaudit slapd_t to block suspend system
- Allow spamc_t to stream connect to cyrys.
- Allow passenger to connect to mysqld_port_t
- Allow ipmievd to use nsswitch
- Allow chronyc_t domain to use user_ptys
- Label all files /var/log/opensm.* as opensm_log_t because opensm creating new log files with name opensm-subnet.lst
- Fix typo bug in tlp module
- Allow userdomain gkeyringd domain to create stream socket with userdomain - Merge pull request #37 from milosmalik/rawhide
- Allow mozilla_plugin_t domain to dbus chat with devicekit
- Dontaudit leaked logwatch pipes
- Label /usr/bin/VGAuthService as vmtools_exec_t to confine this daemon.
- Allow httpd_t domain to execute hugetlbfs_t files BZ(1444546)
- Allow chronyd daemon to execute chronyc. BZ(1507478)
- Allow pdns to read network system state BZ(1507244)
- Allow gssproxy to read network system state Resolves: rhbz#1507191
- Allow nfsd_t domain to read configfs_t files/dirs
- Allow tgtd_t domain to read generic certs
- Allow ptp4l to send msgs via dgram socket to unprivileged user domains
- Allow dirsrv_snmp_t to use inherited user ptys and read system state
- Allow glusterd_t domain to create own tmpfs dirs/files
- Allow keepalived stream connect to snmp - Allow zabbix_t domain to change its resource limits
- Add new boolean nagios_use_nfs
- Allow system_mail_t to search network sysctls
- Hide all allow rules with ptrace inside deny_ptrace boolean
- Allow nagios_script_t to read nagios_spool_t files
- Allow sbd_t to create own sbd_tmpfs_t dirs/files
- Allow firewalld and networkmanager to chat with hypervkvp via dbus
- Allow dmidecode to read rhsmcert_log_t files
- Allow mail system to connect mariadb sockets.
- Allow nmbd_t domain to mmap files labeled as samba_var_t. BZ(1505877)
- Make user account setup in gnome-initial-setup working in Workstation Live system. BZ(1499170)
- Allow iptables_t to run setfiles to restore context on system
- Updatre unconfined_dontaudit_read_state() interface to dontaudit also acess to files. BZ(1503466) - Label /usr/libexec/bluetooth/obexd as bluetoothd_exec_t to run process as bluetooth_t
- Allow chronyd_t do request kernel module and block_suspend capability
- Allow system_cronjob_t to create /var/lib/letsencrypt dir with right label
- Allow slapd_t domain to mmap files labeled as slpad_db_t BZ(1505414)
- Allow dnssec_trigger_t domain to execute binaries with dnssec_trigeer_exec_t BZ(1487912)
- Allow l2tpd_t domain to send SIGKILL to ipsec_mgmt_t domains BZ(1505220)
- Allow thumb_t creating thumb_home_t files in user_home_dir_t direcotry BZ(1474110)
- Allow httpd_t also read httpd_user_content_type dirs when httpd_enable_homedirs is enables
- Allow svnserve to use kerberos
- Allow conman to use ptmx. Add conman_use_nfs boolean
- Allow nnp transition for amavis and tmpreaper SELinux domains
- Allow chronyd_t to mmap chronyc_exec_t binary files
- Add dac_read_search capability to openvswitch_t domain
- Allow svnserve to manage own svnserve_log_t files/dirs
- Allow keepalived_t to search network sysctls
- Allow puppetagent_t domain dbus chat with rhsmcertd_t domain
- Add kill capability to openvswitch_t domain
- Label also compressed logs in /var/log for different services
- Allow inetd_child_t and system_cronjob_t to run chronyc.
- Allow chrony to create netlink route sockets
- Add SELinux support for chronyc
- Add support for running certbot(letsencrypt) in crontab
- Allow nnp trasintion for unconfined_service_t
- Allow unpriv user domains and unconfined_service_t to use chronyc - Drop *.lst files from file list
- Ship file_contexts.homedirs in store
- Allow proper transition when systems starting pdns to pdns_t domain. BZ(1305522)
- Allow haproxy daemon to reexec itself. BZ(1447800)
- Allow conmand to use u� x�������������ز������� X �%8 ����������������, �$ < ���������������� , + - � �)]��)]��)]��)]��)]��)]��)]��)]��)]��)]��)]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]�қ]��)]��)]��)V�SQ]��)]�� ]�қTk�%P��*P��*T�� P��*WY� P��*WY� W\ ]��]��]��(]��(]��(Vf�Vf�V�SQVf�VzHkVzHkVf�VzHkWY� ]��(]��"WY� Tk�'VzHkP��*P��*P��*P��*P��*P��*]��"V�SQV�SQV�SQV�SQV�SQV�SQW\ W\dW\jW\
6W\
=W\
6W\
>W\
6W\jW\
6W\
>W\
6W\
>W\
6W\
>W\
6W\
>W\
6W\
>W\
6W\
6W\
>W\
6W\
>W\jW\
6W\
>W\
6W\
>W\
6W\
6W\
>W\
6W\
6W\
6W\
>W\
6W\
>W\
6W\
>W\
6W\
>W\
6W\
>W\
6W\
>W\
6W\
>W\
>W\
6W\
>W\
6W\jW\
6W\
>W\dW\jW\
6W\
>W\
6W\
>W\
7W\
>W\
7W\
>W\
7W\
>W\
7W\jW\
7W\
>W\
7W\
>W\
7W\
>W\dW\
7W\
>W\ ]��W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �W\ �]��W\ �]�� 3cade7e28fcef68312108df54585b6eda7ccd5efb5ef9033d421ae4c8cb6f2dc f252061af47e1f773ed29e3010f24412f5c7359b3ed5a74a3b7ac84e2b0959fb d6500b47e8dd42f1ef88d0effb9203bbc5d23f0bade3d6fac41468ae9dc4d3a2 4c84ed5af2781e2b9a11be085d2bcbae5dd6739cf3be5d5fefcb86290d97a060 f54da466596be271a1e3b604ede62ddd54f1e903fc620e380ac1c27ba1656161 2b57870c232dd3c8f48f43259fc341da5563cc0f198d9f3aaa482b62c117a3c5 a0ad19ea873e2f5cfb9f6e39189b0f3a5b810c1f00e2f2985a67062d6b0363a6 fbb01d670de00b8663de15cbd3e6432cc34a961bff7c765781a0e8ef05d879ca 2978eb4a21396e5ab7e0a44b67c4d653018b01ec39ce4455d68ac36e54d325f2 a9f7060e57eed0826bfb8cb85712ac932a505830d2ac949fa3f2ae85e3428cdc 7743106fe77f222e4876dff59c18152490f3e5220b9a8effb3f23146b3b0ee1b 049cbc732103b8142b46ea7107dd4694834caad39a49ce5ecc7edbb7bb28f8ee cac3cb4e41992c121acb05a5244d054bd4d79d3b568a1e874dcf429a04309cb5 30ee13ef31458d3eb6cecc75fc1e4026e2ba89766d9f8b7c21594977d4d8c599 f276b3c4d898796cc66fd6a2760329b871f1ca319c0e6a13d8c7703ae116680e 271ec77dbd5bcefd23c4721b15b679caf833fb770c04c8ab21c08d2954616c53 b4c889b79416b1da7641b380f892411bd8543f1d618beb84fca2587761c6f990 186c4c6075f0b4dc15ce6799f4f1aab30f453d66696313f678f0ec14268d458f 66855fd6b5fd6fa5088a46b17ea86cd3dceb12cf47535fd4c0e6dd314b5951fc c425fa83e18e9b54f5b1fc8d977138bd9855b23140f9d473338484d30207d405 b344049bc22036c131d4982770e0b5296cd9d86f51045601087ba382b18a4fc2 19a4e91505c0b6dce1ac8a61f6435e6bc6874a3c1313f5ce54c623cc35b5f4ee 2f6f990858a05ac854b5809c652ce9148529b26bbdd8154ddf12764da0e82d2c 3c1e0240df767b62ac86e017efe06d3bd1438d243f8bc69ec553172ed0dc0845 3220894eb086252ba417a438cd309a759996323aa818aa8befd4a0768eba9ff7 b5a0860df3e21b2bfdef52893bfcdd5ca3a81f3714d5591682c845a1cbf46359 c8953a637c1b38e4d8db4cdddffacb2096ac4fce6178403c842d68f8b0de95bd 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 3fe5361f24b7c49ba12911c08f5a33f9cb18871d95d9fb881f5b8a4793e04288 676e5840760b6adfc1c825615a6ccae0d8803018a18e8a3c511d28d9b62f51af 4336e4a9cb4becdd86dd91104bf57fb92d55910b3479499c77e1e27b9c21c710 1ee8289abcf7f86d48b4b10fc82da76b20e39c238159f0e2bbd263d8d930edb5 9e983b35e4c818b00ee5568cede04ef1c2eb24d4dd96e4e91c9b904e86692795 0a5c49a50383b8a984e82f23e48b5ac1f5649ff0a07830d4f5403e0cde33d73b ca4068f64726454f71bcd1670e4da6e3d8f96d596642554b6025f94548841056 700348e6ed9006f0ef3d6c5beaf22fa5ac358b9a16c57e74b8ed312b3ef3592e 3eb1a786c9d725ac8f41030c63e37ec94cf4db04d926398fbab5138e86269525 5d6d31196dca079b1c43f65282953af5d6586bd1ada936931ec3bb0a502cf3b1 1623b4cb92fd33a0c35ec9a3d5c3ee0d960f3288951c10b3dfb6d5670c2c65fe 3a60192fe6f655e9373d6b3c5368b63cd4d8c66b0050a7bb67bd12b6171daa65 f1c7ed8274f848d63b32b8ec66f438c8dbe67c659a939b0e6f649803dd59f7a4 949781fbd03ce1e1a16b797a856edfe8cbf18550aa28e52bbd1c64434ab9da76 d28bb08e5db9aadf20bfa00b963ef21b53804a7b76d4acd63280b6008cf4c851 81c39f44376083d31004805c7e069fd681a8c2c98a4f8fa79d39b4800b71ac87 39004a6f74a9a482bb70af3d17ba0d3ac32964e666302160dc8e6590eb1a35b8 ed85e3a2a4ce7157180b40ffab00bd8a24b4891c9ffc3e3bc94cb161d62e744c d5a3b72f3d2a12b6740416c201b35c77808a981feae8a7c9b674cd3ee875e000 01b364b311c593a1a80c02fe2dd68cbeff7014515f4d54b3bf62dc74370a1790 33234736a58f1610c73e1c8c08faf1b2ef1397d878dd7d2cbd888ca0f2da4ffc 3b0b89aa6625c051e69cce1e341f973f62ca9� x�������������P�������� X b'8 `�������8�������6" �$ & ���������������� 6" 5" 7" � back xserver_manage_home_fonts - Dontaudit sandbox trying to read nscd and sssd - Update to upstream - Rename udisks-daemon back to devicekit_disk_t policy - Fixes for abrt calls - Add tgtd policy - Update to upstream release - Add asterisk policy back in
- Update to upstream release 2.20091117 - Update to upstream release 2.20091117 - Fixup nut policy - Update to upstream - Allow vpnc request the kernel to load modules - Fix minimum policy installs
- Allow udev and rpcbind to request the kernel to load modules - Add plymouth policy
- Allow local_login to sys_admin - Allow cupsd_config to read user tmp
- Allow snmpd_t to signal itself
- Allow sysstat_t to makedir in sysstat_log_t - Update rhcs policy - Allow users to exec restorecond - Allow sendmail to request kernel modules load - Fix all kernel_request_load_module domains - Fix all kernel_request_load_module domains - Remove allow_exec* booleans for confined users. Only available for unconfined_t - More fixes for sandbox_web_t - Allow sshd to create .ssh directory and content - Fix request_module line to module_request - Fix sandbox policy to allow it to run under firefox.
- Dont audit leaks. - Fixes for sandbox - Update to upstream
- Dontaudit nsplugin search /root
- Dontaudit nsplugin sys_nice - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
- Remove policycoreutils-python requirement except for minimum - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
- Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.) - Add wordpress/wp-content/uploads label
- Fixes for sandbox when run from staff_t - Update to upstream
- Fixes for devicekit_disk - More fixes - Lots of fixes for initrc and other unconfined domains - Allow xserver to use netlink_kobject_uevent_socket - Fixes for sandbox - Dontaudit setroubleshootfix looking at /root directory - Update to upsteam - Allow gssd to send signals to users
- Fix duplicate label for apache content - Update to upstream - Remove polkit_auth on upgrades - Add back in unconfined.pp and unconfineduser.pp
- Add Sandbox unshare - Fixes for cdrecord, mdadm, and others - Add capability setting to dhcpc and gpm - Allow cronjobs to read exim_spool_t - Add ABRT policy - Fix system-config-services policy - Allow libvirt to change user componant of virt_domain - Allow cupsd_config_t to be started by dbus
- Add smoltclient policy - Add policycoreutils-python to pre install - Make all unconfined_domains permissive so we can see what AVC's happen - Add pt_chown policy - Add kdump policy for Miroslav Grepl
- Turn off execstack boolean - Turn on execstack on a temporary basis (#512845) - Allow nsplugin to connecto the session bus
- Allow samba_net to write to coolkey data - Allow devicekit_disk to list inotify - Allow svirt images to create sock_file in svirt_var_run_t - Allow exim to getattr on mountpoints
- Fixes for pulseaudio - Allow svirt_t to stream_connect to virtd_t - Allod hald_dccm_t to create sock_files in /tmp - More fixes from upstream - Fix polkit label
- Remove hidebrokensymptoms for nss_ldap fix
- Add modemmanager policy
- Lots of merges from upstream
- Begin removing textrel_shlib_t labels, from fixed libraries - Update to upstream - Allow certmaster to override dac permissions - Update to upstream - Fix context for VirtualBox - Update to upstream - Allow clamscan read amavis spool files - Fixes for xguest - fix multiple directory ownership of mandirs - Update to upstream - Add rules for rtkit-daemon - Update to upstream
- Fix nlscd_stream_connect - Add rtkit policy - Allow rpcd_t to stream connect to rpcbind - Allow kpropd to create tmp files - Fix last duplicate /var/log/rpmpkgs - Update to upstream
* add sssd - Update to upstream
* cleanup - Update to upstream
- Additional mail ports
- Add virt_use_usb boolean for svirt - Fix mcs rules to include chr_file and blk_file - Add label for udev-acl - Additional rules for consolekit/udev, privoxy and various other fixes - New version for upstream - Allow NetworkManager to read inotifyfs - All� x�������������ȑ������� X �&8 ��������������! �$ ���������������� �! �! �! � 08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d67bf62e85fb14593f6b96ce4e359fd3bdc2e860cdb34f3c74068df48ae145d8 2a891c9932ee58a02798c0d9e9de990938fbe3948a5e8782ac24e7644c430a7d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a2109b32b362211347f12f91e62f5b4777db93597e46924b211f56df7e82bbd4 d29a74ece2d500be1793c2e3885f6b7a92407b643dc813fd10db2b2feb412665 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6294a7c92167a9694afb51a937b0d603b0e3c8eaef14c44e7c13435a33c55e03 c66d8d37a4094c0be15e79b5a7cbab1228e2199417f5637066696bff5aa08df8 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 194eb6ea3043606bdf0fd60a1b32dacd5839e0a29fc7096d2bce7c35257a1234 4aade7a4afaa93de9bfd399c0ad1c40fa292054885dd6e43f536d910f80de317 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ad05766416c4d4be00d789d422ae92f0adff0a82b82880b2f2792fc7befb514a 341aff5ec3306bed16b85c57c3f8ac9b3fd8dd23eb45e80cb3dc901c3f812361 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7acf817d06bba607c38de80f189392fef264b8b55b53fdb8f7f8e23a8abe8fc8 aa38b9aedf3e3b1674bf21c87fca6aa32f643bf2f360ef8201fa736dd88fcf5c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d89aacaf4cd81ee7682a9c0d0bfca3664b638df7b4c8fc2f8c9423eb503e0016 473c648b29a50f91daeed76fbd2a91ad3b20770feb758d4e30e8947c7c23ec75 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 19d70c1f68c90594d3072c82f4cc8e02ac8cf6b86e316b6c13834203a2a98060 e7a7bf126d8058f84888db96df8bf5934b87ac8b63e9697e05464102d7df3910 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d3bf4a1d41677dd6e81924dc6cc2d6671f6814a9200d946f3635f0dd6f36e6ce a7022bea974e3fd611193081d61926022313670089c556e8f78e454bbd963a65 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bbb7361fdeee7524c3ec4483cc926cd6cfb32046d2c51970ed438c721a5b0dfa 12d1519a9c05de46d68cf3c8102e3262b17f33201c5b4d33b54e95bc717c0ee7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d69cac6656ba6288c502e8e35a19af398d9a210b1127e2b6f7405683873d95f9 8bceb90e7a317a19f79f5af83f7612b1470b527af1e5792e0ea619bd011db828 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2df7c6c4b3d101b750c50c116ec161a175b87c035e416fc2aa8ee8e2efd005a2 a6abaf2bd10dbd30d46fb200bf89a112062f988093e45e638d50be683cbb9704 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ff4a5523f05dfa73748d7de8360ce5854c7757880190358269c08702fb2e3356 8a09d4e705478c82a9b3b3cd953773a6ca2cbe16233ed2cbabaa969aaf86f55e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4a564695f4c615ba41ea35a6c065ec7701d8671844e03fa1c9d94efd0dec754e 75f49003b69f6a186bb7e0d4b0e152259b5e7565bd0dbedfd7f8c9b0e0a4c2a4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 158137a6f72bf68065c7e2189ab9c17c57aa8b63b0d68ec4d822c75d957896b2 8340dcb7d71a82c353633ef23c8b09f016699f9a6b98dc8d9005d85996db757d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ceb43d1ea6f8ff22f49868f022d52390e15eb415914b4b7940495fd74261b11e 74285651d51af9b23ed54a87db2562dd2320f67acde2f83c02bcf975fdc05c2e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 899d18c062d7dd26c086304135c8323fca831c98cc0c7d0dd606cd4d6dff7b9b f1f97a4c71464d07c8763d7952b10c788292a470f91c7cf98e1cff90329290de d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 76567b861cec3ede5851e469ce5a5375bb563afaeb5161c9f74d7f8494c4bcb2 a8f26a0b80431416a38d88f222a9e6f496f4e4f538b775af5cb29fdc1a586cb2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 53e3592753b8a542d685a4aaeac3aa3691dd43185c2e8b82029fd41dac8cc8e3 4d28a1d84712d2485c416e1eff9efaf272bec4acb06f529c04929374f67c7df3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bc6ae30ddb672db29bc2b5d84a71804cdf5d5a56fa263c6d7fc8585075fde203 2c744c0e039fffe832d2f7287a8a950ac312758f35e7fc2781a77d2eb2ba6fd0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7128603e90bec23578db19f854969d359bec9034d54b2910e2cbfb45f0fba3c0 a9290d9874102eafc20eaf3e082d� x�������������0�������� X �&8 *
p! �$ ` ���������������� p! o! q! � e62c0e2c995b17e6cf948793ae0fe5b180829b7ca3589ef9b4195c5aab0da91 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f3cd9ce1acbc28c867ac87fad1551c7eb88e0e212157bf0c2f0fc8ef265b8e6e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d652f38abbd1fe64e6f39b1ce2351602317be9811d05b68b1da3798d2dd308cb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1189521d880505254b5af35a9737651bdce9acd87ef382967ead6e2df44937d3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1fbfa217d70d3f5322b2053ecde465dbd2bd1b75617c942c80ef10fb6fad6159 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf fa48648c5953d247da0e62b2e7ea09f7a22e4993789711ed1feca373652d7b2e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 91d5c14dc7c220dbaac5e4950ddfdaffea10ff1dc6977d5979aa7f9a4429b310 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 966fb062a481083a28d072247764757364e5c7b617f008803e2392b724b3e982 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8dd7ec1f3afc28785857b07b3c660da7759cf71c80723c3ada6f503e91b57405 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 46325c462fab02ae8c5ed1c9f5f853fe1c8c27d16cacc1a2b7c20916afed38b2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ff898d579c359637efaacef1207c8f10b69c9e68830bdc6446e2e85192a7b21b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1d9cc3c61f32db088cc1a3210ecde0b49fcc4ab99be8b6bcbe620890ab97b38e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c66cc127f21fcd5944585094b23e2372d9a6242e85d110fd19136fc82fe4278c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b3ac4bf3469ae9759078977d2f7461d81156a1eafd89f177da770603c0609ce0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 116246180ddf7925f109c76ddfc27d2dee3aa8914db89788ac8e3ee28c1964b8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f1b7590dbce2e540d1c314980095615b5698263ed02280a3676c6da7a3de05b2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0e7a988e6d125432c68c62ecb3750deddb118e0874f14f9c79654b09f5701719 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 016c092963ca91ff38c6055e33aa5eb1735a5211fcc4384b198429057d01c641 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4c6fae57425581810e04079dd3c813f1b778f30d95e410c8cb17391566a46043 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c45b73d658c0cb39be1a926c3d7452c3d745c3570fd849f803dcfad25ab363f0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1e9d1e50b2520f751cfade4f66d0839870c24b00bc437dfa1b303bf226536620 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 81a53a204f4dbc39387caeefd3df986fd64f3ef0cad06f98924b80f9a7970140 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 81fd4e8cd5ffe758b1cf6d9b663dc4b5726eb0f14da080a598b976db6cfd4284 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1fcfa6f832d321813277c64b9bcc448f0ec0ffa15c44f1c90c17d8a0cc3c9254 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4c2874e04a408f82ca1f7efa6e6f0b21e0d6521ab9fbba965c38c571e2a3e081 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6f2048596038545b4b56cc540003d4ccf5f32965d7eeca062614774079ce31bc 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 226a64e49ab9f25437c01fe825dc80a6b23be2a97a52d60523d3ce09d20bff11 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 76e51b676f107dad03bef4549e23ec976d79e4b281e832482b3c5920d8d33f67 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1a6fa139e9f0fce0b51432a52f03bc3d1e97aac96ccd54ade33b5b0d3b1b955d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4f75bb7c1d55a5afa8d98cdfaec4629bcbf86ac8bdd4e737023030fb8d9fdd3d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0c3273713154fbd29feece3a43bb84088dc0e4dba8b9342840f9e575dec96755 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 725ad80ecb� x��������������p������� X ! '8 ��������X��������! �$ w ���������������� �! �! �! � trol domain to send sigchld to ctdbd domain.
- Allow openvswitch read/write hugetlb filesystem.
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Label /var/log/ipareplica-conncheck.log file as ipa_log_t Allow ipa_helper_t domain to manage logs labeledas ipa_log_t Allow ipa_helper_t to connect on http and kerberos_passwd ports. BZ(1289930)
- Allow keepalived to connect to 3306/tcp port - mysqld_port_t.
- Merge remote-tracking branch 'refs/remotes/origin/rawhide-contrib' into rawhide-contrib
- Merge remote-tracking branch 'refs/remotes/origin/rawhide-contrib' into rawhide-contrib
- Merge pull request #86 from rhatdan/rawhide-contrib
- Label some new nsd binaries as nsd_exec_t Allow nsd domain net_admin cap. Create label nsd_tmp_t for nsd tmp files/dirs BZ (1293146)
- Added interface logging_systemctl_syslogd
- Label rsyslog unit file
- Added policy for systemd-coredump service. Added domain transition from kernel_t to systemd_coredump_t. Allow syslogd_t domain to read/write tmpfs systemd-coredump files. Make new domain uconfined for now. - Allow sddm-helper running as xdm_t to create .wayland-errors with correct labeling. BZ(#1291085)
- Revert "Allow arping running as netutils_t sys_module capability for removing tap devices."
- Allow arping running as netutils_t sys_module capability for removing tap devices.
- Add userdom_connectto_stream() interface.
- Allow systemd-logind to read /run/utmp. BZ(#1278662)
- Allow sddm-helper running as xdm_t to create .wayland-errors with correct labeling. BZ(#1291085)
- Revert "Allow arping running as netutils_t sys_module capability for removing tap devices."
- Allow arping running as netutils_t sys_module capability for removing tap devices.
- Add userdom_connectto_stream() interface.
- Allow systemd-logind to read /run/utmp. BZ(#1278662) - Allow firewalld to create firewalld_var_run_t directory. BZ(1291243)
- Add interface firewalld_read_pid_files()
- Allow iptables to read firewalld pid files. BZ(1291243)
- Allow the user cronjobs to run in their userdomain
- Label ssdm binaries storedin /etc/sddm/ as bin_t. BZ(1288111)
- Merge pull request #81 from rhatdan/rawhide-base
- New access needed by systemd domains - Allow whack executed by sysadm SELinux user to access /var/run/pluto/pluto.ctl. It fixes "ipsec auto --status" executed by sysadm_t.
- Add ipsec_read_pid() interface - Label /usr/sbin/lvmlockd binary file as lvm_exec_t. BZ(1287739)
- Adding support for dbus communication between systemd-networkd and systemd-hostnamed. BZ(1279182)
- Update init policy to have userdom_noatsecure_login_userdomain() and userdom_sigchld_login_userdomain() called for init_t.
- init_t domain should be running without unconfined_domain attribute.
- Add a new SELinux policy for /usr/lib/systemd/systemd-rfkill.
- Update userdom_transition_login_userdomain() to have "sigchld" and "noatsecure" permissions.
- systemd needs to access /dev/rfkill on early boot.
- Allow dspam to read /etc/passwd - Set default value as true in boolean mozilla_plugin_can_network_connect. BZ(1286177) - Allow apcupsd sending mails about battery state. BZ(1274018)
- Allow pcp_pmcd_t domain transition to lvm_t. BZ(1277779)
- Merge pull request #68 from rhatdan/rawhide-contrib
- Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048). #1248785
- Allow systemd-networkd to bind dhcpd ports if DHCP=yes in *.network conf file. BZ(#1280092)
- systemd-tmpfiles performs operations on System V IPC objects which requires sys_admin capability. BZ(#1279269) - Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048)
- Allow abrt-hook-ccpp to change SELinux user identity for created objects.
- Allow abrt-hook-ccpp to get attributes of all processes because of core_pattern.
- Allow setuid/setgid capabilities for abrt-hook-ccpp.
- Add default labeling for /etc/Pegasus/cimserver_current.conf. It is a correct patch instead of the current /etc/Peg� x������������� `������� X " [&8 ���������z������� �$ ���������������� � � ib/.build-id/d1/ /usr/lib/.build-id/d2/ /usr/lib/.build-id/f6/ /usr/lib64/ /usr/share/doc/ /usr/share/doc/libevent/ /usr/share/licenses/ /usr/share/licenses/libevent/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6a7227632e63041c1b299d000db46e6f219942b, stripped, too many notes (256) ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf01b794eaa8ebd836aab369ddf5ea28954b7076, stripped, too many notes (256) ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d140e29f1f47d1b981227c175eee0381f181880c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=abf12e2991380a7e713e47e42de7438769a95f98, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d211f32b0bf84f293960f04bbb4cc9dd4c26c7de, stripped UTF-8 Unicode text ASCII text $ . 8
P R R R R R R R R
R R R R R R
R R R P R R R R R R R R
R R R R R R
R R R P R R R R R R
R R R P R R R R R R
R R R P R R R R R
R R R utf-8 0d2fed12b6eff920668a74349d986642087aa38857481a89fddf3e12aaecb359 ? ���@ ��� ` �
Q�d~��� � �YZ�c�S5z�J�G��%O"�^��2 G�C�,��R�Ǟ���l�?�ki��'�]�<ky��õ+V�#Q~ "JYW-Dj�� ����k]�Q.�eI۳�և 5J�IV�.G:ʙ|��J�@��3-����@� X�W��*6�U5s�6��Ӗ�]�Ue�x0�����Cw�y�� �Ґ�T"�L�,{%>���?�~� 1F]Ze?k��ْ��$ rb팀+��֨��
��/�����Ӹ���m�aH.W2!Y�B�|�v� �Hk�&�P҇?�R�d�,�-� X��&:g��I�> Cɗg��O�R��1r�Q�W^ >�r(��\���Unn k� !#Ul�O��1[�t`V�;(�������-'��g�a|�|s(���b�o��� ` �
Q�d~��� �o jG���Pʹ%S̲�7ӏ�}�{~��F����:� } &¶2%�^�t;�*�U�^@��g3�Ri�+�]���G� 6Ӕ�χS6�T�KL5K3�ɺ�Y��a�ہSяG<6�5v ��2۵+qǴ�O�eG� ���V ���I�-3�k� �>S!bA��]�q���$h>d��j��`~�)� <-� ����b���)�^� �![�8Vz���U��e�R�BO���n������� 0�t�/s�ep�u� >2�;r�.S~�Q�O�q�Y �}B++]����[�$s��J�c���č ; ��?'��� ��G��B���rzj�鉷t�w�C��9��:�fXR=��4 �r�ZFɇ��e� n6e��"Yz8���@K82cd260fbe5ce7e692941cb436460953bb6356e8 50b997f0d967dcecc0d751a8d89459a4f98d7dc3d699a66d8bf61920862f62f5 d�V� d�Vu
- journal: don't enable systemd-journald-audit.socket by default (#1699287)
- logs-show: use grey color for de-emphasizing journal log output (#1695601)
- units: add [Install] section to tmp.mount (#1667065)
- nss: do not modify errno when NSS_STATUS_NOTFOUND or NSS_STATUS_SUCCESS (#1691691)
- util.h: add new UNPROTECT_ERRNO macro (#1691691)
- nss: unportect errno before writing to NSS' *errnop (#1691691)
- seccomp: reduce logging about failure to add syscall to seccomp (#1658691)
- format-table: when duplicating a cell, also copy the color (#1689832)
- format-table: optionally make specific cells clickable links (#1689832)
- format-table: before outputting a color, check if colors are available (#1689832)
- format-table: add option to store/format percent and uint64_t values in cells (#1689832)
- format-table: optionally allow reversing the sort order for a column (#1689832)
- format-table: add table_update() to update existing entries (#1689832)
- format-table: add a� x��������������O������� X # �&8 ��������# i! �$ y ���������������� i! h! j! � A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�����A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A�������A������������������������� � x�������������?������� X $ �&8 p����������������! �$ ^ ���������������� �! �! �! � to create dirs with samba_var_t label
- Remove execstack,execmem and execheap from domains setroubleshootd_t, locate_t and podsleuth_t to increase security. BZ(1579760)
- Allow tangd to read public sssd files BZ(1509054)
- Allow geoclue start with nnp systemd security feature with proper SELinux Domain transition BZ(1575212)
- Allow ctdb_t domain modify ctdb_exec_t files
- Allow firewalld_t domain to create netlink_netfilter sockets
- Allow radiusd_t domain to read network sysctls
- Allow pegasus_t domain to mount tracefs_t filesystem
- Allow psad_t domain to read all domains state
- Allow tomcat_t domain to connect to mongod_t tcp port
- Allow dovecot and postfix to connect to systemd stream sockets
- Make nmbd_t domain dbus system client BZ(1569856)
- Merge pull request #55 from SISheogorath/fix/tlp-policy
- Merge pull request #54 from tmzullinger/rawhide
- Allow also listing system_dbusd_var_run_t dirs in dbusd_read_pid_files macro BZ(1566168)
- Allow gssproxy_t domain to read gssd_t state BZ(1572945)
- Allow create systemd to mount pid files
- Add files_map_boot_files() interface
- Remove execstack,execmem and execheap from domain fsadm_t to increase security. BZ(1579760)
- Fix typo xserver SELinux module
- Allow systemd to mmap files with var_log_t label
- Allow x_userdomains read/write to xserver session
- Allow users staff and sysadm to run wireshark on own domain
- Fix typos s/xserver/xdm/ for allow creating xserver misc devices
- Allow systemd-bootchart to create own tmpfs files
- Merge pull request #213 from tmzullinger/rawhide
- Allow xdm_t domain to install Nouveau drivers BZ(1570996) - Allow unconfined_domain_type to create libs filetrans named content BZ(1513806) - Allow dnssec_trigger_t domain to read system network state BZ(1570205)
- Add dac_override capability to mailman_mail_t domain
- Add dac_override capability to radvd_t domain
- Update openvswitch policy
- Add dac_override capability to oddjob_homedir_t domain
- Allow slapd_t domain to mmap slapd_var_run_t files
- Rename tang policy to tangd
- Allow virtd_t domain to relabel virt_var_lib_t files
- Allow logrotate_t domain to stop services via systemd
- Add tang policy
- Allow mozilla_plugin_t to create mozilla.pdf file in user homedir with label mozilla_home_t
- Allow snapperd_t daemon to create unlabeled dirs.
- Make httpd_var_run_t mountpoint
- Allow hsqldb_t domain to mmap own temp files
- We have inconsistency in cgi templates with upstream, we use _content_t, but refpolicy use httpd__content_t. Created aliasses to make it consistence
- Allow Openvswitch adding netdev bridge ovs 2.7.2.10 FDP
- Add new Boolean tomcat_use_execmem
- Allow nfsd_t domain to read/write sysctl fs files
- Allow conman to read system state
- Allow brltty_t domain to be dbusd system client
- Allow zebra_t domain to bind on babel udp port
- Allow freeipmi domain to read sysfs_t files
- Allow targetd_t domain mmap lvm config files
- Allow abrt_t domain to manage kdump crash files
- gnome_data_filetrans macro should be in optional block
- Allow netutils_t domain to create bluetooth sockets
- Allow traceroute to bind on generic sctp node
- Allow traceroute to search network sysctls
- Allow systemd to use virtio console
- Label /dev/op_panel and /dev/opal-prd as opal_device_t
- Label /run/ebtables.lock as iptables_var_run_t
- Allow udev_t domain to manage udev_rules_t char files.
- Assign babel_port_t label to udp port 6696
- Add new interface lvm_map_config
- Merge pull request #212 from stlaz/patch-1
- Allow local_login_t reads of udev_var_run_t context - Allow networkmanager domain to write to ecryptfs_t files BZ(1566706)
- Allow l2tpd domain to stream connect to sssd BZ(1568160)
- Dontaudit abrt_t to write to lib_t dirs BZ(1566784)
- Allow NetworkManager_ssh_t domain transition to insmod_t BZ(1567630) - Allow certwatch to manage cert files BZ(1561418)
- Allow abrt_dump_oops_t domain to mmap all non security files BZ(1565748)
- Allow gpg_t domain mmap cert_t files Allow gpg_t mmap gpg_agent_t files
- Allow NetworkManager_ssh_t domain use generic � x��������������.������� X % v'8 �r������@� J" �$ Z ���������������� J" I" K" � ystemd_contexts userhelper_context users guest_u root staff_u sysadm_u unconfined_u user_u xguest_u virtual_domain_context virtual_image_context x_contexts logins policy policy.31 setrans.conf seusers targeted base.lst default active commit_num file_contexts file_contexts.homedirs homedir_template modules 100 abrt cil lang_ext accountsd cil lang_ext acct cil lang_ext afs cil lang_ext aiccu cil lang_ext aide cil lang_ext ajaxterm cil lang_ext alsa cil lang_ext amanda cil lang_ext amtu cil lang_ext anaconda cil lang_ext antivirus cil lang_ext apache cil lang_ext apcupsd cil lang_ext apm cil lang_ext application cil lang_ext arpwatch cil lang_ext asterisk cil lang_ext auditadm cil lang_ext authconfig cil lang_ext authlogin cil lang_ext automount cil lang_ext avahi cil lang_ext awstats cil lang_ext bacula cil lang_ext base cil lang_ext bcfg2 cil lang_ext bind cil lang_ext bitlbee cil lang_ext blkmapd cil lang_ext blueman cil lang_ext bluetooth cil lang_ext boinc cil lang_ext boltd cil lang_ext bootloader cil lang_ext brctl cil lang_ext brltty cil lang_ext bugzilla cil lang_ext bumblebee cil lang_ext cachefilesd cil lang_ext calamaris cil lang_ext callweaver cil lang_ext canna cil lang_ext ccs cil lang_ext cdrecord cil lang_ext certmaster cil lang_ext certmonger cil lang_ext certwatch cil lang_ext cfengine cil lang_ext cgdcbxd cil lang_ext cgroup cil lang_ext chrome cil lang_ext chronyd cil lang_ext cinder cil lang_ext cipe cil lang_ext clock cil lang_ext clogd cil lang_ext cloudform cil lang_ext cmirrord cil lang_ext cobbler cil lang_ext cockpit cil lang_ext collectd cil lang_ext colord cil lang_ext comsat cil lang_ext condor cil lang_ext conman cil lang_ext conntrackd cil lang_ext consolekit cil lang_ext couchdb cil lang_ext courier cil lang_ext cpucontrol cil lang_ext cpufreqselector cil lang_ext cpuplug cil lang_ext cron cil lang_ext ctdb cil lang_ext cups cil lang_ext cvs cil lang_ext cyphesis cil lang_ext cyrus cil lang_ext daemontools cil lang_ext dbadm cil lang_ext dbskk cil lang_ext dbus cil lang_ext dcc cil lang_ext ddclient cil lang_ext denyhosts cil lang_ext devicekit cil lang_ext dhcp cil lang_ext dictd cil lang_ext dirsrv dirsrv-admin cil lang_ext cil lang_ext dmesg cil lang_ext dmidecode cil lang_ext dnsmasq cil lang_ext dnssec cil lang_ext dovecot cil lang_ext drbd cil lang_ext dspam cil lang_ext entropyd cil lang_ext exim cil lang_ext fail2ban cil lang_ext fcoe cil lang_ext fetchmail cil lang_ext finger cil lang_ext firewalld cil lang_ext firewallgui cil lang_ext firstboot cil lang_ext fprintd cil lang_ext freeipmi cil lang_ext freqset cil lang_ext fstools cil lang_ext ftp cil lang_ext fwupd cil lang_ext games cil lang_ext gdomap cil lang_ext geoclue cil lang_ext getty cil lang_ext git cil lang_ext gitosis cil lang_ext glance cil lang_ext gnome cil lang_ext gpg cil lang_ext gpm cil lang_ext gpsd cil lang_ext gssproxy cil lang_ext guest cil lang_ext hddtemp cil lang_ext hostapd cil lang_ext hostname cil lang_ext hsqldb cil lang_ext hwloc cil lang_ext hypervkvp cil lang_ext ibacm cil lang_ext icecast cil lang_ext inetd cil lang_ext init cil lang_ext inn cil lang_ext insights_client cil lang_ext iodine cil lang_ext iotop cil lang_ext ipmievd cil lang_ext ipsec cil lang_ext iptables cil lang_ext irc cil lang_ext irqbalance cil lang_ext iscsi cil lang_ext isns cil lang_ext jabber cil lang_ext jetty cil lang_ext jockey cil lang_ext journalctl cil lang_ext kdbus cil lang_ext kdump cil lang_ext kdumpgui cil lang_ext keepalived cil lang_ext kerberos cil lang_ext keyboardd cil lang_ext keystone cil lang_ext kismet cil lang_ext kmscon cil lang_ext kpatch cil lang_ext ksmtuned cil lang_ext ktalk cil lang_ext l2tp cil lang_ext ldap cil lang_ext libraries cil lang_ext likewise cil lang_ext linuxptp cil lang_ext lircd cil lang_ext livecd cil lang_ext lldpad cil lang_ext loadkeys cil lang_ext locallogin cil lang_ext lockdev cil lang_ext logadm cil lang_ext logging cil lang_ext logrotate cil lang_ext logwatch cil lang_ext lpd cil lang_ext lsm cil lang_ext lttng-tools cil lang_ext lvm cil lang_ext mai� x������������� ������� X & &'8 �
�;�������! �$ j ���������������� �! �! �! � nd munin-cgi working. Allow munin-cgit to create files/dirs in /tmp, list munin conf dirs and manage munin logs.
- Allow swift to execute bin_t
- Allow swift to bind http_cache - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Add decl for cockip port
- Allow sysadm_t to read all kernel proc
- Allow logrotate to execute all executables
- Allow lircd_t to use tty_device_t for use withmythtv
- Make sure all zabbix files direcories in /var/log have the correct label
- Allow bittlebee to create directories and files in /var/log with the correct label
- Label /var/log/horizon as an apache log
- Add squid directory in /var/run
- Add transition rules to allow rabbitmq to create log files and var_lib files with the correct label
- Wronly labeled avahi_var_lib_t as a pid file
- Fix labels on rabbitmq_var_run_t on file/dir creation
- Allow neutron to create sock files
- Allow postfix domains to getattr on all file systems
- Label swift-proxy-server as swift_exec_t
- Tighten SELinux capabilities to match docker capabilities
- Add fixes for squid which is configured to run with more than one worker.
- Allow cockpit to bind to its port - geard seems to do a lot of relabeling
- Allow system_mail_t to append to munin_var_lib_t
- Allow mozilla_plugin to read alsa_rw_ content
- Allow asterisk to connect to the apache ports
- Dontaudit attempts to read fixed disk
- Dontaudit search gconf_home_t
- Allow rsync to create swift_server.lock with swift.log labeling
- Add labeling for swift lock files
- Use swift_virt_lock in swift.te
- Allow openwsman to getattr on sblim_sfcbd executable
- Fix sblim_stream_connect_sfcb() to contain also sblim_tmp_t
- Allow openwsman_t to read/write sblim-sfcb shared mem
- Allow openwsman to stream connec to sblim-sfcbd
- Allow openwsman to create tmpfs files/dirs
- dontaudit acces to rpm db if rpm_exec for swift_t and sblim_sfcbd_t
- Allow sblim_sfcbd to execute shell
- Allow swift to create lock file
- Allow openwsman to use tcp/80
- Allow neutron to create also dirs in /tmp
- Allow seunshare domains to getattr on all executables
- Allow ssh-keygen to create temporary files/dirs needed by OpenStack
- Allow named_filetrans_domain to create /run/netns
- Allow ifconfig to create /run/netns - Add missing dyntransition for sandbox_x_domain - More rules for gears and openshift
- Added iotop policy. Thanks William Brown
- Allow spamc to read .pyzor located in /var/spool/spampd
- Allow spamc to create home content with correct labeling
- Allow logwatch_mail_t to create dead.letter with correct labelign
- Add labeling for min-cloud-agent
- Allow geoclue to read unix in proc.
- Add support for /usr/local/Brother labeling. We removed /usr/local equiv.
- add support for min-cloud-agent
- Allow ulogd to request the kernel to load a module
- remove unconfined_domain for openwsman_t
- Add openwsman_tmp_t rules
- Allow openwsman to execute chkpwd and make this domain as unconfined for F20.
- Allow nova-scheduler to read passwd file
- Allow neutron execute arping in neutron_t
- Dontaudit logrotate executing systemctl command attempting to net_admin
- Allow mozilla plugins to use /dev/sr0
- svirt sandbox domains to read gear content in /run. Allow gear_t to manage openshift files
- Any app that executes systemctl will attempt a net_admin
- Fix path to mmap_min_addr - Add gear fixes from dwalsh - selinux_unconfined_type should not be able to set booleans if the securemode is set
- Update sandbox_transition() to call sandbox_dyntrasition(). #885288. - Fix labeling for /root/\.yubico
- userdom_search_admin_dir() calling needs to be optional in kernel.te
- Dontaudit leaked xserver_misc_device_t into plugins
- Allow all domains to search through all base_file_types, this should be back ported to RHEL7 policy
- Need to allow sssd_t to manage kernel keyrings in login programs since they don't get labeled with user domains
- Bootloader wants to look at init state
- Add MCS/MLS Constraints to kernel keyring, also add MCS Constraints to ipc, sem.msgq, shm
- init reads kdbump etc files
- Add � x�������������x
������� X ' �'8 0R������������V" �$ F ���������������� V" U" W" � d/active/modules/100/bootloader/ /var/lib/selinux/targeted/active/modules/100/brctl/ /var/lib/selinux/targeted/active/modules/100/brltty/ /var/lib/selinux/targeted/active/modules/100/bugzilla/ /var/lib/selinux/targeted/active/modules/100/bumblebee/ /var/lib/selinux/targeted/active/modules/100/cachefilesd/ /var/lib/selinux/targeted/active/modules/100/calamaris/ /var/lib/selinux/targeted/active/modules/100/callweaver/ /var/lib/selinux/targeted/active/modules/100/canna/ /var/lib/selinux/targeted/active/modules/100/ccs/ /var/lib/selinux/targeted/active/modules/100/cdrecord/ /var/lib/selinux/targeted/active/modules/100/certmaster/ /var/lib/selinux/targeted/active/modules/100/certmonger/ /var/lib/selinux/targeted/active/modules/100/certwatch/ /var/lib/selinux/targeted/active/modules/100/cfengine/ /var/lib/selinux/targeted/active/modules/100/cgdcbxd/ /var/lib/selinux/targeted/active/modules/100/cgroup/ /var/lib/selinux/targeted/active/modules/100/chrome/ /var/lib/selinux/targeted/active/modules/100/chronyd/ /var/lib/selinux/targeted/active/modules/100/cinder/ /var/lib/selinux/targeted/active/modules/100/cipe/ /var/lib/selinux/targeted/active/modules/100/clock/ /var/lib/selinux/targeted/active/modules/100/clogd/ /var/lib/selinux/targeted/active/modules/100/cloudform/ /var/lib/selinux/targeted/active/modules/100/cmirrord/ /var/lib/selinux/targeted/active/modules/100/cobbler/ /var/lib/selinux/targeted/active/modules/100/cockpit/ /var/lib/selinux/targeted/active/modules/100/collectd/ /var/lib/selinux/targeted/active/modules/100/colord/ /var/lib/selinux/targeted/active/modules/100/comsat/ /var/lib/selinux/targeted/active/modules/100/condor/ /var/lib/selinux/targeted/active/modules/100/conman/ /var/lib/selinux/targeted/active/modules/100/conntrackd/ /var/lib/selinux/targeted/active/modules/100/consolekit/ /var/lib/selinux/targeted/active/modules/100/couchdb/ /var/lib/selinux/targeted/active/modules/100/courier/ /var/lib/selinux/targeted/active/modules/100/cpucontrol/ /var/lib/selinux/targeted/active/modules/100/cpufreqselector/ /var/lib/selinux/targeted/active/modules/100/cpuplug/ /var/lib/selinux/targeted/active/modules/100/cron/ /var/lib/selinux/targeted/active/modules/100/ctdb/ /var/lib/selinux/targeted/active/modules/100/cups/ /var/lib/selinux/targeted/active/modules/100/cvs/ /var/lib/selinux/targeted/active/modules/100/cyphesis/ /var/lib/selinux/targeted/active/modules/100/cyrus/ /var/lib/selinux/targeted/active/modules/100/daemontools/ /var/lib/selinux/targeted/active/modules/100/dbadm/ /var/lib/selinux/targeted/active/modules/100/dbskk/ /var/lib/selinux/targeted/active/modules/100/dbus/ /var/lib/selinux/targeted/active/modules/100/dcc/ /var/lib/selinux/targeted/active/modules/100/ddclient/ /var/lib/selinux/targeted/active/modules/100/denyhosts/ /var/lib/selinux/targeted/active/modules/100/devicekit/ /var/lib/selinux/targeted/active/modules/100/dhcp/ /var/lib/selinux/targeted/active/modules/100/dictd/ /var/lib/selinux/targeted/active/modules/100/dirsrv-admin/ /var/lib/selinux/targeted/active/modules/100/dirsrv/ /var/lib/selinux/targeted/active/modules/100/dmesg/ /var/lib/selinux/targeted/active/modules/100/dmidecode/ /var/lib/selinux/targeted/active/modules/100/dnsmasq/ /var/lib/selinux/targeted/active/modules/100/dnssec/ /var/lib/selinux/targeted/active/modules/100/dovecot/ /var/lib/selinux/targeted/active/modules/100/drbd/ /var/lib/selinux/targeted/active/modules/100/dspam/ /var/lib/selinux/targeted/active/modules/100/entropyd/ /var/lib/selinux/targeted/active/modules/100/exim/ /var/lib/selinux/targeted/active/modules/100/fail2ban/ /var/lib/selinux/targeted/active/modules/100/fcoe/ /var/lib/selinux/targeted/active/modules/100/fetchmail/ /var/lib/selinux/targeted/active/modules/100/finger/ /var/lib/selinux/targeted/active/modules/100/firewalld/ /var/lib/selinux/targeted/active/modules/100/firewallgui/ /var/lib/selinux/targeted/active/modules/100/firstboot/ /var/lib/selinux/targeted/active/modules/100/fprintd/ /var/lib/selinux/targeted/active/modules/100/freeipmi/ /var/lib/selinux/targeted/active/modul� x������������������� X ( '8 ��������������! �$ a ���������������� �! �! �! � setid capability.
- Allow cinder-backup to dbus chat with systemd-logind.
- Update httpd_use_openstack boolean to allow httpd to bind commplex_main_port and read keystone log files.
- Allow gssd to access kernel keyring for login_pgm domains.
- Add more fixes related to timemaster+ntp+ptp4l.
- Allow docker sandbox domains to search all mountpoiunts
- update winbind_t rules to allow IPC for winbind.
- Add rpm_exec_t labeling for /usr/bin/dnf-automatic,/usr/bin/dnf-2 and /usr/bin/dnf-3.
- Allow inet_gethost called by couchdb to access /proc/net/unix.
- Allow eu-unstrip running under abrt_t to access /var/lib/pcp/pmdas/linux/pmda_linux.so
- Label /usr/bin/yum-deprecated as rpm_exec_t. - Add missing typealiases in apache_content_template() for script domain/executable.
- Don't use deprecated userdom_manage_tmpfs_role() interface calliing and use userdom_manage_tmp_role() instead.
- Add support for new cobbler dir locations:
- Add support for iprdbg logging files in /var/log.
- Add relabel_user_home_dirs for use by docker_t - allow httpd_t to read nagios lib_var_lib_t to allow rddtool generate graphs which will be shown by httpd .
- Add nagios_read_lib() interface.
- Additional fix for mongod_unit_file_t in mongodb.te.
- Fix decl of mongod_unit_file to mongod_unit_file_t.
- Fix mongodb unit file declaration.
- Update virt_read_pid_files() interface to allow read also symlinks with virt_var_run_t type.
- Fix labeling for /usr/libexec/mysqld_safe-scl-helper.
- Add support for mysqld_safe-scl-helper which is needed for RHSCL daemons.
- Allow sys_ptrace cap for sblim-gatherd caused by ps.
- Add support for /usr/libexec/mongodb-scl-helper RHSCL helper script.
- Add support for mongod/mongos systemd unit files.
- Allow dnssec-trigger to send sigchld to networkmanager
- add interface networkmanager_sigchld
- Add dnssec-trigger unit file Label dnssec-trigger script in libexec
- Remove duplicate specification for /etc/localtime.
- Add default labeling for /etc/localtime symlink. - Define ipa_var_run_t type
- Allow certmonger to manage renewal.lock. BZ(1213256)
- Add ipa_manage_pid_files interface.
- Add rules for netlink_socket in iotop.
- Allow iotop netlink socket.
- cloudinit and rhsmcertd need to communicate with dbus
- Allow apcupsd to use USBttys. BZ(1210960)
- Allow sge_execd_t to mamange tmp sge lnk files.BZ(1211574)
- Remove dac_override capability for setroubleshoot. We now have it running as setroubleshoot user.
- Allow syslogd_t to manage devlog_t lnk files. BZ(1210968) - Add more restriction on entrypoint for unconfined domains. - Allow abrtd to list home config. BZ(1199658)
- Dontaudit dnssec_trigger_t to read /tmp. BZ(1210250)
- Allow abrt_dump_oops_t to IPC_LOCK. BZ(1205481)
- Allow mock_t to use ptmx. BZ(1181333)
- Allow dnssec_trigger_t to stream connect to networkmanager.
- Allow dnssec_trigger_t to create resolv files labeled as net_conf_t
- Fix labeling for keystone CGI scripts. - Label /usr/libexec/mongodb-scl-helper as mongod_initrc_exec_t. BZ(1202013)
- Add mongodb port to httpd_can_network_connect_db interface. BZ(1209180)
- Allow mongod to work with configured SSSD.
- Add collectd net_raw capability. BZ(1194169)
- Merge postfix spool types(maildrop,flush) to one postfix_spool_t
- Allow dhcpd kill capability.
- Make rwhod as nsswitch domain.
- Add support for new fence agent fence_mpath which is executed by fence_node.
- Fix cloudform policy.(m4 is case sensitive)
- Allow networkmanager and cloud_init_t to dbus chat
- Allow lsmd plugin to run with configured SSSD.
- Allow bacula access to tape devices.
- Allow sblim domain to read sysctls..
- Allow timemaster send a signal to ntpd.
- Allow mysqld_t to use pam.It is needed by MariDB if auth_apm.so auth plugin is used.
- two 'l' is enough.
- Add labeling for systemd-time*.service unit files and allow systemd-timedated to access these unit files.
- Allow polkit to dbus chat with xserver. (1207478)
- Add lvm_stream_connect() interface.
- Set label of /sys/kernel/debug - Allow kmscon to read system state. BZ (1206871)
- Label ~/.abrt/� x�������������h������ X ) %'8 ��
�������! �$ i ���������������� �! �! �! � - Fix labeling for cloud-init logs
- Allow kexec to read kallsyms
- Add rhcs_stream_connect_haproxy interface, Allow neutron stream connect to rhcs
- Add fsetid caps for mandb. #1116165
- Allow all nut domains to read /dev/(u)?random.
- Allow deltacloudd_t to read network state BZ #1116940
- Add support for KVM virtual machines to use NUMA pre-placement
- Allow utilize winbind for authentication to AD
- Allow chrome sandbox to use udp_sockets leaked in by its parent
- Allow gfs_controld_t to getattr on all file systems
- Allow logrotate to manage virt_cache
- varnishd needs to have fsetid capability
- Allow dovecot domains to send signal perms to themselves
- Allow apache to manage pid sock files
- Allow nut_upsmon_t to create sock_file in /run dir
- Add capability sys_ptrace to stapserver
- Mysql can execute scripts when run in a cluster to see if someone is listening on a socket, basically runs lsof
- Added support for vdsm - If I can create a socket I need to be able to set the attributes
- Add tcp/8775 port as neutron port
- Add additional ports for swift ports
- Added changes to fedora from bug bz#1082183
- Add support for tcp/6200 port
- Allow collectd getattr access to configfs_t dir Fixes Bug 1115040
- Update neutron_manage_lib_files() interface
- Allow glustered to connect to ephemeral ports
- Allow apache to search ipa lib files by default
- Allow neutron to domtrans to haproxy
- Add rhcs_domtrans_haproxy()
- Add support for openstack-glance-* unit files
- Add initial support for /usr/bin/glance-scrubber
- Allow swift to connect to keystone and memcache ports.
- Fix labeling for /usr/lib/systemd/system/openstack-cinder-backup
- Add policies for openstack-cinder
- Add support for /usr/bin/nova-conductor
- Add neutron_can_network boolean
- Allow neutron to connet to neutron port
- Allow glance domain to use syslog
- Add support for /usr/bin/swift-object-expirer and label it as swift_exec_t - Allow swift to use tcp/6200 swift port
- ALlow swift to search apache configs
- Remove duplicate .fc entry for Grilo plugin bookmarks
- Remove duplicate .fc entry for telepathy-gabble
- Additional allow rules for docker sandbox processes
- Allow keepalived connect to agentx port
- Allow neutron-ns-metadata to connectto own unix stream socket
- Add support for tcp/6200 port
- Remove ability for confined users to run xinit
- New tool for managing wireless /usr/sbin/iw - Add back MLS policy - Implement new spec file handling for *.pp modules which allows us to move a policy module out of the policy - Allow system_bus_types to use stream_sockets inherited from system_dbusd
- Allow journalctl to call getpw
- New access needed by dbus to talk to kernel stream
- Label sm-notifypid files correctly
- contrib: Add KMSCon policy module - Add mozilla_plugin_use_bluejeans boolean
- Add additional interfaces needed by mozilla_plugin_use_bluejeans boolean - Allow staff_t to communicate and run docker
- Fix *_ecryptfs_home_dirs booleans
- Allow ldconfig_t to read/write inherited user tmp pipes
- Allow storaged to dbus chat with lvm_t
- Add support for storaged and storaged-lvm-helper. Labeled it as lvm_exec_t.
- Use proper calling in ssh.te for userdom_home_manager attribute
- Use userdom_home_manager_type() also for ssh_keygen_t
- Allow locate to list directories without labels
- Allow bitlbee to use tcp/7778 port
- /etc/cron.daily/logrotate to execute fail2ban-client.
- Allow keepalives to connect to SNMP port. Support to do SNMP stuff
- Allow staff_t to communicate and run docker
- Dontaudit search mgrepl/.local for cobblerd_t
- Allow neutron to execute kmod in insmod_t
- Allow neutron to execute udevadm in udev_t
- Allow also fowner cap for varnishd
- Allow keepalived to execute bin_t/shell_exec_t
- rhsmcertd seems to need these accesses. We need this backported to RHEL7 and perhaps RHEL6 policy
- Add cups_execmem boolean
- Allow gear to manage gear service
- New requires for gear to use systemctl and init var_run_t
- Allow cups to execute its rw_etc_t files, for brothers printers
- Add fixes to make munin a� x��������������������� X * w'8 �������� K" �$ [ ���������������� K" J" L" � lman cil lang_ext mailscanner cil lang_ext man2html cil lang_ext mandb cil lang_ext mcelog cil lang_ext mediawiki cil lang_ext memcached cil lang_ext milter cil lang_ext minidlna cil lang_ext minissdpd cil lang_ext mip6d cil lang_ext mirrormanager cil lang_ext miscfiles cil lang_ext mock cil lang_ext modemmanager cil lang_ext modutils cil lang_ext mojomojo cil lang_ext mon_statd cil lang_ext mongodb cil lang_ext motion cil lang_ext mount cil lang_ext mozilla cil lang_ext mpd cil lang_ext mplayer cil lang_ext mrtg cil lang_ext mta cil lang_ext munin cil lang_ext mysql cil lang_ext mythtv cil lang_ext naemon cil lang_ext nagios cil lang_ext namespace cil lang_ext ncftool cil lang_ext netlabel cil lang_ext netutils cil lang_ext networkmanager cil lang_ext ninfod cil lang_ext nis cil lang_ext nova cil lang_ext nscd cil lang_ext nsd cil lang_ext nslcd cil lang_ext ntop cil lang_ext ntp cil lang_ext numad cil lang_ext nut cil lang_ext nx cil lang_ext obex cil lang_ext oddjob cil lang_ext opafm cil lang_ext openct cil lang_ext opendnssec cil lang_ext openfortivpn cil lang_ext openhpid cil lang_ext openshift openshift-origin cil lang_ext cil lang_ext opensm cil lang_ext openvpn cil lang_ext openvswitch cil lang_ext openwsman cil lang_ext oracleasm cil lang_ext osad cil lang_ext pads cil lang_ext passenger cil lang_ext pcmcia cil lang_ext pcp cil lang_ext pcscd cil lang_ext pdns cil lang_ext pegasus cil lang_ext permissivedomains cil lang_ext pesign cil lang_ext pingd cil lang_ext piranha cil lang_ext pkcs cil lang_ext pkcs11proxyd cil lang_ext pki cil lang_ext plymouthd cil lang_ext podsleuth cil lang_ext policykit cil lang_ext polipo cil lang_ext portmap cil lang_ext portreserve cil lang_ext postfix cil lang_ext postgresql cil lang_ext postgrey cil lang_ext ppp cil lang_ext prelink cil lang_ext prelude cil lang_ext privoxy cil lang_ext procmail cil lang_ext prosody cil lang_ext psad cil lang_ext ptchown cil lang_ext publicfile cil lang_ext pulseaudio cil lang_ext puppet cil lang_ext pwauth cil lang_ext qmail cil lang_ext qpid cil lang_ext quantum cil lang_ext quota cil lang_ext rabbitmq cil lang_ext radius cil lang_ext radvd cil lang_ext raid cil lang_ext rasdaemon cil lang_ext rdisc cil lang_ext readahead cil lang_ext realmd cil lang_ext redis cil lang_ext remotelogin cil lang_ext rhcs cil lang_ext rhev cil lang_ext rhgb cil lang_ext rhnsd cil lang_ext rhsmcertd cil lang_ext ricci cil lang_ext rkhunter cil lang_ext rkt cil lang_ext rlogin cil lang_ext rngd cil lang_ext rolekit cil lang_ext roundup cil lang_ext rpc cil lang_ext rpcbind cil lang_ext rpm cil lang_ext rrdcached cil lang_ext rshd cil lang_ext rssh cil lang_ext rsync cil lang_ext rtas cil lang_ext rtkit cil lang_ext rwho cil lang_ext samba cil lang_ext sambagui cil lang_ext sandboxX cil lang_ext sanlock cil lang_ext sasl cil lang_ext sbd cil lang_ext sblim cil lang_ext screen cil lang_ext secadm cil lang_ext sectoolm cil lang_ext selinuxutil cil lang_ext sendmail cil lang_ext sensord cil lang_ext setrans cil lang_ext setroubleshoot cil lang_ext seunshare cil lang_ext sge cil lang_ext shorewall cil lang_ext slocate cil lang_ext slpd cil lang_ext smartmon cil lang_ext smokeping cil lang_ext smoltclient cil lang_ext smsd cil lang_ext snapper cil lang_ext snmp cil lang_ext snort cil lang_ext sosreport cil lang_ext soundserver cil lang_ext spamassassin cil lang_ext speech-dispatcher cil lang_ext squid cil lang_ext ssh cil lang_ext sslh cil lang_ext sssd cil lang_ext staff cil lang_ext stapserver cil lang_ext stratisd cil lang_ext stunnel cil lang_ext su cil lang_ext sudo cil lang_ext svnserve cil lang_ext swift cil lang_ext sysadm cil lang_ext sysadm_secadm cil lang_ext sysnetwork cil lang_ext sysstat cil lang_ext systemd cil lang_ext tangd cil lang_ext targetd cil lang_ext tcpd cil lang_ext tcsd cil lang_ext telepathy cil lang_ext telnet cil lang_ext tftp cil lang_ext tgtd cil lang_ext thin cil lang_ext thumb cil lang_ext timedatex cil lang_ext tlp cil lang_ext tmpreaper cil lang_ext tomcat cil lang_ext tor cil lang_ext tuned cil lang_ext tvtim� x�������������X������� X + d'8 h� �������8" �$ ( ���������������� 8" 7" 9" � tmp_t sockets for switch user to work - Fix staff_t domain - Grab remainder of network_peer_controls patch - More fixes for devicekit - Upgrade to latest upstream - Add boolean to disallow unconfined_t login - Add back transition from xguest to mozilla - Add virt_content_ro_t and labeling for isos directory - Fixes for wicd daemon - More mls/rpm fixes - Add policy to make dbus/nm-applet work - Remove polgen-ifgen from post and add trigger to policycoreutils-python - Add wm policy
- Make mls work in graphics mode - Fixed for DeviceKit - Add devicekit policy - Update to upstream - Define openoffice as an x_domain - Fixes for reading xserver_tmp_t - Allow cups_pdf_t write to nfs_t - Remove audio_entropy policy - Update to upstream - Allow hal_acl_t to getattr/setattr fixed_disk - Change userdom_read_all_users_state to include reading symbolic links in /proc - Fix dbus reading /proc information - Add missing alias for home directory content - Fixes for IBM java location - Allow unconfined_r unconfined_java_t - Add cron_role back to user domains - Fix sudo setting of user keys - Allow iptables to talk to terminals
- Fixes for policy kit
- lots of fixes for booting. - Cleanup policy - Rebuild for Python 2.6 - Fix labeling on /var/spool/rsyslog - Allow postgresl to bind to udp nodes - Allow lvm to dbus chat with hal
- Allow rlogind to read nfs_t - Fix cyphesis file context - Allow hal/pm-utils to look at /var/run/video.rom
- Add ulogd policy - Additional fixes for cyphesis
- Fix certmaster file context
- Add policy for system-config-samba
- Allow hal to read /var/run/video.rom - Allow dhcpc to restart ypbind
- Fixup labeling in /var/run - Add certmaster policy - Fix confined users
- Allow xguest to read/write xguest_dbusd_t - Allow openoffice execstack/execmem privs - Allow mozilla to run with unconfined_execmem_t - Dontaudit domains trying to write to .xsession-errors - Allow nsplugin to look at autofs_t directory - Allow kerneloops to create tmp files - More alias for fastcgi - Remove mod_fcgid-selinux package - Fix dovecot access - Policy cleanup - Remove Multiple spec
- Add include
- Fix makefile to not call per_role_expansion - Fix labeling of libGL - Update to upstream - Update to upstream policy - Fixes for confined xwindows and xdm_t - Allow confined users and xdm to exec wm
- Allow nsplugin to talk to fifo files on nfs - Allow NetworkManager to transition to avahi and iptables
- Allow domains to search other domains keys, coverup kernel bug - Fix labeling for oracle - Allow nsplugin to comminicate with xdm_tmp_t sock_file - Change all user tmpfs_t files to be labeled user_tmpfs_t
- Allow radiusd to create sock_files - Upgrade to upstream - Allow confined users to login with dbus - Fix transition to nsplugin - Add file context for /dev/mspblk.* - Fix transition to nsplugin
' - Fix labeling on new pm*log
- Allow ssh to bind to all nodes - Merge upstream changes
- Add Xavier Toth patches - Add qemu_cache_t for /var/cache/libvirt - Remove gamin policy - Add tinyxs-max file system support - Update to upstream
- New handling of init scripts - Allow pcsd to dbus
- Add memcache policy - Allow audit dispatcher to kill his children - Update to upstream
- Fix crontab use by unconfined user - Allow ifconfig_t to read dhcpc_state_t - Update to upstream - Update to upstream - Allow system-config-selinux to work with policykit - Fix novel labeling - Consolodate pyzor,spamassassin, razor into one security domain
- Fix xdm requiring additional perms. - Fixes for logrotate, alsa - Eliminate vbetool duplicate entry - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
- Change dhclient to be able to red networkmanager_var_run - Update to latest refpolicy
- Fix libsemanage initial install bug - Add inotify support to nscd - Allow unconfined_t to setfcap - Allow amanda to read tape
- Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
- Add support for netware file systems - Allow ypbind apps to net_bind_service - Allow all system domains and application domains to append to any log file - Allo� x������������������� X , �'8 2 x�������Q �$ @ ���������������� �Q �Q �Q � ��������������������������������������������������������������������������������������������������������������������������������������������������������������������/etc/pam.d/smtp /usr/bin/mailq /usr/bin/newaliases /usr/bin/rmail /usr/lib/sendmail /usr/sbin/sendmail /usr/share/man/man1/mailq.1.gz /usr/share/man/man1/newaliases.1.gz /usr/share/man/man5/aliases.5.gz /usr/share/man/man8/sendmail.8.gz MTA config(postfix) postfix postfix(x86-64) postfix-perl-scripts postfix-pflogsumm server(smtp) smtpd smtpdaemon @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ /bin/bash /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh /sbin/chkconfig /sbin/service /usr/bin/perl /usr/sbin/alternatives /usr/sbin/groupadd /usr/sbin/useradd config(postfix) cyrus-sasl libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libdb-5.3.so()(64bit) libdl.so.2()(64bit) libicudata.so.60()(64bit) libicui18n.so.60()(64bit) libicuuc.so.60()(64bit) libm.so.6()(64bit) libmariadb.so.3()(64bit) libmariadb.so.3(libmysqlclient_18)(64bit) libnsl.so.2()(64bit) libnsl.so.2(LIBNSL_1.0)(64bit) libpcre.so.1()(64bit) libresolv.so.2()(64bit) libresolv.so.2(GLIBC_2.2.5)(64bit) libsasl2.so.3()(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) libssl.so.1.1(OPENSSL_1_1_1)(64bit) libz.so.1()(64bit) openssl pcre perl(Date::Calc) rpmlib(CompressedFileNames) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 2:3.4.8-2.centos.8+p18.0.24.0+t200128.1353 3.0.4-1 4.0-1 5.2-1 postfix-perl-scripts 2:3.4.8 4.14.2 /bin/sh /bin/sh /bin/sh /bin/sh
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � x�������������H�������� X - /'8 x �������" �$ ���������������� " " " � low sosreport to send signull to unconfined_t
- Add virt_noatsecure and virt_rlimitinh interfaces
- Fix labeling in thumb.fc to add support for /usr/lib64/tumbler-1/tumblerddd support for freeipmi port
- Add sysadm_u_default_contexts
- Add logging_read_syslog_pid()
- Fix userdom_manage_home_texlive() interface
- Make new type to texlive files in homedir
- Add filename transitions for /run and /lock links
- Allow virtd to inherit rlimit information - DRM master and input event devices are used by the TakeDevice API
- Clean up bumblebee policy
- Update pegasus_openlmi_storage_t policy
- opensm policy clean up
- openwsman policy clean up
- ninfod policy clean up
- Allow conman to connect to freeipmi services and clean up conman policy
- Allow conmand just bind on 7890 port
- Add freeipmi_stream_connect() interface
- Allow logwatch read madm.conf to support RAID setup
- Add raid_read_conf_files() interface
- Allow up2date running as rpm_t create up2date log file with rpm_log_t labeling
- add rpm_named_filetrans_log_files() interface
- Added policy for conmand
- Allow dkim-milter to create files/dirs in /tmp
- update freeipmi policy
- Add policy for freeipmi services
- Added rdisc_admin and rdisc_systemctl interfaces
- Fix aliases in pegasus.te
- Allow chrome sandbox to read generic cache files in homedir
- Dontaudit mandb searching all mountpoints
- Make sure wine domains create .wine with the correct label
- Add proper aliases for pegasus_openlmi_services_exec_t and pegasus_openlmi_services_t
- Allow windbind the kill capability
- DRM master and input event devices are used by the TakeDevice API
- add dev_rw_inherited_dri() and dev_rw_inherited_input_dev()
- Added support for default conman port
- Add interfaces for ipmi devices
- Make sure wine domains create .wine with the correct label
- Allow manage dirs in kernel_manage_debugfs interface.
- Allow systemctl running in ipsec_mgmt_t to access /usr/lib/systemd/system/ipsec.service
- Label /usr/lib/systemd/system/ipsec.service as ipsec_mgmt_unit_file_t
- Fix userdom_confined_admin_template()
- Add back exec_content boolean for secadm, logadm, auditadm
- Fix files_filetrans_system_db_named_files() interface
- Allow sulogin to getattr on /proc/kcore
- Add filename transition also for servicelog.db-journal
- Add files_dontaudit_access_check_root()
- Add lvm_dontaudit_access_check_lock() interface
- Allow mount to manage mount_var_run_t files/dirs - Add back fixes for gnome_role_template()
- Label /usr/sbin/htcacheclean as httpd_exec_t
- Add missing alias for pegasus_openlmi_service_exec_t
- Added support for rdisc unit file
- Added new policy for ninfod
- Added new policy for openwsman
- Add antivirus_db_t labeling for /var/lib/clamav-unofficial-sigs
- Allow runuser running as logrotate connections to system DBUS
- Add connectto perm for NM unix stream socket
- Allow watchdog to be executed from cron
- Allow cloud_init to transition to rpm_script_t
- Allow lsmd_plugin_t send system log messages
- Label /var/log/up2date as rpm_log_t and allow sosreport to manage rpm log/pid/cache files which is a part of ABRT policy for sosreport running as abrt_t
- Added new capabilities for mip6d policy
- Label bcache devices as fixed_disk_device_t
- Allow systemctl running in ipsec_mgmt_t to access /usr/lib/systemd/system/ipsec.service
- label /usr/lib/systemd/system/ipsec.service as ipsec_mgmt_unit_file_t - Add lsmd_plugin_t for lsm plugins
- Allow dovecot-deliver to search mountpoints
- Add labeling for /etc/mdadm.conf
- Allow opelmi admin providers to dbus chat with init_t
- Allow sblim domain to read /dev/urandom and /dev/random
- Add back exec_content boolean for secadm, logadm, auditadm
- Allow sulogin to getattr on /proc/kcore - Add filename transition also for servicelog.db-journal
- Add files_dontaudit_access_check_root()
- Add lvm_dontaudit_access_check_lock() interface
- Allow mount to manage mount_var_run_t files/dirs
- Allow updapwd_t to ignore mls levels for writign shadow_t at a lower level
- Make sure boot.log is created with the correct label
- ca� x���������������������� X . V'8 �� �������*" �$ : ���������������� *" )" +" � utes for userdomain and apache - Allow virsh to read xenstored pid file
- Backport corenetwork fixes from upstream
- Do not audit attempts by thumb to search config_home_t dirs (~/.config)
- label ~/.cache/telepathy/logger telepathy_logger_cache_home_t
- allow thumb to read generic data home files (mime.type) - Allow nmbd to manage sock file in /var/run/nmbd
- ricci_modservice send syslog msgs
- Stop transitioning from unconfined_t to ldconfig_t, but make sure /etc/ld.so.cache is labeled correctly
- Allow systemd_logind_t to manage /run/USER/dconf/user - Fix missing patch from F16 - Allow logrotate setuid and setgid since logrotate is supposed to do it
- Fixes for thumb policy by grift
- Add new nfsd ports
- Added fix to allow confined apps to execmod on chrome
- Add labeling for additional vdsm directories
- Allow Exim and Dovecot SASL
- Add label for /var/run/nmbd
- Add fixes to make virsh and xen working together
- Colord executes ls
- /var/spool/cron is now labeled as user_cron_spool_t - Stop complaining about leaked file descriptors during install - Remove java and mono module and merge into execmem - Fixes for thumb policy and passwd_file_t - Fixes caused by the labeling of /etc/passwd
- Add thumb.patch to transition unconfined_t to thumb_t for Rawhide - Add support for Clustered Samba commands
- Allow ricci_modrpm_t to send log msgs
- move permissive virt_qmf_t from virt.te to permissivedomains.te
- Allow ssh_t to use kernel keyrings
- Add policy for libvirt-qmf and more fixes for linux containers
- Initial Polipo
- Sanlock needs to run ranged in order to kill svirt processes
- Allow smbcontrol to stream connect to ctdbd - Add label for /etc/passwd - Change unconfined_domains to permissive for Rawhide
- Add definition for the ephemeral_ports - Make mta_role() active
- Allow asterisk to connect to jabber client port
- Allow procmail to read utmp
- Add NIS support for systemd_logind_t
- Allow systemd_logind_t to manage /run/user/$USER/dconf dir which is labeled as config_home_t
- Fix systemd_manage_unit_dirs() interface
- Allow ssh_t to manage directories passed into it
- init needs to be able to create and delete unit file directories
- Fix typo in apache_exec_sys_script
- Add ability for logrotate to transition to awstat domain - Change screen to use screen_domain attribute and allow screen_domains to read all process domain state
- Add SELinux support for ssh pre-auth net process in F17
- Add logging_syslogd_can_sendmail boolean - Add definition for ephemeral ports
- Define user_tty_device_t as a customizable_type - Needs to require a new version of checkpolicy
- Interface fixes - Allow sanlock to manage virt lib files
- Add virt_use_sanlock booelan
- ksmtuned is trying to resolve uids
- Make sure .gvfs is labeled user_home_t in the users home directory
- Sanlock sends kill signals and needs the kill capability
- Allow mockbuild to work on nfs homedirs
- Fix kerberos_manage_host_rcache() interface
- Allow exim to read system state - Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
- We want any file type that is created in /tmp by a process running as initrc_t to be labeled initrc_tmp_t - Allow collectd to read hardware state information
- Add loop_control_device_t
- Allow mdadm to request kernel to load module
- Allow domains that start other domains via systemctl to search unit dir
- systemd_tmpfiles, needs to list any file systems mounted on /tmp
- No one can explain why radius is listing the contents of /tmp, so we will dontaudit
- If I can manage etc_runtime files, I should be able to read the links
- Dontaudit hostname writing to mock library chr_files
- Have gdm_t setup labeling correctly in users home dir
- Label content unde /var/run/user/NAME/dconf as config_home_t
- Allow sa-update to execute shell
- Make ssh-keygen working with fips_enabled
- Make mock work for staff_t user
- Tighten security on mock_t - removing unconfined_notrans_t no longer necessary
- Clean up handling of secure_mode_insmod and secure_mode_policyload
- Remove unconfined� x�������������(�������� X / j&8 � ������p� v �$ f ���������������� v u w � ically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=db4bb4761d58084a4308300b6e9ee919fd26aec0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=572cca59f259298f733bfca6dd46eb7fecc3695c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e32d68bae464f30e6863e84da6436dbc919669f2, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=b0bdcaaca2cd4c5f84d77c39668a3269da0005cd, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=946adc6dd0c48bd4d2b190a94c8884fb29559325, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=8c618e015b34dee06d03eba45e962c1c44a08540, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e084b7c9ad967913526ea2247234e8455942efec, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=5308a2fe3e1341547bc2198eefd9df6fc50e7c58, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=882937aa14e7a04fdb72a67dfe5ede159dcfb709, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=3d946f7c895090037d345351a08979ebf91cebb5, stripped directory UTF-8 Unicode text ASCII text, with very long lines ASCII text Algol 68 source, UTF-8 Unicode text troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) + @ U j � � � � R
R R R R R R R
R R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R R
R R R R R R R
R R R R R R R R R R R R R https://bugz.fedoraproject.org/ImageMagick utf-8 d266382fcfb587cc7509062cc3bda02ae54294d9603a830e31e27c8c47005ef9 ? ���� ��w_!�:�jwK p� �3 !��y덏%���!�E�/�֡g��;
!�E�/�֡��z�ע'@�z��A � ��nGQ�2RKߏ�auCN/>H�b�[w���P㮳4}tA�^�f�O� �R��,�&��mH��Y%T\�{��k�`�Ji|t{��
��ml&,��(<��X�;a TA P,�6 gx|�'�3=�q�ᬗ��c��y{V�t��NG �`�\���]�=��a� ���S&� ��O��g9RVѐ7]� ���w7�H��� x��������������x������� X 0 �&8 X������� �! �$ ���������������� �! �! �! � f3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a10211eee15c21589eab4ea944767b830c086f453cd779487d1b806ced6fa664 ab20106e8dde62cd3e0329f523f37a6e589fd48263c33dc262c1ba2a01c3f3b7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d0da36518a76c536637f7a2e88f0b515a80085923c53d4142652a175db6565bb d1c4aad69ba5ebe5595a7b0705f70c3b7ce094b36a38a45de9ffcf65c9cf3d03 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ebd6aa7129af5c5e1b16591a56a3fb10bf90403d713ea65871608d670d9ae890 94f5c915535f8a3e7cfc40c1041074edd3e49fbf30f32442de600db048f54a68 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4bac3dc61814bc230c5fc3fb786f7f93ec7940863e7fa03b43aea44b54cf9d82 0fd4ac91b5f32c29f09f754b440fce3853c8c8a81287de3404696fcc82be57c7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c53ba54a64a080e4bf32aa9636ddd525ce51506bf0304f6329c3ace1384ae775 1ece4da3c301b64b838651756864facf9edd9a1c45534ea36735660f7edbc3a1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e6c11e83e67187dd78ea5c2d042fe8a31a2c5f5586287833fdfa4dfad388b236 f6342b2f601bb091a11331ae06e384b07a30b2997ec850c793b3e40462aab2d3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e fa4dacb825e630bdb309f0d5af13550d9a70ea0cafb473dbce4e623f09d4277c 83131148f6103b208f7c7e4484b626415d672e439cfc6da2407073c353e8977a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 57930a9681852228722a777fec3eaa8e2c611a5a86ac98b36bafcfd4c2f53967 0e61def3e68c8c423bedc60f26d3f0663f682aecf21192e754d994146d2cfb4c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 24303c49014195b267643f2eee5673b835457dc74396d1e64f8fff8ab034590a fabbaa66883d7d74987356ed2f72c3e5c341d0bb587d2f4bb81d43b3678cbf1f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1e0d2975da706b796fb40718e2d9ae26798f5b0640dcc83688c9404b9fca874f b64f3f15b0427f32b5d0a82c93918a9a1d3ad1dc6fe5939259874be079c6c2ab d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 70c85b2b6aeeb935e6474446edf6141fa29cd1d40de1117ea0c5220a547aec06 005ea58f3e2875862786129718398962d6550c2268ef98e5f4e3a2e816657033 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c9ed5d26dbfb39ec2cbeb2190ddbf5f36c77807549ad1d7233214fc56d957344 2b741209c807fd06d999af0629a78fdb2aeae69921e853c66eda42e6cac800ed d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a21759021761317eecb6f097405236332bafebf244e104ae4e5886d62f78f3f7 3a4eabf4730dd490a54c8bdf62eb0b6bc62d8836fa463cdc95d3e0957750be95 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6d414494a3c8f990400f9e731a50bb5452c3fe818fa53577a642eb59674773bf 2b6d530cb4b417520092af042422946441b43da7cb689fda6dfc98ae876baecb d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6f9e538139bd775b99f84fb19e1d10012f7c91c6e4e28129f2a7cb1166e73aa3 afe97bad163bc9fb2fe7668811ad1fd61b0736a3a8f9dba416e8edbec79978b0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b172fbd5436df1c213de3c99eb1f13a2671417306ed6aba14c420ee270e1d652 754e1127f4e1320790fe7ff08b9e734867fee1885279c00e8ff3e761bc82acd1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e75c2bfb7a5df265a2aa3d9ca91173c710b607ce38168593b6f2baf37c843c2c fb775844a203fa50c87f6889e5c9040ba890d506f47cdb9c1c1fd8eac7875027 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e cc0e0c392b0764fa32b82c12043274eaae3ccec82ba657fb855a800bbdf7dd71 efeece0bd9355c35b0b8395063a92aa9b68f9e347b3e38722e7e9cf563b77560 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 9513616a205078c92e1cf865011cdfe783dc73f0a9f59e1856d581a4b38bca1e 2ddecc1d084b1b5b59ba2c4b12e0021a7a42b187138e19dc79993fec6b50a004 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 52f5be88e75274572e7004d901fec17f65874b73b0d5854e864eaf7c844e7147 66568eb3f3ad3c63b65d386edf36a0038e3c0cff7fa83cc1781341fea39fabbc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e dd3dac98d827edf35d224ee4898731570c5c749c4944eb718c633b74588e1895 e52b639e6c58905e1185108dbfce46c504524a582e1� x�������������h������� X 1 G%8 ��������������q �$ a ���������������� q p r � karound for python bindings installing to
the wrong lib directory on 64 bit archs - Updated console-auth patch
- rebuild - Update to upstream CVS build
- Added console-auth patch - Workaround added to fix gcc-3.4 bug on ia64 - require new Pyrex version and see if it builds this time - rebuild with updated Pyrex (0.9.2.1) - rebuilt - Moved dbus-viewer, dbus-monitor and dbus-glib-tool
into the dbus-glib package so that the main dbus
package does not depend on glib (Bug #125285) - rebuilt - added my Python patch
- took out the qt build requires
- added a gtk+ build requires - Changed build requirement to version 0.9-3 of Pyrex
to fix problem with builing on x86_64 - update to upstream 0.21
- removed dbus-0.20-varargs.patch patch (fixed upstream) - added a dbus-python package to generate python bindings
- added Pyrex build dependacy - rebuilt - fix dbus error functions on x86-64 (#116324)
- add prereq (#112027) - rebuilt - Conflict with cups prior to configuration file change, so that the
%postun service condrestart works. - rebuild in fc2, cups now updated - update to upstream 0.20 - hmm, dbus doesn't support uids in the config file. fix. - put uid instead of username in the config file, to keep things working with name change - make subpackages require the specific release, not just version, of base package - change system user "messagebus" -> "dbus" to be under 8 chars - see if removing qt subpackage for now will get us through the build system,
qt bindings not useful yet anyway - 0.13 fixes a little security oops - break the tiny dbus-launch that depends on X into separate package
so a CUPS server doesn't need X installed - rebuilt - 0.11.91 cvs snap properly merges system.d - build a cvs snap with a few more fixes - fix a crash that was breaking cups - 0.11 - use rc.d/init.d not init.d, bug #90192
- include the new man pages - 0.9
- export QTDIR explicitly
- re-enable qt, the problem was most likely D-BUS configure - update from CVS with a fix to set uid after gid - new cvs snap that actually forks to background and changes
user it's running as and so forth
- create our system user in pre - fix for "make check" test that required a home directory - disable qt for now because beehive hates me
- pull a slightly newer cvs snap that creates socket directory
- cat the make check log after make check fails - initial build
1:1.12.8-24.el8 1:1.12.8-24.el8 dbus-monitor dbus-send dbus-update-activation-environment dbus-uuidgen .build-id 0d 4a4c4e5fec34ce58d62c02a41fbb5c72536486 2b 16f714819d37a81d55a6e1e50313fa80bf5dd7 c6 d5f8f6f2a1564678818a3c545ecd61ad8edcc9 d7 c3ec6395b30593affa251048a3583b3a1bf040 dbus-tools COPYING dbus-monitor.1.gz dbus-send.1.gz dbus-update-activation-environment.1.gz dbus-uuidgen.1.gz /usr/bin/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/0d/ /usr/lib/.build-id/2b/ /usr/lib/.build-id/c6/ /usr/lib/.build-id/d7/ /usr/share/licenses/ /usr/share/licenses/dbus-tools/ /usr/share/man/man1/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=d7c3ec6395b30593affa251048a3583b3a1bf040, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so� x��������������W������� X 2 �'8 ��������������� e �$ ���������������� e � �
���������������xsgbVQE@4/#
���������������ythcWRFA50$ �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
z
u
i
d
X
S
G
B
6
1
%
� � � � � � � � � � � � � � � { v j e Y T H C 7 2 & ! � � � � � � � � � � � � � � � | w k f Z U I D 8 3 ' " �
�
�
�
�
�
�
�
�
�
�
�
�
�
}
x
l
g
[
V
J
E
9
4
(
#
� � � � � � � � � � � � � � ~ y m h \ W K F : 5 ) $ ������������� ��d! T� � ��d! T� � ݄�n �� � Kv@�Q D� � Q��U |� � �� �; � �>Tc l� � Kv@tQ 4* � �xS k D� � ��� T] � 4�\3 1 � Kv@-Q � � ӝ�j @� � ��� \5 � Sy��b $r � Kv@ , � ��+ � r,nb �\ � Kv@� H- � �� h. � r,Hb - � Kv@� � � R�~i 4 � r,+b �4 � Kv@ 8 � R�Si �) � ��h �� � r,b x0 � R�0i �B � r,�a � � �}�nP @ � R�i P � ��u pr � r,�a �( � ���)P h � R��h 7 � 9��qa ] � R��h 4Z � 9��*a � W��*O $8 � Rܙ �: � ��� \� � 9��a �C � W���N �� � R�O` � � �� � � 9���` 1 � W���N �a � �>� �� � �� ( � 9���` �# � ���N �2 � �U�N �) � ��j : � 9���` |K � ��kN 4C � YJ�eh <g � �� �R 9���` �2 } YJ�1h tD z �� . w � O}` ' u YJ�g �: r ��- 0h o �J]-` m ���M g l YJЖg 4) j ��� �% g U3��P �m e ��M �f d YJ�Cg � b �� �= _ �CZ�_ �K ] ��M �* \ YJ�Yf m Z �� D` W �CZ�_ $ U ��PM T^ T YJ� f �m R ��_ @e O �CZ�_ �, M ��[L �_ L YJ��e , J ��8 �� G �CZn_ �G E ��B � D YJ�je � B �� T' ? N��F_ ؋ = ���A �* < YJ�Le � : ��� �� 7 ��~. C 4 YJ�.e @5 2 �� Ě / N��
T �6 - ��- �� , YJ��d �p * N�ΥS ,E % YJНd �� " ��|O @� ��&- $W YJ� d 9 `�GS H� ��, � YJ��c � ��C �$ `��R H#
��, �4 YJЂc �J
��", pQ YJ� B D� � x�������������G������� X 3 &8 �� �� tQ �$ d ���������������� tQ uQ � K %| ? � d � � � � ( � , � S � � � � � � � � � � � Z � � � � � � � � � � L � � �
!� � 0l � �P �
�� �
8 � l � 1� 1� � @P � K� [ L� [ S� [ ( Tv 8 T� � 9 Z� � : � � B Nt G N� � H ] � I k� � X oL � Y q� � Z tt [ t| \ t� � ] �$ � ^ �e � b �? d Ǐ e ǔ f Ǘ l Ǚ t Ǵ � u �D � v �� ) w � � x 4 � y � � � | � � � � � � � � � � � �
!\ !� � !� !� � %p g %t h %x C perl-interpreter 5.26.3 422.el8.0.1 Standalone executable Perl interpreter This is a Perl interpreter as a standalone executable /usr/bin/perl
required for handling Perl scripts. It does not provide all the other Perl
modules or tools.
Install this package if you want to program in Perl or enable your system to
handle Perl scripts with /usr/bin/perl interpreter.
If your script requires some Perl modules, you can install them with
"perl(MODULE)" where "MODULE" is a name of required module. E.g. install
"perl(Test::More)" to make Test::More Perl module available.
If you need all the Perl modules that come with upstream Perl sources, so
called core modules, install perl package.
If you only need perl run-time as a shared library, i.e. Perl interpreter
embedded into another application, the only essential package is perl-libs.
Perl header files can be found in perl-devel package.
Perl utils like "splain" or "perlbug" can be found in perl-utils package. df��x64-builder02.almalinux.org ۱�AlmaLinux AlmaLinux (GPL+ or Artistic) and (GPLv2+ or Artistic) and BSD and Public Domain and UCD AlmaLinux Packaging Team <packager@almalinux.org> Unspecified http://www.perl.org/ linux x86_64 1� 1� 2 8 2 4 / 2 ' ; 6 2 8 0 3 ) 3 < 1 / ' 9 7 A 0 1 3 0 2 < ? 2 7 F : 9 8 7 8 6 9 4 1 7 5 ) 5 9 4 + 4 0 + : 1 : 3 A z� � ^ 06 { � � � b� � : 3[ b t^ � � p O > N� � � X � /
�
� rH D � b � � � !9 � � \ ] � � � L ] ^ _ ^ � u� c O B! a� ^H P �8 n� O N� > N� N� _H �� nH >@ >� ^� �@ � >0 ^� >0 ^p i � � � < � � m � � y l � �
� � � � >3 � � � � / c k � '
+ � � � � , N � N � � � � � � � � w 0 % � m 5| < & v � u � 's �
5 6 H 0T V; > � � � � /
� V � U S
d ?k c� N� � � � i P � � X - ѧ �
� � �� 8 � � �* h � s �� ` � � � g� � " � S �J � � � n� � � G� l � � � � � *� [- �� $ F � �; #� � � n t r N� $ � � h 1� N� l 9� *� B� � #� � � (� � v� <} r f ~
�� 6� � x��������������6������� X 4 %8 ��������h� u �$ e ���������������� u v � J m� ? id d � � � � � B � � � < � @ � J � T � � � � � � � � � � U X U U
� U
U � U
U l U U � � U 4 � !� ( !� 8 !� O 9 # O : 1� O B F� G F� U H H U I I\ U X I� Y I� Z J [ J \ J U ] K` U ^ P b R[ d S� e S� f S� l S� t S� U u U$ U v Vx w c| U x d� U y f$ � � i � i � i � i` it ix � k. k> �
l� m � m` md U m� g m� h m� C procps-ng 3.3.15 13.el8 System and process monitoring utilities The procps package contains a set of system utilities that provide
system information. Procps includes ps, free, skill, pkill, pgrep,
snice, tload, top, uptime, vmstat, pidof, pmap, slabtop, w, watch
and pwdx.
