Skip to content

* Thu Feb 15 2024 Juraj Marcin <jmarcin@redhat.com> - 38.1.32-1

Juraj Marcin requested to merge jmarcin/selinux-policy-centos:build-9-20240215 into c9s

Merge Request Required Information

Summary of Changes

  • Dontaudit subscription manager setfscreate and read file contexts
    Resolves: RHEL-21635
  • Allow xdm_t to watch and watch_reads mount_var_run_t
    Resolves: RHEL-24841
  • Allow unix dgram sendto between exim processes
    Resolves: RHEL-21902
  • Allow utempter_t use ptmx
    Resolves: RHEL-24946
  • Only allow confined user domains to login locally without unconfined_login
    Resolves: RHEL-1551
  • Add userdom_spec_domtrans_confined_admin_users interface
    Resolves: RHEL-1551
  • Only allow admindomain to execute shell via ssh with ssh_sysadm_login
    Resolves: RHEL-1551
  • Add userdom_spec_domtrans_admin_users interface
    Resolves: RHEL-1551
  • Move ssh dyntrans to unconfined inside unconfined_login tunable policy
    Resolves: RHEL-1551

Approved Development Ticket

All submissions to CentOS Stream must reference an approved ticket in Red Hat Jira. Please follow the CentOS Stream contribution documentation for how to file this ticket and have it approved.

Edited by Juraj Marcin

Merge request reports