# changelog

author: Björn Esser <besser82@fedoraproject.org> - 1.2-0.3
changelog:
  - Add soft-static group allocation preferring the gids as assigned by FPC
  - Merge the filesystem and sysusers sub-packages into common sub-package


author: Zdenek Pytela <zpytela@redhat.com> - 34.18-1
changelog:
  - Allow ModemManager create a qipcrtr socket
  - Allow ModemManager request to load a kernel module
  - Label /usr/sbin/virtproxyd as virtd_exec_t
  - Allow communication between at-spi and gdm processes
  - Update ica_filetrans_named_content() with create_file_perms
  - Fix the gnome_atspi_domtrans() interface summary


author: Zdenek Pytela <zpytela@redhat.com> - 34.19-1
changelog:
  - Update the dhcp client local policy
  - Allow firewalld load kernel modules
  - Allow postfix_domain to sendto unix dgram sockets.
  - Allow systemd watch unallocated ttys


author: Zdenek Pytela <zpytela@redhat.com> - 34.20-1
changelog:
  - cleanup unused codes
  - Fix typo in the gnome_exec_atspi() interface summary
  - Allow xdm execute gnome-atspi services
  - Allow gnome at-spi processes execute dbus-daemon in caller domain
  - Allow xdm watch dbus configuration
  - Allow xdm execute dbus-daemon in the caller domain
  - Revert "Allow xdm_t transition to system_dbusd_t"
  - Allow at-spi-bus-launcher read and map xdm pid files
  - Allow dhcpcd set its resource limits
  - Allow systemd-sleep get removable devices attributes
  - Allow usbmuxd get attributes of fs_t filesystems


author: Zdenek Pytela <zpytela@redhat.com> - 34.21-1
changelog:
  - Add bluetooth-related permissions into a tunable block
  - Allow gnome at-spi processes create and use stream sockets
  - Allow usbmuxd get attributes of tmpfs_t filesystems
  - Allow fprintd install a sleep delay inhibitor
  - Allow collectd get attributes of infiniband devices
  - Allow collectd create and user netlink rdma socket
  - Allow collectd map packet_socket
  - Allow snort create and use blootooth socket
  - Allow systemd watch and watch_reads console devices
  - Allow snort create and use generic netlink socket
  - Allow NetworkManager dbus chat with fwupd
  - Allow unconfined domains read/write domain perf_events
  - Allow scripts to enter LUKS password
  - Update mount_manage_pid_files() to use manage_files_pattern
  - Support hitless reloads feature in haproxy
  - Allow haproxy list the sysfs directories content
  - Allow gnome at-spi processes get attributes of tmpfs filesystems
  - Allow unbound connectto unix_stream_socket
  - Allow rhsmcertd_t dbus chat with anaconda install_t


author: Zdenek Pytela <zpytela@redhat.com> - 35.1-1
changelog:
  - Add fedoratp module
  - Allow xdm_t domain transition to fedoratp_t
  - Allow ModemManager create and use netlink route socket
  - Add default file context for /run/gssproxy.default.sock
  - Allow xdm_t watch fonts directories
  - Allow xdm_t watch generic directories in /lib
  - Allow xdm_t watch generic pid directories