The ps command displays a snapshot of running processes. The top command
provides a repetitive update of the statuses of running processes.
The free command displays the amounts of free and used memory on your
system. The skill command sends a terminate command (or another
specified signal) to a specified set of processes. The snice
command is used to change the scheduling priority of specified
processes. The tload command prints a graph of the current system
load average to a specified tty. The uptime command displays the
current time, how long the system has been running, how many users
are logged on, and system load averages for the past one, five,
and fifteen minutes. The w command displays a list of the users
who are currently logged on and what they are running. The watch
program watches a running program. The vmstat command displays
virtual memory statistics about processes, memory, paging, block
I/O, traps, and CPU activity. The pwdx command reports the current
working directory of a process or processes. d)
x64-builder01.almalinux.org
��AlmaLinux AlmaLinux GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+ AlmaLinux Packaging Team <packager@almalinux.org> Applications/System https://sourceforge.net/projects/procps-ng/ linux x86_64 R� s0 B� s0 �� � 2� s S( s B� � 2( �� R� t� ( Ex sP B ; oY � C� �
e F� c% z B % � 7� 7� � � � % % u� { � " � d�����������������A�A�A�A�A�A�A�A�A�A�A���A�A�A�A�A�A���������A큤������������A큤���������������������������������������� d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d)
d) d)
d) d)
d)
X6<X6<[ �%d(�-d(�-X6<X6<d)
X6<X6<d) d) d) d) d) d) d) d) d) d) d) d) d) d) d) d) d) d) d) 86e8c11416579929b26469f7c5aba65d46780d9762b519464b0c3baf378bb298 04b9a0637125ec45f45a7653a012c33119081fbf2d5c09f22b993b224c3594e8 7d7a42fa21febf4c06a46da10482488105acaa576c7131cbd08e1a8beb841b87 5264b3fb1d9a6922ff3f01cd2707b93d27e2557bbbc230c38827bbb028972242 00f2407da9cb82688f97156545deeb76ea99506efc76d8e1d225f3b144� x��������������%������� X 5 &8 � 8�������{Q �$ k ���������������� {Q zQ |Q � fda4a8a359ad6437ffc64d21a0 2b18a8cbfee8f4dc280d6fac3184f669c8b37503ac57abd480ed1f3f92cc7317 39a60ca1adecd33d40d80c31a8b11a5ad2df01f711d0a23103f690922659bf0a 25d4b247f1edb61617dd60690988435839d835d99881bd160620d6a6d06705cb bc42a513d5f9ceea3e6314cd2684a247a8e19526490bd7e47ef00902a425e78e 156a08391e4a668daf5d169bba86f2ba7d830248daf003b03a384307a71e2406 35d14bfe4d0aad1be4482fd168f4116b621698ec7c170bcbe25992bdc488c2b3 ebb31e220ce6f3600751af0229d14afbdc12d2acaee4919b62bdcdcbd65361ee 06015ac0e9aa1ca49c6276a80c246e9cbc072d9c95a3704f590746a22d97280b 296259747356efeae437a1cb985e0bc8b128593480e3e36954d66d7941d76a90 954b90428051aba3be631ba5a6e516acd06f2314847f59179aa5f4219b730c9b f269f5c6e615d9acf1ea4e5b1ab2c5c1d82ea8751691eb8a8d7abd2e727635a9 db44d37cdf24eec593609a49ed64d643eee6b538844c724bda063ad1b70874d6 edf8d44fd95c935f648101c47e4e989a7c09c473df0abe2929842c7490a67048 2308deec88ceed8b31cd47bd406ac0a6b1fb45476e6b2bb9cbe695eee63d9b2f 6d480811c71a96e7f696d6b20a13181018a6cf3fefed34498746ad7b2a9ff787 106abb53437944c2c7cfb17b71d38bc3dacaae2b6dbfea230733eec153fcf0ae d18d8f5c0ca2f876cba53bf11aa7e1656dcc701ad0b9f38b49cbf6c6faa49067 ac891bf3df9faea8110eeda14035b186f47ffa95ba4cec8a60f9f8cb40cd7a7c 7f9d67ddbe09f67fd36cf00c3a1ee9ab190bef54f83adb2e5e4452eabd4d449e 038154160e9df40d312439b80d657201033cd872fe5c2347d51467fb4db94bdd 79d936039d7644335e47e82b0685f10e614f7aa0fc1892062d8239c0357ee526 13823527519cab7da4fb18cd651240040db949813c3a8e861afc376adc9b569d e953c2bd72008feb5243b2b3fb94f05446b7fd4a30be8d4fc6c24a4a9872c92f 78e93896389e547c74ca697f35986583e17e905fdbee6d31aa8f09f4644a9748 a51a5ae6baa438a97cf8e1bbc32b7dab1b2c69b6162d0998095087499e9619b3 1e2896d8b65b85023bd9c64d154e20f27b64ccec65a56a7f6ffd9397b441b0f9 8e41a4d704fb9f506a387dc05a51c07f51d8106970b9706831e3475fa9f7957f 6e78bdd211153fc6546f3c0a10b20ff1c6270692c55ba3f00834bc56ac634c1a 4b0a75240ccc1eb087a12d13ba96000f02614783aa16e9ce0f11342ce39309bc 3c35a0c16281f865d3c6c2013f050c1a8b570937fdd3e07a75413dd39963c0d0 134355df072a678ee4f018af54522aa4ad9250dc6363d99237f93a4c604b99ac bb1be4c571309b2da5fbbc713215068590146b04df6f8a5e97e5ea8e87ce3ca7 8e5d345ad0e334a29ab2f12d9b909d1f8128ef67931fa22520c5cb8b1f0bfbe1 b861e6ff29dad471b1fe41327d40299ffa842a73f1a5aea2572933e1e8ddb196 6d2fcb264a4b483862a1a7387bba583fb94288d5a81e5a7db2bfdb01331935f4 6bbb58168ed29e1d77202c84646bb4f202e02df81b173cbbc28cc24e3e7c6cb0 a9f57d519f5d052822f55b1d7459ee6d3041c9641e609774b38c9b9d5bce7913 6f5d62d6a460dd9149465cb0c2b77fdfd1ebd97a340d3a2a6c40baa79a89be6d c6ec421b2c66d3d3c948c2f1df1e30b1dbd7df466eb53bef87983fa6b86ffb28 9517b893326285853fe5ce20cd5f6ff877b20b3cb30c830c263edf1798a79c9d 89c3c63d2d5b6fa41d60f7eb25022e04cc4410c624ef3aab853ab0389ff81031 ddce8639a42c353589909e9c390c5efcb67789ca805e23d059a4efe3f36425a4 9473d550326c4c8d3f0a4c2174ff658d5ce80d1cc0651fdfcd33c77c49e44121 78adb97555ee92e51a7bc9947b4fb554707b09ebc47c0ed16f925027768e6e97 bd920e0c1157196498835677f4d02e1f380cfedc3d3054af632cbee993eb761f f53cf718abc4af40a2ad9d723e639b923071a6beecec41d45c0b0b89a613f950 f5fbdc4cf22eca4ac042f625abee90e1cf6b7ae973c3cf1f7d49615cbbe99f6d c65ec867ac56a2efadb1e656a6e9d786282b5db8e4eadc00bf200f9e090eb0cc 7395853c67d55a7612f2cf659b65b7a600553c057d26835b046da5cb8253f872 e31bbca98724bc4f270027f53fbb187f594edf3fe72ca0872883b1980e8d3071 4785f76836897790c212c0f7aa2803cff9621cd8d6b51da12efeaf42f08b303d 5723dcec53f1f028aa7a9585d802192a2cc4c515188d60848e7ce492d8aab34c bced7751173b6d8f786fb5b11676ea654d2e537450fdee7e00e13c8a47404a8c 6c04e2f059f12f5b341c53b7cd7d2b262dbaae19381c079f6aba30e40e17c43c ae15f2cfea8eb4be067b13638bdd6e08807e12cb8e46711d9130f1dc82df1546 166ff55787d50b3a7322f9ac0cca91195dda8d258b8fc9e90900861e7a403309 b300a319510b3b23a84a0e12e239aa6b325c15b1a82977d123c9430f7700b1d9 ff7a8e69ad48070cd22b73a597ef6f639888a480408f162b33189834a425370d 4a06a76fac3c290638789270bbca6a18957843c6858577d9e0a724b07553f9e2 89e4c5e4cfbc42bed4336ebcdea259f3baf69c8fd4bd3e88850c32257d695b9d 4b1b546994ee63c1147471fac3364f2703cd5dc89a8f03695c92806354135e33 b467319f4cb30612af314cf9ff61c5853c4580f762a6b01fee8c0efcd9c4bc3e 734014afd7dc0� x�������������p������� X 6 {'8 Ћ�������0������O" �$ _ ���������������� O" N" P" � inux/targeted/default/active/modules/100/afs/ /usr/share/selinux/targeted/default/active/modules/100/aiccu/ /usr/share/selinux/targeted/default/active/modules/100/aide/ /usr/share/selinux/targeted/default/active/modules/100/ajaxterm/ /usr/share/selinux/targeted/default/active/modules/100/alsa/ /usr/share/selinux/targeted/default/active/modules/100/amanda/ /usr/share/selinux/targeted/default/active/modules/100/amtu/ /usr/share/selinux/targeted/default/active/modules/100/anaconda/ /usr/share/selinux/targeted/default/active/modules/100/antivirus/ /usr/share/selinux/targeted/default/active/modules/100/apache/ /usr/share/selinux/targeted/default/active/modules/100/apcupsd/ /usr/share/selinux/targeted/default/active/modules/100/apm/ /usr/share/selinux/targeted/default/active/modules/100/application/ /usr/share/selinux/targeted/default/active/modules/100/arpwatch/ /usr/share/selinux/targeted/default/active/modules/100/asterisk/ /usr/share/selinux/targeted/default/active/modules/100/auditadm/ /usr/share/selinux/targeted/default/active/modules/100/authconfig/ /usr/share/selinux/targeted/default/active/modules/100/authlogin/ /usr/share/selinux/targeted/default/active/modules/100/automount/ /usr/share/selinux/targeted/default/active/modules/100/avahi/ /usr/share/selinux/targeted/default/active/modules/100/awstats/ /usr/share/selinux/targeted/default/active/modules/100/bacula/ /usr/share/selinux/targeted/default/active/modules/100/base/ /usr/share/selinux/targeted/default/active/modules/100/bcfg2/ /usr/share/selinux/targeted/default/active/modules/100/bind/ /usr/share/selinux/targeted/default/active/modules/100/bitlbee/ /usr/share/selinux/targeted/default/active/modules/100/blkmapd/ /usr/share/selinux/targeted/default/active/modules/100/blueman/ /usr/share/selinux/targeted/default/active/modules/100/bluetooth/ /usr/share/selinux/targeted/default/active/modules/100/boinc/ /usr/share/selinux/targeted/default/active/modules/100/boltd/ /usr/share/selinux/targeted/default/active/modules/100/bootloader/ /usr/share/selinux/targeted/default/active/modules/100/brctl/ /usr/share/selinux/targeted/default/active/modules/100/brltty/ /usr/share/selinux/targeted/default/active/modules/100/bugzilla/ /usr/share/selinux/targeted/default/active/modules/100/bumblebee/ /usr/share/selinux/targeted/default/active/modules/100/cachefilesd/ /usr/share/selinux/targeted/default/active/modules/100/calamaris/ /usr/share/selinux/targeted/default/active/modules/100/callweaver/ /usr/share/selinux/targeted/default/active/modules/100/canna/ /usr/share/selinux/targeted/default/active/modules/100/ccs/ /usr/share/selinux/targeted/default/active/modules/100/cdrecord/ /usr/share/selinux/targeted/default/active/modules/100/certmaster/ /usr/share/selinux/targeted/default/active/modules/100/certmonger/ /usr/share/selinux/targeted/default/active/modules/100/certwatch/ /usr/share/selinux/targeted/default/active/modules/100/cfengine/ /usr/share/selinux/targeted/default/active/modules/100/cgdcbxd/ /usr/share/selinux/targeted/default/active/modules/100/cgroup/ /usr/share/selinux/targeted/default/active/modules/100/chrome/ /usr/share/selinux/targeted/default/active/modules/100/chronyd/ /usr/share/selinux/targeted/default/active/modules/100/cinder/ /usr/share/selinux/targeted/default/active/modules/100/cipe/ /usr/share/selinux/targeted/default/active/modules/100/clock/ /usr/share/selinux/targeted/default/active/modules/100/clogd/ /usr/share/selinux/targeted/default/active/modules/100/cloudform/ /usr/share/selinux/targeted/default/active/modules/100/cmirrord/ /usr/share/selinux/targeted/default/active/modules/100/cobbler/ /usr/share/selinux/targeted/default/active/modules/100/cockpit/ /usr/share/selinux/targeted/default/active/modules/100/collectd/ /usr/share/selinux/targeted/default/active/modules/100/colord/ /usr/share/selinux/targeted/default/active/modules/100/comsat/ /usr/share/selinux/targeted/default/active/modules/100/condor/ /usr/share/selinux/targeted/default/active/modules/100/conman/ /usr/share/selinux/targeted/default/active/modules/100/conntra� x��������������������� X 7 %8 ���������� tP �$ d ���������������� tP sP uP � <jbj@redhat.com> Matt Wilson <msw@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Bill Nottingham <notting@redhat.com> Jakub Jelinek <jakub@redhat.com> Prospector <bugzilla@redhat.com> Bill Nottingham <notting@redhat.com> Bill Nottingham <notting@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Jeff Johnson <jbj@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Bill Nottingham <notting@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Bernhard Rosenkraenzer <bero@redhat.com> Jeff Johnson <jbj@redhat.com> Matt Wilson <msw@redhat.com> Jeff Johnson <jbj@redhat.com> Erik Troan <ewt@redhat.com> Jakub Jelinek <jakub@redhat.com> Bill Nottingham <notting@redhat.com> Jakub Jelinek <jakub@redhat.com> Cristian Gafton <gafton@redhat.com> Bill Nottingham <notting@redhat.com> Nalin Dahyabhai <nalin@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Matt Wilson <msw@redhat.com> Bill Nottingham <notting@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Jakub Jelinek <jakub@redhat.com> Jakub Jelinek <jakub@redhat.com> Bill Nottingham <notting@redhat.com> Bill Nottingham <notting@redhat.com> Cristian Gafton <gafton@redhat.com> Preston Brown <pbrown@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Bill Nottingham <notting@redhat.com> Peter Jones, <pjones@redhat.com> Christian 'Dr. Disk' Hechelmann <drdisk@tc-gruppe.de> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Cristian Gafton <gafton@redhat.com> Jeff Johnson <jbj@redhat.com> Matt Wilson <msw@redhat.com> Cristian Gafton <gafton@redhat.com> Jeff Johnson <jbj@redhat.com> Jakub Jelinek <jj@ultra.linux.cz> Matt Wilson <msw@redhat.com> Matt Wilson <msw@redhat.com> Erik Troan <ewt@redhat.com> Cristian Gafton <gafton@redhat.com> Cristian Gafton <gafton@redhat.com> Michael Johnson <johnsonm@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Jeff Johnson <jbj@redhat.com> Cristian Gafton <gafton@redhat.com> Erik Troan <ewt@redhat.com> Cristian Gafton <gafton@redhat.com> Jeff Johnson <jbj@redhat.com> Cristian Gafton <gafton@redhat.com> Cristian Gafton <gafton@redhat.com> Bill Nottingham <notting@redhat.com> Erik Troan <ewt@redhat.com> Erik Troan <ewt@redhat.com> Erik Troan <ewt@redhat.com> Jeff Johnson <jbj@redhat.com> Cristian Gafton <gafton@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> Jeff Johnson <jbj@redhat.com> David S. Miller <davem@dm.cobaltmicro.com> Jeff Johnson <jbj@redhat.com> Prospector System <bugs@redhat.com> Cristian Gafton <gafton@redhat.com> Erik Troan <ewt@redhat.com> Cristian Gafton <gafton@redhat.com> Mike Wangsmo <wanger@redhat.com> Cristian Gafton <gafton@redhat.com> Michael Fulbright <msf@redhat.com> Michael Fulbright <msf@redhat.com> Erik Troan <ewt@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Cristian Gafton <gafton@redhat.com> Erik Troan <ewt@redhat.com> Erik Troan <ewt@redhat.com> Erik Troan <ewt@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Michael K. Johnson <johnsonm@redhat.com> Michael K. Johnson <johnsonm@redhat.com> - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq
- fix RHEL-18451 - logger: initialize socket credentials control union
- fix RHEL-16070 - util-linux: issues in libblkid
- fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab
- fix #2184728 - libuuid - downport cache related patch
- fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
- fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstr� x�������������P����� X 8 y%8 ��������������vb �$ f ���������������� vb ub wb � ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������config(spamassassin) perl(Mail::SpamAssassin) perl(Mail::SpamAssassin::AICache) perl(Mail::SpamAssassin::ArchiveIterator) perl(Mail::SpamAssassin::AsyncLoop) perl(Mail::SpamAssassin::AutoWhitelist) perl(Mail::SpamAssassin::Bayes) perl(Mail::SpamAssassin::Bayes::Combine) perl(Mail::SpamAssassin::Bayes::CombineChi) perl(Mail::SpamAssassin::Bayes::CombineNaiveBayes) perl(Mail::SpamAssassin::BayesStore) perl(Mail::SpamAssassin::BayesStore::BDB) perl(Mail::SpamAssassin::BayesStore::DBM) perl(Mail::SpamAssassin::BayesStore::MySQL) perl(Mail::SpamAssassin::BayesStore::PgSQL) perl(Mail::SpamAssassin::BayesStore::Redis) perl(Mail::SpamAssassin::BayesStore::SDBM) perl(Mail::SpamAssassin::BayesStore::SQL) perl(Mail::SpamAssassin::Client) perl(Mail::SpamAssassin::Conf) perl(Mail::SpamAssassin::Conf::LDAP) perl(Mail::SpamAssassin::Conf::Parser) perl(Mail::SpamAssassin::Conf::SQL) perl(Mail::SpamAssassin::Constants) perl(Mail::SpamAssassin::DBBasedAddrList) perl(Mail::SpamAssassin::Dns) perl(Mail::SpamAssassin::DnsResolver) perl(Mail::SpamAssassin::HTML) perl(Mail::SpamAssassin::Locales) perl(Mail::SpamAssassin::Locker) perl(Mail::SpamAssassin::Locker::Flock) perl(Mail::SpamAssassin::Locker::UnixNFSSafe) perl(Mail::SpamAssassin::Locker::Win32) perl(Mail::SpamAssassin::Logger) perl(Mail::SpamAssassin::Logger::File) perl(Mail::SpamAssassin::Logger::Stderr) perl(Mail::SpamAssassin::Logger::Syslog) perl(Mail::SpamAssassin::MailingList) perl(Mail::SpamAssassin::Message) perl(Mail::SpamAssassin::Message::Metadata) perl(Mail::SpamAssassin::Message::Metadata::Received) perl(Mail::SpamAssassin::Message::Node) perl(Mail::SpamAssassin::NetSet) perl(Mail::SpamAssassin::PerMsgLearner) perl(Mail::SpamAssassin::PerMsgStatus) perl(Mail::SpamAssassin::PersistentAddrList) perl(Mail::SpamAssassin::Plugin) perl(Mail::SpamAssassin::Plugin::ASN) perl(Mail::SpamAssassin::Plugin::AWL) perl(Mail::SpamAssassin::Plugin::AccessDB) perl(Mail::SpamAssassin::Plugin::AntiVirus) perl(Mail::SpamAssassin::Plugin::AskDNS) perl(Mail::SpamAssassin::Plugin::AutoLearnThreshold) perl(Mail::SpamAssassin::Plugin::Bayes) perl(Mail::SpamAssassin::Plugin::BodyEval) perl(Mail::SpamAssassin::Plugin::BodyRuleBaseExtractor) perl(Mail::SpamAssassin::Plugin::Check) perl(Mail::SpamAssassin::Plugin::DCC) perl(Mail::SpamAssassin::Plugin::DKIM) perl(Mail::SpamAssassin::Plugin::DNSEval) perl(Mail::SpamAssassin::Plugin::FreeMail) perl(Mail::SpamAssassin::Plugin::FromNameSpoof) perl(Mail::SpamAssassin::Plugin::HTMLEval) perl(Mail::SpamAssassin::Plugin::HTTPSMismatch) perl(Mail::SpamAssassin::Plugin::HashBL) perl(Mail::SpamAssassin::Plugin::Hashcash) perl(Mail::SpamAssassin::Plugin::HeaderEval) perl(Mail::SpamAssassin::Plugin::ImageInfo) perl(Mail::SpamAssassin::Plugin::MIMEEval) perl(Mail::SpamAssassin::Plugin::MIMEHeader) perl(Mail::SpamAssassin::Plugin::OLEVBMacro) perl(Mail::SpamAssassin::Plugin::OneLineBodyRuleType) perl(Mail::SpamAssassin::Plugin::PDFInfo) perl(Mail::SpamAssassin::Plugin::PhishTag) perl(Mail::SpamAssassin::Plugin::Phishing) perl(Mail::SpamAssassin::Plugin::Pyzor) perl(Mail::SpamAssassin::Plugin::Razor2) perl(Mail::SpamAssassin::Plugin::RelayEval) perl(Mail::SpamAssassin::Plugin::ReplaceTags) perl(Mail::SpamAssassin::Plugin::Reuse) perl(Mail::SpamAssassin::Plugin::Rule2XSBody) perl(Mail::SpamAssassin::Plugin::SPF) perl(Mail::SpamAssassin::Plugin::Shortcircuit) perl(Mail::SpamAssassin::Plugin::SpamCop) perl(Mail::SpamAssassin::Plugin::Test) perl(Mail::SpamAssassin::Plugin::TextCat) perl(Mail::SpamAssassin::Plugin::TxRep) perl(Mail::SpamAssassin::Plugin::URIDNSBL) perl(Mail::SpamAssassin::Plugin::URIDetail) perl(Mail::SpamAssassin::Plugin::URIEval) perl(Mail::SpamAssassin::Plugin::VBounce) perl(Mail::SpamAssassin::Plugin::WLBLEval) perl(Mail::SpamAssassin::Plugin::WhiteListSubject) perl(Mail::SpamAssassin::PluginHandler) perl(Ma� x�������������������� X 9 �&8 �� ��������u! �$ e ���������������� u! t! v! � 718c633b74588e1895 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 622d42709db476ab89b3eea8854532b228b3fa6e0f5dd31f7df28186a466c320 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4656ef3512ddaccba1b6cf3fa776e9b7e27e3a73a9510691654f2aa028c949b9 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8348abba99026d5bb7a58ea1f7e9ccfbbb8ea86dc773c3b4f901a16c74e2024c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d690f6e05db5681628af8b28a5ca1a69453847d873a7615a0e81def11cb80f47 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6a2ab823a46bb98cd131c31fb25f0eb782e8355970b447830bd129b2b2da425d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 5bcfa2b1c697438860e6bdcc56bd1402a3341ec5054c3e4fab435fc0d88955e7 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 003da035e906e1688fdfe7d72ce524447e23c079dc478e2b41eb599d8ab382c0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c60094a0c5c495e3fb5f88874e8c060c2e0ddfefc2a53d1474936b1456bcb42b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 51f2bd65b3012509f86e9402f93c1466f0bfb56788248c3601426ca386ee2715 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7674194b296388347c4f03d9ea9fc9e47ea014ff70d3a151d10d8750ab4d890e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2ea8484717c0662abe7571eb5abc488da2b8ffedb6ebac93e67533031a393f76 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 18fb6a7dfcfbceb578aab043a6db13ba9a555778b00c3471636008f05a3994b3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 997b6573348ae39eb47acd304e3a7146abd5de3bfc963cda8016d745b2731691 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c651aa426c553690ad02cf52500d93ba24f1a7961ada00c4d34ecf33aad812c8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f1a70be00919d9c5aa7941f07a38e6430a93c0e038493d81149ab1f13e1c74fb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 54e75c3ee2a6b6771a78f10686b9dca4c66c96baacacfc67ca410fe961efbeb8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b146fc791f956b00b5975b529f4930fd8f31e220f63d9d2d0fd542706278a8a5 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8e7dea7eab222c92526f4310c80157477133598effba8e6b1f178e8d0815a5a2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e52b7d7d6d22de876617b475d31b2ae460954244fc56f17a5625071380bd251b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 107b1ecb8b3b1d4520b21f25b721f73d9e83e52d6d43c0d7ae3d544a219cbe30 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3a42a4c95fe073211ecead25988b41b0dee423fe9b0ec5383103f88e46b65bc1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 30e76e23cfdf55d3d998a86133c0543b5f63be46f3f09287088ba1dc2c84c871 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e1fe15ccab60a236f8e159e12db7ecb06986ebc86d2d23519252e39cc12b125c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 49dac2fd381362f5e3c688638093cb27f4b8ee56d078c869ab5b86b75857f242 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6ba4b64ca1d7920dab32bb33d89ba296d613419f43afefa95f5cce85c074e38b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e47c67a8977903a1ca7104588ae8a0db320b01ba0eb113a10677cf399aac77bd 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 754b5370dd63a790eb2c91b846cc4a6d9535b55cdab2ae3421e49389a92990e3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7be766d4665cf71cd46d62b4a8e5d8443d25e35b6bd562872154e4b3c8fa5fe2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0209bd5694f4842c1b19b9ce55092e8fc4144994bb144177bfa62d5b71858b13 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 143802472e0962ba6ca940787498695c8c037552283d2573f5a16a663907b43a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3b543a25226335585b3a99fbfc7166c7296f509f9eb64c695e95fa2� x�������������@������� X : i'8 ��������������=" �$ - ���������������� =" <" >" � helpers.
- Resolves: rhbz#212731 - Add perms for swat - Add perms for swat - Allow daemons to dump core files to / - Fixes for ricci - Allow mount.nfs to work - Allow ricci-modstorage to look at lvm_etc_t - Fixes for ricci using saslauthd - Allow mountpoint on home_dir_t and home_t - Update xen to read nfs files - Allow noxattrfs to associate with other noxattrfs - Allow hal to use power_device_t - Allow procemail to look at autofs_t
- Allow xen_image_t to work as a fixed device - Refupdate from upstream - Add lots of fixes for mls cups - Lots of fixes for ricci - Fix number of cats - Update to upstream - More iSCSI changes for #209854 - Test ISCSI fixes for #209854 - allow semodule to rmdir selinux_config_t dir - Fix boot_runtime_t problem on ppc. Should not be creating these files. - Fix context mounts on reboot
- Fix ccs creation of directory in /var/log - Update for tallylog - Allow xend to rewrite dhcp conf files
- Allow mgetty sys_admin capability - Make xentapctrl work - Don't transition unconfined_t to bootloader_t
- Fix label in /dev/xen/blktap - Patch for labeled networking - Fix crond handling for mls - Update to upstream - Remove bluetooth-helper transition
- Add selinux_validate for semanage
- Require new version of libsemanage - Fix prelink - Fix rhgb - Fix setrans handling on MLS and useradd - Support for fuse
- fix vigr - Fix dovecot, amanda
- Fix mls - Allow java execheap for itanium - Update with upstream - mls fixes - Update from upstream - More fixes for mls
- Revert change on automount transition to mount - Fix cron jobs to run under the correct context - Fixes to make pppd work - Multiple policy fixes
- Change max categories to 1023 - Fix transition on mcstransd - Add /dev/em8300 defs - Upgrade to upstream - Fix ppp connections from network manager - Add tty access to all domains boolean
- Fix gnome-pty-helper context for ia64 - Fixed typealias of firstboot_rw_t - Fix location of xel log files
- Fix handling of sysadm_r -> rpm_exec_t - Fixes for autofs, lp - Update from upstream - Fixup for test6 - Update to upstream - Update to upstream - Fix suspend to disk problems - Lots of fixes for restarting daemons at the console. - Fix audit line
- Fix requires line - Upgrade to upstream - Fix install problems - Allow setroubleshoot to getattr on all dirs to gather RPM data - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
- Fix spec for /dev/adsp - Fix xen tty devices - Fixes for setroubleshoot - Update to upstream - Fixes for stunnel and postgresql
- Update from upstream - Update from upstream
- More java fixes - Change allow_execstack to default to on, for RHEL5 Beta.
This is required because of a Java compiler problem.
Hope to turn off for next beta - Misc fixes - More fixes for strict policy - Quiet down anaconda audit messages - Fix setroubleshootd - Update to the latest from upstream - More fixes for xen - Fix anaconda transitions - yet more xen rules - more xen rules - Fixes for Samba - Fixes for xen - Allow setroubleshootd to send mail - Add nagios policy - fixes for setroubleshoot - Added Paul Howarth patch to only load policy packages shipped
with this package
- Allow pidof from initrc to ptrace higher level domains
- Allow firstboot to communicate with hal via dbus - Add policy for /var/run/ldapi - Fix setroubleshoot policy - Fixes for mls use of ssh
- named has a new conf file - Fixes to make setroubleshoot work - Cups needs to be able to read domain state off of printer client - add boolean to allow zebra to write config files - setroubleshootd fixes - Allow prelink to read bin_t symlink
- allow xfs to read random devices
- Change gfs to support xattr - Remove spamassassin_can_network boolean - Update to upstream
- Fix lpr domain for mls - Add setroubleshoot policy - Turn off auditallow on setting booleans - Multiple fixes - Update to upstream - Update to upstream
- Add new class for kernel key ring - Update to upstream - Update to upstream - Break out selinux-devel package - Add ibmasmfs - Fix policygentool gen_requires - � x��������������������� X ; +'8 �� �������! �$ o ���������������� �! �! " � ut random signuls
- Add boolean to allow openshift domains to use nfs
- Allow w3c_validator to create content in /tmp
- zabbix_agent uses nsswitch
- Allow procmail and dovecot to work together to deliver mail
- Allow spamd to execute files in homedir if boolean turned on
- Allow openvswitch to listen on port 6634
- Add net_admin capability in collectd policy
- Fixed snapperd policy
- Fixed bugsfor pcp policy
- Allow dbus_system_domains to be started by init
- Fixed some interfaces
- Add kerberos_keytab_domain attribute
- Fix snapperd_conf_t def - Dontaudit rendom domains listing /proc and hittping system_map_t
- devicekit_power sends out a signal to all processes on the message bus when power is going down
- Modify xdm_write_home to allow create also links as xdm_home_t if the boolean is on true
- systemd_tmpfiles_t needs to _setcheckreqprot
- Add unconfined_server to be run by init_t when it executes files labeled bin_t, or usr_t, allow all domains to communicate with it
- Fixed snapperd policy
- Fixed broken interfaces
- Should use rw_socket_perms rather then sock_file on a unix_stream_socket
- Fixed bugsfor pcp policy
- pcscd seems to be using policy kit and looking at domains proc data that transition to it
- Allow dbus_system_domains to be started by init
- Fixed some interfaces
- Addopt corenet rules for unbound-anchor to rpm_script_t
- Allow runuser to send send audit messages.
- Allow postfix-local to search .forward in munin lib dirs
- Allow udisks to connect to D-Bus
- Allow spamd to connect to spamd port
- Fix syntax error in snapper.te
- Dontaudit osad to search gconf home files
- Allow rhsmcertd to manage /etc/sysconf/rhn director
- Fix pcp labeling to accept /usr/bin for all daemon binaries
- Fix mcelog_read_log() interface
- Allow iscsid to manage iscsi lib files
- Allow snapper domtrans to lvm_t. Add support for /etc/snapper and allow snapperd to manage it.
- Allow ABRT to read puppet certs
- Allow virtd_lxc_t to specify the label of a socket
- New version of docker requires more access - Addopt corenet rules for unbound-anchor to rpm_script_t
- Allow runuser to send send audit messages.
- Allow postfix-local to search .forward in munin lib dirs
- Allow udisks to connect to D-Bus
- Allow spamd to connect to spamd port
- Fix syntax error in snapper.te
- Dontaudit osad to search gconf home files
- Allow rhsmcertd to manage /etc/sysconf/rhn director
- Fix pcp labeling to accept /usr/bin for all daemon binaries
- Fix mcelog_read_log() interface
- Allow iscsid to manage iscsi lib files
- Allow snapper domtrans to lvm_t. Add support for /etc/snapper and allow snapperd to manage it.
- Make tuned_t as unconfined domain for RHEL7.0
- Allow ABRT to read puppet certs
- Add sys_time capability for virt-ga
- Allow gemu-ga to domtrans to hwclock_t
- Allow additional access for virt_qemu_ga_t processes to read system clock and send audit messages
- Fix some AVCs in pcp policy
- Add to bacula capability setgid and setuid and allow to bind to bacula ports
- Changed label from rhnsd_rw_conf_t to rhnsd_conf_t
- Add access rhnsd and osad to /etc/sysconfig/rhn
- drbdadm executes drbdmeta
- Fixes needed for docker
- Allow epmd to manage /var/log/rabbitmq/startup_err file
- Allow beam.smp connect to amqp port
- Modify xdm_write_home to allow create also links as xdm_home_t if the boolean is on true
- Allow init_t to manage pluto.ctl because of init_t instead of initrc_t
- Allow systemd_tmpfiles_t to manage all non security files on the system
- Added labels for bacula ports
- Fix label on /dev/vfio/vfio
- Add kernel_mounton_messages() interface
- init wants to manage lock files for iscsi - Fix /dev/vfio/vfio labeling - Add kernel_mounton_messages() interface
- init wants to manage lock files for iscsi
- Add support for dey_sapi port
- Fixes needed for docker
- Allow epmd to manage /var/log/rabbitmq/startup_err file
- Allow beam.smp connect to amqp port
- drbdadm executes drbdmeta
- Added osad policy
- Allow postfix to deliver to procmail
- Allow vmtools to execute /usr/bin/lsb_release
- Allow geoclue t� x������������� �������� X < "'8 p� H�������! �$ f ���������������� �! �! �! � t under docker so we can read within a container
- Remove labeling for rabbitmqctl
- setfscreate in pki.te is not capability class.
- Allow virt domains to use virtd tap FDs until we get proper handling in libvirtd.
- Allow wine domains to create cache dirs.
- Allow newaliases to systemd inhibit pipes.
- Add fixes for pki-tomcat scriptlet handling.
- Allow user domains to manage all gnome home content
- Allow locate to look at files/directories without labels, and chr_file and blk_file on non dev file systems
- Allow usbmuxd chown capabilitiesllow locate to look at files/directories without labels, and chr_file and blk_file on non dev file systems - Label /usr/lib/erlang/erts.*/bin files as bin_t
- Added changes related to rabbitmq daemon.
- Fix labeling in couchdb policy
- Allow rabbitmq bind on epmd port
- Clean up rabbitmq policy
- fix domtrans_rabbitmq interface
- Added rabbitmq_beam_t and rabbitmq_epmd_t alias
- Allow couchdb to getattr
- Allow couchdb write to couchdb_conf files
- Allow couchdb to create dgram_sockets
- Added support for ejabberd - Back port workaround for #1134389 from F20. It needs to be removed from rawhide once we ship F21.
- Since docker will now label volumes we can tighten the security of docker - Re-arange openshift_net_read_t rules.
- Kernel is reporting random block_suspends, we should dontaudit these until the kernel is fixed in Rawhide
- Allow jockey_t to use tmpfs files
- Allow pppd to create sock_files in /var/run
- Allow geoclue to stream connect to smart card service
- Allow docker to read all of /proc
- ALlow passeneger to read/write apache stream socket.
- Dontaudit read init state for svirt_t.
- Label /usr/sbin/unbound-control as named_exec_t (#1130510)
- Add support for /var/lbi/cockpit directory.
- Add support for ~/. speech-dispatcher.
- Allow nmbd to read /proc/sys/kernel/core_pattern.
- aLlow wine domains to create wine_home symlinks.
- Allow policykit_auth_t access check and read usr config files.
- Dontaudit access check on home_root_t for policykit-auth.
- hv_vss_daemon wants to list /boot
- update gpg_agent_env_file booelan to allow manage user tmp files for gpg-agent
- Fix label for /usr/bin/courier/bin/sendmail
- Allow munin services plugins to execute fail2ban-client in fail2ban_client_t domain.
- Allow unconfined_r to access unconfined_service_t.
- Add label for ~/.local/share/fonts
- Add init_dontaudit_read_state() interface.
- Add systemd_networkd_var_run_t labeling for /var/run/systemd/netif and allow systemd-networkd to manage it.
- Allow udev_t mounton udev_var_run_t dirs #(1128618)
- Add files_dontaudit_access_check_home_dir() inteface. - Allow unconfined_service_t to dbus chat with all dbus domains
- Assign rabbitmq port. BZ#1135523
- Add new interface to allow creation of file with lib_t type
- Allow init to read all config files
- We want to remove openshift_t domains ability to look at /proc/net
- I guess lockdown is a file not a directory
- Label /var/bacula/ as bacula_store_t
- Allow rhsmcertd to seng signull to sosreport.
- Allow sending of snmp trap messages by radiusd.
- remove redundant rule fron nova.te.
- Add auth_use_nsswitch() for ctdbd.
- call nova_vncproxy_t instead of vncproxy.
- Allow nova-vncproxy to use varnishd port.
- Fix rhnsd_manage_config() to allow manage also symlinks.
- Allow bacula to create dirs/files in /tmp
- Allow nova-api to use nsswitch.
- Clean up nut policy. Allow nut domains to create temp files. Add nut_domain_template() template interface.
- Allow usbmuxd connect to itself by stream socket. (#1135945)
- I see no reason why unconfined_t should transition to crontab_t, this looks like old cruft
- Allow nswrapper_32_64.nppdf.so to be created with the proper label
- Assign rabbitmq port. BZ#1135523
- Dontaudit leaks of file descriptors from domains that transition to thumb_t
- Fixes for usbmuxd, addition of /var/lib/lockdown, and allow it to use urand, dontaudit sys_resource
- Allow unconfined_service_t to dbus chat with all dbus domains
- Allow avahi_t communicate with pcp_pmproxy_t over dbus.(be� x���������������������� X = �'8 � �������Q �$ B ���������������� �Q �Q �Q � 611b82427ae32319f2038 54d2531862ae3a384611b82427ae32319f2038.1 e1 39a1b98946ad9cf5c1b9f2a208a4d5f62f6e14 e4 2a3e6076853fb2754eaafa8ab1c44783b96e7e ec 69d2c8534cbecd3fdfcc5a47b3fb3fcfcf6df6 f4 b527c5a212d9cb4cd56ef391283c41657146c2 f5 d858b812fa5f37742c6179b8a9a4f04ef78281 fa 39eb3539c6752ba1579c14c55f3ac4dfd110f4 cfd4c37e45ec22208c82ae06cf3157ab863fea cfd4c37e45ec22208c82ae06cf3157ab863fea.1 systemd system postfix.service sendmail.postfix postfix aliasesdb anvil bounce chroot-update cleanup discard dnsblog error flush lmtp local master nqmgr oqmgr pickup pipe post-install postfix-script postfix-tls-script postfix-wrapper postlogd postmulti-script postscreen proxymap qmgr qmqpd scache showq smtp smtpd spawn tlsmgr tlsproxy trivial-rewrite verify virtual pflogsumm postalias postcat postconf postdrop postfix postkick postlock postlog postmap postmulti postqueue postsuper qshape sendmail.postfix smtp-sink smtp-source postfix-3.4.8 COMPATIBILITY LICENSE README-Postfix-SASL-RedHat.txt README_FILES AAAREADME ADDRESS_CLASS_README ADDRESS_REWRITING_README ADDRESS_VERIFICATION_README BACKSCATTER_README BASIC_CONFIGURATION_README BUILTIN_FILTER_README CDB_README COMPATIBILITY_README CONNECTION_CACHE_README CONTENT_INSPECTION_README DATABASE_README DB_README DEBUG_README DSN_README ETRN_README FILTER_README FORWARD_SECRECY_README INSTALL IPV6_README LDAP_README LINUX_README LMDB_README LOCAL_RECIPIENT_README MAILDROP_README MEMCACHE_README MILTER_README MULTI_INSTANCE_README MYSQL_README NFS_README OVERVIEW PACKAGE_README PCRE_README PGSQL_README POSTSCREEN_README QSHAPE_README RELEASE_NOTES RESTRICTION_CLASS_README SASL_README SCHEDULER_README SMTPD_ACCESS_README SMTPD_POLICY_README SMTPD_PROXY_README SOHO_README SQLITE_README STANDARD_CONFIGURATION_README STRESS_README TLS_LEGACY_README TLS_README TUNING_README ULTRIX_README UUCP_README VERP_README VIRTUAL_README XCLIENT_README XFORWARD_README TLS_ACKNOWLEDGEMENTS TLS_LICENSE bounce.cf.default examples chroot-setup LINUX2 qmail-local qmail-local.txt smtpd-policy README.SPF greylist.pl main.cf.default mailq.postfix.1.gz newaliases.postfix.1.gz postalias.1.gz postcat.1.gz postconf.1.gz postdrop.1.gz postfix-tls.1.gz postfix.1.gz postkick.1.gz postlock.1.gz postlog.1.gz postmap.1.gz postmulti.1.gz postqueue.1.gz postsuper.1.gz qshape.1.gz sendmail.postfix.1.gz access.5.gz aliases.postfix.5.gz body_checks.5.gz bounce.5.gz canonical.5.gz cidr_table.5.gz generic.5.gz header_checks.5.gz ldap_table.5.gz lmdb_table.5.gz master.5.gz memcache_table.5.gz mysql_table.5.gz nisplus_table.5.gz pcre_table.5.gz pgsql_table.5.gz postconf.5.gz postfix-wrapper.5.gz regexp_table.5.gz relocated.5.gz socketmap_table.5.gz sqlite_table.5.gz tcp_table.5.gz transport.5.gz virtual.5.gz anvil.8.gz bounce.8.gz cleanup.8.gz defer.8.gz discard.8.gz dnsblog.8.gz error.8.gz flush.8.gz lmtp.8.gz local.8.gz master.8.gz oqmgr.8.gz pickup.8.gz pipe.8.gz postlogd.8.gz postscreen.8.gz proxymap.8.gz qmgr.8.gz qmqpd.8.gz scache.8.gz showq.8.gz smtp.8.gz smtpd.8.gz spawn.8.gz tlsmgr.8.gz tlsproxy.8.gz trace.8.gz trivial-rewrite.8.gz verify.8.gz virtual.8.gz postfix.aliasesdb-stamp postfix postfix active bounce corrupt defer deferred flush hold incoming maildrop pid private public saved trace /etc/ /etc/pam.d/ /etc/postfix/ /etc/rc.d/ /etc/rc.d/init.d/ /etc/sasl2/ /usr/bin/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/04/ /usr/lib/.build-id/08/ /usr/lib/.build-id/1a/ /usr/lib/.build-id/1c/ /usr/lib/.build-id/21/ /usr/lib/.build-id/23/ /usr/lib/.build-id/25/ /usr/lib/.build-id/28/ /usr/lib/.build-id/2e/ /usr/lib/.build-id/30/ /usr/lib/.build-id/35/ /usr/lib/.build-id/51/ /usr/lib/.build-id/54/ /usr/lib/.build-id/56/ /usr/lib/.build-id/57/ /usr/lib/.build-id/67/ /usr/lib/.build-id/70/ /usr/lib/.build-id/71/ /usr/lib/.build-id/80/ /usr/lib/.build-id/87/ /usr/lib/.build-id/8b/ /usr/lib/.build-id/97/ /usr/lib/.build-id/a4/ /usr/lib/.build-id/a7/ /usr/lib/.build-id/af/ /usr/lib/.build-id/b3/ /usr/lib/.build-id/b8/ /usr/lib/.build-id/bb/ /usr/lib/.build-id/bd/ /usr/lib/.build-id/c9/ /usr/lib/.build-id/� x�������������p�������� X > x'8 �y�������������L" �$ \ ���������������� L" K" M" � e cil lang_ext udev cil lang_ext ulogd cil lang_ext uml cil lang_ext unconfined cil lang_ext unconfineduser cil lang_ext unlabelednet cil lang_ext unprivuser cil lang_ext updfstab cil lang_ext usbmodules cil lang_ext usbmuxd cil lang_ext userdomain cil lang_ext userhelper cil lang_ext usermanage cil lang_ext usernetctl cil lang_ext uucp cil lang_ext uuidd cil lang_ext varnishd cil lang_ext vdagent cil lang_ext vhostmd cil lang_ext virt cil lang_ext vlock cil lang_ext vmtools cil lang_ext vmware cil lang_ext vnstatd cil lang_ext vpn cil lang_ext w3c cil lang_ext watchdog cil lang_ext wdmd cil lang_ext webadm cil lang_ext webalizer cil lang_ext wine cil lang_ext wireshark cil lang_ext xen cil lang_ext xguest cil lang_ext xserver cil lang_ext zabbix cil lang_ext zarafa cil lang_ext zebra cil lang_ext zoneminder cil lang_ext zosremote cil lang_ext disabled modules_checksum policy.kern policy.linked seusers seusers.linked users_extra users_extra.linked modules-base.lst modules-contrib.lst nonbasemodules.lst active commit_num file_contexts file_contexts.homedirs homedir_template modules abrt cil hll lang_ext accountsd cil hll lang_ext acct cil hll lang_ext afs cil hll lang_ext aiccu cil hll lang_ext aide cil hll lang_ext ajaxterm cil hll lang_ext alsa cil hll lang_ext amanda cil hll lang_ext amtu cil hll lang_ext anaconda cil hll lang_ext antivirus cil hll lang_ext apache cil hll lang_ext apcupsd cil hll lang_ext apm cil hll lang_ext application cil hll lang_ext arpwatch cil hll lang_ext asterisk cil hll lang_ext auditadm cil hll lang_ext authconfig cil hll lang_ext authlogin cil hll lang_ext automount cil hll lang_ext avahi cil hll lang_ext awstats cil hll lang_ext bacula cil hll lang_ext base cil hll lang_ext bcfg2 cil hll lang_ext bind cil hll lang_ext bitlbee cil hll lang_ext blkmapd cil hll lang_ext blueman cil hll lang_ext bluetooth cil hll lang_ext boinc cil hll lang_ext boltd cil hll lang_ext bootloader cil hll lang_ext brctl cil hll lang_ext brltty cil hll lang_ext bugzilla cil hll lang_ext bumblebee cil hll lang_ext cachefilesd cil hll lang_ext calamaris cil hll lang_ext callweaver cil hll lang_ext canna cil hll lang_ext ccs cil hll lang_ext cdrecord cil hll lang_ext certmaster cil hll lang_ext certmonger cil hll lang_ext certwatch cil hll lang_ext cfengine cil hll lang_ext cgdcbxd cil hll lang_ext cgroup cil hll lang_ext chrome cil hll lang_ext chronyd cil hll lang_ext cinder cil hll lang_ext cipe cil hll lang_ext clock cil hll lang_ext clogd cil hll lang_ext cloudform cil hll lang_ext cmirrord cil hll lang_ext cobbler cil hll lang_ext cockpit cil hll lang_ext collectd cil hll lang_ext colord cil hll lang_ext comsat cil hll lang_ext condor cil hll lang_ext conman cil hll lang_ext conntrackd cil hll lang_ext consolekit cil hll lang_ext couchdb cil hll lang_ext courier cil hll lang_ext cpucontrol cil hll lang_ext cpufreqselector cil hll lang_ext cpuplug cil hll lang_ext cron cil hll lang_ext ctdb cil hll lang_ext cups cil hll lang_ext cvs cil hll lang_ext cyphesis cil hll lang_ext cyrus cil hll lang_ext daemontools cil hll lang_ext dbadm cil hll lang_ext dbskk cil hll lang_ext dbus cil hll lang_ext dcc cil hll lang_ext ddclient cil hll lang_ext denyhosts cil hll lang_ext devicekit cil hll lang_ext dhcp cil hll lang_ext dictd cil hll lang_ext dirsrv dirsrv-admin cil hll lang_ext cil hll lang_ext dmesg cil hll lang_ext dmidecode cil hll lang_ext dnsmasq cil hll lang_ext dnssec cil hll lang_ext dovecot cil hll lang_ext drbd cil hll lang_ext dspam cil hll lang_ext entropyd cil hll lang_ext exim cil hll lang_ext fail2ban cil hll lang_ext fcoe cil hll lang_ext fetchmail cil hll lang_ext finger cil hll lang_ext firewalld cil hll lang_ext firewallgui cil hll lang_ext firstboot cil hll lang_ext fprintd cil hll lang_ext freeipmi cil hll lang_ext freqset cil hll lang_ext fstools cil hll lang_ext ftp cil hll lang_ext fwupd cil hll lang_ext games cil hll lang_ext gdomap cil hll lang_ext geoclue cil hll lang_ext getty cil hll lang_ext git cil hll lang_ext gitosis cil hll lang_ext glance cil hll lang_ext gn� x�������������������� X ? �&8 @� �� �! �$ ���������������� �! �! �! � 57b3cdf97927647f749e0936ad794f186e6bf1fecad651a84630a51d2c16 cb0887e4f83e64f1595d15b230efa4a841ad0a9802cc12f60b6508cef4d16205 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 979cbbd2b669fb3837315f5e2f49c9dc04c0035c9f8fdfb41fe08dd2713ac0e0 9a252512cc007eaafbcca8bc97deccc1d0ab777ea3e88196be867251bcc0c386 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f5bbe3ffb096ccd408bc79f9b0472793bf6aa94c7119c5eb566b483c98f53247 855269b83c16f870b012b0c80e29b194b5fd5573aa6eafff1c298cdad8fc60ba d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 50ec74b86729d0b412333cacff59e0334eae4af6e5386dc2816daa5f8bda733b 3a3c4e64cc613161a7bc0a9026e7f19a2a574436a8bb08e62b0659bf9479b0ce d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 646f551293163add854b995ff8029f846205a72eaf7dbc758897549177b2ba75 8e99a3b760b59b6e47c10f4bf2057346df01ddffdad6d5a89929b7dde41cde5d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a1c908a9d579181219c3379d3a6d1041ec9db11fa3cfe75c2b331f626cc2a666 531bf9df49636dbc54da6a2dc8a7a9dd588daa8f9372023ca74f2e4ddaf58b62 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 88b43a5dcfca446770f2bb197106e318fcf7e8cfe0c594dd9809b332a849a3cf c5001decea6175d38f8a28cbeec776520ba7275241586e6e6854bd0aa4195d7d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7eee6ae3163199b9a18a29855ad61e9e63a35b991a3ced5b2a4e002f1a2f5764 4b94305c713946f9e44472ddfcd19ce32d6e12a40a249bd17be0da0a1db74b3d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 475fa2f5ec0393b97602c4b93c82b56235f0217f7237bb545c92cfd3613b9a5c 96c1ea4275dfe99f89483151c121de812a566e1f26be65720d70170b4dca440a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1388dc717e59bbc1f7ce9b94c20cbf0ef69032cc91837c2fb1b7ae2471cef579 b885064abc9bf0c151138d0d01a3ace19a6c4fbc31a0cd7bf8d97a89ac33228b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 64bdde6842375a402f4ad4114ba097b37d0b1b8a30bbca4f545dab0d63c93031 f14f67794cd525df49457ec44c403ede0db1dbd54478b61cd829416007f624ad d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 616fb7d60e5c0ee6b125a250e0997a13595dd7f41474bc3614927e4c93953d92 84c80e6b7483472aaa6887ad374cd076af57cfa122903b644fedfccf5382cc41 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 236b93023b017a61c135365c3df88b639b1f21bec48232adce43f2daa4728094 aac109c31185fc2a3506f9a9c04cd3531c3031fb7306b7f308099d56db732953 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7a9dc67498db602e80c22730c69466d2e26912e81960bd827b6249c899f67409 42e3cfefcbcdb75f4691c167ab577c0c465eb9d3b68cb97fedac91ee607a0f26 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4d770fbe4df8d436328e3837a2400ae6d447ebc6464f92bd38da61dec2466709 ff5b9e258c19fd71d0d8bee228372e373410cb1506d5c5a018831e762d1dd5f2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 112528331627b9d5a85807f29feac215374d0a012ac4804dc6cfdf848ac53e20 cc52ab759b909eed0f870ff04dbae2ddcce2aedfa3caea31eae118028bde095e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 644d5cda3604d39db09a80c1c7e0b3aa766b1c40914b47f70fd4ab4d8a942d62 e6ae07933da0aa8f8ec755d2e10dfb7f228435660441143aa6c3a9c78a35e602 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7893a826bb23848d1575dd25babfa3f54cda427248b396bf204861131d57a961 56014869fe90e8130331fbdd309eb736112946a23cfbeb8dd9b2be5b89858456 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2a439b7e2413410a123af449459f7a6882c5f401c826ffa8e72bd29ac1a97f5b 2a9794f911b95fb3a5cae6dc42f70228266d59594cc183bb64d9ac6ae4e0bf8e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 910613502a8a1d558b68ebb05e4e9b79ab3a85e5f12b250dedfd6e75b2ade512 be5595a28afc7a10447799d86e6dec97bfe5630ca868da578d2b92d6e941be58 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 02bd089e7ae98e86181155675a82d55f274d215c5ec208f778c0598e10abf62c 84f4cafbf43a2350d5b2fadf97a1b65de3e8229430bb34032dd8340488837ef2 d53315bea08cec50d2591fca� x�������������`p������� X @ `'8 H� �~������4" �$ $ ���������������� 4" 3" 5" �
- Add cmorrord and mpd policy from Miroslav Grepl - Fix sshd creation of krb cc files for users to be user_tmp_t - Fixes for accountsdialog
- Fixes for boinc - Fix label on /var/lib/dokwiki
- Change permissive domains to enforcing
- Fix libvirt policy to allow it to run on mls - Update to upstream - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
- Fix /var/run/abrtd.lock label - Allow login programs to read krb5_home_t
Resolves: 594833
- Add obsoletes for cachefilesfd-selinux package
Resolves: #575084 - Allow mount to r/w abrt fifo file
- Allow svirt_t to getattr on hugetlbfs
- Allow abrt to create a directory under /var/spool - Add labels for /sys
- Allow sshd to getattr on shutdown
- Fixes for munin
- Allow sssd to use the kernel key ring
- Allow tor to send syslog messages
- Allow iptabels to read usr files
- allow policykit to read all domains state - Fix path for /var/spool/abrt
- Allow nfs_t as an entrypoint for http_sys_script_t
- Add policy for piranha
- Lots of fixes for sosreport - Allow xm_t to read network state and get and set capabilities
- Allow policykit to getattr all processes
- Allow denyhosts to connect to tcp port 9911
- Allow pyranha to use raw ip sockets and ptrace itself
- Allow unconfined_execmem_t and gconfsd mechanism to dbus
- Allow staff to kill ping process
- Add additional MLS rules - Allow gdm to edit ~/.gconf dir
Resolves: #590677
- Allow dovecot to create directories in /var/lib/dovecot
Partially resolves 590224
- Allow avahi to dbus chat with NetworkManager
- Fix cobbler labels
- Dontaudit iceauth_t leaks
- fix /var/lib/lxdm file context
- Allow aiccu to use tun tap devices
- Dontaudit shutdown using xserver.log - Fixes for sandbox_x_net_t to match access for sandbox_web_t ++
- Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
- Add dontaudit interface for bluetooth dbus
- Add chronyd_read_keys, append_keys for initrc_t
- Add log support for ksmtuned
Resolves: #586663 - Allow boinc to send mail - Allow initrc_t to remove dhcpc_state_t
- Fix label on sa-update.cron
- Allow dhcpc to restart chrony initrc
- Don't allow sandbox to send signals to its parent processes
- Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
Resolves: #589136 - Fix location of oddjob_mkhomedir
Resolves: #587385
- fix labeling on /root/.shosts and ~/.shosts
- Allow ipsec_mgmt_t to manage net_conf_t
Resolves: #586760 - Dontaudit sandbox trying to connect to netlink sockets
Resolves: #587609
- Add policy for piranha - Fixups for xguest policy
- Fixes for running sandbox firefox - Allow ksmtuned to use terminals
Resolves: #586663
- Allow lircd to write to generic usb devices - Allow sandbox_xserver to connectto unconfined stream
Resolves: #585171 - Allow initrc_t to read slapd_db_t
Resolves: #585476
- Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
Resolves: #585963 - Allow rlogind_t to search /root for .rhosts
Resolves: #582760
- Fix path for cached_var_t
- Fix prelink paths /var/lib/prelink
- Allow confined users to direct_dri
- Allow mls lvm/cryptosetup to work - Allow virtd_t to manage firewall/iptables config
Resolves: #573585 - Fix label on /root/.rhosts
Resolves: #582760
- Add labels for Picasa
- Allow openvpn to read home certs
- Allow plymouthd_t to use tty_device_t
- Run ncftool as iptables_t
- Allow mount to unmount unlabeled_t
- Dontaudit hal leaks - Allow livecd to transition to mount - Update to upstream
- Allow abrt to delete sosreport
Resolves: #579998
- Allow snmp to setuid and gid
Resolves: #582155
- Allow smartd to use generic scsi devices
Resolves: #582145 - Allow ipsec_t to create /etc/resolv.conf with the correct label
- Fix reserved port destination
- Allow autofs to transition to showmount
- Stop crashing tuned - Add telepathysofiasip policy - Update to upstream
- Fix label for /opt/google/chrome/chrome-sandbox
- Allow modemmanager to dbus with policykit - Fix allow_httpd_mod_auth_pam to use auth_use_pam(httpd_t)
- Allow accountsd to read shadow file
- Allow � x��������������_������� X A h&8 �������8������t �$ d ���������������� t s u � Update to 6.2.2 to fix a heap corruption issue
in the pnm coder. - .la files for modules are needed, actually - Really remove .la files for modules - Update to 6.2.1
- Include multiple improvements and bugfixes
by Rex Dieter et al (111961, 145466, 151196, 149970,
146518, 113951, 145449, 144977, 144570, 139298) - Make zip compression work for tiff (#154045) - Update to 6.2.0 to fix a number of security issues:
- Drop a lot of upstreamed patches - rebuild with gcc4
- remove an extraneous vsnprintf prototype which causes
gcc4 to complain - The devel subpackage requires XFree86-devel (bug #126509).
- Fixed build requirements (bug #120776). From Robert Scheck. - move *.mgk files (#132007, #131708, #132397) - update to 6.0.7 Patchlevel 1, fixes #132106 - move libWand out of -devel, fix requirements (#131767) - update to latest stable version
- get rid of obsolete patches
- fix remaining patches - Easyfixes (#124791) - fixed missing dependancy between -devel and
libexif-devel - rebuilt - freetype patch to fix convert (#115716) - rebuilt - rebuilt - make perl module link against the built library instead of the installed one - version 5.5.7 patchlevel 15 - rebuild with release 0.1 to not block an official update package - hack around libtool stupidity
- disable automake patch as we require automake-1.7 anyway - version 5.5.7 patchlevel 10 - rebuilt - rebuild for RHEL to fix broken deps - rebuild again to fix broken dep on libMagick.so.5 - rebuild - update
- specfile fixes
- verified that the upstream version fixes the following bugreports: - rebuilt - use internal dep generator. - rebuild - don't use rpms internal dep generator - fix perl paths in file list - lib64'ize
- don't throw stuff in /usr/X11R6, that's for X only
- remove files we aren't shipping - rebuilt with gcc-3.2 (we hope) - build using gcc-3.2-0.1 - fix non-cpp headers in -devel package
- fix #62157 (wrong path for include files in ImageMagick-devel)
- fix #63897 (use _target instead of _arch) in libtool workaround
- fix #65860, #65780 (tiff2ps) expands images to >10 MB Postscript files. - update
- fix localdoc patch
- fix %files section
- disable nonroot patch
- fix #62100,55950,62162,63136 (display doesn't start form gnome menu)
- fix libtool workaround
- moved Magick*-config into -devel package (#64249) - automated rebuild - 5.4.6 - Update to pl 11 - Update to 5.4.3 pl5; this fixes #58080 - Patchlevel 3 - automated rebuild - Update to 5.4.2-2
- Fix #57923, also don't hardcode netscape as html viewer - 5.4.1
- Link against new libstdc++ - 5.4.0.5
- Make the error message when trying to display an hpgl file more
explicit (#55875) - 5.4.0.3
- Fix names of man pages - 5.4.0
- work around build system breakage causing applications to be named
%{_arch}-redhat-linux-foo rather than foo - 5.3.9 - Add delegates.mgk back, got lost during the update to 5.3.8 (Makefile bug)
(#52611) - Remove Magick++ includes from -devel, they're already in -c++-devel
(#51590) - 5.3.8 (bugfix release) - fix to build Perlmagic on s390 s390x - Add delegates.mgk to the package (#50725) - 5.3.7
- Fix build without previously installed ImageMagick-devel (#49816)
- Move perl bindings to a separate package. - Fix build as non-root again
- Shut up rpmlint - 5.3.6
- Get rid of the ia64 patch, it's no longer needed since glibc was fixed - update to 5.3.5
- cleanup specfile - 5.3.3-respin, fixes #41196 - 5.3.3
- Add a desktop file for "display" (RFE#17417) - 5.3.2
- work around bugs in ia64 glibc headers - remove patch for s390, it is not necessary - 5.2.7 - 5.2.6 - ported to s390 - 5.2.4
- Fix up and package the C++ bindings in the new c++/c++-devel packages. - rebuild against new libpng - include images with docs (#10312) - don't build with -ggdb, use -g instead. - automatic rebuild - update to 5.2.2 beta - update to 5.2.1, redone patches as they failed - remove hacks to move perl man pages
- don't include the perl*/man stuff, these files go in /usr/share/man now. - disable optimization on Alpha and Sparc - update to 5.2.0
- update URL
- remo� x�������������PO������� X B S'8 ���������a������'" �$ 7 ���������������� '" &" (" � nnect to the amqp port
- Label devices 010-029 as usb devices
- ypserv packager says ypserv does not use tmp_t so removing selinux policy types
- Remove all ptrace commands that I believe are caused by the kernel/ps avcs
- Add initial Obex policy
- Add logging_syslogd_use_tty boolean
- Add polipo_connect_all_unreserved bolean
- Allow zabbix to connect to ftp port
- Allow systemd-logind to be able to switch VTs
- Allow apache to communicate with memcached through a sock_file - Fix file_context.subs_dist for now to work with pre usrmove - More /usr move fixes - Add zabbix_can_network boolean
- Add httpd_can_connect_zabbix boolean
- Prepare file context labeling for usrmove functions
- Allow system cronjobs to read kernel network state
- Add support for selinux_avcstat munin plugin
- Treat hearbeat with corosync policy
- Allow corosync to read and write to qpidd shared mem
- mozilla_plugin is trying to run pulseaudio
- Fixes for new sshd patch for running priv sep domains as the users context
- Turn off dontaudit rules when turning on allow_ypbind
- udev now reads /etc/modules.d directory - Turn on deny_ptrace boolean for the Rawhide run, so we can test this out
- Cups exchanges dbus messages with init
- udisk2 needs to send syslog messages
- certwatch needs to read /etc/passwd - Add labeling for udisks2
- Allow fsadmin to communicate with the systemd process - Treat Bip with bitlbee policy
* Bip is an IRC proxy
- Add port definition for interwise port
- Add support for ipa_memcached socket
- systemd_jounald needs to getattr on all processes
- mdadmin fixes
* uses getpw
- amavisd calls getpwnam()
- denyhosts calls getpwall() - Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there
- bluetooth says they do not use /tmp and want to remove the type
- Allow init to transition to colord
- Mongod needs to read /proc/sys/vm/zone_reclaim_mode
- Allow postfix_smtpd_t to connect to spamd
- Add boolean to allow ftp to connect to all ports > 1023
- Allow sendmain to write to inherited dovecot tmp files
- setroubleshoot needs to be able to execute rpm to see what version of packages - Merge systemd patch
- systemd-tmpfiles wants to relabel /sys/devices/system/cpu/online
- Allow deltacloudd dac_override, setuid, setgid caps
- Allow aisexec to execute shell
- Add use_nfs_home_dirs boolean for ssh-keygen - Fixes to make rawhide boot in enforcing mode with latest systemd changes - Add labeling for /var/run/systemd/journal/syslog
- libvirt sends signals to ifconfig
- Allow domains that read logind session files to list them - Fixed destined form libvirt-sandbox
- Allow apps that list sysfs to also read sympolicy links in this filesystem
- Add ubac_constrained rules for chrome_sandbox
- Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
- Allow postgresql to be executed by the caller
- Standardize interfaces of daemons
- Add new labeling for mm-handler
- Allow all matahari domains to read network state and etc_runtime_t files - New fix for seunshare, requires seunshare_domains to be able to mounton /
- Allow systemctl running as logrotate_t to connect to private systemd socket
- Allow tmpwatch to read meminfo
- Allow rpc.svcgssd to read supported_krb5_enctype
- Allow zarafa domains to read /dev/random and /dev/urandom
- Allow snmpd to read dev_snmp6
- Allow procmail to talk with cyrus
- Add fixes for check_disk and check_nagios plugins - default trans rules for Rawhide policy
- Make sure sound_devices controlC* are labeled correctly on creation
- sssd now needs sys_admin
- Allow snmp to read all proc_type
- Allow to setup users homedir with quota.group - Add httpd_can_connect_ldap() interface
- apcupsd_t needs to use seriel ports connected to usb devices
- Kde puts procmail mail directory under ~/.local/share
- nfsd_t can trigger sys_rawio on tests that involve too many mountpoints, dontaudit for now
- Add labeling for /sbin/iscsiuio - Add label for /var/lib/iscan/interpreter
- Dont audit writes to leaked file descriptors or redirected� x��������������>������� X C �&8 ���������; �! �$ ���������������� �! �! �! � e4392c4f2f0483ff5 23d081c22d9b8e71d7d06e74658f9d44e83446f1a8e7602d6da2b6e43a41d7cf d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3ba8ea743efacbab503950c559703babd0c9409c495bab17f918efb04123b5cc a3182ad08cef8e9f8d3526c8062d6f9c274b63b3e6313d797f84833d2d55f176 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 28767c58f380ae4bdf4fc11ebd1c3c7e47edd4d245a745665e981e73d9e5d3a8 b871b61c4da61df82ff159d270d1367e4cedd1be9ef0af465393931ce18c61c6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4b06f481eac858746967b462fc39cb6b31e4fdae9eceae9561dc3319aa9e7738 2d16c054b7afaf685c65d85978e03b1afecb55a4cfbe42b9c22259f365c76ec1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c7bf7af6769425662de8704a3d50975e189bf88cbac0fe3f0532ee0bdcda27f0 96110bae20ea08127a2101a850709a7b641241c2f6fa5a99bc8bfaa5a0de6c64 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 645e5b43c1f4382af293c1a926c734910d21a2dda353f007c8424ef23930c7f4 f16eb50730a4bedfb409e840ff69c235ef1cdb6bc0aeff5e17321394ef69e997 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f701e8964f3c4a472d2bf83eb63b8c84567cbc9d33354c8984bad0cc7808364a 709226d31a88f4b5baf4b7ad5efcc0f95fde9aea70e717eaebd0bd50a94f34ae d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d98700f554aba199c220fa55122d5077dfc5612adbe7a239f34c71a36f0d2291 208120d966e87d7a58b90f113580ba60970d305341c2c953b989fc1097a7c2da d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a6ebf24dd4b00d672d8dea0c9db453d82d58f02c0dec21dbb2bd2be6035da34e 272825c7f6eefb6c78e09c368ca78055d13c5aff620b2b741112bde26fa60f1c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2b39db261a4f47f35c8ebddefc61462c0dd9afe8cbf78e91e44c07f28dedbf9f d9d2bf9083ed01c7538902901d04159a31f410933f48fcfcc98f7e47680f5315 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e eabd0bc602dc657c3557ca9bfc2b92b39982d12ae2b55866e601ba36be4fcc08 954a9db0769d1e3cde2f14250109939e85e04c1b46990a6d8ebc6a5116ede1b4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 96354d069794fca3c4d722fd1f0866581bcd691f520d5b034eddf07f3f01b2f1 ac4caa5716a84ddb9dcb3d7c027920915fc77cb0dc9754047da45e05dacabc66 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e40951de0002fa86534183b46df75bf2e202a69e671b71fe069f60c04ceded9e b8fc5f790a9da540e097a4421a5aab79373bf109ba7e4f63441f6b8dacd27344 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6be6d014043c9d44b660764aada8443e87296bc64560973d88ef2bbedbfdb300 c68c5a062a54e81e07e01fe02dc1dc7981ae893588dd294d327269967ae0e27c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e03ad91c7d5aa9871a622601f3b7f31e2d865a9ceb42d6308256048697204800 60219e5e41f47e05ff3e62f10d9c35dbb0e8602b6bf06f5fdb31978414882f66 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 100763f5179933b48354df7ff663f406bb6fd7d033b816f64058ce7201b09473 b724f8b67dc68ba29a351c5da2a44b58d60ce17a7536ae4d1e61c1a0550aa636 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 74cfccf9d9cb7a4f6c04b1389d7727f8b554a81e4d97bdca6366321cb919f882 1cd0f93214ed7df47cbb0ad68a52a2f3c0bed819029d76c3620b2ef39448808d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bd256e878cd15d382e9d08b0f8910accdc4447d05010a0680c522cb12e457b31 633eaf46c0be88a0e18729ac097d74d4a3786ce5542c58a93774eb86fa416de0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 718fe899624904446ba7d3c5c46cd139223e76b93c1012dd6f11d5b4eb2f59b1 33ce71f675bec1d91766e2d85307b60b79c67eb8a21c870517914668fec7cd31 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ada3b75f722572a832173c9f87f2ff2b4b481e85d905388338dc5e2674c43e57 3757a5ab0d89830bb28fa5c1349067c7bee1233199293ec07c19ea706993cb41 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1a1b862944f9d6e498a7384004ebd1f1c49af076a182d8b07402c730c234ea52 6969646632ea9d70b31074af77f4777047de0922b0dfb553adb7b07b8a893f96 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6� x�������������@.������� X D Y'8 0A������B������-" �$ = ���������������� -" ," ." � _t not its own tmp files - Fix label for /usr/share/munin/plugins/munin_* plugins
- Add support for zarafa-indexer
- Fix boolean description
- Allow colord to getattr on /proc/scsi/scsi
- Add label for /lib/upstart/init
- Colord needs to list /mnt - Forard port changes from F15 for telepathy
- NetworkManager should be allowed to use /dev/rfkill
- Fix dontaudit messages to say Domain to not audit
- Allow telepathy domains to read/write gnome_cache files
- Allow telepathy domains to call getpw
- Fixes for colord and vnstatd policy - Allow init_t getcap and setcap
- Allow namespace_init_t to use nsswitch
- aisexec will execute corosync
- colord tries to read files off noxattr file systems
- Allow init_t getcap and setcap - Add support for ABRT retrace server
- Allow user_t and staff_t access to generic scsi to handle locally plugged in scanners
- Allow telepath_msn_t to read /proc/PARENT/cmdline
- ftpd needs kill capability
- Allow telepath_msn_t to connect to sip port
- keyring daemon does not work on nfs homedirs
- Allow $1_sudo_t to read default SELinux context
- Add label for tgtd sock file in /var/run/
- Add apache_exec_rotatelogs interface
- allow all zaraha domains to signal themselves, server writes to /tmp
- Allow syslog to read the process state
- Add label for /usr/lib/chromium-browser/chrome
- Remove the telepathy transition from unconfined_t
- Dontaudit sandbox domains trying to mounton sandbox_file_t, this is caused by fuse mounts
- Allow initrc_t domain to manage abrt pid files
- Add support for AEOLUS project
- Virt_admin should be allowed to manage images and processes
- Allow plymountd to send signals to init
- Change labeling of fping6 - Add filename transitions - Fixes for zarafa policy
- Add support for AEOLUS project
- Change labeling of fping6
- Allow plymountd to send signals to init
- Allow initrc_t domain to manage abrt pid files
- Virt_admin should be allowed to manage images and processes - xdm_t needs getsession for switch user
- Every app that used to exec init is now execing systemdctl
- Allow squid to manage krb5_host_rcache_t files
- Allow foghorn to connect to agentx port - Fixes for colord policy - Add Dan's patch to remove 64 bit variants
- Allow colord to use unix_dgram_socket
- Allow apps that search pids to read /var/run if it is a lnk_file
- iscsid_t creates its own directory
- Allow init to list var_lock_t dir
- apm needs to verify user accounts auth_use_nsswitch
- Add labeling for systemd unit files
- Allow gnomeclok to enable ntpd service using systemctl - systemd_systemctl_t domain was added
- Add label for matahari-broker.pid file
- We want to remove untrustedmcsprocess from ability to read /proc/pid
- Fixes for matahari policy
- Allow system_tmpfiles_t to delete user_home_t files in the /tmp dir
- Allow sshd to transition to sysadm_t if ssh_sysadm_login is turned on - Fix typo - Add /var/run/lock /var/lock definition to file_contexts.subs
- nslcd_t is looking for kerberos cc files
- SSH_USE_STRONG_RNG is 1 which requires /dev/random
- Fix auth_rw_faillog definition
- Allow sysadm_t to set attributes on fixed disks
- allow user domains to execute lsof and look at application sockets
- prelink_cron job calls telinit -u if init is rewritten
- Fixes to run qemu_t from staff_t - Fix label for /var/run/udev to udev_var_run_t
- Mock needs to be able to read network state - Add file_contexts.subs to handle /run and /run/lock
- Add other fixes relating to /run changes from F15 policy - Allow $1_sudo_t and $1_su_t open access to user terminals
- Allow initrc_t to use generic terminals
- Make Makefile/Rules.modular run sepolgen-ifgen during build to check if files for bugs
-systemd is going to be useing /run and /run/lock for early bootup files.
- Fix some comments in rlogin.if
- Add policy for KDE backlighthelper
- sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
- sssd wants to read .k5login file in users homedir
- setroubleshoot reads executables to see if they have TEXTREL
- Add /var/spool/audit support for new version of audit
- Remove� x�������������� ������� X E �&8 �������� ; �! �$ , ���������������� �! �! �! � try to the default context
Resolves: rhbz#1880474
- Allow sysadm_u user and unconfined_domain_type manage perf_events
Resolves: rhbz#1901958
- Add manage_perf_event_perms object permissions set
Resolves: rhbz#1901958
- Add perf_event access vectors.
Resolves: rhbz#1901958
- Remove "ipa = module" from modules-targeted-contrib.conf
Resolves: rhbz#1461914 - Allow kexec manage generic tmp files
Resolves: rhbz#1896424
- Update systemd-sleep policy
Resolves: rhbz#1850177
- Add groupadd_t fowner capability
Resolves: rhbz#1884179 - Allow dovecot bind to smtp ports
Resolves: rhbz#1881884
- Change fetchmail temporary files path to /var/spool/mail
Resolves: rhbz#1853389
- Set file context for symlinks in /etc/httpd to etc_t
Resolves: rhbz#1900650
- Allow dnsmasq read public files
Resolves: rhbz#1782539
- Fix range for unreserved ports
Resolves: rhbz#1794531
- Introduce logging_syslogd_append_public_content tunable
Resolves: rhbz#1823672
- Add files_search_non_security_dirs() interface
Resolves: rhbz#1823672
- Add miscfiles_append_public_files() interface
Resolves: rhbz#1823672 - Let keepalived bind a raw socket
Resolves: rhbz#1895130
- Add fetchmail_uidl_cache_t type for /var/mail/.fetchmail.pid
Resolves: rhbz#1853389
- Allow arpwatch create and use rdma socket
Resolves: rhbz#1843409
- Set correct default file context for /usr/libexec/pcp/lib/*
Resolves: rhbz#1886369
- Allow systemd-logind manage efivarfs files
Resolves: rhbz#1869979
- Allow systemd_resolved_t to read efivarfs
Resolves: rhbz#1869979
- Allow systemd_modules_load_t to read efivarfs
Resolves: rhbz#1869979
- Allow read efivarfs_t files by domains executing systemctl file
Resolves: rhbz#1869979
- Introduce systemd_read_efivarfs_type attribute
Resolves: rhbz#1869979 - Allow init dbus chat with kernel
Resolves: rhbz#1694681
- Confine systemd-sleep service
Resolves: rhbz#1850177
- Add default file context for /usr/libexec/pcp/lib/*
Resolves: rhbz#1886369
- Allow rtkit_daemon_t to uise sys_ptrace usernamespace capability
Resolves: rhbz#1873658
- Add fstools_rw_swap_files() interface
Resolves: rhbz#1850177 - Allow plymouth sys_chroot capability
Resolves: rhbz#1869814 - Allow certmonger fowner capability
Resolves: rhbz#1870596
- Define named file transition for saslauthd on /tmp/krb5_0.rcache2
Resolves: rhbz#1870300
- Label /usr/libexec/qemu-pr-helper with virtd_exec_t
Resolves: rhbz#1867115 - Add ipa_helper_noatsecure() interface unconditionally
Resolves: rhbz#1853432
- Conditionally allow nagios_plugin_domain dbus chat with init
Resolves: rhbz#1750821
- Revert "Update allow rules set for nrpe_t domain"
Resolves: rhbz#1750821
- Add ipa_helper_noatsecure() interface to ipa.if
Resolves: rhbz#1853432
- Allow tomcat map user temporary files
Resolves: rhbz#1857675
- Allow tomcat manage user temporary files
Resolves: rhbz#1857675
- Add file context for /sys/kernel/tracing
Resolves: rhbz#1847331
- Define named file transition for sshd on /tmp/krb5_0.rcache2
Resolves: rhbz#1848953 - Allow kadmind manage kerberos host rcache
Resolves: rhbz#1863043
- Allow virtlockd only getattr and lock block devices
Resolves: rhbz#1832756
- Allow qemu-ga read all non security file types conditionally
Resolves: rhbz#1747960
- Allow virtlockd manage VMs posix file locks
Resolves: rhbz#1832756
- Add dev_lock_all_blk_files() interface
Resolves: rhbz#1832756
- Allow systemd-logind dbus chat with fwupd
Resolves: rhbz#1851932
- Update xserver_rw_session macro
Resolves: rhbz#1851448 - Revert "Allow qemu-kvm read and write /dev/mapper/control"
This reverts commit f948eaf3d010215fc912e42013e4f88870279093.
- Allow smbd get attributes of device files labeled samba_share_t
Resolves: rhbz#1851816
- Allow tomcat read user temporary files
Resolves: rhbz#1857675
- Revert "Dontaudit and disallow sys_admin capability for keepalived_t domain"
Resolves: rhbz#1815281
- Label /tmp/krb5_0.rcache2 with krb5_host_rcache_t
Resolves: rhbz#1848953
- Allow auditd manage kerberos host rcache files
Resolves: rhbz#1855770 - Additional support for keepalived running in a namespace
Resolves: rhbz#1815281
- A� x�������������0
������� X F i&8 p 0)������u �$ e ���������������� u t v � ve redundant CXXFLAGS=$RPM_OPT_FLAGS - bootstrap rebuilt to nuke broken libbz2 deps
- add Prefix: tag such that the FHS macros work properly - now compiles with bzip2 1.0
- changed buildroot to include version - fix compilation with new perl - 5.1.1 - Rebuild to get compressed man pages - ugly hack to print with lpr instead of lp - update to 4.2.9 - update to 4.2.8 - include the perl man pages as well - remove --enable-16bit because it damages interoperability - update to 4.2.2
- change ChangeLog to refer to actual dates.
- strip binaries - add more files. Oops. - auto rebuild in the new build environment (release 2) - version 4.2.1 - changed group - hacks to make it work with the new perl
- version 4.1.0 (actually installs the sonames as 4.0.10... doh!)
- make sure the libraries have the x bit on - translations modified for de, fr - translations modified for de, fr, tr - updated to 4.0.5 - updated to 4.0.4
- added BuildRoot - updated from 3.8.3 to 3.9.1
- removed PNG patch (appears to be fixed) - build against new libpng - built against glibc - updated to version 3.8.3.
- updated source and url tags. ImageMagick6
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 0:6.9.13.25-1.el8 0:6.9.13.25-1.el8
0:6.9.13.25-1.el8
animate compare composite conjure convert display identify import mogrify montage stream .build-id 3d 946f7c895090037d345351a08979ebf91cebb5 53 08a2fe3e1341547bc2198eefd9df6fc50e7c58 57 2cca59f259298f733bfca6dd46eb7fecc3695c 88 2937aa14e7a04fdb72a67dfe5ede159dcfb709 8c 618e015b34dee06d03eba45e962c1c44a08540 94 6adc6dd0c48bd4d2b190a94c8884fb29559325 b0 bdcaaca2cd4c5f84d77c39668a3269da0005cd c5 9a0b06e2e0da76e183f3c96b48218098894110 db 4bb4761d58084a4308300b6e9ee919fd26aec0 e0 84b7c9ad967913526ea2247234e8455942efec e3 2d68bae464f30e6863e84da6436dbc919669f2 ImageMagick AUTHORS.txt LICENSE NEWS.txt NOTICE README.txt ImageMagick.1.gz animate.1.gz compare.1.gz composite.1.gz conjure.1.gz convert.1.gz display.1.gz identify.1.gz import.1.gz mogrify.1.gz montage.1.gz stream.1.gz /usr/bin/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/3d/ /usr/lib/.build-id/53/ /usr/lib/.build-id/57/ /usr/lib/.build-id/88/ /usr/lib/.build-id/8c/ /usr/lib/.build-id/94/ /usr/lib/.build-id/b0/ /usr/lib/.build-id/c5/ /usr/lib/.build-id/db/ /usr/lib/.build-id/e0/ /usr/lib/.build-id/e3/ /usr/share/doc/ /usr/share/doc/ImageMagick/ /usr/share/man/man1/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu
ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=c59a0b06e2e0da76e183f3c96b48218098894110, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynam� x������������������� X G &8 Э Ц yQ �$ i ���������������� yQ xQ zQ � a74c58474b0457c0abb5aad1039250b13533 5ab7103834b60336c29301695bc97f21e4ab370dbe97efb310aac6d36dc1bd97 9c817cc083eea34485522313b613b15bc3e4359fb18829024ac9f27f37700b48 1a0916eb5f2233cc8c6da3a263bd716ba020218783d2b5ac461aab6118483414 afbe26afb2c3eae7e9828dccbefc4a2fac00a148187e5a8ca6f18dc6883bf401 a5d88d77d2a25f41279a8597b84c62b0ed134a8b5c141643e9bef8711812d8da b39002218b35a267cc0c4dee248ff9cd67a76022a41e19541fbc63857818645c 2abe1c2544e1472e4de3c789ed89db516a274a8e18b3a1e0591afb618e5df9ec 688670d5e2d3c0cca7d474d447cf79e473228ab9a0826b4dd47ebfad3d503917 ce737f678089010d3f91313fce38b539cb3fa3f7865b261a8b4adf6443b27aad 6c5bf2c734f02b7d19f07de5f32645e5750e98cf4e7817516f83c2df5b22028b 08567123f786dc7431314b0f684fa82c1395d3b4c30e8f4f6da5bcc3999ad417 8274fbe4fdd933bcce0969880ce06063f838e5706d1b6b382abfea6f3fcd7f3b 9e5dace6b426f8effe8e0b699862841ca46774f29162799810165265f0fc066d 2200cb757a14181030c1e8a61d094d64734345a826c9838f361dbf252c711efc 4472eebf39433f3a94a02e2a4f5d434978d5fa8e6124d1ec5f78007540d2234b 954366012056de48c63860bc375f4a880f779dd046d2c2898c92a6980777d374 755d98ce54a76fe4bad7375128cd77599411d8c25ea2deb1113494b1eeb876e9 5b56c86856a754ccaa2467ad527824b017736b4d2353587024fc0d76fd04adc4 e10aeab2d0ee919dfa22bdf195efc67d4d960701aba4a83311b2b4cf4fe76cbd fc73380cd42da3d39df04bf69a50314e897c1802a1a932f19e333e7351bff952 915799c977828aa9874a2e4dfe1044f4c5ccbfb1f0178c75be681d0437cca409 b7daad495605b5e1da13ab708972979b51a5183f51e27c0584b6c84ffd534914 3a26b9c68a4de3493fc08185047e85435055cb4c75e941e570072dd7b6239a6c b594f03dc4fd9a95b1f031de0d7bd51a1db06c5f7cbfe90cf02117ae3153dcaf 3005a13c3a6316ea71e8253fdc55e6941769bcd30492b62358faf56c4a2374a9 27d403943480a0586081b042701b4ae2314f59ea8913fc3f4d84ab357cb1d8ee f5bde716827fdf502681a66ae55bd789a2e1a6885545159a2d535f94b1beb8b8 2b22a77bf60e938485224bb9239513bc2c0fe0c2c2a49c9bf0b761c49ffb8f44 108df0190177390277347167fff6b234f1b64786e9366954877597724e5d41b8 6abf4e79b1bf6fe7203cc60721a2cfa1dd5d1569381366039f5ff29d5158c2af 6d132c7c074b8f4f122a39e3f11715780d14901705179c5ff858c96b8466afb8 c66209844352e1b8c0b9d2343c853ec1bb6364ad4598b12b1f538a15d28caf94 2f72a0e057b4140e508374d5cc54d1b059f94058a1e3659bc95b14d842c543bd 2697c4d26ae6fb2878e3549ad09490330909f81ae68dec951ed353df6e0e1ee2 aa6cfd962729a14c70a734af191dd9cbaf638e38659ce21d7d6590bb6ba59b2d df7f874acea2f403163f9ae27109b3a7a547471e64095c3eb94269beaf00c327 b5b0cfff235c5a6f0b18bf97d85a8021e40c4b2f1b7a3700de22e5f5be423aa3 20ec9a7ddf2e63ae95eb154d9e9496b6d972400d2ce4c238bdf5326e609ba9e4 cb427740bd1f65399fcd162e281dcca8f995020811ed8442850a006396233fa7 ef4f1d3ad64c9180b0d3df2ac33d3c16170490fff8aef478ab77d02c93950ced f4ecd6be86794961014f5701d779205b1fbe4982d5e628bbaa5bee8d5793fefd b6a548cbf7698a1a1f2ce23832ca45a0a46674b63330807e4e9795aa95e68c84 add08140f81f40ad3901408f8c64d2f858f3d61b1492e020579a46b93a9426ec 51e88c476332447fb25ec766aacefd6181bfad905bba96965f19e82eec485c3d 312d9ecbce9839ce32292431c920f3a1b9d7ace886ec7d07611ebcbea010e0bd 4212e03813708156a3961047f3d440dc73fb39fa782034cd97a86b414a08da95 f10a8e696ec6af28cb39ea11993cf4b85aa45d7a8ee6da71c4ac236c24488be7 688acf79a0fb490e726ef8769ec6704553493acbfc0b148aeab03fe49ef17f62 ceb7a772d7fc5fe3c4c540a79e627934488e1704e4233bbca8b59cfcd4ed22d8 be4525bd09505bc60ecae41d76e5a369a00c9a891f6de538942cfeb4f3ee30d5 d606dd0d0eeb72fc03de9260c57a8497a2ca72e921fcf8beabeacfd8e99d9f6f b5e9b9efa318c7ec96a330317445e47654f18be13f16d065847b1386c068a333 34fafc6e568fd236ddd01a29e99f65b001ae57767dea4e611b8048c3780ad657 cc414a86763f96866b52adac87aab5150123fcace0b68135e64240a82a122cab 0ad124757a6d4d6db39284bd7b349794aaaefb20cb14907c2c4745ae4e20fe8f 558e9a16a9984ddec73e43b9f481aabda6f89d9a3e221cc9ebe59b339eaec6c3 75bd49fe9bf4cda86c96b3f827cab53d030b4c7b65c6817a5ef6e8ec54eafae1 7d86ccdf33c466b7ea200b5fe30e800f510f6ea6d1fdf66d15f2b75b35e6be3b 4968846f2774f3d93f54ca5f67ebb4c6aa37027c2daf38a1b88b7052b3ea0a13 7ab9d109aac47584996329395a5bc61faad006d0872be6d6ef6868420979c117 208080f682e2fadf8288e346188ca1e3d3b4e87036f597646907627644e3d6d8 fbff743f2f70a643b1768617839bb5c3be226f02f13835468e87f34b5d702f4� x������������� ����� X H �&8 ��������� �������! �$ ( ���������������� �! �! �! � w NetworkManager talk with unconfined user over unix domain dgram socket
Resolves: rhbz#2044048
- Allow system_mail_t read inherited apache system content rw files
Resolves: rhbz#1988339
- Add apache_read_inherited_sys_content_rw_files() interface
Related: rhbz#1988339
- Allow rhsm-service execute its private memfd: objects
Resolves: rhbz#2029873
- Allow dirsrv read configfs files and directories
Resolves: rhbz#2042568
- Label /run/stratisd with stratisd_var_run_t
Resolves: rhbz#1879585
- Fix path for excluding container.if from selinux-policy-devel
Resolves: rhbz#1861968 - Revert "Label /etc/cockpit/ws-certs.d with cert_t"
Related: rhbz#1907473 - Set default file context for /sys/firmware/efi/efivars
Resolves: rhbz#2039458
- Allow sysadm_t start and stop transient services
Resolves: rhbz#2031065
- Label /etc/cockpit/ws-certs.d with cert_t
Resolves: rhbz#1907473
- Allow smbcontrol read the network state information
Resolves: rhbz#2033873
- Allow rhsm-service read/write its private memfd: objects
Resolves: rhbz#2029873
- Allow fcoemon request the kernel to load a module
Resolves: rhbz#1940317
- Allow radiusd connect to the radacct port
Resolves: rhbz#2038955
- Label /var/lib/shorewall6-lite with shorewall_var_lib_t
Resolves: rhbz#2041447
- Exclude container.if from selinux-policy-devel
Resolves: rhbz#1861968 - Allow sysadm execute sysadmctl in sysadm_t domain using sudo
Resolves: rhbz#2013749
- Allow local_login_t get attributes of tmpfs filesystems
Resolves: rhbz#2015539
- Allow local_login_t get attributes of filesystems with ext attributes
Resolves: rhbz#2015539
- Allow local_login_t domain to getattr cgroup filesystem
Resolves: rhbz#2015539
- Allow systemd read unlabeled symbolic links
Resolves: rhbz#2021835
- Allow userdomains use pam_ssh_agent_auth for passwordless sudo
Resolves: rhbz#1917879
- Allow sudodomains execute passwd in the passwd domain
Resolves: rhbz#1943572
- Label authcompat.py with authconfig_exec_t
Resolves: rhbz#1919122
- Dontaudit pkcsslotd sys_admin capability
Resolves: rhbz#2021887
- Allow lldpd connect to snmpd with a unix domain stream socket
Resolves: rhbz#1991029 - Allow unconfined_t to node_bind icmp_sockets in node_t domain
Resolves: rhbz#2025445
- Allow rhsmcertd get attributes of tmpfs_t filesystems
Resolves: rhbz#2015820
- The nfsdcld service is now confined by SELinux
Resolves: rhbz#2026588
- Allow smbcontrol use additional socket types
Resolves: rhbz#2027740
- Allow lldpd use an snmp subagent over a tcp socket
Resolves: rhbz#2028379 - Allow sysadm_t read/write pkcs shared memory segments
Resolves: rhbz#1965251
- Allow sysadm_t connect to sanlock over a unix stream socket
Resolves: rhbz#1965251
- Allow sysadm_t dbus chat with sssd
Resolves: rhbz#1965251
- Allow sysadm_t set attributes on character device nodes
Resolves: rhbz#1965251
- Allow sysadm_t read and write watchdog devices
Resolves: rhbz#1965251
- Allow sysadm_t connect to cluster domains over a unix stream socket
Resolves: rhbz#1965251
- Allow sysadm_t dbus chat with tuned 2/2
Resolves: rhbz#1965251
- Update userdom_exec_user_tmp_files() with an entrypoint rule
Resolves: rhbz#1920883
- Allow sudodomain send a null signal to sshd processes
Resolves: rhbz#1966945
- Allow sysadm_t dbus chat with tuned 1/2
Resolves: rhbz#1965251
- Allow cloud-init dbus chat with systemd-logind
Resolves: rhbz#2009769
- Allow svnserve send mail from the system
Resolves: rhbz#2004843
- Allow svnserve_t domain to read system state
Resolves: rhbz#2004843 - VQP: Include IANA-assigned TCP/1589
Resolves: rhbz#1924038
- Label port 3785/udp with bfd_echo
Resolves: rhbz#1924038
- Allow sysadm_t dbus chat with realmd_t
Resolves: rhbz#2000488
- Support sanlock VG automated recovery on storage access loss 1/2
Resolves: rhbz#1985000
- Revert "Support sanlock VG automated recovery on storage access loss"
Resolves: rhbz#1985000
- Support sanlock VG automated recovery on storage access loss
Resolves: rhbz#1985000
- radius: Lexical sort of service-specific corenet rules by service name
Resolves: rhbz#1924038
- radius: Allow binding to the BD� x������������������� X I \'8 (l ����0" �$ ���������������� 0" /" 1" � erited terminal
- Allow sambagui to read files in /usr
- webalizer manages squid log files
- Allow unconfined domains to bind ports to raw_ip_sockets
- Allow abrt to manage rpm logs when running yum
- Need labels for /var/run/bittlebee
- Label .ssh under amanda
- Remove unused genrequires for virt_domain_template
- Allow virt_domain to use fd inherited from virtd_t
- Allow iptables to read shorewall config - Gnome apps list config_home_t
- mpd creates lnk files in homedir
- apache leaks write to mail apps on tmp files
- /var/stockmaniac/templates_cache contains log files
- Abrt list the connects of mount_tmp_t dirs
- passwd agent reads files under /dev and reads utmp file
- squid apache script connects to the squid port
- fix name of plymouth log file
- teamviewer is a wine app
- allow dmesg to read system state
- Stop labeling files under /var/lib/mock so restorecon will not go into this
- nsplugin needs to read network state for google talk - Allow xdm and syslog to use /var/log/boot.log
- Allow users to communicate with mozilla_plugin and kill it
- Add labeling for ipv6 and dhcp - New labels for ghc http content
- nsplugin_config needs to read urand, lvm now calls setfscreate to create dev
- pm-suspend now creates log file for append access so we remove devicekit_wri
- Change authlogin_use_sssd to authlogin_nsswitch_use_ldap
- Fixes for greylist_milter policy - Update to upstream
- Fixes for systemd policy
- Fixes for passenger policy
- Allow staff users to run mysqld in the staff_t domain, akonadi needs this
- Add bin_t label for /usr/share/kde4/apps/kajongg/kajongg.py
- auth_use_nsswitch does not need avahi to read passwords,needed for resolving data
- Dontaudit (xdm_t) gok attempting to list contents of /var/account
- Telepathy domains need to read urand
- Need interface to getattr all file classes in a mock library for setroubleshoot - Update selinux policy to handle new /usr/share/sandbox/start script - Update to upstream
- Fix version of policy in spec file - Allow sandbox to run on nfs partitions, fixes for systemd_tmpfs
- remove per sandbox domains devpts types
- Allow dkim-milter sending signal to itself - Allow domains that transition to ping or traceroute, kill them
- Allow user_t to conditionally transition to ping_t and traceroute_t
- Add fixes to systemd- tools, including new labeling for systemd-fsck, systemd-cryptsetup - Turn on systemd policy
- mozilla_plugin needs to read certs in the homedir.
