<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="8">
<package pkgid="986d30877f370823398b11547f27ccb3a2ba03261b9d875fe92b91a3fa5e051d" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
<package pkgid="b478270b7e7f0a679ec973fd8606369f610165c446efff9eafb90c52b4930b87" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
<package pkgid="234e43311a2845892c3d85c55840ca7eebb801513c4b364d802c28643f515196" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
<package pkgid="d3fe0cc32501d1cbdd05f66e7ecc2c26c9249a88bf7657c56b915e88d50629a8" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
<package pkgid="a045fee9af4ed08c8963e5357bfa5815dc475a9ddd366573dfc0154b303ad3b8" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
<package pkgid="a71fce6ca36d65ae6ef53d8825c1c5a7c46be941f16109ec01ac579116fa9747" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
<package pkgid="aad6d1dbedbac6d2df9a32de199d4cbc8128247aff3a00bc3e0c978f1b2ffe9d" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
<package pkgid="0ef37dbe097bd50298a427b0c62b57f86b2007654a2ee6c187dd36ea1c9740c7" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.14.5" rel="18.fc32.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-13" date="1573646400">- Fix typo bugs in rtas_errd_read_lock() interface
- cockpit: Drop cockpit-cert-session
- Allow timedatex_t domain to systemctl chronyd domains
- Allow ipa_helper_t to read kr5_keytab_t files
- cockpit: Allow cockpit-session to read cockpit-tls state directory
- Allow stratisd_t domain to read nvme and fixed disk devices
- Update lldpad_t policy module
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
- cockpit: Support https instance factory
- Added macro for timedatex to chat over dbus.
- Fix typo in dev_filetrans_all_named_dev()
- Update files_manage_etc_runtime_files() interface to allow manage also dirs
- Fix typo in cachefiles device
- Dontaudit sys_admin capability for auditd_t domains
- Allow x_userdomain to read adjtime_t files
- Allow users using template userdom_unpriv_user_template() to run bpf tool
- Allow x_userdomain to dbus_chat with timedatex.</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-14" date="1573646401">- Increase version of kernel compiled binary policy to 32 because of new SELinux userspace v3.0</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-15" date="1573732800">- Increase SELinux userspace version which should be required.</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.5-16" date="1574337600">- Allow timedatex_t domain dbus chat with both confined and unconfined users
- Allow timedatex_t domain dbus chat with unconfined users
- Allow NetworkManager_t manage dhcpc_state_t BZ(1770698)
- Make unconfined domains part of domain_named_attribute
- Label tcp ports 24816,24817 as pulp_port_t
- Remove duplicate entries for initrc_t in init.te</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-17" date="1574856000">- Fix nonexisting types in rtas_errd_rw_lock interface
- Allow snmpd_t domain to trace processes in user namespace
- Allow timedatex_t domain to read relatime clock and adjtime_t files
- Allow zebra_t domain to execute zebra binaries
- Label /usr/lib/NetworkManager/dispatcher as NetworkManager_initrc_exec_t
- Allow ksmtuned_t domain to trace processes in user namespace
- Allow systemd to read symlinks in /var/lib
- Update dev_mounton_all_device_nodes() interface
- Add the miscfiles_map_generic_certs macro to the sysnet_dns_name_resolve macro.
- Allow systemd_domain to map files in /usr.
- Allow strongswan start using swanctl method BZ(1773381)
- Dontaudit systemd_tmpfiles_t getattr of all file types BZ(1772976)</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.14.5-18" date="1574942400">- Allow systemd to read all proc
- Introduce new type pdns_var_lib_t
- Allow zebra_t domain to read files labled as nsfs_t.
- Allow systemd to setattr on all device_nodes
- Allow systemd to mounton and list all proc types</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.1" date="1575979200">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.2" date="1576238400">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.3" date="1576324800">- rebuilt</changelog>
  <changelog author="Lukas Vrabec - 3.14.5-18.4" date="1576411200">- rebuilt</changelog>
</package>
</otherdata>