Allow rsyslog read systemd-logind session files
73839
Allow samba-bgqd connect to cupsd over an unix domain stream socket
72860
Allow svirt_t read sysfs files
70839
Allow xdm dbus chat with power-profiles-daemon
61117
Update power-profiles-daemon policy
61117
Confine power-profiles-daemon
61117
Allow virtqemud domain transition to nbdkit
56029
Add nbdkit interfaces defined conditionally
56029
Confine the switcheroo-control service
24268

Allow auditctl signal auditd
68969
Fix the cups_read_pid_files() interface to use read_files_pattern
69517
Dontaudit systemd-coredump the sys_resource capability
46339
Allow rpcd read network sysctls
1558
Allow irqbalance setpcap capability in the user namespace
69564
Allow traceroute_t bind rawip sockets to unreserved ports
54561
Allow svirt_t the sys_rawio capability
56955
56988
Exclude container-selinux manpage from selinux-policy-doc
69916

Update virtlogd policy
69433
Allow svirt_t the sys_rawio capability
56955
Allow qemu-ga the dac_override and dac_read_search capabilities
52476
Allow ip the setexec permission
62923
Allow alsa get attributes filesystems with extended attributes
61472
Allow bacula execute container in the container domain
21168
Allow httpd get attributes of dirsrv unit files
46808
Update samba-bgqd policy
69517
Allow samba-bgqd read cups config files
69517
Update policy for samba-bgqd
69517
Update bootupd policy for the removing-state-file test
66584
Allow qatlib search the content of the kernel debugging filesystem
53864
Allow qatlib connect to systemd-machined over a unix socket
53864
Update qatlib policy for v24.02 with new features
53864

Revert "Allow unconfined_t execute kmod in the kmod domain"
65008
Add policy for /usr/libexec/samba/samba-bgqd
53124

Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
56988
Allow lldpad create and use netlink_generic_socket
61832
Allow unconfined_t execute kmod in the kmod domain
54710
Allow confined users r/w to screen unix stream socket
50379
Label /root/.screenrc and /root/.tmux.conf with screen_home_t
50375
Allow iio-sensor-proxy the bpf capability
17346

Rebuild

Label /run/modprobe.d with modules_conf_t
61453
Allow boothd connect to kernel over a unix socket
57104
Allow boothd connect to systemd-userdbd over a unix socket
57104
Additional updates stalld policy for bpf usage
57075
Update stalld policy for bpf usage
57075
Allow ptp4l the sys_admin capability
55133
Label /dev/hfi1_[0-9]+ devices
54996
Confine iio-sensor-proxy
17346

Rebuild
55414

Rebuild
55414

Allow setsebool_t relabel selinux data files
55414

Allow coreos-installer-generator work with partitions
38614
Label /etc/mdadm.conf.d with mdadm_conf_t
38614
Change file context specification to /var/run/metadata
49735
Allow initrc_t transition to passwd_t
17404
systemd: allow systemd_notify_t to send data to kernel_t datagram sockets
25514
systemd: allow sys_admin capability for systemd_notify_t
25514
Change systemd-network-generator transition to include class file
47033
Allow sshd_keygen_t connect to userdbd over a unix stream socket
47033

Allow rhsmcertd read/write access to /dev/papr-sysparm
49599
Label /dev/papr-sysparm and /dev/papr-vpd
49599
Allow rhsmcertd read, write, and map ica tmpfs files
50926
Update afterburn file transition policy
49735
Label /run/metadata with afterburn_runtime_t
49735
Allow afterburn list ssh home directory
49735
Support SGX devices
50922
Allow systemd-pstore send a message to syslogd over a unix domain
45528
Allow postfix_domain map postfix_etc_t files
46332
Allow microcode create /sys/devices/system/cpu/microcode/reload
26821
Allow svirt_tcg_t map svirt_image_t files
27141
Allow systemd-hostnamed shut down nscd
45033
Allow postfix_domain connect to postgresql over a unix socket
6776

Label samba certificates with samba_cert_t
25724
Allow systemd-coredumpd the sys_chroot capability
45245
Allow svirt_tcg_t read vm sysctls
27141
Label /usr/sbin/samba-gpupdate with samba_gpupdate_exec_t
25724
Label /var/run/coreos-installer-reboot with coreos_installer_var_run_t
38614
Allow coreos-installer add systemd unit file links
38614

Differentiate between staff and sysadm when executing crontab with sudo
31888
Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t
25724
Allow unconfined_service_t transition to passwd_t
17404
Allow sbd to trace processes in user namespace
44680
Allow systemd-coredumpd sys_admin and sys_resource capabilities
45245
Label /usr/lib/node_modules/npm/bin with bin_t
36587
Support /var is empty
29331
Allow timemaster write to sysfs files
28777
Don't audit crontab_domain write attempts to user home
31888
Transition from sudodomains to crontab_t when executing crontab_exec_t
31888
Fix label of pseudoterminals created from sudodomain
31888

Allow systemd-coredump read nsfs files
39937
Allow login_userdomain execute systemd-tmpfiles in the caller domain
40374
Allow ptp4l_t request that the kernel load a kernel module
38905
Allow collectd to trace processes in user namespace
36293

Add interfaces for watching and reading ifconfig_var_run_t
39408
Allow dhcpcd use unix_stream_socket
39408
Allow dhcpc read /run/netns files
39408
Allow all domains read and write z90crypt device
38833
Allow bootupd search efivarfs dirs
36289
Move unconfined_domain(sap_unconfined_t) to an optional block
37663