- Dontaudit leaked file descriptors from devicekit
- Fix ircssi to use auth_use_nsswitch
- Change to use interface without param in corenet to disable unlabelednet packets
- Allow init to relabel sockets and fifo files in /dev
- certmonger needs dac* capabilities to manage cert files not owned by root
- dovecot needs fsetid to change group membership on mail
- plymouthd removes /var/log/boot.log
- systemd is creating symlinks in /dev
- Change label on /etc/httpd/alias to be all cert_t - Fixes for clamscan and boinc policy
- Add boinc_project_t setpgid
- Allow alsa to create tmp files in /tmp - Push fixes to allow disabling of unlabeled_t packet access
- Enable unlabelednet policy - Fixes for lvm to work with systemd - Fix the label for wicd log
- plymouthd creates force-display-on-active-vt file
- Allow avahi to request the kernel to load a module
- Dontaudit hal leaks
- Fix gnome_manage_data interface
- Add new interface corenet_packet to define a type as being an packet_type.
- Removed general access to packet_type from icecast and squid.
- Allow mpd to read alsa config
- Fix the label for wicd log
- Add systemd policy - Fix gnome_manage_data interface
- Dontaudit sys_ptrace capability for iscsid
- Fixes for nagios plugin policy - Fix cron to run ranged when started by init
- Fix devicekit to use log files
- Dontaudit use of devicekit_var_run_t for fstools
- Allow init to setattr on logfile directories
- Allow hald to manage files in /var/run/pm-utils/ dir which is now labeled as devicekit_var_run_t - Fix up handling of dnsmasq_t creating /var/run/libvirt/network
- Turn on sshd_forw� x������������������ X J �&8 �A�������������v! �$ f ���������������� v! u! w! � 9de785b90 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d9f5d6d3e1662828550983fef5a3d2f39e69287a725686cac73ab81646b72932 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf fe85496bb0fdbcc2cac84de46b102e10f9fc949e886e4271fa0774f423819d68 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 99f39bacb759be03934fc06a183b513474e97724e4307ff32eac09d466a1ceb3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf fe5e5f325530e87f028d89862d3aa4bd39d26e1637d7c94e52a6965a86f4ff7e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0a486a4060f2d298d8537f9f4a002094c9083ce46545f42e326d41fd88412e2a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 608c73e32760ab4c67b0d2c4922fe978c17b9eee87ed1616739793a5e936ce69 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d04cb9021fecddf2f43e1300ee95bf2ff569f13e7f2901706d53ec616151382c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f0b23fbd7959535fca8992a87c3546a03275e20c1f2d7ff797f9f45968e8de01 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4d119eaa0cfbdb9b37a88a812becbad830c1755b2d31ed1241ba7df9d932ab85 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 585ece47bbfd7b53a92ad895e7b4b3966d963b701bfba291ac8065ab7f479057 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3d4b325283e81da9c91da60e1db0fc2332d650107681fdcf3036df6db00507fa 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6d140717219fbf4f208575a087b5b3fc874cf208b9d3c2b0e25e0ae16eb152db 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d5c19e58881ae497385296be296d564c4112e1b2861749ad944ce097c9e4c44d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf dfdc1c0f61a1c3dc4bfbe2dda47344de360447b3aa2a48276dc53f512bacc095 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c31e79d5b261a09e2682211815a47f7a75c0c3c82b09e12051fb0ead0576196a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 55f2e2852c374ddfa860c48a2833857fca76f33609290121c0e8cb582f97cc42 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 991a350bd410a9008f5c9d60f28957ecf6c5f7392bbef846b86abb7a95e2b7b4 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 25a83d560382d31d344f1ce47f817fd12667bf031512425d5d624ab004989cb1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0dd2a8d862517d99ec4b8b6ee5fa9511ee60fda2e9b17499b58e64a5ca041c7f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 714eb68865449ef2b9c19c20c548270366a458e08e700b8aa07a8241317702e3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1ba776cfeb19305e2bcf8993bc9c327fac18038aaeac36340dbcc60fc83e5209 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c4e48152c2910feceb4bdb286faab218e4fa99ccab28b414959522c5038732ce 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c426d9fb46166d8cbf90aa18621f84ebbe974bd7479a37f6a18818cba8b0e54b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 249bcc53bc15f9fbaf28622355aa345b23010ce9d8d11889e2ba170b70eece9a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7baf64b22d831afa28741054bc11551ab3361d4e7612bc3d6add4d8d84bb9505 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0e66f4d9866b0dd7fe639d6814fe21f17ee355e0ec08c8da33a0a85c5d2eec2b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf cd5c9912d50c5cd0e92c1894175e8c62935fe95a841f51802605fc9562015118 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 98cf961de828a1fac8e3352595334685e4c82d07c2aaca5bae6194e19335f411 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e3bee1b1ecb14f7090d7cc795564bc2506be917d3211306610cda0a0586f7d62 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1fa4c2f7f6265831c3ede22a66608482ed6b4279d73a8f2e055347a3634dac0b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 370f70e269887c369baa5bd818d8807af3e12d831a261d27eb8de43484c1c30d� x������������������� X K E'8 �������������" �$ ���������������� " " " �
- Since xdm is running a full session, it seems to be trying to execute lots of executables via dbus
- Add back tcp/8123 port as http_cache port
- Add ovirt-guest-agent\.pid labeling
- Allow xend to run scsi_id
- Allow rhsmcertd-worker to read "physical_package_id"
- Allow pki_tomcat to connect to ldap port
- Allow lpr to read /usr/share/fonts
- Allow open file from CD/DVD drive on domU
- Allow munin services plugins to talk to SSSD
- Allow all samba domains to create samba directory in var_t directories
- Take away svirt_t ability to use nsswitch
- Dontaudit attempts by openshift to read apache logs
- Allow apache to create as well as append _ra_content_t
- Dontaudit sendmail_t reading a leaked file descriptor
- Add interface to have admin transition /etc/prelink.cache to the proper label
- Add sntp support to ntp policy
- Allow firewalld to dbus chat with devicekit_power
- Allow tuned to call lsblk
- Allow tor to read /proc/sys/kernel/random/uuid
- Add tor_can_network_relay boolean - Add openshift_initrc_signal() interface
- Fix typos
- dspam port is treat as spamd_port_t
- Allow setroubleshoot to getattr on all executables
- Allow tuned to execute profiles scripts in /etc/tuned
- Allow apache to create directories to store its log files
- Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
- Looks like apache is sending sinal to openshift_initrc_t now,needs back port to RHEL6
- Allow Postfix to be configured to listen on TCP port 10026 for email from DSPAM
- Add filename transition for /etc/tuned/active_profile
- Allow condor_master to send mails
- Allow condor_master to read submit.cf
- Allow condor_master to create /tmp files/dirs
- Allow condor_mater to send sigkill to other condor domains
- Allow condor_procd sigkill capability
- tuned-adm wants to talk with tuned daemon
- Allow kadmind and krb5kdc to also list sssd_public_t
- Allow accountsd to dbus chat with init
- Fix git_read_generic_system_content_files() interface
- pppd wants sys_nice by nmcli because of "syscall=sched_setscheduler"
- Fix mozilla_plugin_can_network_connect to allow to connect to all ports
- Label all munin plugins which are not covered by munin plugins policy as unconfined_munin_plugin_exec_t
- dspam wants to search /var/spool for opendkim data
- Revert "Add support for tcp/10026 port as dspam_port_t"
- Turning on labeled networking requires additional access for netlabel_peer_t; these allow rules need to be back ported to RHEL6
- Allow all application domains to use fifo_files passed in from userdomains, also allow them to write to tmp_files inherited from userdomain
- Allow systemd_tmpfiles_t to setattr on mandb_cache_t - consolekit.pp was not removed from the postinstall script - Add back consolekit policy
- Silence bootloader trying to use inherited tty
- Silence xdm_dbusd_t trying to execute telepathy apps
- Fix shutdown avcs when machine has unconfined.pp disabled
- The host and a virtual machine can share the same printer on a usb device
- Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
- Allow abrt_watch_log_t to execute bin_t
- Allow chrome sandbox to write content in ~/.config/chromium
- Dontaudit setattr on fontconfig dir for thumb_t
- Allow lircd to request the kernel to load module
- Make rsync as userdom_home_manager
- Allow rsync to search automount filesystem
- Add fixes for pacemaker - Add support for 4567/tcp port
- Random fixes from Tuomo Soini
- xdm wants to get init status
- Allow programs to run in fips_mode
- Add interface to allow the reading of all blk device nodes
- Allow init to relabel rpcbind sock_file
- Fix labeling for lastlog and faillog related to logrotate
- ALlow aeolus_configserver to use TRAM port
- Add fixes for aeolus_configserver
- Allow snmpd to connect to snmp port
- Allow spamd_update to create spamd_var_lib_t directories
- Allow domains that can read sssd_public_t files to also list the directory
- Remove miscfiles_read_localization, this is defined for all domains - Allow syslogd to request t� x������������� ����� X L '8 0�������� S" �$ C ���������������� S" R" T" � /100/plymouthd/ /usr/share/selinux/targeted/default/active/modules/100/podsleuth/ /usr/share/selinux/targeted/default/active/modules/100/policykit/ /usr/share/selinux/targeted/default/active/modules/100/polipo/ /usr/share/selinux/targeted/default/active/modules/100/portmap/ /usr/share/selinux/targeted/default/active/modules/100/portreserve/ /usr/share/selinux/targeted/default/active/modules/100/postfix/ /usr/share/selinux/targeted/default/active/modules/100/postgresql/ /usr/share/selinux/targeted/default/active/modules/100/postgrey/ /usr/share/selinux/targeted/default/active/modules/100/ppp/ /usr/share/selinux/targeted/default/active/modules/100/prelink/ /usr/share/selinux/targeted/default/active/modules/100/prelude/ /usr/share/selinux/targeted/default/active/modules/100/privoxy/ /usr/share/selinux/targeted/default/active/modules/100/procmail/ /usr/share/selinux/targeted/default/active/modules/100/prosody/ /usr/share/selinux/targeted/default/active/modules/100/psad/ /usr/share/selinux/targeted/default/active/modules/100/ptchown/ /usr/share/selinux/targeted/default/active/modules/100/publicfile/ /usr/share/selinux/targeted/default/active/modules/100/pulseaudio/ /usr/share/selinux/targeted/default/active/modules/100/puppet/ /usr/share/selinux/targeted/default/active/modules/100/pwauth/ /usr/share/selinux/targeted/default/active/modules/100/qmail/ /usr/share/selinux/targeted/default/active/modules/100/qpid/ /usr/share/selinux/targeted/default/active/modules/100/quantum/ /usr/share/selinux/targeted/default/active/modules/100/quota/ /usr/share/selinux/targeted/default/active/modules/100/rabbitmq/ /usr/share/selinux/targeted/default/active/modules/100/radius/ /usr/share/selinux/targeted/default/active/modules/100/radvd/ /usr/share/selinux/targeted/default/active/modules/100/raid/ /usr/share/selinux/targeted/default/active/modules/100/rasdaemon/ /usr/share/selinux/targeted/default/active/modules/100/rdisc/ /usr/share/selinux/targeted/default/active/modules/100/readahead/ /usr/share/selinux/targeted/default/active/modules/100/realmd/ /usr/share/selinux/targeted/default/active/modules/100/redis/ /usr/share/selinux/targeted/default/active/modules/100/remotelogin/ /usr/share/selinux/targeted/default/active/modules/100/rhcs/ /usr/share/selinux/targeted/default/active/modules/100/rhev/ /usr/share/selinux/targeted/default/active/modules/100/rhgb/ /usr/share/selinux/targeted/default/active/modules/100/rhnsd/ /usr/share/selinux/targeted/default/active/modules/100/rhsmcertd/ /usr/share/selinux/targeted/default/active/modules/100/ricci/ /usr/share/selinux/targeted/default/active/modules/100/rkhunter/ /usr/share/selinux/targeted/default/active/modules/100/rkt/ /usr/share/selinux/targeted/default/active/modules/100/rlogin/ /usr/share/selinux/targeted/default/active/modules/100/rngd/ /usr/share/selinux/targeted/default/active/modules/100/rolekit/ /usr/share/selinux/targeted/default/active/modules/100/roundup/ /usr/share/selinux/targeted/default/active/modules/100/rpc/ /usr/share/selinux/targeted/default/active/modules/100/rpcbind/ /usr/share/selinux/targeted/default/active/modules/100/rpm/ /usr/share/selinux/targeted/default/active/modules/100/rrdcached/ /usr/share/selinux/targeted/default/active/modules/100/rshd/ /usr/share/selinux/targeted/default/active/modules/100/rssh/ /usr/share/selinux/targeted/default/active/modules/100/rsync/ /usr/share/selinux/targeted/default/active/modules/100/rtas/ /usr/share/selinux/targeted/default/active/modules/100/rtkit/ /usr/share/selinux/targeted/default/active/modules/100/rwho/ /usr/share/selinux/targeted/default/active/modules/100/samba/ /usr/share/selinux/targeted/default/active/modules/100/sambagui/ /usr/share/selinux/targeted/default/active/modules/100/sandboxX/ /usr/share/selinux/targeted/default/active/modules/100/sanlock/ /usr/share/selinux/targeted/default/active/modules/100/sasl/ /usr/share/selinux/targeted/default/active/modules/100/sbd/ /usr/share/selinux/targeted/default/active/modules/100/sblim/ /usr/share/selinux/targeted/default/active/modules/100/screen/ /usr/sha� x�������������x����� X M }%8 ��������@} zb �$ j ���������������� zb yb {b � > 3.1.7-7 Warren Togami <wtogami@redhat.com> 3.1.7-6 Warren Togami <wtogami@redhat.com> 3.1.7-5 Warren Togami <wtogami@redhat.com> Warren Togami <wtogami@redhat.com> - 3.1.7-4 Warren Togami <wtogami@redhat.com> - 3.1.7-2 Warren Togami <wtogami@redhat.com> - 3.1.7-1 Warren Togami <wtogami@redhat.com> - 3.1.4-1 Warren Togami <wtogami@redhat.com> - 3.1.3-5 Jesse Keating <jkeating@redhat.com> - 3.1.3-3.1 Florian La Roche <laroche@redhat.com> - 3.1.3-3 Warren Togami <wtogami@redhat.com> - 3.1.3-2 Warren Togami <wtogami@redhat.com> - 3.1.3-1 Warren Togami <wtogami@redhat.com> - 3.1.2-1 Warren Togami <wtogami@redhat.com> - 3.0.5-4 Warren Togami <wtogami@redhat.com> - 3.1.1-1 Jesse Keating <jkeating@redhat.com> - 3.1.0-5 Jesse Keating <jkeating@redhat.com> - 3.1.0-5 Warren Togami <wtogami@redhat.com> - 3.1.0-5 Jesse Keating <jkeating@redhat.com> Warren Togami <wtogami@redhat.com> - 3.1.0-3 Warren Togami <wtogami@redhat.com> - 3.1.0-2 Warren Togami <wtogami@redhat.com> - 3.1.0-1 Warren Togami <wtogami@redhat.com> - 3.1.0-0.rc2 Warren Togami <wtogami@redhat.com> - 3.1.0-0.rc1 Warren Togami <wtogami@redhat.com> - 3.1.0-0.pre4 Warren Togami <wtogami@redhat.com> - 3.0.4-1 Warren Togami <wtogami@redhat.com> - 3.0.3-4 Warren Togami <wtogami@redhat.com> - 3.0.3-3 Warren Togami <wtogami@redhat.com> - 3.0.3-0.r164513 Warren Togami <wtogami@redhat.com> - 3.0.2-9 Ville Skyttä <ville.skytta@iki.fi> - 3.0.2-8 Warren Togami <wtogami@redhat.com> 3.0.2-7 Warren Togami <wtogami@redhat.com> 3.0.2-6 Florian La Roche <laroche@redhat.com> Joe Orton <jorton@redhat.com> 3.0.2-4 Warren Togami <wtogami@redhat.com> - 3.0.2-3 Warren Togami <wtogami@redhat.com> - 3.0.2-2 Warren Togami <wtogami@redhat.com> - 3.0.2-1 Warren Togami <wtogami@redhat.com> - 3.0.1-1 Warren Togami <wtogami@redhat.com> - 3.0.0-3 Warren Togami <wtogami@redhat.com> - 3.0.0-2 Warren Togami <wtogami@redhat.com> - 3.0.0-1 Warren Togami <wtogami@redhat.com> - 3.0-10 Warren Togami <wtogami@redhat.com> - 3.0-9.rc4 Warren Togami <wtogami@redhat.com> - 3.0-8.rc3 Warren Togami <wtogami@redhat.com> - 3.0-7.rc2 Warren Togami <wtogami@redhat.com> - 3.0-6.rc1 Warren Togami <wtogami@redhat.com> - 3.0-5.rc1 Warren Togami <wtogami@redhat.com> - 3.0-3.pre4 Warren Togami <wtogami@redhat.com> - 3.0-3.pre2 Warren Togami <wtogami@redhat.com> - 3.0-2.pre1 Elliot Lee <sopwith@redhat.com> Warren Togami <wtogami@redhat.com> - 3.0-svn20040530 Warren Togami <wtogami@redhat.com> - 3.0-svn20040524 Ville Skyttä <ville.skytta@iki.fi> - 2.63-8 Elliot Lee <sopwith@redhat.com> Warren Togami <wtogami@redhat.com> 2.63-6 Warren Togami <wtogami@redhat.com> 2.63-3 Warren Togami <wtogami@redhat.com> 2.63-2 Warren Togami <wtogami@redhat.com> 2.62-3 Warren Togami <wtogami@redhat.com> 2.62-2 Dan Walsh <dwalsh@redhat.com> 2.61-2 Chip Turner <cturner@redhat.com> 2.61-1 Chip Turner <cturner@redhat.com> 2.60-2 Chip Turner <cturner@redhat.com> 2.55-3 Elliot Lee <sopwith@redhat.com> Chip Turner <cturner@redhat.com> 2.55-1 Chip Turner <cturner@redhat.com> Florian La Roche <Florian.LaRoche@redhat.de> Chip Turner <cturner@redhat.com> 2.53-5 Chip Turner <cturner@redhat.com> 2.53-4.8.x Chip Turner <cturner@redhat.com> 2.50-3.8.x Chip Turner <cturner@redhat.com> 2.50-2.8.x Elliot Lee <sopwith@redhat.com> Chip Turner <cturner@redhat.com> Bill Nottingham <notting@redhat.com> Bill Nottingham <notting@redhat.com> Chip Turner <cturner@redhat.com> Florian La Roche <Florian.LaRoche@redhat.de> Bill Nottingham <notting@redhat.com> Chip Turner <cturner@redhat.com> Chip Turner <cturner@redhat.com> Chip Turner <cturner@redhat.com> Chip Turner <cturner@redhat.com> Jeff Johnson <jbj@redhat.com> 2.43-10 Chip Turner <cturner@redhat.com> Bill Nottingham <notting@redhat.com> 2.43-7 Tim Powers <timp@redhat.com> 2.43-6 Tim Powers <timp@redhat.com> Chip Turner <cturner@redhat.com> Chip Turner <cturner@redhat.com> Chip Turner <cturner@redhat.com> Chip Turner <cturner@redhat.com> Chip Turner <cturner@redhat.com> Theo Van Dinter <felicity@kluge.net> Craig Hughes <craig@hughes-family.org> Theo Van Dinter <felicity@kluge.net> Craig Hu� x������������������ X N |'8 ((������������P" �$ @ ���������������� P" O" Q" � ckd/ /usr/share/selinux/targeted/default/active/modules/100/consolekit/ /usr/share/selinux/targeted/default/active/modules/100/couchdb/ /usr/share/selinux/targeted/default/active/modules/100/courier/ /usr/share/selinux/targeted/default/active/modules/100/cpucontrol/ /usr/share/selinux/targeted/default/active/modules/100/cpufreqselector/ /usr/share/selinux/targeted/default/active/modules/100/cpuplug/ /usr/share/selinux/targeted/default/active/modules/100/cron/ /usr/share/selinux/targeted/default/active/modules/100/ctdb/ /usr/share/selinux/targeted/default/active/modules/100/cups/ /usr/share/selinux/targeted/default/active/modules/100/cvs/ /usr/share/selinux/targeted/default/active/modules/100/cyphesis/ /usr/share/selinux/targeted/default/active/modules/100/cyrus/ /usr/share/selinux/targeted/default/active/modules/100/daemontools/ /usr/share/selinux/targeted/default/active/modules/100/dbadm/ /usr/share/selinux/targeted/default/active/modules/100/dbskk/ /usr/share/selinux/targeted/default/active/modules/100/dbus/ /usr/share/selinux/targeted/default/active/modules/100/dcc/ /usr/share/selinux/targeted/default/active/modules/100/ddclient/ /usr/share/selinux/targeted/default/active/modules/100/denyhosts/ /usr/share/selinux/targeted/default/active/modules/100/devicekit/ /usr/share/selinux/targeted/default/active/modules/100/dhcp/ /usr/share/selinux/targeted/default/active/modules/100/dictd/ /usr/share/selinux/targeted/default/active/modules/100/dirsrv-admin/ /usr/share/selinux/targeted/default/active/modules/100/dirsrv/ /usr/share/selinux/targeted/default/active/modules/100/dmesg/ /usr/share/selinux/targeted/default/active/modules/100/dmidecode/ /usr/share/selinux/targeted/default/active/modules/100/dnsmasq/ /usr/share/selinux/targeted/default/active/modules/100/dnssec/ /usr/share/selinux/targeted/default/active/modules/100/dovecot/ /usr/share/selinux/targeted/default/active/modules/100/drbd/ /usr/share/selinux/targeted/default/active/modules/100/dspam/ /usr/share/selinux/targeted/default/active/modules/100/entropyd/ /usr/share/selinux/targeted/default/active/modules/100/exim/ /usr/share/selinux/targeted/default/active/modules/100/fail2ban/ /usr/share/selinux/targeted/default/active/modules/100/fcoe/ /usr/share/selinux/targeted/default/active/modules/100/fetchmail/ /usr/share/selinux/targeted/default/active/modules/100/finger/ /usr/share/selinux/targeted/default/active/modules/100/firewalld/ /usr/share/selinux/targeted/default/active/modules/100/firewallgui/ /usr/share/selinux/targeted/default/active/modules/100/firstboot/ /usr/share/selinux/targeted/default/active/modules/100/fprintd/ /usr/share/selinux/targeted/default/active/modules/100/freeipmi/ /usr/share/selinux/targeted/default/active/modules/100/freqset/ /usr/share/selinux/targeted/default/active/modules/100/fstools/ /usr/share/selinux/targeted/default/active/modules/100/ftp/ /usr/share/selinux/targeted/default/active/modules/100/fwupd/ /usr/share/selinux/targeted/default/active/modules/100/games/ /usr/share/selinux/targeted/default/active/modules/100/gdomap/ /usr/share/selinux/targeted/default/active/modules/100/geoclue/ /usr/share/selinux/targeted/default/active/modules/100/getty/ /usr/share/selinux/targeted/default/active/modules/100/git/ /usr/share/selinux/targeted/default/active/modules/100/gitosis/ /usr/share/selinux/targeted/default/active/modules/100/glance/ /usr/share/selinux/targeted/default/active/modules/100/gnome/ /usr/share/selinux/targeted/default/active/modules/100/gpg/ /usr/share/selinux/targeted/default/active/modules/100/gpm/ /usr/share/selinux/targeted/default/active/modules/100/gpsd/ /usr/share/selinux/targeted/default/active/modules/100/gssproxy/ /usr/share/selinux/targeted/default/active/modules/100/guest/ /usr/share/selinux/targeted/default/active/modules/100/hddtemp/ /usr/share/selinux/targeted/default/active/modules/100/hostapd/ /usr/share/selinux/targeted/default/active/modules/100/hostname/ /usr/share/selinux/targeted/default/active/modules/100/hsqldb/ /usr/share/selinux/targeted/default/active/modules/100/hwloc/ /usr� x�������������hx���� X O �%8 �P������p�������-Q �$ = ���������������� -Q .Q � G 8 ? T d � � � � � = � � � � � � � � � � � � � G � S � z � � � � �
� � �
� � 0 T l �
�
�
( � 8 � 9 L :
~ G 0 H H I ` X h Y p \ � ] � ^ � b Z d � e � f � l � t � u v ( w � x � y � � � � � P d h � �
� � � $ , g 0 h 4 C perl-File-Path 2.15 2.el8 Create or remove directory trees This module provides a convenient way to create directories of arbitrary
depth and to delete an entire directory subtree from the file system. ]��build.cloudlinux.com ��CloudLinux CloudLinux GPL+ or Artistic CloudLinux Packaging Team <packager@cloudlinux.com> Unspecified http://search.cpan.org/dist/File-Path/ linux noarch )� & ��A큤����A큤 ]��Y}EGY}D�]��]��Y}D� a58346eb873090c1ded8eb7a31e8bda156734ce1f541a42f925e5e3453852a4a 97668dc1ee28b02e0cfe024a6631c00344dbb0531a4e4dd38bacec6df6dc4e9a 69925ea5cea6baf083768568f6c599138701e497b30ffd97c2cc5db92076ffcf 030623e97c66af6110380d50b3bda050713e3eaea58a4b39ee6641a4b6920ed6 root root root root root root root root root root root root perl-File-Path-2.15-2.el8.src.rpm ��������������������perl(File::Path) perl-File-Path @ @ @ @ @ @ @
perl(:MODULE_COMPAT_5.26.3) perl(:VERSION) perl(Carp) perl(Cwd) perl(Exporter) perl(File::Basename) perl(File::Spec) perl(strict) perl(vars) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 5.5.0 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.2 Z|;�Y�Yy�Y9<@Y7�Y5G�Y2��Y0�X���W7@V�=@V��U��U���Ux&�Up=�Un�@T H�T�S�v�S���R q@Q��Q��@Q��QLG�Fedora Release Engineering <releng@fedoraproject.org> - 2.15-2 Petr Pisar <ppisar@redhat.com> - 2.15-1 Fedora Release Engineering <releng@fedoraproject.org> - 2.14-2 Petr Pisar <ppisar@redhat.com> - 2.14-1 Jitka Plesnikova <jplesnik@redhat.com> - 2.13-2 Petr Pisar <ppisar@redhat.com> - 2.13-1 Jitka Plesnikova <jplesnik@redhat.com> - 2.12-393 Petr Pisar <ppisar@redhat.com> - 2.12-367 Fedora Release Engineering <releng@fedoraproject.org> - 2.12-366 Jitka Plesnikova <jplesnik@redhat.com> - 2.12-365 Fedora Release Engineering <releng@fedoraproject.org> - 2.12-2 Petr Pisar <ppisar@redhat.com> - 2.12-1 Petr Pisar <ppisar@redhat.com> - 2.11-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.09-347 Jitka Plesnikova <jplesnik@redhat.com> - 2.09-346 Jitka Plesnikova <jplesnik@redhat.com> - 2.09-345 Jitka Plesnikova <jplesnik@redhat.com> - 2.09-312 Jitka Plesnikova <jplesnik@redhat.com> - 2.09-311 Jitka Plesnikova <jplesnik@redhat.com> - 2.09-310 Jitka Plesnikova <jplesnik@redhat.com> - 2.09-294 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.09-293 Jitka Plesnikova <jplesnik@redhat.com> - 2.09-292 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.09-291 Petr Pisar <ppisar@redhat.com> - 2.09-290 Petr Pisar <ppisar@redhat.com> - 2.09-2 Petr Pisar <ppisar@redhat.com> 2.09-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 2.15 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 2.14 bump - Perl 5.26 re-rebuild of bootstrapped packages - 2.13 bump - Perl 5.26 rebuild � x��������������g���� X P X'8 �r������x{���," �$ < ���������������� ," +" -" � ract with all user apps
- Add rules to allow firstboot to run on machines with the unconfined.pp module removed - Allow systemd_logind to send dbus messages with users
- allow accountsd to read wtmp file
- Allow dhcpd to get and set capabilities - Fix oracledb_port definition
- Allow mount to mounton the selinux file system
- Allow users to list /var directories - systemd fixes - Add initial policy for abrt_dump_oops_t
- xtables-multi wants to getattr of the proc fs
- Smoltclient is connecting to abrt
- Dontaudit leaked file descriptors to postdrop
- Allow abrt_dump_oops to look at kernel sysctls
- Abrt_dump_oops_t reads kernel ring buffer
- Allow mysqld to request the kernel to load modules
- systemd-login needs fowner
- Allow postfix_cleanup_t to searh maildrop - Initial systemd_logind policy
- Add policy for systemd_logger and additional proivs for systemd_logind
- More fixes for systemd policies - Allow setsched for virsh
- Systemd needs to impersonate cups, which means it needs to create tcp_sockets in cups_t domain, as well as manage spool directories
- iptables: the various /sbin/ip6?tables.* are now symlinks for
/sbin/xtables-multi - A lot of users are running yum -y update while in /root which is causing ldconfig to list the contents, adding dontaudit
- Allow colord to interact with the users through the tmpfs file system
- Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able to create maildrop_t files
- Add label for /var/log/mcelog
- Allow asterisk to read /dev/random if it uses TLS
- Allow colord to read ini files which are labeled as bin_t
- Allow dirsrvadmin sys_resource and setrlimit to use ulimit
- Systemd needs to be able to create sock_files for every label in /var/run directory, cupsd being the first.
- Also lists /var and /var/spool directories
- Add openl2tpd to l2tpd policy
- qpidd is reading the sysfs file - Change usbmuxd_t to dontaudit attempts to read chr_file
- Add mysld_safe_exec_t for libra domains to be able to start private mysql domains
- Allow pppd to search /var/lock dir
- Add rhsmcertd policy - Update to upstream - More fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git - Fix spec file to not report Verify errors - Add dspam policy
- Add lldpad policy
- dovecot auth wants to search statfs #713555
- Allow systemd passwd apps to read init fifo_file
- Allow prelink to use inherited terminals
- Run cherokee in the httpd_t domain
- Allow mcs constraints on node connections
- Implement pyicqt policy
- Fixes for zarafa policy
- Allow cobblerd to send syslog messages - Add policy.26 to the payload
- Remove olpc stuff
- Remove policygentool - Fixes for zabbix
- init script needs to be able to manage sanlock_var_run_...
- Allow sandlock and wdmd to create /var/run directories...
- mixclip.so has been compiled correctly
- Fix passenger policy module name - Add mailscanner policy from dgrift
- Allow chrome to optionally be transitioned to
- Zabbix needs these rules when starting the zabbix_server_mysql
- Implement a type for freedesktop openicc standard (~/.local/share/icc)
- Allow system_dbusd_t to read inherited icc_data_home_t files.
- Allow colord_t to read icc_data_home_t content. #706975
- Label stuff under /usr/lib/debug as if it was labeled under / - Fixes for sanlock policy
- Fixes for colord policy
- Other fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log - Add rhev policy module to modules-targeted.conf - Lot of fixes
* http://git.fedorahosted.org/git/?p=selinux-policy.git;a=log - Allow logrotate to execute systemctl
- Allow nsplugin_t to getattr on gpmctl
- Fix dev_getattr_all_chr_files() interface
- Allow shorewall to use inherited terms
- Allow userhelper to getattr all chr_file devices
- sandbox domains should be able to getattr and dontaudit search of sysctl_kernel_t
- Fix labeling for ABRT Retrace Server - Dontaudit sys_module for ifconfig
- Make telepathy and gkeyringd daemon working with confined users
- colord wants to read files in users homedir
- Remote login should be creating user_tmp� x�������������XW���� X Q �%8 ��������������� �$ ` ���������������� � � 0 ç ��I[�|�ն#sq� 8�oU_x�1~A��=�P�ZGy��D� �;����z>���m� �O}�.�@Mϔ^��]X,�?�o)/if ��s �D~���Ay4d4bb42f0a7b41382f591352d0b390aa7a56bc8d d82fbcf29b71e4d78874cd0af4d280829b14183d6cc6c3c54d2272c900831ab0 d�V� �� d�Vucom> - 1.2-8 Tomas Mraz <tmraz@redhat.com> - 1.2-7 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2-6 Marcela Mašláňová <mmaslano@redhat.com> - 1.2-5 Marcela Mašláňová <mmaslano@redhat.com> - 1.2-4 Marcela Maslanova <mmaslano@redhat.com> - 1.2-3 Marcela Maslanova <mmaslano@redhat.com> - 1.2-2 Marcela Maslanova <mmaslano@redhat.com> - 1.2-1 Tomas Mraz <tmraz@redhat.com> - 1.1-3 Marcela Maslanova <mmaslano@redhat.com> - 1.1-2 Marcela Maslanova <mmaslano@redhat.com> - 1.1-1 Marcela Maslanova <mmaslano@redhat.com> - 1.0-6 Marcela Maslanova <mmaslano@redhat.com> - 1.0-5 Marcela Maslanova <mmaslano@redhat.com> - 1.0-4 Marcela Maslanova <mmaslano@redhat.com> - 1.0-3 Marcela Maslanova <mmaslano@redhat.com> - 1.0-2 Marcela Maslanova <mmaslano@redhat.com> - 1.0-1 - Set 'missingok' for /etc/cron.deny to not recreate it on update - Add support for "~" ("random within range")
Resolves: rhbz#1832510 - Use system-auth for PAM authentication
Resolves: rhbz#2005526 - Create PID files even when crond does not fork
Resolves: rhbz#1926300 - Make crond restart on failure
- Resolves: rhbz#1715137 - use role from the current context for system crontabs
- Resolves: rhbz#1708557 - Covscan issues review
- Fix potential memory leaks
- Fix unsafe code
- Resolves: rhbz#1602467 - new upstream release 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix Y2038 problems in cron and anacron (#1445136) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - make failure of creation of the ghost files in /var non-fatal - on some machines the power supply is named ADP0 - query power status directly from kernel - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - the temp file name used by crontab needs to be ignored by crond - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - new upstream release - mark the 0hourly and dailyjobs crontabs as config
- do not add already existing orphan on reload - correct the permissions of the anacron timestamp files - check for NULL pamh on two more places (#1176215) - call PAM only for non-root user or non-system crontabs (#956157)
- bypass the PAM check in crontab for root (#1169175) - refresh user entries when jobs are run - new release 1.4.12
- remove gpl2 license, because it's part of upstream COPYING now - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - unwanted fd could make trouble to SElinux 1075106 - Drop INSTALL from docs, fix rpmlint tabs vs spaces warning. - some jobs are not executed because not all environment variables are set 995590
- cronie's systemd script use "KillMode=process" 919290 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - scriptlets are not created correctly if systemd is not in BR 986698
- remove sub-package sysvinit, which is not needed anymore
- update license, anacron is under GPLv2+ - new release 1.4.11 (contains previous bug fixes from 1.4.10-5) - add support for RANDOM_DELAY - delaying job startups
- pass some environment variables to processes (LANG, etc.) (#969761)
- do not use putenv() with string literals (#971516) - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - change configuration files to 644
- change 6755 to 4755 for crontab binary - New release 1.4.10 - New release 1.4.9 - Scriptlets replaced with new systemd macros (#850070) - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Rebuilt for https://fedoraproject.� x��������������F���� X R )'8 �� �c �! �$ m ���������������� �! �! �! � share/joomla
- /var/lib/containers should be labeled as openshift content for now
- Allow docker domains to talk to the login programs, to allow a process to login into the container - Add install_t for anaconda - Allow init_t to stream connect to ipsec
- Add /usr/lib/systemd/systemd-networkd policy
- Add sysnet_manage_config_dirs()
- Add support for /var/run/systemd/network and labeled it as net_conf_t
- Allow unpriv SELinux users to dbus chat with firewalld
- Add lvm_write_metadata()
- Label /etc/yum.reposd dir as system_conf_t. Should be safe because system_conf_t is base_ro_file_type
- Add support for /dev/vmcp and /dev/sclp
- Add docker_connect_any boolean
- Fix zabbix policy
- Allow zabbix to send system log msgs
- Allow pegasus_openlmi_storage_t to write lvm metadata
- Updated pcp_bind_all_unreserved_ports
- Allow numad to write scan_sleep_millisecs
- Turn on entropyd_use_audio boolean by default
- Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf.
- Allow lscpu running as rhsmcertd_t to read /proc/sysinfo - Allow numad to write scan_sleep_millisecs
- Turn on entropyd_use_audio boolean by default
- Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf.
- Allow lscpu running as rhsmcertd_t to read /proc/sysinfo
- Allow numad to write scan_sleep_millisecs
- Turn on entropyd_use_audio boolean by default
- Allow cgred to read /etc/cgconfig.conf because it contains templates used together with rules from /etc/cgrules.conf.
- Allow lscpu running as rhsmcertd_t to read /proc/sysinfo
- Fix label on irclogs in the homedir - Modify xdm_write_home to allow create files/links in /root with xdm_home_t
- Add more fixes for https://fedoraproject.org/wiki/Changes/XorgWithoutRootRights
- Add xserver_dbus_chat() interface
- Add sysnet_filetrans_named_content_ifconfig() interface
- Change userdom_use_user_inherited_ttys to userdom_use_user_ttys for systemd-tty-ask
- Turn on cron_userdomain_transition by default for now. Until we get a fix for #1063503
- Allow lscpu running as rhsmcertd_t to read sysinfo
- Allow virt domains to read network state
- Added pcp rules
- Allow ctdbd to connect own ports
- Fix samba_export_all_rw booleanto cover also non security dirs
- Allow swift to exec rpm in swift_t and allow to create tmp files/dirs
- Allow neutron to create /run/netns with correct labeling
- Allow to run ip cmd in neutron_t domain
- Allow rpm_script_t to dbus chat also with systemd-located
- Fix ipa_stream_connect_otpd() - Allow block_suspend cap2 for systemd-logind and rw dri device
- Add labeling for /usr/libexec/nm-libreswan-service
- Allow locallogin to rw xdm key to make Virtual Terminal login providing smartcard pin working
- Add xserver_rw_xdm_keys()
- Allow rpm_script_t to dbus chat also with systemd-located
- Fix ipa_stream_connect_otpd()
- update lpd_manage_spool() interface
- Allow krb5kdc to stream connect to ipa-otpd
- Add ipa_stream_connect_otpd() interface
- Allow vpnc to unlink NM pids
- Add networkmanager_delete_pid_files()
- Allow munin plugins to access unconfined plugins
- update abrt_filetrans_named_content to cover /var/spool/debug
- Label /var/spool/debug as abrt_var_cache_t
- Allow rhsmcertd to connect to squid port
- Make docker_transition_unconfined as optional boolean
- Allow certmonger to list home dirs - Make docker as permissive domain - Allow bumblebeed to send signal to insmod
- Dontaudit attempts by crond_t net_admin caused by journald
- Allow the docker daemon to mounton tty_device_t
- Add addtional snapper fixes to allo relabel file_t
- Allow setattr for all mountpoints
- Allow snapperd to write all dirs
- Add support for /etc/sysconfig/snapper
- Allow mozilla_plugin to getsession
- Add labeling for thttpd
- Allow sosreport to execute grub2-probe
- Allow NM to manage hostname config file
- Allow systemd_timedated_t to dbus chat with rpm_script_t
- Allow lsmd plugins to connect to http/ssh/http_cache ports by default
- Add lsmd_plugin_connect_any� x�������������H6���� X S l'8 ��������@N���@" �$ P ���������������� @" ?" A" � ned off by default
* httpd_can_network_relay
* httpd_can_network_connect_db - Add ghost for policy.20 - Update to upstream
- Turn off boolean allow_execstack - Change setrans-mls to use new libsetrans
- Add default_context rule for xdm - Change Requires to PreReg for requiring of policycoreutils on install - New upstream release Add xdm policy Update from upstream Update from upstream Update from upstream - Also trigger to rebuild policy for versions up to 2.0.7. - No longer installing policy.20 file, anaconda handles the building of the app. - Fixes for dovecot and saslauthd - Cleanup pegasus and named
- Fix spec file
- Fix up passwd changing applications -Update to latest from upstream - Add rules for pegasus and avahi - Start building MLS Policy - Update to upstream - Turn on bash - Initial version /bin/sh /bin/sh /bin/sh cachefilesd-selinux mod_fcgid-selinux selinux-policy-targeted-sources /bin/sh � x��������������%���� X T �'8 �X�������@����Q �$ ] ���������������� �Q �Q �Q � 129d2de7b 09b6cee3e6eabad268c11332b848a5b1 c480841ca4ae5a614aac50847055430c 51817c7cab78c07526203ebf6d540772 614b8da12aba730597661490d081b47c d4ca6e0339278ba637e0c422673e9ba8 29cdc4e2fbb2a235e6c8ea2cb81d15eb 87ec7f579377af9f1f4b9d026bd78d14 6cf9a7910e812f3f31c38c8a9314e393 3b55d07a8d8ff0f10a9deea78bdcf742 e175161f6722ec333c77f54c08228d1e e15c700d9cede4efbdae1477dcebea2f 7664483a4e63d4aa5ff55aa20683119a 3121acaa04b0bef9a9a166e270592c32 410216142a2e66cf9ededf798c4df83b 57a5ff0cfdb1f5a77611f3285fd46cd4 14d4535c14441fe08e635cc2d518a21b bc9170a65c4c278eb86956543356d405 f2d1060496bf80c7953843eccee0d936 95c02ea106f36b626696676c0a46214d 4fa65594b504f6d0fb610be1f5d73374 79298ee74cb240af054c68cae4b12dbe b9edfef5b2afbfd30146a2427432f09d c980096ad9ddd92c97f2fd4ec4fabaaa 76a5a8461a1638f0d17953e94a67e06c 5f3665a4ec640de37e0be6ea7564571f b518e692c8b8a4ae85a969b733f2c881 6e8b24a4211d2af7548f4d40fe3b1f93 beaffeac6717a6ab735da58d47f5b1cb efee9c4f612f0010b07e192db21853ad 17e37792a465cc0f18959f47b2fc1ea4 7e7496225fc64f7eb34aad998efcc648 e471a162aa5f77786006b6ed1c4a23b9 af2709849269c4157aaa47d64bfd5aaa 992c8ac57825fa021de7161def2bd72e 409efaccda91b5da880f4a53ef93deb7 3a03e3afcb4583a006b398a00876202a 7f1d5a48e82f1123e201190581ec0f78 d135a7656b6cc9cf958bed8f827a3a49 ba56292403abaca92d201669325ea654 964644384e1fa09b3cde7b6f84f8efed 2d23333ce1ab41ed9ff9a4dc7fd35dac bba01950dbea5647521e286853f53ea8 46dbbe15eb0adcb691a6aa484adb8b8f fd2950892712d45f41c422fb7e62e94c c10adecd0b710d2e8955e669ac0f1cf9 9ac232538010f2d256c68c231daef9ac 590aa91bd1bcc1b75fbc9e842b4aed55 468e259030064a3f033086454bb5705a a0b0892669a22427f55e650779a00278 cee0e3ba8ca8a1be1244312e20b5d114 7b15659d0c761ea98d5330b505197c34 3dcf1a1d55e9d00e01fd1529dab4a1d4 f8493478e4bbd665a673716bc8372b67 66355ebd55c8321f3c7e5b199bbe6f64 e64dc0800257c393202f83be541993cf 342c2eec97f573b39479ee9b40524a2c 2d8d21fbfdb2f5d744264eb7a8893ec0 0a05f974af057ffdf077763987af3569 d085c68b4659d2ab327b14c7d0d54bd3 aad527eccb47069fc9b171b8b83f2aa4 aad527eccb47069fc9b171b8b83f2aa4 045001029677a283246d0631c0319a1a 25b1a19ecca7b7b27cb216d2ebe9f789 62ea07a924a4728f3073ee8208ed9034 9b041be16507e1adab721d33466cd27d 5e36d1cbb23c08521c500e933e4ec317 7343ff3a6cd1d5c5a96bbfd18f8fe5f7 a812404b9d4de9241c363709610ec1c6 31bcee6d4fecc974e153ae0cf6648ca3 a15bea33ea37314543b8439ec4f24f38 b62314403a030bdd308dca67d5b0a73b 607bfe26047af66911cfb22df74a5500 83469d2a7a2258aa6ceef00b0ba2f6f6 f568d70e938c9fb0b6b3d2c14d515d20 2dc4f36d9ed2ec8415ebc79c6a7f750f c6ec4bee67fdfe70ac63581e20f9d884 0d4643f956597e40b4913274da33568e 7e784ace2459d9f18bb367d70ee7dc22 a16a6d606773cdf4846271c6c49fb7d8 7a4214a0423a4dd191b857f642d04e78 39143010d1161b7b0ea95e112d70133d 6db22fdd2ee4312f4419af6f7602d57b 857653a8c745b8ffc9f0390d034589c2 b5f7cf824859ef23b9879aee35186818 63f31f128e022a26a391d03e6a84b0f2 1a7a14028616590f13cb646b3bf67f6f 8adc4cd318819e1702fd17e079e54199 b1a982d345e392d22173d25caf75a08b c9209228cd2b303406db4e4e6cdf26e0 0c55bc6e095ec92f8f631878ece3c81c 07ef7ff32ad78dd9ff2ea3f3ec56f13e 6e5e58bef7cdb38a4f45ac599186c31c 702f37754eef95dc0f3512554550e6b7 b732f995c7d0350fc3830404d1115783 2fe60da4e7c5b863160ec90200b93f66 98146c9fde993409d3d4ce3dbaa9e09b 2572aba56f24cb24856cc1cd325fea24 d5397a7c64d458c9027d9eb0406a2b58 9f9deb928a9aea6c574bc6bfdd6d64bf 4d6a4e0d2f52d8cfdf5eeb70fde0c909 afcdaf2ebdc5098b42034d92b540b600 c052f73d39f0c782d607d130b50f266c 76927e457b6f0cb39d81f7ca68f3c2cd 4649125fd1f18a09a3b0d80ec68ed7bf 18887e0c26b5d37f4a419b7204ad1ff0 ee47104738d157ad9e1f4763b8669b53 cfb1d77a167e48adfd89df34c4bed901 a26e9b697a572060f36e27c82b2a46e0 f67ad73771e8032eda6a9e1fcd7f6b6b edf2ef00f531dd0eed6aeca5232a82d7 54142c4dd57971819cf3fd16aba64b7e f29c2fa15170c84e1ff907d5a75f172c a2a0f331c54bf8442469b18069ea1020 8c28230a00ba2da7a44f52d18de8369e 29f69d66562a28a1df008b762a5bd8be f8ca620d918fa44307526ad6edd370f9 d6b186244a7e85046ed7c7fcc81c1928 4461d5e352db0148df933472d3365158 f6c3c0cf7dc2aee37726f95d4ca88b63 9284f97a01f5ae04445d28a692ceec76 47814004b20ddce5545ae56f839aa7a8 2d0f983c7735f5e2d62aa9ef1d950152 3a4a0ecfeaa4aaf86e71e913d6fccd� x�������������8���� X U '8 ���������q�������! �$ I ���������������� �! �! �! � erd lib files. Allow ganesha read network sysctls
- Add few allow rules to ganesha module
- Allow condor_master_t to read sysctls.
- Add dac_override cap to ctdbd_t domain
- Add ganesha_use_fusefs boolean.
- Allow httpd_t reading kerberos kdc config files
- Allow tomcat_t domain connect to ibm_dt_2 tcp port.
- Allow stream connect to initrc_t domains
- Add pki_exec_common_files() interface
- Allow dnsmasq_t domain to read systemd-resolved pid files.
- Allow tomcat domain name_bind on tcp bctp_port_t
- Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
- Allow condor_master_t write to sysctl_net_t
- Allow nagios check disk plugin read /sys/kernel/config/
- Allow pcp_pmie_t domain execute systemctl binary
- Allow nagios to connect to stream sockets. Allow nagios start httpd via systemctl
- xdm_t should view kernel keys
- Hide broken symptoms when machine is configured with network bounding.
- Label 8750 tcp/udp port as dey_keyneg_port_t
- Label tcp/udp port 1792 as ibm_dt_2_port_t
- Add interface fs_read_configfs_dirs()
- Add interface fs_read_configfs_files()
- Fix systemd_resolved_read_pid interface
- Add interface systemd_resolved_read_pid()
- Allow sshd_net_t domain read/write into crypto devices
- Label 8999 tcp/udp as bctp_port_t - Dontaudit net_admin capability for domains postfix_master_t and postfix_qmgr_t
- Add interface pki_manage_common_files()
- Allow rngd domain read sysfs_t
- Allow tomcat_t domain to manage pki_common_t files and dirs
- Merge pull request #3 from rhatdan/devicekit
- Merge pull request #12 from lslebodn/sssd_sockets_fc
- Allow certmonger reads httpd_config_t files
- Allow keepalived_t domain creating netlink_netfilter_socket.
- Use stricter fc rules for sssd sockets in /var/run
- Allow tomcat domain read rpm_var_lib_t files Allow tomcat domain exec rpm_exec_t files Allow tomcat domain name connect on oracle_port_t Allow tomcat domain read cobbler_var_lib_t files.
- Allow sssd_t domain creating sock files labeled as sssd_var_run_t in /var/run/
- Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
- ejabberd small fixes
- Update targetd policy to accommodate changes in the service
- Allow tomcat_domain connect to * postgresql_port_t * amqp_port_t Allow tomcat_domain read network sysctls
- Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
- Dontaudit net_admin capability for useradd_t domain
- Allow systemd_localed_t and systemd_timedated_t create files in /etc with label locate_t BZ(1443723)
- Make able deply overcloud via neutron_t to label nsfs as fs_t
- Add fs_manage_configfs_lnk_files() interface - Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
- ejabberd small fixes
- Update targetd policy to accommodate changes in the service
- Allow tomcat_domain connect to * postgresql_port_t * amqp_port_t Allow tomcat_domain read network sysctls
- Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
- Allow glusterd_t domain start ganesha service
- Made few cosmetic changes in sssd SELinux module
- Merge pull request #11 from lslebodn/sssd_kcm
- Update virt_rw_stream_sockets_svirt() interface to allow confined users set socket options.
- Allow keepalived_t domain read usermodehelper_t
- Allow radius domain stream connec to postgresql
- Merge pull request #8 from bowlofeggs/142-rawhide
- Add fs_manage_configfs_lnk_files() interface - auth_use_nsswitch can call only domain not attribute
- Dontaudit net_admin cap for winbind_t
- Allow tlp_t domain to stream connect to system bus
- Allow tomcat_t domain read pki_common_t files
- Add interface pki_read_common_files()
- Fix broken cermonger module
- Fix broken apache module
- Allow hypervkvp_t domain execute hostname
- Dontaudit sssd_selinux_manager_t use of net_admin capability
- Allow tomcat_t stream connect to pki_common_t
- Dontaudit xguest_t's attempts to li� x������������������ X V 1&8 ����������������Q �$ ���������������� �Q �Q �Q � Kasal <skasal@redhat.com> - 4:5.10.0-78 arcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-77 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-76 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4:5.10.0-75 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-73 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-72 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-71 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-70 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-69 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-68 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-67 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-65 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-64 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-63 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-62 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60 Robert Scheck <robert@fedoraproject.org> - 4:5.10.0-59 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-58 Dennis Gilmore <dennis@ausil.us> - 4:5.10.0-57 Dennis Gilmore <dennis@ausil.us> - 4:5.10.0-56 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-55 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-53 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51 Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-50 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-49 Lubomir Rintel <lkundrak@v3.sk> - 4:5.10.0-48 Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-45 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-43.fc10 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-42.fc10 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-41.fc10 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-40.fc10 Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-36 Stepan Kasal <skasal@redhat.com> 4:5.10.0-35 Stepan Kasal <skasal@redhat.com> 4:5.10.0-34 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33 Stepan Kasal <skasal@redhat.com> 4:5.10.0-32 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-28 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-27 Stepan Kasal <skasal@redhat.com> 4:5.10.0-26 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-25 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-24 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-23 Marcela Maslanova <mmaslano@redhat.com> Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-18 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-17 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-16 Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-15 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-14 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-13 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-11 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-10 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-9 Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-8 Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7 Fedora Release Engineering <rel-eng@fedoraproject.org> - 4:5.10.0-6 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-3 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-2 Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-1 Robin Norwood <rnorwood@redhat.com> - 4:5.10.0_RC2-0.1 - Add definition of OPTIMIZE to .ph files, if optimizing is used
(bug#2152012) - Fix a memory leak when com� x�������������(����� X W M&8 ��������@[ c �$ ���������������� c c c � root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root ncurses-6.1-10.20180224.el8.src.rpm ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������libform.so.5()(64bit) libformw.so.5()(64bit) libmenu.so.5()(64bit) libmenuw.so.5()(64bit) libncurses++.so.5()(64bit) libncurses++w.so.5()(64bit) libncurses.so.5()(64bit) libncursesw.so.5()(64bit) libpanel.so.5()(64bit) libpanelw.so.5()(64bit) libtic.so.5()(64bit) libtinfo.so.5()(64bit) ncurses-compat-libs ncurses-compat-libs(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2.5)(64bit) libform.so.5()(64bit) libformw.so.5()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libm.so.6()(64bit) libmenu.so.5()(64bit) libmenuw.so.5()(64bit) libncurses.so.5()(64bit) libncursesw.so.5()(64bit) libpanel.so.5()(64bit) libpanelw.so.5()(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libstdc++.so.6(GLIBCXX_3.4.9)(64bit) libtinfo.so.5()(64bit) ncurses-base rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 6.1-10.20180224.el8 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d�h�`��@`��@\? �\4��[[ @Z���Z|;�Zp^@Zo �Z �Y�X@Y�@Y}�@Yx�@Y,
@Y(�X��@X��@W�@W�@V�=@V�_�V��Ŭ�U�a@UD�@T�s@T�!�T�@S�@S� @S���S2�@Q��Q��Qk�QG�Q @P�@P{��P H@O2c�O �N$ @M�@M��@Mn1@MQ0@M
�L�L=��Kie@K]��KV�@KTM@Jj�I�2�I�l@H�H� @Hr@H:�@G�.@G��G��@G�N�G��G ��G�F�v�F�G�Fo�@E�Eّ@E�V�E�m�E�U�E��@E}H@En�Ej�@D��@D��D�{�D��@D�L�D�C�@C�C�Q@C� @C� @C��C��@C��@C�C�C��@C��C��C��C}�@C=(�B�Bo~�B*�A��Aw��A4h@A~@A�@�7@@�@@�@@�@@��@��@�{@@�(�@Dw@@=�@<�@@,�@@(�@��?m��?hL�?`c�?`c�?Cb�?Cb�?7�@>�@>��@>̻�>BN@>:e@>.��>.��=�?�=@<��<��@<z'@<v2�<v2�<t�@<t�@<t�@<i�<i�<Y1�<�@;���;X @;5�@;-�@:ٍ@:��@:��@:��:b�@:Pq@:6@: �:W@9�@9��@9��@9m�@9l]�9;�@97��8��8��@8�4@8��8�m�8�3@8�a@8{@8s2@8`�@8,@8!u@7��7��@7� �7�}�7�}�7���7 �@6�%@6��@6�S@6��6� �6f}@6$�@6�5�1@5�$�5PP�5<�@50��5*@5(�5& �4�3�4�2�3�+�Miroslav Lichvar <mlichvar@redhat.com> 6.1-10.20180224 Miroslav Lichvar <mlichvar@redhat.com> 6.1-9.20180224 Miroslav Lichvar <mlichvar@redhat.com> 6.1-8.20180224 Miroslav Lichvar <mlichvar@redhat.com> 6.1-7.20180224 Miroslav Lichvar <mlichvar@redhat.com> 6.1-6.20180224 Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224 Miroslav Lichvar <mlichvar@redhat.com> 6.1-4.20180224 Fedora Release Engineering <releng@fedoraproject.org> - 6.1-3.20180129 Miroslav Lichvar <mlichvar@redhat.com> 6.1-2.20180129 Miroslav Lichvar <mlichvar@redhat.com> 6.1-1.20180127 Miroslav Lichvar <mlichvar@redhat.com> 6.0-15.20171125 Miroslav Lichvar <mlichvar@redhat.com> 6.0-14.20170916 Fedora Release Engineering <releng@fedoraproject.org> - 6.0-13.20170722 Florian Weimer <fweimer@redhat.com> - 6.0-12.20170722 Miroslav Lichvar <mlichvar@redhat.com> 6.0-11.20170722 Miroslav Lichvar <mlichvar@redhat.com> 6.0-10.20170520 Miroslav Lichvar <mlichvar@redhat.com> 6.0-9.20170520 Miroslav Lichvar <mlichvar@redhat.com> 6.0-8.20170212 Fedora Release Engineering <releng@fedoraproject.org> - 6.0-7.20160709 Miroslav Lichvar <mlichvar@redhat.com> 6.0-6.20160709 Yaakov Selkowitz <yselkowi@redhat.com> 6.0-5.20160116 Fedora Release Engineering <r� x������������������� X X �'8 @� H����Z" �$ J ���������������� Z" Y" [" � es/100/smoltclient/ /var/lib/selinux/targeted/active/modules/100/smsd/ /var/lib/selinux/targeted/active/modules/100/snapper/ /var/lib/selinux/targeted/active/modules/100/snmp/ /var/lib/selinux/targeted/active/modules/100/snort/ /var/lib/selinux/targeted/active/modules/100/sosreport/ /var/lib/selinux/targeted/active/modules/100/soundserver/ /var/lib/selinux/targeted/active/modules/100/spamassassin/ /var/lib/selinux/targeted/active/modules/100/speech-dispatcher/ /var/lib/selinux/targeted/active/modules/100/squid/ /var/lib/selinux/targeted/active/modules/100/ssh/ /var/lib/selinux/targeted/active/modules/100/sslh/ /var/lib/selinux/targeted/active/modules/100/sssd/ /var/lib/selinux/targeted/active/modules/100/staff/ /var/lib/selinux/targeted/active/modules/100/stapserver/ /var/lib/selinux/targeted/active/modules/100/stratisd/ /var/lib/selinux/targeted/active/modules/100/stunnel/ /var/lib/selinux/targeted/active/modules/100/su/ /var/lib/selinux/targeted/active/modules/100/sudo/ /var/lib/selinux/targeted/active/modules/100/svnserve/ /var/lib/selinux/targeted/active/modules/100/swift/ /var/lib/selinux/targeted/active/modules/100/sysadm/ /var/lib/selinux/targeted/active/modules/100/sysadm_secadm/ /var/lib/selinux/targeted/active/modules/100/sysnetwork/ /var/lib/selinux/targeted/active/modules/100/sysstat/ /var/lib/selinux/targeted/active/modules/100/systemd/ /var/lib/selinux/targeted/active/modules/100/tangd/ /var/lib/selinux/targeted/active/modules/100/targetd/ /var/lib/selinux/targeted/active/modules/100/tcpd/ /var/lib/selinux/targeted/active/modules/100/tcsd/ /var/lib/selinux/targeted/active/modules/100/telepathy/ /var/lib/selinux/targeted/active/modules/100/telnet/ /var/lib/selinux/targeted/active/modules/100/tftp/ /var/lib/selinux/targeted/active/modules/100/tgtd/ /var/lib/selinux/targeted/active/modules/100/thin/ /var/lib/selinux/targeted/active/modules/100/thumb/ /var/lib/selinux/targeted/active/modules/100/timedatex/ /var/lib/selinux/targeted/active/modules/100/tlp/ /var/lib/selinux/targeted/active/modules/100/tmpreaper/ /var/lib/selinux/targeted/active/modules/100/tomcat/ /var/lib/selinux/targeted/active/modules/100/tor/ /var/lib/selinux/targeted/active/modules/100/tuned/ /var/lib/selinux/targeted/active/modules/100/tvtime/ /var/lib/selinux/targeted/active/modules/100/udev/ /var/lib/selinux/targeted/active/modules/100/ulogd/ /var/lib/selinux/targeted/active/modules/100/uml/ /var/lib/selinux/targeted/active/modules/100/unconfined/ /var/lib/selinux/targeted/active/modules/100/unconfineduser/ /var/lib/selinux/targeted/active/modules/100/unlabelednet/ /var/lib/selinux/targeted/active/modules/100/unprivuser/ /var/lib/selinux/targeted/active/modules/100/updfstab/ /var/lib/selinux/targeted/active/modules/100/usbmodules/ /var/lib/selinux/targeted/active/modules/100/usbmuxd/ /var/lib/selinux/targeted/active/modules/100/userdomain/ /var/lib/selinux/targeted/active/modules/100/userhelper/ /var/lib/selinux/targeted/active/modules/100/usermanage/ /var/lib/selinux/targeted/active/modules/100/usernetctl/ /var/lib/selinux/targeted/active/modules/100/uucp/ /var/lib/selinux/targeted/active/modules/100/uuidd/ /var/lib/selinux/targeted/active/modules/100/varnishd/ /var/lib/selinux/targeted/active/modules/100/vdagent/ /var/lib/selinux/targeted/active/modules/100/vhostmd/ /var/lib/selinux/targeted/active/modules/100/virt/ /var/lib/selinux/targeted/active/modules/100/vlock/ /var/lib/selinux/targeted/active/modules/100/vmtools/ /var/lib/selinux/targeted/active/modules/100/vmware/ /var/lib/selinux/targeted/active/modules/100/vnstatd/ /var/lib/selinux/targeted/active/modules/100/vpn/ /var/lib/selinux/targeted/active/modules/100/w3c/ /var/lib/selinux/targeted/active/modules/100/watchdog/ /var/lib/selinux/targeted/active/modules/100/wdmd/ /var/lib/selinux/targeted/active/modules/100/webadm/ /var/lib/selinux/targeted/active/modules/100/webalizer/ /var/lib/selinux/targeted/active/modules/100/wine/ /var/lib/selinux/targeted/active/modules/100/wireshark/ /var/lib/selinux/targeted/active/modules/100/xen/ /var/lib/selinux/target� x������������������ X Y �&8 ���������b�������! �$ $ ���������������� �! �! �! � bz#2136189 - Fix syntax problem in redis.te
Resolves: rhbz#2112228
- Allow unconfined user filetransition for sudo log files
Resolves: rhbz#2164047
- Allow winbind-rpcd make a TCP connection to the ldap port
Resolves: rhbz#2152642
- Allow winbind-rpcd manage samba_share_t files and dirs
Resolves: rhbz#2152642
- Allow insights-client work with su and lpstat
Resolves: rhbz#2134125
- Allow insights-client read nvme devices
Resolves: rhbz#2143878
- Allow insights-client tcp connect to all ports
Resolves: rhbz#2143878
- Allow redis-sentinel execute a notification script
Resolves: rhbz#2112228 - Add interfaces in domain, files, and unconfined modules
Resolves: rhbz#2141311
- Allow sysadm_t read/write ipmi devices
Resolves: rhbz#2148561
- Allow sudodomain use sudo.log as a logfile
Resolves: rhbz#2143762
- Add insights additional capabilities
Resolves: rhbz#2158779
- Allow insights client work with gluster and pcp
Resolves: rhbz#2141311
- Allow prosody manage its runtime socket files
Resolves: rhbz#2157902
- Allow system mail service read inherited certmonger runtime files
Resolves: rhbz#2143337
- Add lpr_roles to system_r roles
Resolves: rhbz#2151111 - Allow systemd-socket-proxyd get attributes of cgroup filesystems
Resolves: rhbz#2088441
- Allow systemd-socket-proxyd get filesystems attributes
Resolves: rhbz#2088441
- Allow sysadm read ipmi devices
Resolves: rhbz#2148561
- Allow system mail service read inherited certmonger runtime files
Resolves: rhbz#2143337
- Add lpr_roles to system_r roles
Resolves: rhbz#2151111
- Allow insights-client tcp connect to various ports
Resolves: rhbz#2151111
- Allow insights-client work with pcp and manage user config files
Resolves: rhbz#2151111
- Allow insights-client dbus chat with various services
Resolves: rhbz#2152867
- Allow insights-client dbus chat with abrt
Resolves: rhbz#2152867
- Allow redis get user names
Resolves: rhbz#2112228
- Add winbind-rpcd to samba_enable_home_dirs boolean
Resolves: rhbz#2143696 - Allow ipsec_t only read tpm devices
Resolves: rhbz#2147380
- Allow ipsec_t read/write tpm devices
Resolves: rhbz#2147380
- Label udf tools with fsadm_exec_t
Resolves: rhbz#1972230
- Allow the spamd_update_t domain get generic filesystem attributes
Resolves: rhbz#2144501
- Allow cdcc mmap dcc-client-map files
Resolves: rhbz#2144505
- Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Resolves: rhbz#2143878
- Allow insights client read raw memory devices
Resolves: rhbz#2143878
- Allow winbind-rpcd get attributes of device and pty filesystems
Resolves: rhbz#2107106
- Allow postfix/smtpd read kerberos key table
Resolves: rhbz#1983308 - Add domain_unix_read_all_semaphores() interface
Resolves: rhbz#2141311
- Allow iptables list cgroup directories
Resolves: rhbz#2134820
- Allow systemd-hostnamed dbus chat with init scripts
Resolves: rhbz#2111632
- Allow systemd to read symlinks in /var/lib
Resolves: rhbz#2118784
- Allow insights-client domain transition on semanage execution
Resolves: rhbz#2141311
- Allow insights-client create gluster log dir with a transition
Resolves: rhbz#2141311
- Allow insights-client manage generic locks
Resolves: rhbz#2141311
- Allow insights-client unix_read all domain semaphores
Resolves: rhbz#2141311
- Allow winbind-rpcd use the terminal multiplexor
Resolves: rhbz#2107106
- Allow mrtg send mails
Resolves: rhbz#2103675
- Allow sssd dbus chat with system cronjobs
Resolves: rhbz#2132922
- Allow postfix/smtp and postfix/virtual read kerberos key table
Resolves: rhbz#1983308 - Add the systemd_connectto_socket_proxyd_unix_sockets() interface
Resolves: rhbz#208441
- Add the dev_map_vhost() interface
Resolves: rhbz#2122920
- Allow init remount all file_type filesystems
Resolves: rhbz#2122239
- added policy for systemd-socket-proxyd
Resolves: rhbz#2088441
- Allow virt_domain map vhost devices
Resolves: rhbz#2122920
- Allow virt domains to access xserver devices
Resolves: rhbz#2122920
- Allow rotatelogs read httpd_log_t symlinks
Resolves: rhbz#2030633
- Allow vlock search the contents of the /dev/pts directory
Resolves: � x������������������� X Z �'8 ��������H� �Q �$ \ ���������������� �Q �Q �Q � ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� ^/� f16bbd4bef21bd9021303f15590e5452 34fad40982d70cc00b8a65db514f2dea df6d08cbe11510ffb27745b06dc99fd0 39c753b1ab7eaa5aafbf2b56730c5f9c 646be960e1fbfe0a341f52dbbb8c1988 0327bee70cf559d95a8bd2e18095355c 96b8ae5eec28c17f149e2a89bbf1c448 af17641daa7681e53d63c095bd210833 af17641daa7681e53d63c095bd210833 cca583f3a191153dfcd2034fbd6c8863 416be021c040fd2f9aefc3801e8b5284 f511b68bd41e67a5723b0f9d7f66f739 1adaa58ebe1ec22b2cd77040456d795d 73e298e8bc3ebca229e20e7ef6307c3c 5664a128a8b1603705347ea79b0c19b4 c271781eb17b0dc51ff24c8b5e2aaa5c 543e7902609030f935d2d8f1d3725ebe 60e1430c5b05bd4a2d1746405778e121 4a2eca78c573214c4c3ce336e659f111 1aca1601eb0b1a5c982ee6b4315e9c89 df73412755a8d5079658ba9ca09d62ab 33be807c7c52fe6abc0ddcbd8c2e67d7 73ceac0d904fb2fb2145cb87257ed534 2db611dbf489f3558022b96207242ec3 52c99be8d1b8bdcb13ae302485e71348 c4ef7203e38953b59b77a09ee194ca6e bf4f6f4a5477429f8f264b13dc1f2f20 34b1ff45d1ade2db5bf912b8be273f63 3dc46824a1670e76e35088bf63223f8f 5895cf7ac9192f0285cb0b4304f4566c 3ec591859b2bb7e3249ad94da5d63a3c ff7677abca3cbf2d4665ffeb9855d5d7 ac5ff2bfc94dbfc6989e7a9300d3d7dc 64594bceb8f4a504f35ce5704ce7c1e6 25f73e42bfa5801d2b3f1bec686adb50 0293c61cb122902add5a19b99c5160d0 0f60ad2dd9ec13f0208db11a874d0560 065aa3f6ee6c1abae049af97588c639d c66b5f888b27d0ba1a7a1e07c86fbb24 e6d1c946daab0993ddedcb01c7a562fa 8e2b6b12d92605b1ceeff0b15eb84805 5895cf7ac9192f0285cb0b4304f4566c 21426c38e6210456056a1bc0186e0700 496fe2da3591480189d07fef5f645cf4 323c687839db63c05fa2beeef4006365 bf4f6f4a5477429f8f264b13dc1f2f20 7681046d9925f71fdcb932d7025b24c1 477e038e85b899a19ce9f4db7a54dae0 32853e26214ab9b0c13e3a1ab1b894e6 79da13b079a6c1f91d6da05438b27e73 8c5d06c76847e068090d8f01d2f3c9e6 dcce9495e3f53b54fed05d4378142893 b3967f836b7326cf0910bbe6b22ed9f2 bbb6125ec184c4efc9c29476c6044f12 31bc2580ae3324fe822750cb730cb6e4 2fca7cf65c2f5113462ec1f7b5cfda42 c8af0ea806e4594cd12c85641bc13509 923b9a082a4f4a028aafa9dc55a0b7f7 2cef6b21dd159a5c01064871b8ea7704 f51546f4e778914d6727ecaa6671c1b0 e06aff21da7dee0ac20b45559f2e2aa6 3bcafbf40079bd91affbd8c788fc87ec c8b582fd5a755f6303399a9a076a2f33 f9cc542be7706c1ec7f13daba547fe5f f324bdab82aa13f7a905cd420b430359 e8accdc1ef3b8ecc3003dd1ac9634b34 bff5caadb9bf93f8d822dff3682c021d 29d5443abc305e13d051fda258b5c68e a2e41c06db3aa6f4f7ad739bb6aa9141 159fb44dc0700570644f1e624a0730d1 eae65106b870a827edaadbe96c217b3b b181651ad99a7dc4cc8c4ce2f491ed1a f91fdf07c63240124904e327715a25dc 7ca7379c62b2ad98a0e86d31eb68817b 1a1013bd530d487dc40fcabcae8b4420 7e3d48bd9f67637f1642ae54fc963dea cd87eaade3f5ff23035b31cdcbb37cec 256e1c6fea95c74a2196d6b� x������������������� X [ x%8 �1 `� ub �$ e ���������������� ub tb vb � oot root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root spamassassin-3.4.6-1.el8.src.rpm ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� x�������������p����� X \ '8 �����P�����! �$ } ���������������� �! �! �! � file in /va/run/hostapd Add fsetid cap. for hostapd Add net_raw cap. for hostpad BZ(#1237343)
- Allow bumblebee to seng kill signal to xserver
- glusterd call pcs utility which calls find for cib.* files and runs pstree under glusterd. Dontaudit access to security files and update gluster boolean to reflect these changes.
- Allow drbd to get attributes from filesystems.
- Allow drbd to read configuration options used when loading modules.
- fix the description for the write config files, add systemd administration support and fix a missing gen_require in the admin interface
- Added Booleans: pcp_read_generic_logs.
- Allow pcp_pmcd daemon to read postfix config files. Allow pcp_pmcd daemon to search postfix spool dirs.
- Allow glusterd to communicate with cluster domains over stream socket.
- fix copy paste error with writing the admin interface
- fix up the regex in sslh.fc, add sslh_admin() interface
- adding selinux policy files for sslh
- Remove diplicate sftpd_write_ssh_home boolean rule.
- Revert "Allow smbd_t and nmbd_t to manage winbind_var_run_t files/socktes/dirs."
- gnome_dontaudit_search_config() needs to be a part of optinal_policy in pegasus.te
- Allow glusterd to manage nfsd and rpcd services.
- Add kdbus.pp policy to allow access /sys/fs/kdbus. It needs to go with own module because this is workaround for now to avoid SELinux in enforcing mode.
- kdbusfs should not be accessible for now by default for shipped policies. It should be moved to kdbus.pp
- kdbusfs should not be accessible for now.
- Add support for /sys/fs/kdbus and allow login_pgm domain to access it.
- Allow sysadm to administrate ldap environment and allow to bind ldap port to allow to setup an LDAP server (389ds).
- Label /usr/sbin/chpasswd as passwd_exec_t.
- Allow audisp_remote_t to read/write user domain pty.
- Allow audisp_remote_t to start power unit files domain to allow halt system. - Add fixes for selinux-policy packages to reflect the latest changes related to policy module store migration.
- Prepare selinux-policy package for SELinux store migration
- gnome_dontaudit_search_config() needs to be a part of optinal_policy in pegasus.te
- Allow glusterd to manage nfsd and rpcd services.
- Allow smbd_t and nmbd_t to manage winbind_var_run_t files/socktes/dirs.
- Add samba_manage_winbind_pid() interface
- Allow networkmanager to communicate via dbus with systemd_hostanmed.
- Allow stream connect logrotate to prosody.
- Add prosody_stream_connect() interface.
- httpd should be able to send signal/signull to httpd_suexec_t, instead of httpd_suexec_exec_t.
- Allow prosody to create own tmp files/dirs.
- Allow keepalived request kernel load module
- kadmind should not read generic files in /usr
- Allow kadmind_t access to /etc/krb5.keytab
- Add more fixes to kerberos.te
- Add labeling for /var/tmp/kadmin_0 and /var/tmp/kiprop_0
- Add lsmd_t to nsswitch_domain.
- Allow pegasus_openlmi_storage_t create mdadm.conf.anacbak file in /etc.
- Add fixes to pegasus_openlmi_domain
- Allow Glance Scrubber to connect to commplex_main port
- Allow RabbitMQ to connect to amqp port
- Allow isnsd read access on the file /proc/net/unix
- Allow qpidd access to /proc/<pid>/net/psched
- Allow openshift_initrc_t to communicate with firewalld over dbus.
- Allow ctdbd_t send signull to samba_unconfined_net_t.
- Add samba_signull_unconfined_net()
- Add samba_signull_winbind()
- Revert "Add interfaces winbind_signull(), samba_unconfined_net_signull()."
- Fix ctdb policy
- Label /var/db/ as system_db_t. - inn daemon should create innd_log_t objects in var_log_t instead of innd_var_run_t
- Fix rule definitions for httpd_can_sendmail boolean. We need to distinguish between base and contrib. - Add samba_unconfined_script_exec_t to samba_admin header.
- Add jabberd_lock_t label to jabberd_admin header.
- Add rpm_var_run_t label to rpm_admin header.
- Make all interfaces related to openshift_cache_t as deprecated.
- Remove non exits nfsd_ro_t label.
- Label /usr/afs/ as afs_files_t Allow afs_bosserver_t create afs_config_t and afs_dbdir_t dirs� x������������������ X ] �&8 ��������� �! �$ 5 ���������������� �! �! �! � > 3.13.1-114 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-113 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-112 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-111 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-110 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-109 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-108 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-107 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-106 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-105 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-104 Dan Walsh <dwalsh@redhat.com> 3.13.1-103 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-101 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-100 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-99 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-98 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-97 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-96 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-95 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-94 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-93 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-92 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-91 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-90 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-89 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-88 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-87 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-86 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-85 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-84 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-83 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-82 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-81 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-80 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-79 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-78 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-77 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-76 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-75 Kevin Fenzi <kevin@scrye.com> - 3.13.1-74 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-73 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-72 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-71 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-70 Tom Callaway <spot@fedoraproject.org> 3.13.1-69 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-68 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-67 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-66 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-65 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-64 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-63 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-62 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-61 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-60 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-59 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-58 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-57 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.13.1-56 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-55 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-54 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-53 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-52 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-51 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-50 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-49 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-48 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-47 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-46 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-45 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-44 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-43 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-42 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-41 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-40 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-39 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-38 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-37 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-36 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-35 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-34 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-33 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-32 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-31 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-30 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-29 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-28 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-27 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-26 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-25 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-24 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-23 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-22 Mirosla� x�������������`����� X ^ %8 �I�������������uP �$ e ���������������� uP tP vP � im -av fails to trim root filesystem on Red Hat Coreos
- fix #2142496 - update upstream tests
- fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
- fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
- fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
- fix #2069187 - Internal testsuite for lscpu failed on aarch64
- fix #2093166 - lslogins reports incorrect "Password is locked" status
- fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
- fix #2044592 - Move /var/log/lastlog ownership to systemd - fix #2058176 - losetup Retry LOOP_SET_STATUS64 on EAGAIN - rebuild after revert - change bug number (#2016229 to #2041498) - improve #2026511 fix - blkid fails to complete when targeting non-block devices
- fix #1950187 - Ambient capabilities failed to applied to non-root user - update lib-sys-add-sysfs_chrdev_devno_to_devname.patch (#2026511) - fix #1988955 - script command continues without stopping.
- fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
- fix #2011602 - logger from util-linux incorrectly handles long messages
- fix #1916151 - [RFE] spread fstrim.timer across time
- fix #1894192 - Update or backport setpriv --pdeathsig
- fix #2026511 - blkid fails to complete when targeting non-block devices - fix #1906157 - after su from root to a normal user mesg is unable to show current status
- fix #1917852 - findmnt: add option to list all fs-independent flags
- fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
- fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
- fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
- fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount - update lscpu-show-physical-socket-on-aarch64-without-ACPI-P.patch (#1882740) - update regression tests (related to #1900498) - fix #1884194 - RHEL-8: chrt command does not support the -R option
- fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
- fix #1861670 - lsblk can not show serial information for virtio disk
- fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
- fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
- fix #1883056 - lscpu support for Fujitsu A64FX
- fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM - fix #1848919 - Update losetup man page to fix "--direct-io" defaults - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
- fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
- fix #1817726 - add libblkid BLOCK_SIZE
- fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
- fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
- fix #1824727 - util-linux: Include python3-libmount package in the release
- fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - improve CI tests portability to rhel-8 kernel - add git to BuildRequires due to autosetup -Sgit - fix spec file typo - fix test for #1739443 - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
- fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password - fix error path in mountinfo patch (#1751447) - cleanup mountinfo libmount patch (#1751447) - fix #1751447 - improve /proc/self/mountinfo reliability - fix #1739179 - partx failed on nvme devices with exit code 1 - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS - fix #1732769 - lscpu not showing Physic� x��������������o���� X _ �'8 88������@�����Q �$ D ���������������� �Q �Q �Q � lly linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=0427050998774cf437aeec2b8a5f58c01fdee3d1, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=c91287c867a6e81dc2d60653390c12913c8f7bb6, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=708b5e397affcc070a14fe568e75363e5b0a06a0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e42a3e6076853fb2754eaafa8ab1c44783b96e7e, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=9765e6c26698afa438edf021917ae1d743a2f22d, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=25e3298a7e069142745db214d20de4b18c2ff060, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=facfd4c37e45ec22208c82ae06cf3157ab863fea, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a735156c3c3fae4b7bdee7e70c1b0f2e44714fef, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=5763d25cdf22445336c27c24c6a323d29233c237, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=cf54d2531862ae3a384611b82427ae32319f2038, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=1c5d27588f6ed327a3d616d8b17b95d72134799e, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=23c3b4f9f5180b9eb1228e9531bf8d8c5e364f1c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=21a9861f8758d39df60a5015f868cf432495f376, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=54dc8482cf92aaaad44231b5b80d9daabcfe8a82, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=71fc9fcfb245fb737112f2e30360c9d0b685c860, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=56d549c2f06fe3d94e623658e53c5c253028de98, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=300a36be09f6f2f3772da5fd71f27adead0282f4, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=51f7ae2ed5ced43dc72ce04799e7ba7f602b5530, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=bd4eed003cefc76b8c8bc0446f35e251a4d2163e, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f4b527c5a212d9cb4cd56ef391283c41657146c2, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked� x�������������P_���� X ` C'8 ��������`g���" �$ ���������������� " " " � net_admin avc
- Change thumb_role to use thumb_run, not sure why we have a thumb_role, needs back port
- Logwatch does access check on mdadm binary
- Add raid_access_check_mdadm() iterface - Fix systemd_manage_unit_symlinks() interface
- Call systemd_manage_unit_symlinks(() which is correct interface
- Add filename transition for opasswd
- Switch gnomeclock_dbus_chat to systemd_dbus_chat_timedated since we have switched the name of gnomeclock
- Allow sytstemd-timedated to get status of init_t
- Add new systemd policies for hostnamed and rename gnomeclock_t to systemd_timedate_t
- colord needs to communicate with systemd and systemd_logind, also remove duplicate rules
- Switch gnomeclock_dbus_chat to systemd_dbus_chat_timedated since we have switched the name of gnomeclock
- Allow gpg_t to manage all gnome files
- Stop using pcscd_read_pub_files
- New rules for xguest, dontaudit attempts to dbus chat
- Allow firewalld to create its mmap files in tmpfs and tmp directories
- Allow firewalld to create its mmap files in tmpfs and tmp directories
- run unbound-chkconf as named_t, so it can read dnssec
- Colord is reading xdm process state, probably reads state of any apps that sends dbus message
- Allow mdadm_t to change the kernel scheduler
- mythtv policy
- Update mandb_admin() interface
- Allow dsspam to listen on own tpc_socket
- seutil_filetrans_named_content needs to be optional
- Allow sysadm_t to execute content in his homedir
- Add attach_queue to tun_socket, new patch from Paul Moore
- Change most of selinux configuration types to security_file_type.
- Add filename transition rules for selinux configuration
- ssh into a box with -X -Y requires ssh_use_ptys
- Dontaudit thumb drives trying to bind to udp sockets if nis_enabled is turned on
- Allow all unpriv userdomains to send dbus messages to hostnamed and timedated
- New allow rules found by Tom London for systemd_hostnamed - Allow systemd-tmpfiles to relabel lpd spool files
- Ad labeling for texlive bash scripts
- Add xserver_filetrans_fonts_cache_home_content() interface
- Remove duplicate rules from *.te
- Add support for /var/lock/man-db.lock
- Add support for /var/tmp/abrt(/.*)?
