# changelog

author: Jonathan Wright <jonathan@almalinux.org> - 2.0.19-1
changelog:
  - update to 2.0.19 rhbz#2321909
  - Fixes "numactl exits if MPOL_PREFERRED_MANY isn't supported"
    https://github.com/numactl/numactl/issues/231


author: Petr Lautrbach <lautrbach@redhat.com> 41.8-4
changelog:
  - Move %postInstall to %posttrans
  - Use `Requires(meta): (rpm-plugin-selinux if rpm-libs)`
  - Drop obsolete modules from config
  - Install dnf protected files only when policy is built


author: Zdenek Pytela <zpytela@redhat.com> - 41.9-1
changelog:
  - Allow virtqemud connect to sanlock over a unix stream socket
  - Allow virtqemud relabel virt_var_run_t directories
  - Allow svirt_tcg_t read vm sysctls
  - Allow virtnodedevd connect to systemd-userdbd over a unix socket
  - Allow svirt read virtqemud fifo files
  - Allow svirt attach_queue to a virtqemud tun_socket
  - Allow virtqemud run ssh client with a transition
  - Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
  - Update keyutils policy
  - Allow sshd_keygen_t connect to userdbd over a unix stream socket
  - Allow postfix-smtpd read mysql config files
  - Allow locate stream connect to systemd-userdbd
  - Allow the staff user use wireshark
  - Allow updatedb connect to userdbd over a unix stream socket
  - Allow gpg_t set attributes of public-keys.d
  - Allow gpg_t get attributes of login_userdomain stream
  - Allow systemd_getty_generator_t read /proc/1/environ
  - Allow systemd_getty_generator_t to read and write to tty_device_t


author: Zdenek Pytela <zpytela@redhat.com> - 41.10-1
changelog:
  - Update afterburn file transition policy
  - Allow systemd_generator read attributes of all filesystems
  - Allow fstab-generator read and write cryptsetup-generator unit file
  - Allow cryptsetup-generator read and write fstab-generator unit file
  - Allow systemd_generator map files in /etc
  - Allow systemd_generator read init's process state
  - Allow coreos-installer-generator read sssd public files
  - Allow coreos-installer-generator work with partitions
  - Label /etc/mdadm.conf.d with mdadm_conf_t
  - Confine coreos generators
  - Label /run/metadata with afterburn_runtime_t
  - Allow afterburn list ssh home directory
  - Label samba certificates with samba_cert_t
  - Label /run/coreos-installer-reboot with coreos_installer_var_run_t
  - Allow virtqemud read virt-dbus process state
  - Allow staff user dbus chat with virt-dbus
  - Allow staff use watch /run/systemd
  - Allow systemd_generator to write kmsg


author: Zdenek Pytela <zpytela@redhat.com> - 41.11-1
changelog:
  - Make cgroup_memory_pressure_t a part of the file_type attribute
  - Allow ssh_t to change role to system_r
  - Update policy for coreos generators
  - Allow init_t nnp domain transition to firewalld_t
  - Label /run/modprobe.d with modules_conf_t
  - Allow virtnodedevd run udev with a domain transition
  - Allow virtnodedev_t create and use virtnodedev_lock_t
  - Allow virtstoraged manage files with virt_content_t type
  - Allow virtqemud unmount a filesystem with extended attributes
  - Allow svirt_t connect to unconfined_t over a unix domain socket


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 256.6-4
changelog:
  - Make backports Meta specific
  - Only apply backports when building the Meta specific build
  - Use a custom patch range for the Meta specific backports so we don't
    conflict with the ones from Fedora
  - Backport PrivateUsers=identity as well


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 256.7-2
changelog:
  - Backport various PRs to streamline upgrades
  - Logging improvements to help debug issues
  - Removing a fallback from the private manager bus to the system bus that
    isn't required and complicates debugging issues
  - Simplification of user manager reloads which also helps debugging issues
    by reducing what can go wrong during upgrades


