Update virtlogd policy
69433
Allow svirt_t the sys_rawio capability
56955
Allow qemu-ga the dac_override and dac_read_search capabilities
52476
Allow ip the setexec permission
62923
Allow alsa get attributes filesystems with extended attributes
61472
Allow bacula execute container in the container domain
21168
Allow httpd get attributes of dirsrv unit files
46808
Update samba-bgqd policy
69517
Allow samba-bgqd read cups config files
69517
Update policy for samba-bgqd
69517
Update bootupd policy for the removing-state-file test
66584
Allow qatlib search the content of the kernel debugging filesystem
53864
Allow qatlib connect to systemd-machined over a unix socket
53864
Update qatlib policy for v24.02 with new features
53864

Revert "Allow unconfined_t execute kmod in the kmod domain"
65008
Add policy for /usr/libexec/samba/samba-bgqd
53124

Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
56988
Allow lldpad create and use netlink_generic_socket
61832
Allow unconfined_t execute kmod in the kmod domain
54710
Allow confined users r/w to screen unix stream socket
50379
Label /root/.screenrc and /root/.tmux.conf with screen_home_t
50375
Allow iio-sensor-proxy the bpf capability
17346

Rebuild

Label /run/modprobe.d with modules_conf_t
61453
Allow boothd connect to kernel over a unix socket
57104
Allow boothd connect to systemd-userdbd over a unix socket
57104
Additional updates stalld policy for bpf usage
57075
Update stalld policy for bpf usage
57075
Allow ptp4l the sys_admin capability
55133
Label /dev/hfi1_[0-9]+ devices
54996
Confine iio-sensor-proxy
17346

Rebuild
55414

Rebuild
55414

Allow setsebool_t relabel selinux data files
55414

Allow coreos-installer-generator work with partitions
38614
Label /etc/mdadm.conf.d with mdadm_conf_t
38614
Change file context specification to /var/run/metadata
49735
Allow initrc_t transition to passwd_t
17404
systemd: allow systemd_notify_t to send data to kernel_t datagram sockets
25514
systemd: allow sys_admin capability for systemd_notify_t
25514
Change systemd-network-generator transition to include class file
47033
Allow sshd_keygen_t connect to userdbd over a unix stream socket
47033

Allow rhsmcertd read/write access to /dev/papr-sysparm
49599
Label /dev/papr-sysparm and /dev/papr-vpd
49599
Allow rhsmcertd read, write, and map ica tmpfs files
50926
Update afterburn file transition policy
49735
Label /run/metadata with afterburn_runtime_t
49735
Allow afterburn list ssh home directory
49735
Support SGX devices
50922
Allow systemd-pstore send a message to syslogd over a unix domain
45528
Allow postfix_domain map postfix_etc_t files
46332
Allow microcode create /sys/devices/system/cpu/microcode/reload
26821
Allow svirt_tcg_t map svirt_image_t files
27141
Allow systemd-hostnamed shut down nscd
45033
Allow postfix_domain connect to postgresql over a unix socket
6776

Label samba certificates with samba_cert_t
25724
Allow systemd-coredumpd the sys_chroot capability
45245
Allow svirt_tcg_t read vm sysctls
27141
Label /usr/sbin/samba-gpupdate with samba_gpupdate_exec_t
25724
Label /var/run/coreos-installer-reboot with coreos_installer_var_run_t
38614
Allow coreos-installer add systemd unit file links
38614

Differentiate between staff and sysadm when executing crontab with sudo
31888
Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t
25724
Allow unconfined_service_t transition to passwd_t
17404
Allow sbd to trace processes in user namespace
44680
Allow systemd-coredumpd sys_admin and sys_resource capabilities
45245
Label /usr/lib/node_modules/npm/bin with bin_t
36587
Support /var is empty
29331
Allow timemaster write to sysfs files
28777
Don't audit crontab_domain write attempts to user home
31888
Transition from sudodomains to crontab_t when executing crontab_exec_t
31888
Fix label of pseudoterminals created from sudodomain
31888

Allow systemd-coredump read nsfs files
39937
Allow login_userdomain execute systemd-tmpfiles in the caller domain
40374
Allow ptp4l_t request that the kernel load a kernel module
38905
Allow collectd to trace processes in user namespace
36293

Add interfaces for watching and reading ifconfig_var_run_t
39408
Allow dhcpcd use unix_stream_socket
39408
Allow dhcpc read /run/netns files
39408
Allow all domains read and write z90crypt device
38833
Allow bootupd search efivarfs dirs
36289
Move unconfined_domain(sap_unconfined_t) to an optional block
37663

Add boolean qemu-ga to run unconfined script
31211
Ensure dbus communication is allowed bidirectionally
35782
Allow logwatch_mail_t read network sysctls
34135
Allow sysadm execute dmidecode using sudo
16104
Allow sudodomain list files in /var
16104
Allow various services read and write z90crypt device
33361
Allow system_cronjob_t dbus chat with avahi_t
32290
Allow setroubleshootd get attributes of all sysctls
34078
Remove permissive domain for bootupd_t
22173

Allow numad to trace processes in user namespace
33994
Remove permissive domain for rshim_t
22173
Remove permissive domain for mptcpd_t
22173
Remove permissive domain for coreos_installer_t
22173
Remove permissive domain for afterburn_t
22173
Update afterburn policy
22173
Allow bootupd search EFI directory
22172
Add the bootupd module
22172
Add policy for bootupd
22172
Label /dev/mmcblk0rpmb character device with removable_device_t
28080
Differentiate between staff and sysadm when executing crontab with sudo
31888
Add crontab_admin_domtrans interface
31888
Add crontab_domtrans interface
31888
Allow svirt_t read vm sysctls
32296