- Add additional labeling for munin cgi scripts
- Allow httpd_t to read munin conf files
- Allow certwatch to read meminfo
- Fix nscd_dontaudit_write_sock_file() interfac
- Fix gnome_filetrans_home_content() to include also "fontconfig" dir as cache_home_t
- llow mozilla_plugin_t to create HOMEDIR/.fontconfig with the proper labeling - Allow gnomeclock to talk to puppet over dbus
- Allow numad access discovered by Dominic
- Add support for HOME_DIR/.maildir
- Fix attribute_role for mozilla_plugin_t domain to allow staff_r to access this domain
- Allow udev to relabel udev_var_run_t lnk_files
- New bin_t file in mcelog - Remove all mcs overrides and replace with t1 != mcs_constrained_types
- Add attribute_role for iptables
- mcs_process_set_categories needs to be called for type
- Implement additional role_attribute statements
- Sodo domain is attempting to get the additributes of proc_kcore_t
- Unbound uses port 8953
- Allow svirt_t images to compromise_kernel when using pci-passthrough
- Add label for dns lib files
- Bluetooth aquires a dbus name
- Remove redundant files_read_usr_file calling
- Remove redundant files_read_etc_file calling
- Fix mozilla_run_plugin()
- Add role_attribute support for more domains - Mass merge with upstream - Bump the policy version to 28 to match selinux userspace
- Rebuild versus latest libsepol - Add systemd_status_all_unit_files() interface
- Add support for nshadow
- Allow sysadm_t to administrate the postfix domains
- Add interface to setattr on isid directories for use by tmpreaper
- Allow sshd_t sys_admin for use with afs logins
- Allow systemd to read/write all sysctls
- Allow sshd_t sys_admin for use with afs logins
- Allow systemd to read/write all sysctls
- Add systemd_status_all_unit_files() interface
- Add support for nshadow
- Allow sysadm_t to administrate the postfix domains
- Add interface to setattr on isid dire� x��������������N���� X a |%8 ��������HR������yb �$ i ���������������� yb xb zb � scrye.com> 3.4.0-7 Kevin Fenzi <kevin@scrye.com> 3.4.0-6 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.4.0-5 Kevin Fenzi <kevin@scrye.com> 3.4.0-4 Kevin Fenzi <kevin@scrye.com> 3.4.0-3 Kevin Fenzi <kevin@scrye.com> 3.4.0-2 Kevin Fenzi <kevin@scrye.com> 3.4.0-1 Kevin Fenzi <kevin@scrye.com> 3.3.2-19 Kevin Fenzi <kevin@scrye.com> 3.3.2-18 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.2-17 Petr Pisar <ppisar@redhat.com> - 3.3.2-16 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.2-15 Kevin Fenzi <kevin@scrye.com> 3.3.2-14 Kevin Fenzi <kevin@scrye.com> 3.3.2-13 Kevin Fenzi <kevin@scrye.com> - 3.3.2-12 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.2-11 Petr Pisar <ppisar@redhat.com> - 3.3.2-10 Kevin Fenzi <kevin@scrye.com> - 3.3.2-9 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.2-8 Nick Bebout <nb@fedoraproject.org> - 3.3.2-7 Nick Bebout <nb@fedoraproject.org> - 3.3.2-6 Jesse Keating <jkeating@redhat.com> - 3.3.2-5 Nick Bebout <nb@fedoraproject.org> - 3.3.2-4 Petr Sabata <contyk@redhat.com> - 3.3.2-3 Petr Sabata <contyk@redhat.com> - 3.3.2-2 Warren Togami <warren@togami.com> - 3.3.2-1 Warren Togami <warren@togami.com> - 3.3.2-0.8.rc2 Warren Togami <warren@togami.com> - 3.3.2-0.7.rc1 Ville Skyttä <ville.skytta@iki.fi> - 3.3.2-0.6.svn1071394 Nick Bebout <nb@fedoraproject.org> - 3.3.2-0.5.svn1071394 Nick Bebout <nb@fedoraproject.org> - 3.3.2-0.4.svn1071394 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.2-0.3.svn1027144 Kevin Fenzi <kevin@tummy.com> - 3.3.2-0.2.svn1027144 Nick Bebout <nb@fedoraproject.org> - 3.3.2-0.1.svn1027144 Dennis Gilmore <dennis@ausil.us> - 3.3.1-5 Nick Bebout <nb@fedoraproject.org> - 3.3.1-4 Marcela Maslanova <mmaslano@redhat.com> - 3.3.1-3 Warren Togami <wtogami@redhat.com> - 3.3.1-2 Warren Togami <wtogami@redhat.com> - 3.3.1-1 Warren Togami <wtogami@redhat.com> - 3.3.0-6 Warren Togami <wtogami@redhat.com> - 3.3.0-2 Warren Togami <wtogami@redhat.com> - 3.3.0-0.32.rc3 Warren Togami <wtogami@redhat.com> - 3.3.0-0.31.rc2 Warren Togami <wtogami@redhat.com> - 3.3.0-0.29.rc1 Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1 Warren Togami <wtogami@redhat.com> - 3.3.0-0.26.rc1 Warren Togami <wtogami@redhat.com> - 3.3.0-0.23.rc1 Warren Togami <wtogami@redhat.com> - 3.3.0-0.21.beta1 Warren Togami <wtogami@redhat.com> - 3.3.0-0.20.svn882672 Warren Togami <wtogami@redhat.com> - 3.3.0-0.19.svn816416 Warren Togami <wtogami@redhat.com> - 3.3.3-0.18.svn816416 Warren Togami <wtogami@redhat.com> - 3.3.3-0.14.svn816416 Warren Togami <wtogami@redhat.com> - 3.3.0-0.13.alpha2 Warren Togami <wtogami@redhat.com> - 3.3.0-0.12.alpha2 Tomas Mraz <tmraz@redhat.com> - 3.3.0-0.6.alpha2 Warren Togami <wtogami@redhat.com> - 3.3.0-0.5.alpha1 Warren Togami <wtogami@redhat.com> - 3.3.0-0.2.alpha1 Warren Togami <wtogami@redhat.com> - 3.3.0-0.1.alpha1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.5-5 Tomas Mraz <tmraz@redhat.com> - 3.2.5-4 Kevin Fenzi <kevin@tummy.com> - 3.2.5-3 Tom "spot" Callaway <tcallawa@redhat.com> 3.2.5-2 Warren Togami <wtogami@redhat.com> - 3.2.5-1 Tom "spot" Callaway <tcallawa@redhat.com> - 3.2.4-4 Fedora Release Engineering <rel-eng@fedoraproject.org> - 3.2.4-3 Tom "spot" Callaway <tcallawa@redhat.com> 3.2.4-2 Warren Togami <wtogami@redhat.com> 3.2.4-1 Warren Togami <wtogami@redhat.com> 3.2.3-2 Warren Togami <wtogami@redhat.com> 3.2.3-1 Warren Togami <wtogami@redhat.com> 3.2.2-2 Warren Togami <wtogami@redhat.com> 3.2.2-1 Warren Togami <wtogami@redhat.com> 3.2.1-1 Warren Togami <wtogami@redhat.com> 3.2.0-1 Warren Togami <wtogami@redhat.com> 3.2.0-0.5.rc3 Warren Togami <wtogami@redhat.com> 3.2.0-0.4.rc2 Warren Togami <wtogami@redhat.com> 3.2.0-0.3.rc1 Warren Togami <wtogami@redhat.com> 3.2.0-0.2.pre2 Warren Togami <wtogami@redhat.com> 3.2.0-0.1.pre2 Warren Togami <wtogami@redhat.com> 3.1.8-2 Warren Togami <wtogami@redhat.com> 3.1.8-1 Warren Togami <wtogami@redhat.com> 3.1.7-9 Warren Togami <wtogami@redhat.com> 3.1.7-8 Warren Togami <wtogami@redhat.com� x�������������@>���� X b U'8 �� @Q���)" �$ 9 ���������������� )" (" *" � rectly
- Fix abrt_manage_cache() interface
- Make filetrans rules optional so base policy will build
- Dontaudit chkpwd_t access to inherited TTYS
- Make sure postfix content gets created with the correct label
- Allow gnomeclock to read cgroup
- Fixes for cloudform policy - Check in fixed for Chrome nacl support - Begin removing qemu_t domain, we really no longer need this domain.
- systemd_passwd needs dac_overide to communicate with users TTY's
- Allow svirt_lxc domains to send kill signals within their container - Remove qemu.pp again without causing a crash - Remove qemu.pp, everything should use svirt_t or stay in its current domain - Allow policykit to talk to the systemd via dbus
- Move chrome_sandbox_nacl_t to permissive domains
- Additional rules for chrome_sandbox_nacl - Change bootstrap name to nacl
- Chrome still needs execmem
- Missing role for chrome_sandbox_bootstrap
- Add boolean to remove execmem and execstack from virtual machines
- Dontaudit xdm_t doing an access_check on etc_t directories - Allow named to connect to dirsrv by default
- add ldapmap1_0 as a krb5_host_rcache_t file
- Google chrome developers asked me to add bootstrap policy for nacl stuff
- Allow rhev_agentd_t to getattr on mountpoints
- Postfix_smtpd_t needs access to milters and cleanup seems to read/write postfix_smtpd_t unix_stream_sockets - Fixes for cloudform policies which need to connect to random ports
- Make sure if an admin creates modules content it creates them with the correct label
- Add port 8953 as a dns port used by unbound
- Fix file name transition for alsa and confined users - Turn on mock_t and thumb_t for unconfined domains - Policy update should not modify local contexts - Remove ada policy - Remove tzdata policy
- Add labeling for udev
- Add cloudform policy
- Fixes for bootloader policy - Add policies for nova openstack - Add fixes for nova-stack policy - Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
- Allow init process to setrlimit on itself
- Take away transition rules for users executing ssh-keygen
- Allow setroubleshoot_fixit_t to read /dev/urand
- Allow sshd to relbale tunnel sockets
- Allow fail2ban domtrans to shorewall in the same way as with iptables
- Add support for lnk files in the /var/lib/sssd directory
- Allow system mail to connect to courier-authdaemon over an unix stream socket - Add passwd_file_t for /etc/ptmptmp - Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)
- Make corosync to be able to relabelto cluster lib fies
- Allow samba domains to search /var/run/nmbd
- Allow dirsrv to use pam
- Allow thumb to call getuid
- chrome less likely to get mmap_zero bug so removing dontaudit
- gimp help-browser has built in javascript
- Best guess is that devices named /dev/bsr4096 should be labeled as cpu_device_t
- Re-write glance policy - Move dontaudit sys_ptrace line from permissive.te to domain.te
- Remove policy for hal, it no longer exists - Don't check md5 size or mtime on certain config files - Remove allow_ptrace and replace it with deny_ptrace, which will remove all
ptrace from the system
- Remove 2000 dontaudit rules between confined domains on transition
and replace with single
dontaudit domain domain:process { noatsecure siginh rlimitinh } ; - Fixes for bootloader policy
- $1_gkeyringd_t needs to read $HOME/%USER/.local/share/keystore
- Allow nsplugin to read /usr/share/config
- Allow sa-update to update rules
- Add use_fusefs_home_dirs for chroot ssh option
- Fixes for grub2
- Update systemd_exec_systemctl() interface
- Allow gpg to read the mail spool
- More fixes for sa-update running out of cron job
- Allow ipsec_mgmt_t to read hardware state information
- Allow pptp_t to connect to unreserved_port_t
- Dontaudit getattr on initctl in /dev from chfn
- Dontaudit getattr on kernel_core from chfn
- Add systemd_list_unit_dirs to systemd_exec_systemctl call
- Fixes for collectd policy
- CHange sysadm_t to create content as user_tmp_t under /tmp - Shrink size of policy through use of attrib� x��������������-���� X c �&8 0����h� �! �$ ���������������� �! �! �! � 6946f7b37320e66ce784c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 622d42709db476ab89b3eea8854532b228b3fa6e0f5dd31f7df28186a466c320 7611081a75df408abfbaa5b6fddcb73be063406e1b6db550498da2702d9842ff d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4656ef3512ddaccba1b6cf3fa776e9b7e27e3a73a9510691654f2aa028c949b9 ad9592178ea41157e74d7fe4d1a9a6d4a7184de15cae712a3c71b1ef026eda15 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8348abba99026d5bb7a58ea1f7e9ccfbbb8ea86dc773c3b4f901a16c74e2024c 108ca081eb10e5d742e7400174f3eee4efc7af20728df7de9e1b013a8c5385e0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d690f6e05db5681628af8b28a5ca1a69453847d873a7615a0e81def11cb80f47 730f1101ce5b62f02f55a245e8819f2a31b9fcf3a51b37fb84ab35dc4c63044b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6a2ab823a46bb98cd131c31fb25f0eb782e8355970b447830bd129b2b2da425d 9498a3df3af0d1241304fa4d6d07a9194553acb5d12ee34ea86db4f6df4d1ab5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 5bcfa2b1c697438860e6bdcc56bd1402a3341ec5054c3e4fab435fc0d88955e7 6c102802f85c44bbad6c724567157fe078d64533fe2a0c8a9a38fa48c6fe1acf d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 003da035e906e1688fdfe7d72ce524447e23c079dc478e2b41eb599d8ab382c0 5ce6d9acb612022b87c2457f588764541cb27d93b9d532bb4c13c8fff0d65002 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c60094a0c5c495e3fb5f88874e8c060c2e0ddfefc2a53d1474936b1456bcb42b 9d9856922a4d483b067c8b379307b31a1ff03ceda8390681c1d8139f3a98781c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 51f2bd65b3012509f86e9402f93c1466f0bfb56788248c3601426ca386ee2715 b585a0e2c4758a89b058e7d0b93dbe71b4b33e05ec239cb8464c9a0a9df73f41 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7674194b296388347c4f03d9ea9fc9e47ea014ff70d3a151d10d8750ab4d890e 476239b002fed720ddd395cf359da747aa7467136cdbadd7d6361f44dd30adc8 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2ea8484717c0662abe7571eb5abc488da2b8ffedb6ebac93e67533031a393f76 692589309780a665053cced94c881d06faa79c2b31eb6d5d387dff3a9a43275b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 18fb6a7dfcfbceb578aab043a6db13ba9a555778b00c3471636008f05a3994b3 0731cab17f010e37de7db973aeb0a40392d802a8ff082c09f212d9b5f92923c5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 997b6573348ae39eb47acd304e3a7146abd5de3bfc963cda8016d745b2731691 a6d39a2ba11f939c919cfa489353ebd3085406ba09b68f63204c6b544cc7efc3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c651aa426c553690ad02cf52500d93ba24f1a7961ada00c4d34ecf33aad812c8 b951f99e680025c596b31fdcc4f969abed628a2638f4f813147aed9cadfc1591 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f1a70be00919d9c5aa7941f07a38e6430a93c0e038493d81149ab1f13e1c74fb 402705dad66e7f026705bf45119ffe3b8b3f3f4650d89c47f7b2be6070b48e26 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 54e75c3ee2a6b6771a78f10686b9dca4c66c96baacacfc67ca410fe961efbeb8 ddb34aafbf0515e77eb8025ab9b269e89acb3076a80aa02021e2e9cd87fb968b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b146fc791f956b00b5975b529f4930fd8f31e220f63d9d2d0fd542706278a8a5 5a00d1ca4c8e07e3ddd2a8bedc057618198227cf69223193be25cc7810d14766 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8e7dea7eab222c92526f4310c80157477133598effba8e6b1f178e8d0815a5a2 2a184c09cfe3f32cf8dc9cdff31da9cfa5f94a34b227cd3514925dcc6d9cbe53 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e52b7d7d6d22de876617b475d31b2ae460954244fc56f17a5625071380bd251b 2b91a8f77ba0548d80a5660beb09cc74f3856e244d06d23dd41e6b7ae46d3719 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 107b1ecb8b3b1d4520b21f25b721f73d9e83e52d6d43c0d7ae3d544a219cbe30 9c6576e1fe47e0163d00e3f614027de34b404af0d7385634ed827ccb2582d97f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3a42a4c95fe073211ecead25988b41b0dee423fe9b0ec5383103f88e46b65b� x�������������0 ���� X d �&8 �� � �! �$ ; ���������������� �! �! �! � 3 Dan Walsh <dwalsh@redhat.com> 3.9.1-2 Dan Walsh <dwalsh@redhat.com> 3.9.1-1 Dan Walsh <dwalsh@redhat.com> 3.9.0-2 Dan Walsh <dwalsh@redhat.com> 3.9.0-1 Dan Walsh <dwalsh@redhat.com> 3.8.8-21 Dan Walsh <dwalsh@redhat.com> 3.8.8-20 Dan Walsh <dwalsh@redhat.com> 3.8.8-19 Dan Walsh <dwalsh@redhat.com> 3.8.8-18 Dan Walsh <dwalsh@redhat.com> 3.8.8-17 Dan Walsh <dwalsh@redhat.com> 3.8.8-16 Dan Walsh <dwalsh@redhat.com> 3.8.8-15 Dan Walsh <dwalsh@redhat.com> 3.8.8-14 Dan Walsh <dwalsh@redhat.com> 3.8.8-13 Dan Walsh <dwalsh@redhat.com> 3.8.8-12 Dan Walsh <dwalsh@redhat.com> 3.8.8-11 Dan Walsh <dwalsh@redhat.com> 3.8.8-10 Dan Walsh <dwalsh@redhat.com> 3.8.8-9 Dan Walsh <dwalsh@redhat.com> 3.8.8-8 Dan Walsh <dwalsh@redhat.com> 3.8.8-7 Dan Walsh <dwalsh@redhat.com> 3.8.8-6 Dan Walsh <dwalsh@redhat.com> 3.8.8-5 Dan Walsh <dwalsh@redhat.com> 3.8.8-4 Dan Walsh <dwalsh@redhat.com> 3.8.8-3 Dan Walsh <dwalsh@redhat.com> 3.8.8-2 Dan Walsh <dwalsh@redhat.com> 3.8.8-1 Dan Walsh <dwalsh@redhat.com> 3.8.7-3 Dan Walsh <dwalsh@redhat.com> 3.8.7-2 Dan Walsh <dwalsh@redhat.com> 3.8.7-1 Dan Walsh <dwalsh@redhat.com> 3.8.6-3 Miroslav Grepl <mgrepl@redhat.com> 3.8.6-2 Dan Walsh <dwalsh@redhat.com> 3.8.6-1 Dan Walsh <dwalsh@redhat.com> 3.8.5-1 Dan Walsh <dwalsh@redhat.com> 3.8.4-1 Dan Walsh <dwalsh@redhat.com> 3.8.3-4 Dan Walsh <dwalsh@redhat.com> 3.8.3-3 Dan Walsh <dwalsh@redhat.com> 3.8.3-2 Dan Walsh <dwalsh@redhat.com> 3.8.3-1 Dan Walsh <dwalsh@redhat.com> 3.8.2-1 Dan Walsh <dwalsh@redhat.com> 3.8.1-5 Dan Walsh <dwalsh@redhat.com> 3.8.1-4 Dan Walsh <dwalsh@redhat.com> 3.8.1-3 Dan Walsh <dwalsh@redhat.com> 3.8.1-2 Dan Walsh <dwalsh@redhat.com> 3.8.1-1 Dan Walsh <dwalsh@redhat.com> 3.7.19-22 Dan Walsh <dwalsh@redhat.com> 3.7.19-21 Dan Walsh <dwalsh@redhat.com> 3.7.19-20 Dan Walsh <dwalsh@redhat.com> 3.7.19-19 Dan Walsh <dwalsh@redhat.com> 3.7.19-17 Dan Walsh <dwalsh@redhat.com> 3.7.19-16 Dan Walsh <dwalsh@redhat.com> 3.7.19-15 Dan Walsh <dwalsh@redhat.com> 3.7.19-14 Dan Walsh <dwalsh@redhat.com> 3.7.19-13 Dan Walsh <dwalsh@redhat.com> 3.7.19-12 Dan Walsh <dwalsh@redhat.com> 3.7.19-11 Dan Walsh <dwalsh@redhat.com> 3.7.19-10 Dan Walsh <dwalsh@redhat.com> 3.7.19-9 Dan Walsh <dwalsh@redhat.com> 3.7.19-8 Dan Walsh <dwalsh@redhat.com> 3.7.19-7 Dan Walsh <dwalsh@redhat.com> 3.7.19-6 Dan Walsh <dwalsh@redhat.com> 3.7.19-5 Dan Walsh <dwalsh@redhat.com> 3.7.19-4 Dan Walsh <dwalsh@redhat.com> 3.7.19-3 Dan Walsh <dwalsh@redhat.com> 3.7.19-2 Dan Walsh <dwalsh@redhat.com> 3.7.19-1 Dan Walsh <dwalsh@redhat.com> 3.7.18-3 Dan Walsh <dwalsh@redhat.com> 3.7.18-2 Dan Walsh <dwalsh@redhat.com> 3.7.18-1 Dan Walsh <dwalsh@redhat.com> 3.7.17-6 Dan Walsh <dwalsh@redhat.com> 3.7.17-5 Dan Walsh <dwalsh@redhat.com> 3.7.17-4 Dan Walsh <dwalsh@redhat.com> 3.7.17-3 Dan Walsh <dwalsh@redhat.com> 3.7.17-2 Dan Walsh <dwalsh@redhat.com> 3.7.17-1 Dan Walsh <dwalsh@redhat.com> 3.7.16-2 Dan Walsh <dwalsh@redhat.com> 3.7.16-1 Dan Walsh <dwalsh@redhat.com> 3.7.15-4 Dan Walsh <dwalsh@redhat.com> 3.7.15-3 Dan Walsh <dwalsh@redhat.com> 3.7.15-2 Dan Walsh <dwalsh@redhat.com> 3.7.15-1 Dan Walsh <dwalsh@redhat.com> 3.7.14-5 Dan Walsh <dwalsh@redhat.com> 3.7.14-4 Dan Walsh <dwalsh@redhat.com> 3.7.14-3 Dan Walsh <dwalsh@redhat.com> 3.7.14-2 Dan Walsh <dwalsh@redhat.com> 3.7.14-1 Dan Walsh <dwalsh@redhat.com> 3.7.13-4 Dan Walsh <dwalsh@redhat.com> 3.7.13-3 Dan Walsh <dwalsh@redhat.com> 3.7.13-2 Dan Walsh <dwalsh@redhat.com> 3.7.13-1 Dan Walsh <dwalsh@redhat.com> 3.7.12-1 Dan Walsh <dwalsh@redhat.com> 3.7.11-1 Dan Walsh <dwalsh@redhat.com> 3.7.10-5 Dan Walsh <dwalsh@redhat.com> 3.7.10-4 Dan Walsh <dwalsh@redhat.com> 3.7.10-3 Dan Walsh <dwalsh@redhat.com> 3.7.10-2 Dan Walsh <dwalsh@redhat.com> 3.7.10-1 Dan Walsh <dwalsh@redhat.com> 3.7.9-4 Dan Walsh <dwalsh@redhat.com> 3.7.9-3 Dan Walsh <dwalsh@redhat.com> 3.7.9-2 Dan Walsh <dwalsh@redhat.com> 3.7.9-1 Dan Walsh <dwalsh@redhat.com> 3.7.8-11 Dan Walsh <dwalsh@redhat.com> 3.7.8-9 Dan Walsh <dwalsh@redhat.com> 3.7.8-8 Dan Walsh <dwalsh@redhat.com> 3.7.8-7 Dan Walsh <dwalsh@redhat.com> 3.7.8-6 Dan Walsh <dwalsh@redhat.com> 3.7.� x�������������� ���� X e '8 8�������.����! �$ ~ ���������������� �! �! �! � under afs_files_t Allow afs_bosserver_t read kerberos config
- Fix *_admin intefaces where body is not consistent with header.
- Allow networkmanager read rfcomm port.
- Fix nova_domain_template interface, Fix typo bugs in nova policy
- Create nova sublabels.
- Merge all nova_* labels under one nova_t.
- Add cobbler_var_lib_t to "/var/lib/tftpboot/boot(/.*)?"
- Allow dnssec_trigger_t relabelfrom dnssec_trigger_var_run_t files.
- Fix label openstack-nova-metadata-api binary file
- Allow nova_t to bind on geneve tcp port, and all udp ports
- Label swift-container-reconciler binary as swift_t.
- Allow glusterd to execute showmount in the showmount domain.
- Allow NetworkManager_t send signull to dnssec_trigger_t.
- Add support for openstack-nova-* packages.
- Allow audisp-remote searching devpts.
- Label 6080 tcp port as geneve - Update mta_filetrans_named_content() interface to cover more db files.
- Revert "Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling."
- Allow pcp domains to connect to own process using unix_stream_socket.
- Typo in abrt.te
- Allow abrt-upload-watch service to dbus chat with ABRT daemon and fsetid capability to allow run reporter-upload correctly.
- Add nagios_domtrans_unconfined_plugins() interface.
- Add nagios_domtrans_unconfined_plugins() interface.
- Add new boolean - httpd_run_ipa to allow httpd process to run IPA helper and dbus chat with oddjob.
- Add support for oddjob based helper in FreeIPA. BZ(1238165)
- Allow dnssec_trigger_t create dnssec_trigger_tmp_t files in /var/tmp/ BZ(1240840)
- Allow ctdb_t sending signull to smbd_t, for checking if smbd process exists. BZ(1224879)
- Fix cron_system_cronjob_use_shares boolean to call fs interfaces which contain only entrypoint permission.
- Add cron_system_cronjob_use_shares boolean to allow system cronjob to be executed from shares - NFS, CIFS, FUSE. It requires "entrypoint" permissios on nfs_t, cifs_t and fusefs_t SELinux types.
- nrpe needs kill capability to make gluster moniterd nodes working.
- Revert "Dontaudit ctbd_t sending signull to smbd_t."
- Fix interface corenet_tcp_connect_postgresql_port_port(prosody_t)
- Allow prosody connect to postgresql port.
- Fix logging_syslogd_run_nagios_plugins calling in logging.te
- Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
- Add support for oddjob based helper in FreeIPA. BZ(1238165)
- Add new interfaces
- Add fs_fusefs_entry_type() interface. - Allow ctdb_t sending signull to smbd_t, for checking if smbd process exists. BZ(1224879)
- Fix cron_system_cronjob_use_shares boolean to call fs interfaces which contain only entrypoint permission.
- Add cron_system_cronjob_use_shares boolean to allow system cronjob to be executed from shares - NFS, CIFS, FUSE. It requires "entrypoint" permissios on nfs_t, cifs_t and fusefs_t SELinux types.
- Merge remote-tracking branch 'refs/remotes/origin/rawhide-contrib' into rawhide-contrib
- nrpe needs kill capability to make gluster moniterd nodes working.
- Fix interface corenet_tcp_connect_postgresql_port_port(prosody_t)
- Allow prosody connect to postgresql port.
- Add new interfaces
- Add fs_fusefs_entry_type() interface. - Cleanup permissive domains. - Rename xodbc-connect port to xodbc_connect
- Dontaudit apache to manage snmpd_var_lib_t files/dirs. BZ(1189214)
- Add interface snmp_dontaudit_manage_snmp_var_lib_files().
- Allow ovsdb-server to connect on xodbc-connect and ovsdb tcp ports. BZ(1179809)
- Dontaudit mozilla_plugin_t cap. sys_ptrace. BZ(1202043)
- Allow iscsid write to fifo file kdumpctl_tmp_t. Appears when kdump generates the initramfs during the kernel boot. BZ(1181476)
- Dontaudit chrome to read passwd file. BZ(1204307)
- Allow firewalld exec ldconfig. BZ(1232748)
- Allow dnssec_trigger_t read networkmanager conf files. BZ(1231798)
- Allow in networkmanager_read_conf() also read NetworkManager_etc_rw_t files. BZ(1231798)
- Allow NetworkManager write to sysfs. BZ(1234086)
- Fix bogus line in logrotate.fc.
- Add dont� x������������� ����� X f �&8 � @9������! �$ o ���������������� ! ~! �! � 68830bdc6446e2e85192a7b21b 678fe3442dd18d402c26da0885230eac6f359ddcb096aa699a5e473592527fc1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1d9cc3c61f32db088cc1a3210ecde0b49fcc4ab99be8b6bcbe620890ab97b38e 89dce2e1306628dd5e7adcd1d0b8350a7d04379be91b76980b2f4c614e2a93f7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c66cc127f21fcd5944585094b23e2372d9a6242e85d110fd19136fc82fe4278c dc2c8719abe46edd1f507d2dda2717a581e638460c482c0528fb183ec89574c2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b3ac4bf3469ae9759078977d2f7461d81156a1eafd89f177da770603c0609ce0 0a3734b9d81db8b8494731c2af01ebbfed3dbf7d446a7933d9b96ca87f6b6f06 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 116246180ddf7925f109c76ddfc27d2dee3aa8914db89788ac8e3ee28c1964b8 87cc797d7fa978f14c45a09ba0e4eff552c8f20a07d80c142dd0245363c6e96d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f1b7590dbce2e540d1c314980095615b5698263ed02280a3676c6da7a3de05b2 604a64848fa4b52bf606536a6f8abcc849a90e471a60a4b8f63649ea3f3e2107 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0e7a988e6d125432c68c62ecb3750deddb118e0874f14f9c79654b09f5701719 7381755c360cbeccb238e7f66b6f7f0ecad2b07c70c99d20cb042bc413029fc5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 016c092963ca91ff38c6055e33aa5eb1735a5211fcc4384b198429057d01c641 4f0204b95d66eb043b9940cf6e2a230c71fc6e3895094f7c460ef52d0226d02c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4c6fae57425581810e04079dd3c813f1b778f30d95e410c8cb17391566a46043 7119b9ecdd47b07e0e3afbb00d8a9e351062dcd3372b1c96eccc337eef7acbf0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c45b73d658c0cb39be1a926c3d7452c3d745c3570fd849f803dcfad25ab363f0 d3094ae30cd877ee1c9f05cb0c78486550205f81a81240adabcb354e450a22a1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1e9d1e50b2520f751cfade4f66d0839870c24b00bc437dfa1b303bf226536620 55803bcb639edfea1294c4b3f99e2041562f45993d7fd4b5b5a0c6f9c9f8d31e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 81a53a204f4dbc39387caeefd3df986fd64f3ef0cad06f98924b80f9a7970140 9bf6c2cf92e81019e35b52b1371d297ea0631ce9b08a87fccf83aadccc448d14 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 81fd4e8cd5ffe758b1cf6d9b663dc4b5726eb0f14da080a598b976db6cfd4284 8ae5d345af7c1b976eaf3a2dfa3974f77b4b15de6be70e5a9fa5169b43714065 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1fcfa6f832d321813277c64b9bcc448f0ec0ffa15c44f1c90c17d8a0cc3c9254 8b830f5524e6909efa6675ceacee5aeb4cf5804b7b3ab9dc99ca3bb0f361efa5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4c2874e04a408f82ca1f7efa6e6f0b21e0d6521ab9fbba965c38c571e2a3e081 212526f7cef0d88de373697090459f813a27336b8ad199a0f82b2b1e1747887a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6f2048596038545b4b56cc540003d4ccf5f32965d7eeca062614774079ce31bc 3b94f74dc70883620362751faa3b1f6ccedc8014970901a6891cbdfa96c8cd68 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 226a64e49ab9f25437c01fe825dc80a6b23be2a97a52d60523d3ce09d20bff11 a0cf9f5859bff03d7bf8daf7b5356f5d26a47133b83c75ea5f84b268efe14bc7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 76e51b676f107dad03bef4549e23ec976d79e4b281e832482b3c5920d8d33f67 0f473e8e4ebf58384f2ba1b8f56b3c708e0a90280dfca8092e4f9aad6ea73b15 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1a6fa139e9f0fce0b51432a52f03bc3d1e97aac96ccd54ade33b5b0d3b1b955d bf53cdd4825634607ba440085146aeadccf3e588265392b72b835826061f1ba6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4f75bb7c1d55a5afa8d98cdfaec4629bcbf86ac8bdd4e737023030fb8d9fdd3d c9c007b02c65f9a5d1094261e28f9c894d3a7bfebb057cb76ebe80d23d412442 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0c3273713154fbd29feece3a43bb84088dc0e4dba8b9342840f9e575dec96755 d1d51d026c1d71f46b7f86d9afb9736c5fc375cc71265e884606f2b954f807ae d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7c� x������������������� X g "&8 ��������������Q �$ o ���������������� Q ~Q �Q � 69ebfa007ae5519b79f5714beb93d57795820e76375bd2199f1c75d43573fc99 289e09b58c3fb5e2304de546e8edf4203153f3327ac83e18dea1c18f13b510e6 1e5340e754ef29011e137fdc6d282b8695fbfe65ee750e04e8415e8d14866b9c 4ca02d8100008d3fdfc2c8de9635cd3f586b463cc3c17f727b01a7f6b247f4da b610e50c60be66d802d9ba9a562824d1a0fd976ae88298eb8ff24db76cf632ab d4bff86b8bcb5dc3a8ccc215445a6c7791051ed7a8f608b32985e068a6d31693 96353a0a916a57f21fc78f7b8498a7cf82d64b2664645c80ca890885c9c09219 04510e47118dfba8a01583468de50cc8983c37922ebb3e12166dbcb9d38aa452 19722a17917a10c4e243544a4deb246ff8c599540a82d32b1e835dc7b10e21bb 9431bc8c41ed6c311e13392af57e99c4580d3ec867b3778e62fdd916acf49d36 87d22a25ffd243de24326610c8ae3afb606f9758c33492d40531482f4a670b7a 915b35e4595bd8d07881b94e18afaac95a5ecadbca4c38be38e2e2e5c994824e fca2e9025c8ecefb4c11157c2a2015f6dfb4a2792214fa5e2bf3ac404c9a9150 01a649413535d656d4781c68c5ead9e1b838f025fec45288b25c97261113aee6 43b664feca2c9d14cfc90d3527fc0bf6931c75000cf941d1f8c914e83dfb21ba 348d5d80248e1d0d8ba0dea782af869b4a87d7553436e4c3128790787bfa66a4 2971002221d7020a6c43f41efba9b68c497e04bef8b7cb1b9cef63e520635a20 96d57d44e8096b1b9f5ef4c5bfb7ad1ac6c5da21c2324d980fa6ec0429717746 15e5a90a0d31555578a7f431518afb464756dd444f0fbf4d2f116c461fe15b77 474f54a7792cd752f9226bebc8cc1dec441ba17cf8f071a6beb1a5e7981524d9 7a3643abdef1bba6bd7f41d47dec02402b5a0136b84f7c782de93ad9fc1fc063 1e3a2b0e07f61fa1c4cc98590e6855154f1b44f76a73478fd97fbc7fa8de924c c073858ba7efbbb73f07b70ed14e38c667f24dfcfab9969d20815e73e3a53497 ab5ea8fc6f36eb8d13e68896db391141028bae80feac3af524af64c50bd078e1 4649f2b75b50b551eaf5bd3b67b2df831644740e43ae32d8dde91517f1676f29 4b82191a38b945e4cb1012943b2b919fff04c30592ff83665735da4a223d2766 fe75be79e03ad90ac24294ffd2639011c8611c30407ecac8d9d964df251b988a f35060e3f14f51e58c62fe97252a5c1795da769dfefc6356793b083c9e449eb2 df413b86ac2de3588f7b7c0355495ad4c54d3c330c69ad12090d0ca6628362e9 b202fbf831d1b983a7d6041fddb681ca59b33fd008e9f80a8942d94a12038851 10181cc5a9d6b0b1954be791e07036b89fc68cd45f6c540c5d4c6a63bf22006d 61e0c2880f8db58e2f12efd1fad0184806bd112c6abed02539dfec0d5fdadfa6 3ff8142bd12cb6d132d4df87c5ecc7781fdd74541cfa55a5f3285d15aaa952f7 aeece21d736b8b9345626c9bebfa1265a44edc86ccd1b694d16e97f13e79d9f9 a9f5b5587954a107abe0490c7cdd562cb537a8b6af8f348527cba8d075ba747c f4afa9c5d2dc16bbcbfd1b45832647332c1132f6a75df5a0cebc45386075eb8c 3969071819a488f8578038c6531de2a622f168e8b57c10140632972b997fdc98 77ec60181f2efa625197c38b466b4819879672630bd849ed8acec502e6555e19 13525f3f1d9b34fc94e634623e82414f72ed8fe613b82acfe800cb66ad80a816 b951b99c894f701eac08b79265ff2ccbede0954f97a537d03fb78801ed645861 219ec21cc059ecfeb3bc7c6e349734dd0344a06a724781a54c17811d69ed77da 685153447312b3322627a7f28b432e1a9ab202bf89a0352309f274b039a4339e b0d7a98b14de828e10c92d697d1b7c7ab1870bc08f00569e2e5e66395de86ff7 bd8e984ee828638d9d17515c406d093eb28723dfb6b0f12dc61926e59bf5ea4a 0d97316fa237eede5fbd98ab28c7838229423df1a7adaf7ba3503fd8f5ad3d85 6fa6967cc7b2ad72eec3c2c627120e8396be9223522d733f57c9d1c5ad14a3cf 820b437281f5592dea7f198797868b7206960af9124b51455cd92fd1929595f1 d1a3234f91d7e4ba0e4018fb822bece4981c6baabe33846da19b179beace0f3f a15263f2fbaab6927932fbdf5dc7be936cc2e577120783a36a4992c15314f0aa 12e565ea59a4a3a332d8fefa40a654f9482014c145f165bef3d065a59daee55a 64d7bc642e1bdbcd01b125a860cfcc0f3f4700ef7a635655b0a7e2eae6cb78c5 5fab9bbf77aead9fb466b79a143dd37334541d900974380dd06eb8e2f924eb19 d9bda096d077878654f000befe314c2890c3a4be204d7b8703b6a4dfcb40867a b4579d859f98e4fed714e0aa2dad96f28e9207a696f9f308a89a286a3b0958bb d3207217dce4917df140c21d3ed0f408882bf70d7bc8a49a2589e0f23d61d03c 8795727c40beef761eb78c1d76d334c5c7e4d32bdf1a56c9213b061568d1fe26 98e1dc6f8cea0074f746bb775fc9422c2b53279da9f23f9ecc4e932629fb8c40 1e44c71d66a4ee043692d225d9bbc01be51f0e5051b0cdc057cbfe3af4cfd2cc 899d9399b809be16d0797decabe63cc647f7985a605ae60de860be1a439c3056 3d90f60be77f44dea803ca765001cbcbe92d7e0044c7ebbbd120893410ce7bd7 6a0455c3421938496dbb924cc00a8a562a42c8c69b0894067c6ce1a9403ba07b bd502edcaa7b047c864d9a83f566ec30488ba31969f92ca36e1d471d747d1694 2bc86730663f8cf01fd155� x������������������ X h �(8 �������������cN �$ s ���������������� cN _e �/
���������������xsgbVQE@4/#
���������������ythcWRFA50$ �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
z
u
i
d
X
S
G
B
6
1
%
� � � � � � � � � � � � � � � { v j e Y T H C 7 2 & ! � � � � � � � � � � � � � � � | w k f Z U I D 8 3 ' " �
�
�
�
�
�
�
�
�
�
�
�
�
�
}
x
l
g
[
V
J
E
9
4
(
#
� � � � � � � � � � � � � � ~ y m h \ W K F : 5 ) $ ��������������zni]XLG;6*%���������������{oj^YMH<7+& ���������������|pk_ZNI=8,'
���������������}ql`[OJ>9-( ���������������~rma\PK?:.) ���������������snb]QL@;/ursive() helper f �� �
� `��Q ,# � n�>s �B � �� �u � Kv@�Q @= � �>Tc M � ?�
e �| � ��u � � Kv@�Q ,' � �>T�b �� � �� �t � Kv@JQ @+ � 4�\�b \> � Kv@/Q H � 4�\5 � � ��� �f � Kv@&Q `) � 4�\C �1 � �� �� � Kv@ �f � Sy��b d� � ��S �Z � Kv@� �" � r,�b �E � ��& �B � Kv@� 4: � r,jb |4 � Kv@� � � r,Ub �E � ��x d� � Kv@� � � r,Eb �) � ��h �B � Kv@� P � r,5b \J � Kv@ � � r,(b l) � �� 8 � r,b �3 � ��^ � � r, b �' � ��9 �* � �}��P (� � r,�a 8C � �}��P �? � r,�a 4 � �� � � P��; |{ � r,�a H% � ��p �H � �paKP � � r,�a @D � ��L �� � r,�a � � 9��ia l~ � �� �8 � W��LO �m � 9��3a �, � ��� DH � W��.O � � 9��&a 0 � �� � W��O x; � 9��a �% � ��� � � W���N �Q � 9��a $< � ��� �4 � W���N xC � 9���` � � R�W` L+ � �� | � W���N $! � 9���` ( � �yt�, �Z � �� L% � W���N � � 9���` �= � �>� �� � �� �' � ���N H3 � 9���` " � n6K | � ��u �$ � ���N <M � 9���` 4! � �U�K �0 � ��g �, � ��pN 00 � 9���` 0 � ��� (� � ��SN �� � 9���` �# � �� ȅ ~ ��<N < } 9���` �) | �� % z ��(N �/ y � O�` �4 x �� <. v �� N �/ u _�Pe` Dn t ��G |� r ��N 4/ q �J]5` pD p ��* # n ��M �f m �J]*` �% l �� �� j ���M �f i z��?R h' h ��� �C f ��M �f e U3�6R ^ d ��� �L b ��M �� a �CZ�_ � ` �� �2 ^ ��M �' ] �CZ�_ �/ \ �� l, Z ��M �2 Y �CZ�_ Dv X �CZ�_ % T ��v �6 R ��$M � Q �CZ�_ <4 P ��[ 9 N ��rL �. M �CZ�_ � L ��N 03 J ��5L �] I �CZ_ � H ��4 �: F ��B �e E �CZ� he D ��
[ B ��MB |� A N��[_ 4l @ ���A |� = N��9_ �� < YJ�Ne �% ; ��� �, : ��d8 �Y� 9 N��_ du 8 YJ�@e � 7 ��� 0x 6 ��. O 5 N���^ @ 4 YJ�2e �= 3 �� �? 2 N��T |9 0 YJ� e � / �� 0! . ���- �G - N���S ,� , YJ�d ! + ��- @5 ) N�εS H ( YJ��d �& ' N�ΡS �4 $ YJнd �� # ��P �[ " ��I- � ! ���O l� YJ�3d (� ��? �/ ��,- �� ��O $) YJ�"d h2 �� - �8 �� �� YJ�d D- ���, �/ YJ�c � ��d h ��, �K `��R �a YJЦc � ��9 t� ��, U
`��R ( YJЇc & ��� �B
��s, 8` `�tR �e YJ�xc $, ��f L ��(, xx YJ�>c �n �� �Q ��e" �:� `��Q H� � x������������������� X i �&8 ��������������! �$ 4 ���������������� �! �! �! � @redhat.com> 3.13.1-204 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-203 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-202 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-201 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-200 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-199 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-198 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-197 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-196 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-195 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-194 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-193 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-192 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-191 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-190 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-189 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-188 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-187 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-186 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-185 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-184 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-183 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-182 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-181 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-180 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-179 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-178 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-177 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-176 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-175 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-174 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-173 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-172 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-171 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-170 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-169 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-168 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-167 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-166 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-165 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-164 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-163 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-162 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-161 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-160 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-159 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-158 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-157 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-156 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-155 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-154 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-153 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-152 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-151 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-150 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-149 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-148 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-147 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-146 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-145 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-144 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-143 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-142 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-141 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-140 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-139 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-138 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-137 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-136 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-135 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-134 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-133 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-132 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-131 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-130 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-129 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-128 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-127 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-126 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-125 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-124 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-123 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-122 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-121 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-120 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-119 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-118 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-117 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-116 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-115 Lukas Vrabec <lvrabec@redhat.com� x������������� ����� X j �(8 �������� �$ ���������������� a �i Mk �!�� � эh^ aN e � x�������������x����� X k &8 ��������� }Q �$ m ���������������� }Q |Q ~Q � 4f7c2c6359e 6e91f4c5c4081fbbd667505dc4daef02b20b9eea97a37e282fbcb341edc3a758 5bffdd003803a28440319cf5af68b2fe87dc594475e075555545aa8f5269ea5c 54b726dc2ead417ff7a9a233dd38c338b4e63d558436f9a13e0837fcb9bd0e27 4657efd7333ec52a3dac865054d3e16a346f911d0a454d7d0bdabc4c7655925f 9753f5cd9bedd2442a5b11bec01da0bb1b819706f1a11a4cb2c2079543cc16c9 9118d68bbb8352ec259eb0af9a4c57de60e57fc3ca7f2f31bab9b6d848f0da99 dd1f115eb1e8b20ee1342f73fba71fa8e41582256a64f4de420c1fd2ef6fb7d5 ffeadafcd8a3419ffe4f53bd03a6842d96895b21d21d1ba822a6409a62c854c9 8f903c45d92aed0164d69a368fb9370daae360ad91e08df48aced4894a4fff9e 5fd6fda8218b20f8d101bc409f02bf53a27c7e81c0b793946ee44d5d47182896 6c3b4709593eb8576984d66683b7f24415cf4a7552b20fa3b91e78a3f23b22ed 536ad033bad1c77f77a06c4c3b572f4794a0e49172987f18139834889a79ad5b c11dc1370a2cd9e41ab9a1b83de595477aee2a6a80a3fb8dd2037c4625daf20f 2a3e6d365da440c91369c7beeba581bb0a7610c66d2a1ee0fda0d17a7afab3ba 976bbeaa24332d25168581f70aa982ad0f33a997273ef21dbab358d63cc32752 822c5c5a3a907fd4334621e4eb5a0f388d887e2126d10749b191aa71843ced14 de182987ef31511956cd374f1e5794b12212ab3693ded84281e24e8c5b23be24 7bdc9962e89f1f031ac2505452645dfddca314dd3c7df2cfe81777a5f20a4b59 66473b8f70027afb4f89bc5d634bc4d50ff33640d80e1003e02d15e22a8d1819 0f91cefd81f80e9455db3101d0a96eec3cb1036212a94ef8184bfae4924eea1a 139158b481977cde628d7ac47a6df32bdc98e9d25b8e19dad9f0df7f8b7c2a25 3102df1172270672c5fe8f87ba286f898590ff61c5086e384485753db4322cc9 92e96487bb051b2fc371091da99793899e6710eedeee07da5cd3b9b291b50d9e d1e2ba2da501deb857b5896dbf43c969317718874b78f4711061e7930ca2520e 2b692a530a39027596a5aadd58b13f5917debde2a0a44390c754554fd124b78d 361283b91992c25fa0cfb0289b86b5f8a295bbbc19c5ed57a939eadd478a0b0b 70ec70645e9fc475cc58d63c0d89c7627a6c91e98d891c089957876f5463da48 2cf8971fb3aa5e7fbf0b66e39dce425b70047fb3624f4a72e744ae9451f17cc0 3332d510ba4d7688dd87e713211f1fabec33dd3e779c63003b454a3236eff205 3c27eb9daab11fe3d08d6107187be45023ce01b3d7a9f46f70259ef36704bcb7 bc5e0e509155f5ba9bb033cc2310cf0fde82fca3f5434f965412dd982574c763 225e0420e4d78cd03908e4471246415008add05873a15854d19406e5ff8ad436 7ced13577e8b5e2725fe88051ae45489569c960b2e622d4c56bb118269669719 58258fecd8dbf45138b0f532168816f682bac40ea81b0c4d11d0cd41418f694d d213e192458b176358842243339ef92b6ecd2d3d3e484487268223ab7380846d f9ec69b683b108f2a870525f10cb2cba282c2ceddba415ee936934d3e6076f3e 8619ee81c654d65e017b25a5f2b28fa862a48c354e5c3f93a88eb8416c63f074 406ea50ce83f5606c05f85cf371e5ad8c3677cd438d5aacf96411bf6847cedda 60ecbb1c09c1b52acb86eefdd139a303ea736c16f5395a89321ae7db62cd4469 68ac83a9b792ad75774a81a9bbe4a46b13df9e6282890b95151b2fa5a7fb33f3 3105625705db10440a4e0825fefea99c390eae4bce020c3ab39b297bba021157 ed80c8d79309048de4d962e54a54fecba7daf444737c64954df5330c02a4fe58 8c7839ba987b3c8a08faca5400493b1f1fd8df7ca77b42804fc3b6e1a591f872 f727d5eafcc7e186ef13e5e5a9b994f8c891c49f477b160b72cfeba21b842532 01295166a088b8d489d04253b74c55e16246f55bbe4f00473e953148e29a02d3 b208f213a2b9a9afe28a82d716ab3df9a439084db4c3df294409f349ed16a95f 5723e1855a8a8ba2951f82d3f87b9137a4349b3ae7527e20b62d8b7bd34bf1ec b416a51d1a4e85814a75e21adc57b56a158d43d4d16d967e3d978eed4dce14ba c0162d00208485ff84eeeb1540d20813891a04edee1d4fa399d4c622ed0d5a8f e06ce5af1257a4bfa5005e0d102eb9af030bfba0fc0ff6ea20e9fa9b470ffca4 48780d32a351bc87920bcbc0c25d4809efaa22896af8bfb31fc4a786b7bca77e 6ebcb8574510283bfb99467ff39aa11dc9c7534329c5e8a0803ac7e3749f853f ec724c84df26d84f0fd06fbce43e06bf706f942f1db7fa964eabc92c9f999f73 536955c73b3718623d6886e7ca07129000bd6d70adbf3053fe7533881f6c07ea 1e59eaa6bf77967078b3bbdb9789d1a2745ac6073189ab1b5b1071b4c90b00c4 d80e549812587116cbd6d49a2b5f7e00477c526d5dd8d1d90fbdc4fa596cf139 206c38413ab720622ad4e92ed7516cc1647be6d3da9a5d077487a9c00ce4dcab dd6785cfd7cda870bbf57732d6f9d2f9ab605e3edd8164555ab6f62197a2a7db 8dcd5da77670784c88cebbdaf6a212b549e76a086dd34a9efc2b284566144d29 a08c2ebe1a9ee0e97eaff90206fd99748fe50306ca316160cd9e6caa95dc2973 fbb16171e3da6f0e3579a5d67656e041ce38c0f2517f6f4c006e998978ed817f a92c948a620da6fd53d93b86252cf2577db2aaad7d1a16c27c56e40ff94ea316 daa75d0e35a22afe2008f0044e0c� x������������������ X l �&8 ؤ�������������! �$ ���������������� �! �! �! � 612e04067de49b 064c7491cfd66221b80f37634d50d039400cd46e4d1fa6d6edaf52ddf65dd689 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6a24585a53a597aaa04ff24ad4a2deca244a683fb36d9fe625365e27852caeda 9240dbe034d78c43748908daf51194e6c733b703d431e72720095bdf86810854 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 296133cca4890e1615234c4fcb4da9b0a8664391b2a64b6b2842c7d8df20ea3b aeb1123c716b0512b662f73a2838e6c1e50ac4b94c3b9c67b635ec9ba0641945 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 089191e2c00b8010d76d55ccee77f2e2f0b554737ddca1049c76169b636919a6 c58690901d3063367834008a1b9a31dd8bc35f9454ac125a0162e2722e25759d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4efa15e802efc67922e7d4dc05df833985a72e4ebf75f48af483b68f938c88d0 141388b5839a69f4281387b31c46b7b9ff4b55877f7d467072cbdf2949ec807f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ed24c1839d767402b7421743e3a6b61410711abc626b0a68ac6c34b6592ba88f 7ee232bb12b6d2ae1f471a47b503dba8272573532b978ed4674b3e64e68c7ea7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 878fd702fc53dfeca0ffa72556f10ad21f014a105cdee85bdcc138d551eb57a5 4eb3f2ada777425b51507f4b1d2ac6ca25c04112dcc4485f7afc082f625423c6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 385b25aad1f9f288bc32789b3db80e2b7b83a2a1a845df30a581f62b9f3c318e 31c193d67f5ba95451707425b708a4b6227aca7dd41e4ddc2ae3160a1ca6c6fa d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 74db268677044f8fccdf6e2e608d265c20d757bacde1fb6c8156ed23d0fcbf3d bd3824b7a42f69fd08fca9eee9db5ed08984f0dbbd9d60a414ed2a8a0af8cb35 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ec7d68ebe3530d0497b39c34ca00f20a8fe217c81e380c056bdd4c4733df560b e0570ebae553f376b984ce2668c334ca8cff0318924aecce6bc786c4ed54006e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 16bf768e7701c2f724d0aa6e0b369e9403612cbaf855a1aff53e6e0e316b8613 5acef77e36f853a0b4679cf54bbe5102846cbecac8c82a5edb6afc8c1381711f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e cc9210b85a27826d1bb9c3165145a4b64b3879fa7e796c8a0c0bb445849af65c e01da1cdc728631d52ba68c299f64e6091353efd89dc7dd0ddfbbaa7e7e53e28 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6c1f8c7a3f2eaff2ca9cf79bc84c627e2149bcb9487462c8e5236d65c23eeae1 6e069826b55a91859b73115a15838f748d520b6b7236255d4994e6aee4bd7eb0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0583c8f3a7808de8503d7d4717994cf3e5e40e1548b9c0227b82dfc6996cb09f ea22148a89c40dd0c0a945886f6252316d49fb243ebb836410a7ba01956ca4cc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 73eeabc86ee7d8a618834a8cd38c27555d9ae8a5b542b2291312cc77a5b77a4a c48f040328f401db3035db5b91ac94883fa0593ce68c0fb3abff415e03017deb d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 386c07b87ce07f7c9aba4d610cc66dea4b4dc0c934046f5973b787f544077dcd 13dde29627d232de91f00eb4d44a8cb9e8cff28660905e29c1db4993f52e3a02 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0b3e7ac26c59ac96b28b5e5689d4e9bc4c79fcaebec63ed5a83a6e093047b113 b252de58767ad3ad21e7c97521fb6d67e2f7a6eb86aef5ddc1515e65e5fcaa82 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1d10f822eaabcf1db689686e6cf93a7d08e96ce9489ff7469481194b49440502 5701379563cd9a2002ff333e41bb93ef838cfbf6d3ac9d60f1a8a96282502f61 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1208b222465ad704ca391d1ab12d47c7311a1ab44c02dca9eb87c62f1d8a2d13 0f4c380471e30e80ca824dc339f167f23755c055c5b62524cd11b8b34946cb58 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 117d38da931cd70a0eefa1bd9426646e1bc756f567157d425e08785a0f939764 826e0c05df18df4e66789afe748dc67930a6ebacf7cc5f8ebd6b57c71a522158 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e db9dfca6be9612e03990aee409051033b27e762f82b7b066a431c1bdd36a8489 11dbcacc8d9525bc2db9eea23b7c2d9e360987eaf5f09036cb561f9d3661b121 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 522a� x�������������h����� X m �'8 �X�����������\" �$ L ���������������� \" [" ]" � � x��������������w���� X n z%8 ��������H ������wb �$ g ���������������� wb vb xb � il::SpamAssassin::RegistryBoundaries) perl(Mail::SpamAssassin::Reporter) perl(Mail::SpamAssassin::SQLBasedAddrList) perl(Mail::SpamAssassin::SpamdForkScaling) perl(Mail::SpamAssassin::SubProcBackChannel) perl(Mail::SpamAssassin::Timeout) perl(Mail::SpamAssassin::Util) perl(Mail::SpamAssassin::Util::DependencyInfo) perl(Mail::SpamAssassin::Util::Progress) perl(Mail::SpamAssassin::Util::ScopedTimer) perl(Mail::SpamAssassin::Util::TieOneStringHash) perl(Mail::SpamAssassin::Util::TinyRedis) spamassassin spamassassin(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ /bin/bash /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh /usr/bin/perl config(spamassassin) diffutils gnupg2 libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcrypto.so.1.1()(64bit) libdl.so.2()(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) libz.so.1()(64bit) perl(:MODULE_COMPAT_5.26.3) perl(:VERSION) perl(:VERSION) perl(:VERSION) perl(AnyDBM_File) perl(Archive::Tar) perl(Archive::Tar) perl(Carp) perl(Config) perl(Cwd) perl(DB_File) perl(Data::Dumper) perl(Data::Dumper) perl(Digest::MD5) perl(Digest::MD5) perl(Digest::SHA) perl(Digest::SHA) perl(Encode::Detect) perl(Errno) perl(Errno) perl(Exporter) perl(Exporter) perl(Fcntl) perl(File::Basename) perl(File::Copy) perl(File::Path) perl(File::Spec) perl(Getopt::Long) perl(HTML::Parser) perl(HTTP::Date) perl(HTTP::Date) perl(IO::File) perl(IO::Handle) perl(IO::Pipe) perl(IO::Socket) perl(IO::Socket::INET6) perl(IO::Socket::SSL) perl(IO::Socket::UNIX) perl(IO::String) perl(IO::Zlib) perl(LWP::UserAgent) perl(List::Util) perl(List::Util) perl(MIME::QuotedPrint) perl(Mail::DKIM) perl(Mail::SPF) perl(Mail::SpamAssassin) perl(Mail::SpamAssassin::AICache) perl(Mail::SpamAssassin::ArchiveIterator) perl(Mail::SpamAssassin::AsyncLoop) perl(Mail::SpamAssassin::AutoWhitelist) perl(Mail::SpamAssassin::Bayes) perl(Mail::SpamAssassin::Bayes::CombineChi) perl(Mail::SpamAssassin::BayesStore) perl(Mail::SpamAssassin::BayesStore::DBM) perl(Mail::SpamAssassin::BayesStore::SQL) perl(Mail::SpamAssassin::Conf) perl(Mail::SpamAssassin::Conf::LDAP) perl(Mail::SpamAssassin::Conf::Parser) perl(Mail::SpamAssassin::Conf::SQL) perl(Mail::SpamAssassin::Constants) perl(Mail::SpamAssassin::Dns) perl(Mail::SpamAssassin::DnsResolver) perl(Mail::SpamAssassin::HTML) perl(Mail::SpamAssassin::Locales) perl(Mail::SpamAssassin::Locker) perl(Mail::SpamAssassin::Logger) perl(Mail::SpamAssassin::Logger::Stderr) perl(Mail::SpamAssassin::Message) perl(Mail::SpamAssassin::Message::Metadata) perl(Mail::SpamAssassin::Message::Metadata::Received) perl(Mail::SpamAssassin::Message::Node) perl(Mail::SpamAssassin::NetSet) perl(Mail::SpamAssassin::PerMsgLearner) perl(Mail::SpamAssassin::PerMsgStatus) perl(Mail::SpamAssassin::PersistentAddrList) perl(Mail::SpamAssassin::Plugin) perl(Mail::SpamAssassin::Plugin::Bayes) perl(Mail::SpamAssassin::Plugin::OneLineBodyRuleType) perl(Mail::SpamAssassin::PluginHandler) perl(Mail::SpamAssassin::RegistryBoundaries) perl(Mail::SpamAssassin::SpamdForkScaling) perl(Mail::SpamAssassin::SubProcBackChannel) perl(Mail::SpamAssassin::Timeout) perl(Mail::SpamAssassin::Util) perl(Mail::SpamAssassin::Util::Progress) perl(Mail::SpamAssassin::Util::ScopedTimer) perl(Mail::SpamAssassin::Util::TinyRedis) perl(Net::DNS) perl(Net::DNS) perl(NetAddr::IP) perl(POSIX) perl(Pod::Usage) perl(Socket) perl(Socket) perl(Sys::Hostname) perl(Sys::Syslog) perl(Time::HiRes) perl(Time::HiRes) perl(Tim� x�������������Xg���� X o ('8 �������������! �$ l ���������������� �! �! �! � -puppet-master to avoid puppet agent running in puppet_t
- varnishd wants chown capability
- update ntp_filetrans_named_content() interface
- Add additional fixes for neutron_t. #1083335
- Dontaudit sandbox_t getattr on proc_kcore_t
- Allow pki_tomcat_t to read ipa lib files - Merge user_tmp_t and user_tmpfs_t together to have only user_tmp_t - Turn on gear_port_t
- Add gear policy and remove permissive domains.
- Add labels for ostree
- Add SELinux awareness for NM
- Label /usr/sbin/pwhistory_helper as updpwd_exec_t - update storage_filetrans_all_named_dev for sg* devices
- Allow auditctl_t to getattr on all removeable devices
- Allow nsswitch_domains to stream connect to nmbd
- Allow rasdaemon to rw /dev/cpu//msr
- fix /var/log/pki file spec
- make bacula_t as auth_nsswitch domain
- Allow certmonger to manage ipa lib files
- Add support for /var/lib/ipa - Manage_service_perms should include enable and disable, need backport to RHEL7
- Allow also unpriv user to run vmtools
- Allow secadm to read /dev/urandom and meminfo
- Add userdom_tmp_role for secadm_t
- Allow postgresql to read network state
- Add a new file context for /var/named/chroot/run directory
- Add booleans to allow docker processes to use nfs and samba
- Dontaudit net_amdin for /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51-2.4.5.1.el7.x86_64/jre-abrt/bin/java running as pki_tomcat_t
- Allow puppet stream connect to mysql
- Fixed some rules related to puppet policy
- Allow vmware-user-sui to use user ttys
- Allow talk 2 users logged via console too
- Additional avcs for docker when running tests
- allow anaconda to dbus chat with systemd-localed
- clean up rhcs.te
- remove dup rules from haproxy.te
- Add fixes for haproxy based on bperkins@redhat.com
- Allow cmirrord to make dmsetup working
- Allow NM to execute arping
- Allow users to send messages through talk
- update rtas_errd policy
- Add support for /var/spool/rhsm/debug
- Make virt_sandbox_use_audit as True by default
- Allow svirt_sandbox_domains to ptrace themselves
- Allow snmpd to getattr on removeable and fixed disks
- Allow docker containers to manage /var/lib/docker content - Label sddm as xdm_exec_t to make KDE working again
- Allow postgresql to read network state
- Allow java running as pki_tomcat to read network sysctls
- Fix cgroup.te to allow cgred to read cgconfig_etc_t
- Allow beam.smp to use ephemeral ports
- Allow winbind to use the nis to authenticate passwords - Allow collectd to talk to libvirt
- Allow chrome_sandbox to use leaked unix_stream_sockets
- Dontaudit leaks of sockets into chrome_sandbox_t
- If you create a cups directory in /var/cache then it should be labeled cups_rw_etc_t
- Run vmtools as unconfined domains
- Allow snort to manage its log files
- Allow systemd_cronjob_t to be entered via bin_t
- Allow procman to list doveconf_etc_t
- allow keyring daemon to create content in tmpfs directories
- Add proper labelling for icedtea-web
- vpnc is creating content in networkmanager var run directory
- unconfined_service should be allowed to transition to rpm_script_t
- Allow couchdb to listen on port 6984
- Dontaudit attempts by unpriv user domain to write to /run/mount directory, caused by running mount command
- Allow systemd-logind to setup user tmpfs directories
- Add additional fixes for systemd_networkd_t
- Allow systemd-logind to manage user_tmpfs_t
- Allow systemd-logind to mount /run/user/1000 to get gdm working - Add additional fixes for systemd_networkd_t
- Allow systemd-logind to manage user_tmpfs_t
- Allow systemd-logind to mount /run/user/1000 to get gdm working
- Dontaudit attempts to setsched on the kernel_t threads
- Allow munin mail plugins to read network systcl
- Fix git_system_enable_homedirs boolean
- Make cimtest script 03_defineVS.py of ComputerSystem group working
- Make abrt-java-connector working
- Allow net_admin cap for fence_virtd running as fenced_t
- Allow vmtools_helper_t to execute bin_t
- Add support for /usr/share/joomla - sshd to read network sysctls
- Allow vmtools_helper_t to execute bin_t
- Add support for /usr/� x��������������V���� X p &8 ��������hP������m �$ } ���������������� m n l � 36bb1d3dc307ab 221cf51f4cef980b31028f07a905c114d21e893c87349b6b404f5cbdabc2b0ae 221cf51f4cef980b31028f07a905c114d21e893c87349b6b404f5cbdabc2b0ae 769b68285fd0803af74529a62c6510ed298c3fff11a16be98c1c97b55fecb5af 769b68285fd0803af74529a62c6510ed298c3fff11a16be98c1c97b55fecb5af c4078a9249a1d5e11fbb8995ee3d51afc2c7bd1820770766383bb804c93920b3 c4078a9249a1d5e11fbb8995ee3d51afc2c7bd1820770766383bb804c93920b3 6facfcc61e787d7c2214b7aafd0e1592d680a58da6a2ab5bebc1c04923f60522 6facfcc61e787d7c2214b7aafd0e1592d680a58da6a2ab5bebc1c04923f60522 5f9075b93922248f92606a2d369c22988b6be277d63afcfe6880291d0940f702 5f9075b93922248f92606a2d369c22988b6be277d63afcfe6880291d0940f702 f9f072ac774375db12a8558fe26d460a6bbf7b86cb70dacd8f3596019cfb4cc6 f9f072ac774375db12a8558fe26d460a6bbf7b86cb70dacd8f3596019cfb4cc6 7c57d2364a803b9bfe98b4ee44941d233d008c60d49def92d80fd776b024aeb5 7c57d2364a803b9bfe98b4ee44941d233d008c60d49def92d80fd776b024aeb5 01814dd2e334a0450dad5957499545b961b7089886c9f4127874425ddeb11ca2 01814dd2e334a0450dad5957499545b961b7089886c9f4127874425ddeb11ca2 2152a7c88bd914cb3b86878d6f3883829d4ecbe8524b9a7ab3fdc6537af3e960 2152a7c88bd914cb3b86878d6f3883829d4ecbe8524b9a7ab3fdc6537af3e960 bfd97ac7d3073e665501091c8bae152a40f23ff518b02cd30af3d570a2bb1155 eed50f3bbf0acb945af68776ed56f57bcd6f129f398193649501f85e2341ec61 a6d81a9797889cfcef8b7d323a72340c0575a71b19ed862d52630f69f2ce981c 8942046483672777bc8497986d9117d56daa44c65cf0c766deb3af24fbe91704 d614a28eb53e53a68ca48267158ebc7a8021ba0a8d5eedee2f84ee70f73ddcf3 e1e99f668b659d8be8e70a6933c4d914b25f08b5360d16d143c1c255116e9d84 ee65ca7d0bc60de1aa6360075ae801b886ab443ab0b28449fea0d21778dae5f6 a7b721eff25651047f37651b1f29067dbaee9decbe2c4da6ed6975cd7a8d7d16 17aaf6a2d6b09d5b2729bbaff0a87fc7417eea3321a33d9b7aec2e634de6b457 d2673bf58a43fe07caf4899a141a85d73d7827d58bfb4d698418ecf7a6a72887 bb8f7368799223f8fdf4ed592dac2748d4aa57e3113be3676f396332d295e3c6 88f1b5bcd6d3c2ddd33921f4e8a96ad55a7925417dd5b7cbae664dfa2f3e0820 99decee625a9fbb8f7a75b182c7c6c72a711b31dc64e3aa68e0b2660227fa781 1fe64fa709fb0bd01493da49bebed90ddeb49035099fd74925f01517c9647ab4 7c0a5a50e80204df06ee62e4343053a151d1f815b40aca756aee86d5d3487285 f3e1f9b4a03f06749ad0ab0b2648ea0310711f54d55d02b1e48c1b85e18f1411 6883c15979bd68ec74a3ec3b63dd43326d526f97a4fda6bbe5e636f8fe190002 6b1fde7415af215dcc0a0a95a59b8100b0ff8b53cecf80c97487896bbfca4362 6b1fde7415af215dcc0a0a95a59b8100b0ff8b53cecf80c97487896bbfca4362 e4a9e9f39d493e8ebd490b54d827268bfb1e689f989a2bade019a1ffebd9b862 3476253162b617e16d23d218e89da7d9d3b5389d29a49772f577695fe7395216 d9e22f9de94f3652e324e1e77c7059579463a0004690034b4cab654446d59050 31bcbbacaebc7c91f3431b2aaae430e8410e330edb38e8a32b408f0262884fe4 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 162a90c60c612a51ddb0478de3297db3f7b8904479ae1ab9e292fe021c1298a2 88a4b8fac12bae44825e4c2e6aecdfd787e51719c629219ae87f6ee0b4968c3b fb8cba2a620a0bcdb05b809c0dc427b6f39efb331767ac4b487837d28d14068c 687ff3a703c8ee03000e083fa8c3faef41f24722ee70dbcb50419078c3a78fe6 7f63e7564010af826f9f3b782504b9d8fb14c918b271349e64b16f2ad87e45c0 329eda871efb3f52f24dc7f60230298a1a0b44bee9e7a6f93221777be4617f27 05405493fe22ef87c5d56e156c1c14271bab832754c9c3b0257d6fe934782707 351c363b0d8f1196f516f3da604ac796c365c48aa8a1fc9b36e5f024779b6333 80a0af5cbd6abe59a1d10704c2c92aef38f339ed33b01de484ba2b87d178c37d 793bcd0410f81ecfbe6b462aae53b08a4893929cee391e9d89b3e40581bdb32a d97bf0a7811fa46604e9ef048d9299457edbf1eeeef3e6b1f69706f55e59c33c a801d8193b32b0743c94896e34d45c4da00e8048f56da25513a8c3702e668cf0 a2aeaa4ffb9bca7eca789ee6ed3409b8129d03b62211f7351e285bcaf1f8d7e8 ff892e9ebd0ebee509d7c2d7de3652789bfece9a85662f18702ba25cf705763f f57614b14d1618e5543e3d419860e78f097e09fcaef817bf07d8badfcd5bba78 ca92c37b11ddf5ed38dd92add8011b4afead4f847c8e2f970f5688f67b3dfb97 8c5e9104680a8989a4e9b4f26b321a8df65b8bcdca9e80569aee1a1201f4db33 f280fdf68aab70e105fcde976bc4b243d0ce231ef245e22e028a74c3461ef268 f72b631e94e8b9d198e2088f9b026b61b70d40378f46b0b2ee185190c6895dd1 ca47fcb6d6ba90a42963cbfd4a68e9c22d95d9faac512d398beeb5d84faed124 dbcd79ff29a83d562595� x�������������HF���� X q �%8 hh���0)������+ �$ ; ���������������� + , � N �0 ? �� d � �
� � � [ � � � � � � � � � � � � � M � _ � � � � � � P � � � 6 �
� � � 6m �
9� � = � A � E. EP � H� H� $ I\ $ L� $ M M M ( M! 8 M( � 9 P � : pS � > �J ? �R G �\ � H �� � I �� � X �l Y �| \ �� � ] �� � ^ �� N b ɡ d �� e � f � l � t � � u �X � v ќ + w �L � x � � y �� W � �0 � �4 � �: � �| �� �� � �3 �C �
�� � � �L �P � �$ g �( h �, C gettext 0.19.8.1 17.el8 GNU libraries and utilities for producing multi-lingual messages The GNU gettext package provides a set of tools and documentation for
producing multi-lingual messages in programs. Tools include a set of
conventions about how programs should be written to support message
catalogs, a directory and file naming organization for the message
catalogs, a runtime library which supports the retrieval of translated
messages, and stand-alone programs for handling the translatable and
the already translated strings. Gettext provides an easy to use
library and tools for creating, using, and modifying natural language
catalogs and is a powerful and simple method for internationalizing
programs. ]�ҝbuild.cloudlinux.com O:ACloudLinux CloudLinux GPLv3+ and LGPLv2+ CloudLinux Packaging Team <packager@cloudlinux.com> Development/Tools http://www.gnu.org/software/gettext/ linux x86_64 /sbin/install-info /usr/share/info/gettext.info.gz /usr/share/info/dir || : if [ "$1" = 0 ]; then
/sbin/install-info --delete /usr/share/info/gettext.info.gz /usr/share/info/dir || :
fi � �� fP f8 hx f8 V8 V0 V8 � i0 �h h � �8 f@ �� G� o� # $ & * x� F(
� F8 8� � � �K g� �9 A� � � � � � I j � � � � o< D�
0 � � 9 � � � � ) � j � � �
� � e1 .� G� %� �K &� � #� fI &� �� S ' $� � $H �� $ &� �� s �� & �� %! � � $� \� %j '� ph $� �� #� �� &J � $O � $� �� � 4 uI %� �� � � %� �
� � /: *� &� �j #� Ǧ .� A $H �O $� P� 0{ NG )� � �& � #� � � y � � 6 � � � � l [ S � t � | � ����������������������A�A�A���A�A�A�A�A�A���A�A�A�A�A�A�A�A�A�A�A�A�A������A큤��������������������A�A�A큤����������������A�A큤����������������A큤�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� ]��)]��)]���]��)]��)]��)]��)]��)]��)]҈ x��������������5���� X r �'8 ��������XM���^" �$ N ���������������� ^" ]" _" � � x�������������8%���� X s ~%8 ��������(�������{b �$ k ���������������� {b zb |b � ghes <craig@hughes-family.org> Craig Hughes <craig@hughes-family.org> Craig Hughes <craig@hughes-family.org> - Rebase to v3.4.6
- Resolves: #1943848 - Fix header parsing - Add tests BRs - New version v3.4.4
- Enable tests - Fixed CVE-2018-11805
- Resolves: rhbz#1787514
- Fixed CVE-2020-1930
- Resolves: rhbz#1820649
- Fixed CVE-2020-1931
- Resolves: rhbz#1820650 - Fix CVE-2019-12420
- Resolves: rhbz#1812977 - Removed the obsolete SOUGHT channel for rule updates
- Resolves: rhbz#1630362 - Fix rawbody rules documentation
- Resolves: rhbz#1639251 - Re-add perl-Encode-Detect and perl-Mail-DKIM dependency
- Resolves: rhbz#1637527 - Add dependency for perl(File::Copy)
- Related: rhbz#1639367 - Drop non-functioning sa-compile script
- Resolves: rhbz#1639367 - Temporarily drop dependency on perl-Encode-Detect and perl-Mail-DKIM
- Resolves: rhbz#1636379 - Support systemd, not SysV init, drop initscripts requirement
- Resolves: rhbz#1610288
- Fix issues found by Coverity Scan
- Resolves: rhbz#1602695 - New version
- Fixes CVE-2017-15705, CVE-2018-11780 and CVE-2018-11781
- Resolves: rhbz#1629523
- Resolves: rhbz#1629535
- Resolves: rhbz#1629538 - Dropped GeoIP and optional plugins requiring it
Resolves: rhbz#1607372 - perl-Razor-Agent and perl-Net-Patricia not used on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Fix daemonize subroutine
- See https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7594 - Perl 5.28 rebuild - Conditionalize Requires for /sbin/service and /sbin/chkconfig. Fixes bug #1592390 - Add razor log path and home directory option - Use standard Fedora linker flags (bug #1548561) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Add upstream patch to stop sa-learn warnings. Fixes bug #1505317
- Add upstream patch to stop DNS warnings. Fixes bug #1364932 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Fix building on Perl without '.' in @INC - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Add patch for openssl 1.1.x support. https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7361 - Drop perl-Mail-spamassassin obsolete that was added in 2004 - Add perl-Razor-Agent and perl-Net-Patricia To Requires, they might help processing. Fixes bug #1337924
- Add patch for netdns 1.0.1+ dns lookups. - Perl 5.24 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Perl 5.22 rebuild - Fix sa-update to handle systemctl or service as the case may be. - Perl 5.22 rebuild - Fix base rules version issue. Bug #1217990
- Drop run dir we don't use it. - Update to 3.4.1 - Switch to systemd timer unit from cron for rules updates. Fixes bug #1064537 - Remove last parts of portreserve. Fixes bug #1175798
- Fix typo in Razor2 plugin. Fixes bug #1208776
- Disabled the AHBL blacklist thats no longer in service in base rules. Fixes bug #1180338 - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654 - Perl 5.20 rebuild - CLean up portreserve conditionals. Fixes bug #1128708 - Rebuild for rpm bug 1131960 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Add patch to work with newer perl-Net-DNS. Fixes bug #1111586 - Adjust systemd unit to not log to syslog since spamd does it already.
- Fixes bug #1107541 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Fix versioning on initial rules.
- Add note to README.RHEL.Fedora to note -d option in sysconfig - Cleaned up spec, added conditionals to build on el again. - Simplify systemd unit file. Thanks misc. Fixes bug #1065762 - Update to 3.4.0 - Use pgrep -f for full command line. Fixes bug #1057926
- Patch to use gnupg2 instead of gnupg1. Fixes bug #1055593
- Use pgrep for spampd as well. Fixes bug #1058976 - Add patch to fix warning to syslog with recent perl.·
- Fixes bug #1023670 - Rebuilt for https://fedoraproject.org/wiki� x������������������ X t �'8 ��������XQ�������Q �$ E ���������������� �Q �Q �Q � , interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=2812c01dd9772492c9f0a8d92b42979ba26941b5, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e139a1b98946ad9cf5c1b9f2a208a4d5f62f6e14, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=28e4b7fba9f8176d49b201191b09bfe1b58bdfea, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a4b4c884ce4db6fa346d7d46d421c42e2aa5649f, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f5d858b812fa5f37742c6179b8a9a4f04ef78281, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=35811140a479a6a31fb22abc5ab34d477256e829, stripped Perl script text executable ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=2e85e61d3528601fd4088576ed3359e40194383f, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=ec69d2c8534cbecd3fdfcc5a47b3fb3fcfcf6df6, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=fa39eb3539c6752ba1579c14c55f3ac4dfd110f4, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=870c89d40b9f2dabfcb416e2f565ca29b2f9680a, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=b327678d4ad86e19831c46911c7d33b01d35aa81, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=8039f0e84fcf715aa316383af86f1c9ebb38c23c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=67c46ac4833835b7853a854367fbdd8635c6988e, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=25363c2c4dc837ac3f38b585ae2e5b3c7563fd75, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=ceb1c64324ea320afc074c47681f74051ba7165b, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=1a37f1663607f79117175aaa4d35437139c1c293, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=af3f0ad45cd9ac9d467cd2279f965c4438bd3a36, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=bbc603cbd020958d538b48942a3024b773d57b90, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=8bea0dd4fb2be00fed1a65ed83c37e5e76537628, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=b847d71991c65a1bb97a77d10940ff5c7c6ee76c, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), � x�������������(���� X u Z&8 ��������h� � �$ ���������������� � � � � ild doxygen documentation during modular build - Make it build with OpenSSL-1.1.0, cherry-picked from upstream git - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 2.0.22
- Spec cleanup, new URL
- Support multilib devel (bug #477685) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Fix -doc package for F20 UnversionedDocDirs (#993956)
- Add missing directory /usr/include/event2
- Fix directory ownership in -doc package
- Correct summary and description of -devel and -doc packages
- Set -doc package Group tag to "Documentation"
- Add %?_isa to -devel package base dependency
- Remove %defattr - Removed rpmlint warnings - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Update to 2.0.21
- Add %check - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Updated to latest stable upstream version: 2.0.18-stable
- Moved documentation into its own rpm (bz 810138) - Updated to latest stable upstream version: 2.0.17-stable - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
- Removed the installion of the outdate man pages and the latex raw docs.
- Corrected where the other doc are installed. - Updated to latest stable upstream version: 2.0.13-stable (bz 727129) - Updated to latest stable upstream version: 2.0.12-stable - Fix build
- Update spec to match current guidelines
- drop no longer needed patch - Updated to latest stable upstream version: 2.0.10-stable - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - Updated to latest stable upstream version: 1.4.14b - disable static libs (bz 556067) - Updated to latest stable upstream version: 1.4.13 - Updated to latest stable upstream version: 1.4.12
- API documentation is now installed (bz 487977)
- libevent-devel multilib conflict (bz 477685)
- epoll backend allocates too much memory (bz 517918) - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - Updated to latest stable upstream version: 1.4.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Updated to latest stable upstream version 1.4.5-stable - Updated to latest stable upstream version 1.4.4-stable - Autorebuild for GCC 4.3 - Updated to latest stable upstream version 1.3e - Updated to latest upstream version 1.3b
- Incorporated Merge Review comments (bz 226002)
- Increased the polling timeout (bz 204990) - Updated to latest upstream version 1.2a - rebuild - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - rebuild (#177697) - Removed unnecessary -r from rm - Upstream update - Added some docs
- Moved "make verify" into %check - Initial build for Fedora Extras, based on the package
by Dag Wieers
� � � � � 2.1.8-5.el8 2.1.8-5.el8
.build-id ab f12e2991380a7e713e47e42de7438769a95f98 cf 01b794eaa8ebd836aab369ddf5ea28954b7076 d1 40e29f1f47d1b981227c175eee0381f181880c d2 11f32b0bf84f293960f04bbb4cc9dd4c26c7de f6 a7227632e63041c1b299d000db46e6f219942b libevent-2.1.so.6 libevent-2.1.so.6.0.2 libevent_core-2.1.so.6 libevent_core-2.1.so.6.0.2 libevent_extra-2.1.so.6 libevent_extra-2.1.so.6.0.2 libevent_openssl-2.1.so.6 libevent_openssl-2.1.so.6.0.2 libevent_pthreads-2.1.so.6 libevent_pthreads-2.1.so.6.0.2 libevent ChangeLog libevent LICENSE /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/ab/ /usr/lib/.build-id/cf/ /usr/l� x������������������� X v �(8 8'���������� �$ ���������������� � d
���������������zni]XLG;6*%���������������{oj^YMH<7+& �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
|
p
k
_
Z
N
I
=
8
,
'
� � � � � � � � � � � � � � � } q l ` [ O J > 9 - ( � � � � � � � � � � � � � � � ~ r m a \ P K ? : . ) �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
s
n
b
]
Q
L
@
;
/
*
� � � � � � � � � � � � � � � � t o c ^ R M A < 0 + ����������������upd_SNB=1,
����������������vqe`TOC>2-! ����������������wrfaUPD?3." ���������������xsgbVQE@4/#
���������������ythcWRFA50$ ���������������zuidXSGB6 �� �
� �� `� � `��Q �� � ݄� �� � �� `� � Kv@�Q 0� � �>T#c 4( � �� �d � Kv@�Q ,3 � �>T c � � ��) �a � Kv@qQ � � 4�\�b h6 � ��� xk � Kv@EQ ( � 4�\/ T � �� \1 � Kv@+Q � � 4�\< �- � ��� L> � Kv@ �- � �0��b � � ��b H� � Kv@� � � r,�b �+ � ��< 0� � Kv@� � � r,�b � � ��� �� � Kv@� |% � r,db ,% � �� ,� � Kv@� P � r,Kb �. � ��q �1 � Kv@� H � r,=b �$ � ��R 9 � Kv@� X- � r,/b # � ��e� � � r, b �% � ��e) �1 � r,b h � r,b � � ��$ � � r,�a �- � �� L� � �}�;N �> � r,�a �� � ��} , � �W? � r,�a ,i � ��b ] � W��'P � � r,�a � � W���O $� � 9��wa �, � �� �; � W��YO < � 9��?a �j � ��� � � W��FO * � 9��,a \/ � ��N �l � W��O D
� 9��a �m � ��
h � W��O @w � 9�� a �. � ��� � � W���N < � 9���` <; � W���N T0 � 9���` �+ � �� t� � ݄� �� � ݄� �� � ݄� �� � Kv@�Q 0� � Q��� �E � �� �d � �>T c � � Kv@qQ � � �xS�j ą � ��� xk � 4�\/ T � Kv@+Q � � ��� L> � �0��b � � Kv@� � � �rf?j XA � ��< 0� � r,�b � � Kv@� |% � �� ,� � r,Kb �. � Kv@� H � R�wi �c � ��R 9 � r,/b # � R�Qi � � r,b h � R�-i �' � r,�a �- � �}�;N �> � R� i � � r,�a ,i � W��'P � � R��h 3 � 9��wa �, � W��YO < � R��h T9 � ��� � � 9��,a \/ � W��O D
� Rܠ �b � ��
h � 9�� a �. � W���N < � R�R` �- � 9���` �+ � W���N �� � �>� �� � �� �+ � 9���` �, � ���N 0 � �U�C �z � ��n �( � 9���` �) � YJ�_h (_ � 9���` �% ~ ��2N � { YJ� h � y �� |1 x � O�` � v YJмg �2 q ��4 03 p �J]/` � n ���M �f k YJВg �8 i ��� �` h z��P < f ��M �f c YJ�@g �. a ��� % ` �CZ�_ ! ^ ��M dH [ YJ�Wf � Y �� p< X �CZ�_ �$ V ��AM D� S YJ�e �m Q ��f � P �CZ�_ � N ��DL tf K YJйe P� I ��G �7 H �CZs_ (X F ��B �m C YJ�de �\ A �� �7 @ N��O_ 87 > ���A (8 ; YJ�De t} 9 ��� `* 8 N��^ t� 6 ��y. t@ 3 YJ�,e � 1 �� | 0 N��T � . ��- � + YJ��d �] ) ��| x) ( N�ΪS �p & ��[- �L # YJЙd X6 ! ��G �E ��2 �F ��#- �( YJ�d �. `�fS X� ��, `� YJ��c $� ��V <$ `��R ��, �: YJ�c �+ ��t � `�BR �� �� , $2 YJ�$B l7 � � x������������������ X w �(8 X�������x����M �$ m ���������������� �M �M � | ? 8
�
F �
Q �
Z �
c �
� � < � @ � L � P � W � z � � ( � X � Y �
H � t h x mQINBF/9iQ4BEADguRE+cjShp7JujKkiVH3+ZYYD5ncX7IMh7Ig0DbDC8ldtm84k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gpg-pubkey 3abb34f8 5ffd890e gpg(AlmaLinux <packager@almalinux.org>) -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.3 (NSS-3)
mQINBF/9iQ4BEADguRE+cjShp7JujKkiVH3+ZYYD5ncX7IMh7Ig0DbDC8ldtm84k
4vi8266IIBLM3eRgkF9sgHciRikTPow50R+Ww7jJzehV9vjTkRzWr8ikog6X3ZPw
rh9QAqOdTOIn4bBSS6j5+xdxYKG7yEWXjADbkFVSiLvejp3FrLZGlNFdPCkGKFh� x������������������� X x �&8 ���������1 �! �$ B ���������������� �! �! �! � t_file_t. BZ(1535180)
- Fix logging as staff_u into Fedora 27
- Fix broken systemd_tmpfiles_run() interface - Escape macros in %changelog - Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
- Allow certmonger_t domain to access /etc/pki/pki-tomcat BZ(1542600)
- Allow keepalived_t domain getattr proc filesystem
- Allow init_t to create UNIX sockets for unconfined services (BZ1543049)
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t - Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
- Add new interface ppp_filetrans_named_content()
- Allow keepalived_t read sysctl_net_t files
- Allow puppetmaster_t domtran to puppetagent_t
- Allow kdump_t domain to read kernel ring buffer
- Allow boinc_t to mmap boinc tmpfs files BZ(1540816)
- Merge pull request #47 from masatake/keepalived-signal
- Allow keepalived_t create and write a file under /tmp
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
- Allow updpwd_t domain to create files in /etc with shadow_t label - Allow opendnssec daemon to execute ods-signer BZ(1537971) - rpm: Label /usr/share/rpm usr_t (ostree/Atomic systems)
- Update dbus_role_template() BZ(1536218)
- Allow lldpad_t domain to mmap own tmpfs files BZ(1534119)
- Allow blueman_t dbus chat with policykit_t BZ(1470501)
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t BZ(1507110)
- Allow postfix_master_t and postfix_local_t to connect to system dbus. BZ(1530275)
- Allow system_munin_plugin_t domain to read sssd public files and allow stream connect to ssd daemon BZ(1528471)
- Allow rkt_t domain to bind on rkt_port_t tcp BZ(1534636)
- Allow jetty_t domain to mmap own temp files BZ(1534628)
- Allow sslh_t domain to read sssd public files and stream connect to sssd. BZ(1534624)
- Consistently label usr_t for kernel/initrd in /usr
- kernel/files.fc: Label /usr/lib/sysimage as usr_t
- Allow iptables sysctl load list support with SELinux enforced
- Label HOME_DIR/.config/systemd/user/* user unit files as systemd_unit_file_t BZ(1531864) - Merge pull request #45 from jlebon/pr/rot-sd-dbus-rawhide
- Allow virt_domains to acces infiniband pkeys.
- Allow systemd to relabelfrom tmpfs_t link files in /var/run/systemd/units/ BZ(1535180)
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
- Allow audisp_remote_t domain write to files on all levels - Allow aide to mmap usr_t files BZ(1534182)
- Allow ypserv_t domain to connect to tcp ports BZ(1534245)
- Allow vmtools_t domain creating vmware_log_t files
- Allow openvswitch_t domain to acces infiniband devices
- Allow dirsrv_t domain to create tmp link files
- Allow pcp_pmie_t domain to exec itself. BZ(153326)
- Update openvswitch SELinux module
- Allow virtd_t to create also sock_files with label virt_var_run_t
- Allow chronyc_t domain to manage chronyd_keys_t files.
- Allow logwatch to exec journal binaries BZ(1403463)
- Allow sysadm_t and staff_t roles to manage user systemd services BZ(1531864)
- Update logging_read_all_logs to allow mmap all logfiles BZ(1403463)
- Add Label systemd_unit_file_t for /var/run/systemd/units/ - Removed big SELinux policy patches against tresys refpolicy and use tarballs from fedora-selinux github organisation - Use python3 package in BuildRequires to ensure python version 3 will be used for compiling SELinux policy - auth_use_nsswitch() interface cannot be used for attributes fixing munin policy
- Allow git_script_t to mmap git_user_content_t files BZ(1530937)
- Allow certmonger domain to create temp files BZ(1530795)
- Improve interface mock_read_lib_files() to include also symlinks. BZ(1530563)
- Allow fsdaemon_t to read nvme devices BZ(1530018)
- Dontaudit fsdaemon_t to write to admin homedir. BZ(153030)
- Update munin plugin policy BZ(1528471)
- Allow sendmail_t domain to be syste� x������������������ X y �(8 X� �����dN �$ t ���������������� dN �d �/
���������������xsgbVQE@4/#
���������������ythcWRFA50$ �
�
�
�
�
�
�
�
�
�
�
�
�
�
�
z
u
i
d
X
S
G
B
6
1
%
� � � � � � � � � � � � � � � { v j e Y T H C 7 2 & ! � � � � � � � � � � � � � � � | w k f Z U I D 8 3 ' " �
�
�
�
�
�
�
�
�
�
�
�
�
�
}
x
l
g
[
V
J
E
9
4
(
#
� � � � � � � � � � � � � � ~ y m h \ W K F : 5 ) $ ��������������zni]XLG;6*%���������������{oj^YMH<7+& ���������������|pk_ZNI=8,'
���������������}ql`[OJ>9-( ���������������~rma\PK?:.) ���������������snb]QL@;/ Y ^� YJ�`. �H � Q�� D� � �>T&c �� � Kv@�Q s � �� x+ � ?�
�e �� � �>Tc �' � Kv@�Q h8 � ��@ �D � ����b `\ � Kv@MQ �/ � �� �O � 4�\) <� � Kv@AQ �0 � 4�\9 02 � Kv@)Q � � ��� p' � �0��b 4� � Kv@ � � ��l p
� Sy��b �0 � Kv@� h � r,�b @% � Kv@� � � �� � � r,gb 4& � Kv@� �A � �� LU � r,Nb �e � Kv@� �� � ��u �, � r,@b |E � Kv@� `' � r,2b |& � Kv@ �& � �� |� � r,#b xB � �� D� � r,b P* � �}��P �A � r,b �% � �}��P �% � ��1 |v � r,�a �3 � �}��P LA � �� d � r,�a 8� � P��ZP �l � �� �K � r,�a $U � P�^LP � � ��h �x � r,�a � � W���O �� � ��D (y � r,za �� � W���O � � ��
�] � 9��fa * � W��SO �\ � �� �c � 9��/a �2 � W��7O 0� � ��� L� � 9�� a P � W��O 0J � �� �� � 9��a �1 � W��O � � ��� �" � Rܻ |� � 9�� a $ � W���N � � ��� 0 � R�T` � � 9���` x� � W���N @! � �� $ � �yty- 8S � 9���` % � W���N �6 � �� �! � �>� �? � 9���` 9 � W���N � � ��| �% � n6{ @ � 9���` �$ � ���N Y � ��q `: � �U�G �0 � 9���` 5 � ��tN �4 � ��d � � z�3� d* � 9���` % � ��]N W � ��� �" � 9���` @" ��@N $g ~ 9���` �% { ��+N Hh z �� h# y � O�` �Y w �� N � v ��} L, u _�Pb` �( s ��
N �` r ��8 � q �J]1` t2 o ���M � n �� �: m x� &` \3 k ���M �f j ��� H i z��P �^ g ���M �f f ��� �F e �CZ�_ x c ��M �f b ��� `/ a �CZ�_ < _ ��M �) ^ �� (� ] �CZ�_ � [ ��M �5 Z �� ( Y �CZ�_ �8 W ��cM V �� Y U �CZ�_ + S ��3M h� R ��r �0 Q �CZ�_ �& O ��L d� N ��X T( M �CZ�_ � K ��K " I �CZy_ V G ��B �0 F �CZ�N �1 C ��gB & B �� ; A N��S_ w ? �� B l� > �� �. = N��0_ � ; ���A �d : ��� = 9 N��_ 7 ��. |� 6 ��� �H 5 ��a. �n 2 N��T l / �� . 5 . N���S � + ��- Xw * �� ) N�βS �" ' ��- � & YJ��d |� $ ���S �N # ��S- �y " ��L �= ! YJДd �M ��- �� ��9- � YJ�&d ,P ��bO � �� - () YJ�d + `�pS �v ���, <� �� �l YJ�d |S `�!S �� ��, : ��Y $� YJгc < `��R �� ��, �P ��+ ��
YJЊc � `��R x ��z, XQ
��� p< YJ�{c |8 `�]R @f ��0, � ��W �� YJ�Ec F ��, �H YJ�[. � � x������������������� X z �%8 ���������c 1 �$ ! ���������������� 1 2 0 � s_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Add patch for GCC deprecated attribute to allow building on GCC < 4.5
(needed for EL5 and EL6). - Update to latest upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Update to latest upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Update to latest upstream release. Remove patch 0.
- Added ctor-static subpackage. - Still having problems with setproctitle(), bug #981799, upstream
freedesktop.org bug #66679. Added patch to noop out setproctitle(). - Added check section.
- Add BuildRoot for EL5. - Update to latest upstream release. Remove patch 0. - Add patch to avoid calling clearenv() in setproctitle.c, bug #971513. - Update to latest upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Update to latest upstream release.
- No longer need to change encoding of flopen(3) man page. - Update to latest upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - Update to latest upstream release.
- Removed Patch0, fixed upstream.
- Removed BuildRoot, clean, defattr. - changes based on review by Sebastian Dziallas - changes based on review comments by Jussi Lehtola and Ralf Corsepious - initial version
� � � � � � � � � � � � � � � 0.12.2-1.el8 0.12.2-1.el8 .build-id 4b 7ac6610f218e850b761cf9052e6b8b4369decc libbsd.so.0 libbsd.so.0.12.2 libbsd ChangeLog README libbsd COPYING /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/4b/ /usr/lib64/ /usr/share/doc/ /usr/share/doc/libbsd/ /usr/share/licenses/ /usr/share/licenses/libbsd/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu directory ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b7ac6610f218e850b761cf9052e6b8b4369decc, stripped UTF-8 Unicode text ( P P P P P P P P
P
P P P P P
P
P P P P P P P P P P P P P R
R R R R R R R R R R R https://bugz.fedoraproject.org/libbsd utf-8 ba6e5ca387a104d27cce1e47977ab0fae6a3b4293a9a0b4efdc11d36666807a4 ? ���0 ���3 !��y덏%���!�E�/�֡f�
!�E�/�֡L� §�=0Qw�=�ɦ�aG�GE�P5�=_7�H?Dm��G0T�T�T��� ���\<�G�u���x��|�͕.j���T� 7�E�N�k�a�-�DËh�A 1���O>h�b��sEA ݗ�u�h���f �_9MkTL�K�[rO��m�4$�rЊ��<�۵�Ve'ނ ����ȳ �0��k)���S6&��٠q��7=
�iR�v���7�8��%�T�� �D���s
Vf�L{�H�-|5���Oϰ2�U��RI{¿���PE��5b1 ��I��9r�m�v�G�wCL���>$��|~�#��d�[[ Ġk}�^�� � ��bϨ��U�0�Fi6�ւD|�#��y�����qbZE��=�_�e�
��4�� �
4���ʊ�z{�Cܜ>; ��\Ø�� Y�l�q"&��u6ڄ���� g�2x�����6e+P�l닃�
���K0]�jj���|baf#��υO5�:�5�^vA�bi1�@�vv�#b�q��c+�3 !��y덏%���!�E�/�֡f�
!�E�/�֡ � ��*圲����4���"�M�3�o��L�����$���b��I�k�Ȓ� ��-
���� C��C;-�`钒&����B���
�e R��v��Ʌ2��iu9N��o@���Nc�D�$��(�ZY�� �6qn ���G�\� ڡK���:,�%���?JM@��c��f�|�|'�i�����}ev-JP2"�=���x�a��R�h{�$�0fK�����?$P���g�g�f=�(� �Љ�1�l��@��
-q
e�T�ݘl��o�
p�ҷth���#/RGΊ
�,��ӱ��(B+��t�oF8� x������������������� X { ~'8 h������(�������R" �$ B ���������������� R" Q" S" � /100/miscfiles/ /usr/share/selinux/targeted/default/active/modules/100/mock/ /usr/share/selinux/targeted/default/active/modules/100/modemmanager/ /usr/share/selinux/targeted/default/active/modules/100/modutils/ /usr/share/selinux/targeted/default/active/modules/100/mojomojo/ /usr/share/selinux/targeted/default/active/modules/100/mon_statd/ /usr/share/selinux/targeted/default/active/modules/100/mongodb/ /usr/share/selinux/targeted/default/active/modules/100/motion/ /usr/share/selinux/targeted/default/active/modules/100/mount/ /usr/share/selinux/targeted/default/active/modules/100/mozilla/ /usr/share/selinux/targeted/default/active/modules/100/mpd/ /usr/share/selinux/targeted/default/active/modules/100/mplayer/ /usr/share/selinux/targeted/default/active/modules/100/mrtg/ /usr/share/selinux/targeted/default/active/modules/100/mta/ /usr/share/selinux/targeted/default/active/modules/100/munin/ /usr/share/selinux/targeted/default/active/modules/100/mysql/ /usr/share/selinux/targeted/default/active/modules/100/mythtv/ /usr/share/selinux/targeted/default/active/modules/100/naemon/ /usr/share/selinux/targeted/default/active/modules/100/nagios/ /usr/share/selinux/targeted/default/active/modules/100/namespace/ /usr/share/selinux/targeted/default/active/modules/100/ncftool/ /usr/share/selinux/targeted/default/active/modules/100/netlabel/ /usr/share/selinux/targeted/default/active/modules/100/netutils/ /usr/share/selinux/targeted/default/active/modules/100/networkmanager/ /usr/share/selinux/targeted/default/active/modules/100/ninfod/ /usr/share/selinux/targeted/default/active/modules/100/nis/ /usr/share/selinux/targeted/default/active/modules/100/nova/ /usr/share/selinux/targeted/default/active/modules/100/nscd/ /usr/share/selinux/targeted/default/active/modules/100/nsd/ /usr/share/selinux/targeted/default/active/modules/100/nslcd/ /usr/share/selinux/targeted/default/active/modules/100/ntop/ /usr/share/selinux/targeted/default/active/modules/100/ntp/ /usr/share/selinux/targeted/default/active/modules/100/numad/ /usr/share/selinux/targeted/default/active/modules/100/nut/ /usr/share/selinux/targeted/default/active/modules/100/nx/ /usr/share/selinux/targeted/default/active/modules/100/obex/ /usr/share/selinux/targeted/default/active/modules/100/oddjob/ /usr/share/selinux/targeted/default/active/modules/100/opafm/ /usr/share/selinux/targeted/default/active/modules/100/openct/ /usr/share/selinux/targeted/default/active/modules/100/opendnssec/ /usr/share/selinux/targeted/default/active/modules/100/openfortivpn/ /usr/share/selinux/targeted/default/active/modules/100/openhpid/ /usr/share/selinux/targeted/default/active/modules/100/openshift-origin/ /usr/share/selinux/targeted/default/active/modules/100/openshift/ /usr/share/selinux/targeted/default/active/modules/100/opensm/ /usr/share/selinux/targeted/default/active/modules/100/openvpn/ /usr/share/selinux/targeted/default/active/modules/100/openvswitch/ /usr/share/selinux/targeted/default/active/modules/100/openwsman/ /usr/share/selinux/targeted/default/active/modules/100/oracleasm/ /usr/share/selinux/targeted/default/active/modules/100/osad/ /usr/share/selinux/targeted/default/active/modules/100/pads/ /usr/share/selinux/targeted/default/active/modules/100/passenger/ /usr/share/selinux/targeted/default/active/modules/100/pcmcia/ /usr/share/selinux/targeted/default/active/modules/100/pcp/ /usr/share/selinux/targeted/default/active/modules/100/pcscd/ /usr/share/selinux/targeted/default/active/modules/100/pdns/ /usr/share/selinux/targeted/default/active/modules/100/pegasus/ /usr/share/selinux/targeted/default/active/modules/100/permissivedomains/ /usr/share/selinux/targeted/default/active/modules/100/pesign/ /usr/share/selinux/targeted/default/active/modules/100/pingd/ /usr/share/selinux/targeted/default/active/modules/100/piranha/ /usr/share/selinux/targeted/default/active/modules/100/pkcs/ /usr/share/selinux/targeted/default/active/modules/100/pkcs11proxyd/ /usr/share/selinux/targeted/default/active/modules/100/pki/ /usr/share/selinux/targeted/default/active/modules� x�������������p����� X | �&8 �������� �������! �$ ���������������� �! �! �! � ec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 22d01f3dbdfaecc2006e77de498c0d1a51dac06898955daa8ba6d8afeff65013 c2548f757562727c3609f5f33c01e471154ac2bc5f92b835bbf01ca64939d135 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 16b20a1d0c475300a52cbe49412fa498d9e2e56e48ab8d4db07633862ec3b86c abd4b788c8af2ea355f29a1ed7eba04ee6d8a2877fb1eb899ff682b7b04e0f01 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 76ec337b5114611964483536243f4a51570a6573b33c4f0be403a705251ca430 26dceddf9304efa1d7d6d7f2558c1506e1ef631980d8e979d0d62d0162ec471b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a28ee77b6a5d3c8557823007f46283651afb7dd732a73ed6f15521b1695a49d6 5955e32806591132a8cf43db2d4894c96119d7f628100c29a5f4a257047f12b4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bdbe68f6951d8b481196a65281c11f4414d66a070d43490be9f090fb5bfa6765 b82b1571b28ebf98ebbff67264985d1f570cc19f6246675d4fa936b0a7fd7d70 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 9dccfe5f8c27b7fd51ceaf0a6be430a67b923461455323bfd421ba9391c4b7f8 82a4a7802d2d4714c6068b448400073972a2fe488d8f2df67832e7af4342731d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c0a8ef18a0a9b4fabbc5c5a9ca19f770c6ab6c7136d8cb1a4aef8a5519c187f4 44037285b001676baf084bb493703af530bfc45ecc17e7cef9d7871c9083276e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e af1a8fa9185e34b2680ceed508c9c96450efc0ca88d77508255dab40c670893f fe4973b60bd6c3a09eb0e09e3ea752f1e250ee8c656e73a8c1d4597e6fd5cdf0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c70c7f599745d5748f5b7bf72e11920b58f471a0a0fec401cebba2492192a822 1af1e71a120d1aad033fed0e2f845f56d010e4a474cf2146edad82bf0af753f1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b02ffda7f9fd3be02eae05e800fc55de7407d3bb39607adb2150ac40b5d52993 2be8e014d9a82e1a457a2d1a42b408290c1af6e8048e1a5e0d5b6cb9b217c003 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bf69295a391da9d9e7eae3b0a420aa64ba81363879e9734243e26de606ae08ab 962c643b6c6a1848cb99790ae1f04d149f835b129b0dbea693e91aa25f564957 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bac0520a1407d3e3357c528229ccac0da28ea1fa5b0a5fd9ff2903965950300b 154870c40fc7239f9a42b320aa4464bca6eea32bbf05da3107eda1cdd2eaf8c9 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e c064716565b2512b900950d37a3200ab46225f30a4856653f41589b7f295be51 39295a56c12fadf71477608a42a05125c5e5d27294c38f81b94b8cd50b82b169 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 17241a59148887abd5d91a08c603f5fb8df2c864b6651f1a09ff9a902e30fd58 abfdf3740a325ea6ff39aa1cbbd9b08e110b9d4f1ea312435dab19786308f48a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7ca9d785854f09729d423b770cb87254fa56b9d32d2e40457dabb55fb8e50a65 345e39062e838f06d2e9fd9b29245959c6ff99704e5f59ce58313f357d270767 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 935a5029b6dcec0f26823b21e9d0c57933770296ab0700d09cb3577775be7a95 da889689eee823bedec26828b41a7d65cb78f27dc7974343792f194c78cf548d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 306131e68e7e3db9f59b8304ced1fb0bc8d6f820d881ce3260d0aa0332030c55 dce7f23bcae8aa40633810c91043aece1b21182d203f570ae15bb52815e96e15 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6dc4872773d98d4fad3ba8df092b4d14e582f7f43e23de651e80d9b93f20f8ec 721848382fcced7461641abb6e465c86b2888b5809e94207167edbe6d8efb1e6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e62fd29b5237ae6948668b971ee764c6a3a26ae7bb94ac39f46132adf238a9af 66a80560d14f0cb6588c5eb5b864d422688c83081158df15af91d3772ee83233 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 326e165cbf9efb501d9a64bc68a55d5dc895233f70a7b2b1a06470d26e30649b 945cb5caa12f813463ac616f6db467c379838fa3f5de42c63856aedb74f0269b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e baa49427108c7cbe29ad69795872aeb27c519818f7fa10dadb6452c2b218c1a1 a3b00e5e1963704d1554ba82296ee5f� x������������������ X } �&8 ��������8�����o! �$ ���������������� o! n! p! � 2f83cf 17c36cbe503e2a004bdefa50f6da26509bac08d96d8ca187baad3546c7c1d9b2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 9794837e38a99160a4c9f6c393dad192b733bc25411f052276df2c553ec546bb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d6b03731b01819a28cecd05c58e8533ddbd04d00e22919dc99d81cec790f69d6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2d4cc8ecb2991e9adde044e7d1a5cfdf197435689fb2a2bcd6b9897c598df7bb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf cba4a2d827f1f987f515b58618494cd343cfd623b111e1226bc54df6a07d2ecf 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4e109e39c42ad6bc4aaeebb8d8e6db4dfacb67cfdb163160ffb9585bbd57e859 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 9d44cab3bd0da81ca33e08678e9fb4532f6b6055eba252417129b1707fd613b8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ad9df741d490c2988a583b689c9d8b90bc7dc5c74dd2828407e3c00127c9886f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a373c5264312e91e182d108789d0e36a6e0d0c9729553ea8008a30d267a06d74 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 08f7442d0a57ed42baa48264c3be98de58196213b5415d5fed58aba62400c132 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1f29e3af21372c0e1e4b87f2956ab9b11ef86ac443124eeea5231414b2ce952f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b25505c83ee67fd585bce2e16f42b596094d42d84ee1249b80d71f886b43917a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 70ec3c5b1395a773033d005431b35a07ee24a15b2040352e126e8723963b1917 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ec5a9abb74725162b7cf29d95c4b3c46153f94486e5a6e0b6741d13a0c0ce38c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 99be5b91ba1faf3f35a91f640e94bc8794bcacb36eda39e48b3bdbf6ab7ebfba 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2a53ac1bc38f402f8845eff5a4bcaa69cea57481146adec6040541b2183fe379 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6d5a590b71aa01b88bfebce57dade73a61da417016e7c49bdba231273e41676c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6e81129c65e69db065a532aeef13cc357a0a05120b5afa6b45c7718e3abf3ab5 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b914cf80e70a1fd0ac4cd018475e40eb86553904fc9fda6a06fa48f2165860dc 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 86bfa9a7747dd80ee28c79403167ba10698e2fdf406f252b7cc14250b4060ea6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 262f639d6da9f9d2d32a5bb14d3a7cc28f2bde1c77e31a299e3186c81489ee68 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e13e060795f8eb9532e91449b322e4fe5b6b501b35425446dea26fb0262388c3 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e938772154e6ac1aafcde2bd8b514f2270805a522073b1105d3ed5b2baaa742a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf dd37ac73d0058acdf6a46539a8949afbb65967ce2ce09a8a45a8f17593f39750 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f8c214adc05569f38e5ce3676a8b798f970d806f4a32f8e61889df8ad87bf673 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2c29c016e0f031da0e41462e4511c700e7e59706e3a916657044d47c5c0032e2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 84a5b779ca0d12e64d0d0b0e3243553e23adca2e6ea51318c3335b65a9661782 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3a20bb4a1e1751e2764526b0ddbd0f1aa3bf2df54d4a759342b319a6a390a111 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4360c60cad58496d9a7db3f9a9073ab9ef151a742f859e4b2702b76de2b5e503 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 139843f4d85f0c6eb5dbe54e0ac2261849648a3b86d54f47b0d0088773f72fe9 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0f31cd08a13491115a14eb99945f3f31f2f8051951c19063064db5fcde36acad 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2� x�������������`o���� X ~ �&8 ��������������! �$ ���������������� �! �! �! � om> 3.0.5-4 Dan Walsh <dwalsh@redhat.com> 3.0.5-3 Dan Walsh <dwalsh@redhat.com> 3.0.5-2 Dan Walsh <dwalsh@redhat.com> 3.0.5-1 Dan Walsh <dwalsh@redhat.com> 3.0.4-6 Dan Walsh <dwalsh@redhat.com> 3.0.4-5 Dan Walsh <dwalsh@redhat.com> 3.0.4-4 Dan Walsh <dwalsh@redhat.com> 3.0.4-3 Dan Walsh <dwalsh@redhat.com> 3.0.4-2 Dan Walsh <dwalsh@redhat.com> 3.0.4-1 Dan Walsh <dwalsh@redhat.com> 3.0.3-6 Dan Walsh <dwalsh@redhat.com> 3.0.3-5 Dan Walsh <dwalsh@redhat.com> 3.0.3-4 Dan Walsh <dwalsh@redhat.com> 3.0.3-3 Dan Walsh <dwalsh@redhat.com> 3.0.3-2 Dan Walsh <dwalsh@redhat.com> 3.0.3-1 Dan Walsh <dwalsh@redhat.com> 3.0.2-9 Dan Walsh <dwalsh@redhat.com> 3.0.2-8 Dan Walsh <dwalsh@redhat.com> 3.0.2-7 Dan Walsh <dwalsh@redhat.com> 3.0.2-5 Dan Walsh <dwalsh@redhat.com> 3.0.2-4 Dan Walsh <dwalsh@redhat.com> 3.0.2-3 Dan Walsh <dwalsh@redhat.com> 3.0.2-2 Dan Walsh <dwalsh@redhat.com> 3.0.1-5 Dan Walsh <dwalsh@redhat.com> 3.0.1-4 Dan Walsh <dwalsh@redhat.com> 3.0.1-3 Dan Walsh <dwalsh@redhat.com> 3.0.1-2 Dan Walsh <dwalsh@redhat.com> 3.0.1-1 Dan Walsh <dwalsh@redhat.com> 2.6.5-3 Dan Walsh <dwalsh@redhat.com> 2.6.5-2 Dan Walsh <dwalsh@redhat.com> 2.6.4-7 Dan Walsh <dwalsh@redhat.com> 2.6.4-6 Dan Walsh <dwalsh@redhat.com> 2.6.4-5 Dan Walsh <dwalsh@redhat.com> 2.6.4-2 Dan Walsh <dwalsh@redhat.com> 2.6.4-1 Dan Walsh <dwalsh@redhat.com> 2.6.3-1 Dan Walsh <dwalsh@redhat.com> 2.6.2-1 Dan Walsh <dwalsh@redhat.com> 2.6.1-4 Dan Walsh <dwalsh@redhat.com> 2.6.1-2 Dan Walsh <dwalsh@redhat.com> 2.6.1-1 Dan Walsh <dwalsh@redhat.com> 2.5.12-12 Dan Walsh <dwalsh@redhat.com> 2.5.12-11 Dan Walsh <dwalsh@redhat.com> 2.5.12-10 Dan Walsh <dwalsh@redhat.com> 2.5.12-8 Dan Walsh <dwalsh@redhat.com> 2.5.12-5 Dan Walsh <dwalsh@redhat.com> 2.5.12-4 Dan Walsh <dwalsh@redhat.com> 2.5.12-3 Dan Walsh <dwalsh@redhat.com> 2.5.12-2 Dan Walsh <dwalsh@redhat.com> 2.5.12-1 Dan Walsh <dwalsh@redhat.com> 2.5.11-8 Dan Walsh <dwalsh@redhat.com> 2.5.11-7 Dan Walsh <dwalsh@redhat.com> 2.5.11-6 Dan Walsh <dwalsh@redhat.com> 2.5.11-5 Dan Walsh <dwalsh@redhat.com> 2.5.11-4 Dan Walsh <dwalsh@redhat.com> 2.5.11-3 Dan Walsh <dwalsh@redhat.com> 2.5.11-2 Dan Walsh <dwalsh@redhat.com> 2.5.11-1 Dan Walsh <dwalsh@redhat.com> 2.5.10-2 Dan Walsh <dwalsh@redhat.com> 2.5.10-1 Dan Walsh <dwalsh@redhat.com> 2.5.9-6 Dan Walsh <dwalsh@redhat.com> 2.5.9-5 Dan Walsh <dwalsh@redhat.com> 2.5.9-4 Dan Walsh <dwalsh@redhat.com> 2.5.9-3 Dan Walsh <dwalsh@redhat.com> 2.5.9-2 Dan Walsh <dwalsh@redhat.com> 2.5.8-8 Dan Walsh <dwalsh@redhat.com> 2.5.8-7 Dan Walsh <dwalsh@redhat.com> 2.5.8-6 Dan Walsh <dwalsh@redhat.com> 2.5.8-5 Dan Walsh <dwalsh@redhat.com> 2.5.8-4 Dan Walsh <dwalsh@redhat.com> 2.5.8-3 Dan Walsh <dwalsh@redhat.com> 2.5.8-2 Dan Walsh <dwalsh@redhat.com> 2.5.8-1 Dan Walsh <dwalsh@redhat.com> 2.5.7-1 Dan Walsh <dwalsh@redhat.com> 2.5.6-1 Dan Walsh <dwalsh@redhat.com> 2.5.5-2 Dan Walsh <dwalsh@redhat.com> 2.5.5-1 Dan Walsh <dwalsh@redhat.com> 2.5.4-2 Dan Walsh <dwalsh@redhat.com> 2.5.4-1 Dan Walsh <dwalsh@redhat.com> 2.5.3-3 Dan Walsh <dwalsh@redhat.com> 2.5.3-2 Dan Walsh <dwalsh@redhat.com> 2.5.3-1 Dan Walsh <dwalsh@redhat.com> 2.5.2-6 Dan Walsh <dwalsh@redhat.com> 2.5.2-5 Dan Walsh <dwalsh@redhat.com> 2.5.2-4 Dan Walsh <dwalsh@redhat.com> 2.5.2-3 Dan Walsh <dwalsh@redhat.com> 2.5.2-2 Dan Walsh <dwalsh@redhat.com> 2.5.2-1 Dan Walsh <dwalsh@redhat.com> 2.5.1-5 Dan Walsh <dwalsh@redhat.com> 2.5.1-4 Dan Walsh <dwalsh@redhat.com> 2.5.1-2 Dan Walsh <dwalsh@redhat.com> 2.5.1-1 Dan Walsh <dwalsh@redhat.com> 2.4.6-20 Dan Walsh <dwalsh@redhat.com> 2.4.6-19 Dan Walsh <dwalsh@redhat.com> 2.4.6-18 Dan Walsh <dwalsh@redhat.com> 2.4.6-17 Dan Walsh <dwalsh@redhat.com> 2.4.6-16 Dan Walsh <dwalsh@redhat.com> 2.4.6-15 Dan Walsh <dwalsh@redhat.com> 2.4.6-14 Dan Walsh <dwalsh@redhat.com> 2.4.6-13 Dan Walsh <dwalsh@redhat.com> 2.4.6-12 Dan Walsh <dwalsh@redhat.com> 2.4.6-11 Dan Walsh <dwalsh@redhat.com> 2.4.6-10 Dan Walsh <dwalsh@redhat.com> 2.4.6-9 Dan Walsh <dwalsh@redhat.com> 2.4.6-8 Dan Walsh <dwalsh@redhat.com> 2.4.6-7 Dan Walsh <dwalsh@redhat.com> 2.4.6-6 Dan Walsh <dwalsh@redhat.com> 2.4.6� x��������������^���� X �&8 ���������J �! �$ X ���������������� �! �! �! � kernel system table
- Label also chr_file /dev/mtd.* devices as fixed_disk_device_t
- Allow syslogd_t domain to create netlink generic sockets
- Label /dev/tpmrm[0-9]* as tpm_device_t
- Update dev_filetrans_all_named_dev() to allow create event22-30 character files with label event_device_t
- Update userdom_security_admin() and userdom_security_admin_template() to allow use auditctl
- Allow insmod_t domain to read iptables pid files
- Allow systemd to mounton /etc
- Allow initrc_domain to mmap all binaries labeled as systemprocess_entry
- Allow xserver_t domain to start using systemd socket activation
- Tweak SELinux policy for systemd to allow DynamicUsers systemd feature
- Associate several proc labels to fs_t
- Update init_named_socket_activation() interface to allow systemd also create link files in /var/run - Dontaudit abrt_t domain to write to usr_t dirs
- Revert "Allow rpcbind to bind on all unreserved udp ports"
- Allow rpcbind to bind on all unreserved udp ports
- Allow virtlogd to execute itself
- Allow stapserver several actions: - execute own tmp files - mmap stapserver_var_lib_t files - create stapserver_tmpfs_t files
- Allow ypxfr_t domain to stream connect to rpcbind and allos search sssd libs
- Allos systemd to socket activate ibacm service
- Allow dirsrv_t domain to mmap user_t files
- Allow kdumpctl_t domain to manage kdumpctl_tmp_t fifo files
- Allow kdumpctl to write to files on all levels
- Allow httpd_t domain to mmap httpd_config_t files
- Allow sanlock_t domain to connectto to unix_stream_socket
- Revert "Add same context for symlink as binary"
- Allow mysql execute rsync
- Update nfsd_t policy because of ganesha features
- Allow conman to getattr devpts_t
- Allow tomcat_domain to connect to smtp ports
- Allow tomcat_t domain to mmap tomcat_var_lib_t files
- Allow nagios_t domain to mmap nagios_log_t files
- Allow kpropd_t domain to mmap krb5kdc_principal_t files
- Allow kdumpctl_t domain to read fixed disk storage
- Allow xserver_t domain to start using systemd socket activation
- Tweak SELinux policy for systemd to allow DynamicUsers systemd feature
- Associate several proc labels to fs_t
- Update init_named_socket_activation() interface to allow systemd also create link files in /var/run
- Fix typo in syslogd policy
- Update syslogd policy to make working elasticsearch
- Label tcp and udp ports 9200 as wap_wsp_port
- Allow few domains to rw inherited kdumpctl tmp pipes - Add missing tarball from sources
Resolves: rhbz#1615312 - Use explicit path BuildRequires to get /usr/bin/python3 inside the buildroot
Resolves: rhbz#1615312 - Fix issue with aliases in apache interface file
Resolves: rhbz#1596618
- Add same context for symlink as binary
- Allow boltd_t to send logs to journal
- Allow colord_use_nfs to allow colord also mmap nfs_t files
- Allow mysqld_safe_t do execute itself
- Allow smbd_t domain to chat via dbus with avahi daemon
- cupsd_t domain will create /etc/cupsd/ppd as cupsd_etc_rw_t
- Update screen_role_template to allow caller domain to have screen_exec_t as entrypoint do new domain
- Add alias httpd__script_t to _script_t to make sepolicy generate working
- Allow gpg_t domain to mmap gpg_agent_tmp_t files
- Allow kprop_t domain to read network state
- Add support boltd policy
- Allow kpropd domain to exec itself
- Allow pdns_t to bind on tcp transproxy port
- Add support for opafm service
- Allow hsqldb_t domain to read cgroup files
- Allow rngd_t domain to read generic certs
- Allow innd_t domain to mmap own var_lib_t files
- Update screen_role_temaplate interface
- Allow chronyd_t domain to mmap own tmpfs files
- Allow chronyd_t domain to mmap own tmpfs files
- label /var/lib/pgsql/data/log as postgresql_log_t
- Allow sysadm_t domain to accept socket
- Allow systemd to manage passwd_file_t
- Allow sshd_t domain to mmap user_tmp_t files
- Allow systemd to mounont boltd lib dirs
- Allow sysadm_t domain to create rawip sockets
- Allow sysadm_t domain to listen on socket
- Update sudo_role_template() to allow caller domain also setattr generic ptys - Allow s� x�������������PN���� X � �&8 ���������B �! �$ ���������������� �! �! �! � �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������config(selinux-policy-targeted) selinux-policy-base selinux-policy-targeted
/bin/sh /bin/sh /bin/sh /bin/sh config(selinux-policy-targeted) coreutils policycoreutils rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) selinux-policy selinux-policy 3.14.3-117.el8 2.9-19 3.0.4-1 4.6.0-1 4.0-1 5.2-1 3.14.3-117.el8 3.14.3-117.el8
389-admin 389-ds-base audispd-plugins container-selinux seedit 1.1.12 1.2.7 1.7.7-1 2:1.12.1-22 4.14.3 CR=$'\n'
INPUT=""
for i in `find /etc/selinux/targeted/modules/active/modules/ -name \*disabled`; do
module=`basename $i | sed 's/.pp.disabled//'`
if [ -d /var/lib/selinux/targeted/active/modules/100/$module ]; then
touch /var/lib/selinux/targeted/active/modules/disabled/$p
fi
done
for i in `find /etc/selinux/targeted/modules/active/modules/ -name \*.pp`; do
INPUT="${INPUT}${CR}module -N -a $i"
done
for i in $(find /etc/selinux/targeted/modules/active -name \*.local); do
cp $i /var/lib/selinux/targeted/active
done
echo "$INPUT" | /usr/sbin/semanage import -S targeted -N
if /usr/sbin/selinuxenabled ; then
/usr/sbin/load_policy
fi
exit 0 selinux-policy-targeted 3.13.1-138 c��c��@c�k@c��@c� @c�E�cn9@cQ8@cF�@c�@cd@b�b��b��@b���b�@b�l�b�=�b�w@brj�bb��bN�@b<]@b)�@bs@b �@b��a�@a�7�a�N�a�a��@a�L�a�)@a�b�ap�aZ�aC1�a(�a&0�a
@aj@a�@`�t�`��`� @`Ȗ@`��@`�r�`�O@`OL@`@�`3��`-@`% @`��`U�_��_�H@_��@_���_�#�_��@_cO�_BZ@_5+@_'�@_!d�_�^��^��^��^�b�^��^��@^���^oj@^K�^G�@^0� x��������������=���� X � �&8 " �����~! �$ n ���������������� ~! }! ! � 1fb1c721b9bf7bdb3f2158d94ad047c7156253793de56 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e13e060795f8eb9532e91449b322e4fe5b6b501b35425446dea26fb0262388c3 81a84cbc2912c7e397b06926babcdeb4466513943776f46ac83f3197006e1c9c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e938772154e6ac1aafcde2bd8b514f2270805a522073b1105d3ed5b2baaa742a b1eeb360c3d382fae625e16dec9817615bf4949fedd7c7a057d54073cbe6a4d0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e dd37ac73d0058acdf6a46539a8949afbb65967ce2ce09a8a45a8f17593f39750 d59aa46283e14914f0c8e9e632d5b2249de9053f6a4c30fee658ac075af3ca8b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f8c214adc05569f38e5ce3676a8b798f970d806f4a32f8e61889df8ad87bf673 d87d4f480c87df6198bfb2d3bc5f19e58c3798d879e1d7611166a4f3516210cd d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2c29c016e0f031da0e41462e4511c700e7e59706e3a916657044d47c5c0032e2 ec0178c2b1af823a044519645ec550edcb2c13daa4c05245f31124e531fa112d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 84a5b779ca0d12e64d0d0b0e3243553e23adca2e6ea51318c3335b65a9661782 d4c91594e8b45b4e30183880e8c83cd52201aa822ee74b939b20f8f1f5555582 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3a20bb4a1e1751e2764526b0ddbd0f1aa3bf2df54d4a759342b319a6a390a111 a7f8f754e4ff73c3607abfbf700a5a37891b39799deed035a1ad5134dbf1dcf9 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4360c60cad58496d9a7db3f9a9073ab9ef151a742f859e4b2702b76de2b5e503 080333fe53c958d24b601718ee090d73bb4b749dcc6da9a8794096783c1b8cef d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 139843f4d85f0c6eb5dbe54e0ac2261849648a3b86d54f47b0d0088773f72fe9 17f41d38ae172f0ff014986eaf92c8e47d03548a953348aafc1ef8c085fa1e2a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0f31cd08a13491115a14eb99945f3f31f2f8051951c19063064db5fcde36acad 43f74ee9fdf60d9c4a857ddef0aa23b781003f8cdefdc484eae2614c2090695a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2e62c0e2c995b17e6cf948793ae0fe5b180829b7ca3589ef9b4195c5aab0da91 660ed2a441337fa1365b8bd1e8c1051d7f00e42e0c268f85b905242a78d45c3b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f3cd9ce1acbc28c867ac87fad1551c7eb88e0e212157bf0c2f0fc8ef265b8e6e 1766574a98371c7880b175f1e327e16b7397a34aa85468017b7f01c2b1b668ad d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d652f38abbd1fe64e6f39b1ce2351602317be9811d05b68b1da3798d2dd308cb 9ac15a31507acea0c7343a9a45c9b5b1acf94e73af35b64811fe45ab02896b21 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1189521d880505254b5af35a9737651bdce9acd87ef382967ead6e2df44937d3 11b64d6fa69bc8cca767ce8597591bc31e0357fd1a6df1696a9874480cbbe52f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1fbfa217d70d3f5322b2053ecde465dbd2bd1b75617c942c80ef10fb6fad6159 58fdbd43759cfaf5f1d688beca7d5fe36320d862d4941b017f36e09cd9f1dd00 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e fa48648c5953d247da0e62b2e7ea09f7a22e4993789711ed1feca373652d7b2e 23e0a22c0eacab5854ce3b95b786676cbc4a8a0c97a3f2f7863150a78c34f1c7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 91d5c14dc7c220dbaac5e4950ddfdaffea10ff1dc6977d5979aa7f9a4429b310 12a3258c303bf605e2c3b051e0c6d34ecdef2fc512d547c0a0e0e01a0b41cc56 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 966fb062a481083a28d072247764757364e5c7b617f008803e2392b724b3e982 9ab819f82af955e9ba0c5b6fd88353fb6c3729c79f956c5f50940b469ec44e1b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8dd7ec1f3afc28785857b07b3c660da7759cf71c80723c3ada6f503e91b57405 81b6bc3d3e3831aa8bbc66c450d3c13e98b9e56a16e8fc92c5c6707124014ae7 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 46325c462fab02ae8c5ed1c9f5f853fe1c8c27d16cacc1a2b7c20916afed38b2 6213ffca464f7483f70586df658ca0060197d7a28c2ada8d465a0bf0ad00b2f1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ff898d579c359637efaacef1207c8f10b69c9e� x�������������@-���� X � c'8 ��������P<���7" �$ ' ���������������� 7" 6" 8" � ow setroubleshoot to run mlocate - Update to upstream - Add fish as a shell
- Allow fprintd to list usbfs_t
- Allow consolekit to search mountpoints
- Add proper labeling for shorewall - New log file for vmware
- Allow xdm to setattr on user_tmp_t - Upgrade to upstream - Allow fprintd to access sys_ptrace
- Add sandbox policy - Add varnishd policy - Fixes for kpropd - Allow brctl to r/w tun_tap_device_t - Add /usr/share/selinux/packages - Allow rpcd_t to send signals to kernel threads - Fix upgrade for F10 to F11 - Add policy for /var/lib/fprint -Remove duplicate line - Allow svirt to manage pci and other sysfs device data - Fix package selection handling - Fix /sbin/ip6tables-save context
- Allod udev to transition to mount
- Fix loading of mls policy file - Add shorewall policy - Additional rules for fprintd and sssd - Allow nsplugin to unix_read unix_write sem for unconfined_java - Fix uml files to be owned by users - Fix Upgrade path to install unconfineduser.pp when unocnfined package is 3.0.0 or less - Allow confined users to manage virt_content_t, since this is home dir content
- Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection - Fix labeling on /var/lib/misc/prelink*
- Allow xserver to rw_shm_perms with all x_clients
- Allow prelink to execute files in the users home directory - Allow initrc_t to delete dev_null
- Allow readahead to configure auditing
- Fix milter policy
- Add /var/lib/readahead - Update to latest milter code from Paul Howarth - Additional perms for readahead - Allow pulseaudio to acquire_svc on session bus
- Fix readahead labeling - Allow sysadm_t to run rpm directly
- libvirt needs fowner - Allow sshd to read var_lib symlinks for freenx - Allow nsplugin unix_read and write on users shm and sem
- Allow sysadm_t to execute su - Dontaudit attempts to getattr user_tmpfs_t by lvm
- Allow nfs to share removable media - Add ability to run postdrop from confined users - Fixes for podsleuth - Turn off nsplugin transition
- Remove Konsole leaked file descriptors for release - Allow cupsd_t to create link files in print_spool_t
- Fix iscsi_stream_connect typo
- Fix labeling on /etc/acpi/actions
- Don't reinstall unconfine and unconfineuser on upgrade if they are not installed - Allow audioentroy to read etc files - Add fail2ban_var_lib_t
- Fixes for devicekit_power_t - Separate out the ucnonfined user from the unconfined.pp package - Make sure unconfined_java_t and unconfined_mono_t create user_tmpfs_t. - Upgrade to latest upstream
- Allow devicekit_disk sys_rawio - Dontaudit binds to ports < 1024 for named
- Upgrade to latest upstream - Allow podsleuth to use tmpfs files - Add customizable_types for svirt - Allow setroubelshoot exec* privs to prevent crash from bad libraries
- add cpufreqselector - Dontaudit listing of /root directory for cron system jobs - Fix missing ld.so.cache label - Add label for ~/.forward and /root/.forward - Fixes for svirt - Fixes to allow svirt read iso files in homedir - Add xenner and wine fixes from mgrepl - Allow mdadm to read/write mls override - Change to svirt to only access svirt_image_t - Fix libvirt policy - Upgrade to latest upstream - Fixes for iscsid and sssd
- More cleanups for upgrade from F10 to Rawhide. - Add pulseaudio, sssd policy
- Allow networkmanager to exec udevadm - Add pulseaudio context - Upgrade to latest patches - Fixes for libvirt - Update to Latest upstream - Fix setrans.conf to show SystemLow for s0 - Further confinement of qemu images via svirt - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Allow NetworkManager to manage /etc/NetworkManager/system-connections - add virtual_image_context and virtual_domain_context files - Allow rpcd_t to send signal to mount_t
- Allow libvirtd to run ranged - Fix sysnet/net_conf_t - Fix squidGuard labeling - Re-add corenet_in_generic_if(unlabeled_t) * Tue Feb 10 2009 Dan Walsh <dwalsh@redhat.com> 3.6.5-2
- Add git web policy - Add setrans contains from upstream - Do transitions outside of the booleans - Allow xdm to create user_� x�������������� ���� X � W'8 ��������(0���+" �$ ; ���������������� +" *" ," � _mount_t - Add exim_exec_t label for /usr/sbin/exim_tidydb
- Call init_dontaudit_rw_stream_socket() interface in mta policy
- sssd need to search /var/cache/krb5rcache directory
- Allow corosync to relabel own tmp files
- Allow zarafa domains to send system log messages
- Allow ssh to do tunneling
- Allow initrc scripts to sendto init_t unix_stream_socket
- Changes to make sure dmsmasq and virt directories are labeled correctly
- Changes needed to allow sysadm_t to manage systemd unit files
- init is passing file descriptors to dbus and on to system daemons
- Allow sulogin additional access Reported by dgrift and Jeremy Miller
- Steve Grubb believes that wireshark does not need this access
- Fix /var/run/initramfs to stop restorecon from looking at
- pki needs another port
- Add more labels for cluster scripts
- Allow apps that manage cgroup_files to manage cgroup link files
- Fix label on nfs-utils scripts directories
- Allow gatherd to read /dev/rand and /dev/urand - pki needs another port
- Add more labels for cluster scripts
- Fix label on nfs-utils scripts directories
- Fixes for cluster
- Allow gatherd to read /dev/rand and /dev/urand
- abrt leaks fifo files - Add glance policy
- Allow mdadm setsched
- /var/run/initramfs should not be relabeled with a restorecon run
- memcache can be setup to override sys_resource
- Allow httpd_t to read tetex data
- Allow systemd_tmpfiles to delete kernel modules left in /tmp directory. - Allow Postfix to deliver to Dovecot LMTP socket
- Ignore bogus sys_module for lldpad
- Allow chrony and gpsd to send dgrams, gpsd needs to write to the real time clock
- systemd_logind_t sets the attributes on usb devices
- Allow hddtemp_t to read etc_t files
- Add permissivedomains module
- Move all permissive domains calls to permissivedomain.te
- Allow pegasis to send kill signals to other UIDs - Allow insmod_t to use fds leaked from devicekit
- dontaudit getattr between insmod_t and init_t unix_stream_sockets
- Change sysctl unit file interfaces to use systemctl
- Add support for chronyd unit file
- Allow mozilla_plugin to read gnome_usr_config
- Add policy for new gpsd
- Allow cups to create kerberos rhost cache files
- Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly - Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten - Add policy for sa-update being run out of cron jobs
- Add create perms to postgresql_manage_db
- ntpd using a gps has to be able to read/write generic tty_device_t
- If you disable unconfined and unconfineduser, rpm needs more privs to manage /dev
- fix spec file
- Remove qemu_domtrans_unconfined() interface
- Make passenger working together with puppet
- Add init_dontaudit_rw_stream_socket interface
- Fixes for wordpress - Turn on allow_domain_fd_use boolean on F16
- Allow syslog to manage all log files
- Add use_fusefs_home_dirs boolean for chrome
- Make vdagent working with confined users
- Add abrt_handle_event_t domain for ABRT event scripts
- Labeled /usr/sbin/rhnreg_ks as rpm_exec_t and added changes related to this change
- Allow httpd_git_script_t to read passwd data
- Allow openvpn to set its process priority when the nice parameter is used - livecd fixes
- spec file fixes - fetchmail can use kerberos
- ksmtuned reads in shell programs
- gnome_systemctl_t reads the process state of ntp
- dnsmasq_t asks the kernel to load multiple kernel modules
- Add rules for domains executing systemctl
- Bogus text within fc file - Add cfengine policy - Add abrt_domain attribute
- Allow corosync to manage cluster lib files
- Allow corosync to connect to the system DBUS - Add sblim, uuidd policies
- Allow kernel_t dyntrasition to init_t - init_t need setexec
- More fixes of rules which cause an explosion in rules by Dan Walsh - Allow rcsmcertd to perform DNS name resolution
- Add dirsrvadmin_unconfined_script_t domain type for 389-ds admin scripts
- Allow tmux to run as screen
- New policy for collectd
- Allow gkeyring_t to inte� x�������������0 ���� X � �&8 @@������X/�������! �$ # ���������������� �! �! �! � walsh@redhat.com> 2.2.21-2 Dan Walsh <dwalsh@redhat.com> 2.2.21-1 Dan Walsh <dwalsh@redhat.com> 2.2.20-1 Dan Walsh <dwalsh@redhat.com> 2.2.19-2 Dan Walsh <dwalsh@redhat.com> 2.2.19-1 Dan Walsh <dwalsh@redhat.com> 2.2.18-2 Dan Walsh <dwalsh@redhat.com> 2.2.18-1 Dan Walsh <dwalsh@redhat.com> 2.2.17-2 Dan Walsh <dwalsh@redhat.com> 2.2.16-1 Dan Walsh <dwalsh@redhat.com> 2.2.15-4 Dan Walsh <dwalsh@redhat.com> 2.2.15-3 Dan Walsh <dwalsh@redhat.com> 2.2.15-1 Dan Walsh <dwalsh@redhat.com> 2.2.14-2 Dan Walsh <dwalsh@redhat.com> 2.2.14-1 Dan Walsh <dwalsh@redhat.com> 2.2.13-1 Dan Walsh <dwalsh@redhat.com> 2.2.12-1 Dan Walsh <dwalsh@redhat.com> 2.2.11-2 Dan Walsh <dwalsh@redhat.com> 2.2.11-1 Dan Walsh <dwalsh@redhat.com> 2.2.10-1 Dan Walsh <dwalsh@redhat.com> 2.2.9-2 Dan Walsh <dwalsh@redhat.com> 2.2.9-1 Dan Walsh <dwalsh@redhat.com> 2.2.8-2 Dan Walsh <dwalsh@redhat.com> 2.2.7-1 Dan Walsh <dwalsh@redhat.com> 2.2.6-3 Dan Walsh <dwalsh@redhat.com> 2.2.6-2 Dan Walsh <dwalsh@redhat.com> 2.2.6-1 Dan Walsh <dwalsh@redhat.com> 2.2.5-1 Dan Walsh <dwalsh@redhat.com> 2.2.4-1 Dan Walsh <dwalsh@redhat.com> 2.2.3-1 Dan Walsh <dwalsh@redhat.com> 2.2.2-1 Dan Walsh <dwalsh@redhat.com> 2.2.1-1 Dan Walsh <dwalsh@redhat.com> 2.1.13-1 Dan Walsh <dwalsh@redhat.com> 2.1.12-3 Dan Walsh <dwalsh@redhat.com> 2.1.11-1 Dan Walsh <dwalsh@redhat.com> 2.1.10-1 Jeremy Katz <katzj@redhat.com> - 2.1.9-2 Dan Walsh <dwalsh@redhat.com> 2.1.9-1 Dan Walsh <dwalsh@redhat.com> 2.1.8-3 Dan Walsh <dwalsh@redhat.com> 2.1.8-2 Dan Walsh <dwalsh@redhat.com> 2.1.8-1 Dan Walsh <dwalsh@redhat.com> 2.1.7-4 Dan Walsh <dwalsh@redhat.com> 2.1.7-3 Dan Walsh <dwalsh@redhat.com> 2.1.7-2 Dan Walsh <dwalsh@redhat.com> 2.1.7-1 Dan Walsh <dwalsh@redhat.com> 2.1.6-24 Dan Walsh <dwalsh@redhat.com> 2.1.6-23 Dan Walsh <dwalsh@redhat.com> 2.1.6-22 Dan Walsh <dwalsh@redhat.com> 2.1.6-21 Dan Walsh <dwalsh@redhat.com> 2.1.6-20 Dan Walsh <dwalsh@redhat.com> 2.1.6-18 Dan Walsh <dwalsh@redhat.com> 2.1.6-17 Dan Walsh <dwalsh@redhat.com> 2.1.6-16 Dan Walsh <dwalsh@redhat.com> 2.1.6-15 Dan Walsh <dwalsh@redhat.com> 2.1.6-14 Dan Walsh <dwalsh@redhat.com> 2.1.6-13 Dan Walsh <dwalsh@redhat.com> 2.1.6-11 Dan Walsh <dwalsh@redhat.com> 2.1.6-10 Dan Walsh <dwalsh@redhat.com> 2.1.6-9 Dan Walsh <dwalsh@redhat.com> 2.1.6-8 Dan Walsh <dwalsh@redhat.com> 2.1.6-5 Dan Walsh <dwalsh@redhat.com> 2.1.6-4 Dan Walsh <dwalsh@redhat.com> 2.1.6-3 Dan Walsh <dwalsh@redhat.com> 2.1.6-2 Dan Walsh <dwalsh@redhat.com> 2.1.6-1 Dan Walsh <dwalsh@redhat.com> 2.1.4-2 Dan Walsh <dwalsh@redhat.com> 2.1.4-1 Dan Walsh <dwalsh@redhat.com> 2.1.3-1 Jeremy Katz <katzj@redhat.com> - 2.1.2-3 Dan Walsh <dwalsh@redhat.com> 2.1.2-2 Dan Walsh <dwalsh@redhat.com> 2.1.2-1 Dan Walsh <dwalsh@redhat.com> 2.1.1-3 Dan Walsh <dwalsh@redhat.com> 2.1.1-2 Dan Walsh <dwalsh@redhat.com> 2.1.1-1 Dan Walsh <dwalsh@redhat.com> 2.1.0-3 Dan Walsh <dwalsh@redhat.com> 2.1.0-2. Dan Walsh <dwalsh@redhat.com> 2.1.0-1. Dan Walsh <dwalsh@redhat.com> 2.0.11-2. Dan Walsh <dwalsh@redhat.com> 2.0.11-1. Dan Walsh <dwalsh@redhat.com> 2.0.9-1. Dan Walsh <dwalsh@redhat.com> 2.0.8-1. Dan Walsh <dwalsh@redhat.com> 2.0.7-3 Dan Walsh <dwalsh@redhat.com> 2.0.7-2 Dan Walsh <dwalsh@redhat.com> 2.0.6-2 Dan Walsh <dwalsh@redhat.com> 2.0.5-4 Dan Walsh <dwalsh@redhat.com> 2.0.5-1 Dan Walsh <dwalsh@redhat.com> 2.0.4-1 Dan Walsh <dwalsh@redhat.com> 2.0.2-2 Dan Walsh <dwalsh@redhat.com> 2.0.2-1 Dan Walsh <dwalsh@redhat.com> 2.0.1-2 Dan Walsh <dwalsh@redhat.com> 2.0.1-1 - Fix opencryptoki file names in /dev/shm
Resolves: rhbz#2028637
- Allow system_cronjob_t transition to rpm_script_t
Resolves: rhbz#2154242
- Revert "Allow system_cronjob_t domtrans to rpm_script_t"
Resolves: rhbz#2154242
- Allow httpd work with tokens in /dev/shm
Resolves: rhbz#2028637
- Allow keepalived to set resource limits
Resolves: rhbz#2168638
- Allow insights-client manage fsadm pid files - Allow sysadm_t run initrc_t script and sysadm_r role access
Resolves: rhbz#2039662
- Allow insights-client manage fsadm pid files
Resolves: rhbz#2166802
- Add journalctl the sys_resource capability
Resolves: rh� x������������������� X � '8 �������� �������! �$ D ���������������� �! �! �! � usefs_t files BZ(1517517)
- Allow userdom_home_reader_type attribute to mmap cifs_t files BZ(1517125)
- Add interface fs_map_cifs_files()
- Merge pull request #207 from rhatdan/labels
- Merge pull request #208 from rhatdan/logdir
- Allow domains that manage logfiles to man logdirs - Make ganesha nfs server - Add interface raid_relabel_mdadm_var_run_content()
- Fix iscsi SELinux module
- Allow spamc_t domain to read home mail content BZ(1414366)
- Allow sendmail_t to list postfix config dirs BZ(1514868)
- Allow dovecot_t domain to mmap mail content in homedirs BZ(1513153)
- Allow iscsid_t domain to requesting loading kernel modules BZ(1448877)
- Allow svirt_t domain to mmap svirt_tmpfs_t files BZ(1515304)
- Allow cupsd_t domain to localization BZ(1514350)
- Allow antivirus_t nnp domain transition because of systemd security features. BZ(1514451)
- Allow tlp_t domain transition to systemd_rfkill_t domain BZ(1416301)
- Allow abrt_t domain to mmap fusefs_t files BZ(1515169)
- Allow memcached_t domain nnp_transition becuase of systemd security features BZ(1514867)
- Allow httpd_t domain to mmap all httpd content type BZ(1514866)
- Allow mandb_t to read /etc/passwd BZ(1514903)
- Allow mandb_t domain to mmap files with label mandb_cache_t BZ(1514093)
- Allow abrt_t domain to mmap files with label syslogd_var_run_t BZ(1514975)
- Allow nnp transition for systemd-networkd daemon to run in proper SELinux domain BZ(1507263)
- Allow systemd to read/write to mount_var_run_t files BZ(1515373)
- Allow systemd to relabel mdadm_var_run_t sock files BZ(1515373)
- Allow home managers to mmap nfs_t files BZ(1514372)
- Add interface fs_mmap_nfs_files()
- Allow systemd-mount to create new directory for mountpoint BZ(1514880)
- Allow getty to use usbttys
- Add interface systemd_rfkill_domtrans()
- Allow syslogd_t to mmap files with label syslogd_var_lib_t BZ(1513403)
- Add interface fs_mmap_fusefs_files()
- Allow ipsec_t domain to mmap files with label ipsec_key_file_t BZ(1514251) - Allow pcp_pmlogger to send logs to journal BZ(1512367)
- Merge pull request #40 from lslebodn/kcm_kerberos
- Allow services to use kerberos KCM BZ(1512128)
- Allow system_mail_t domain to be system_dbus_client BZ(1512476)
- Allow aide domain to stream connect to sssd_t BZ(1512500)
- Allow squid_t domain to mmap files with label squid_tmpfs_t BZ(1498809)
- Allow nsd_t domain to mmap files with labels nsd_tmp_t and nsd_zone_t BZ(1511269)
- Include cupsd_config_t domain into cups_execmem boolean. BZ(1417584)
- Allow samba_net_t domain to mmap samba_var_t files BZ(1512227)
- Allow lircd_t domain to execute shell BZ(1512787)
- Allow thumb_t domain to setattr on cache_home_t dirs BZ(1487814)
- Allow redis to creating tmp files with own label BZ(1513518)
- Create new interface thumb_nnp_domtrans allowing domaintransition with NoNewPrivs. This interface added to thumb_run() BZ(1509502)
- Allow httpd_t to mmap httpd_tmp_t files BZ(1502303)
- Add map permission to samba_rw_var_files interface. BZ(1513908)
- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
- Add dac_read_search and dac_override capabilities to ganesha
- Allow ldap_t domain to manage also slapd_tmp_t lnk files
- Allow snapperd_t domain to relabeling from snapperd_data_t BZ(1510584)
- Add dac_override capability to dhcpd_t doamin BZ(1510030)
- Allow snapperd_t to remove old snaps BZ(1510862)
- Allow chkpwd_t domain to mmap system_db_t files and be dbus system client BZ(1513704)
- Allow xdm_t send signull to all xserver unconfined types BZ(1499390)
- Allow fs associate for sysctl_vm_t BZ(1447301)
- Label /etc/init.d/vboxdrv as bin_t to run virtualbox as unconfined_service_t BZ(1451479)
- Allow xdm_t domain to read usermodehelper_t state BZ(1412609)
- Allow dhcpc_t domain to stream connect to userdomain domains BZ(1511948)
- Allow systemd to mmap kernel modules BZ(1513399)
- Allow userdomains to mmap fifo_files BZ(1512242)
- Merge pull request #205 from rhatdan/labels
- Add map permission to init_domtrans() interface BZ(1513832)
- Allow x� x������������� ����� X � D'8 ��������h����" �$ ���������������� " " " � ctories for use by tmpreaper
- Allow sshd_t sys_admin for use with afs logins
- Allow systemd to read/write all sysctls
- Allow sshd_t sys_admin for use with afs logins
- Add labeling for /var/named/chroot/etc/localtim - Allow setroubleshoot_fixit to execute rpm
- zoneminder needs to connect to httpd ports where remote cameras are listening
- Allow firewalld to execute content created in /run directory
- Allow svirt_t to read generic certs
- Dontaudit leaked ps content to mozilla plugin
- Allow sshd_t sys_admin for use with afs logins
- Allow systemd to read/write all sysctls
- init scripts are creating systemd_unit_file_t directories - systemd_logind_t is looking at all files under /run/user/apache
- Allow systemd to manage all user tmp files
- Add labeling for /var/named/chroot/etc/localtime
- Allow netlabel_peer_t type to flow over netif_t and node_t, and only be hindered by MLS, need back port to RHEL6
- Keystone is now using a differnt port
- Allow xdm_t to use usbmuxd daemon to control sound
- Allow passwd daemon to execute gnome_exec_keyringd
- Fix chrome_sandbox policy
- Add labeling for /var/run/checkquorum-timer
- More fixes for the dspam domain, needs back port to RHEL6
- More fixes for the dspam domain, needs back port to RHEL6
- sssd needs to connect to kerberos password port if a user changes his password
- Lots of fixes from RHEL testing of dspam web
- Allow chrome and mozilla_plugin to create msgq and semaphores
- Fixes for dspam cgi scripts
- Fixes for dspam cgi scripts
- Allow confine users to ptrace screen
- Backport virt_qemu_ga_t changes from RHEL
- Fix labeling for dspam.cgi needed for RHEL6
- We need to back port this policy to RHEL6, for lxc domains
- Dontaudit attempts to set sys_resource of logrotate
- Allow corosync to read/write wdmd's tmpfs files
- I see a ptrace of mozilla_plugin_t by staff_t, will allow without deny_ptrace being set
- Allow cron jobs to read bind config for unbound
- libvirt needs to inhibit systemd
- kdumpctl needs to delete boot_t files
- Fix duplicate gnome_config_filetrans
- virtd_lxc_t is using /dev/fuse
- Passenger needs to create a directory in /var/log, needs a backport to RHEL6 for openshift
- apcupsd can be setup to listen to snmp trafic
- Allow transition from kdumpgui to kdumpctl
- Add fixes for munin CGI scripts
- Allow deltacloud to connect to openstack at the keystone port
- Allow domains that transition to svirt domains to be able to signal them
- Fix file context of gstreamer in .cache directory
- libvirt is communicating with logind
- NetworkManager writes to the systemd inhibit pipe - Allow munin disk plugins to get attributes of all directories
- Allow munin disk plugins to get attributes of all directorie
- Allow logwatch to get attributes of all directories
- Fix networkmanager_manage_lib() interface
- Fix gnome_manage_config() to allow to manage sock_file
- Fix virtual_domain_context
- Add support for dynamic DNS for DHCPv6 - Allow svirt to use netlink_route_socket which was a part of auth_use_nsswitch
- Add additional labeling for /var/www/openshift/broker
- Fix rhev policy
- Allow openshift_initrc domain to dbus chat with systemd_logind
- Allow httpd to getattr passenger log file if run_stickshift
- Allow consolehelper-gtk to connect to xserver
- Add labeling for the tmp-inst directory defined in pam_namespace.conf
- Add lvm_metadata_t labeling for /etc/multipath - consoletype is no longer used - Add label for efivarfs
- Allow certmonger to send signal to itself
- Allow plugin-config to read own process status
- Add more fixes for pacemaker
- apache/drupal can run clamscan on uploaded content
- Allow chrome_sandbox_nacl_t to read pid 1 content - Fix MCS Constraints to control ingres and egres controls on the network.
- Change name of svirt_nokvm_t to svirt_tcg_t
- Allow tuned to request the kernel to load kernel modules - Label /var/lib/pgsql/.ssh as ssh_home_t
- Add labeling for /usr/bin/pg_ctl
- Allow systemd-logind to manage keyring user tmp dirs
- Add support for 7389/tcp port
- gems seems to be placed in lots of places� x������������������� X � N&8 ���������Y������c �$ ���������������� c c c � eleng@fedoraproject.org> - 6.0-4.20160116 Miroslav Lichvar <mlichvar@redhat.com> 6.0-3.20160116 Miroslav Lichvar <mlichvar@redhat.com> 6.0-2.20160116 Miroslav Lichvar <mlichvar@redhat.com> 6.0-1.20150810 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.9-21.20150214 Kalev Lember <kalevlember@gmail.com> - 5.9-20.20150214 Till Maas <opensource@till.name> - 5.9-19.20150214 Miroslav Lichvar <mlichvar@redhat.com> 5.9-18.20150214 Miroslav Lichvar <mlichvar@redhat.com> 5.9-17.20140906 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.9-16.20140323 Tom Callaway <spot@fedoraproject.org> - 5.9-15.20140323 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.9-14.20140323 Miroslav Lichvar <mlichvar@redhat.com> 5.9-13.20140323 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.9-12.20130511 Miroslav Lichvar <mlichvar@redhat.com> 5.9-11.20130511 Miroslav Lichvar <mlichvar@redhat.com> 5.9-10.20130413 Miroslav Lichvar <mlichvar@redhat.com> 5.9-9.20130316 Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126 Miroslav Lichvar <mlichvar@redhat.com> 5.9-7.20121017 Miroslav Lichvar <mlichvar@redhat.com> 5.9-6.20121013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.9-5.20120204 Miroslav Lichvar <mlichvar@redhat.com> 5.9-4.20120204 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.9-3.20110716 Miroslav Lichvar <mlichvar@redhat.com> 5.9-2.20110716 Miroslav Lichvar <mlichvar@redhat.com> 5.9-1 Miroslav Lichvar <mlichvar@redhat.com> 5.8-2.20110319 Miroslav Lichvar <mlichvar@redhat.com> 5.8-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.7-11.20101211 Miroslav Lichvar <mlichvar@redhat.com> 5.7-10.20101211 Miroslav Lichvar <mlichvar@redhat.com> 5.7-9.20101128 Miroslav Lichvar <mlichvar@redhat.com> 5.7-8.20100703 Miroslav Lichvar <mlichvar@redhat.com> 5.7-7.20100130 Miroslav Lichvar <mlichvar@redhat.com> 5.7-6.20100123 Miroslav Lichvar <mlichvar@redhat.com> 5.7-5.20100116 Miroslav Lichvar <mlichvar@redhat.com> 5.7-4.20100116 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.7-3.20090207 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.7-2.20090207 Miroslav Lichvar <mlichvar@redhat.com> 5.7-1.20090207 Miroslav Lichvar <mlichvar@redhat.com> 5.6-20.20080927 Miroslav Lichvar <mlichvar@redhat.com> 5.6-19.20080628 Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628 Miroslav Lichvar <mlichvar@redhat.com> 5.6-17.20080524 Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301 Fedora Release Engineering <rel-eng@fedoraproject.org> - 5.6-15.20080112 Miroslav Lichvar <mlichvar@redhat.com> 5.6-14.20080112 Miroslav Lichvar <mlichvar@redhat.com> 5.6-13.20080112 Miroslav Lichvar <mlichvar@redhat.com> 5.6-12.20070812 Miroslav Lichvar <mlichvar@redhat.com> 5.6-11.20070812 Miroslav Lichvar <mlichvar@redhat.com> 5.6-10.20070812 Miroslav Lichvar <mlichvar@redhat.com> 5.6-9.20070812 Miroslav Lichvar <mlichvar@redhat.com> 5.6-8.20070812 Miroslav Lichvar <mlichvar@redhat.com> 5.6-7.20070612 Miroslav Lichvar <mlichvar@redhat.com> 5.6-6.20070303 Miroslav Lichvar <mlichvar@redhat.com> 5.6-5.20070217 Miroslav Lichvar <mlichvar@redhat.com> 5.6-4.20070210 Miroslav Lichvar <mlichvar@redhat.com> 5.6-3.20070203 Miroslav Lichvar <mlichvar@redhat.com> 5.6-2.20070120 Miroslav Lichvar <mlichvar@redhat.com> 5.6-1.20070106 Miroslav Lichvar <mlichvar@redhat.com> 5.5-27.20061209 Miroslav Lichvar <mlichvar@redhat.com> 5.5-26.20060715 Miroslav Lichvar <mlichvar@redhat.com> 5.5-25.20060715 Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715 Miroslav Lichvar <mlichvar@redhat.com> 5.5-23.20060715 Miroslav Lichvar <mlichvar@redhat.com> 5.5-22.20060715 Miroslav Lichvar <mlichvar@redhat.com> 5.5-21 Miroslav Lichvar <mlichvar@redhat.com> 5.5-20 Miroslav Lichvar <mlichvar@redhat.com> - 5.5-19 Jesse Keating <jkeating@redhat.com> - 5.5-18.2 Jesse Keating <jkeating@redhat.com> - 5.5-18.1 Jindrich Novy <jnovy@redhat.com> 5.5-18 Petr Raszyk <praszyk@redhat.com> 5.5-17 Petr Raszyk <praszyk@redhat.com> 5.5-11 Petr Raszyk <praszyk@redhat.� x������������������ X � 4'8 ����������" �$ ���������������� " " " � mit boolean
- Allow fetchmail to send mails
- Add labels for apache logs under miq package
- Allow irc_t to use tcp sockets
- fix labels in puppet.if
- Allow tcsd to read utmp file
- Allow openshift_cron_t to run ssh-keygen in ssh_keygen_t to access host keys
- Define svirt_socket_t as a domain_type
- Take away transition from init_t to initrc_t when executing bin_t, allow init_t to run chk_passwd_t
- Fix label on pam_krb5 helper apps - Allow ldconfig to write to kdumpctl fifo files
- allow neutron to connect to amqp ports
- Allow kdump_manage_crash to list the kdump_crash_t directory
- Allow glance-api to connect to amqp port
- Allow virt_qemu_ga_t to read meminfo
- Add antivirus_home_t type for antivirus date in HOMEDIRS
- Allow mpd setcap which is needed by pulseaudio
- Allow smbcontrol to create content in /var/lib/samba
- Allow mozilla_exec_t to be used as a entrypoint to mozilla_domtrans_spec
- Add additional labeling for qemu-ga/fsfreeze-hook.d scripts
- amanda_exec_t needs to be executable file
- Allow block_suspend cap for samba-net
- Allow apps that read ipsec_mgmt_var_run_t to search ipsec_var_run_t
- Allow init_t to run crash utility
- Treat usr_t just like bin_t for transitions and executions
- Add port definition of pka_ca to port 829 for openshift
- Allow selinux_store to use symlinks - Allow block_suspend cap for samba-net
- Allow t-mission-control to manage gabble cache files
- Allow nslcd to read /sys/devices/system/cpu
- Allow selinux_store to use symlinks - Allow xdm_t to transition to itself
- Call neutron interfaces instead of quantum
- Allow init to change targed role to make uncofined services (xrdp which now has own systemd unit file) working. We want them to have in unconfined_t
- Make sure directories in /run get created with the correct label
- Make sure /root/.pki gets created with the right label
- try to remove labeling for motion from zoneminder_exec_t to bin_t
- Allow inetd_t to execute shell scripts
- Allow cloud-init to read all domainstate
- Fix to use quantum port
- Add interface netowrkmanager_initrc_domtrans
- Fix boinc_execmem
- Allow t-mission-control to read gabble cache home
- Add labeling for ~/.cache/telepathy/avatars/gabble
- Allow memcache to read sysfs data
- Cleanup antivirus policy and add additional fixes
- Add boolean boinc_enable_execstack
- Add support for couchdb in rabbitmq policy
- Add interface couchdb_search_pid_dirs
- Allow firewalld to read NM state
- Allow systemd running as git_systemd to bind git port
- Fix mozilla_plugin_rw_tmpfs_files() - Split out rlogin ports from inetd
- Treat files labeld as usr_t like bin_t when it comes to transitions
- Allow staff_t to read login config
- Allow ipsec_t to read .google authenticator data
- Allow systemd running as git_systemd to bind git port
- Fix mozilla_plugin_rw_tmpfs_files()
- Call the correct interface - corenet_udp_bind_ktalkd_port()
- Allow all domains that can read gnome_config to read kde config
- Allow sandbox domain to read/write mozilla_plugin_tmpfs_t so pulseaudio will work
- Allow mdadm to getattr any file system
- Allow a confined domain to executes mozilla_exec_t via dbus
- Allow cupsd_lpd_t to bind to the printer port
- Dontaudit attempts to bind to ports < 1024 when nis is turned on
- Allow apache domain to connect to gssproxy socket
- Allow rlogind to bind to the rlogin_port
- Allow telnetd to bind to the telnetd_port
- Allow ktalkd to bind to the ktalkd_port
- Allow cvs to bind to the cvs_port - Cleanup related to init_domain()+inetd_domain fixes
- Use just init_domain instead of init_daemon_domain in inetd_core_service_domain
- svirt domains neeed to create kobject_uevint_sockets
- Lots of new access required for sosreport
- Allow tgtd_t to connect to isns ports
- Allow init_t to transition to all inetd domains:
- openct needs to be able to create netlink_object_uevent_sockets
- Dontaudit leaks into ldconfig_t
- Dontaudit su domains getattr on /dev devices, move su domains to attribute based calls
- Move kernel_stream_connect into all Xwindow using users
- Dontaudit inh� x������������������� X � {%8 ��������(������xb �$ h ���������������� xb wb yb � e::Local) perl(base) perl(constant) perl(lib) perl(re) perl(strict) perl(vars) perl(version) perl(warnings) perl-HTML-Parser procmail rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) systemd-sysv systemd-units systemd-units systemd-units 3.4.6-1.el8 5.6.0 5.8.0 5.8.1 1.23 0.8 3.43 1.04 4.000 0.77 3.43 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 /usr/bin/systemd-sysv-convert --save spamassassin >/dev/null 2>&1 ||:
# Run these because the SysV package being removed won't do them
/sbin/chkconfig --del spamassassin >/dev/null 2>&1 || :
/bin/systemctl try-restart spamassassin.service >/dev/null 2>&1 || : spamassassin 3.3.2-2 a�5�a�@_|\@_|\@^�b�^�@^r
@]�?�\��[��[��[�R@[��@[��@[U�@[U�@[I�[D��[6 @[*A�[ @Z̧@Z}�@Y��Y�@Yy�Y6�@Y ��X���X2@Wʻ@W[�@W8d�V���U�@Uv�@Ut2@Ur�UF
�U@�U ��U ��T$�S��S�v�S��@S��S�"@S�@S�P@S8@S)��S �@R��R�3@R��Q�B@Q� �Q #@P��@P8�@P�@P
��O�O�On@Nm�@Nh�@Ng\�NFg@N(�N%q�M�@M�M��Mj<�M[�@M[�@MR��Lʷ@L�q@L/&@LG�LG�K�r�K�!@K{�@KXA�KO@KK�K8��K8��K/c@K+n�K�@K��J���J�_@J�$�J�$�J��J��@J� �JS8�JQ�@I�2�Is�IFF�H��Hd�@G�P�G�@G��@Gz+@F��F�G�F��@F�;@Fm9@F8}@F p�F p�F�@E�W�E��Eّ@EѨ@EѨ@Eɿ@Eɿ@E��@E��@E�a@E�<�E�<�Ea��DГ�D�{�D��@D� �D���D� �Dv�D`�@D��C�@C�C�-�C�q�C��Cp�@C&�@C�@C�@Bץ@B��@B��Bo~�Bl�Bg��BY@BN�@BN�@BB��BB��B9q@B6�@Aƾ�A��As�@AU]�AR��AQi@AD:@A9�@A1�@A'9@A$�@A�@A�@@�|@@��@� @@��@��@,�@@*@@i�@i�@ �@ �?�@?չ@?t*@?��>��@>ؙ@>��@>� �>�E�>���>z��>pr�>[Z�>V�>P�>K��>K��>J7@>G�@>=@>9�>7�@>+�>�>�@=��=� @=� @=[��=O�@=6��= O�=��<��<|�@<[�<D�< @;���Martin Osvald <mosvald@redhat.com> - 3.4.6-1 Pavel Zhukov <pzhukov@redhat.com> - 3.4.4-4.el4 Pavel Zhukov <pzhukov@redhat.com> - 3.4.4-3 Pavel Zhukov <pzhukov@redhat.com> - 3.4.4-2 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-9 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-8 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-7 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-6 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-5 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-4 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-3 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-2 Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-1 Jaroslav Škarvada <jskarvad@redhat.com> - 3.4.1-26 Jaroslav Škarvada <jskarvad@redhat.com> - 3.4.1-25 Fedora Release Engineering <releng@fedoraproject.org> - 3.4.1-24 Tomas Korbar <tkorbar@redhat.com> - 3.4.1-23 Jitka Plesnikova <jplesnik@redhat.com> - 3.4.1-22 Kevin Fenzi <kevin@scrye.com> - 3.4.1-21 Tomas Korbar <tomas.korb@seznam.cz> - 3.4.1-20 Rafael Santos <rdossant@redhat.com> - 3.4.1-19 Fedora Release Engineering <releng@fedoraproject.org> - 3.4.1-18 Kevin Fenzi <kevin@scrye.com> - 3.4.1-17 Fedora Release Engineering <releng@fedoraproject.org> - 3.4.1-16 Fedora Release Engineering <releng@fedoraproject.org> - 3.4.1-15 Jitka Plesnikova <jplesnik@redhat.com> - 3.4.1-14 Jitka Plesnikova <jplesnik@redhat.com> - 3.4.1-13 Fedora Release Engineering <releng@fedoraproject.org> - 3.4.1-12 Kevin Fenzi <kevin@scrye.com> - 3.4.1-11 Kevin Fenzi <kevin@scrye.com> - 3.4.1-10 Kevin Fenzi <kevin@scrye.com> - 3.4.1-9 Jitka Plesnikova <jplesnik@redhat.com> - 3.4.1-8 Fedora Release Engineering <releng@fedoraproject.org> - 3.4.1-7 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.4.1-6 Jitka Plesnikova <jplesnik@redhat.com> - 3.4.1-5 Kevin Fenzi <kevin@scrye.com> 3.4.1-4 Jitka Plesnikova <jplesnik@redhat.com> - 3.4.1-3 Kevin Fenzi <kevin@scrye.com> 3.4.1-2 Kevin Fenzi <kevin@scrye.com> 3.4.1-1 Kevin Fenzi <kevin@scrye.com> 3.4.0-14 Kevin Fenzi <kevin@scrye.com> 3.4.0-13 Kevin Fenzi <kevin@scrye.com> 3.4.0-12 Jitka Plesnikova <jplesnik@redhat.com> - 3.4.0-11 Kevin Fenzi <kevin@scrye.com> 3.4.0-10 Kevin Fenzi <kevin@scrye.com> - 3.4.0-9 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.4.0-8.el6 Kevin Fenzi <kevin@� x������������� ����� X � �&8 ��������Xb������}! �$ m ���������������� }! |! ~! � d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 17c36cbe503e2a004bdefa50f6da26509bac08d96d8ca187baad3546c7c1d9b2 123c9d19fd215dd314d7295baad3d97651f3ef95e3b5dce93eae387ba772c947 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 9794837e38a99160a4c9f6c393dad192b733bc25411f052276df2c553ec546bb b9bf2231fe1706efa351e8fcf88ec7269a1cf3d8f43c849eecabcffc44ba93df d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d6b03731b01819a28cecd05c58e8533ddbd04d00e22919dc99d81cec790f69d6 6e4ffe1038158b492979143086b1bd5e73c7767079e2e51fd78c7500eceec0ae d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2d4cc8ecb2991e9adde044e7d1a5cfdf197435689fb2a2bcd6b9897c598df7bb e571b9845be4e96c98cf20eab3c50a71f5b2844c47fb57bac5e281312706a590 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e cba4a2d827f1f987f515b58618494cd343cfd623b111e1226bc54df6a07d2ecf 39e402037a8b5040589df61fe8eb81e2af15892298e34a8c2e0c4377e58bdf18 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4e109e39c42ad6bc4aaeebb8d8e6db4dfacb67cfdb163160ffb9585bbd57e859 7d08652a51a731758ad759e0d3dc25d89d811945ac5df649806c4cc399ff9d66 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 9d44cab3bd0da81ca33e08678e9fb4532f6b6055eba252417129b1707fd613b8 9e3b3918d4cde904f0024fd70b4f685eabacec2575166ceada8a91f144d901dd d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ad9df741d490c2988a583b689c9d8b90bc7dc5c74dd2828407e3c00127c9886f 577da83e72c77d87bc5eed3a149795b8bb39dd4b8915b6f1f6b9171e894e3edc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a373c5264312e91e182d108789d0e36a6e0d0c9729553ea8008a30d267a06d74 7aa4fe2f520d0f514259a0b07fa2222535593395863ddb4cc1f54b77ce71eb13 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 08f7442d0a57ed42baa48264c3be98de58196213b5415d5fed58aba62400c132 cd9f292460e3d9222555cead9b4b11850c3c0b067d8111e7649ebfbc87aae7a8 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1f29e3af21372c0e1e4b87f2956ab9b11ef86ac443124eeea5231414b2ce952f 8def31906996feffc0f1c03a67224c592239f1ace6d2b189d87c5e5523263b5b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b25505c83ee67fd585bce2e16f42b596094d42d84ee1249b80d71f886b43917a 48841cbbb2bbda8881833655ae027fe9089a5f3d559ea52225f0ae15141a98c5 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 70ec3c5b1395a773033d005431b35a07ee24a15b2040352e126e8723963b1917 2ac2688965758e72412ae615ecdb5177e2dcf37d26c5dc1215e90c5dcc6d624a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ec5a9abb74725162b7cf29d95c4b3c46153f94486e5a6e0b6741d13a0c0ce38c 674d02abbf21eb33722760392942970f823e2ba7b5cb1debd44ea0161bae635d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 99be5b91ba1faf3f35a91f640e94bc8794bcacb36eda39e48b3bdbf6ab7ebfba 2b3b79a37e4a17f883d5cd249693615942eb8a6cf1dabc29e0394838cb061135 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2a53ac1bc38f402f8845eff5a4bcaa69cea57481146adec6040541b2183fe379 0284c22b771fd8a6e160ce3f72012e55c24c3d6e2a82bb7aab0cfe03bfb2f41b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6d5a590b71aa01b88bfebce57dade73a61da417016e7c49bdba231273e41676c 87512e44f5c0100762ad969592b9dcf1ef32e16855ab03ee47b6235b9bef0fc6 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6e81129c65e69db065a532aeef13cc357a0a05120b5afa6b45c7718e3abf3ab5 dc0bdcd7802c7b5b62eed0a7b4fd2a8cb0a69a6844c243eeb57606ecb23aa00a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b914cf80e70a1fd0ac4cd018475e40eb86553904fc9fda6a06fa48f2165860dc 207bb37edaca9004a46fd77aaba5e1120dd4545e30262ad50b990f1b3c9832a1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 86bfa9a7747dd80ee28c79403167ba10698e2fdf406f252b7cc14250b4060ea6 bbddbc1eb50830b9e1cf17843467090db7eaffb842129a2634fc77567731c3d1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 262f639d6da9f9d2d32a5bb14d3a7cc28f2bde1c77e31a299e3186c81489ee68 7fef028c76fb6198098� x�������������x����� X � �'8 ��������H����_" �$ O ���������������� _" ^" `" � � x������������������ X � 2&8 �G������8d �Q �$ ���������������� �Q �Q �Q � piling a regular expression with a non-word
class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273)
- Fix CVE-2020-10878 (bug #1839276)
- Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120)
- Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526)
- Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920)
- Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922)
- Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924)
- Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl
(bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295)
- Fix an integer wrap when allocating memory for an environment variable
(RT#133204)
- Fix printing a warning about a wide character when matching a regular
expression while ISO-8859-1 locale is in effect
- Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - perl-devel requires redhat-rpm-config because of hardened compiler profiles
(bug #1557667)
- Do not clobber file bytes in :encoding layer (RT#132833)
- Fix line numbers in multi-line s/// (RT#131930)
- Fix parsing extended bracketed character classes (RT#132167)
- Fix a possibly unitialized memory read in the Perl parser (RT#133074)
- Fix an infinite loop in the regular expression compiler (RT#133185) - Correct license tags of perl-libs (bug #1579524) - 5.26.2 bump
- Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
- Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
- Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778) - Rebuild to pick up new build flags from redhat-rpm-config - Escape macros in %changelog - Fix parsing braced subscript after parentheses (RT#8045)
- Fix a heap use after free when moving a stack (RT#131954)
- Call ldconfig scriptlets using a macro - Correct shell bangs in tests - Link XS modules to pthread library to fix linking with -z defs - Add patch to conditionalize a fix for an old and long fixed bug
in libcrypt / glibc (rhbz#1536752) - Rebuild against glibc without nsl library - Remove invalid macro definitions from macros.perl (bug #1532539)
- Fix an overflow in the lexer when reading a new line (RT#131793)
- Fix Term::ReadLine not to create spurious &STDERR files (RT#132008)
- Fix a crash when a match for inversely repeated group fails (RT#132017)
- Fix an overflow when parsing a character range with no preceding character
(RT#132245)
- Fix walking symbol table for ISA in Carp
- Fix handling file names with null bytes in stat and lstat functions
(RT#131895)
- Fix a crash when untying an object witout a stash
- Fix deparsing of transliterations with unprintable characters (RT#132405)
- Fix error reporting on do() on a directory (RT#125774)
- Fix stack manipulation when a lexical subroutine is defined in a do block in
a member of an iteration list (RT#132442)
- Fix setting $! when statting a closed file handle (RT#108288)
- Fix tainting of s/// with overloaded replacement (RT#115266)
- Expand system() arguments before a fork (RT#121105)
- Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746) - Update perl(:MODULE_COMPAT) - 5.26.1 bump (see <http://search.cpan.org/dist/perl-5.26.1/pod/perldelta.pod>
for release notes) - Fix unreliable Time-HiRes tests (CPAN RT#122819)
- Do not require $Config{libs} providers by perl-devel package (bug #1481324) - Fix reporting malformed UTF-8 character (RT#131646)
- Fix File::Glob rt131211.t test random failures
- Fix t/op/hash.t test random failures
- Parse caret variables with subscripts as normal variables inside ${...}
escaping (RT#131664)
- Do not display too many bytes when reporting malformed UTF-8 character
- Fix select called with a repeated magica� x�������������hw���� X � '8 ������������! �$ ` ���������������� �! �! �! � - Allow radiusd to connect to radsec ports.
- ALlow bind to read/write inherited ipsec pipes.
- Allow fowner capability for sssd because of selinux_child handling.
- Allow pki-tomcat relabel pki_tomcat_etc_rw_t.
- Allow cluster domain to dbus chat with systemd-logind.
- Allow tmpreaper_t to manage ntp log content
- Allow openvswitch_t to communicate with sssd.
- Allow isnsd_t to communicate with sssd.
- Allow rwho_t to communicate with sssd.
- Allow pkcs_slotd_t to communicate with sssd.
- Add httpd_var_lib_t label for roundcubemail
- Allow puppetagent_t to transfer firewalld messages over dbus.
- Allow glusterd to have mknod capability. It creates a special file using mknod in a brick.
- Update rules related to glusterd_brick_t.
- Allow glusterd to execute lvm tools in the lvm_t target domain.
- Allow glusterd to execute xfs_growfs in the target domain.
- Allow sysctl to have running under hypervkvp_t domain.
- Allow smartdnotify to use user terminals.
- Allow pcp domains to create root.socket in /var/lip/pcp directroy.
- Allow NM to execute dnssec-trigger-script in dnssec_trigger_t domain.
- Allow rpcbind to create rpcbind.xdr as a temporary file.
- Allow dnssec-trigger connections to the system DBUS. It uses libnm-glib Python bindings.
- Allow hostapd net_admin capability. hostapd needs to able to set an interface flag.
- rsync server can be setup to send mail
- Make "ostree admin upgrade -r" command which suppose to upgrade the system and reboot working again.
- Remove ctdbd_manage_var_files() interface which is not used and is declared for the wrong type.
- Fix samba_load_libgfapi decl in samba.te.
- Fix typo in nagios_run_sudo() boolean.
- remove duplicate declaration from hypervkvp.te.
- Move ctdd_domtrans() from ctdbd to gluster.
- Allow smbd to access /var/lib/ctdb/persistent/secrets.tdb.0.
- Glusterd wants to manage samba config files if they are setup together.
- ALlow NM to do access check on /sys.
- Allow NetworkManager to keep RFCOMM connection for Bluetooth DUN open . Based on fixes from Lubomir Rintel.
- Allow NetworkManager nm-dispacher to read links.
- Allow gluster hooks scripts to transition to ctdbd_t.
- Allow glusterd to read/write samba config files.
- Update mysqld rules related to mysqld log files.
- Add fixes for hypervkvp realed to ifdown/ifup scripts.
- Update netlink_route_socket for ptp4l.
- Allow glusterd to connect to /var/run/dbus/system_bus_socket.
- ALlow glusterd to have sys_ptrace capability. Needed by gluster+samba configuration.
- Add new boolean samba_load_libgfapi to allow smbd load libgfapi from gluster. Allow smbd to read gluster config files by default.
- Allow gluster to transition to smbd. It is needed for smbd+gluster configuration.
- Allow glusterd to read /dev/random.
- Update nagios_run_sudo boolean to allow run chkpwd.
- Allow docker and container tools to control caps, don't rely on SELinux for now. Since there is no easy way for SELinux modification of policy as far as caps. docker run --cap-add will work now
- Allow sosreport to dbus chat with NM.
- Allow anaconda to run iscsid in own domain. BZ(1220948).
- Allow rhsmcetd to use the ypbind service to access NIS services.
- Add nagios_run_pnp4nagios and nagios_run_sudo booleans to allow run sudo from NRPE utils scripts and allow run nagios in conjunction with PNP4Nagios.
- Allow ctdb to create rawip socket.
- Allow ctdbd to bind smbd port.
- Make ctdbd as userdom_home_reader.
- Dontaudit chrome-sandbox write access its parent process information. BZ(1220958)
- Allow net_admin cap for dnssec-trigger to make wifi reconnect working.
- Add support for /var/lib/ipsilon dir and label it as httpd_var_lib_t. BZ(1186046)
- Allow gluster rpm scripletto create glusterd socket with correct labeling. This is a workaround until we get fix in glusterd.
- Add glusterd_filetrans_named_pid() interface.
- Allow antivirus_t to read system state info.
- Dontaudit use console for chrome-sandbox.
- Add support for ~/.local/share/libvirt/images and for ~/.local/share/libvirt/boot.
- Clamd needs to have f� x��������������f���� X � 1'8 ����� r���" �$ ���������������� " " " � . But probably we will need to switch for the directory.
- Label /etc/yum.repos.d as system_conf_t
- Use sysnet_filetrans_named_content in udev.te instead of generic transition for net_conf_t
- Allow dac_override for sysadm_screen_t
- Allow init_t to read ipsec_conf_t as we had it for initrc_t. Needed by ipsec unit file.
- Allow netlabel-config to read meminfo
- Add interface to allow docker to mounton file_t
- Add new interface to exec unlabeled files
- Allow lvm to use docker semaphores
- Setup transitons for .xsessions-errors.old
- Change labels of files in /var/lib/*/.ssh to transition properly
- Allow staff_t and user_t to look at logs using journalctl
- pluto wants to manage own log file
- Allow pluto running as ipsec_t to create pluto.log
- Fix alias decl in corenetwork.te.in
- Add support for fuse.glusterfs
- Allow dmidecode to read/write /run/lock/subsys/rhsmcertd
- Allow rhsmcertd to manage redhat.repo which is now labeled as system.conf. Allow rhsmcertd to manage all log files.
- Additional access for docker
- Added more rules to sblim policy
- Fix kdumpgui_run_bootloader boolean
- Allow dspam to connect to lmtp port
- Included sfcbd service into sblim policy
- rhsmcertd wants to manaage /etc/pki/consumer dir
- Add kdumpgui_run_bootloader boolean
- Add support for /var/cache/watchdog
- Remove virt_domain attribute for virt_qemu_ga_unconfined_t
- Fixes for handling libvirt containes
- Dontaudit attempts by mysql_safe to write content into /
- Dontaudit attempts by system_mail to modify network config
- Allow dspam to bind to lmtp ports
- Add new policy to allow staff_t and user_t to look at logs using journalctl
- Allow apache cgi scripts to list sysfs
- Dontaudit attempts to write/delete user_tmp_t files
- Allow all antivirus domains to manage also own log dirs
- Allow pegasus_openlmi_services_t to stream connect to sssd_t - Add missing permission checks for nscd - Fix alias decl in corenetwork.te.in
- Add support for fuse.glusterfs
- Add file transition rules for content created by f5link
- Rename quantum_port information to neutron
- Allow all antivirus domains to manage also own log dirs
- Rename quantum_port information to neutron
- Allow pegasus_openlmi_services_t to stream connect to sssd_t - Allow sysadm_t to read login information
- Allow systemd_tmpfiles to setattr on var_log_t directories
- Udpdate Makefile to include systemd_contexts
- Add systemd_contexts
- Add fs_exec_hugetlbfs_files() interface
- Add daemons_enable_cluster_mode boolean
- Fix rsync_filetrans_named_content()
- Add rhcs_read_cluster_pid_files() interface
- Update rhcs.if with additional interfaces from RHEL6
- Fix rhcs_domain_template() to not create run dirs with cluster_var_run_t
- Allow glusterd_t to mounton glusterd_tmp_t
- Allow glusterd to unmout al filesystems
- Allow xenstored to read virt config
- Add label for swift_server.lock and make add filetrans_named_content to make sure content gets created with the correct label
- Allow mozilla_plugin_t to mmap hugepages as an executable - Add back userdom_security_admin_template() interface and use it for sysadm_t if sysadm_secadm.pp - Allow sshd_t to read openshift content, needs backport to RHEL6.5
- Label /usr/lib64/sasl2/libsasldb.so.3.0.0 as textrel_shlib_t
- Make sur kdump lock is created with correct label if kdumpctl is executed
- gnome interface calls should always be made within an optional_block
- Allow syslogd_t to connect to the syslog_tls port
- Add labeling for /var/run/charon.ctl socket
- Add kdump_filetrans_named_content()
- Allo setpgid for fenced_t
- Allow setpgid and r/w cluster tmpfs for fenced_t
- gnome calls should always be within optional blocks
- wicd.pid should be labeled as networkmanager_var_run_t
- Allow sys_resource for lldpad - Add rtas policy - Allow mailserver_domains to manage and transition to mailman data
- Dontaudit attempts by mozilla plugin to relabel content, caused by using mv and cp commands
- Allow mailserver_domains to manage and transition to mailman data
- Allow svirt_domains to read sysctl_net_t
- Allow thum� x�������������XV���� X � �&8 ��������0�������! �$ 9 ���������������� �! �! �! � com> 3.10.0-65 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-64 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-63 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-59 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-58 Dan Walsh <dwalsh@redhat.com> 3.10.0-57 Dan Walsh <dwalsh@redhat.com> 3.10.0-56 Dan Walsh <dwalsh@redhat.com> 3.10.0-55.2 Dan Walsh <dwalsh@redhat.com> 3.10.0-55.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-55 Dan Walsh <dwalsh@redhat.com> 3.10.0-54.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-54 Dan Walsh <dwalsh@redhat.com> 3.10.0-53.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-53 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-52 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-51 Dan Walsh <dwalsh@redhat.com> 3.10.0-50.2 Dan Walsh <dwalsh@redhat.com> 3.10.0-50.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-50 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-49 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-48 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-47 Dan Walsh <dwalsh@redhat.com> 3.10.0-46.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-46 Dan Walsh <dwalsh@redhat.com> 3.10.0-45.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-45 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-43 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-42 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-41 Dan Walsh <dwalsh@redhat.com> 3.10.0-40.2 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-40 Dan Walsh <dwalsh@redhat.com> 3.10.0-39.3 Dan Walsh <dwalsh@redhat.com> 3.10.0-39.2 Dan Walsh <dwalsh@redhat.com> 3.10.0-39.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-39 Dan Walsh <dwalsh@redhat.com> 3.10.0-38.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-38 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-37 Dan Walsh <dwalsh@redhat.com> 3.10.0-36.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-36 Dan Walsh <dwalsh@redhat.com> 3.10.0-35 Dan Walsh <dwalsh@redhat.com> 3.10.0-34.7 Dan Walsh <dwalsh@redhat.com> 3.10.0-34.6 Dan Walsh <dwalsh@redhat.com> 3.10.0-34.4 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34.3 Dan Walsh <dwalsh@redhat.com> 3.10.0-34.2 Dan Walsh <dwalsh@redhat.com> 3.10.0-34.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-33 Dan Walsh <dwalsh@redhat.com> 3.10.0-31.1 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-31 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-29 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-28 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-27 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-26 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-25 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-24 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-23 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-22 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-21 Dan Walsh <dwalsh@redhat.com> 3.10.0-20 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-19 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-18 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-17 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-16 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-14 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-13 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-12 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-11 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-10 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-9 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-8 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-7 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-6 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-5 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-4 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-3 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-2 Miroslav Grepl <mgrepl@redhat.com> 3.10.0-1 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-30 Dan Walsh <dwalsh@redhat.com> 3.9.16-29.1 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-29 Dan Walsh <dwalsh@redhat.com> 3.9.16-28.1 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-27 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-26 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-25 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-24 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-23 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-22 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-21 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-20 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-19 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-18 Miroslav� x��������������E���� X �
'8 ��������X� �! �$ q ���������������� �! �! �! � ame of capability2 secure_firmware->compromise_kernel"" BZ(1351624) This reverts commit 3e0e7e70de481589440f3f79cccff08d6e62f644.
- Revert "Fix name of capability2 secure_firmware->compromise_kernel" BZ(1351624) This reverts commit 7a0348a2d167a72c8ab8974a1b0fc33407f72c48.
- Revert "Allow xserver to compromise_kernel access"BZ(1351624)
- Revert "Allow anyone who can load a kernel module to compromise_kernel"BZ(1351624)
- Revert "add ptrace_child access to process" (BZ1351624)
- Add user namespace capability object classes.
- Allow udev to manage systemd-hwdb files
- Add interface systemd_hwdb_manage_config()
- Fix paths to infiniband devices. This allows use more then two infiniband interfaces.
- corecmd: Remove fcontext for /etc/sysconfig/libvirtd
- iptables: add fcontext for nftables - Fix typo in brltty policy
- Add new SELinux module sbd
- Allow pcp dmcache metrics collection
- Allow pkcs_slotd_t to create dir in /var/lock Add label pkcs_slotd_log_t
- Allow openvpn to create sock files labeled as openvpn_var_run_t
- Allow hypervkvp daemon to getattr on all filesystem types.
- Allow firewalld to create net_conf_t files
- Allow mock to use lvm
- Allow mirromanager creating log files in /tmp
- Allow vmtools_t to transition to rpm_script domain
- Allow nsd daemon to manage nsd_conf_t dirs and files
- Allow cluster to create dirs in /var/run labeled as cluster_var_run_t
- Allow sssd read also sssd_conf_t dirs
- Allow opensm daemon to rw infiniband_mgmt_device_t
- Allow krb5kdc_t to communicate with sssd
- Allow prosody to bind on prosody ports
- Add dac_override caps for fail2ban-client Resolves: rhbz#1316678
- dontaudit read access for svirt_t on the file /var/db/nscd/group Resolves: rhbz#1301637
- Allow inetd child process to communicate via dbus with systemd-logind Resolves: rhbz#1333726
- Add label for brltty log file Resolves: rhbz#1328818
- Allow snort_t to communicate with sssd Resolves: rhbz#1284908
- Add interface lttng_sessiond_tmpfs_t()
- Dontaudit su_role_template interface to getattr /proc/kcore Dontaudit su_role_template interface to getattr /dev/initctl
- Add interface lvm_getattr_exec_files()
- Make label for new infiniband_mgmt deivices
- Add prosody ports Resolves: rhbz#1304664 - Label /var/lib/softhsm as named_cache_t. Allow named_t to manage named_cache_t dirs.
- Allow glusterd daemon to get systemd status
- Merge branch 'rawhide-contrib' of github.com:fedora-selinux/selinux-policy into rawhide-contrib
- Merge pull request #135 from rhatdan/rawip_socket
- Allow logrotate dbus-chat with system_logind daemon
- Allow pcp_pmlogger to read kernel network state Allow pcp_pmcd to read cron pid files
- Add interface cron_read_pid_files()
- Allow pcp_pmlogger to create unix dgram sockets
- Add interface dirsrv_run()
- Remove non-existing jabberd_spool_t() interface and add new jabbertd_var_spool_t.
- Remove non-existing interface salk_resetd_systemctl() and replace it with sanlock_systemctl_sanlk_resetd()
- Create label for openhpid log files.
- Container processes need to be able to listen on rawip sockets
- Label /var/lib/ganglia as httpd_var_lib_t
- Allow firewalld_t to create entries in net_conf_t dirs.
- Allow journalctl to read syslogd_var_run_t files. This allows to staff_t and sysadm_t to read journals
- Label /etc/dhcp/scripts dir as bin_t
- Allow sysadm_role to run journalctl_t domain. This allows sysadm user to read journals. - Allow firewalld_t to create entries in net_conf_t dirs.
- Allow journalctl to read syslogd_var_run_t files. This allows to staff_t and sysadm_t to read journals
- Allow rhsmcertd connect to port tcp 9090
- Label for /bin/mail(x) was removed but /usr/bin/mail(x) not. This path is also needed to remove.
- Label /usr/libexec/mimedefang-wrapper as spamd_exec_t.
- Add new boolean spamd_update_can_network.
- Add proper label for /var/log/proftpd.log
- Allow rhsmcertd connect to tcp netport_port_t
- Fix SELinux context for /usr/share/mirrormanager/server/mirrormanager to Label all binaries under dir as mirrormanager_exec_t.
- Allow prosody to bind to fac_re� x�������������H5���� X � f'8 �k E���:" �$ * ���������������� :" 9" ;" � _t to qemu by default
- Fixes for gpg - Update to upstream - Fixes for staff_t - Add policy for kerneloops
- Add policy for gnomeclock - Fixes for libvirt - Fixes for nsplugin - More fixes for qemu - Additional ports for vnc and allow qemu and libvirt to search all directories - Update to upstream
- Add libvirt policy
- add qemu policy - Allow fail2ban to create a socket in /var/run - Allow allow_httpd_mod_auth_pam to work - Add audisp policy and prelude - Allow all user roles to executae samba net command - Allow usertypes to read/write noxattr file systems - Fix nsplugin to allow flashplugin to work in enforcing mode - Allow pam_selinux_permit to kill all processes - Allow ptrace or user processes by users of same type
- Add boolean for transition to nsplugin - Allow nsplugin sys_nice, getsched, setsched - Allow login programs to talk dbus to oddjob - Add procmail_log support
- Lots of fixes for munin - Allow setroubleshoot to read policy config and send audit messages - Allow users to execute all files in homedir, if boolean set
- Allow mount to read samba config - Fixes for xguest to run java plugin - dontaudit pam_t and dbusd writing to user_home_t - Update gpg to allow reading of inotify - Change user and staff roles to work correctly with varied perms - Fix munin log,
- Eliminate duplicate mozilla file context
- fix wpa_supplicant spec - Fix role transition from unconfined_r to system_r when running rpm
- Allow unconfined_domains to communicate with user dbus instances - Fixes for xguest - Let all uncofined domains communicate with dbus unconfined - Run rpm in system_r - Zero out customizable types - Fix definiton of admin_home_t - Fix munin file context - Allow cron to run unconfined apps - Modify default login to unconfined_u - Dontaudit dbus user client search of /root - Update to upstream - Fixes for polkit
- Allow xserver to ptrace - Add polkit policy
- Symplify userdom context, remove automatic per_role changes - Update to upstream
- Allow httpd_sys_script_t to search users homedirs - Allow rpm_script to transition to unconfined_execmem_t - Remove user based home directory separation - Remove user specific crond_t - Merge with upstream
- Allow xsever to read hwdata_t
- Allow login programs to setkeycreate - Update to upstream - Update to upstream - Allow XServer to read /proc/self/cmdline
- Fix unconfined cron jobs
- Allow fetchmail to transition to procmail
- Fixes for hald_mac
- Allow system_mail to transition to exim
- Allow tftpd to upload files
- Allow xdm to manage unconfined_tmp
- Allow udef to read alsa config
- Fix xguest to be able to connect to sound port - Fixes for hald_mac
- Treat unconfined_home_dir_t as a home dir
- dontaudit rhgb writes to fonts and root - Fix dnsmasq
- Allow rshd full login privs - Allow rshd to connect to ports > 1023 - Fix vpn to bind to port 4500
- Allow ssh to create shm
- Add Kismet policy - Allow rpm to chat with networkmanager - Fixes for ipsec and exim mail
- Change default to unconfined user - Pass the UNK_PERMS param to makefile
- Fix gdm location - Make alsa work - Fixes for consolekit and startx sessions - Dontaudit consoletype talking to unconfined_t - Remove homedir_template - Check asound.state - Fix exim policy - Allow tmpreadper to read man_t
- Allow racoon to bind to all nodes
- Fixes for finger print reader - Allow xdm to talk to input device (fingerprint reader)
- Allow octave to run as java - Allow login programs to set ioctl on /proc - Allow nsswitch apps to read samba_var_t - Fix maxima - Eliminate rpm_t:fifo_file avcs
- Fix dbus path for helper app - Fix service start stop terminal avc's - Allow also to search var_lib
- New context for dbus launcher - Allow cupsd_config_t to read/write usb_device_t
- Support for finger print reader,
- Many fixes for clvmd
- dbus starting networkmanager - Fix java and mono to run in xguest account - Fix to add xguest account when inititial install
- Allow mono, java, wine to run in userdomains - Allow xserver to search devpts_t
- Dontaudit ldconfig output to homedir - Remove hplip_etc_t chan� x��������������$���� X � �'8 ����� �������X" �$ H ���������������� X" W" Y" � /var/lib/selinux/targeted/active/modules/100/mcelog/ /var/lib/selinux/targeted/active/modules/100/mediawiki/ /var/lib/selinux/targeted/active/modules/100/memcached/ /var/lib/selinux/targeted/active/modules/100/milter/ /var/lib/selinux/targeted/active/modules/100/minidlna/ /var/lib/selinux/targeted/active/modules/100/minissdpd/ /var/lib/selinux/targeted/active/modules/100/mip6d/ /var/lib/selinux/targeted/active/modules/100/mirrormanager/ /var/lib/selinux/targeted/active/modules/100/miscfiles/ /var/lib/selinux/targeted/active/modules/100/mock/ /var/lib/selinux/targeted/active/modules/100/modemmanager/ /var/lib/selinux/targeted/active/modules/100/modutils/ /var/lib/selinux/targeted/active/modules/100/mojomojo/ /var/lib/selinux/targeted/active/modules/100/mon_statd/ /var/lib/selinux/targeted/active/modules/100/mongodb/ /var/lib/selinux/targeted/active/modules/100/motion/ /var/lib/selinux/targeted/active/modules/100/mount/ /var/lib/selinux/targeted/active/modules/100/mozilla/ /var/lib/selinux/targeted/active/modules/100/mpd/ /var/lib/selinux/targeted/active/modules/100/mplayer/ /var/lib/selinux/targeted/active/modules/100/mrtg/ /var/lib/selinux/targeted/active/modules/100/mta/ /var/lib/selinux/targeted/active/modules/100/munin/ /var/lib/selinux/targeted/active/modules/100/mysql/ /var/lib/selinux/targeted/active/modules/100/mythtv/ /var/lib/selinux/targeted/active/modules/100/naemon/ /var/lib/selinux/targeted/active/modules/100/nagios/ /var/lib/selinux/targeted/active/modules/100/namespace/ /var/lib/selinux/targeted/active/modules/100/ncftool/ /var/lib/selinux/targeted/active/modules/100/netlabel/ /var/lib/selinux/targeted/active/modules/100/netutils/ /var/lib/selinux/targeted/active/modules/100/networkmanager/ /var/lib/selinux/targeted/active/modules/100/ninfod/ /var/lib/selinux/targeted/active/modules/100/nis/ /var/lib/selinux/targeted/active/modules/100/nova/ /var/lib/selinux/targeted/active/modules/100/nscd/ /var/lib/selinux/targeted/active/modules/100/nsd/ /var/lib/selinux/targeted/active/modules/100/nslcd/ /var/lib/selinux/targeted/active/modules/100/ntop/ /var/lib/selinux/targeted/active/modules/100/ntp/ /var/lib/selinux/targeted/active/modules/100/numad/ /var/lib/selinux/targeted/active/modules/100/nut/ /var/lib/selinux/targeted/active/modules/100/nx/ /var/lib/selinux/targeted/active/modules/100/obex/ /var/lib/selinux/targeted/active/modules/100/oddjob/ /var/lib/selinux/targeted/active/modules/100/opafm/ /var/lib/selinux/targeted/active/modules/100/openct/ /var/lib/selinux/targeted/active/modules/100/opendnssec/ /var/lib/selinux/targeted/active/modules/100/openfortivpn/ /var/lib/selinux/targeted/active/modules/100/openhpid/ /var/lib/selinux/targeted/active/modules/100/openshift-origin/ /var/lib/selinux/targeted/active/modules/100/openshift/ /var/lib/selinux/targeted/active/modules/100/opensm/ /var/lib/selinux/targeted/active/modules/100/openvpn/ /var/lib/selinux/targeted/active/modules/100/openvswitch/ /var/lib/selinux/targeted/active/modules/100/openwsman/ /var/lib/selinux/targeted/active/modules/100/oracleasm/ /var/lib/selinux/targeted/active/modules/100/osad/ /var/lib/selinux/targeted/active/modules/100/pads/ /var/lib/selinux/targeted/active/modules/100/passenger/ /var/lib/selinux/targeted/active/modules/100/pcmcia/ /var/lib/selinux/targeted/active/modules/100/pcp/ /var/lib/selinux/targeted/active/modules/100/pcscd/ /var/lib/selinux/targeted/active/modules/100/pdns/ /var/lib/selinux/targeted/active/modules/100/pegasus/ /var/lib/selinux/targeted/active/modules/100/permissivedomains/ /var/lib/selinux/targeted/active/modules/100/pesign/ /var/lib/selinux/targeted/active/modules/100/pingd/ /var/lib/selinux/targeted/active/modules/100/piranha/ /var/lib/selinux/targeted/active/modules/100/pkcs/ /var/lib/selinux/targeted/active/modules/100/pkcs11proxyd/ /var/lib/selinux/targeted/active/modules/100/pki/ /var/lib/selinux/targeted/active/modules/100/plymouthd/ /var/lib/selinux/targeted/active/modules/100/podsleuth/ /var/lib/selinux/targeted/active/modules/100/policykit/ /var/lib/selinux/targeted/acti� x�������������8���� X � t'8 `������� .���H" �$ X ���������������� H" G" I" � e f f g g h h i i j j k k l l m m n n o o p p q q r r s s t t u u v v w w x x y y z z { { | | } } ~ ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
� � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
� � �
� � � � � � � � � � � � � � � � � � � � ! ! ! � " " " � # # # � $ $ $ � % % % � & & & � ' ' ' � ( ( ( � ) ) ) � * * * � + + + � , , , � - - - � . . . � / / / � 0 0 0 � 1 1 1 � 2 2 2 � 3 3 3 � 4 4 4 � 5 5 5 � 6 6 6 � 7 7 7 � 8 8 8 � 9 9 9 � : : : � ; ; ; � < < < � = = = � > > > � ? ? ? � @ @ @ � A A A � B B B � C C C � D D D � E E E � F F F � G G G � H H H � I I I � J J J � K K K � L L L � M M M � N N N � O O O � P P P � Q Q Q � R R R � S S S � T T T � U U U � V V V � W W W � X X X � Y Y Y � Z Z Z � [ [ [ � \ \ \ � ] ] ] � ^ ^ ^ � _ _ _ � ` ` ` � a a a � b b b � c c c � d d d � e e e � f f f � g g g � h h h � i i i � j j j � k k k � l l l � m m m � n n n � o o o � p p p � q q q � r r r � s s s � t t t � � x������������������ X � '8 ���������A�������! �$ t ���������������� �! �! �! � Allow modemmanager to talk to logind
- Dontaudit tor daemon needs net_admin capability. rhbz#1311788
- Allow GDM write to event devices. This rule is needed for GDM, because other display managers runs the X server as root, GDM instead runs the X server as the unprivileged user, within the user session. rhbz#1232042
- Xorg now writes content in users homedir. - rename several contrib modules according to their filenames
- Add interface gnome_filetrans_cert_home_content()
- By default container domains should not be allowed to create devices
- Allow unconfined_t to create ~/.local/share/networkmanagement/certificates/ as home_cert_t instead of data_home_t.
- Allow systemd_resolved_t to read /etc/passwd file. Allow systemd_resolved_t to write to kmsg_device_t when 'systemd.log_target=kmsg' option is used
- Allow systemd gpt generator to read removable devices. BZ(1323458)
- Allow systemd_gpt_generator_t sys_rawio capability. This access is needed to allow systemd gpt generator various device commands BZ(1323454) - Label /usr/libexec/rpm-ostreed as rpm_exec_t. BZ(1309075)
- /bin/mailx is labeled sendmail_exec_t, and enters the sendmail_t domain on execution. If /usr/sbin/sendmail does not have its own domain to transition to, and is not one of several products whose behavior is allowed by the sendmail_t policy, execution will fail. In this case we need to label /bin/mailx as bin_t. BZ(1323224)
- Label all run tgtd files, not just socket files.
- Allow prosody to stream connect to sasl. This will allow using cyrus authentication in prosody.
- Allow prosody to listen on port 5000 for mod_proxy65. BZ(1322815)
- Allow targetd to read/write to /dev/mapper/control device. BZ(1241415)
- Label /etc/selinux/(minimum|mls|targeted)/active/ as semanage_store_t.
- Allow systemd_resolved to read systemd_networkd run files. BZ(1322921)
- New cgroup2 file system in Rawhide - Allow dovecot_auth_t domain to manage also dovecot_var_run_t fifo files. BZ(1320415)
- Allow colord to read /etc/udev/hwdb.bin. rhzb#1316514
- sandboxX.te: Allow sandbox domain to have entrypoint access only for executables and mountpoints.
- Allow sandbox domain to have entrypoint access only for executables and mountpoints.
- Allow bitlee to create bitlee_var_t dirs.
- Allow CIM provider to read sssd public files.
- Fix some broken interfaces in distro policy.
- Allow power button to shutdown the laptop.
- Allow lsm plugins to create named fixed disks. rhbz#1238066
- Allow hyperv domains to rw hyperv devices. rhbz#1241636
- Label /var/www/html(/.*)?/wp_backups(/.*)? as httpd_sys_rw_content_t.
- Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
- Allow rsync_export_all_ro boolean to read also non_auth_dirs/files/symlinks.
- Allow pmdaapache labeled as pcp_pmcd_t access to port 80 for apache diagnostics
- Label nagios scripts as httpd_sys_script_exec_t.
- Allow nsd_t to bind on nsf_control tcp port. Allow nsd_crond_t to read nsd pid.
- Fix couple of cosmetic thing in new virtlogd_t policy. rhbz #1311576
- Merge pull request #104 from berrange/rawhide-contrib-virtlogd
- Label /var/run/ecblp0 as cupsd_var_run_t due to this fifo_file is used by epson drivers. rhbz#1310336
- Dontaudit logrotate to setrlimit itself. rhbz#1309604
- Add filename transition that /etc/princap will be created with cupsd_rw_etc_t label in cups_filetrans_named_content() interface.
- Allow pcp_pmie and pcp_pmlogger to read all domains state.
- Allow systemd-gpt-generator to create and manage systemd gpt generator unit files. BZ(1319446)
- Merge pull request #115 from rhatdan/nvidea
- Label all nvidia binaries as xserver_exec_t
- Add new systemd_hwdb_read_config() interface. rhbz#1316514
- Add back corecmd_read_all_executables() interface.
- Call files_type() instead of file_type() for unlabeled_t.
- Add files_entrypoint_all_mountpoint() interface.
- Make unlabeled only as a file_type type. It is a type for fallback if there is an issue with labeling.
- Add corecmd_entrypoint_all_executables() interface.
- Create hyperv* devices a� x�������������(������ X � '8 �%��� ����! �$ b ���������������� �! �! �! � as abrt_etc_t. BZ(1199658)
- Allow xdm_t to read colord_var_lib_t files. BZ(1201985) - Allow mysqld_t to use pam. BZ(1196104)
- Added label mysqld_etc_t for /etc/my.cnf.d/ dir. BZ(1203989)
- Allow fetchmail to read mail_spool_t. BZ(1200552)
- Dontaudit blueman_t write to all mountpoints. BZ(1198272)
- Allow all domains some process flags.
- Merge branch 'rawhide-base' of github.com:selinux-policy/selinux-policy into rawhide-base
- Turn on overlayfs labeling for testin, we need this backported to F22 and Rawhide. Eventually will need this in RHEL - build without docker - docker watches for content in the /etc directory
- Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib
- Fix abrt_filetrans_named_content() to create /var/tmp/abrt with the correct abrt_var_cache_t labeling.
- Allow docker to communicate with openvswitch
- Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib
- Allow docker to relablefrom/to sockets and docker_log_t
- Allow journald to set loginuid. BZ(1190498)
- Add cap. sys_admin for passwd_t. BZ(1185191)
- Allow abrt-hook-ccpp running as kernel_t to allow create /var/tmp/abrt with correct labeling. - Allow spamc read spamd_etc_t files. BZ(1199339).
- Allow collectd to write to smnpd_var_lib_t dirs. BZ(1199278)
- Allow abrt_watch_log_t read passwd file. BZ(1197396)
- Allow abrt_watch_log_t to nsswitch_domain. BZ(1199659)
- Allow cups to read colord_var_lib_t files. BZ(1199765) - Turn on rolekit in F23 - Allow glusterd_t exec glusterd_var_lib_t files. BZ(1198406)
- Add gluster_exec_lib interface.
- Allow l2tpd to manage NetworkManager pid files
- Allow firewalld_t relabelfrom firewalld_rw_etc_t. BZ(1195327)
- Allow cyrus bind tcp berknet port. BZ(1198347)
- Add nsswitch domain for more serviecs.
- Allow abrt_dump_oops_t read /etc/passwd file. BZ(1197190)
- Remove ftpd_use_passive_mode boolean. It does not make sense due to ephemeral port handling.
- Make munin yum plugin as unconfined by default.
- Allow bitlbee connections to the system DBUS.
- Allow system apache scripts to send log messages.
- Allow denyhosts execute iptables. BZ(1197371)
- Allow brltty rw event device. BZ(1190349)
- Allow cupsd config to execute ldconfig. BZ(1196608)
- xdm_t now needs to manage user ttys
- Allow ping_t read urand. BZ(1181831)
- Add support for tcp/2005 port.
- Allow setfiles domain to access files with admin_home_t. semanage -i /root/testfile.
- In F23 we are running xserver as the user, need this to allow confined users to us X - Fix source filepath for moving html files. - Xserver needs to be transitioned to from confined users
- Added logging_syslogd_pid_filetrans
- xdm_t now talks to hostnamed
- Label new strongswan binary swanctl and new unit file strongswan-swanctl.service. BZ(1193102)
- Additional fix for labeleling /dev/log correctly.
- cups chats with network manager
- Allow parent domains to read/write fifo files in mozilla plugin
- Allow spc_t to transition to svirt domains
- Cleanup spc_t
- docker needs more control over spc_t
- pcp domains are executed out of cron - Allow audisp to connect to system DBUS for service.
- Label /dev/log correctly.
- Add interface init_read_var_lib_files().
- Allow abrt_dump_oops_t read /var/lib/systemd/, Allow abrt_dump_oops_t cap. chown,fsetid,fowner, BZ(1187017) - Label /usr/libexec/postgresql-ctl as postgresql_exec_t. BZ(1191004)
- Remove automatcically running filetrans_named_content form sysnet_manage_config
- Allow syslogd/journal to read netlink audit socket
- Allow brltty ioctl on usb_device_t. BZ(1190349)
- Make sure NetworkManager configures resolv.conf correctly - Allow cockpit_session_t to create tmp files
- apmd needs sys_resource when shutting down the machine
- Fix path label to resolv.conf under NetworkManager - Allow search all pid dirs when managing net_conf_t files. - Fix labels, improve sysnet_manage_config interface.
- Label /var/run/NetworkManager/resolv.conf.tmp as net_conf_t.
- Dontaudit network connections related to thumb_t. BZ(1187981)� x�������������������� X � h'8 �������(����<" �$ , ���������������� <" ;" =" � Remove setsebool policy - Fix handling of unlabled_t packets - More of my patches from upstream - Update to latest from upstream
- Add fail2ban policy - Update to remove security_t:filesystem getattr problems - Policy for consolekit - Update to latest from upstream - Revert Nemiver change
- Set sudo as a corecmd so prelink will work, remove sudoedit mapping, since this will not work, it does not transition.
- Allow samba to execute useradd - Upgrade to the latest from upstream - Add sepolgen support
- Add bugzilla policy - Fix file context for nemiver - Remove include sym link - Allow mozilla, evolution and thunderbird to read dev_random.
Resolves: #227002
- Allow spamd to connect to smtp port
Resolves: #227184
- Fixes to make ypxfr work
Resolves: #227237 - Fix ssh_agent to be marked as an executable
- Allow Hal to rw sound device - Fix spamassisin so crond can update spam files
- Fixes to allow kpasswd to work
- Fixes for bluetooth - Remove some targeted diffs in file context file - Fix squid cachemgr labeling - Add ability to generate webadm_t policy
- Lots of new interfaces for httpd
- Allow sshd to login as unconfined_t - Continue fixing, additional user domains - Begin adding user confinement to targeted policy - Fixes for prelink, ktalkd, netlabel - Allow prelink when run from rpm to create tmp files
Resolves: #221865
- Remove file_context for exportfs
Resolves: #221181
- Allow spamassassin to create ~/.spamassissin
Resolves: #203290
- Allow ssh access to the krb tickets
- Allow sshd to change passwd
- Stop newrole -l from working on non securetty
Resolves: #200110
- Fixes to run prelink in MLS machine
Resolves: #221233
- Allow spamassassin to read var_lib_t dir
Resolves: #219234 - fix mplayer to work under strict policy
- Allow iptables to use nscd
Resolves: #220794 - Add gconf policy and make it work with strict - Many fixes for strict policy and by extension mls. - Fix to allow ftp to bind to ports > 1024
Resolves: #219349 - Allow semanage to exec it self. Label genhomedircon as semanage_exec_t
Resolves: #219421
- Allow sysadm_lpr_t to manage other print spool jobs
Resolves: #220080 - allow automount to setgid
Resolves: #219999 - Allow cron to polyinstatiate
- Fix creation of boot flags
Resolves: #207433 - Fixes for irqbalance
Resolves: #219606 - Fix vixie-cron to work on mls
Resolves: #207433 Resolves: #218978 - Allow initrc to create files in /var directories
Resolves: #219227 - More fixes for MLS
Resolves: #181566 - More Fixes polyinstatiation
Resolves: #216184 - More Fixes polyinstatiation
- Fix handling of keyrings
Resolves: #216184 - Fix polyinstatiation
- Fix pcscd handling of terminal
Resolves: #218149
Resolves: #218350 - More fixes for quota
Resolves: #212957 - ncsd needs to use avahi sockets
Resolves: #217640
Resolves: #218014 - Allow login programs to polyinstatiate homedirs
Resolves: #216184
- Allow quotacheck to create database files
Resolves: #212957 - Dontaudit appending hal_var_lib files
Resolves: #217452
Resolves: #217571
Resolves: #217611
Resolves: #217640
Resolves: #217725 - Fix context for helix players file_context #216942 - Fix load_policy to be able to mls_write_down so it can talk to the terminal - Fixes for hwclock, clamav, ftp - Move to upstream version which accepted my patches - Fixes for nvidia driver - Allow semanage to signal mcstrans - Update to upstream - Allow modstorage to edit /etc/fstab file - Fix for qemu, /dev/ - Fix path to realplayer.bin - Allow xen to connect to xen port - Allow cups to search samba_etc_t directory
- Allow xend_t to list auto_mountpoints - Allow xen to search automount - Fix spec of jre files - Fix unconfined access to shadow file - Allow xend to create files in xen_image_t directories - Fixes for /var/lib/hal - Remove ability for sysadm_t to look at audit.log - Fix rpc_port_types
- Add aide policy for mls - Merge with upstream - Lots of fixes for ricci - Allow xen to read/write fixed devices with a boolean
- Allow apache to search /var/log - Fix policygentool specfile problem.
- Allow apache to send signals to it's logging� x������������������� X � �'8 ((������H������Q �$ C ���������������� �Q �Q �Q � cb/ /usr/lib/.build-id/ce/ /usr/lib/.build-id/cf/ /usr/lib/.build-id/e1/ /usr/lib/.build-id/e4/ /usr/lib/.build-id/ec/ /usr/lib/.build-id/f4/ /usr/lib/.build-id/f5/ /usr/lib/.build-id/fa/ /usr/lib/systemd/ /usr/lib/systemd/system/ /usr/lib64/ /usr/libexec/ /usr/libexec/postfix/ /usr/sbin/ /usr/share/doc/ /usr/share/doc/postfix-3.4.8/ /usr/share/doc/postfix-3.4.8/README_FILES/ /usr/share/doc/postfix-3.4.8/examples/ /usr/share/doc/postfix-3.4.8/examples/chroot-setup/ /usr/share/doc/postfix-3.4.8/examples/qmail-local/ /usr/share/doc/postfix-3.4.8/examples/smtpd-policy/ /usr/share/man/man1/ /usr/share/man/man5/ /usr/share/man/man8/ /var/lib/misc/ /var/lib/ /var/spool/ /var/spool/postfix/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 9 x86_64-redhat-linux-gnu
! " # $ % & ' ( ) * + , - . / 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 2 3 4 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 6 directory ASCII text Bourne-Again shell script, ASCII text executable POSIX shell script, ASCII text executable ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=cbbba856bad6778d61ffbffc053a8463f04d374e, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamica� x�������������������� X � �'8 �{������������a" �$ q ���������������� a" `" b" � directory ASCII text exported SGML document, ASCII text empty ASCII text, with no line terminators ASCII text, with very long lines (bzip2 compressed data, block size = 500k) ASCII text (bzip2 compressed data, block size = 500k) ASCII text, with very long lines, with no line terminators utf-8 978e8071f76fda9bd58b857154a084486672e920fc1e28aad3daadf3fbc18bd5 ? ���P �q0�� !�<���Q�d~���d*�%
Q�d~��꣱ �i{�����| �{O>�"�*D��f�f���qQ4M1�ƿ�ZiU�|qLŮ$�.'�f/b�_�=� �&EKs�0q�5� }\棣�:�^�@\O?G �^˰�0=ׄ��wB1N,�ݴ� �(�GF�gX)� K��xi(�~f�At� *�rO���8[w�E��ڀ�P s�f����`/KuJܨ�~�� % wTk�ȿ�F���7� �?��=
]f�������-���<�'��~K���*P<ID�b/nO�T<�_�\�$��)ÓG� Xe�I� �+xi
��� ��3O{v��\�J�-n �0p��,���F�}��>.��{�<y�3��>L��iUϥ'�ᅵ� \ ������'����Ƀ�!.��ݛ}��k��� �� !�<��ΰ��Q�d~���d*�%
Q�d~���@� �E��uf�ұ��q I��|�@�i��^����P��plX&դ���� .�C5�� uBD7`��/ q�+l ����ힶ3G��d�vKki �m�`��rF�O[ 6s��R��YQO)��f>�� oE�q�f���]�����w�
���pAK��I,0�5��Sy,2ŧ��f�`�n��U
^��;���/eiW0��5���E���
��~�UQK���2J�I[w�X�Z�"w]|� \���5�=n�y��ӇA��1]pb��L��� w�zġ��o ˀ*�MIozK�XG_� �y�B�;��|[PEZ�S黧��/A�2[�1k[ R��3�ׯ����z֖f���$� F�5j�2)� k�^s0�x��f2a023320261b92c7dac377465ca8d05b6c7c38f 0554d14c6d40334f4f34d0d5b8becf172523613d942ba7b74b07ca013a1d6dbf d�V� � x�������������������� X � �&8 ��������������! �$ ���������������� �! �! �! � 0a7af86dd316e6c94bd70b8f1ea34fc48663 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8f7f706392bff6e394dd036d2aa03881c9f8104cae648b17c15c5810d27b08fb 6db2beab8d0302300b5142c7f93ebbbe01aa0cb8372c7cecde7bfba04093679c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8340ef91e2a714e8089027b56140012615aac550e8eb844784cff6dd099a9fd7 b6def7f94e6dc1d41ff3ea84fb7d6b8b23aa33dc71f161765a69f1f70dc6638d d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 8af0f4a6c5db0c920b102f1db6b5c434403ad4742dc037f9dac3490242a668fa 5d47de33b4fb7e8f93fe2249dc34690d7e8d273de10da9c20af4e83018f63394 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f62dec384d975fa4968412d1b27e4fe8d53dddcb7308a67bbb80a5a1c471cb35 d4fae1f9b4c1e4d8d1aea83d4cabc319398bb204d8bb0833e903061be7b7bd8c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 81ee32caa6747c7c2ca10c19bfaca4586497b228d59e93e339ea64ac8af61a44 a66fefd1e48c50cf47cfa293ff2a8ea52dcda0d0b94446d480442425372396f2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 07501353745aaecb06c90d0edd81c35fdde59fe406a1f8c55a2b98c86cf4c9a5 bd449b25a7fd56e11c609f9ab5e58e4fd1126fd1588a383d1272305fff11ad38 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 89ff041923809c62fdac63c15fd92c214af836ec6f0cf4f27a22051fcb897185 05b1367bd91c1f704ec292f664676b92f13ced4452391493cd1f4bb846c56889 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f329c02e06ff2a6695831f1b58c49a0921a0fd6004f4d125e22867583784bda4 cffcec268680a531ab54d3879dc2bcd888f16d9aa03a5e17358e552cf289a733 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ffc3a16c3aaa542c1d17449456ccedcdc833db8f876b700cd784b6ed39cd333b 87bb2edc8fe5bf9ae2e4959164ee69f2f00ebe521316bab391665b7294fd3054 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 1fe5879718d8e36f720c44d188f15cbf3c73f543844fa0f4f3ee5bf458e30b9c 144aa55015476da4d5fb866b4a71e4d8bf71c4580d51c48d02c74a7ef4976367 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7845064a269d5ac5a4661fae59608be855ae90081711c537358e60488614c4c6 56a0ec198429c3664c120a69b25c294a131e783a0e91d1143d143c6aa53331d3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 17c06a98456e4c1cac2d283c28a9d31bf425068e1ed3dc22aaf71129ebda40bb 2bb908a93d48c2cc338fc1181315573f957c3e58f4cbcbef34b63190fa94cba1 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ae0afb1a4155e84f930c26ece763c190f6f91a9edfba52b69156c57e1c794810 8a84c7a2fab3de03ba483541363d2bba5db76c567da50f491ed793386519e89a d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b1a8588fc722ecddb950c7a4be84a410790869121fbc08db228d8695132d32a2 55553f201cbad918226b2b65544632374d359a87a17be5a2d1cc795c3fd6ffef d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e a80c4b446eca5ad2bccb52942f1a9dc225ec4181adc431d0b2e3fa3e32fee57c 37e1ea51600f5b5c8e52a0d31a438877af2537a013b2b28ea24972cb9526f0f0 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e aa39915c34a07fb3d5d0868c76d731fa10f770b0d5f38bc23c57c1ec036278d6 5d91683c08ee571e7219413d4556cde00ea56353db56869dc0c23e31d58be1db d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 81e0881e92c7001f5e4e466293d6099717d86f1007c4c5a545202fd771ed2592 00b77e9cf1a6e1523d1d9c920391a5ee17a75a99e40a1c302f773e69169073bf d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e4b17df5741da81f3c05c16a1323c9b64a61dae6bea796e0d7c6f726ab694608 b2042cd2449c0ec392696067047c5ab63cc55a0fe2ea7b53ba39d2df843c24cc d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ec63b55969025de9bda382f0235ece3920ea657d1ecae42e3da0da0267fa2245 67f57d5bc263f3d3f6ea28879ae76eafa97b07cdd078a7559b61625bd330e81b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bd45ab4598be43f59971597c6d2ec78372179f55387da0ba8e8384c5ff5a6f3e a9ad17c5a6c4728998a1052d062f25b80be9071ed2e9b31ecf8651bbb2a833bb d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e ca0370d7ba1bb51bb5827b897c5dd9b9fe053a45b3482f5� x�������������p������ X � �'8 �q�������������Q �$ Z ���������������� �Q �Q � P �< ? �t d � �
� � 4 � 8 � U � � � � � � � � � � � � � � � � ' � - � 4 � � D � H H � H
$ H D H ;� H
C| H H� H O. H U� U� H [ \` 0 ] 0 a. 0 a� a� a� ( a� = a� > a� ? a� @ a� G a� H H g H I l$ H J ml X mp Y m� \ n\ H ] s| H ^ �� D b �� d � e � f � l � t �8 H u �X H v �x 7 w �< H x �\ H y �| + � �( � �. � �p ք ֈ ֘ o � o
�v ן � �� �� H �, K �0 g �4 h �8 C postfix 3.4.8 2.centos.8+p18.0.24.0+t200128.1353 Postfix Mail Transport Agent Postfix is a Mail Transport Agent (MTA), supporting LDAP, SMTP AUTH (SASL), TLS ^/�[bcos8x64.plesk.ru ���Plesk IBM Public License Plesk <info@plesk.com> System Environment/Daemons http://www.postfix.org/ linux x86_64 # vim:ft=sh
# Add user and groups if necessary
# vim:ft=sh
[ -z "$PLESK_INSTALLER_DEBUG" ] || set -x
CHROOT=/var/spool/postfix
/usr/sbin/groupadd -g 90 -r postdrop 2>/dev/null
/usr/sbin/groupadd -g 89 -r postfix 2>/dev/null
/usr/sbin/groupadd -g 12 -r mail 2>/dev/null
/usr/sbin/useradd -d $CHROOT -s /sbin/nologin -g postfix -G mail -M -r -u 89 postfix 2>/dev/null
exit 0 # vim:ft=sh
install_mta_alternative()
{
/usr/sbin/alternatives --install /usr/sbin/sendmail mta /usr/sbin/sendmail.postfix 30 \
--slave /usr/bin/mailq mta-mailq /usr/bin/mailq.postfix \
--slave /usr/bin/newaliases mta-newaliases /usr/bin/newaliases.postfix \
--slave /etc/pam.d/smtp mta-pam /etc/pam.d/smtp.postfix \
--slave /usr/bin/rmail mta-rmail /usr/bin/rmail.postfix \
--slave /usr/lib/sendmail mta-sendmail /usr/lib/sendmail.postfix \
--slave /usr/share/man/man1/mailq.1.gz mta-mailqman /usr/share/man/man1/mailq.postfix.1.gz \
--slave /usr/share/man/man1/newaliases.1.gz mta-newaliasesman /usr/share/man/man1/newaliases.postfix.1.gz \
--slave /usr/share/man/man8/sendmail.8.gz mta-sendmailman /usr/share/man/man1/sendmail.postfix.1.gz \
--slave /usr/share/man/man5/aliases.5.gz mta-aliasesman /usr/share/man/man5/aliases.postfix.5.gz \
--initscript postfix
}
remove_mta_alternative()
{
/usr/sbin/alternatives --remove mta /usr/sbin/sendmail.postfix
}
# vim:ft=sh
[ -z "$PLESK_INSTALLER_DEBUG" ] || set -x
if ! install_mta_alternative; then
# W/A for potentially broken mta configuration
remove_mta_alternative
install_mta_alternative
fi
/usr/sbin/postfix set-permissions \
config_directory=/etc/postfix \
daemon_directory=/usr/libexec/postfix \
command_directory=/usr/sbin \
mail_owner=postfix \
meta_directory=/etc/postfix \
setgid_group=postdrop \
manpage_directory=/usr/share/man \
sample_directory=/usr/share/doc/postfix-3.4.8/samples \
readme_directory=/usr/share/doc/postfix-3.4.8/README_FILES >/dev/null 2>&1
# upgrade configuration files if necessary
/usr/sbin/postfix upgrade-configuration \
config_directory=/etc/postfix \
daemon_directory=/usr/libexec/postfix \
command_directory=/usr/sbin \
mail_owner=postfix \
meta_directory=/etc/postfix \
setgid_group=postdrop \
manpage_directory=/usr/share/man \
sample_directory=/usr/share/doc/postfix-3.4.8/samples \
readme_directory=/usr/share/doc/postfix-3.4.8/README_FILES >/dev/null 2>&1
# Service is intentionally not started here unless it is upgrade
# from a version with � x������������������� X � �&8 x �k �! �$ . ���������������� �! �! �! � chronyc_t domain to use nsswitch
Resolves: rhbz#1772852
- Allow nscd_socket_use() for domains in nscd_use() unconditionally
Resolves: rhbz#1772852
- Allow gluster geo-replication in rsync mode
Resolves: rhbz#1831109
- Update networkmanager_read_pid_files() to allow also list_dir_perms
Resolves: rhbz#1781818
- Allow associating all labels with CephFS
Resolves: bz#1814689
- Allow tcpdump sniffing offloaded (RDMA) traffic
Resolves: rhbz#1834773 - Update radiusd policy
Resolves: rhbz#1803407
- Allow sssd read NetworkManager's runtime directory
Resolves: rhbz#1781818
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
Resolves: rhbz#1777506
- Allow ipa_helper_t to read kr5_keytab_t files
Resolves: rhbz#1769423
- Add ibacm_t ipc_lock capability
Resolves: rhbz#1754719
- Allow opafm_t to create and use netlink rdma sockets.
Resolves: rhbz#1786670
- Allow ptp4l_t create and use packet_socket sockets
Resolves: rhbz#1759214
- Update ctdbd_t policy
Resolves: rhbz#1735748
- Allow glusterd synchronize between master and slave
Resolves: rhbz#1824662
- Allow auditd poweroff or switch to single mode
Resolves: rhbz#1826788
- Allow init_t set the nice level of all domains
Resolves: rhbz#1819121
- Label /etc/sysconfig/ip6?tables\.save as system_conf_t
Resolves: rhbz#1776873
- Add file context entry and file transition for /var/run/pam_timestamp
Resolves: rhbz#1791957 - Allow ssh-keygen create file in /var/lib/glusterd
Resolves: rhbz#1816663
- Update ctdbd_manage_lib_files() to also allow mmap ctdbd_var_lib_t files
Resolves: rhbz#1819243
- Remove container interface calling by named_filetrans_domain.
- Makefile: fix tmp/%.mod.fc target
Resolves: rhbz#1821191 - Allow NetworkManager read its unit files and manage services
- Mark nm-cloud-setup systemd units as NetworkManager_unit_file_t
Resolves: rhbz#1806894 - Update virt_read_qemu_pid_files inteface
Resolves: rhbz#1782925 - Allow vhostmd communication with hosted virtual machines
- Add and update virt interfaces
Resolves: rhbz#1782925 - Dontaudit timedatex_t read file_contexts_t and validate security contexts
Resolves: rhbz#1779098 - Make stratisd_t domain unconfined for RHEL-8.2
Resolves: rhbz#1791557
- stratisd_t policy updates
Resolves: rhbz#1791557 - Label /stratis as stratisd_data_t
Resolves: rhbz#1791557 - Allow stratisd_t domain to read/write fixed disk devices and removable devices.
Resolves: rhbz#1790795 - Added macro for stratisd to chat over dbus
- Add dac_override capability to stratisd_t domain
- Allow userdomain to chat with stratisd over dbus.
Resolves: rhbz#1787298 - Update files_create_var_lib_dirs() interface to allow caller domain also set attributes of var_lib_t directory
Resolves: rhbz#1778126 - Allow create udp sockets for abrt_upload_watch_t domains
Resolves: rhbz#1777761 - Allow sssd_t domain to read kernel net sysctls
Resolves: rhbz#1777042 - Allow userdomain dbus chat with systemd_resolved_t
Resolves: rhbz#1773463
- Allow init_t read and setattr on /var/lib/fprintd
Resolves: rhbz#1781696
- Allow sysadm_t dbus chat with colord_t
Resolves: rhbz#1772669
- Allow confined users run fwupdmgr
Resolves: rhbz#1772619
- Allow confined users run machinectl
Resolves: rhbz#1772625
- Allow systemd labeled as init_t domain to create dirs labeled as var_t
Resolves: rhbz#1778126
- Allow systemd labeled as init_t domain to manage faillog_t objects
Resolves: rhbz#1671019
- Add fprintd_read_var_lib_dir and fprintd_setattr_var_lib_dir interfaces
Resolves: rhbz#1781696
- Allow pulseaudio create .config and dgram sendto to unpriv_userdomain
Resolves: rhbz#1703231
- Allow abrt_dump_oops_t domain to create udp sockets BZ(1778030)
Resolves: rhbz#1777761
- Change type in transition for /var/cache/{dnf,yum} directory
Resolves: rhbz#1686833
- Revert "Update zebra SELinux policy to make it work also with frr service"
This reverts commit 73653250a252ad6eefcb3aae00749017e396ab8d.
- Revert "Label only regular files inside /usr/lib/frr direcotry as zebra_exec_t"
This reverts commit a19eb1021cbd6c637344954cead54caae081e07c.
- Allow stratis_t domain to � x�������������`����� X � A'8 �������������" �$ ���������������� " " " � Allow systemd_domains read access on etc, etc_runtime and usr files, also allow them to connect stream to syslog socket
- /usr/share/munin/plugins/plugin.sh should be labeled as bin_t
- Remove some more unconfined_t process transitions, that I don't believe are necessary
- Stop transitioning uncofnined_t to checkpc
- dmraid creates /var/lock/dmraid
- Allow systemd_localed to creatre unix_dgram_sockets
- Allow systemd_localed to write kernel messages.
- Also cleanup systemd definition a little.
- Fix userdom_restricted_xwindows_user_template() interface
- Label any block devices or char devices under /dev/infiniband as fixed_disk_device_t
- User accounts need to dbus chat with accountsd daemon
- Gnome requires all users to be able to read /proc/1/ - virsh now does a setexeccon call
- Additional rules required by openshift domains
- Allow svirt_lxc_domains to use inherited terminals, needed to make virt-sandbox-service execute work
- Allow spamd_update_t to search spamc_home_t
- Avcs discovered by mounting an isci device under /mnt
- Allow lspci running as logrotate to read pci.ids
- Additional fix for networkmanager_read_pid_files()
- Fix networkmanager_read_pid_files() interface
- Allow all svirt domains to connect to svirt_socket_t
- Allow virsh to set SELinux context for a process.
- Allow tuned to create netlink_kobject_uevent_socket
- Allow systemd-timestamp to set SELinux context
- Add support for /var/lib/systemd/linger
- Fix ssh_sysadm_login to be working on MLS as expected - Rename files_rw_inherited_tmp_files to files_rw_inherited_tmp_file
- Add missing files_rw_inherited_tmp_files interface
- Add additional interface for ecryptfs
- ALlow nova-cert to connect to postgresql
- Allow keystone to connect to postgresql
- Allow all cups domains to getattr on filesystems
- Allow pppd to send signull
- Allow tuned to execute ldconfig
- Allow gpg to read fips_enabled
- Add additional fixes for ecryptfs
- Allow httpd to work with posgresql
- Allow keystone getsched and setsched - Allow gpg to read fips_enabled
- Add support for /var/cache/realmd
- Add support for /usr/sbin/blazer_usb and systemd support for nut
- Add labeling for fenced_sanlock and allow sanclok transition to fenced_t
- bitlbee wants to read own log file
- Allow glance domain to send a signal itself
- Allow xend_t to request that the kernel load a kernel module
- Allow pacemaker to execute heartbeat lib files
- cleanup new swift policy - Fix smartmontools
- Fix userdom_restricted_xwindows_user_template() interface
- Add xserver_xdm_ioctl_log() interface
- Allow Xusers to ioctl lxdm.log to make lxdm working
- Add MLS fixes to make MLS boot/log-in working
- Add mls_socket_write_all_levels() also for syslogd
- fsck.xfs needs to read passwd
- Fix ntp_filetrans_named_content calling in init.te
- Allow postgresql to create pg_log dir
- Allow sshd to read rsync_data_t to make rsync <backuphost> working
- Change ntp.conf to be labeled net_conf_t
- Allow useradd to create homedirs in /run. ircd-ratbox does this and we should just allow it
- Allow xdm_t to execute gstreamer home content
- Allod initrc_t and unconfined domains, and sysadm_t to manage ntp
- New policy for openstack swift domains
- More access required for openshift_cron_t
- Use cupsd_log_t instead of cupsd_var_log_t
- rpm_script_roles should be used in rpm_run
- Fix rpm_run() interface
- Fix openshift_initrc_run()
- Fix sssd_dontaudit_stream_connect() interface
- Fix sssd_dontaudit_stream_connect() interface
- Allow LDA's job to deliver mail to the mailbox
- dontaudit block_suspend for mozilla_plugin_t
- Allow l2tpd_t to all signal perms
- Allow uuidgen to read /dev/random
- Allow mozilla-plugin-config to read power_supply info
- Implement cups_domain attribute for cups domains
- We now need access to user terminals since we start by executing a command outside the tty
- We now need access to user terminals since we start by executing a command outside the tty
- svirt lxc containers want to execute userhelper apps, need these changes to allow this to happen
- Add containmen� x��������������n����� X � ['8 : 8�����/" �$ ? ���������������� /" ." 0" � the network as well as locally
- shutdown is passed stdout to a xdm_log_t file
- smartd creates a fixed disk device
- dovecot_etc_t contains a lnk_file that domains need to read
- mount needs to be able to read etc_runtim_t:lnk_file since in rawhide this is a link created at boot - syslog_t needs syslog capability
- dirsrv needs to be able to create /var/lib/snmp
- Fix labeling for dirsrv
- Fix for dirsrv policy missing manage_dirs_pattern
- corosync needs to delete clvm_tmpfs_t files
- qdiskd needs to list hugetlbfs
- Move setsched to sandbox_x_domain, so firefox can run without network access
- Allow hddtemp to read removable devices
- Adding syslog and read_policy permissions to policy
* syslog
Allow unconfined, sysadm_t, secadm_t, logadm_t
* read_policy
allow unconfined, sysadm_t, secadm_t, staff_t on Targeted
allow sysadm_t (optionally), secadm_t on MLS
- mdadm application will write into /sys/.../uevent whenever arrays are
assembled or disassembled. - Add tcsd policy - ricci_modclusterd_t needs to bind to rpc ports 500-1023
- Allow dbus to use setrlimit to increase resoueces
- Mozilla_plugin is leaking to sandbox
- Allow confined users to connect to lircd over unix domain stream socket which allow to use remote control
- Allow awstats to read squid logs
- seunshare needs to manage tmp_t
- apcupsd cgi scripts have a new directory - Fix xserver_dontaudit_read_xdm_pid
- Change oracle_port_t to oracledb_port_t to prevent conflict with satellite
- Allow dovecot_deliver_t to read/write postfix_master_t:fifo_file.
* These fifo_file is passed from postfix_master_t to postfix_local_t to dovecot_deliver_t
- Allow readahead to manage readahead pid dirs
- Allow readahead to read all mcs levels
- Allow mozilla_plugin_t to use nfs or samba homedirs - Allow nagios plugin to read /proc/meminfo
- Fix for mozilla_plugin
- Allow samba_net_t to create /etc/keytab
- pppd_t setting up vpns needs to run unix_chkpwd, setsched its process and write wtmp_t
- nslcd can read user credentials
- Allow nsplugin to delete mozilla_plugin_tmpfs_t
- abrt tries to create dir in rpm_var_lib_t
- virt relabels fifo_files
- sshd needs to manage content in fusefs homedir
- mock manages link files in cache dir - nslcd needs setsched and to read /usr/tmp
- Invalid call in likewise policy ends up creating a bogus role
- Cannon puts content into /var/lib/bjlib that cups needs to be able to write
- Allow screen to create screen_home_t in /root
- dirsrv sends syslog messages
- pinentry reads stuff in .kde directory
- Add labels for .kde directory in homedir
- Treat irpinit, iprupdate, iprdump services with raid policy - NetworkManager wants to read consolekit_var_run_t
- Allow readahead to create /dev/.systemd/readahead
- Remove permissive domains
- Allow newrole to run namespace_init - Add sepgsql_contexts file - Update to upstream - Add oracle ports and allow apache to connect to them if the connect_db boolean is turned on
- Add puppetmaster_use_db boolean
- Fixes for zarafa policy
- Fixes for gnomeclock poliy
- Fix systemd-tmpfiles to use auth_use_nsswitch - gnomeclock executes a shell
- Update for screen policy to handle pipe in homedir
- Fixes for polyinstatiated homedir
- Fixes for namespace policy and other fixes related to polyinstantiation
- Add namespace policy
- Allow dovecot-deliver transition to sendmail which is needed by sieve scripts
- Fixes for init, psad policy which relate with confined users
- Do not audit bootloader attempts to read devicekit pid files
- Allow nagios service plugins to read /proc - Add firewalld policy
- Allow vmware_host to read samba config
- Kernel wants to read /proc Fix duplicate grub def in cobbler
- Chrony sends mail, executes shell, uses fifo_file and reads /proc
- devicekitdisk getattr all file systems
- sambd daemon writes wtmp file
- libvirt transitions to dmidecode - Add initial policy for system-setup-keyboard which is now daemon
- Label /var/lock/subsys/shorewall as shorewall_lock_t
- Allow users to communicate with the gpg_agent_t
- Dontaudit mozilla_plugin_t using the inh� x�������������P^����� X � ?'8 ���������e����" �$ ���������������� " " " � /1000
- Allow certwatch to execut /usr/bin/httpd
- Allow cgred to send signal perms to itself, needs back port to RHEL6
- Allow openshift_cron_t to look at quota
- Allow cups_t to read inhered tmpfs_t from the kernel
- Allow yppasswdd to use NIS
- Tuned wants sys_rawio capability
- Add ftpd_use_fusefs boolean
- Allow dirsrvadmin_t to signal itself - Allow localectl to read /etc/X11/xorg.conf.d directory
- Revert "Revert "Fix filetrans rules for kdm creates .xsession-errors""
- Allow mount to transition to systemd_passwd_agent
- Make sure abrt directories are labeled correctly
- Allow commands that are going to read mount pid files to search mount_var_run_t
- label /usr/bin/repoquery as rpm_exec_t
- Allow automount to block suspend
- Add abrt_filetrans_named_content so that abrt directories get labeled correctly
- Allow virt domains to setrlimit and read file_context - Allow nagios to manage nagios spool files
- /var/spool/snmptt is a directory which snmdp needs to write to, needs back port to RHEL6
- Add swift_alias.* policy files which contain typealiases for swift types
- Add support for /run/lock/opencryptoki
- Allow pkcsslotd chown capability
- Allow pkcsslotd to read passwd
- Add rsync_stub() interface
- Allow systemd_timedate also manage gnome config homedirs
- Label /usr/lib64/security/pam_krb5/pam_krb5_cchelper as bin_t
- Fix filetrans rules for kdm creates .xsession-errors
- Allow sytemd_tmpfiles to create wtmp file
- Really should not label content under /var/lock, since it could have labels on it different from var_lock_t
- Allow systemd to list all file system directories
- Add some basic stub interfaces which will be used in PRODUCT policies - Fix log transition rule for cluster domains
- Start to group all cluster log together
- Dont use filename transition for POkemon Advanced Adventure until a new checkpolicy update
- cups uses usbtty_device_t devices
- These fixes were all required to build a MLS virtual Machine with single level desktops
- Allow domains to transiton using httpd_exec_t
- Allow svirt domains to manage kernel key rings
- Allow setroubleshoot to execute ldconfig
- Allow firewalld to read generate gnome data
- Allow bluetooth to read machine-info
- Allow boinc domain to send signal to itself
- Fix gnome_filetrans_home_content() interface
- Allow mozilla_plugins to list apache modules, for use with gxine
- Fix labels for POkemon in the users homedir
- Allow xguest to read mdstat
- Dontaudit virt_domains getattr on /dev/*
- These fixes were all required to build a MLS virtual Machine with single level desktops
- Need to back port this to RHEL6 for openshift
- Add tcp/8891 as milter port
- Allow nsswitch domains to read sssd_var_lib_t files
- Allow ping to read network state.
- Fix typo
- Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them - Adopt swift changes from lhh@redhat.com
- Add rhcs_manage_cluster_pid_files() interface
- Allow screen domains to configure tty and setup sock_file in ~/.screen directory
- ALlow setroubleshoot to read default_context_t, needed to backport to F18
- Label /etc/owncloud as being an apache writable directory
- Allow sshd to stream connect to an lxc domain - Allow postgresql to manage rgmanager pid files
- Allow postgresql to read ccs data
- Allow systemd_domain to send dbus messages to policykit
- Add labels for /etc/hostname and /etc/machine-info and allow systemd-hostnamed to create them
- All systemd domains that create content are reading the file_context file and setfscreate
- Systemd domains need to search through init_var_run_t
- Allow sshd to communicate with libvirt to set containers labels
- Add interface to manage pid files
- Allow NetworkManger_t to read /etc/hostname
- Dontaudit leaked locked files into openshift_domains
- Add fixes for oo-cgroup-read - it nows creates tmp files
- Allow gluster to manage all directories as well as files
- Dontaudit chrome_sandbox_nacl_t using user terminals
- Allow sysstat to manage its own log files
- Allow virtual machines to setrlimit and send itself signals.
-� x��������������M����� X � �&8 X��������p����! �$ ! ���������������� �! �! �! � -5 Dan Walsh <dwalsh@redhat.com> 2.4.6-4 Dan Walsh <dwalsh@redhat.com> 2.4.6-3 Dan Walsh <dwalsh@redhat.com> 2.4.6-1 Dan Walsh <dwalsh@redhat.com> 2.4.5-4 Dan Walsh <dwalsh@redhat.com> 2.4.5-3 Dan Walsh <dwalsh@redhat.com> 2.4.5-2 Dan Walsh <dwalsh@redhat.com> 2.4.5-1 Dan Walsh <dwalsh@redhat.com> 2.4.4-2 Dan Walsh <dwalsh@redhat.com> 2.4.4-2 Dan Walsh <dwalsh@redhat.com> 2.4.4-1 Dan Walsh <dwalsh@redhat.com> 2.4.3-13 Dan Walsh <dwalsh@redhat.com> 2.4.3-12 Dan Walsh <dwalsh@redhat.com> 2.4.3-11 Dan Walsh <dwalsh@redhat.com> 2.4.3-10 Dan Walsh <dwalsh@redhat.com> 2.4.3-9 Dan Walsh <dwalsh@redhat.com> 2.4.3-8 Dan Walsh <dwalsh@redhat.com> 2.4.3-7 Dan Walsh <dwalsh@redhat.com> 2.4.3-6 Dan Walsh <dwalsh@redhat.com> 2.4.3-5 Dan Walsh <dwalsh@redhat.com> 2.4.3-4 Dan Walsh <dwalsh@redhat.com> 2.4.3-3 Dan Walsh <dwalsh@redhat.com> 2.4.3-2 Dan Walsh <dwalsh@redhat.com> 2.4.3-1 Dan Walsh <dwalsh@redhat.com> 2.4.2-8 Dan Walsh <dwalsh@redhat.com> 2.4.2-7 James Antill <james.antill@redhat.com> 2.4.2-6 Dan Walsh <dwalsh@redhat.com> 2.4.2-5 Dan Walsh <dwalsh@redhat.com> 2.4.2-4 Dan Walsh <dwalsh@redhat.com> 2.4.2-3 Dan Walsh <dwalsh@redhat.com> 2.4.2-2 Dan Walsh <dwalsh@redhat.com> 2.4.2-1 Dan Walsh <dwalsh@redhat.com> 2.4.1-5 Dan Walsh <dwalsh@redhat.com> 2.4.1-4 Dan Walsh <dwalsh@redhat.com> 2.4.1-3 Dan Walsh <dwalsh@redhat.com> 2.4.1-2 Dan Walsh <dwalsh@redhat.com> 2.4-4 Dan Walsh <dwalsh@redhat.com> 2.4-3 Dan Walsh <dwalsh@redhat.com> 2.4-2 Dan Walsh <dwalsh@redhat.com> 2.4-1 Dan Walsh <dwalsh@redhat.com> 2.3.19-4 Dan Walsh <dwalsh@redhat.com> 2.3.19-3 Dan Walsh <dwalsh@redhat.com> 2.3.19-2 Dan Walsh <dwalsh@redhat.com> 2.3.19-1 James Antill <jantill@redhat.com> 2.3.18-10 James Antill <jantill@redhat.com> 2.3.18-9 Dan Walsh <dwalsh@redhat.com> 2.3.18-8 Dan Walsh <dwalsh@redhat.com> 2.3.18-7 Dan Walsh <dwalsh@redhat.com> 2.3.18-6 Dan Walsh <dwalsh@redhat.com> 2.3.18-5 Dan Walsh <dwalsh@redhat.com> 2.3.18-4 Dan Walsh <dwalsh@redhat.com> 2.3.18-3 Dan Walsh <dwalsh@redhat.com> 2.3.18-2 Dan Walsh <dwalsh@redhat.com> 2.3.18-1 Dan Walsh <dwalsh@redhat.com> 2.3.17-2 Dan Walsh <dwalsh@redhat.com> 2.3.17-1 Dan Walsh <dwalsh@redhat.com> 2.3.16-9 Dan Walsh <dwalsh@redhat.com> 2.3.16-8 Dan Walsh <dwalsh@redhat.com> 2.3.16-7 Dan Walsh <dwalsh@redhat.com> 2.3.16-6 Dan Walsh <dwalsh@redhat.com> 2.3.16-5 Dan Walsh <dwalsh@redhat.com> 2.3.16-4 Dan Walsh <dwalsh@redhat.com> 2.3.16-2 Dan Walsh <dwalsh@redhat.com> 2.3.16-1 Dan Walsh <dwalsh@redhat.com> 2.3.15-2 Dan Walsh <dwalsh@redhat.com> 2.3.15-1 Dan Walsh <dwalsh@redhat.com> 2.3.14-8 Dan Walsh <dwalsh@redhat.com> 2.3.14-7 Dan Walsh <dwalsh@redhat.com> 2.3.14-6 Dan Walsh <dwalsh@redhat.com> 2.3.14-4 Dan Walsh <dwalsh@redhat.com> 2.3.14-3 Dan Walsh <dwalsh@redhat.com> 2.3.14-2 Dan Walsh <dwalsh@redhat.com> 2.3.14-1 Dan Walsh <dwalsh@redhat.com> 2.3.13-6 Dan Walsh <dwalsh@redhat.com> 2.3.13-5 Dan Walsh <dwalsh@redhat.com> 2.3.13-4 Dan Walsh <dwalsh@redhat.com> 2.3.13-3 Dan Walsh <dwalsh@redhat.com> 2.3.13-2 Dan Walsh <dwalsh@redhat.com> 2.3.13-1 Dan Walsh <dwalsh@redhat.com> 2.3.12-2 Dan Walsh <dwalsh@redhat.com> 2.3.12-1 Dan Walsh <dwalsh@redhat.com> 2.3.11-1 Dan Walsh <dwalsh@redhat.com> 2.3.10-7 Dan Walsh <dwalsh@redhat.com> 2.3.10-6 Dan Walsh <dwalsh@redhat.com> 2.3.10-3 Dan Walsh <dwalsh@redhat.com> 2.3.10-1 Dan Walsh <dwalsh@redhat.com> 2.3.9-6 Dan Walsh <dwalsh@redhat.com> 2.3.9-5 Dan Walsh <dwalsh@redhat.com> 2.3.9-4 Dan Walsh <dwalsh@redhat.com> 2.3.9-3 Dan Walsh <dwalsh@redhat.com> 2.3.9-2 Dan Walsh <dwalsh@redhat.com> 2.3.9-1 Dan Walsh <dwalsh@redhat.com> 2.3.8-2 Dan Walsh <dwalsh@redhat.com> 2.3.7-1 Dan Walsh <dwalsh@redhat.com> 2.3.6-4 Dan Walsh <dwalsh@redhat.com> 2.3.6-3 Dan Walsh <dwalsh@redhat.com> 2.3.6-2 Dan Walsh <dwalsh@redhat.com> 2.3.6-1 Dan Walsh <dwalsh@redhat.com> 2.3.5-1 Dan Walsh <dwalsh@redhat.com> 2.3.4-1 Dan Walsh <dwalsh@redhat.com> 2.3.3-20 Dan Walsh <dwalsh@redhat.com> 2.3.3-19 Dan Walsh <dwalsh@redhat.com> 2.3.3-18 Dan Walsh <dwalsh@redhat.com> 2.3.3-17 Dan Walsh <dwalsh@redhat.com> 2.3.3-16 Dan Walsh <dwalsh@redhat.com> 2.3.3-15 Dan Walsh <� x�������������@=����� X � '8 ���������Y�������! �$ J ���������������� �! �! �! � sten to its tcp_socket
- Allow sssd_selinux_manager_t to ioctl init_t sockets
- Improve ipa_cert_filetrans_named_content() interface to also allow caller domain manage ipa_cert_t type.
- Allow pki_tomcat_t domain read /etc/passwd.
- Allow tomcat_t domain read ipa_tmp_t files
- Label new path for ipa-otpd
- Allow radiusd_t domain stream connect to postgresql_t
- Allow rhsmcertd_t to execute hostname_exec_t binaries.
- Allow virtlogd to append nfs_t files when virt_use_nfs=1
- Allow httpd_t domain read also httpd_user_content_type lnk_files.
- Allow httpd_t domain create /etc/httpd/alias/ipaseesion.key with label ipa_cert_t
- Dontaudit <user>_gkeyringd_t stream connect to system_dbusd_t
- Label /var/www/html/nextcloud/data as httpd_sys_rw_content_t
- Add interface ipa_filetrans_named_content()
- Allow tomcat use nsswitch
- Allow certmonger_t start/status generic services
- Allow dirsrv read cgroup files.
- Allow ganesha_t domain read/write infiniband devices.
- Allow sendmail_t domain sysctl_net_t files
- Allow targetd_t domain read network state and getattr on loop_control_device_t
- Allow condor_schedd_t domain send mails.
- Allow ntpd to creating sockets. BZ(1434395)
- Alow certmonger to create own systemd unit files.
- Add kill namespace capability to xdm_t domain
- Revert "su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization."
- Revert "Allow <role>_su_t to create netlink_selinux_socket"
- Allow <role>_su_t to create netlink_selinux_socket
- Allow unconfined_t to module_load any file
- Allow staff to systemctl virt server when staff_use_svirt=1
- Allow unconfined_t create /tmp/ca.p12 file with ipa_tmp_t context
- Allow netutils setpcap capability
- Dontaudit leaked file descriptor happening in setfiles_t domain BZ(1388124) - fix #1380325, selinux-policy-sandbox always removing sandbox module on upgrade - Fix abrt module to reflect all changes in abrt release - Allow tlp_t domain to ioctl removable devices BZ(1436830)
- Allow tlp_t domain domtrans into mount_t BZ(1442571)
- Allow lircd_t to read/write to sysfs BZ(1442443)
- Fix policy to reflect all changes in new IPA release
- Allow virtlogd_t to creating tmp files with virt_tmp_t labels.
- Allow sbd_t to read/write fixed disk devices
- Add sys_ptrace capability to radiusd_t domain
- Allow cockpit_session_t domain connects to ssh tcp ports.
- Update tomcat policy to make working ipa install process
- Allow pcp_pmcd_t net_admin capability. Allow pcp_pmcd_t read net sysctls Allow system_cronjob_t create /var/run/pcp with pcp_var_run_t
- Fix all AVC denials during pkispawn of CA Resolves: rhbz#1436383
- Update pki interfaces and tomcat module
- Allow sendmail to search network sysctls
- Add interface gssd_noatsecure()
- Add interface gssproxy_noatsecure()
- Allow chronyd_t net_admin capability to allow support HW timestamping.
- Update tomcat policy.
- Allow certmonger to start haproxy service
- Fix init Module
- Make groupadd_t domain as system bus client BZ(1416963)
- Make useradd_t domain as system bus client BZ(1442572)
- Allow xdm_t to gettattr /dev/loop-control device BZ(1385090)
- Dontaudit gdm-session-worker to view key unknown. BZ(1433191)
- Allow init noatsecure for gssd and gssproxy
- Allow staff user to read fwupd_cache_t files
- Remove typo bugs
- Remove /proc <<none>> from fedora policy, it's no longer necessary - Merge pull request #4 from lslebodn/sssd_socket_activated
- Remove /proc <<none>> from fedora policy, it's no longer necessary
- Allow iptables get list of kernel modules
- Allow unconfined_domain_type to enable/disable transient unit
- Add interfaces init_enable_transient_unit() and init_disable_transient_unit
- Revert "Allow sshd setcap capability. This is needed due to latest changes in sshd"
- Label sysroot dir under ostree as root_t - Put tomcat_t back in unconfined domains for now. BZ(1436434) - Make fwupd_var_lib_t type mountpoint. BZ(1429341)
- Remove tomcat_t domain from unconfined domains
- Create new boolean: sanlock_enable_home_dirs()
- Allow mdadm_t domain to re� x��������������,����� X � '8 �������M�����! �$ y ���������������� �! �! �! � ge_var_dirs() interface.
- Allow pcp_pmlogger to exec bin_t BZ(#1258698)
- Allow spamd to read system network state. BZ(1260234)
- Allow fcoemon to create netlink scsitransport sockets BZ(#1260882)
- Allow networkmanager to create networkmanager_var_lib_t files. BZ(1270201)
- Allow systemd-networkd to read XEN state for Xen hypervisor. BZ(#1269916)
- Add fs_read_xenfs_files() interface.
- Allow systemd_machined_t to send dbus msgs to all users and read/write /dev/ptmx to make 'machinectl shell' working correctly.
- Allow systemd running as init_t to override the default context for key creation. BZ(#1267850) - Allow pcp_pmlogger to read system state. BZ(1258699)
- Allow cupsd to connect on socket. BZ(1258089)
- Allow named to bind on ephemeral ports. BZ(#1259766)
- Allow iscsid create netlink iscsid sockets.
- We need allow connect to xserver for all sandbox_x domain because we have one type for all sandbox processes.
- Allow NetworkManager_t and policykit_t read access to systemd-machined pid files. #1255305
- Add missing labeling for /usr/libexec/abrt-hook-ccpp as a part of #1245477 and #1242467 bugs.
- Allow search dirs in sysfs types in kernel_read_security_state.
- Fix kernel_read_security_state interface that source domain of this interface can search sysctl_fs_t dirs. - Update modules_filetrans_named_content() to make sure we don't get modules_dep labeling by filename transitions.
- Remove /usr/lib/modules/[^/]+/modules\..+ labeling
- Add modutils_read_module_deps_files() which is called from files_read_kernel_modules() for module deps which are still labeled as modules_dep_t.
- Remove modules_dep_t labeling for kernel module deps. depmod is a symlink to kmod which is labeled as insmod_exec_t which handles modules_object_t and there is no transition to modules_dep_t. Also some of these module deps are placed by cpio during install/update of kernel package. - Allow acpid to attempt to connect to the Linux kernel via generic netlink socket.
- Clean up pkcs11proxyd policy.
- We need to require sandbox_web_type attribute in sandbox_x_domain_template().
- Revert "depmod is a symlink to insmod so it runs as insmod_t. It causes that dep kernel modules files are not created with the correct labeling modules_dep_t. This fix adds filenamtrans rules for insmod_t."
- depmod is a symlink to insmod so it runs as insmod_t. It causes that dep kernel modules files are not created with the correct labeling modules_dep_t. This fix adds filenamtrans rules for insmod_t.
- Update files_read_kernel_modules() to contain modutils_read_module_deps() calling because module deps labeling has been updated and it allows to avoid regressions.
- Update modules_filetrans_named_content() interface to cover more modules.* files.
- New policy for systemd-machined. #1255305
- In Rawhide/F24, we added pam_selinux.so support for systemd-users to have user sessions running under correct SELinux labeling. It also supports another new feature with systemd+dbus and we have sessions dbuses running with the correct labeling - unconfined_dbus_t for example.
- Allow systemd-logind read access to efivarfs - Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables). #1244973, #1267207 (partial solution)
- Merge pull request #42 from vmojzis/rawhide-base
- Add interface to allow reading files in efivarfs - contains Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables) - Add few rules related to new policy for pkcs11proxyd
- Added new policy for pkcs11proxyd daemon
- We need to require sandbox_web_type attribute in sandbox_x_domain_template().
- Dontaudit abrt_t to rw lvm_lock_t dir.
- Allow abrt_d domain to write to kernel msg device.
- Add interface lvm_dontaudit_rw_lock_dir()
- Merge pull request #35 from lkundrak/lr-libreswan - Update config.tgz to reflect changes in default context for SELinux users related to pam_selinux.so which is now used in systemd-users.
- Added support for permissive domains
- Allow rpcbind_t domain to change file owner and group
- rpm-ostree has a daemon mode now and � x�������������0 ����� X � &8 ������X� zQ �$ j ���������������� zQ yQ {Q � 6 0ddf8ded6970ed08a91f15348d5a116bff0ee712ee54ee9ee6b7f277cd674587 93e94116c43c88bdf308e504d13829b680130a26b8b459b0884b30caf8693608 683c7c2678d0c6afa8a362699dcc905408cf088108922d9ad9a2cbc98b66eba4 fcdb7de2f013e612739e8fd5b0536fb1abbbf8e1cb0b56339bdee6e10017722d 9e7290c092a5a0a3d02bb75541f237e4239de9b2aa9d37d70e1d869b2377f695 dccffe680abc7a92d0722006b2792c0bbd0861ee796d5ff4c55259a79b37e380 fd0b458c1a19428ac11dcda83570cb6dd817a731b650756aed5ab8c079482a75 f564e171bb208b81313e51f55fed7cf1c789c5d6592d067b1409cbea4ac93857 d9a41827e2c2aa5005608ee4f1a80de1cdd72805a675358187c44b41d05b69a7 f9051decc0451d8f64d4c44fc874867ad8d4b7a6501f867bc69ba1911f3e55ba f8aa7dc90b3e3f5c024e5814bce2fe09bd002c915ceec2a88194137a45162579 ae0e7aa3b8b7c24d47bd8ecec457345865c7947a31df2749fa2d499ccd0fbd10 f8d1254db8868dcfc487a1b3ec702ce961335fa477aa1175095f0d430c1f3d89 3996431781ef732696a34f82dbb9902b12e80ad9e52dd133d36fda30901c6b0c e931f02dad66d3c2e5365874d09d3f7c1af30cdf7170c7c41c470dde545ea7b1 a304897dd60c099f4a7024c98356f662015c1b9bbbffbc9e5c2b28680075400a 0a6ec3b3b84df2d4a5bb271bba3bbb5381cdfc8ba9dbcf26204ca125515d7d4a b9a59ceaab478e9251bbc75e48a2f117dfc5bcafc5fef91d9b61ae90da57af3e 6d92a8e2a14bdaa27fe8dfbf6e011a36a1eb125c38fda4c1cd0c3c2ff09c74d8 e0907a18f6180cbe79f732ad0245155760353b223b3376617c96781709e1df36 fb868088121e6450b377d9eee54f36282858396c8e48af4ed7fd2f93f9bf8e33 7e05872811c6a08a6c891d25de8c2ed5493f032cbe75ef5ff0f995ea27b2d429 5dc43ad9cacd3f53e07616a5708b23609aef6ef96a4c70d4e611a8b4a1164393 acf847d1341f9e2b73d6a7d908ea2da124f369352ed3c5333af28c436be377f2 5a52068259111f03572fe3b5a7388498de1b1630d7abf0f5bb547c545583d29f 385ec765f156254d19fe851a6864869979ed32b8bdf46899344dd5e24221db21 451c8fa9458993000f50455ace1acd6ae4152b1f0ec17ad39e91621bbd6bd6f8 b3b55b8fdb041a068531ace5f575757d6d5e85685f61658c634800da1df66b27 172ded62584b6c102ece2fa14fc73ddf934d9fa2990160448b0de000adc79abf b6139afe8932ad9fef74bf585555d0826f011cd853bed7f39791cd2629bf4048 9762ecc29522803db85b25bf5b993eca6f7cf4c2312fd373ab8a5d52f075f30d c47014c9f28a9385b739eed9f5a8966a25922a52844a3f5b21e8e019187b4e6b 40e518207bb96d6062a289133e0737540ef606f761f6a7e36ac5267292d800e7 4fcfeaaf01b671aa11d6b34df4bd892950a458f8ab9d71ed1f15ada036627928 5186a92dc8110764a9c176a3b3cd7233af0477e810d7c40dbfd5c3d1d3fc59ed a78be59df309819b7a14dd995ec42a4fad5b404660f6fe5cd400ffe48e1f0050 61451a88355a836c43bd7b1b4aa2f23edf189995fdda564b9f249f90774670e0 2592ff29ad93a4f41f8f9c8bee1a986a8977ab110a6f9fd7f29668af299a2582 ea71f6924486a44fa840a664c0a4e46b2b526ab94e622af637df3a59720290f6 47f60600081fa0c87981bc4f2b1bf51001497e6f32353a26d5c0cdd0760e1fca a8b27b2c9aced41fe5e43273a8bc7436784fb6babcdd4c85cc5d9df655535100 67c50b6045d4278a7a7ad77ef5bb03bd64ec0693cbf19cd1d94b269f2bec56f7 46b049191b85c9a75d72a9f07ff45ecf5e0ad7d7aee29743b8f34baee34a884d 77a20af98dc78981b614f4dad2b6272f09fcaed7bdce2a830c20954a25a81482 0aab72355e18a2b9f19c216a5399317aa6608c9b41a46c99d569e90a3a2879c4 22f2c925fac3f45be7c699cf521434f4f6bf5ddfbabff984cc3ff074db1ad6ee 258da9fcc8adbb6cf5ad85aa1e003625afeac105796e080cb0589c0691b1b174 a6d960a8964ac762c48bb5997e390b8c4e73f182d07502ee5101038e70320181 84974b70f4b1ec9c3a6651f7a9a24e71668c95f0fb2d9155e1a6b192c8b71145 1ad2338e58a395209682e80b6df66cc871060808ef260113f6d0021426b9c078 bd0f768609bb588e292e4086a6466228ab79e3a5f72ea4cb8a70fe22b3ea9758 4a6718f830d8b24a4bd1f3338be7d1fd22c4fcb186e310da0f278e31b6187b9a 24e46c3fcd65fc5ee9b745165d9c81dc8a69239083b3315e887fb7f9456b747e 991f55ee3f69e895704f3ffd0e2f1147d43c283d072e15811a9e7df891fe07d7 2dc1501845476119b4219215496ffab8b35cfcddaf169a9074c3f42d294794f4 c151422e0ff70c1bde51e1066eb49b61e094c4f521b8410a6a48edbef28f09ec fa1a2c578bc21793f90682ce0ac34d6cb77a81ffbd1d1b42870490b5fc531b3b bf0a984dc02b9796f52412f8fdc11f6e3addc4d049f82725700e10905be156d2 aec9d3507dedf360e800031d95785f38608e23d0cad519a3ba2b01008c331dc8 69b3db3013eef5e79a2f489bb9ff4aba101a7bacddca31ca913d39b55869e57e 24e5014ea928d5a24b9cbd35cce3d5634a29c995867b58dd0ffdf1cff3cdb2a4 80f21fff9f0eb8370435b162065ed281fa2e2e78394a9d9486f3daac36c131df e1039e38f5e6b782e0dda408473646d485cc9b� x�������������� ����� X � J'8 h�������P���� " �$ ���������������� " " " � amscan to read /etc files
- Allow bcfg2 to bind cyphesis port
- heartbeat should be run as rgmanager_t instead of corosync_t
- Add labeling for /etc/openldap/certs
- Add labeling for /opt/sartest directory
- Make crontab_t as userdom home reader
- Allow tmpreaper to list admin_home dir
- Add defition for imap_0 replay cache file
- Add support for gitolite3
- Allow virsh_t to send syslog messages
- allow domains that can read samba content to be able to list the directories also
- Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd
- Separate out sandbox from sandboxX policy so we can disable it by default
- Run dmeventd as lvm_t
- Mounting on any directory requires setattr and write permissions
- Fix use_nfs_home_dirs() boolean
- New labels for pam_krb5
- Allow init and initrc domains to sys_ptrace since this is needed to look at processes not owned by uid 0
- Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd - Separate sandbox policy into sandbox and sandboxX, and disable sandbox by default on fresh installs
- Allow domains that can read etc_t to read etc_runtime_t
- Allow all domains to use inherited tmpfiles - Allow realmd to read resolv.conf
- Add pegasus_cache_t type
- Label /usr/sbin/fence_virtd as virsh_exec_t
- Add policy for pkcsslotd
- Add support for cpglockd
- Allow polkit-agent-helper to read system-auth-ac
- telepathy-idle wants to read gschemas.compiled
- Allow plymouthd to getattr on fs_t
- Add slpd policy
- Allow ksysguardproces to read/write config_usr_t - Fix labeling substitution so rpm will label /lib/systemd content correctly - Add file name transitions for ttyACM0
- spice-vdagent(d)'s are going to log over to syslog
- Add sensord policy
- Add more fixes for passenger policy related to puppet
- Allow wdmd to create wdmd_tmpfs_t
- Fix labeling for /var/run/cachefilesd\.pid
- Add thumb_tmpfs_t files type - Allow svirt domains to manage the network since this is containerized
- Allow svirt_lxc_net_t to send audit messages - Make "snmpwalk -mREDHAT-CLUSTER-MIB ...." working
- Allow dlm_controld to execute dlm_stonith labeled as bin_t
- Allow GFS2 working on F17
- Abrt needs to execute dmesg
- Allow jockey to list the contents of modeprobe.d
- Add policy for lightsquid as squid_cron_t
- Mailscanner is creating files and directories in /tmp
- dmesg is now reading /dev/kmsg
- Allow xserver to communicate with secure_firmware
- Allow fsadm tools (fsck) to read /run/mount contnet
- Allow sysadm types to read /dev/kmsg
- - Allow postfix, sssd, rpcd to block_suspend
- udev seems to need secure_firmware capability
- Allow virtd to send dbus messages to firewalld so it can configure the firewall - Fix labeling of content in /run created by virsh_t
- Allow condor domains to read kernel sysctls
- Allow condor_master to connect to amqp
- Allow thumb drives to create shared memory and semaphores
- Allow abrt to read mozilla_plugin config files
- Add labels for lightsquid
- Default files in /opt and /usr that end in .cgi as httpd_sys_script_t, allow
- dovecot_auth_t uses ldap for user auth
- Allow domains that can read dhcp_etc_t to read lnk_files
- Add more then one watchdog device
- Allow useradd_t to manage etc_t files so it can rename it and edit them
- Fix invalid class dir should be fifo_file
- Move /run/blkid to fsadm and make sure labeling is correct - Fix bogus regex found by eparis
- Fix manage run interface since lvm needs more access
- syslogd is searching cgroups directory
- Fixes to allow virt-sandbox-service to manage lxc var run content - Fix Boolean settings
- Add new libjavascriptcoregtk as textrel_shlib_t
- Allow xdm_t to create xdm_home_t directories
- Additional access required for systemd
- Dontaudit mozilla_plugin attempts to ipc_lock
- Allow tmpreaper to delete unlabeled files
- Eliminate screen_tmp_t and allow it to manage user_tmp_t
- Dontaudit mozilla_plugin_config_t to append to leaked file descriptors
- Allow web plugins to connect to the asterisk ports
- Condor will recreate the lock directory if it does not exist� x������������� ������ X � Z'8 p����H����." �$ > ���������������� ." -" /" � kerberos_connect_524() interface calling
- Combine kerberos_master_port_t and kerberos_port_t
- systemd has setup /dev/kmsg as stderr for apps it executes
- Need these access so that init can impersonate sockets on unix_dgram_socket - Remove some unconfined domains
- Remove permissive domains
- Add policy-term.patch from Dan - Fix multiple specification for boot.log
- devicekit leaks file descriptors to setfiles_t
- Change all all_nodes to generic_node and all_if to generic_if
- Should not use deprecated interface
- Switch from using all_nodes to generic_node and from all_if to generic_if
- Add support for xfce4-notifyd
- Fix file context to show several labels as SystemHigh
- seunshare needs to be able to mounton nfs/cifs/fusefs homedirs
- Add etc_runtime_t label for /etc/securetty
- Fixes to allow xdm_t to start gkeyringd_USERTYPE_t directly
- login.krb needs to be able to write user_tmp_t
- dirsrv needs to bind to port 7390 for dogtag
- Fix a bug in gpg policy
- gpg sends audit messages
- Allow qpid to manage matahari files - Initial policy for matahari
- Add dev_read_watchdog
- Allow clamd to connect clamd port
- Add support for kcmdatetimehelper
- Allow shutdown to setrlimit and sys_nice
- Allow systemd_passwd to talk to /dev/log before udev or syslog is running
- Purge chr_file and blk files on /tmp
- Fixes for pads
- Fixes for piranha-pulse
- gpg_t needs to be able to encyprt anything owned by the user - mozilla_plugin_tmp_t needs to be treated as user tmp files
- More dontaudits of writes from readahead
- Dontaudit readahead_t file_type:dir write, to cover up kernel bug
- systemd_tmpfiles needs to relabel faillog directory as well as the file
- Allow hostname and consoletype to r/w inherited initrc_tmp_t files handline hostname >> /tmp/myhost - Add policykit fixes from Tim Waugh
- dontaudit sandbox domains sandbox_file_t:dir mounton
- Add new dontaudit rules for sysadm_dbusd_t
- Change label for /var/run/faillock
* other fixes which relate with this change - Update to upstream
- Fixes for telepathy
- Add port defition for ssdp port
- add policy for /bin/systemd-notify from Dan
- Mount command requires users read mount_var_run_t
- colord needs to read konject_uevent_socket
- User domains connect to the gkeyring socket
- Add colord policy and allow user_t and staff_t to dbus chat with it
- Add lvm_exec_t label for kpartx
- Dontaudit reading the mail_spool_t link from sandbox -X
- systemd is creating sockets in avahi_var_run and system_dbusd_var_run - gpg_t needs to talk to gnome-keyring
- nscd wants to read /usr/tmp->/var/tmp to generate randomziation in unixchkpwd
- enforce MCS labeling on nodes
- Allow arpwatch to read meminfo
- Allow gnomeclock to send itself signals
- init relabels /dev/.udev files on boot
- gkeyringd has to transition back to staff_t when it runs commands in bin_t or shell_exec_t
- nautilus checks access on /media directory before mounting usb sticks, dontaudit access_check on mnt_t
- dnsmasq can run as a dbus service, needs acquire service
- mysql_admin should be allowed to connect to mysql service
- virt creates monitor sockets in the users home dir - Allow usbhid-ups to read hardware state information
- systemd-tmpfiles has moved
- Allo cgroup to sys_tty_config
- For some reason prelink is attempting to read gconf settings
- Add allow_daemons_use_tcp_wrapper boolean
- Add label for ~/.cache/wocky to make telepathy work in enforcing mode
- Add label for char devices /dev/dasd*
- Fix for apache_role
- Allow amavis to talk to nslcd
- allow all sandbox to read selinux poilcy config files
- Allow cluster domains to use the system bus and send each other dbus messages - Update to upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - Update to ref policy
- cgred needs chown capability
- Add /dev/crash crash_dev_t
- systemd-readahead wants to use fanotify which means readahead_t needs sys_admin capability - New labeling for postfmulti #675654
- dontaudit xdm_t listing noxattr file systems
- dovecot-auth needs to be able to connect to mysqld via � x�������������������� X � �&8 ��������y���� �$ ] ���������������� � � � � make the CLI more compatible with Yum's repoquery. (Ales Kozumplik)
- repoquery: some cleanups in the plugin and the tests. (Ales Kozumplik)
- rename: query->repoquery. (RhBug:1045078) (Ales Kozumplik)
- add pylint script for dnf-core-plugins. (Ales Kozumplik)
- tests: repoquery: fix unit tests. (Ales Kozumplik)
- add query tool (Tim Lauridsen) - build: add sphinx to build requires. (Ales Kozumplik)
- doc: packaging: add license block to each .rst. (Ales Kozumplik)
- tests: stray print() in test_download.py. (Ales Kozumplik)
- doc: put each synopsis on new line (Miroslav Suchý)
- doc: cosmetic: project name in the documentation. (Ales Kozumplik)
- doc: cleanups, form, style. (Ales Kozumplik)
- doc: add documentation and man pages (Tim Lauridsen)
- copr: remove repofile if failed to enable repo (Igor Gnatenko)
- copr: honor -y and --assumeno (Miroslav Suchý)
- py3: absolute imports and unicode literals everywhere. (Ales Kozumplik)
- debuginfo-install: doesn't install latest pkgs (RhBug: 1096507) (Igor Gnatenko)
- debuginfo-install: fix description (Igor Gnatenko)
- debuginfo-install: fix logger debug messages (Igor Gnatenko)
- build: install the download plugin (Tim Lauridsen)
- download: update the download plugin with --source, --destdir & --resolve options (Tim Lauridsen)
- Add a special ArgumentParser to parsing plugin cmd arguments and options (Tim Lauridsen)
- tests: add __init__.py to make tests a module and use abs imports (Tim Lauridsen)
- build: simplify plugins/CMakeLists.txt. (Ales Kozumplik)
- dnf.cli.commands.err_mini_usage() changed name. (Ales Kozumplik)
- kickstart: do not include kickstart errors into own messages. (Radek Holy) - build: gettext is also needed as a buildreq (Tim Lauridsen)
- copr: use usage & summary class attributes, to work with dnf 0.5.0 use shared lib dnfpluginscore for translation wrapp
- build: add cmake as buildreq (Tim Lauridsen)
- generate-completion-cache: fix shared lib name (Tim Lauridsen)
- make .spec use gitrev in the source file add helper script for building source archive (Tim Lauridsen)
- Added transifex config (Tim Lauridsen)
- tests: use cli logger in kickstart test (Tim Lauridsen)
- Added translation .pot file Added da translation files so we have something to build & install (Tim Lauridsen)
- Added CMake files Added CMake build to .spec & and added translation files handling (Tim Lauridsen)
- make plugins use shared lib added translation wrappers added missing usage & summary PEP8 fixes (Tim Lauridsen)
- added shared dnfpluginscore lib (Tim Lauridsen)
- copr: C:139, 0: Unnecessary parens after 'print' keyword (superfluous-parens) (Miroslav Suchý)
- copr: W: 23, 0: Unused import gettext (unused-import) (Miroslav Suchý)
- copr: C: 33, 0: No space allowed before : (Miroslav Suchý)
- copr: some python3 migration (Miroslav Suchý)
- copr: get rid of dnf i18n imports (Miroslav Suchý)
- remove dnf.yum.i18n imports. (Ales Kozumplik)
- copr: Fix the playground upgrade command. (Tadej Janež)
- copr: implement search function (Igor Gnatenko)
- better format output (Miroslav Suchý)
- implement playground plugin (Miroslav Suchý)
- move removing of repo into method (Miroslav Suchý)
- check root only for actions which really need root (Miroslav Suchý)
- move repo downloading into separate method (Miroslav Suchý)
- define copr url as class attribute (Miroslav Suchý)
- better wording of warning (Miroslav Suchý)
- move question to function argument (Miroslav Suchý)
- move guessing chroot into function (Miroslav Suchý)
- copr: use common lib use Command.usage & summary cleanup imports & PEP8 fixes (Tim Lauridsen)
- builddep: added usage & summary & fix some PEP8 issues (Tim Lauridsen)
- kickstart: use new public Command.usage & Command.summary api (Tim Lauridsen)
- fix resource leak in builddep.py. (Ales Kozumplik)
- refactor: command plugins use demands mechanism. (Ales Kozumplik)
- noroot: move to the new 'demands' mechanism to check the need of root. (Ales Kozumplik)
- tests: fix locale independence. (Radek Holy)
- [copr] correctly specify c� x������������������� X � Q'8 8I������@�����%" �$ 5 ���������������� %" $" &" � all getcap
- wdmd seems to get a random chown capability check that it does not need
- Allow vhostmd to read kernel sysctls - Allow chronyd to read unix
- Allow hpfax to read /etc/passwd
- Add support matahari vios-proxy-* apps and add virtd_exec_t label for them
- Allow rpcd to read quota_db_t
- Update to man pages to match latest policy
- Fix bug in jockey interface for sepolgen-ifgen
- Add initial svirt_prot_exec_t policy - More fixes for systemd from Dan Walsh - Add a new type for /etc/firewalld and allow firewalld to write to this directory
- Add definition for ~/Maildir, and allow mail deliver domains to write there
- Allow polipo to run from a cron job
- Allow rtkit to schedule wine processes
- Allow mozilla_plugin_t to acquire a bug, and allow it to transition gnome content in the home dir to the proper label
- Allow users domains to send signals to consolehelper domains - More fixes for boinc policy
- Allow polipo domain to create its own cache dir and pid file
- Add systemctl support to httpd domain
- Add systemctl support to polipo, allow NetworkManager to manage the service
- Add policy for jockey-backend
- Add support for motion daemon which is now covered by zoneminder policy
- Allow colord to read/write motion tmpfs
- Allow vnstat to search through var_lib_t directories
- Stop transitioning to quota_t, from init an sysadm_t - Add svirt_lxc_file_t as a customizable type - Add additional fixes for icmp nagios plugin
- Allow cron jobs to open fifo_files from cron, since service script opens /dev/stdin
- Add certmonger_unconfined_exec_t
- Make sure tap22 device is created with the correct label
- Allow staff users to read systemd unit files
- Merge in previously built policy
- Arpwatch needs to be able to start netlink sockets in order to start
- Allow cgred_t to sys_ptrace to look at other DAC Processes - Back port some of the access that was allowed in nsplugin_t
- Add definitiona for couchdb ports
- Allow nagios to use inherited users ttys
- Add git support for mock
- Allow inetd to use rdate port
- Add own type for rdate port
- Allow samba to act as a portmapper
- Dontaudit chrome_sandbox attempts to getattr on chr_files in /dev
- New fixes needed for samba4
- Allow apps that use lib_t to read lib_t symlinks - Add policy for nove-cert
- Add labeling for nova-openstack systemd unit files
- Add policy for keystoke - Fix man pages fro domains
- Add man pages for SELinux users and roles
- Add storage_dev_filetrans_named_fixed_disk() and use it for smartmon
- Add policy for matahari-rpcd
- nfsd executes mount command on restart
- Matahari domains execute renice and setsched
- Dontaudit leaked tty in mozilla_plugin_config
- mailman is changing to a per instance naming
- Add 7600 and 4447 as jboss_management ports
- Add fixes for nagios event handlers
- Label httpd.event as httpd_exec_t, it is an apache daemon - Add labeling for /var/spool/postfix/dev/log
- NM reads sysctl.conf
- Iscsi log file context specification fix
- Allow mozilla plugins to send dbus messages to user domains that transition to it
- Allow mysql to read the passwd file
- Allow mozilla_plugin_t to create mozilla home dirs in user homedir
- Allow deltacloud to read kernel sysctl
- Allow postgresql_t to connectto itselfAllow postgresql_t to connectto itself
- Allow postgresql_t to connectto itself
- Add login_userdomain attribute for users which can log in using terminal - Allow sysadm_u to reach system_r by default #784011
- Allow nagios plugins to use inherited user terminals
- Razor labeling is not used no longer
- Add systemd support for matahari
- Add port_types to man page, move booleans to the top, fix some english
- Add support for matahari-sysconfig-console
- Clean up matahari.fc
- Fix matahari_admin() interfac
- Add labels for/etc/ssh/ssh_host_*.pub keys - Allow ksysguardproces to send system log msgs
- Allow boinc setpgid and signull
- Allow xdm_t to sys_ptrace to run pidof command
- Allow smtpd_t to manage spool files/directories and symbolic links
- Add labeling for jetty
- Needed changes to get unbound/� x�������������������� X � �&8 ��������h��������! �$ * ���������������� �! �! �! � state of user domains
Resolves: rhbz#1797899
- Allow cockpit_ws_t get attributes of fs_t filesystems
Resolves: rhbz#1979182 - Add the unconfined_dgram_send() interface
Resolves: rhbz#1978562
- Change dev_getattr_infiniband_dev() to use getattr_chr_files_pattern()
Resolves: rhbz#1936522
- Add checkpoint_restore cap2 capability
Resolves: rhbz#1973325
- Allow fcoemon talk with unconfined user over unix domain datagram socket
Resolves: rhbz#1978562
- Allow hostapd bind UDP sockets to the dhcpd port
Resolves: rhbz#1977676
- Allow NetworkManager read and write z90crypt device
Resolves: rhbz#1938203
- Allow abrt_domain read and write z90crypt device
Resolves: rhbz#1938203
- Label /usr/lib/pcs/pcs_snmp_agent with cluster_exec_t
Resolves: rhbz#1937111
- Allow mdadm read iscsi pid files
Resolves: rhbz#1924716 - Allow dyntransition from sshd_t to unconfined_t
Resolves: rhbz#1947841 - Removed adding to attribute unpriv_userdomain from userdom_unpriv_type template
Resolves: rhbz#1947841
- Allow transition from xdm domain to unconfined_t domain.
Resolves: rhbz#1947841
- Allow nftables read NetworkManager unnamed pipes
Resolves: rhbz#1967857
- Create a policy for systemd-journal-upload
Resolves: rhbz#1913414
- Add dev_getattr_infiniband_dev() interface.
Resolves: rhbz#1972522
- Allow tcpdump and nmap get attributes of infiniband_device_t
Resolves: rhbz#1972522
- Allow fcoemon create sysfs files
Resolves: rhbz#1978562
- Allow nftables read NetworkManager unnamed pipes
Resolves: rhbz#1967857
- Allow radius map its library files
Resolves: rhbz#1854650
- Allow arpwatch get attributes of infiniband_device_t devices
Resolves: rhbz#1936522 - Allow systemd-sleep get attributes of fixed disk device nodes
Resolves: rhbz#1931460
- Allow systemd-sleep create hardware state information files
Resolves: rhbz#1968610
- virtiofs supports Xattrs and SELinux
Resolves: rhbz#1899703
- Label 4460/tcp port as ntske_port_t
Resolves: rhbz#1961207
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
Resolves: rhbz#1961207
- Allow chronyd_t to accept and make NTS-KE connections
Resolves: rhbz#1961207
- Dontaudit NetworkManager write to initrc_tmp_t pipes
Resolves: rhbz#1963162
- Allow logrotate rotate container log files
Resolves: rhbz#1892170
- Allow rhsmd read process state of all domains and kernel threads
Resolves: rhbz#1878020 - Allow nmap create and use rdma socket
Resolves: rhbz#1844530
- Label /.k5identity file allow read of this file to rpc.gssd
Resolves: rhbz#1951093
- Label /var/lib/kdump with kdump_var_lib_t
Resolves: rhbz#1965985
- Label /run/libvirt/common with virt_common_var_run_t
Resolves: rhbz#1966842 - Allow using opencryptoki for ipsec
Resolves: rhbz#1894132
- Remove all kernel_getattr_proc() interface calls
Resolves: rhbz#1967125
- Allow domain stat /proc filesystem
Resolves: rhbz#1967125
- Allow pkcs-slotd create and use netlink_kobject_uevent_socket
Resolves: rhbz#1969725
- Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
Resolves: rhbz#1894132
- Allow using opencryptoki for certmonger
Resolves: rhbz#1894132
- install_t: Allow NoNewPriv transition from systemd
Resolves: rhbz#1955547
- Remove all kernel_getattr_proc() interface calls
Resolves: rhbz#1967125
- Allow httpd_sys_script_t read, write, and map hugetlbfs files
Resolves: rhbz#1966133 - Add /var/usrlocal equivalency rule
Resolves: rhbz#1943381
- Label '/var/usrlocal/(.*/)?sbin(/.*)?' as bin_t
Resolves: rhbz#1943381
- Label /dev/trng with random_device_t
Resolves: rhbz#1934483
- Allow systemd-sleep transition to sysstat_t
Resolves: rhbz#1927551
- Allow systemd-sleep transition to tlp_t
Resolves: rhbz#1927551
- Allow systemd-sleep transition to unconfined_service_t on bin_t executables
Resolves: rhbz#1927551
- Allow systemd-sleep execute generic programs
Resolves: rhbz#1948070
- Allow systemd-sleep execute shell
Resolves: rhbz#1954358
- Allow nsswitch_domain read init pid lnk_files
Resolves: rhbz#1860924
- Introduce logging_syslogd_list_non_security_dirs tunable
Resolves: rhbz#1823669
- Add sysstat_domtrans() to� x������������� ������ X � �&8 ��������pX������� �$ @ ���������������� � � � � l Gompa (ニール・ゴンパ)) - updated: release notes for 0.1.13 (Jan Silhan)
- Remove kickstart plugin from core plugins (Neal Gompa
(ニール・ゴンパ))
- read file as utf-8 in Py3 (RhBug:1267808) (Miroslav Suchý)
- playground: check if repo actually exists for our version of OS (Miroslav
Suchý)
- add Catalan (Robert Antoni Buj Gelonch)
- repoquery: Fix UnicodeEncodeError with --info (RhBug:1264125) (Jaroslav
Mracek)
- lookup builddeps in source package for given package name (RhBug:1265622)
(Michael Mraka)
- functions moved to library (Michael Mraka)
- functions to return name of source and debuginfo package (Michael Mraka)
- try <name>-debuginfo first then <srcname>-debuginfo (RhBug:1159614) (Michael
Mraka)
- Automatic commit of package [dnf-plugins-core] release [0.1.12-2]. (Michal
Luscon)
- doc: release notes 0.1.12 (Michal Luscon) - add python2-dnf requirements - repoquery: add globbing support to whatrequires/whatprovides.
(RhBug:1249073) (Valentina Mukhamedzhanova)
- needs_restarting: Rewrite a warning message (Wieland Hoffmann)
- Remove extra quotation mark in comment (Alexander Todorov) - dnf donwload checks for duplicate packages (rhBug:1250114) (Adam Salih)
- Extend repoquery --arch option. You can now pass multiple archs separated by
commas (RhBug:1186381) (Adam Salih)
- download plugin now prints not valid packages (RhBug:1225784) (Adam Salih)
- correct typo (Adam Salih)
- dnf now accepts more than one key (RhBug:1233728) (Adam Salih)
- description should be print unwrapped (Adam Salih)
- alternative to pkgnarrow (RhBug:1199601) (Adam Salih)
- sort output alphabetically, tree accepts switches --enhances --suggests
--provides --suplements --recommends (RhBug:1156778) (Adam Salih) - generate_completion_cache: use list for each insert (fixes regression
introduced in e020c96) (Igor Gnatenko)
- generate_completion_cache: store NEVRA insted of NA (RhBug:1226663) (Igor
Gnatenko)
- repoquery: weak deps queries (RhBug:1184930) (Michal Luscon)
- builddep requires an argument (Michael Mraka)
- disable c++ checks in rpmbuild (Michael Mraka)
- path may contain unicode (RhBug:1234099) (Michael Mraka)
- fail if no package match (RhBug:1241126) (Michael Mraka)
- make --spec and --srpm mutually exclusive (Michael Mraka)
- handle error message in python3 (RhBug:1218299) (Michael Mraka)
- options to recognize spec/srpm files (RhBug:1241135) (Michael Mraka)
- copr: set chmod to rw-r--r-- on repo files (Miroslav Suchý)
- [copr] refactor duplicated lines (Jakub Kadlčík)
- [copr] allow utf-8 user input (RhBug:1244125) (Jakub Kadlčík)
- [copr] fix regression with handling `search` and `list` subcommands (Valentin
Gologuzov)
- [copr] terminate execution when failed to parse project name (Valentin
Gologuzov)
- [copr] unused import (Valentin Gologuzov)
- [copr] subcommand `disable` now only set `enabled=0`, repo file could be
deleted by new subcommand `remove` (Valentin Gologuzov) - repoquery: add srpm option (RhBug:1186382) (Vladan Kudlac)
- create repo files readable by users (RhBug:1228693) (Michael Mraka)
- copr: use librepo instead of python-request (Miroslav Suchý)
- --tree now works with --conflicts --obsoletes --requires and --whatrequires
(RhBug:1128424) (RhBug:1186689) (Adam Salih)
- url for copr repos changed (RhBug:1227190) (Miroslav Suchý)
- repoquery: fixed conflicts package format (Adam Salih)
- document that globs can be used in dnf config-manager (Michael Mraka) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - spec: fix an upgrade path from dnf-plugins-core <= 0.1.5 (Radek Holy) - doc: release notes dnf-plugins-core-0.1.7 (Michal Luscon)
- spec: fix Conflicts of the new plugins (Radek Holy)
- spec: allow DNF 1.x.x (Radek Holy)
- AUTHORS: filled in missing email address (Jan Silhan)
- download: enabling source repos when desired only (Jan Silhan)
- download: using enable_source_repos from lib (Jan Silhan)
- lib: inform user when enabling disabled repo (Jan Silhan)
- AUTHORS: made 2 categories (Jan Silhan)
- fixed� x�������������x������ X � �'8 xx�������W" �$ G ���������������� W" V" X" � es/100/freqset/ /var/lib/selinux/targeted/active/modules/100/fstools/ /var/lib/selinux/targeted/active/modules/100/ftp/ /var/lib/selinux/targeted/active/modules/100/fwupd/ /var/lib/selinux/targeted/active/modules/100/games/ /var/lib/selinux/targeted/active/modules/100/gdomap/ /var/lib/selinux/targeted/active/modules/100/geoclue/ /var/lib/selinux/targeted/active/modules/100/getty/ /var/lib/selinux/targeted/active/modules/100/git/ /var/lib/selinux/targeted/active/modules/100/gitosis/ /var/lib/selinux/targeted/active/modules/100/glance/ /var/lib/selinux/targeted/active/modules/100/gnome/ /var/lib/selinux/targeted/active/modules/100/gpg/ /var/lib/selinux/targeted/active/modules/100/gpm/ /var/lib/selinux/targeted/active/modules/100/gpsd/ /var/lib/selinux/targeted/active/modules/100/gssproxy/ /var/lib/selinux/targeted/active/modules/100/guest/ /var/lib/selinux/targeted/active/modules/100/hddtemp/ /var/lib/selinux/targeted/active/modules/100/hostapd/ /var/lib/selinux/targeted/active/modules/100/hostname/ /var/lib/selinux/targeted/active/modules/100/hsqldb/ /var/lib/selinux/targeted/active/modules/100/hwloc/ /var/lib/selinux/targeted/active/modules/100/hypervkvp/ /var/lib/selinux/targeted/active/modules/100/ibacm/ /var/lib/selinux/targeted/active/modules/100/icecast/ /var/lib/selinux/targeted/active/modules/100/inetd/ /var/lib/selinux/targeted/active/modules/100/init/ /var/lib/selinux/targeted/active/modules/100/inn/ /var/lib/selinux/targeted/active/modules/100/insights_client/ /var/lib/selinux/targeted/active/modules/100/iodine/ /var/lib/selinux/targeted/active/modules/100/iotop/ /var/lib/selinux/targeted/active/modules/100/ipmievd/ /var/lib/selinux/targeted/active/modules/100/ipsec/ /var/lib/selinux/targeted/active/modules/100/iptables/ /var/lib/selinux/targeted/active/modules/100/irc/ /var/lib/selinux/targeted/active/modules/100/irqbalance/ /var/lib/selinux/targeted/active/modules/100/iscsi/ /var/lib/selinux/targeted/active/modules/100/isns/ /var/lib/selinux/targeted/active/modules/100/jabber/ /var/lib/selinux/targeted/active/modules/100/jetty/ /var/lib/selinux/targeted/active/modules/100/jockey/ /var/lib/selinux/targeted/active/modules/100/journalctl/ /var/lib/selinux/targeted/active/modules/100/kdbus/ /var/lib/selinux/targeted/active/modules/100/kdump/ /var/lib/selinux/targeted/active/modules/100/kdumpgui/ /var/lib/selinux/targeted/active/modules/100/keepalived/ /var/lib/selinux/targeted/active/modules/100/kerberos/ /var/lib/selinux/targeted/active/modules/100/keyboardd/ /var/lib/selinux/targeted/active/modules/100/keystone/ /var/lib/selinux/targeted/active/modules/100/kismet/ /var/lib/selinux/targeted/active/modules/100/kmscon/ /var/lib/selinux/targeted/active/modules/100/kpatch/ /var/lib/selinux/targeted/active/modules/100/ksmtuned/ /var/lib/selinux/targeted/active/modules/100/ktalk/ /var/lib/selinux/targeted/active/modules/100/l2tp/ /var/lib/selinux/targeted/active/modules/100/ldap/ /var/lib/selinux/targeted/active/modules/100/libraries/ /var/lib/selinux/targeted/active/modules/100/likewise/ /var/lib/selinux/targeted/active/modules/100/linuxptp/ /var/lib/selinux/targeted/active/modules/100/lircd/ /var/lib/selinux/targeted/active/modules/100/livecd/ /var/lib/selinux/targeted/active/modules/100/lldpad/ /var/lib/selinux/targeted/active/modules/100/loadkeys/ /var/lib/selinux/targeted/active/modules/100/locallogin/ /var/lib/selinux/targeted/active/modules/100/lockdev/ /var/lib/selinux/targeted/active/modules/100/logadm/ /var/lib/selinux/targeted/active/modules/100/logging/ /var/lib/selinux/targeted/active/modules/100/logrotate/ /var/lib/selinux/targeted/active/modules/100/logwatch/ /var/lib/selinux/targeted/active/modules/100/lpd/ /var/lib/selinux/targeted/active/modules/100/lsm/ /var/lib/selinux/targeted/active/modules/100/lttng-tools/ /var/lib/selinux/targeted/active/modules/100/lvm/ /var/lib/selinux/targeted/active/modules/100/mailman/ /var/lib/selinux/targeted/active/modules/100/mailscanner/ /var/lib/selinux/targeted/active/modules/100/man2html/ /var/lib/selinux/targeted/active/modules/100/mandb/� x������������������� X � <'8 ��������������" �$ � ���������������� " " " � onal interfaces needed to list and read cgroups config
- Add port definition for collectd port
- Add labels for /dev/ptp*
- Allow staff_t to execute virtd_exec_t for running vms - Allow samba-net to also read realmd tmp files
- Allow NUT to use serial ports
- realmd can be started by systemctl now - Remove userdom_home_manager for xdm_t and move all rules to xserver.te directly
- Add new xdm_write_home boolean to allow xdm_t to create files in HOME dirs with xdm_home_t
- Allow postfix-showq to read/write unix.showq in /var/spool/postfix/pid
- Allow virsh to read xen lock file
- Allow qemu-ga to create files in /run with proper labeling
- Allow glusterd to connect to own socket in /tmp
- Allow glance-api to connect to http port to make glance image-create working
- Allow keystonte_t to execute rpm - Fix realmd cache interfaces - Allow tcpd to execute leafnode
- Allow samba-net to read realmd cache files
- Dontaudit sys_tty_config for alsactl
- Fix allow rules for postfix_var_run
- Allow cobblerd to read /etc/passwd
- Allow pegasus to read exports
- Allow systemd-timedate to read xdm state
- Allow mout to stream connect to rpcbind
- Add labeling just for /usr/share/pki/ca-trust-source instead of /usr/share/pki - Allow thumbnails to share memory with apps which run thumbnails
- Allow postfix-postqueue block_suspend
- Add lib interfaces for smsd
- Add support for nginx
- Allow s2s running as jabberd_t to connect to jabber_interserver_port_t
- Allow pki apache domain to create own tmp files and execute httpd_suexec
- Allow procmail to manger user tmp files/dirs/lnk_files
- Add virt_stream_connect_svirt() interface
- Allow dovecot-auth to execute bin_t
- Allow iscsid to request that kernel load a kernel module
- Add labeling support for /var/lib/mod_security
- Allow iw running as tuned_t to create netlink socket
- Dontaudit sys_tty_config for thumb_t
- Add labeling for nm-l2tp-service
- Allow httpd running as certwatch_t to open tcp socket
- Allow useradd to manager smsd lib files
- Allow useradd_t to add homedirs in /var/lib
- Fix typo in userdomain.te
- Cleanup userdom_read_home_certs
- Implement userdom_home_reader_certs_type to allow read certs also on encrypt /home with ecryptfs_t
- Allow staff to stream connect to svirt_t to make gnome-boxes working - Allow lvm to create its own unit files
- Label /var/lib/sepolgen as selinux_config_t
- Add filetrans rules for tw devices
- Add transition from cupsd_config_t to cupsd_t - Add filetrans rules for tw devices
- Cleanup bad transition lines - Fix lockdev_manage_files()
- Allow setroubleshootd to read var_lib_t to make email_alert working
- Add lockdev_manage_files()
- Call proper interface in virt.te
- Allow gkeyring_domain to create /var/run/UID/config/dbus file
- system dbus seems to be blocking suspend
- Dontaudit attemps to sys_ptrace, which I believe gpsd does not need
- When you enter a container from root, you generate avcs with a leaked file descriptor
- Allow mpd getattr on file system directories
- Make sure realmd creates content with the correct label
- Allow systemd-tty-ask to write kmsg
- Allow mgetty to use lockdev library for device locking
- Fix selinuxuser_user_share_music boolean name to selinuxuser_share_music
- When you enter a container from root, you generate avcs with a leaked file descriptor
- Make sure init.fc files are labeled correctly at creation
- File name trans vconsole.conf
- Fix labeling for nagios plugins
- label shared libraries in /opt/google/chrome as testrel_shlib_t - Allow certmonger to dbus communicate with realmd
- Make realmd working - Fix mozilla specification of homedir content
- Allow certmonger to read network state
- Allow tmpwatch to read tmp in /var/spool/{cups,lpd}
- Label all nagios plugin as unconfined by default
- Add httpd_serve_cobbler_files()
- Allow mdadm to read /dev/sr0 and create tmp files
- Allow certwatch to send mails
- Fix labeling for nagios plugins
- label shared libraries in /opt/google/chrome as testrel_shlib_t - Allow realmd to run ipa, really needs to be an unconfined_domain
- All� x�������������h������ X � �&8 ��������X������! �$ 6 ���������������� �! �! �! � v Grepl<mgrepl@redhat.com> 3.13.1-21 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-20 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-19 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-18 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-17 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-16 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-15 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-14 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-13 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-12 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-11 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-10 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-9 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-8 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-7 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-6 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-5 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-4 Miroslav Grepl<mgrepl@redhat.com> 3.13.1-3 Dan Walsh<dwalsh@redhat.com> 3.13.1-2 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-1 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-100 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-99 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-98 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-97 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-96 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-95 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-94 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-93 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-92 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-91 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-90 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-89 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-88 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-87 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-86 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-85 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-84 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-83 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-82 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-81 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-80 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-79 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-78 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-77 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-76 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-75 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-74 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-73 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-72 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-71 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-70 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-69 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-68 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-67 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-66 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-65 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-64 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-63 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-62 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-61 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-60 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-59 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-58 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-57 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-56 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-55 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-54 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-53 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-52 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-51 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-50 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-49 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-48 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-47 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-46 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-45 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-44 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-43 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-42 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-41 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-40 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-39 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-38 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-37 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-36 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-35 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-34 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-33 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-32 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-31 Miroslav Grepl � x��������������v����� X � �&8 �����������w! �$ g ���������������� w! v! x! � 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 620a7a217da50c11a23f2046bc69d04862c7e7c5722aa11264a683f461d8c3dc 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6b3d9a1cc957957cd917da31eccd5bd1c19ac36e99fed8271d96a84ce5ee240d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 26003d7c53dc76577a59c58aa71f3ac11041be88b30e0afb8400c708cdc7af6c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b10e6be0fbfc7503d22a131a4725b0f2602ab9fc9acc13d56dd1d71bb86c132e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a113f1825e798cc0b4f46545544bbb5a0e8c7895e61ade1697c1842a2e73f367 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a7ff48e05a15904e58b088ad156862c58685891e2c9647f4fddc1b2f9cc90447 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0d65b115eaa4d5d553f9797fdeaa86ee8ca14e28fbc9d84d655873331393a1f1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0c0ead4394eda96e3b15eb596e355558b8a53feed0b2d5389407ac692952cb42 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6518d937413d40cd34a5329a43109f71a076c0878bd3538e2a78e019b08ec999 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 13c9732a39fcd812c676aaab8aa194ec62d3a19ea7de95f9d8534366704c260c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 13047958c8d238effa002051098d7a2952251de6bcf0fbffcaf304f8c8555d19 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f591ead48b59f89a872191d00c8927fecdf26620c80071259a20bb01b0061054 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8eb2f10bbab70ba12adc4f72bab2919af26bcab71561cac32037da08a0cba4ac 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf cced5db13a6083925d071ea29d9caa5e1038baaf1abd4472a8e7f8ba4fda9582 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 90bea19ff27b872a83ae0b1df47e75262693d7492ec271d21ce22904852056f9 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d02866df36e836fb971bfb555fa5e57f4da46db0cbaefdfb55f2a3564d0048cf 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bcfb51a6726e4c0c6a3d6e60dd69894ed12fe9581fa222e712bf0baf603e00c8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ca6cc86e6315ff9a996af8da1b7d0752ce5ec39eb8600a879c082695016811a2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d66f028fd9108982e67ee98ff654ac8b4ba6fc2e85e46cb415e4e80e36b15b78 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 21696e0f675e1bdc350b2db72e7c6a2a10fc14c7a25363b36fc91f99e21359db 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1b6b29eebdf72ba24e9a0b8685eb4679ecd28609ed2057663853670278b3629f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2df28816f6279358dd67ecdb343d30f593bc63db907c90cdcbbd83233d54b168 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3d59293a957fbee9c6037922516e18822b10ff755501d901590de0f0108f2200 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ff1b06ab48ccc2b75d6298c9c7e3e8306a0830b4f1f54eb09758754d9a52b372 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7b32e4e34e5c9fa1c259299970e696cf867011409b4518790858eaee27ed0e45 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 48caeb464c4b17bfc9fb241fe384b99d30ab17066f0eed71aa744c6253993b7d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c33eae384aae24378df28a9e0b738b3d34134480646d9a9978d4423b8408199f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ee088a483edfa1835b5cec5f02351735a02fd89271b72ec16d28a287068e1336 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf be4b867d246cacfa10bc8918b6550a5c1d234435c0fa2c71a8a923bb8735e7bd 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf fa4ef980af05b2f402f07716539546790ff137463269bc7ea426b64f7770a527 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0a5c0545d0b346fa1f6c298e875f89f26374961d061c323536358900ee614589 9a2e646e� x�������������Xf����� X � 2'8 �8�������q����" �$ ���������������� " " " � b_t to use tmpfs inherited from the user
- Allow mozilla_plugin to bind to the vnc port if running with spice
- Add new attribute to discover confined_admins and assign confined admin to it
- Fix zabbix to handle attributes in interfaces
- Fix zabbix to read system states for all zabbix domains
- Fix piranha_domain_template()
- Allow ctdbd to create udp_socket. Allow ndmbd to access ctdbd var files.
- Allow lldpad sys_rouserce cap due to #986870
- Allow dovecot-auth to read nologin
- Allow openlmi-networking to read /proc/net/dev
- Allow smsd_t to execute scripts created on the fly labeled as smsd_spool_t
- Add zabbix_domain attribute for zabbix domains to treat them together
- Add labels for zabbix-poxy-* (#1018221)
- Update openlmi-storage policy to reflect #1015067
- Back port piranha tmpfs fixes from RHEL6
- Update httpd_can_sendmail boolean to allow read/write postfix spool maildrop
- Add postfix_rw_spool_maildrop_files interface
- Call new userdom_admin_user_templat() also for sysadm_secadm.pp
- Fix typo in userdom_admin_user_template()
- Allow SELinux users to create coolkeypk11sE-Gate in /var/cache/coolkey
- Add new attribute to discover confined_admins
- Fix labeling for /etc/strongswan/ipsec.d
- systemd_logind seems to pass fd to anyone who dbus communicates with it
- Dontaudit leaked write descriptor to dmesg - Fix gnome_read_generic_data_home_files()
- allow openshift_cgroup_t to read/write inherited openshift file types
- Remove httpd_cobbler_content * from cobbler_admin interface
- Allow svirt sandbox domains to setattr on chr_file and blk_file svirt_sandbox_file_t, so sshd will work within a container
- Allow httpd_t to read also git sys content symlinks
- Allow init_t to read gnome home data
- Dontaudit setroubleshoot_fixit_t execmem, since it does not seem to really need it.
- Allow virsh to execute systemctl
- Fix for nagios_services plugins
- add type defintion for ctdbd_var_t
- Add support for /var/ctdb. Allow ctdb block_suspend and read /etc/passwd file
- Allow net_admin/netlink_socket all hyperv_domain domains
- Add labeling for zarafa-search.log and zarafa-search.pid
- Fix hypervkvp.te
- Fix nscd_shm_use()
- Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
- Add hypervkvp_unit_file_t type
- Fix logging policy
- Allow syslog to bind to tls ports
- Update labeling for /dev/cdc-wdm
- Allow to su_domain to read init states
- Allow init_t to read gnome home data
- Make sure if systemd_logind creates nologin file with the correct label
- Clean up ipsec.te - Add auth_exec_chkpwd interface
- Fix port definition for ctdb ports
- Allow systemd domains to read /dev/urand
- Dontaudit attempts for mozilla_plugin to append to /dev/random
- Add label for /var/run/charon.*
- Add labeling for /usr/lib/systemd/system/lvm2.*dd policy for motion service
- Fix for nagios_services plugins
- Fix some bugs in zoneminder policy
- add type defintion for ctdbd_var_t
- Add support for /var/ctdb. Allow ctdb block_suspend and read /etc/passwd file
- Allow net_admin/netlink_socket all hyperv_domain domains
- Add labeling for zarafa-search.log and zarafa-search.pid
- glusterd binds to random unreserved ports
- Additional allow rules found by testing glusterfs
- apcupsd needs to send a message to all users on the system so needs to look them up
- Fix the label on ~/.juniper_networks
- Dontaudit attempts for mozilla_plugin to append to /dev/random
- Allow polipo_daemon to connect to flash ports
- Allow gssproxy_t to create replay caches
- Fix nscd_shm_use()
- Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
- Add hypervkvp_unit_file_t type - init reload from systemd_localed_t
- Allow domains that communicate with systemd_logind_sessions to use systemd_logind_t fd
- Allow systemd_localed_t to ask systemd to reload the locale.
- Add systemd_runtime_unit_file_t type for unit files t� x��������������U����� X � �&8 HY������pi������y! �$ i ���������������� y! x! z! � 63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7128603e90bec23578db19f854969d359bec9034d54b2910e2cbfb45f0fba3c0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8f7f706392bff6e394dd036d2aa03881c9f8104cae648b17c15c5810d27b08fb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8340ef91e2a714e8089027b56140012615aac550e8eb844784cff6dd099a9fd7 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 8af0f4a6c5db0c920b102f1db6b5c434403ad4742dc037f9dac3490242a668fa 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f62dec384d975fa4968412d1b27e4fe8d53dddcb7308a67bbb80a5a1c471cb35 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 81ee32caa6747c7c2ca10c19bfaca4586497b228d59e93e339ea64ac8af61a44 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 07501353745aaecb06c90d0edd81c35fdde59fe406a1f8c55a2b98c86cf4c9a5 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 89ff041923809c62fdac63c15fd92c214af836ec6f0cf4f27a22051fcb897185 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f329c02e06ff2a6695831f1b58c49a0921a0fd6004f4d125e22867583784bda4 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ffc3a16c3aaa542c1d17449456ccedcdc833db8f876b700cd784b6ed39cd333b 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1fe5879718d8e36f720c44d188f15cbf3c73f543844fa0f4f3ee5bf458e30b9c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 7845064a269d5ac5a4661fae59608be855ae90081711c537358e60488614c4c6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 17c06a98456e4c1cac2d283c28a9d31bf425068e1ed3dc22aaf71129ebda40bb 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ae0afb1a4155e84f930c26ece763c190f6f91a9edfba52b69156c57e1c794810 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b1a8588fc722ecddb950c7a4be84a410790869121fbc08db228d8695132d32a2 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a80c4b446eca5ad2bccb52942f1a9dc225ec4181adc431d0b2e3fa3e32fee57c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf aa39915c34a07fb3d5d0868c76d731fa10f770b0d5f38bc23c57c1ec036278d6 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 81e0881e92c7001f5e4e466293d6099717d86f1007c4c5a545202fd771ed2592 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e4b17df5741da81f3c05c16a1323c9b64a61dae6bea796e0d7c6f726ab694608 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ec63b55969025de9bda382f0235ece3920ea657d1ecae42e3da0da0267fa2245 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bd45ab4598be43f59971597c6d2ec78372179f55387da0ba8e8384c5ff5a6f3e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ca0370d7ba1bb51bb5827b897c5dd9b9fe053a45b3482f5e4392c4f2f0483ff5 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3ba8ea743efacbab503950c559703babd0c9409c495bab17f918efb04123b5cc 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 28767c58f380ae4bdf4fc11ebd1c3c7e47edd4d245a745665e981e73d9e5d3a8 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 4b06f481eac858746967b462fc39cb6b31e4fdae9eceae9561dc3319aa9e7738 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf c7bf7af6769425662de8704a3d50975e189bf88cbac0fe3f0532ee0bdcda27f0 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 645e5b43c1f4382af293c1a926c734910d21a2dda353f007c8424ef23930c7f4 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf f701e8964f3c4a472d2bf83eb63b8c84567cbc9d33354c8984bad0cc7808364a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d98700f554aba199c220fa55122d5077dfc5612adbe7a239f34c71a36f0d2291 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a6ebf24dd4b00d672d8dea0c9db453d82d58f02c0dec21dbb2bd2be6035da34e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 2b39db261a4f47f35c8ebddefc61462c0dd9afe8cbf78e91e44c07f28dedbf9f 9a2e646ef933bedfa63503f7c2� x�������������HE����� X � �(8 Xi�������_����KP �$ [ ���������������� KP � ( ?
�
� * � 5 � > � G � t �
�
�
�
�
' �
O
[
b (
� X
� Y
�
� � h $ mQINBGUlFG8BEADc0kEC57b722MbPVkI8aoYFAEWM+lj084H26msZpAYVfW7fCi5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gpg-pubkey ced7258b 6525146f gpg(AlmaLinux OS 8 <packager@almalinux.org>) -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.14.3 (NSS-3)
mQINBGUlFG8BEADc0kEC57b722MbPVkI8aoYFAEWM+lj084H26msZpAYVfW7fCi5
S7g3n6htVdvvnB6MrJANitZgQhMyC7tchNQz5sjrFffasNkOoI5Q27PSrG676ILP
diowPWfJkwrN0f0UcJsV3w5KBedvUXJnoa64lP/oBFkbz3SvUTqZFkSBzOfCTdXW
bvpZonghgm/AEU8wqsdOitXU23Xn4fsPB7aULgR31jz3irnaUDFXUnNqoiQpU6JB
P6WiFqN/IZMH95HW1WlMBGSOalSbQUlNEND3J0lxK2a33UBmTdR3aLyS+o9P8+7b
Cdzbkrs1fXXVxxvlaQdSWBSjVULUZjKIZ+HtqhIaTiBELa7JHBEBbEZgNHpymmc8
hIF6fdTbzbbYx9MbNmpzCcr+SKHubCdvZyX2FsWK1CHvYx6iPc9wcu4x9yh8MIfp
KpLSJG1SaSCHbUdatpsOSQK2pbIN3THsvFrKPVssLrMgVjwp22Q3vMFL+ldq0vZ5
6uIIiNRKrX2CKKrUy1kF7FjDNMx4riaCQHs5vp7qOttxv0E/X4Z9B4QZdC02H2Mq
Ea5LoDxONutv+JMzWFyxIEQvbnfdDSu4QUDkn3H1WkBNmqTUwny5DSxZNjGB8a6P
ISaIE+kN2pp5v9eB8Q4+4BxbU2G2/Jy/V6bFC8eLL+PIKodPKbpCqoPyGwARAQAB
tCdBbG1hTGludXggT1MgOCA8cGFja2FnZXJAYWxtYWxpbnV4Lm9yZz6JAk8EEwEI
ADkWIQS8Xt3K31AsB38Vgogq6B6KztcliwUCZSUUbwIbAwQLCQgHAyICAQQVCgkI
BBYCAwECHgcCF4AACgkQKugeis7XJYvOeA/9E/hJwfd7UPtvsv+y7Wiei1NCt+OJ
AzJQPjEzHJNmLAD157AHtpA2yZpB9GlRQkjRu40fn0It20mwjnl0j5oHF9HnQ+/H
Qtiw9pwgNpZJaTe5YnzETbGqrrOVgWihkJyJhn42vtuirNu7pKJvWilRvz1a81JK
i/okezXp1KBrgrxR/bG26c8k61AK6n/ExI1MoHZhyaAAebFqG8vTiWTuC2a4t7SD
pxbzsn5CMuXqVY1gxIdiUGzgrXfSm5WgpSYEG01VN+VF885caPvtMHoLBy/pLGN3
5TKp4pKiA9JGQxtlZLdO666UbpgbjoxFYxNZEwY3Tdx37zbsP4pHcaN8fOGbk5mG
h8LwkjppPZzoXONyBfUJ+uHBEzRJEw4KtVRgaZZfCcojRvmyJB4TAM1SYkikaw8F
0gi3OPRWtVdEogxP0XD/tTrPSKo7pTDEk17HIyKCU0KxF4ZSbxXFMeH5OZUQAQM4
l7ECGNg3bVhXC66AHE72mz/PN39M2Z0Sww7GWYCf6IDhhkeTxYx+I7VW1Uo9ht5L
i3ZRMbX/h6NBYTUaPJEx3fwixNv2+RtE3m4JIxg76xBOYGLyIRlaImWNGKTnGz5m
IBRP5Vm7nRdFOOFhNz+iDIyq0LEyhGU7xCriFaL+ozXLiIzycidgTTZW3WfkHxlr
ZEzov/wIBeoaIp8=
=mC/C
-----END PGP PUBLIC KEY BLOCK-----
e%olocalhost pubkey AlmaLinux OS 8 <packager@almalinux.org> Public Keys (none) gpg(AlmaLinux OS 8 <packager@almalinux.org>) gpg(ced7258b) 4.14.3 4:2ae81e8aced7258b-6525146f 4:2ae81e8aced7258b-6525146f ? ���� bcd4ef9989fdadbd39a3a1915afba8b208a7d7b7 g�T�g�T�`�O@`OL@`@�`3��`-@`% @`��`U�_��_�H@_��@_���_�#�_��@_cO�_BZ@_5+@_'�@_!d�_�^��^��^��^�b�^��^�� x��������������4����� X � �&8 �������� �������! �$ ? ���������������� �! �! �! � at.com> 3.3.1-2 Dan Walsh <dwalsh@redhat.com> 3.3.1-1 Dan Walsh <dwalsh@redhat.com> 3.3.0-2 Dan Walsh <dwalsh@redhat.com> 3.3.0-1 Dan Walsh <dwalsh@redhat.com> 3.2.9-2 Dan Walsh <dwalsh@redhat.com> 3.2.9-1 Dan Walsh <dwalsh@redhat.com> 3.2.8-2 Dan Walsh <dwalsh@redhat.com> 3.2.8-1 Dan Walsh <dwalsh@redhat.com> 3.2.7-6 Dan Walsh <dwalsh@redhat.com> 3.2.7-5 Dan Walsh <dwalsh@redhat.com> 3.2.7-3 Dan Walsh <dwalsh@redhat.com> 3.2.7-2 Dan Walsh <dwalsh@redhat.com> 3.2.7-1 Dan Walsh <dwalsh@redhat.com> 3.2.6-7 Dan Walsh <dwalsh@redhat.com> 3.2.6-6 Dan Walsh <dwalsh@redhat.com> 3.2.6-5 Dan Walsh <dwalsh@redhat.com> 3.2.6-4 Dan Walsh <dwalsh@redhat.com> 3.2.6-3 Dan Walsh <dwalsh@redhat.com> 3.2.6-2 Dan Walsh <dwalsh@redhat.com> 3.2.6-1 Dan Walsh <dwalsh@redhat.com> 3.2.5-25 Dan Walsh <dwalsh@redhat.com> 3.2.5-24 Dan Walsh <dwalsh@redhat.com> 3.2.5-22 Dan Walsh <dwalsh@redhat.com> 3.2.5-21 Dan Walsh <dwalsh@redhat.com> 3.2.5-20 Dan Walsh <dwalsh@redhat.com> 3.2.5-19 Dan Walsh <dwalsh@redhat.com> 3.2.5-18 Dan Walsh <dwalsh@redhat.com> 3.2.5-17 Dan Walsh <dwalsh@redhat.com> 3.2.5-16 Dan Walsh <dwalsh@redhat.com> 3.2.5-15 Dan Walsh <dwalsh@redhat.com> 3.2.5-14 Dan Walsh <dwalsh@redhat.com> 3.2.5-13 Dan Walsh <dwalsh@redhat.com> 3.2.5-12 Dan Walsh <dwalsh@redhat.com> 3.2.5-11 Dan Walsh <dwalsh@redhat.com> 3.2.5-10 Dan Walsh <dwalsh@redhat.com> 3.2.5-9 Dan Walsh <dwalsh@redhat.com> 3.2.5-8 Dan Walsh <dwalsh@redhat.com> 3.2.5-7 Dan Walsh <dwalsh@redhat.com> 3.2.5-6 Dan Walsh <dwalsh@redhat.com> 3.2.5-5 Dan Walsh <dwalsh@redhat.com> 3.2.5-4 Dan Walsh <dwalsh@redhat.com> 3.2.5-3 Dan Walsh <dwalsh@redhat.com> 3.2.5-2 Dan Walsh <dwalsh@redhat.com> 3.2.5-1 Dan Walsh <dwalsh@redhat.com> 3.2.4-5 Dan Walsh <dwalsh@redhat.com> 3.2.4-4 Dan Walsh <dwalsh@redhat.com> 3.2.4-3 Dan Walsh <dwalsh@redhat.com> 3.2.4-1 Dan Walsh <dwalsh@redhat.com> 3.2.4-1 Dan Walsh <dwalsh@redhat.com> 3.2.3-2 Dan Walsh <dwalsh@redhat.com> 3.2.3-1 Dan Walsh <dwalsh@redhat.com> 3.2.2-1 Dan Walsh <dwalsh@redhat.com> 3.2.1-3 Dan Walsh <dwalsh@redhat.com> 3.2.1-1 Dan Walsh <dwalsh@redhat.com> 3.1.2-2 Dan Walsh <dwalhh@redhat.com> 3.1.2-1 Dan Walsh <dwalsh@redhat.com> 3.1.1-1 Dan Walsh <dwalsh@redhat.com> 3.1.0-1 Dan Walsh <dwalsh@redhat.com> 3.0.8-30 Dan Walsh <dwalsh@redhat.com> 3.0.8-28 Dan Walsh <dwalsh@redhat.com> 3.0.8-27 Dan Walsh <dwalsh@redhat.com> 3.0.8-26 Dan Walsh <dwalsh@redhat.com> 3.0.8-25 Dan Walsh <dwalsh@redhat.com> 3.0.8-24 Dan Walsh <dwalsh@redhat.com> 3.0.8-23 Dan Walsh <dwalsh@redhat.com> 3.0.8-22 Dan Walsh <dwalsh@redhat.com> 3.0.8-21 Dan Walsh <dwalsh@redhat.com> 3.0.8-20 Dan Walsh <dwalsh@redhat.com> 3.0.8-19 Dan Walsh <dwalsh@redhat.com> 3.0.8-18 Dan Walsh <dwalsh@redhat.com> 3.0.8-17 Dan Walsh <dwalsh@redhat.com> 3.0.8-16 Dan Walsh <dwalsh@redhat.com> 3.0.8-15 Dan Walsh <dwalsh@redhat.com> 3.0.8-14 Dan Walsh <dwalsh@redhat.com> 3.0.8-13 Dan Walsh <dwalsh@redhat.com> 3.0.8-12 Dan Walsh <dwalsh@redhat.com> 3.0.8-11 Dan Walsh <dwalsh@redhat.com> 3.0.8-10 Dan Walsh <dwalsh@redhat.com> 3.0.8-9 Dan Walsh <dwalsh@redhat.com> 3.0.8-8 Dan Walsh <dwalsh@redhat.com> 3.0.8-7 Dan Walsh <dwalsh@redhat.com> 3.0.8-5 Dan Walsh <dwalsh@redhat.com> 3.0.8-4 Dan Walsh <dwalsh@redhat.com> 3.0.8-3 Dan Walsh <dwalsh@redhat.com> 3.0.8-2 Dan Walsh <dwalsh@redhat.com> 3.0.8-1 Dan Walsh <dwalsh@redhat.com> 3.0.7-10 Dan Walsh <dwalsh@redhat.com> 3.0.7-9 Dan Walsh <dwalsh@redhat.com> 3.0.7-8 Dan Walsh <dwalsh@redhat.com> 3.0.7-7 Dan Walsh <dwalsh@redhat.com> 3.0.7-6 Dan Walsh <dwalsh@redhat.com> 3.0.7-5 Dan Walsh <dwalsh@redhat.com> 3.0.7-4 Dan Walsh <dwalsh@redhat.com> 3.0.7-3 Dan Walsh <dwalsh@redhat.com> 3.0.7-2 Dan Walsh <dwalsh@redhat.com> 3.0.7-1 Dan Walsh <dwalsh@redhat.com> 3.0.6-3 Dan Walsh <dwalsh@redhat.com> 3.0.6-2 Dan Walsh <dwalsh@redhat.com> 3.0.6-1 Dan Walsh <dwalsh@redhat.com> 3.0.5-11 Dan Walsh <dwalsh@redhat.com> 3.0.5-10 Dan Walsh <dwalsh@redhat.com> 3.0.5-9 Dan Walsh <dwalsh@redhat.com> 3.0.5-8 Dan Walsh <dwalsh@redhat.com> 3.0.5-7 Dan Walsh <dwalsh@redhat.com> 3.0.5-6 Dan Walsh <dwalsh@redhat.com> 3.0.5-5 Dan Walsh <dwalsh@redhat.c� x�������������8$����� X � j'8 P��������4����>" �$ . ���������������� >" =" ?" � Update from Upstream - Fix spec of realplay - Update to upstream - Fix semanage - Allow useradd to create_home_dir in MLS environment - Update from upstream - Update from upstream - Add oprofilefs - Fix for hplip and Picasus - Update to upstream - Update to upstream - fixes for spamd - fixes for java, openldap and webalizer - Xen fixes - Upgrade to upstream - allow hal to read boot_t files
- Upgrade to upstream - allow hal to read boot_t files - Update from upstream - Fixes for amavis - Update from upstream - Allow auditctl to search all directories - Add acquire service for mono. - Turn off allow_execmem boolean
- Allow ftp dac_override when allowed to access users homedirs - Clean up spec file
- Transition from unconfined_t to prelink_t - Allow execution of cvs command - Update to upstream - Update to upstream - Fix libjvm spec - Update to upstream - Add xm policy
- Fix policygentool - Update to upstream
- Fix postun to only disable selinux on full removal of the packages - Allow mono to chat with unconfined - Allow procmail to sendmail
- Allow nfs to share dosfs - Update to latest from upstream
- Allow selinux-policy to be removed and kernel not to crash - Update to latest from upstream
- Add James Antill patch for xen
- Many fixes for pegasus - Add unconfined_mount_t
- Allow privoxy to connect to httpd_cache
- fix cups labeleing on /var/cache/cups - Update to latest from upstream - Update to latest from upstream
- Allow mono and unconfined to talk to initrc_t dbus objects - Change libraries.fc to stop shlib_t form overriding texrel_shlib_t - Fix samba creating dirs in homedir
- Fix NFS so its booleans would work - Allow secadm_t ability to relabel all files
- Allow ftp to search xferlog_t directories
- Allow mysql to communicate with ldap
- Allow rsync to bind to rsync_port_t - Fixed mailman with Postfix #183928
- Allowed semanage to create file_context files.
- Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
to bind to reserved ports. #149030
- Don't allow devpts_t to be associated with tmp_t.
- Allow hald_t to stat all mountpoints.
- Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
- Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
/etc/mtab.
- Changed the file_contexts to not have a regex before the first ^/[a-z]/
whenever possible, makes restorecon slightly faster.
- Correct the label of /etc/named.caching-nameserver.conf
- Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
/usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
hit by this.
- Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
xenstored_t rw access to the xen device node. - More textrel_shlib_t file path fixes
- Add ada support - Get auditctl working in MLS policy - Add mono dbus support
- Lots of file_context fixes for textrel_shlib_t in FC5
- Turn off execmem auditallow since they are filling log files - Update to upstream - Allow automount and dbus to read cert files - Fix ftp policy
- Fix secadm running of auditctl - Update to upstream - Update to upstream - Fix policyhelp - Fix pam_console handling of usb_device
- dontaudit logwatch reading /mnt dir - Update to upstream - Get transition rules to create policy.20 at SystemHigh - Allow secadmin to shutdown system
- Allow sendmail to exec newalias - MLS Fixes
dmidecode needs mls_file_read_up
- add ypxfr_t
- run init needs access to nscd
- udev needs setuid
- another xen log file
- Dontaudit mount getattr proc_kcore_t - fix buildroot usage (#185391) - Get rid of mount/fsdisk scan of /dev messages
- Additional fixes for suspend/resume - Fake make to rebuild enableaudit.pp - Get xen networking running. - Fixes for Xen
- enableaudit should not be the same as base.pp
- Allow ps to work for all process - more xen policy fixups - more xen fixage (#184393) - Fix blkid specification
- Allow postfix to execute mailman_que - Blkid changes
- Allow udev access to usb_device_t
- Fix post script to create targeted policy config f� x������������������� X � �'8 �������������Q �$ ^ ���������������� �Q �Q �Q � b5 557626b190192ebf130d95afac5ab0e9 03d39310cff81200e81830d5492f43ae 03a4d8a293409a955192a6898b0d8a22 a87c556949b81e0a5ce3816a7aebbba1 18887e0c26b5d37f4a419b7204ad1ff0 681215fefc8e703997eb90aef4669046 5660f4b0603f8ca2c45a093590370884 f2ae8bbea49d452a81bb2359d43de55d d41d8cd98f00b204e9800998ecf8427e ../../usr/sbin/sendmail.postfix ../../usr/sbin/sendmail.postfix ../../../../usr/libexec/postfix/bounce ../../../../usr/sbin/smtp-source ../../../../usr/sbin/postmulti ../../../../usr/libexec/postfix/oqmgr ../../../../usr/libexec/postfix/pipe ../../../../usr/libexec/postfix/pickup ../../../../usr/sbin/postlog ../../../../usr/libexec/postfix/flush ../../../../usr/libexec/postfix/spawn ../../../../usr/libexec/postfix/tlsproxy ../../../../usr/sbin/postalias ../../../../usr/libexec/postfix/qmqpd ../../../../usr/libexec/postfix/virtual ../../../../usr/libexec/postfix/scache ../../../../usr/libexec/postfix/postlogd ../../../../usr/libexec/postfix/proxymap ../../../../usr/libexec/postfix/master ../../../../usr/sbin/postlock ../../../../usr/libexec/postfix/discard ../../../../usr/libexec/postfix/postscreen ../../../../usr/sbin/postkick ../../../../usr/sbin/postdrop ../../../../usr/sbin/sendmail.postfix ../../../../usr/libexec/postfix/error ../../../../usr/libexec/postfix/trivial-rewrite ../../../../usr/libexec/postfix/local ../../../../usr/sbin/postqueue ../../../../usr/sbin/postfix ../../../../usr/sbin/smtp-sink ../../../../usr/sbin/postsuper ../../../../usr/libexec/postfix/showq ../../../../usr/libexec/postfix/cleanup ../../../../usr/libexec/postfix/anvil ../../../../usr/sbin/postmap ../../../../usr/libexec/postfix/nqmgr ../../../../usr/libexec/postfix/qmgr ../../../../usr/libexec/postfix/tlsmgr ../../../../usr/libexec/postfix/dnsblog ../../../../usr/sbin/postcat ../../../../usr/libexec/postfix/smtpd ../../../../usr/libexec/postfix/verify ../../../../usr/sbin/postconf ../../../../usr/libexec/postfix/lmtp ../../../../usr/libexec/postfix/smtp ../sbin/sendmail.postfix root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root� x�������������(����� X � 9'8 �����������
" �$ ����������������
" " " � isd-snmp working correctly
- Allow nfsd_t to mounton nfsd_fs_t
- Add initial snapper policy
- We still need to have consolekit policy
- Dontaudit firefox attempting to connect to the xserver_port_t if run within sandbox_web_t
- Dontaudit sandbox apps attempting to open user_devpts_t
- Allow dirsrv to read network state
- Fix pki_read_tomcat_lib_files
- Add labeling for /usr/libexec/nm-ssh-service
- Add label cert_t for /var/lib/ipa/pki-ca/publish
- Lets label /sys/fs/cgroup as cgroup_t for now, to keep labels consistant
- Allow nfsd_t to mounton nfsd_fs_t
- Dontaudit sandbox apps attempting to open user_devpts_t
- Allow passwd_t to change role to system_r from unconfined_r - Don't audit access checks by sandbox xserver on xdb var_lib
- Allow ntop to read usbmon devices
- Add labeling for new polcykit authorizor
- Dontaudit access checks from fail2ban_client
- Don't audit access checks by sandbox xserver on xdb var_lib
- Allow apps that connect to xdm stream to conenct to xdm_dbusd_t stream
- Fix labeling for all /usr/bim/razor-lightdm-* binaries
- Add filename trans for /dev/md126p1 - Make vdagent able to request loading kernel module
- Add support for cloud-init make it as unconfined domain
- Allow snmpd to run smartctl in fsadm_t domain
- remove duplicate openshift_search_lib() interface
- Allow mysqld to search openshift lib files
- Allow openshift cgroup to interact with passedin file descriptors
- Allow colord to list directories inthe users homedir
- aide executes prelink to check files
- Make sure cupsd_t creates content in /etc/cups with the correct label
- Lest dontaudit apache read all domains, so passenger will not cause this avc
- Allow gssd to connect to gssproxy
- systemd-tmpfiles needs to be able to raise the level to fix labeling on /run/setrans in MLS
- Allow systemd-tmpfiles to relabel also lock files
- Allow useradd to add homdir in /var/lib/openshift
- Allow setfiles and semanage to write output to /run/files - Add labeling for /dev/tgt
- Dontaudit leak fd from firewalld for modprobe
- Allow runuser running as rpm_script_t to create netlink_audit socket
- Allow mdadm to read BIOS non-volatile RAM - accountservice watches when accounts come and go in wtmp
- /usr/java/jre1.7.0_21/bin/java needs to create netlink socket
- Add httpd_use_sasl boolean
- Allow net_admin for tuned_t
- iscsid needs sys_module to auto-load kernel modules
- Allow blueman to read bluetooth conf
- Add nova_manage_lib_files() interface
- Fix mplayer_filetrans_home_content()
- Add mplayer_filetrans_home_content()
- mozilla_plugin_config_roles need to be able to access mozilla_plugin_config_t
- Revert "Allow thumb_t to append inherited xdm stream socket"
- Add iscsi_filetrans_named_content() interface
- Allow to create .mplayer with the correct labeling for unconfined
- Allow iscsiadmin to create lock file with the correct labeling - Allow wine to manage wine home content
- Make amanda working with socket actiovation
- Add labeling for /usr/sbin/iscsiadm
- Add support for /var/run/gssproxy.sock
- dnsmasq_t needs to read sysctl_net_t - Fix courier_domain_template() interface
- Allow blueman to write ip_forward
- Allow mongodb to connect to mongodb port
- Allow mongodb to connect to mongodb port
- Allow java to bind jobss_debug port
- Fixes for *_admin interfaces
- Allow iscsid auto-load kernel modules needed for proper iSCSI functionality
- Need to assign attribute for courier_domain to all courier_domains
- Fail2ban reads /etc/passwd
- postfix_virtual will create new files in postfix_spool_t
- abrt triggers sys_ptrace by running pidof
- Label ~/abc as mozilla_home_t, since java apps as plugin want to create it
- Add passenger fixes needed by foreman
- Remove dup interfaces
- Add additional interfaces for quantum
- Add new interfaces for dnsmasq
- Allow passenger to read localization and send signull to itself
- Allow dnsmasq to stream connect to quantum
- Add quantum_stream_connect()
- Make sure that mcollective starts the service with the correct labeling
- Add labels for ~/.manpath
- Dontaudit attempts by� x�������������������� X � &8 �@������������uQ �$ e ���������������� uQ tQ vQ � � �~ E� `! � � ;� 6
� OF ;� *p 9� l� !
� � � � j` } � H /k � p� *A � � 4 � 7� .b �� �q !� b U� H( p ) bm -� �� � � �# 2� 4� I` < "B <� � "w � �� y [� 2P 4E � 8 q* � H# M KE =� �. � n m � � � |� /� � B �r R }~ SI
� @� I f *� 0� � �
%
� % � � �� � � n � X �
� ` � � b m �
� � � � � & � � & � � � ,$
� �
� 1�
7 � 5 � � � � �
� B � c � f � � g �
L + � y � � � � � *� � � I �
� & �
C
� � ^[
� [ � �
� b � "k E e �
�
�
� � j L' ;
�
� D �
g
: =� L� � � y1 t O^ N I� 81 V Q � � D� � :� � M&
� � +' +� � ? �d '^ � � � "R m� � p� � 2<
I� � � �
� (� 8 a�
4 � � 6� � _ � � .� j � � ] D v � . � � o� V &� �� � *� & � � Q� J^ <� � B� % �
� � E �B � � ?� ۰ �� �� �p \� '� %� X 3� � P �
�
� ҇ � � " �� *� 0� $� �� * 1U ! l �� ,� � �� � � � � �) �� �� v � � + � b� Ҍ �� O� u � ď KU b � & 0 z ݂ 9
� %� S 1 j? �� u �� V� �Z � F� W� ) d I �L 4+ @� J �� �� 5� A �� �� � �* w- � �, �� Vg �� � + a /� c � F %l � / f� 1� *� X/ � � + � �� h� < � $� l� =: � �R �� V� | d V2 8 �E v~ |I �� �� If �� � HA 9� ٩ � �. fH t~ � !� ;� �� b �{ ��
�� x & & )| !, } B; c� 5O �� Zz 2 Ƈ �� 4H ï ]� � � P n � ����A�A�A�A�A�A�A�A�A�A���A�A�A�A�A�A�A���A�A���A�A�A�A���A�A�A�A�A�A�A���A�A���A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A큤��������������������A큤����A�A큤��A큤A큤����������A큤��������A큤A�A큤����A�A큤����������������������������������������������A��A��A�A��A��A��A�A�A���A�A��A��A��A��A��A�A��A��A��A��A��A�A��A�A�A��A��A��A��A큤����������������������������������������������������������A큤��������������������������������������������������A큤����A큤����A큤����������A큤����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������A큤������A큤A큤��A큤����������������A�A큤����������A큤��������������A큤A큤A큤����A큤������A큤��������A큤��A큤����A큤��A큤A큤��A큤����������������A큤������A큤A큤����������������������A큤��������������A큤������A큤������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������A큤 � x������������������� X � �'8 Э ������Q �$ A ���������������� �Q �Q �Q � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H / 2:3.4.8-2.centos.8+p18.0.24.0+t200128.1353 2:3.4.8-2.centos.8+p18.0.24.0+t200128.1353 2:3.4.8-2.centos.8+p18.0.24.0+t200128.1353 2:3.4.8 2:3.4.8
! " # $ % & ' ( ) ) * + , - . / / / 0 1 2 3 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 6 7 7 7 7 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 7 7 7 7 9 : 9 ; 9 < < 7 = = = = = = = = = = = = = = = = = > > > > > > > > > > > > > > > > > > > > > > > > > ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? @ A B C C C C C C C C C C C C C Cpam.d smtp.postfix postfix access canonical generic header_checks main.cf main.cf.proto master.cf master.cf.proto postfix-files postfix-files.d relocated transport virtual rc.d init.d postfix sasl2 smtpd.conf mailq.postfix newaliases.postfix rmail.postfix .build-id 04 27050998774cf437aeec2b8a5f58c01fdee3d1 08 fc12ad1014b9d258b0da0c1fc93a4bc6c999b0 1a 37f1663607f79117175aaa4d35437139c1c293 1c 5d27588f6ed327a3d616d8b17b95d72134799e 21 a9861f8758d39df60a5015f868cf432495f376 23 c3b4f9f5180b9eb1228e9531bf8d8c5e364f1c 25 363c2c4dc837ac3f38b585ae2e5b3c7563fd75 e3298a7e069142745db214d20de4b18c2ff060 28 12c01dd9772492c9f0a8d92b42979ba26941b5 e4b7fba9f8176d49b201191b09bfe1b58bdfea 2e 85e61d3528601fd4088576ed3359e40194383f 30 0a36be09f6f2f3772da5fd71f27adead0282f4 35 811140a479a6a31fb22abc5ab34d477256e829 51 f7ae2ed5ced43dc72ce04799e7ba7f602b5530 54 dc8482cf92aaaad44231b5b80d9daabcfe8a82 56 d549c2f06fe3d94e623658e53c5c253028de98 57 63d25cdf22445336c27c24c6a323d29233c237 67 c46ac4833835b7853a854367fbdd8635c6988e 70 8b5e397affcc070a14fe568e75363e5b0a06a0 71 fc9fcfb245fb737112f2e30360c9d0b685c860 80 39f0e84fcf715aa316383af86f1c9ebb38c23c 87 0c89d40b9f2dabfcb416e2f565ca29b2f9680a 8b ea0dd4fb2be00fed1a65ed83c37e5e76537628 97 65e6c26698afa438edf021917ae1d743a2f22d a4 b4c884ce4db6fa346d7d46d421c42e2aa5649f a7 35156c3c3fae4b7bdee7e70c1b0f2e44714fef af 3f0ad45cd9ac9d467cd2279f965c4438bd3a36 b3 27678d4ad86e19831c46911c7d33b01d35aa81 b8 47d71991c65a1bb97a77d10940ff5c7c6ee76c bb c603cbd020958d538b48942a3024b773d57b90 bd 4eed003cefc76b8c8bc0446f35e251a4d2163e c9 1287c867a6e81dc2d60653390c12913c8f7bb6 cb bba856bad6778d61ffbffc053a8463f04d374e ce b1c64324ea320afc074c47681f74051ba7165b cf 54d2531862ae3a384� x�������������������� X � ^'8 p����������2" �$ " ���������������� 2" 1" 3" � lib/systemd/* - Fixes for systemd to manage /var/run
- Dontaudit leaks by firstboot - Allow chome to create netlink_route_socket
- Add additional MATHLAB file context
- Define nsplugin as an application_domain
- Dontaudit sending signals from sandboxed domains to other domains
- systemd requires init to build /tmp /var/auth and /var/lock dirs
- mount wants to read devicekit_power /proc/ entries
- mpd wants to connect to soundd port
- Openoffice causes a setattr on a lib_t file for normal users, add dontaudit
- Treat lib_t and textrel_shlib_t directories the same
- Allow mount read access on virtual images - Allow sandbox_x_domains to work with nfs/cifs/fusefs home dirs.
- Allow devicekit_power to domtrans to mount
- Allow dhcp to bind to udp ports > 1024 to do named stuff
- Allow ssh_t to exec ssh_exec_t
- Remove telepathy_butterfly_rw_tmp_files(), dev_read_printk() interfaces which are nolonger used
- Fix clamav_append_log() intefaces
- Fix 'psad_rw_fifo_file' interface - Allow cobblerd to list cobler appache content - Fixup for the latest version of upowed
- Dontaudit sandbox sending SIGNULL to desktop apps - Update to upstream -Mount command from a confined user generates setattr on /etc/mtab file, need to dontaudit this access
- dovecot-auth_t needs ipc_lock
- gpm needs to use the user terminal
- Allow system_mail_t to append ~/dead.letter
- Allow NetworkManager to edit /etc/NetworkManager/NetworkManager.conf
- Add pid file to vnstatd
- Allow mount to communicate with gfs_controld
- Dontaudit hal leaks in setfiles - Lots of fixes for systemd
- systemd now executes readahead and tmpwatch type scripts
- Needs to manage random seed - Allow smbd to use sys_admin
- Remove duplicate file context for tcfmgr
- Update to upstream - Fix fusefs handling
- Do not allow sandbox to manage nsplugin_rw_t
- Allow mozilla_plugin_t to connecto its parent
- Allow init_t to connect to plymouthd running as kernel_t
- Add mediawiki policy
- dontaudit sandbox sending signals to itself. This can happen when they are running at different mcs.
- Disable transition from dbus_session_domain to telepathy for F14
- Allow boinc_project to use shm
- Allow certmonger to search through directories that contain certs
- Allow fail2ban the DAC Override so it can read log files owned by non root users - Start adding support for use_fusefs_home_dirs
- Add /var/lib/syslog directory file context
- Add /etc/localtime as locale file context - Turn off default transition to mozilla_plugin and telepathy domains from unconfined user
- Turn off iptables from unconfined user
- Allow sudo to send signals to any domains the user could have transitioned to.
- Passwd in single user mode needs to talk to console_device_t
- Mozilla_plugin_t needs to connect to web ports, needs to write to video device, and read alsa_home_t alsa setsup pulseaudio
- locate tried to read a symbolic link, will dontaudit
- New labels for telepathy-sunshine content in homedir
- Google is storing other binaries under /opt/google/talkplugin
- bluetooth/kernel is creating unlabeled_t socket that I will allow it to use until kernel fixes bug
- Add boolean for unconfined_t transition to mozilla_plugin_t and telepathy domains, turned off in F14 on in F15
- modemmanger and bluetooth send dbus messages to devicekit_power
- Samba needs to getquota on filesystems labeld samba_share_t - Dontaudit attempts by xdm_t to write to bin_t for kdm
- Allow initrc_t to manage system_conf_t - Fixes to allow mozilla_plugin_t to create nsplugin_home_t directory.
- Allow mozilla_plugin_t to create tcp/udp/netlink_route sockets
- Allow confined users to read xdm_etc_t files
- Allow xdm_t to transition to xauth_t for lxdm program - Rearrange firewallgui policy to be more easily updated to upstream, dontaudit search of /home
- Allow clamd to send signals to itself
- Allow mozilla_plugin_t to read user home content. And unlink pulseaudio shm.
- Allow haze to connect to yahoo chat and messenger port tcp:5050.
Bz #637339
- Allow guest to run ps command on its processes by allowing it to read /p� x�������������������� X � '8 �
����������! �$ | ���������������� �! �! �! � ccess check in rhsmcertd policy.
- Allow pcp_domain to manage pcp_var_lib_t lnk_files.
- Allow chronyd to execute mkdir command.
- Allow chronyd_t to read dhcpc state.
- Label /usr/libexec/chrony-helper as chronyd_exec_t
- Allow openhpid liboa_soap plugin to read resolv.conf file.
- Allow openhpid liboa_soap plugin to read generic certs.
- Allow openhpid use libwatchdog plugin. (Allow openhpid_t rw watchdog device)
- Allow logrotate to reload services.
- Allow apcupsd_t to read /sys/devices
- Allow kpropd to connect to kropd tcp port.
- Allow systemd_networkd to send logs to syslog.
- Added interface fs_dontaudit_write_configfs_dirs
- Allow audisp client to read system state.
- Label /var/run/xtables.lock as iptables_var_run_t.
- Add labels for /dev/memory_bandwith and /dev/vhci. Thanks ssekidde
- Add interface to read/write watchdog device.
- Add transition rule for iptables_var_lib_t - Allow chronyd to execute mkdir command.
- Allow chronyd_t to read dhcpc state.
- Label /usr/libexec/chrony-helper as chronyd_exec_t
- Allow openhpid liboa_soap plugin to read resolv.conf file.
- Allow openhpid liboa_soap plugin to read generic certs.
- Allow openhpid use libwatchdog plugin. (Allow openhpid_t rw watchdog device)
- Allow logrotate to reload services.
- Allow apcupsd_t to read /sys/devices
- Allow kpropd to connect to kropd tcp port.
- Allow lsmd also setuid capability. Some commands need to executed under root privs. Other commands are executed under unprivileged user.
- Allow snapperd to pass data (one way only) via pipe negotiated over dbus.
- Add snapper_read_inherited_pipe() interface.
- Add missing ";" in kerberos.te
- Add support for /var/lib/kdcproxy and label it as krb5kdc_var_lib_t. It needs to be accessible by useradd_t.
- Add support for /etc/sanlock which is writable by sanlock daemon.
- Allow mdadm to access /dev/random and add support to create own files/dirs as mdadm_tmpfs_t.
- Add labels for /dev/memory_bandwith and /dev/vhci. Thanks ssekidde
- Add interface to read/write watchdog device.
- Add transition rule for iptables_var_lib_t
- Allow useradd add homedir located in /var/lib/kdcproxy in ipa-server RPM scriplet.
- Revert "Allow grubby to manage and create /run/blkid with correct labeling"
- Allow grubby to manage and create /run/blkid with correct labeling
- Add fstools_filetrans_named_content_fsadm() and call it for named_filetrans_domain domains. We need to be sure that /run/blkid is created with correct labeling.
- arping running as netutils_t needs to access /etc/ld.so.cache in MLS.
- Allow sysadm to execute systemd-sysctl in the sysadm_t domain. It is needed for ifup command in MLS mode.
- Add systemd_exec_sysctl() and systemd_domtrans_sysctl() interfaces.
- Allow udev, lvm and fsadm to access systemd-cat in /var/tmp/dracut if 'dracut -fv' is executed in MLS.
- Allow admin SELinu users to communicate with kernel_t. It is needed to access /run/systemd/journal/stdout if 'dracut -vf' is executed. We allow it for other SELinux users.
- depmod runs as insmod_t and it needs to manage user tmp files which was allowed for depmod_t. It is needed by dracut command for SELinux restrictive policy (confined users, MLS). - firewalld needs to relabel own config files. BZ(#1250537)
- Allow rhsmcertd to send signull to unconfined_service
- Allow lsm_plugin_t to rw raw_fixed_disk.
- Allow lsm_plugin_t to read sysfs, read hwdata, rw to scsi_generic_device
- Allow openhpid to use libsnmp_bc plugin (allow read snmp lib files). - Add header for sslh.if file
- Fix sslh_admin() interface
- Clean up sslh.if
- Fix typo in pdns.if
- Allow qpid to create lnk_files in qpid_var_lib_t.
- Allow httpd_suexec_t to read and write Apache stream sockets
- Merge pull request #21 from hogarthj/rawhide-contrib
- Allow virt_qemu_ga_t domtrans to passwd_t.
- use read and manage files_patterns and the description for the admin interface
- Merge pull request #17 from rubenk/pdns-policy
- Allow redis to read kernel parameters.
- Label /etc/rt dir as httpd_sys_rw_content_t BZ(#1185500)
- Allow hostapd to manage sock� x�������������p������ X � M'8 �������������!" �$ 1 ���������������� !" " "" � n/cherokee\.pid labeling
- Allow mozilla_plugin to create mozilla_plugin_tmp_t lnk files too
- Allow postfix-master to r/w pipes other postfix domains
- Allow snort to create netlink_socket
- Add kdumpctl policy
- Allow firstboot to create tmp_t files/directories
- /usr/bin/paster should not be labeled as piranha_exec_t
- remove initrc_domain from tomcat
- Allow ddclient to read /etc/passwd
- Allow useradd to delete all file types stored in the users homedir
- Allow ldconfig and insmod to manage kdumpctl tmp files
- Firstboot should be just creating tmp_t dirs and xauth should be allowed to write to those
- Transition xauth files within firstboot_tmp_t
- Fix labeling of /run/media to match /media
- Label all lxdm.log as xserver_log_t
- Add port definition for mxi port
- Allow local_login_t to execute tmux - apcupsd needs to read /etc/passwd
- Sanlock allso sends sigkill
- Allow glance_registry to connect to the mysqld port
- Dontaudit mozilla_plugin trying to getattr on /dev/gpmctl
- Allow firefox plugins/flash to connect to port 1234
- Allow mozilla plugins to delete user_tmp_t files
- Add transition name rule for printers.conf.O
- Allow virt_lxc_t to read urand
- Allow systemd_loigind to list gstreamer_home_dirs
- Fix labeling for /usr/bin
- Fixes for cloudform services
* support FIPS
- Allow polipo to work as web caching
- Allow chfn to execute tmux - Add support for ecryptfs
* ecryptfs does not support xattr
* we need labeling for HOMEDIR
- Add policy for (u)mount.ecryptfs*
- Fix labeling of kerbero host cache files, allow rpc.svcgssd to manage host cache
- Allow dovecot to manage Maildir content, fix transitions to Maildir
- Allow postfix_local to transition to dovecot_deliver
- Dontaudit attempts to setattr on xdm_tmp_t, looks like bogus code
- Cleanup interface definitions
- Allow apmd to change with the logind daemon
- Changes required for sanlock in rhel6
- Label /run/user/apache as httpd_tmp_t
- Allow thumb to use lib_t as execmod if boolean turned on
- Allow squid to create the squid directory in /var with the correct labe
- Add a new policy for glusterd from Bryan Bickford (bbickfor@redhat.com)
- Allow virtd to exec xend_exec_t without transition
- Allow virtd_lxc_t to unmount all file systems - PolicyKit path has changed
- Allow httpd connect to dirsrv socket
- Allow tuned to write generic kernel sysctls
- Dontaudit logwatch to gettr on /dev/dm-2
- Allow policykit-auth to manage kerberos files
- Make condor_startd and rgmanager as initrc domain
- Allow virsh to read /etc/passwd
- Allow mount to mount on user_tmp_t for /run/user/dwalsh/gvfs
- xdm now needs to execute xsession_exec_t
- Need labels for /var/lib/gdm
- Fix files_filetrans_named_content() interface
- Add new attribute - initrc_domain
- Allow systemd_logind_t to signal, signull, sigkill all processes
- Add filetrans rules for etc_runtime files - Rename boolean names to remove allow_ - Mass merge with upstream
* new policy topology to include contrib policy modules
* we have now two base policy patches - Fix description of authlogin_nsswitch_use_ldap
- Fix transition rule for rhsmcertd_t needed for RHEL7
- Allow useradd to list nfs state data
- Allow openvpn to manage its log file and directory
- We want vdsm to transition to mount_t when executing mount command to make sure /etc/mtab remains labeled correctly
- Allow thumb to use nvidia devices
- Allow local_login to create user_tmp_t files for kerberos
- Pulseaudio needs to read systemd_login /var/run content
- virt should only transition named system_conf_t config files
- Allow munin to execute its plugins
- Allow nagios system plugin to read /etc/passwd
- Allow plugin to connect to soundd port
- Fix httpd_passwd to be able to ask passwords
- Radius servers can use ldap for backing store
- Seems to need to mount on /var/lib for xguest polyinstatiation to work.
- Allow systemd_logind to list the contents of gnome keyring
- VirtualGL need xdm to be able to manage content in /etc/opt/VirtualGL
- Add policy for isns-utils - Add policy for subversion daemon
- Allo� x������������������� X � H%8 ��������������r �$ b ���������������� r q � .2, for GNU/Linux 3.2.0, BuildID[sha1]=0d4a4c4e5fec34ce58d62c02a41fbb5c72536486, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=2b16f714819d37a81d55a6e1e50313fa80bf5dd7, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=c6d5f8f6f2a1564678818a3c545ecd61ad8edcc9, stripped directory UTF-8 Unicode text troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) # R R R R R R R R R
R R R R R R R R R R R R
R R R R R R R R R R R
R R R R R R R R R
R R R utf-8 3a364e5fde434384341b6da665a1f55399a23a47fa2b1d7deb7566521f1ffe88 ? ���0 C �� !�<���Q�d~���d+ k
Q�d~��� �T����;�wL����v�7�? �2
���:n#Ў&����a �Rs�_�-��S��� {u���Vyi ���8���9F�[VcS��wQG[0�i�(�b�)�@LG���&J�S��Qiw�}B�v=KH<:Ur�7� wM��lN�%�G�9:���Zp�H��b_n@��e�=���p �+8�.+�#�ݣ۞�V�x?߁�����*�Rqh��p ih��ǘ�@v�aB��`j�fG� � �kz�@ )?���gX�ݲ,K@ �·�#�� 7�m JBUJ
�`����v �x�ȟ���ε�«�cK���
#3�.
�e�C /W� N��﵂_�~��p \�s[����}�_
�b&B_�^�" M8>t��t*�G7 �
T9@qQ�*��� !�<���Q�d~���d+ k
Q�d~��ꕥ �,o�Bh <�j!�(@JjI3����p����9�[�f����f5I��T�WϽ���|ܽOΧ �f�4���()�}A���7b�.s+E#��2'�7a��X.� �|fŗ�!�K��
b{�!A� L�u� 8� #v�� g�dה:70f�;I�p�Jt/u��@_LwqQY�jkj��$
�'����]YW��y��~O�N\���PP8C윇Cx���^Q�W���.0T� ��rX)�e�J� 5(� ���L��9=>� ">�%�rnu֧���ܠ�V�0��C�\uX����͈�A�Q� �C`� Q�4'���jgF�*��G�bg�9��I�Jq����
3%芭n����P���Ct9�̙z��<�h�W���9^�f31101935704b5ace9139e9127c5bb7e57fb213e e316f697f53f02ac4126c77563ba3325f0f1a93061e2477895cc7d5f9ee1f8ee d�V� �� d�Vu11.2-rc1 (http://rpm.org/wiki/Releases/4.11.2)
- drop upstreamed patches, adjust others as needed
- handle python egg-info's version munging in file lists - include ppc64le in %power64 macro (#1052930) - generate kmod(module.ko) provides for kernel (#1025513)
- dont override CONFIG_SITE if already set (related to #962837) - python 3 string and file compatibility fixes - generate application() provides for gnome-software - add support for ppc64le architecture - fix build-time double-free on file capability processing (#956190)
- fix relocation related regression on file sanity check (#1001553)
- fix segfault on empty -p <lua> scriptlet body (#1004062)
- fix source url, once again - add python3 sub-package, based on patch by Bohuslav Kabrda - Perl 5.18 rebuild - add missing dependency on tar to rpm-build (#986539) - Do not filter out lib64.* dependencies (#988373) - Perl 5.18 rebuild - ensure relocatable packages always get install-prefix(es) set (#979443) - fix .gnu_debuglink CRC32 after dwz, buildrequire binutils-devel (#971119) - update to 4.11.1 final (http://rpm.org/wiki/Releases/4.11.1) - update to 4.11.2-rc2 (http://rpm.org/wiki/Releases/4.11.1)
- drop upstreamed patches - handle aarch64 debug_info relocations in debugedit (#974860) - disable autoconf config.site processing in builds (#962837) - fix regression on addressing main package by its name (#972994) - update to 4.11.1-rc1 (http://rpm.org/wiki/Releases/4.11.1) - serialize BDB environment open/close (#924417) - only consider files with .pm suffix as perl modules (#927211) - filter out non-library soname dependencies - check for stale locks when opening write-cursors (#860500, #962750...) - lua 5.2 fix from upstream - make rpm-build depend on virtual system-rpm-config provide - update to 4.11.0.1 (http://rpm.org/wiki/Releases/4.11.0.1) - revert yesterdays ghost-fix, it eats rpmdb's� x�������������`������ X � �$8 ����������������>P �$ . ���������������� >P =P ?P � spec: /var/lib/dnf owned by dnf-conf (Jan Silhan)
- spec: apply the weak dependencies only on F21+ (Radek Holy)
- dnf-automatic: fixed python_sitelib (RhBug:1199450) (Jan Silhan)
- Add release instructions (Michal Luscon)
- setup tito to bump version in VERSION.cmake (Michal Luscon)
- initialize to use tito (Michal Luscon)
- prepare repo for tito build system (Michal Luscon)
- spec: recommends bash-completion (RhBug:1190671) (Jan Silhan)
- completion: work with just python(3)-dnf (Jan Silhan)
- spec: move necessary files inside python(3) subpackages (RhBug:1191579) (Jan Silhan)
- bash-completion: use python method to get commands (RhBug:1187579) (Igor Gnatenko)
- api: exposed pluginconfpath main config (RhBug:1195325) (Jan Silhan)
- updated AUTHORS (Jan Silhan)
- add reinstall to bash_completion (Alberto Ruiz)
- added new packages to @System for duplicated query test (Michael Mraka)
- test for duplicated, installonly and latest_limit pkgs (Michael Mraka)
- tests for autoremove, extras and recent pkgs (Michael Mraka)
- moved push_userinstalled from base to goal (Michael Mraka)
- filter or skip 'n' latest packages (Michael Mraka)
- moved recent to query (Michael Mraka)
- moved autoremove to query (Michael Mraka)
- moved extras list to query (Michael Mraka)
- create query for installonly packages (Michael Mraka)
- create query for duplicated packages (Michael Mraka)
- cosmetic: base: fixed pylint warnings (Jan Silhan)
- do transaction cleanup after plugin hook (RhBug:1185977) (Michal Luscon)
- base: extend download lock (RhBug:1157233) (Michal Luscon)
- lock: output meaningful error for malformed lock file (Michal Luscon)
- util: fix race condition in ensure_dir() (Michal Luscon)
- lock: switch metadata lock to blocking mode (Michal Luscon)
- install nonmandatory group packages as optional (Related:RhBug:1167881) (Michal Luscon)
- remove command deletes whole dependency tree (RhBug:1154202) (Jan Silhan)
- cmd list takes <package-name-specs> as parameter, revert of 526e674 (Jan Silhan)
- spec: own /var/lib/dnf directory (RhBug:1198999) (Jan Silhan)
- transifex update (Jan Silhan)
- doc: fixed systemd execution of dnf-automatic (Jan Silhan)
- doc: how to run dnf-automatic (RhBug:1195240) (Jan Silhan)
- cosmetic: added forgotten :api mark from 05b03fc (Jan Silhan)
- api: exposed Repo.skip_if_unavailable config (RhBug:1189083) (Jan Silhan)
- updated documentation for 'dnf list autoremove' (Michael Mraka)
- reuse list_autoremove() in autoremove command (Michael Mraka)
- function for autoremove package list (Michael Mraka)
- implemented dnf list autoremove (Michael Mraka)
- exclude not documented history subcommands (RhBug:1193914,1193915) (Jan Silhan)
- better file pattern recognition (RhBug:1195385) (Jan Silhan)
- spec: fix Obsoletes of the new DNF (Radek Holy)
- remove boot only constraint and add missing download lock (Michal Luscon)
- util: remove unused user_run_dir() function (Michal Luscon)
- lock: change the destination folder of locks to allow suided programs work properly (RhBug:1195661) (Michal Luscon)
- install dnf-3 only when python3 is enabled (thanks glensc) (Jan Silhan)
- fixed unicode Download error (RhBug:1190458) (Jan Silhan)
- log: print metadata age along with timestamp (Petr Spacek)
- cli: fix double expansion of cachedir (RhBug:1194685) (Michal Luscon)
- removed unused dnf-makecache.cron (Jan Silhan)
- renamed erase command to remove (RhBug:1160806) (Jan Silhan)
- spec: made python3-dnf package installed by default in f23 (Jan Silhan)
- AUTHORS: changed email address (Jan Silhan)
- doc: improve the documentation of the "install" command (Radek Holy)
- "dnf install non-existent" should fail (Radek Holy)
- tests: add some tests of Base.install (Radek Holy)
- tests: add some tests of Base.package_install (Radek Holy)
- Revert "doesn't upgrade packages by installing local packages" (RhBug:1160950) (Radek Holy)
- lint: fix all Pylint errors in test_install (Radek Holy)
- tests: add some tests to test_install (Radek Holy)
- tests: improve some tests in test_install (Radek Holy)
- cosmet� x��������������~����� X � �&8 �� h���k! �$ { ���������������� k! j! l! � r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(rd(r d(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(rd(r d(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r d(rd(rd(r � x�������������Pn����� X � �&8 � ������ �$ [ ���������������� � � � � -36.opt-1.pyc system_upgrade.cpython-36.pyc builddep.py changelog.py config_manager.py copr.py debug.py debuginfo-install.py download.py generate_completion_cache.py groups_manager.py needs_restarting.py repoclosure.py repodiff.py repograph.py repomanage.py reposync.py system_upgrade.py dnfpluginscore __init__.py __pycache__ __init__.cpython-36.opt-1.pyc __init__.cpython-36.pyc dnf-system-upgrade-cleanup.service dnf-system-upgrade.service dnf-system-upgrade.service python3-dnf-plugins-core AUTHORS README.rst python3-dnf-plugins-core COPYING dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo dnf-plugins-core.mo packages.db /etc/dnf/plugins/ /usr/lib/python3.6/site-packages/dnf-plugins/__pycache__/ /usr/lib/python3.6/site-packages/dnf-plugins/ /usr/lib/python3.6/site-packages/dnf-plugins/ /usr/lib/python3.6/site-packages/ /usr/lib/python3.6/site-packages/dnfpluginscore/ /usr/lib/python3.6/site-packages/dnfpluginscore/__pycache__/ /usr/lib/systemd/system/ /usr/lib/systemd/system/system-update.target.wants/ /usr/share/doc/ /usr/share/doc/python3-dnf-plugins-core/ /usr/share/licenses/ /usr/share/licenses/python3-dnf-plugins-core/ /usr/share/locale/ca/LC_MESSAGES/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/da/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/es/LC_MESSAGES/ /usr/share/locale/eu/LC_MESSAGES/ /usr/share/locale/fi/LC_MESSAGES/ /usr/share/locale/fr/LC_MESSAGES/ /usr/share/locale/fur/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/ja/LC_MESSAGES/ /usr/share/locale/ko/LC_MESSAGES/ /usr/share/locale/nl/LC_MESSAGES/ /usr/share/locale/pa/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/ru/LC_MESSAGES/ /usr/share/locale/sk/LC_MESSAGES/ /usr/share/locale/sq/LC_MESSAGES/ /usr/share/locale/sr/LC_MESSAGES/ /usr/share/locale/sv/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/locale/uk/LC_MESSAGES/ /usr/share/locale/zh_CN/LC_MESSAGES/ /usr/share/locale/zh_TW/LC_MESSAGES/ /var/cache/dnf/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection cpio xz 2 noarch-redhat-linux-gnu ASCII text directory python 3.6 byte-compiled Python script, ASCII text executable Python script, UTF-8 Unicode text executable UTF-8 Unicode text cannot open `/builddir/build/BUILDROOT/dnf-plugins-core-4.0.21-25.el8.s390x/var/cache/dnf/packages.db' (No such file or directory)
� x��������������]����� X � K'8 `� �g���� " �$ ���������������� " " " �
- Oddjob mkhomedir needs to connectto user processes
- Make oddjob_mkhomedir_t a userdom home manager - Put placeholder back in place for proper numbering of capabilities
- Systemd also configures init scripts - Fix ecryptfs interfaces
- Bootloader seems to be trolling around /dev/shm and /dev
- init wants to create /etc/systemd/system-update.target.wants
- Fix systemd_filetrans call to move it out of tunable
- Fix up policy to work with systemd userspace manager
- Add secure_firmware capability and remove bogus epolwakeup
- Call seutil_*_login_config interfaces where should be needed
- Allow rhsmcertd to send signal to itself
- Allow thin domains to send signal to itself
- Allow Chrome_ChildIO to read dosfs_t - Add role rules for realmd, sambagui - Add new type selinux_login_config_t for /etc/selinux/<type>/logins/
- Additional fixes for seutil_manage_module_store()
- dbus_system_domain() should be used with optional_policy
- Fix svirt to be allowed to use fusefs file system
- Allow login programs to read /run/ data created by systemd_login
- sssd wants to write /etc/selinux/<policy>/logins/ for SELinux PAM module
- Fix svirt to be allowed to use fusefs file system
- Allow piranha domain to use nsswitch
- Sanlock needs to send Kill Signals to non root processes
- Pulseaudio wants to execute /run/user/PID/.orc - Fix saslauthd when it tries to read /etc/shadow
- Label gnome-boxes as a virt homedir
- Need to allow svirt_t ability to getattr on nfs_t file systems
- Update sanlock policy to solve all AVC's
- Change confined users can optionally manage virt content
- Handle new directories under ~/.cache
- Add block suspend to appropriate domains
- More rules required for containers
- Allow login programs to read /run/ data created by systemd_logind
- Allow staff users to run svirt_t processes - Update to upstream - More fixes for systemd to make rawhide booting from Dan Walsh - Add systemd fixes to make rawhide booting - Add systemd_logind_inhibit_var_run_t attribute
- Remove corenet_all_recvfrom_unlabeled() for non-contrib policies because we moved it to domain.if for all domain_type
- Add interface for mysqld to dontaudit signull to all processes
- Label new /var/run/journal directory correctly
- Allow users to inhibit suspend via systemd
- Add new type for the /var/run/inhibit directory
- Add interface to send signull to systemd_login so avahi can send them
- Allow systemd_passwd to send syslog messages
- Remove corenet_all_recvfrom_unlabeled() calling fro policy files
- Allow editparams.cgi running as httpd_bugzilla_script_t to read /etc/group
- Allow smbd to read cluster config
- Add additional labeling for passenger
- Allow dbus to inhibit suspend via systemd
- Allow avahi to send signull to systemd_login - Add interface to dontaudit getattr access on sysctls
- Allow sshd to execute /bin/login
- Looks like xdm is recreating the xdm directory in ~/.cache/ on login
- Allow syslog to use the leaked kernel_t unix_dgram_socket from system-jounald
- Fix semanage to work with unconfined domain disabled on F18
- Dontaudit attempts by mozilla plugins to getattr on all kernel sysctls
- Virt seems to be using lock files
- Dovecot seems to be searching directories of every mountpoint
- Allow jockey to read random/urandom, execute shell and install third-party drivers
- Add aditional params to allow cachedfiles to manage its content
- gpg agent needs to read /dev/random
- The kernel hands an svirt domains /SYSxxxxx which is a tmpfs that httpd wants to read and write
- Add a bunch of dontaudit rules to quiet svirt_lxc domains
- Additional perms needed to run svirt_lxc domains
- Allow cgclear to read cgconfig
- Allow sys_ptrace capability for snmp
- Allow freshclam to read /proc
- Allow procmail to manage /home/user/Maildir content
- Allow NM to execute wpa_cli
- Allow amavis to read clamd system state
- Regenerate man pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Add realmd and stapserver policies
- Allow useradd to manage stap-server lib files
- Tighten up capabilities� x�������������@M����� X � �&8 ����������� �$ _ ���������������� � � � � typos and missing demand (Michael Mraka)
- changed warning paragraph (Michael Mraka)
- AUTHORS: updated (Jan Silhan)
- debuginfo-install: don't consider src packages as candidates for installation
(RhBug:1215154) (Lubomir Rintel)
- documentation warning about build deps in srpm (Michael Mraka)
- fixed builddep tests (Michael Mraka)
- builddep: enable source repos only when needed (Michael Mraka)
- fixed builldep documentation (Michael Mraka)
- mark appropriate dnfpluginscore.lib as API (Michael Mraka)
- fixed builddep configure test (Michael Mraka)
- moved enable_{source|debug}_repos() to dnfpluginscore.lib (Michael Mraka)
- builddep: add feature to get builddeps from remote packages (RhBug:1074585)
(Igor Gnatenko)
- doc: repoquery: doesn't print 'No match for argument:...' garbage (Jan
Silhan)
- updated repoquery documentation (Michael Mraka)
- implemented repoquery --latest-limit (Michael Mraka)
- implemented repoquery --unsatisfied (Michael Mraka)
- builddep: Support defining macros for parsing spec files (David Michael)
- removed redundant argument (Michael Mraka)
- doc: update repoquery docs with --resolve (Tim Lauridsen)
- repoquery: add --resolve option (RhBug:1156487) (Tim Lauridsen)
- spec: dnf version upper boundaries (Jan Silhan)
- spec: added plugin command provides (Related:RhBug:1208773) (Jan Silhan)
- make --repo cumulative (Michael Mraka)
- rename --repoid to --repo (Michael Mraka)
- don't delete local repo packages after download (RhBug:1186948) (Michael
Mraka)
- doc: replaced last references pointing to akozumpl (Jan Silhan) - doc: release notes 0.1.6 (Michal Luscon)
- initialize to use tito (Michal Luscon)
- prepare repo for tito build system (Michal Luscon)
- migrate raw_input() to Python3 (RhBug:1208399) (Miroslav Suchý)
- require dnf 0.6.5+ which contains duplicated/installonly queries (Michael Mraka)
- implemented --duplicated and --installonly (Michael Mraka)
- create --destdir if not exist (Michael Mraka)
- repoquery: Added -s/--source switch, test case and documentation for querying source rpm name (Parag Nemade)
- repoquery: Added documentation and test case for file switch (Parag Nemade)
- spec: ship man pages in dnf-plugins-core metapackage (Jan Silhan)
- debuginfo-install: support cases where src.rpm name != binary package name (Petr Spacek)
- spec: added empty %files directive to generate rpm (Jan Silhan)
- spec: adapt to pykickstart f23 package split (Jan Silhan)
- spec: requires >= dnf version not = (Jan Silhan)
- spec: python3 source code by default in f23+ (RhBug:1194725,1198442) (Jan Silhan)
- use dnfpluginscore.lib.urlopen() (RhBug:1193047) (Miroslav Suchý)
- implemented functionality of yum-config-manager (Michael Mraka)
- repoquery: Added --file switch to show who owns the given file (RhBug:1196952) (Parag Nemade)
- debuginfo-install: accept packages names specified as NEVRA (RhBug:1171046) (Petr Spacek)
- repoquery: accept package names specified as NEVRA (RhBug:1179366) (Petr Spacek)
- download: fix typo in 'No source rpm definded' (Petr Spacek)
- download: accept package names ending with .src too (Petr Spacek)
- download: Do not disable user-enabled repos (thanks Spacekpe) (Jan Silhan)
- Add README to tests/ directory (Petr Spacek)
- AUTHORS: updated (Jan Silhan)
- download: fix package download on Python 3 (Petr Spacek) - man pages moved into dnf-plugins-core subpackage - fixed python(3)-dnf dependency in f23 - updated package url (Michael Mraka)
- also dnf_version could be specified on rpmbuild commandline (Michael Mraka)
- simple script to build test package (Michael Mraka)
- let gitrev be specified on rpmbuild commandline (Michael Mraka)
- assign default GITREV value (Michael Mraka)
- standard way to find out latest commit (Michael Mraka)
- debuginfo-install: fix handling of subpackages with non-zero epoch (Petr Spacek)
- debuginfo-install: Make laywers happier by assigning copyright to Red Hat (Petr Spacek)
- debuginfo-install: remove dead code uncovered by variable renaming (Petr Spacek)
- debuginfo-install: clearly separate source and � x��������������<����� X � �&8 �8������� �! �$ ���������������� �! �! �! � c1 1cf92f7cd0f31d45701ff1210ac3346bb70cf1cc14f59d0218319951ef9597e3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 30e76e23cfdf55d3d998a86133c0543b5f63be46f3f09287088ba1dc2c84c871 52dc5a1768636d5b4f1f81c9237151d5f9c320bbfdd47f466a99a631178858c3 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e1fe15ccab60a236f8e159e12db7ecb06986ebc86d2d23519252e39cc12b125c 59244af970a76140c20ce1830f94e0cb649e2ce66be9cfce1447e6aa4792cbab d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 49dac2fd381362f5e3c688638093cb27f4b8ee56d078c869ab5b86b75857f242 45065028cc9b22c3fab76211058ac680388b77ef48094dbcbead263db3db6d2c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 6ba4b64ca1d7920dab32bb33d89ba296d613419f43afefa95f5cce85c074e38b 1354027332a835901367e7c895e40b5c0989d75b2b7dbdc21678a9537e42c163 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e47c67a8977903a1ca7104588ae8a0db320b01ba0eb113a10677cf399aac77bd 14528d992a4ea90058ad815d60d0a023b679fda0edaaf200ec050f9ca99e315e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 754b5370dd63a790eb2c91b846cc4a6d9535b55cdab2ae3421e49389a92990e3 d81b0b0cab95f4673524545610435fa1f2818aa1c0612c7a8e04e12e41fbd108 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7be766d4665cf71cd46d62b4a8e5d8443d25e35b6bd562872154e4b3c8fa5fe2 5350a458f65081295f07a4345155b3057cdd6ddb06bf3ea0566d2f84731f08eb d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0209bd5694f4842c1b19b9ce55092e8fc4144994bb144177bfa62d5b71858b13 ef7df70d284500f62d2c016c8bb5915eaa0e0648cee1e610b66fa93c5e86c189 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 143802472e0962ba6ca940787498695c8c037552283d2573f5a16a663907b43a 101e17ed453044aea1096eb824a8c68a491f64a12dfb82faea30d2a3240bc02c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3b543a25226335585b3a99fbfc7166c7296f509f9eb64c695e95fa29de785b90 275933a5b9c09ffdcc3f220bebfb3581b57d8bf8e363cc6bc1378edef3258080 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d9f5d6d3e1662828550983fef5a3d2f39e69287a725686cac73ab81646b72932 e96bc59fba8054b75ef08d06703a44c4e94b27fa073709cc7b2a79c9927be80c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e fe85496bb0fdbcc2cac84de46b102e10f9fc949e886e4271fa0774f423819d68 8894f154b72512f4b6aeec9e2b11c39b2e72d6fe0123b48cedd18ae18cb6a10f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 99f39bacb759be03934fc06a183b513474e97724e4307ff32eac09d466a1ceb3 86598f6bd1b46cdef27d680233a1583c858fb4f89974084ed6328e6c18ed9f42 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e fe5e5f325530e87f028d89862d3aa4bd39d26e1637d7c94e52a6965a86f4ff7e 518cedb562de9d5c9f547ed6dbfcbfea9b571bea9193082b118b7bad5ed2468b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 0a486a4060f2d298d8537f9f4a002094c9083ce46545f42e326d41fd88412e2a 7b84e080fce14f0650321014ec704b07470a2252e05a8c76f71d0bf6c6e2ab93 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 608c73e32760ab4c67b0d2c4922fe978c17b9eee87ed1616739793a5e936ce69 b711b5adb691fc45920ed1ccefa1936a94551b61a931c883916cda64ce1b1d84 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d04cb9021fecddf2f43e1300ee95bf2ff569f13e7f2901706d53ec616151382c f6834004e882a55f5aff4976f30a96f4769aed89e42d079a4a81b77ab33fc19f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e f0b23fbd7959535fca8992a87c3546a03275e20c1f2d7ff797f9f45968e8de01 856cd8968692e58d4b1f94a5a60c1c9bd7067feebd2c827972c69395d80dba18 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4d119eaa0cfbdb9b37a88a812becbad830c1755b2d31ed1241ba7df9d932ab85 e48448c66bb5609cbb2d0613531d67a27e3bea113d46fbdcb0c3821388f9e1d2 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 585ece47bbfd7b53a92ad895e7b4b3966d963b701bfba291ac8065ab7f479057 ed432e83896ae282b7c540206c2f451f2ecdf591016d813c20780a4d4d16b13e d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 3d4b325283e81da9� x�������������0,����� X � �&8 �i������������ �$ \ ���������������� � � � � hroot when it should be guessed (Miroslav Suchý) - clenaup: remove commented out code (Miroslav Suchý)
- copr: list: print description (Igor Gnatenko)
- builddep: rpm error messages sink. (Ales Kozumplik)
- builddep: improve error handling on an command argument (RhBug:1074436) (Ales Kozumplik)
- copr: handling case when no argument is passed on cli (Miroslav Suchý)
- copr: delete excess argument (Igor Gnatenko)
- add copr plugin (Miroslav Suchý)
- debuginfo-install: check for root with dnf api (Igor Gnatenko)
- packaging: fix bogus dates. (Ales Kozumplik) - packaging: add debuginfo-install.py (Ales Kozumplik) - packaging: add builddep.py to the RPM. (Ales Kozumplik) - refactor: use Base.install instead of installPkgs in kickstart plugin. (Radek Holy)
- refactor: move kickstart arguments parsing to standalone method. (Radek Holy)
- tests: test effects instead of mock calls. (Radek Holy)
- Add debuginfo-install plugin. (RhBug:1045770) (Igor Gnatenko)
- builddep: needs to be run under root. (RhBug:1065851) (Ales Kozumplik) - tests: import mock through support so its simpler for the test cases. (Ales Kozumplik)
- packaging: fix typos in the spec. (Ales Kozumplik)
- [completion_cache] Cache installed packages, update the cache less frequently (Elad Alfassa)
- Add bash completion to dnf (Elad Alfassa)
- packaging: missing buildrequire (Ales Kozumplik) - First release. - Spec updates. - Spec updates. - Spec updates. - The initial package version. python3-dnf-plugin-system-upgrade python3-dnf-plugins-extras-debug python3-dnf-plugins-extras-repoclosure python3-dnf-plugins-extras-repograph python3-dnf-plugins-extras-repomanage
" " $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 7 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ca cs da de es eu fi fr fur hu id it ja ko nl pa pl pt pt ru sk sq sr sv tr uk zh zh 4.0.21-25.el8 4.0.21-25.el8 4.0.21-25.el8 4.0.21-25.el8 4.0.21-25.el8 4.0.21-25.el8 4.0.21-25.el8 4.0.21-25.el8 2.0.0 2.0.0 2.0.0 2.0.0
! " # $ % & ' ( )copr.conf copr.d debuginfo-install.conf builddep.cpython-36.opt-1.pyc builddep.cpython-36.pyc changelog.cpython-36.opt-1.pyc changelog.cpython-36.pyc config_manager.cpython-36.opt-1.pyc config_manager.cpython-36.pyc copr.cpython-36.opt-1.pyc copr.cpython-36.pyc debug.cpython-36.opt-1.pyc debug.cpython-36.pyc debuginfo-install.cpython-36.opt-1.pyc debuginfo-install.cpython-36.pyc download.cpython-36.opt-1.pyc download.cpython-36.pyc generate_completion_cache.cpython-36.opt-1.pyc generate_completion_cache.cpython-36.pyc groups_manager.cpython-36.opt-1.pyc groups_manager.cpython-36.pyc needs_restarting.cpython-36.opt-1.pyc needs_restarting.cpython-36.pyc repoclosure.cpython-36.opt-1.pyc repoclosure.cpython-36.pyc repodiff.cpython-36.opt-1.pyc repodiff.cpython-36.pyc repograph.cpython-36.opt-1.pyc repograph.cpython-36.pyc repomanage.cpython-36.opt-1.pyc repomanage.cpython-36.pyc reposync.cpython-36.opt-1.pyc reposync.cpython-36.pyc system_upgrade.cpython� x������������������� X � !&8 ������������~Q �$ n ���������������� ~Q }Q Q � 3770a3cdd730363609137b9ad0a7899b555e 0942ece823e760e08530cba2f13b8bc1abc64e2395058508dc460895a78e7986 b103815c651512c098ae53d59ce4304040811f1e3301608edf268f649a8ffc25 9d9e77b4fbca1c350c2b005f49e35fb444760c3950ab1210214ab80a5fbe4107 86d9b386cecb793b0f2b73c9bf37b549603923ba044b7870d4a3ecb3409de598 e6bba8b9229acfa20f13a4c5e2a14726eb46f8cfb3c91ec01a757b7945d538b6 a42edb855580cb23b50dc259e6b84ecbc04139ad157a559a6850925f02fcf5ae 176264972f40e6f08c00100ba75ad5b0c0493cfcd4f6e534a57455453b0cde81 8a7fd60790b81633a323cdca6a6a9cf56edc5ae1fcfc8e77af7d16e0ee29ac2a 1717d8bcf6e1300b09ed57ec4117c0b3b97ff3b51803cf3011d715656917b5ac abd569bfc5ee6a95ea9033ae4b1887afb4802f440786d9d72ed729513fbbe36b cfb6a41d70f1e90da59b554c7cdb5f82b12f669aecd41116a2cc9501250eb704 31f3b909a9a22a348159e91f14f42187f533afce1dfe8e158b0069fd58dd2772 b3a4d4ae416c6c2243abdd41b9a8fee9b55dec588eea893a2714351e7f1f5b09 a79ba85e4a899d070c814fbc3a824a337b62875815374a0fb5245d975e68e5a2 a56dad858a88287a99295159678488ce84f9626c9f7797d00423169e711d2dca a2ba01270b7e8f6a73672751bbe44746d601d5c06035b21656d091904fbf355e 4e2bfea64de702ee3888df6e0bd10baa1458acfb3649aee1184a2dd28d5bedcc 31e5d0cc0dd7c6922a0242fa8adf185cf4487a8a0c840554a6f3194943252aa5 a3a9afd57e7c21dd49b8cde337e8d9ac730d8c6ce3f23e881e79d775d14871a6 e92f4e5901d44cfd205f743245ddb126f031b2aa68f4610b40fcea789468e454 d20b4f4296a5d49bcf55786459c3fe30655fc20e136d1b51961e6132cc42c1af bd6d94d1fa5888160634fd79a49262169f1534a5731e800ae85a472633b64d5a a2f86d930881fcdef53eee786658fa8fc80809f03253a431c1e7a64b1fd60933 e42aa83db3f5a2ebc830ead61968179f2b37db76613a6a95171b17818b305ee4 eea4407831aa17a9221e315f4fe241e80dea655267111b59ef1e17368d1f9700 20f1932d304723152287c5def42ea0516de51cb06ae2a7fbbaca1b3f36332791 9104d7f68fe9fdfacb774f081eec4013d89c38c4cdb800556c640c2ede43b5a3 dca1f20206fb1b4fa3b3b5e77f39491a13345f10bbf2a59a8597098911949dc0 e08acf5b3aa7730f16c111fe617d7a74c5477815af4810364bc33f572726badb 303b7793dc898672bfcc2be6772747e221bb5ac6a0581d480244c8fc9092fbdf eac4210584b0c8554205d079073003562f8a1499ef4f9e48632753863d2604ff 9f0c2dafa2fa62522d2021e1af85186b6958d7130478a57bcd77f568beedd206 e56189a13bb311740c9e4cf8c38cc30640d947cadf6bcfb02b034e02cdf5dadd a0a80260b3d47b0fe35506e4a2b2b0fc8921010c0e4cebf9e8bdc9776056fdf8 bdc4f318a1bd7edbb673fe052a38cb9f954d768d694d318ebb1d3a643f87f484 c7e084dddc68c746399c8848298370e796bdd357c4248b224b3d32c793f71b04 7dc1c8a201b11636f042e221f51792e98fa0ac66e0d07937e287ea56b4429fbb 4215d64c31107bceb1c9e6cd22d85a692ba63d2b12a9e4e6866ffa0be9340919 5bf59b2ee80d048f455105b4a665330beae53ead0b863a8cb4c7b9cb41f64db8 ca02edf32fa61b41c7d4aa2804b93e9286a0e45780ea8c77e92f4fad793df988 8d110a2da980f3e857f7bbd5647ddf5549546430326cf5f6773aea0b6b6c9c91 089bb2043f2747510415efe68884c06ef81c34fc1707a460d861592975543ebf a8a7436972f62363b4a2a57f81e8a5eddcfd4331753c5596118f5e6405de7ddf 806dafea8a0f2cda0de441bb18d5a8f4c044b3b7562a5a0cac9d4ce56ae9e06c a6f8c06318f1d60ac2e8f84d27f340306d8b2588ccacfadf52815dcb093f1d07 cc5740493ef8b96799c0836534434a56c0f3b4856e150e1376a4f3a6bb811aa5 d2b398277ea71ea5695e7ebf4c5097ab84f308c5ed222c0efe0c0234a1d9f9e1 d850ee0538cd4eb1273f9452c89d6fe8948ba7b403c3f684968ae0a1c12f4b18 adeca9e333ae17dbe45a17d8799a4207e3780ae2bd52914f40d97b9b48afe3cd 739197ecec6983d10ec8e2a1c65bd768e4510ac54719b2af2c9783826f3fb7ff 36f1049db7e6e2cd92cd0e8c6cec6518e92cd982159a8bfc2db3c81f387012fe 53c173796c8bba680735df4d5329af4a8f96abcfeff56037f4be5d7e82fa2f71 9a3bd486186b8a4a910b88bd8a503ee4f077b3c36fdc8e450fda74f899bacbc8 87c24fe374c2d2c0e6c673684dce91a9900a274502f574b935e7f4f89489dcfb cdc6ae8ea727fbb6026fd6030901ccc709a99e05aee2932e466b928758add67d 30be9d6cb5974c7ed3f6200f0d805f0e67c41b123123e891dfb98272c1c7cfe1 7cfecfafd12a59e5df8a185315b38cd303ae7d0d5a3fca946e1a4d989df7e761 cf0c82f025f92253a9f8d283c203a80357167c9915c8121b669fe5c783845b4f 38e30ee938088a7431126388158736d379e321d09b2f7b950be7d9d8447af6ec 48a2516e8ad8a796373e6f89224d587767de5719578845efa4c02436199bfaf2 daa2ef7353075ed9d9377d8e12924f67a42d39fa8605229b57f78df30fb7fbd7 4c6c5cd06b12bf468a94106b2c8e384a11ae342979c3571ce9db8834861aa485� x������������� ����� X � �&8 ��������xq�������! �$ : ���������������� �! �! �! � Grepl <mgrepl@redhat.com> 3.9.16-17 Dan Walsh <dwalsh@redhat.com> 3.9.16-16.1 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-16 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-15 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-14 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-13 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-12 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-11 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-10 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-7 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-6 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-5 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-4 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-3 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-2 Miroslav Grepl <mgrepl@redhat.com> 3.9.16-1 Miroslav Grepl <mgrepl@redhat.com> 3.9.15-5 Miroslav Grepl <mgrepl@redhat.com> 3.9.15-2 Miroslav Grepl <mgrepl@redhat.com> 3.9.15-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.9.14-2 Dan Walsh <dwalsh@redhat.com> 3.9.14-1 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-10 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-9 Dan Walsh <dwalsh@redhat.com> 3.9.13-8 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-7 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-6 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-5 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-4 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-3 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-2 Miroslav Grepl <mgrepl@redhat.com> 3.9.13-1 Miroslav Grepl <mgrepl@redhat.com> 3.9.12-8 Miroslav Grepl <mgrepl@redhat.com> 3.9.12-7 Miroslav Grepl <mgrepl@redhat.com> 3.9.12-6 Miroslav Grepl <mgrepl@redhat.com> 3.9.12-5 Dan Walsh <dwalsh@redhat.com> 3.9.12-4 Dan Walsh <dwalsh@redhat.com> 3.9.12-3 Dan Walsh <dwalsh@redhat.com> 3.9.12-2 Miroslav Grepl <mgrepl@redhat.com> 3.9.12-1 Dan Walsh <dwalsh@redhat.com> 3.9.11-2 Miroslav Grepl <mgrepl@redhat.com> 3.9.11-1 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-13 Dan Walsh <dwalsh@redhat.com> 3.9.10-12 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-11 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-10 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-9 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-8 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-7 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-6 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-5 Dan Walsh <dwalsh@redhat.com> 3.9.10-4 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-3 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-2 Miroslav Grepl <mgrepl@redhat.com> 3.9.10-1 Miroslav Grepl <mgrepl@redhat.com> 3.9.9-4 Dan Walsh <dwalsh@redhat.com> 3.9.9-3 Miroslav Grepl <mgrepl@redhat.com> 3.9.9-2 Miroslav Grepl <mgrepl@redhat.com> 3.9.9-1 Miroslav Grepl <mgrepl@redhat.com> 3.9.8-7 Dan Walsh <dwalsh@redhat.com> 3.9.8-6 Miroslav Grepl <mgrepl@redhat.com> 3.9.8-5 Miroslav Grepl <mgrepl@redhat.com> 3.9.8-4 Dan Walsh <dwalsh@redhat.com> 3.9.8-3 Dan Walsh <dwalsh@redhat.com> 3.9.8-2 Dan Walsh <dwalsh@redhat.com> 3.9.8-1 Dan Walsh <dwalsh@redhat.com> 3.9.7-10 Dan Walsh <dwalsh@redhat.com> 3.9.7-9 Dan Walsh <dwalsh@redhat.com> 3.9.7-8 Dan Walsh <dwalsh@redhat.com> 3.9.7-7 Dan Walsh <dwalsh@redhat.com> 3.9.7-6 Dan Walsh <dwalsh@redhat.com> 3.9.7-5 Dan Walsh <dwalsh@redhat.com> 3.9.7-4 Dan Walsh <dwalsh@redhat.com> 3.9.7-3 Dan Walsh <dwalsh@redhat.com> 3.9.7-2 Dan Walsh <dwalsh@redhat.com> 3.9.7-1 Dan Walsh <dwalsh@redhat.com> 3.9.6-3 Dan Walsh <dwalsh@redhat.com> 3.9.6-2 Dan Walsh <dwalsh@redhat.com> 3.9.6-1 Dan Walsh <dwalsh@redhat.com> 3.9.5-11 Dan Walsh <dwalsh@redhat.com> 3.9.5-10 Dan Walsh <dwalsh@redhat.com> 3.9.5-9 Dan Walsh <dwalsh@redhat.com> 3.9.5-8 Dan Walsh <dwalsh@redhat.com> 3.9.5-7 Dan Walsh <dwalsh@redhat.com> 3.9.5-6 Dan Walsh <dwalsh@redhat.com> 3.9.5-5 Dan Walsh <dwalsh@redhat.com> 3.9.5-4 Dan Walsh <dwalsh@redhat.com> 3.9.5-3 Dan Walsh <dwalsh@redhat.com> 3.9.5-2 Dan Walsh <dwalsh@redhat.com> 3.9.5-1 Dan Walsh <dwalsh@redhat.com> 3.9.4-3 Dan Walsh <dwalsh@redhat.com> 3.9.4-2 Dan Walsh <dwalsh@redhat.com> 3.9.4-1 Dan Walsh <dwalsh@redhat.com> 3.9.3-4 Dan Walsh <dwalsh@redhat.com> 3.9.3-3 Dan Walsh <dwalsh@redhat.com> 3.9.3-2 Dan Walsh <dwalsh@redhat.com> 3.9.3-1 Dan Walsh <dwalsh@redhat.com> 3.9.2-1 Dan Walsh <dwalsh@redhat.com> 3.9.1-� x�������������������� X � �%8 ���������h���� �$ ~ ���������������� � � � � rea icon
o Static IP configuration support - Update from CVS - Require gnome-panel, not gnome-panel-devel
- Turn off by default - Update to 0.2 - spec-changes to req glib2 instead of glib - First public release /sbin/ldconfig /sbin/ldconfig
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H as be@latin bg bn bs ca cs da de dz el en en eo es et eu fi fr gd gl gu he hi hr hu id it ja ka kn ko ku lt lv mk ml mr nb ne nl oc or pa pl pt pt ro ru rw sk sl sq sr sr@latin sv ta te th tr uk vi wa zh zh zh � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � 1:1.40.16-1.el8 1:1.40.16-1.el8
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F.build-id 03 2e8dde34d4868381ce0effa5f1e1d70eac3dad NM-1.0.typelib libnm.so.0 libnm.so.0.1.0 NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo NetworkManager.mo /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/03/ /usr/lib64/girepository-1.0/ /usr/lib64/ /usr/share/locale/as/LC_MESSAGES/ /usr/share/locale/be@latin/LC_MESSAGES/ /usr/share/locale/bg/LC_MESSAGES/ /usr/share/locale/bn_IN/LC_MESSAGES/ /usr/share/locale/bs/LC_MESSAGES/ /usr/share/locale/ca/LC_MESSAGES/ /usr/share/locale/cs/LC_MESSAGES/ /usr/share/locale/da/LC_MESSAGES/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/dz/LC_MESSAGES/ /usr/share/locale/el/LC_MESSAGES/ /usr/share/locale/en_CA/LC_MESSAGES/ /usr/share/locale/en_GB/LC_MESSAGES/ /usr/share/locale/eo/LC_MESSAGES/ /usr/share/locale/es/LC_MESSAGES/ /usr/share/locale/et/LC_MESSAGES/ /usr/share/locale/eu/LC_MESSAGES/ /usr/share/locale/fi/LC_MESSAGES/ /usr/share/locale/fr/LC_MESSAGES/ /usr/share/locale/gd/LC_MESSAGES/ /usr/share/locale/gl/LC_MESSAGES/ /usr/share/locale/gu/LC_MESSAGES/ /usr/share/locale/he/LC_MESSAGES/ /usr/share/locale/hi/LC_MESSAGES/ /usr/share/locale/hr/LC_MESSAGES/ /usr/share/locale/hu/LC_MESSAGES/ /usr/share/locale/id/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/ja/LC_MESSAGES/ /usr/share/locale/ka/LC_MESSAGES/ /usr/share/locale/kn/LC_MESSAGES/ /usr/share/locale/ko/LC_MESSAGES/ /usr/share/locale/ku/LC_MESSAGES/ /usr/share/loc� x������������������� X � 0'8 Xi�����������" �$ ���������������� " " " � ll logging_relabel_all_log_dirs() in systemd.te
- Allow systemd_tmpfiles to relabel log directories
- Allow staff_t to run frequency command
- Allow staff_t to read xserver_log file
- This reverts commit c0f9f125291f189271cbbca033f87131dab1e22f.
- Label hsperfdata_root as tmp_t
- Add plymouthd_create_log()
- Dontaudit leaks from openshift domains into mail domains, needs back port to RHEL6
- Allow sssd to request the kernel loads modules
- Allow gpg_agent to use ssh-add
- Allow gpg_agent to use ssh-add
- Dontaudit access check on /root for myslqd_safe_t
- Add glusterd_brick_t files type
- Allow ctdb to getattr on al filesystems
- Allow abrt to stream connect to syslog
- Allow dnsmasq to list dnsmasq.d directory
- Watchdog opens the raw socket
- Allow watchdog to read network state info
- Dontaudit access check on lvm lock dir
- Allow sosreport to send signull to setroubleshootd
- Add setroubleshoot_signull() interface
- Fix ldap_read_certs() interface
- Allow sosreport all signal perms
- Allow sosreport to run systemctl
- Allow sosreport to dbus chat with rpm
- Allow zabbix_agentd to read all domain state
- Allow sblim_sfcbd_t to read from /dev/random and /dev/urandom
- Allow smoltclient to execute ldconfig
- Allow sosreport to request the kernel to load a module
- Clean up rtas.if
- Clean up docker.if
- drop /var/lib/glpi/files labeling in cron.fc
- Added new policy for rasdaemon
- Add apache labeling for glpi
- Allow pegasus to transition to dmidecode
- Make sure boot.log is created with the correct label
- Fix typo in openshift.te
- remove dup bumblebee_systemctl()
- Allow watchdog to read /etc/passwd
- Allow condor domains to read/write condor_master udp_socket
- Allow openshift_cron_t to append to openshift log files, label /var/log/openshift
- Add back file_pid_filetrans for /var/run/dlm_controld
- Allow smbd_t to use inherited tmpfs content
- Allow mcelog to use the /dev/cpu device
- sosreport runs rpcinfo
- sosreport runs subscription-manager
- Allow setpgid for sosreport
- Allow browser plugins to connect to bumblebee
- New policy for bumblebee and freqset
- Add new policy for mip6d daemon
- Add new policy for opensm daemon - Add back /dev/shm labeling - Fix gnome_role_template() interface - Add policy-rawhide-contrib-apache-content.patch to re-write apache_content_template() by dwalsh - Fix config.tgz to include lxc_contexts and systemd_contexts - Update to upstream - Fix passenger_stream_connect interface
- setroubleshoot_fixit wants to read network state
- Allow procmail_t to connect to dovecot stream sockets
- Allow cimprovagt service providers to read network states
- Add labeling for /var/run/mariadb
- pwauth uses lastlog() to update system's lastlog
- Allow account provider to read login records
- Add support for texlive2013
- More fixes for user config files to make crond_t running in userdomain
- Add back disable/reload/enable permissions for system class
- Fix manage_service_perms macro
- Allow passwd_t to connect to gnome keyring to change password
- Update mls config files to have cronjobs in the user domains
- Remove access checks that systemd does not actually do - Add support for yubikey in homedir
- Add support for upd/3052 port
- Allow apcupsd to use PowerChute Network Shutdown
- Allow lsmd to execute various lsmplugins
- Add labeling also for /etc/watchdog\.d where are watchdog scripts located too
- Update gluster_export_all_rw boolean to allow relabel all base file types
- Allow x86_energy_perf tool to modify the MSR
- Fix /var/lib/dspam/data labeling - Add files_relabel_base_file_types() interface
- Allow netlabel-config to read passwd
- update gluster_export_all_rw boolean to allow relabel all base file types caused by lsetxattr()
- Allow x86_energy_perf tool to modify the MSR
- Fix /var/lib/dspam/data labeling
- Allow pegasus to domtrans to mount_t
- Add labeling for unconfined scripts in /usr/libexec/watchdog/scripts
- Add support for unconfined watchdog scripts
- Allow watchdog to manage own log files - Add label only for redhat.repo instead of /etc/yum.repos.d� x�������������x������ X � 6'8 �����������
" �$ ����������������
" " " � ocket of xdm_t leak
- Allow xdm_t to create symlinks in log direcotries
- Allow login programs to read afs config
- Label 10933 as a pop port, for dovecot
- New policy to allow selinux_server.py to run as semanage_t as a dbus service
- Add fixes to make netlabelctl working on MLS
- AVCs required for running sepolicy gui as staff_t
- Dontaudit attempts to read symlinks, sepolicy gui is likely to cause this type of AVC
- New dbus server to be used with new gui
- After modifying some files in /etc/mail, I saw this needed on the next boot
- Loading a vm from /usr/tmp with virt-manager
- Clean up oracleasm policy for Fedora
- Add oracleasm policy written by rlopez@redhat.com
- Make postfix_postdrop_t as mta_agent to allow domtrans to system mail if it is executed by apache
- Add label for /var/crash
- Allow fenced to domtrans to sanclok_t
- Allow nagios to manage nagios spool files
- Make tfptd as home_manager
- Allow kdump to read kcore on MLS system
- Allow mysqld-safe sys_nice/sys_resource caps
- Allow apache to search automount tmp dirs if http_use_nfs is enabled
- Allow crond to transition to named_t, for use with unbound
- Allow crond to look at named_conf_t, for unbound
- Allow mozilla_plugin_t to transition its home content
- Allow dovecot_domain to read all system and network state
- Allow httpd_user_script_t to call getpw
- Allow semanage to read pid files
- Dontaudit leaked file descriptors from user domain into thumb
- Make PAM authentication working if it is enabled in ejabberd
- Add fixes for rabbit to fix ##992920,#992931
- Allow glusterd to mount filesystems
- Loading a vm from /usr/tmp with virt-manager
- Trying to load a VM I got an AVC from devicekit_disk for loopcontrol device
- Add fix for pand service
- shorewall touches own log
- Allow nrpe to list /var
- Mozilla_plugin_roles can not be passed into lpd_run_lpr
- Allow afs domains to read afs_config files
- Allow login programs to read afs config
- Allow virt_domain to read virt_var_run_t symlinks
- Allow smokeping to send its process signals
- Allow fetchmail to setuid
- Add kdump_manage_crash() interface
- Allow abrt domain to write abrt.socket - Add more aliases in pegasus.te
- Add more fixes for *_admin interfaces
- Add interface fixes
- Allow nscd to stream connect to nmbd
- Allow gnupg apps to write to pcscd socket
- Add more fixes for openlmi provides. Fix naming and support for additionals
- Allow fetchmail to resolve host names
- Allow firewalld to interact also with lnk files labeled as firewalld_etc_rw_t
- Add labeling for cmpiLMI_Fan-cimprovagt
- Allow net_admin for glusterd
- Allow telepathy domain to create dconf with correct labeling in /home/userX/.cache/
- Add pegasus_openlmi_system_t
- Fix puppet_domtrans_master() to make all puppet calling working in passenger.te
- Fix corecmd_exec_chroot()
- Fix logging_relabel_syslog_pid_socket interface
- Fix typo in unconfineduser.te
- Allow system_r to access unconfined_dbusd_t to run hp_chec - Allow xdm_t to act as a dbus client to itsel
- Allow fetchmail to resolve host names
- Allow gnupg apps to write to pcscd socket
- Add labeling for cmpiLMI_Fan-cimprovagt
- Allow net_admin for glusterd
- Allow telepathy domain to create dconf with correct labeling in /home/userX/.cache/
- Add pegasus_openlmi_system_t
- Fix puppet_domtrans_master() to make all puppet calling working in passenger.te
-httpd_t does access_check on certs - Add support for cmpiLMI_Service-cimprovagt
- Allow pegasus domtrans to rpm_t to make pycmpiLMI_Software-cimprovagt running as rpm_t
- Label pycmpiLMI_Software-cimprovagt as rpm_exec_t
- Add support for pycmpiLMI_Storage-cimprovagt
- Add support for cmpiLMI_Networking-cimprovagt
- Allow system_cronjob_t to create user_tmpfs_t to make pulseaudio working
- Allow virtual machines and containers to run as user doains, needed for virt-sandbox
- Allow buglist.cgi to read cpu info - Allow systemd-tmpfile to handle tmp content in print spool dir
- Allow systemd-sysctl to send system log messages
- Add support for RTP media ports and fmpro-internal
- Make audit� x�������������������� X � g&8 p_����>���s �$ c ���������������� s ] t � request of Petr Vlašic. - Rebuild against new ghostscript in rawhide.
- Update to 6.6.4-8 version. - rebuild against new ghostscript - %files: track sonames, so as not to be surprised by future ABI breaks - Update to 6.6.4-1 to fix FBFS BZ#631169. - Add %doc LICENSE as it required new Licensing Guidelines Update
( https://fedoraproject.org/wiki/Packaging:LicensingGuidelines ) - Rebuild (to fix downgrade after perl-5.12.0-rebuild tag) - New version 6.6.2-1 (BZ#579458, BZ#565940 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=16320)
- Replace %define by %global - Mass rebuild with perl-5.12.0 - Update to 6.6.0-2 (BZ#570766) - Update to 6.5.8-10 (BZ#547806)
- Change source tarball from .tar.lzma to .tar.xz folow to upstream. - rebuild against perl 5.10.1 - Explude file Generic.ttf from -perl subpackage demos. Demos perfectly work without it, but with bundled font
package does not pass QA (Unfortunately no bugreport there, only mail from Nicolas Mailhot) - Update to version 6.5.4-6
- Use lzma-compressed source tarball as sugested by Ville Skyttä (BZ#515319) - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - New upstream release 6.5.3-6 - update to 6.5.1-2 - Fix undefined warning in magick-type.h (#489453)
- Do not link PerlMagick against system ImageMagick, but against the just
build one - New upstream release 6.4.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Remove (TM) from description as per new guidelines - Corrected the wrong release and bumped - Rebuild with new djvulibre - Remove 2 included copies of the non Free artbrush font (rh 477399) - Do not pass -jX to make when building, this breaks PerlMagick (rh 475554) - Remove --without-windows-font-dir from configure args, specifying it
makes ImageMagick search for windows fonts in the "no/" dir (rh 472244) - Enable djvu support, put the new djvu plugin into a separate -djvu
subpackage because of deps (rh 225897) - New upstream release 6.4.5-5
- Various specfile fixes from merge review (rh 225897)
- Fix building with new libtool (rh 471468) - Rebuild for new libtool (rh 471468) - Fix ownership of /usr/include/ImageMagick (bz 444647)
- By Remi request (bz#969760) enable those features in ImageMagick:
--with-lcms2 (instead of --with-lcms): lcms2-devel
--with-openexr: OpenEXR-devel
--with-webp: libwebp-devel - New upstream release 6.4.0.10
- This fixes conversion of 24 bpp windows icons (bz 440136)
- Don't reuse GError structs, that upsets glib2 (bz 325211)
- Use the system ltdl, not the included copy (bz 237475)
- Fix various multilib conflicts (bz 341561)
- Use xdg-open instead of htmlview (bz 388451)
- Some small specfile cleanups (utf-8 stuff & others) fixing rpmlint warnings - Rebuild for perl 5.10 (again) - Autorebuild for GCC 4.3 - update to 6.3.8.1
- rebuild for new perl
- fix license tag
- fix rpath issues
- add sparc64 to 64bit arch list - rebase to 6.3.5.9
- fix build with missing open() arg
- add build require of jasper-devel, remove windows font dir
- update multilib patch - heap overflows (#235075, CVE-2007-1797) - perlmagick build fix (#231259) - update to 6.3.2-9 - fix several integer and buffer overflows (#202193, CVE-2006-3743)
- fix more integer overflows (#202771, CVE-2006-4144) - Add missing BRs - rebuild - Update to 6.2.8 - Fix multilib issues - Fix a heap overflow CVE-2006-2440 (#192279)
- Include required .la files - Don't ship .la and .a files (#185237) - rebump for build order issues during double-long bump - bump again for double-long bug on ppc(64) - rebuilt for new gcc4.1 snapshot and glibc changes - Make -devel require lcms-devel (#179200) - Fix linking of DSOs. (#176695) - fix a format string vulnerability (CVE-2006-0082) - rebuilt - Switch requires to modular X
- Update to 6.2.5 - Update to 6.2.4-6
- Drop upstreamed patches
- Disable DPS (#158984)
- Add missing requires (#165931) - Rebuilt for fixed ghostscript. - Rebuilt for new ghostscript. - fix a denial of service in the xwd coder (#158791, CAN-2005-1739) - � x�������������h������ X � p'8 ��������������D" �$ T ���������������� D" C" E" � 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~ � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
! " # $ % & ' ( ) * + , � x������������������� X � 3'8 8k������������" �$ ���������������� " " " � hat systemd creates in memory
- Allow readahead to read /dev/urand
- Fix lots of avcs about tuned
- Any file names xenstored in /var/log should be treated as xenstored_var_log_t
- Allow tuned to inderact with hugepages
- Allow condor domains to list etc rw dirs - Fix nscd_shm_use()
- Add initial policy for /usr/sbin/hypervvssd in hypervkvp policy which should be renamed to hyperv. Also add hyperv_domain attribute to treat these HyperV services.
- Add hypervkvp_unit_file_t type
- Add additional fixes forpegasus_openlmi_account_t
- Allow mdadm to read /dev/urand
- Allow pegasus_openlmi_storage_t to create mdadm.conf and write it
- Add label/rules for /etc/mdadm.conf
- Allow pegasus_openlmi_storage_t to transition to fsadm_t
- Fixes for interface definition problems
- Dontaudit dovecot-deliver to gettatr on all fs dirs
- Allow domains to search data_home_t directories
- Allow cobblerd to connect to mysql
- Allow mdadm to r/w kdump lock files
- Add support for kdump lock files
- Label zarafa-search as zarafa-indexer
- Openshift cgroup wants to read /etc/passwd
- Add new sandbox domains for kvm
- Allow mpd to interact with pulseaudio if mpd_enable_homedirs is turned on
- Fix labeling for /usr/lib/systemd/system/lvm2.*
- Add labeling for /usr/lib/systemd/system/lvm2.*
- Fix typos to get a new build. We should not cover filename trans rules to prevent duplicate rules
- Add sshd_keygen_t policy for sshd-keygen
- Fix alsa_home_filetrans interface name and definition
- Allow chown for ssh_keygen_t
- Add fs_dontaudit_getattr_all_dirs()
- Allow init_t to manage etc_aliases_t and read xserver_var_lib_t and chrony keys
- Fix up patch to allow systemd to manage home content
- Allow domains to send/recv unlabeled traffic if unlabelednet.pp is enabled
- Allow getty to exec hostname to get info
- Add systemd_home_t for ~/.local/share/systemd directory - Fix lxc labeling in config.tgz - Fix labeling for /usr/libexec/kde4/kcmdatetimehelper
- Allow tuned to search all file system directories
- Allow alsa_t to sys_nice, to get top performance for sound management
- Add support for MySQL/PostgreSQL for amavis
- Allow openvpn_t to manage openvpn_var_log_t files.
- Allow dirsrv_t to create tmpfs_t directories
- Allow dirsrv to create dirs in /dev/shm with dirsrv_tmpfs label
- Dontaudit leaked unix_stream_sockets into gnome keyring
- Allow telepathy domains to inhibit pipes on telepathy domains
- Allow cloud-init to domtrans to rpm
- Allow abrt daemon to manage abrt-watch tmp files
- Allow abrt-upload-watcher to search /var/spool directory
- Allow nsswitch domains to manage own process key
- Fix labeling for mgetty.* logs
- Allow systemd to dbus chat with upower
- Allow ipsec to send signull to itself
- Allow setgid cap for ipsec_t
- Match upstream labeling - Do not build sanbox pkg on MLS - wine_tmp is no longer needed
- Allow setroubleshoot to look at /proc
- Allow telepathy domains to dbus with systemd logind
- Fix handling of fifo files of rpm
- Allow mozilla_plugin to transition to itself
- Allow certwatch to write to cert_t directories
- New abrt application
- Allow NetworkManager to set the kernel scheduler
- Make wine_domain shared by all wine domains
- Allow mdadm_t to read images labeled svirt_image_t
- Allow amanda to read /dev/urand
- ALlow my_print_default to read /dev/urand
- Allow mdadm to write to kdumpctl fifo files
- Allow nslcd to send signull to itself
- Allow yppasswd to read /dev/urandom
- Fix zarafa_setrlimit
- Add support for /var/lib/php/wsdlcache
- Add zarafa_setrlimit boolean
- Allow fetchmail to send mails
- Add additional alias for user_tmp_t because wine_tmp_t is no longer used
- More handling of ther kernel keyring required by kerberos
- New privs needed for init_t when running without transition to initrc_t over bin_t, and without unconfined domain installed - Dontaudit attempts by sosreport to read shadow_t
- Allow browser sandbox plugins to connect to cups to print
- Add new label mpd_home_t
- Label /srv/www/logs as httpd_log_t
- Add support for /var/lib/php/wsdlcache
- Add zarafa_setrli� x�������������X������ X � �&8 ���������9�������! �$ ���������������� �! �! �! � "@^&�^ P@^ �@^ [�^g@^�@^�@]�}@]�e@]��]Γ@]�M@]�@]��]�W�]�c@]�n�]y@]i�]Z�@]V��]S��]QT�]J�@]>�]1��]%�@]$��\�F@\���\� �\��@\ޢ@\��\��@\��\��\o�@\f��\ac�\ac�\Z�@\Z�@\T4�\T4�\P@@\I��\<y�\8�@\��[�1�[��[ͻ�[��@[��@[��[�F�[� �[��@[�h@[�9@[{��[qr�[qr�[m~@[]�@[Y��[O+�[6 @[o�[�[ L@[��[��Z�b@Z��Z�3@ZԐ@ZȲ�Z��@Z��Z��@Z�I@Z���Z�`@Z�k�Z���Z�1@Z���Z�
�Z}�@Z|;�Zy��Zp^@Zp^@Za�Z\��ZS]@ZS]@ZOh�ZN@Z8�@Z1@Z �Z@Z
}�Z N�Y�Z@Y��@Y�+@Y�@Y��@Y��Yܶ@Y�d�Y�@Y�{�Y�{�Y�5�Y˒�Y�@Y�@Y��@Y�o@Y�o@Y��@Y�z�Y�z�Y�4�Y���Y��@Y��Y�b�Y�n@Y�n@Y� �Y��@Y���Y�J�Y�J�Y�V@Y�V@Yy�Yq�Yl��Yd��Ycl@YM�YG��YG��Y9<@Y5G�Y ��Y�@Y��X���X���X���X�9@X��X��X�!@X��X���X� @X��X�+�X�B�X���X�Y�X�@X� @X~@X~@Xr)�Xo��XQ4@XIK@XG��XEV�X=m�X,J@X#�X!�@X l�X�@X�@Xk�W���W��@W�S�W�@Wڍ@W�i�W��W��W�:�W� @W��@W�.@W��@W�E@W�P�W��W�-@W��@W{�@Wrf�Wj}�Wb��W^�@WX�WV�@WL+@WE��WDB@W9�@W1�@W0{�W+5�W#L�W ��W X@W�@W�@V�b�V���V�J�V�a�V�V�'@V�>@V�>@V�>@V��V�w�V�&@V��V�v�V��V�<@V��Vp �Vh�Vet�V\:@VTQ@VO @VA�@V@��V/g@V&,�V&,�V �@VZ�Vq�Vq�V
}@VB�U���U�@U��@U�@U��U� @UȒ@U���U��@U��U�K@U���U�b@U�'�U���U�3@U�J@U���Uv�@Uv�@UH��UB@U4�@U.R�U-@U#�U:�U @U h�U�T��@T���T�E@T�@T�@T��T��T�[@T� �T� �T�f�T� �T� �T���T��T��@T��@T}��Ty�@Txc�Tm�Tl�@Tl�@Te�T`��T\�@TWn@TP�TFJ�TA�T=@T2�@T*�@T @T�@T��T=@T=@T�@S��S�v�S�0�S��@S��S��S�u�S�u�S�u�S�/�Sϣ�S� �S� @S��@S��@S���S�"@S��S�-�S�D�S���S�P@S�~@S{C�Sr @Sj @Sj @Sh�Sg}@SZN@SW�@SQ�SC�SC�S>��S:�@S4�S2�@S1o�S&�S&�S"�@S!��S L@S L@S �@S��S�@Sz@S(�S 4@S?�SK@R�@R��@R�'�R�'�R�>�R�R�U�R�@R߲�R��R�@R��@RΏ@Rʚ�R���R���R��R��@R��@R�@R�@R��@R��@R�i�R�@R|�@Rz/@Rz/@Rs��Rp�RnQ�Ri �Rfh�R_�@R_�@R[�RS�RN��RN��RL
�RIg�RB�@RB�@R:�@R1��R-�@R-�@R(r@R' �R%�@R 7�R ��RN�R��R�@Q��@Q���Q�d�Q� �Q�@Q��Qޞ@Q�@Qک�Qک�Q�@Q�z�Q��Q�4�Q�@@Q��@Q�K�Q��Q��@Q�@Q��@Q��@Q��Q��@Q��Q��Q��Q��@Q��@Q���Q���Q�@Qzl@Qw�@Qvw�Qo�@Qo�@Qn��Qm=@Qk�Qf��Qb�@Q`@Q^��QZ�@QQ��QI��QG�Q@j@Q9�Q8�@Q4��Q0�@Q-�@Q& @Q$��Q �Q�@Q�Q�@Q @Qh@Qs�P��P��@P��@P�P�@P�[�P��P�!@P�8@P�O@P� @P�f@P��P�q�P� @P��P�7@P��@P���P���P�Y�P� @P��@P��P���P�M@P���P�d@P��@P�o�P�{@P�{@P��@P���P�5@P�@�P~��P}L@Px@Pv��Pv��Puc@Puc@Pr�@Pmz@Pmz@Pmz@Pj�@Pd?�Pd?�Pb�@Pa��Pa��P[@PXb@PW�PS @PQ�PO'�PM�@PI�P@�@P>@P8�@P7l�P2&�P2&�P,�P,�P*=�P(�@P#�@P#�@P!@P!@P�@Pk�Pw@Pw@P��P
<�P
��P@O�j�O��O�O�R�O�i�O�#�O�/@O�:�O�O� �O�h�O��@O���O�\@O�
�O��@O��O�!�O���O�D@O��O� �O� �O�@O� �O� �O~�Oz�@Ou�@Or�@Or�@Ok@Oi�Og �Og �Oc+@O`�@O`�@O]�@OY�OX�@OT��OL��OKp@OF*@OD�OC�@OC�@O<�O:L�O8�@O5�O3�@O1@O/��O+�@O'�O&�@O!@@O �@O K�O K�OW@O@O �O
y�O
y�O?@N�x�N�'@N�N�>@N�N�U@N��N�l@N��@N��@Nå�N�@N���N��N��N��@N��N��N��@N��@N�G�N�G�N�G�N��@N��@N���N�S@N�S@N�^�N�^�N�
@N�
@N���N�j@N�j@N��N�$@N��N��@N�/�N��@N��@N�F�N�F�N��@N���N���N��@N��@N��@N�]�N�i@N�i@N�i@N|t�Ny�Nx�@Ns:@NoE�NoE�Ni��Nf @N^"@N\�N[@NT�NS�@NS�@NC�@NBr�N:��N98@N7�N6�@N2��N.�@N*��N)f@N(�N%q�N$ @N �@N 7@N e@Np�Np�M��@M��@M�d@M�d@M��M�{@M�@�M�M�@M��@M@M��@M�@M� @M�y@M�y@M�3@M��@M�@M���M���M��@M���M��M���MT�Mx�@Mx�@Mv@Ml�MbS�M[�@MR��MQ0@MQ0@MJ��MG��MG��MA^@M>�@M9u@M6�@M5��M4/@M4/@M0:�M,F@M$]@M�@M9�M��M��M��M��M\@M
�M
�M@L�!�L�!�L��@L��L��@L��@L��@L�O�L�O�L�[@L�@L�@L�r@L� �L�,@L�,@Lډ@L�7�L��L��L�N�L�@LΫ�L�e�L�|�L��@L�B@L�B@L�B@L��@L�M�L��L��@L�d�L���L�{�L�*@L��@L�5�L���L�A@L��L��L��L��@L�c�L��@L��@L��@L�z�L�)@L|�L|�L|�L{�@LvW@LvW@Ls�@Ls�@Lrb�Lrb�Lm �Lk�@Ljy�Le3�Lc�@La?@LZ��LYV@LX�LN�@LN�@LMx�LMx�LI�@LH2�LF�@LE��L=��L=��L=��L;�L7@L ��L T@L@L��L�@L�@L0�L�LG�L�@K�^�K�^�K���K���K�j@K�$@K��K��K�@K�@K� �K�@K�]�K�K��@K�t�K�#@K��KՀ@K�:@K��K͗@KŮ@K�\�K�\�K� @K��K��K���K���K�9@K��K��@K���K��@K��@K��K��K��K�r�K��K�~@K�,�K�,�K�,�K��@K���K�8@K���K���K��@K��K��@K�q�K�q�K}+�K{�@K{�@KuB�Ks�@KqN@Kj��Kie@Kf�@Ka|@K`*�K]��KXA�KTM@KPX�KE�KE�KE�KD{@KC)�KA�@K;@�K2@K0��K/c@K+n�K* @K(�K"4@K��K>�K>�K>�J���Ję�J�H@J�H@J���J���J�_@J��@J�j�J�j�J�@J�v@J�v@J�v@J�v@J�$�J��@J���J�0@J��@J��@J�G@J�G@J�@J���J��@J��@J��@J��J��J�#�J��@J��J��J��@J�:�J��@J���J�Q�J� @J� �J� �� x�������������І����� X � �&8 �j�������h������z! �$ j ���������������� z! y! {! � 484674daf9d41f7e6822983b919e5e952f83cf eabd0bc602dc657c3557ca9bfc2b92b39982d12ae2b55866e601ba36be4fcc08 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 96354d069794fca3c4d722fd1f0866581bcd691f520d5b034eddf07f3f01b2f1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e40951de0002fa86534183b46df75bf2e202a69e671b71fe069f60c04ceded9e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 6be6d014043c9d44b660764aada8443e87296bc64560973d88ef2bbedbfdb300 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf e03ad91c7d5aa9871a622601f3b7f31e2d865a9ceb42d6308256048697204800 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 100763f5179933b48354df7ff663f406bb6fd7d033b816f64058ce7201b09473 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 74cfccf9d9cb7a4f6c04b1389d7727f8b554a81e4d97bdca6366321cb919f882 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bd256e878cd15d382e9d08b0f8910accdc4447d05010a0680c522cb12e457b31 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 718fe899624904446ba7d3c5c46cd139223e76b93c1012dd6f11d5b4eb2f59b1 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ada3b75f722572a832173c9f87f2ff2b4b481e85d905388338dc5e2674c43e57 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 1a1b862944f9d6e498a7384004ebd1f1c49af076a182d8b07402c730c234ea52 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 693151249a05ada4fd448d871507f00653b17bb9e9b6af80729be57f16940b1e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 505d1c8c897987ad559894909eb162fe5b3ce48bce9b552dda3d8ed9af3e8497 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf da8a7ebbf56ab7d8307f051c8daa9bf611c9c0abf356fcf4117e2cf7c288c2fe 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 983d54aef4203372e3bee7188781782b06e66520c0b416b5ed35a93d5cfb5e90 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a405e4fb3f348c85e46cc22aadc25010d4ec6086212479e26c71cf57645c128c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 51268ad7d73b84aeddedda6fd2a61166434ea74af2d1c5c13f61aee86752ab2d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf de9c74f03e175e0ea18bd33471e2b3201347bfc74bcafad6fc1a36d0cbd9a33d 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf d44ef8f20585f133ebffd9ae432e730011a466cf56cb86e457885a984ef02a06 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 0bc9ff028d12370c660502e9341532513f1e579fc76b402c7ab3de903932bccd 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf cf718b7206a874c8bfd7cc8e85cc088fc315db2c644718d9966ec38cd99c3b81 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3a5ac6fc480584b6a3f6b244484c05ff3351d74a84919703f8bee8fe6f99ef67 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 24a15df471bd3d913574a95d2a9ffca012a0bfc36b92685fe61e2b378560e18a 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ffd74d69c5994e8c1669cee8c4857a64add6e3fabf09d842684d34c18a61ab49 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf ffa253c26c1b402757597e51fc651d1f6cd74f94e86d2ab02a6d2ff1c1a3e02f 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 36b2722662a2e780529fd220d33049e55d99b4d49c2d6e6bd541d445f4113c4e 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf bb0da4f4c6723cba0abaf596aa79bf9f852ace44e0999d3c4654f49c716bee96 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 683befb7614fa7c60fc600cb397d2b3b5c70b8cedf786a93fa64942a72701010 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf b1aeb673703e3da61801515338e1e4091e07c00f633f69ae2120e83579d7c011 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf 3d58ea957e4fe014b4a88710e0fd7ae988bcf936d4c500f48418dfb82597fb2c 9a2e646ef933bedfa63503f7c2484674daf9d41f7e6822983b919e5e952f83cf a6694a32e5f8571c36925a2131563e784763496ae568dc25c7ff8828c565f733 9a2e646ef933bedfa63503f7c2484674daf� x�������������Hv����� X � w%8 `q������X/������tb �$ d ���������������� tb sb ub � 6d8d13e5e25caaa382c e49ca183a4ab008ce9eaca916112f7c094656eacb8e4afc5cfc16d331c5ec2d1 4e401a3e8b5aa5a9c0991214389c6ff283565168605d324aa04ac09878eb01d8 b3aad98b7fe1e7c6b5a81d75d5482a99c3d8c2cc60a4718dc159848fcf5fcdb6 337e20b2ffabec02c7bd809172af9de4e2a2a4ab6f4bb1687cbb3b1eb0fd0603 aa49685c0cd5e7610c305f39a76d0ff38087eb786928bef3bb07610ebce34c8b 7bcdab21aff28ff87127e964beddfe46f1a782fba5996531fc4e84674eb7cc8f 3b576358f9f04182843fba26dacc4038dc96e1fdc49f44b88c3e3e95dcd55179 772aa4a1bd8f582c0fd03405933dd3bc31f2a5de366f78207a2fa2734b3c2024 e35f603ea392124897c818010abe2bd6219c75ee9ac4634817a34cdcf1c6e389 5221dc30ed71ecefc4b8261b0db4ea5aa05a761a40095cfd2ad519917887d99e 243f1b373f63d6979d069d9857a3ae31d90c10431d3ff0b8fc006ca3897e3665 067fd6fb3cbb57d5a38ac6e635c5f8d5efb0006727c748022c0b6c73395ae417 c0d8a5934c0d9e3243bcdc9813eb64c789e9de5968bb325a559424ee2c06613b 14498d143894445a6973b8a7e3ed6348898f5a304ee9543613a487194706913a 13ab0ae0f628191a00eaccbd8f3e8366a21d643e26555a68c3a3a8e1a3599452 56c8fe083f021d8fb7167228e3a44208d1fa9632ed7e5cb6b80306424ff860c2 0994fc6bc568adc378824c0dc625ab7bf4e8bdafdad3e7bf0602b9064877ae2b fd309d088310a3eb5c4fc15006f25757310105e8f5b53eb3a15236984b6e79c8 8d042edd7605fa2e6f0c098efc8f1b57ca26788d2c6b4e51d67938150eac2c21 94b5690020f7b4a0ec3f3341a6ade924ea9a93a563dcf7a6ac5845d601feec45 62ac8809bdc3b54ed7058ba88fdc11ddd10c1c690cb16a4b11f65d94a234366a 7601bae0902056153fed0b756ab3c3ba996c9637bcb9f5b5c4c2c2a8e7228858 1e29ee0a69f4282808b7742f19a5a64a3ac2c1140e9a951eaf472f805f6010c9 4272f3dff9fc0cb62463fdc8c7982a3ef1c0f31e86be9cf8dc21bf5e98170324 68934f4f931e3429d21d4a3be30a6215c5a2ff3241e4a889ebe0f21954ef6323 56e56791754d9dea1546720a2499155997f934e47afa61de10cb716704d22017 7ba3bc9af2746848d41c56965c12ad78a048aff07e87945e2de931e3edf0e9ae e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 2c6521f5137646df59fa1969a2ac50095e3cbf65d9c7aadd8da75d3709bc3a66 59c48f34841901fd6fa6b32d78ab984c79a57e6f8199bff1da297f4cc17c13f7 10d9e319d740da9ef2c2d13b41d0e2ff1b7ea95af8333c0b8e56af25cf9ad5f2 570a9e5d7ff0ed13a5f6210836c5b43112b68cf9939222a9187f91d70b47b71a 06b2e7c36175725cf1ded97a23b0b7350d81075a106c36a8892f7f7e13cf8a00 8fda0b3ecdf1d388f2874c09b4b239bc88d5d5934c41f2934d8fcc4bed5aeb6e ../../../../usr/bin/spamc root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root r� x��������������e����� X � �'8 �����������������Q �$ [ ���������������� �Q �Q �Q � bad prerm script.
# It is responsibility of the system administrator to enable and start
# the service when configuration files are ready.
# In the case of plesk installer actions, the service is started
# by plesk-mail-pc-driver during bootstrapper_post_install action.
exit 0 # vim:ft=sh
remove_mta_alternative()
{
/usr/sbin/alternatives --remove mta /usr/sbin/sendmail.postfix
}
# vim:ft=sh
[ -z "$PLESK_INSTALLER_DEBUG" ] || set -x
disable_service()
{
local service="postfix"
if [ -x "/bin/systemctl" ]; then
/bin/systemctl stop "${service}.service" || true
/bin/systemctl disable --no-reload "${service}.service" || true
return
fi
# deb-based control
if [ -x "/usr/sbin/update-rc.d" ]; then
if [ -x /usr/sbin/invoke-rc.d ]; then
invoke-rc.d postfix stop
else
/etc/init.d/postfix stop
fi
/usr/sbin/update-rc.d -f "${service}" remove
return
fi
# RedHat based control
/sbin/service "$service" stop
/sbin/chkconfig "$service" off
/sbin/chkconfig --del "$service"
}
remained_packages="$1"
if [ "$remained_packages" = 0 ]; then
disable_service
remove_mta_alternative
fi
exit 0 # vim:ft=sh
# vim:ft=sh
[ -z "$PLESK_INSTALLER_DEBUG" ] || set -x
reload_systemd()
{
# Notify systemd that .service file has been removed.
[ ! -x "/bin/systemctl" ] || /bin/systemctl --system daemon-reload >/dev/null 2>&1 || true
}
remained_packages="$1"
if [ "$remained_packages" != 0 ]; then
# upgrade
/sbin/service postfix condrestart >/dev/null 2>&1 || true
else
# remove
reload_systemd
fi
exit 0 H T 3� '� \� i� h� � � O� 1z 6� P F & % $ & % % ( % ' & ( ( & ' * % % / % % ' % % $ & ' % & $ $ � 9 e� 'x Y �` � �� � u� �� �X �X U� 5� ��
8 t� * �' � %x $H E� E� U� ƀ U� �X �� � V` � n� �X �� � � �8 6� m0 @ X � � F@ V 21 �� u0 A � g} MH � %N �� ] 2 S� Ar
06 $�
% D- U HY O -� ro s\ �5 /- S� L � � � �% �N 2 � Q< , � � �� �� !� � � � R� l� /� 4
� j? R� �� �� a1 � � k ^ ( "J ]
� � � ! �n 0 0
� �
� � � � � / �
� � Y � � -
� � �
E � #� d � � � �
� J z
� � �
~ [ � & � q � $
M ) < � E 6 6 �
� � � &q 3� [ d V & � A큤A큤����������������A큤����A�A��A큤������A�A�A�A�A�A�A�A���A���A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A���A�A�A�A�A�A�����A�A큤��A������������������������������������������������������A큤����A큤��������������������������������������������������������������������������������������������������������������������A�A큤A큤A큤������������������������������������������������������������������������������������������������������������������������������������������������������A�A�A�A�A�A�A�A�A�A�A�A�A�A�A�A� � x�������������(U����� X � �&8 ��������(! �! �$ A ���������������� �! �! �! � ib_t link files BZ(1544251)
- Add interface abrt_map_cache()
- Update gnome_manage_home_config() to allow also map permission BZ(1544270)
- Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770)
- Dontaudit kernel bug when several services requesting load kernel module
- Allow traceroute and unconfined domains creating sctp sockets
- Add interface corenet_sctp_bind_generic_node()
- Allow ping_t domain to create icmp sockets
- Allow staff_t to mmap abrt_var_cache_t BZ(1544273)
- Fix typo bug in dev_map_framebuffer() interface BZ(1551842)
- Dontaudit kernel bug when several services requesting load kernel module - Allow vdagent_t domain search cgroup dirs BZ(1541564)
- Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)
- Allow bluetooth domain creating bluetooth sockets BZ(1551577)
- pki_log_t should be log_file
- Allow gpgdomain to unix_stream socket connectto
- Make working gpg agent in gpg_agent_t domain
- Dontaudit thumb_t to rw lvm pipes BZ(154997)
- Allow start cups_lpd via systemd socket activation BZ(1532015)
- Improve screen_role_template Resolves: rhbz#1534111
- Dontaudit modemmanager to setpgid. BZ(1520482)
- Dontaudit kernel bug when systemd requesting load kernel module BZ(1547227)
- Allow systemd-networkd to create netlink generic sockets BZ(1551578)
- refpolicy: Define getrlimit permission for class process
- refpolicy: Define smc_socket security class
- Allow transition from sysadm role into mdadm_t domain.
- ssh_t trying to communicate with gpg agent not sshd_t
- Allow sshd_t communicate with gpg_agent_t
- Allow initrc domains to mmap binaries with direct_init_entry attribute BZ(1545643)
- Revert "Allow systemd_rfkill_t domain to reguest kernel load module BZ(1543650)"
- Revert "Allow systemd to request load kernel module BZ(1547227)"
- Allow systemd to write to all pidfile socketes because of SocketActivation unit option ListenStream= BZ(1543576)
- Add interface lvm_dontaudit_rw_pipes() BZ(154997)
- Add interfaces for systemd socket activation
- Allow systemd-resolved to create stub-resolv.conf with right label net_conf_t BZ(1547098) - refpolicy: Define extended_socket_class policy capability and socket classes
- Make bluetooth_var_lib_t as mountpoint BZ(1547416)
- Allow systemd to request load kernel module BZ(1547227)
- Allow ipsec_t domain to read l2tpd pid files
- Allow sysadm to read/write trace filesystem BZ(1547875)
- Allow syslogd_t to mmap systemd coredump tmpfs files BZ(1547761) - Fix broken cups Security Module
- Allow dnsmasq_t domain dbus chat with unconfined users. BZ(1532079)
- Allow geoclue to connect to tcp nmea port BZ(1362118)
- Allow pcp_pmcd_t to read mock lib files BZ(1536152)
- Allow abrt_t domain to mmap passwd file BZ(1540666)
- Allow gpsd_t domain to get session id of another process BZ(1540584)
- Allow httpd_t domain to mmap httpd_tmpfs_t files BZ(1540405)
- Allow cluster_t dbus chat with systemd BZ(1540163)
- Add interface raid_stream_connect()
- Allow nscd_t to mmap nscd_var_run_t files BZ(1536689)
- Allow dovecot_delivery_t to mmap mail_home_rw_t files BZ(1531911)
- Make cups_pdf_t domain system dbusd client BZ(1532043)
- Allow logrotate to read auditd_log_t files BZ(1525017)
- Improve snapperd SELinux policy BZ(1514272)
- Allow virt_domain to read virt_image_t files BZ(1312572)
- Allow openvswitch_t stream connect svirt_t
- Update dbus_dontaudit_stream_connect_system_dbusd() interface
- Allow openvswitch domain to manage svirt_tmp_t sock files
- Allow named_filetrans_domain domains to create .heim_org.h5l.kcm-socket sock_file with label sssd_var_run_t BZ(1538210)
- Merge pull request #50 from dodys/pkcs
- Label tcp and udp ports 10110 as nmea_port_t BZ(1362118)
- Allow systemd to access rfkill lib dirs BZ(1539733)
- Allow systemd to mamange raid var_run_t sockfiles and files BZ(1379044)
- Allow vxfs filesystem to use SELinux labels
- Allow systemd to setattr on systemd_rfkill_var_lib_t dirs BZ(1512231)
- Allow few services to dbus chat with snapperd BZ(1514272)
- Allow systemd to relabel system unit symlink to systemd_uni� x��������������D����� X � m'8 �������� ]����A" �$ Q ���������������� A" @" B" � � x�������������4����� X � }'8 �������HR������Q" �$ A ���������������� Q" P" R" � /share/selinux/targeted/default/active/modules/100/hypervkvp/ /usr/share/selinux/targeted/default/active/modules/100/ibacm/ /usr/share/selinux/targeted/default/active/modules/100/icecast/ /usr/share/selinux/targeted/default/active/modules/100/inetd/ /usr/share/selinux/targeted/default/active/modules/100/init/ /usr/share/selinux/targeted/default/active/modules/100/inn/ /usr/share/selinux/targeted/default/active/modules/100/insights_client/ /usr/share/selinux/targeted/default/active/modules/100/iodine/ /usr/share/selinux/targeted/default/active/modules/100/iotop/ /usr/share/selinux/targeted/default/active/modules/100/ipmievd/ /usr/share/selinux/targeted/default/active/modules/100/ipsec/ /usr/share/selinux/targeted/default/active/modules/100/iptables/ /usr/share/selinux/targeted/default/active/modules/100/irc/ /usr/share/selinux/targeted/default/active/modules/100/irqbalance/ /usr/share/selinux/targeted/default/active/modules/100/iscsi/ /usr/share/selinux/targeted/default/active/modules/100/isns/ /usr/share/selinux/targeted/default/active/modules/100/jabber/ /usr/share/selinux/targeted/default/active/modules/100/jetty/ /usr/share/selinux/targeted/default/active/modules/100/jockey/ /usr/share/selinux/targeted/default/active/modules/100/journalctl/ /usr/share/selinux/targeted/default/active/modules/100/kdbus/ /usr/share/selinux/targeted/default/active/modules/100/kdump/ /usr/share/selinux/targeted/default/active/modules/100/kdumpgui/ /usr/share/selinux/targeted/default/active/modules/100/keepalived/ /usr/share/selinux/targeted/default/active/modules/100/kerberos/ /usr/share/selinux/targeted/default/active/modules/100/keyboardd/ /usr/share/selinux/targeted/default/active/modules/100/keystone/ /usr/share/selinux/targeted/default/active/modules/100/kismet/ /usr/share/selinux/targeted/default/active/modules/100/kmscon/ /usr/share/selinux/targeted/default/active/modules/100/kpatch/ /usr/share/selinux/targeted/default/active/modules/100/ksmtuned/ /usr/share/selinux/targeted/default/active/modules/100/ktalk/ /usr/share/selinux/targeted/default/active/modules/100/l2tp/ /usr/share/selinux/targeted/default/active/modules/100/ldap/ /usr/share/selinux/targeted/default/active/modules/100/libraries/ /usr/share/selinux/targeted/default/active/modules/100/likewise/ /usr/share/selinux/targeted/default/active/modules/100/linuxptp/ /usr/share/selinux/targeted/default/active/modules/100/lircd/ /usr/share/selinux/targeted/default/active/modules/100/livecd/ /usr/share/selinux/targeted/default/active/modules/100/lldpad/ /usr/share/selinux/targeted/default/active/modules/100/loadkeys/ /usr/share/selinux/targeted/default/active/modules/100/locallogin/ /usr/share/selinux/targeted/default/active/modules/100/lockdev/ /usr/share/selinux/targeted/default/active/modules/100/logadm/ /usr/share/selinux/targeted/default/active/modules/100/logging/ /usr/share/selinux/targeted/default/active/modules/100/logrotate/ /usr/share/selinux/targeted/default/active/modules/100/logwatch/ /usr/share/selinux/targeted/default/active/modules/100/lpd/ /usr/share/selinux/targeted/default/active/modules/100/lsm/ /usr/share/selinux/targeted/default/active/modules/100/lttng-tools/ /usr/share/selinux/targeted/default/active/modules/100/lvm/ /usr/share/selinux/targeted/default/active/modules/100/mailman/ /usr/share/selinux/targeted/default/active/modules/100/mailscanner/ /usr/share/selinux/targeted/default/active/modules/100/man2html/ /usr/share/selinux/targeted/default/active/modules/100/mandb/ /usr/share/selinux/targeted/default/active/modules/100/mcelog/ /usr/share/selinux/targeted/default/active/modules/100/mediawiki/ /usr/share/selinux/targeted/default/active/modules/100/memcached/ /usr/share/selinux/targeted/default/active/modules/100/milter/ /usr/share/selinux/targeted/default/active/modules/100/minidlna/ /usr/share/selinux/targeted/default/active/modules/100/minissdpd/ /usr/share/selinux/targeted/default/active/modules/100/mip6d/ /usr/share/selinux/targeted/default/active/modules/100/mirrormanager/ /usr/share/selinux/targeted/default/active/modules� x��������������#����� X � �&8 ������h?����! �$ ���������������� �! �! �! � fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 075a7c3accbff5048b472768c0cc27663bde81649f87eb0a3a746953a4c1c974 4e0c2763cd2fb285b1f0b87cf65aa8a7d6835575ab56976ccb2b1a5ab3efd572 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e0a4067e6304fb91b03d25d2ae3943489d211614e8f00fac115169598b2e2072 a72bd279f4fe0ca0fe2dce7402682baccc9119c5590ae4c4962992a0b771672c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 96ac5f49c64792d6c09c03eebb88b7bef26c242389c2bc7fb7866297e3a09874 63afb423f5c031380e21e17477c76701c6ae9acc822b7c06f7c28cf2798ca674 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e bc80d441a82c6b133298ee80f83479dfcc60b2178a689c7a60405f70499ac741 a78eee0b6ef0c8209c53899d65a7d6af2a57471d3a5a5ba834b0ef1392d2bf5b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e e62bc67e6bf0e2f0d416d346b46a85ee1a98ae6141babedca13fe171b604b3ad a13ad16b30159d078220c502fc654501868640c4d3645fbb5700e59007e744c4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7ca4833f899e4ea17ee29c8ce53af1104e211f6c669590ed343ed0f10a661e27 7269279b26f9582fd206a9dad39f560868ea36a746d841d5d38168e6aeb90cf9 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 4756698225a6a2cfa98fa6e7cd7ec80cf6cb0e90e3f7d44de495cbe19807b24e 58918f45516a00e7724e32d1dfaeb7106a07230e10cfc35ecad3c0fc70d949b9 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 94f36e9336da9b5f45c38481ef0b9420a2af3abe3cbfb5e8f47b195be39c3bd7 285167adeb2e027fcc4f8b2cad474b5e5511bb5670d96b27367dc7cab47773dd d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b85b2f2c84575c0370a63c00645bb2dec23ad2f1a053df6b8e5e42eda30f758c 93c77f3f957fa8d91501757e66d99e628659595333b9ce9beb352a6ed72afec4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 84f98f3dbe88facb0a5e5c30b4367d5a6033c99e4eaa9818a4136a8bb0ac27ce c8b660e258faf1ca868892bacca3108c5a0c2b5db958dd6b36411d7f587f7559 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 65ef40dfe6c6e47e7d0638d88670702ead61583005a32f8d6369a791db54077c 07843be93d5cf18c85ed149ceb93a1083ee810b00b59150da49342b4e1fba456 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7a0261e6a58e259ae725fb406add781015c991b95809e33961d52a76ddf4ebed 56795d75264c2ccb47a1a3f1b8d4e8751a967d9ab8bfff08d5279ca659a63d7b d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 2882032225580bdde629b9e5b163e34a9f5ea34c2d4a4606e09e6bb032ec132e 0eb9263ad67a10190d18aebf9f3e036227160985b81ed6a149240c0e94ab0382 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 5fa9c73b9aaabdc65f444ff01502ac458d167e6173ef3fa4f08f6f407a98257f 69d382658bb166db6f7ba4ec48db248c0e2e7b828243ddfae7659123902995e4 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e fa6a3c7a6162acdb5947e44d5a971f48e001032e539c45224ca99947d0a9cfbe 6461f3eaa90ea73da6cef0938f642f59de6b276ce20bed50e3603be20259f74c d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 77dcacb0a6c1f900f4935524648dbf4f036357c612dffe0f1c3f849eb3e96efc 6afce282706522581398d34968466493d0d0569b6e79292b7d1805cc971ed625 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d3ed83101130e650bdbe7d2c269fdd5e7dc123d4e332f072280e28ff6de3d3b8 bf90abe5e35ca00431fb46cef1935565408bb755fe24325618371a0459dce566 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 7ec3bc2a918e95363fcd21e4bff09cdc6d8cd1db0efead72bde1bed18fd15c96 753e82f72bc4855cf422cb2613849ef13f4c13f1fbd9057f52b6c638e9ea6055 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e b17c33f9595ce55f7d93e2fcd835845620aab9f1dde7fd71b4b0edec2be0cfd9 c20ed143a58238955462a800514f318011f4c4d90a8fc1d5a4958a929eca845f d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e 5c22e9d88ef65fa7530eaf94ad544a7fd9e13fbedd5c3137bf3ca5211878b6cf ecf820f0176e260759c6203284b190e65243f911474097bc404a4f2bbee81249 d53315bea08cec50d2591fcaf3b32dc5d289cdc6c16b7e8bed8c8e3f7ceaa34e d88e1a5686fdadd48c1cbab6267906a2386f2a00c81472cd4b3869fe4a2352ce a03785057a382503f5565d514f0c1f45472463e3� x������������������� X � �&8 ���������W���� �$ Z ���������������� � � 6 ! " # $ % & ' ( ) * + , - . / 0 1 2 R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R systemd utf-8 131c9a9451a50b335edcfd44998594a0f6034f3c4a5c51667055f508ab99e7fa ? ���� 4�3 !�^���P,��*� ���%�f�X
*� ���%��������ѡ�L3��(-O�aT#V�-��ȱƬ�y��wgy=U����)#��]���d��;�k=�N��D�a"�7`
��
e
� !g�S�x�M��D� �+N�ݟwA���T��}n̴����4<.� kN'�tN�1_]L���uR��b�� �U��n/�aG�d�"�N��|̨.�4%��
j���,�W�DZ��ۅ�-�5�Nh�ů�ٝ�l�|��<�N�FIr����� ��u�
��g�o��q �M ��4��̥��1��`������R\J����*#R� �և�>R{�Ø*�Xѡ�8�[�����SH2����^4W������+���2�z�� Y<���98at��\��_lSHn?B�6
��@� �"�n�Zwx�O�W�pT���?-�s٧qv ��%�M��e�}Y��M�zn����x� ��ѐ/J���HD�3sӎ� �� ��ǹMac���� ��u=��"���ͻ���cN�S�Vk��f џ����<9��ﶉ3 !�^���P,��*� ���%�f�X
*� ���%�&��z�6yJ��Ձd$4��Ⲳ�u{�j� kTzR�B-1���x���&�M�1 ��[$"z�Y!���;� C�{T ���v��K:�(QM� T��Z���Β�ďm�_i��mG�%1�}X��6�S��;Y�8[�|z�>Pc ��nL�'�rUMkHĀ��v�0vӎ!���77�)xF��Z�Pe:j�g-MTSx�s(E��#�co�H��H&&h�b��<�����+��aQ�-V��� �� �c:��q��sa<"A�����j�Vݨ���b��SzZN��Y�܄��d�"Y
_t�_$?������ ��w+�*�\b��l��x��iW ���U������[ �Fmuٞ�ɋ�S-v�� r���t�zL8��_�-�P���34�{;ʿZze����z#��N� �ː�}����l�p��w��E���?��&�2�y^91㠫ImN0yw�D� �((���?@QR�ڧwӣi�yʙɲ���s�H�B�n����� ����K�7j)a953159c91756be65bc726c610c3739ec41fb5ca 56bad3f4b41470144f5aca50f36f6e16319682ed8b8d72ebfc8bc7a91fc9f5e2 g�WW � g�WWada462bcf8b76f0f0fc5cd0614e82aec7fe 737603b803aca8ba313c74ad00cf9d4deb4e80137b4dee9ea1ff24a3e3bd60a6 d60e28a76c6108eca9723f23fd0dd09c8eefe30ec5a46ba0112349f3489aa9c9 2ccc773cc6aefcb5ab504408736b127b92cfa96a7511d9eaae4f8daa4ca00501 13f45e35592cc1a2a267eb0242b1c092ccf16ed7d54f42d541062793f230ee3e be13252709e57f6cd3dec709a59fb7e0cae594e876f060722e94c0d9abb9aa3d dbc6283eb8863d80fcb4df44e4fe8cecfd92f83f92b4aa66de32aa8412f58f82 8b99405e516bee1882353ec3a3e6aec8dff2d7b9383b655cd843d0f6bd31dee4 a3df2e7370af7c1b115b957dd79323456388a1e810ecf363007138e671c55956 d38fed825c33f51e1ba8eefa49c2ca03fb25dfbd4f8503d33e79717fe264b576 ../../../../usr/lib64/libtinfo.so.6.1 ../../../../usr/lib64/libncursesw.so.6.1 ../../../../usr/lib64/libpanel.so.6.1 ../../../../usr/lib64/libform.so.6.1 ../../../../usr/lib64/libtic.so.6.1 ../../../../usr/lib64/libncurses++w.so.6.1 ../../../../usr/lib64/libncurses++.so.6.1 ../../../../usr/lib64/libpanelw.so.6.1 ../../../../usr/lib64/libmenu.so.6.1 ../../../../usr/lib64/libmenuw.so.6.1 ../../../../usr/lib64/libformw.so.6.1 ../../../../usr/lib64/libncurses.so.6.1 libform.so.6.1 libformw.so.6.1 libmenu.so.6.1 libmenuw.so.6.1 libncurses.so.6.1 libncursesw.so.6.1 libpanel.so.6.1 libpanelw.so.6.1 libtic.so.6.1 libtinfo.so.6.1 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root� x�������������p����� X � k'8 x���������?" �$ / ���������������� ?" >" @" � ile - Allow lvm tools to create drevice dir - Add Xen support - Fixes for cups
- Make cryptosetup work with hal - Load Policy needs translock - Fix cups html interface - Add hal changes suggested by Jeremy
- add policyhelp to point at policy html pages - Additional fixes for nvidia and cups - Update to upstream
- Merged my latest fixes
- Fix cups policy to handle unix domain sockets - NSCD socket is in nscd_var_run_t needs to be able to search dir - Fixes Apache interface file - Fixes for new version of cups - Turn off polyinstatiate util after FC5 - Fix problem with privoxy talking to Tor - Turn on polyinstatiation - Don't transition from unconfined_t to fsadm_t - Fix policy update model. - Update to upstream - Fix load_policy to work on MLS
- Fix cron_rw_system_pipes for postfix_postdrop_t
- Allow audotmount to run showmount - Fix swapon
- allow httpd_sys_script_t to be entered via a shell
- Allow httpd_sys_script_t to read eventpolfs - Update from upstream - allow cron to read apache files - Fix vpnc policy to work from NetworkManager - Update to upstream
- Fix semoudle polcy - Update to upstream
- fix sysconfig/selinux link - Add router port for zebra
- Add imaze port for spamd
- Fixes for amanda and java - Fix bluetooth handling of usb devices
- Fix spamd reading of ~/
- fix nvidia spec - Update to upsteam - Add users_extra files - Update to upstream - Add semodule policy - Update from upstream - Fix for spamd to use razor port - Fixes for mcs
- Turn on mount and fsadm for unconfined_t - Fixes for the -devel package - Fix for spamd to use ldap - Update to upstream - Update to upstream
- Fix rhgb, and other Xorg startups - Update to upstream - Separate out role of secadm for mls - Add inotifyfs handling - Update to upstream
- Put back in changes for pup/zen - Many changes for MLS
- Turn on strict policy - Update to upstream - Update to upstream
- Fixes for booting and logging in on MLS machine - Update to upstream
- Turn off execheap execstack for unconfined users
- Add mono/wine policy to allow execheap and execstack for them
- Add execheap for Xdm policy - Update to upstream
- Fixes to fetchmail, - Update to upstream - Fix for procmail/spamassasin
- Update to upstream
- Add rules to allow rpcd to work with unlabeled_networks. - Update to upstream
- Fix ftp Man page - Update to upstream - fix pup transitions (#177262)
- fix xen disks (#177599) - Update to upstream - More Fixes for hal and readahead - Fixes for hal and readahead - Update to upstream
- Apply - Add wine and fix hal problems - Handle new location of hal scripts - Allow su to read /etc/mtab - Update to upstream - Fix "libsemanage.parse_module_headers: Data did not represent a module." problem - Allow load_policy to read /etc/mtab - Fix dovecot to allow dovecot_auth to look at /tmp - Allow restorecon to read unlabeled_t directories in order to fix labeling. - Add Logwatch policy - Fix /dev/ub[a-z] file context - Fix library specification
- Give kudzu execmem privs - Fix hostname in targeted policy - Fix passwd command on mls - Lots of fixes to make mls policy work - Add dri libs to textrel_shlib_t
- Add system_r role for java
- Add unconfined_exec_t for vncserver
- Allow slapd to use kerberos - Add man pages - Add enableaudit.pp - Fix mls policy - Update mls file from old version - Add sids back in
- Rebuild with update checkpolicy - Fixes to allow automount to use portmap
- Fixes to start kernel in s0-s15:c0.c255 - Add java unconfined/execmem policy - Add file context for /var/cvs
- Dontaudit webalizer search of homedir - Update from upstream - Clean up spec
- range_transition crond to SystemHigh - Fixes for hal
- Update to upstream - Turn back on execmem since we need it for java, firefox, ooffice
- Allow gpm to stream socket to itself - fix requirements to be on the actual packages so that policy can get
created properly at install time - Allow unconfined_t to execmod texrel_shlib_t - Update to upstream
- Turn off allow_execmem and allow_execmod booleans
- Add tcpd and automount policies - Add two new httpd booleans, tur� x�������������������� X � �&8 ��������Xs������k �$ { ���������������� k l j � y <lhrazky@redhat.com> - 4.0.21-13 Lukas Hrazky <lhrazky@redhat.com> - 4.0.21-12 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-10 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-9 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-8 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-7 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-6 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-5 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-4 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-2 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1 Nicola Sella <nsella@redhat.com> - 4.0.18-3 Marek Blaha <mblaha@redhat.com> - 4.0.18-2 Nicola Sella <nsella@redhat.com> - 4.0.18-1 Nicola Sella <nsella@redhat.com> - 4.0.17-5 Marek Blaha <mblaha@redhat.com> - 4.0.17-4 Nicola Sella <nsella@redhat.com> - 4.0.17-3 Nicola Sella <nsella@redhat.com> - 4.0.17-2 Nicola Sella <nsella@redhat.com> - 4.0.17-1 Nicola Sella <nsella@redhat.com> - 4.0.16-1 Ales Matej <amatej@redhat.com> - 4.0.15-1 Marek Blaha <mblaha@redhat.com> - 4.0.12-3 Ales Matej <amatej@redhat.com> - 4.0.12-2 Ales Matej <amatej@redhat.com> - 4.0.12-1 Ales Matej <amatej@redhat.com> - 4.0.11-1 Ales Matej <amatej@redhat.com> - 4.0.10-1 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.8-3 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.8-2 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.8-1 Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.7-1 Daniel Mach <dmach@redhat.com> - 4.0.2.2-3 Jaroslav Mracek <jmracek@redhat.com> - 4.0.2.2-1 Daniel Mach <dmach@redhat.com> - 4.0.2.1-1 Jaroslav Mracek <jmracek@redhat.com> - 4.0.2-1 Jaroslav Mracek <jmracek@redhat.com> - 4.0.0-1 Jaroslav Mracek <jmracek@redhat.com> - 3.0.4-1 Charalampos Stratakis <cstratak@redhat.com> - 3.0.1-3 Jaroslav Mracek <jmracek@redhat.com> 3.0.1-2 Jaroslav Mracek <jmracek@redhat.com> 3.0.1-1 Miro Hrončok <mhroncok@redhat.com> - 2.1.5-5 Igor Gnatenko <ignatenko@redhat.com> - 2.1.5-4 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.1.5-3 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.5-2 Igor Gnatenko <ignatenko@redhat.com> - 2.1.5-1 Jaroslav Mracek <jmracek@redhat.com> 2.1.4-1 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.3-2 Jaroslav Mracek <jmracek@redhat.com> 2.1.3-1 Igor Gnatenko <ignatenkO@redhat.com> - 2.1.2-2 Igor Gnatenko <ignatenko@redhat.com> - 2.1.2-1 Jaroslav Mracek <jmracek@redhat.com> 2.1.1-1 Jaroslav Mracek <jmracek@redhat.com> 2.1.0-1 Jaroslav Mracek <jmracek@redhat.com> 2.0.0-1 Igor Gnatenko <ignatenko@redhat.com> 1.1.0-1 Jaroslav Mracek <jmracek@redhat.com> 1.0.2-1 Igor Gnatenko <ignatenko@redhat.com> - 1.0.1-2 Jaroslav Mracek <jmracek@redhat.com> 1.0.1-1 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-0.rc1.2.1 Stratakis Charalampos <cstratak@redhat.com> - 1.0.0-0.rc1.2 Michal Luscon <mluscon@redhat.com> 1.0.0-0.rc1.1 Igor Gnatenko <ignatenko@redhat.com> 0.1.21-2 Igor Gnatenko <ignatenko@redhat.com> 0.1.21-1 Michal Luscon <mluscon@redhat.com> 0.1.20-1 Miroslav Suchý <msuchy@redhat.com> 0.1.19-1 Miroslav Suchý <msuchy@redhat.com> 0.1.18-1 Michal Luscon <mluscon@redhat.com> 0.1.17-1 Jan Silhan <jsilhan@redhat.com> 0.1.16-1 Michal Luscon <mluscon@redhat.com> 0.1.15-1 Michal Luscon <mluscon@redhat.com> 0.1.14-1 Jan Silhan <jsilhan@redhat.com> 0.1.13-1 Michal Luscon <mluscon@redhat.com> 0.1.12-2 Michal Luscon <mluscon@redhat.com> 0.1.12-1 Michal Luscon <mluscon@redhat.com> 0.1.11-1 Jan Silhan <jsilhan@redhat.com> 0.1.10-1 Michal Luscon <mluscon@redhat.com> 0.1.9-1 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.1.8-2 Michal Luscon <mluscon@redhat.com> 0.1.8-1 Michal Luscon <mluscon@redhat.com> 0.1.7-1 Michal Luscon <mluscon@redhat.com> 0.1.6-3 Jan Silhan <jsilhan@redhat.com> - 0.1.6-2 Jan Silhan <jsilhan@redhat.com> - 0.1.6-1 Jan Silhan <jsilhan@redhat.com> - 0.1.5-1 Jan Silhan <jsilhan@redhat.com> - 0.1.4-1 Jan Silhan <jsilhan@redhat.com> - 0.1.3-1 Aleš Kozumplík <ales@redhat.com> - 0.1.2-1 Aleš Kozumplík <ales@redhat.com> - 0.1.1-2 Aleš Kozumplík <ales@redhat.com> - 0.1.1-1 Aleš Kozumplík <ales@red��������x�������������X���� ����������������P����؍����� ������������������������������