diff options
| author |   Kenton Groombridge <concord@gentoo.org> | 2024-03-01 12:06:53 -0500 |
|---|---|---|
| committer | Kenton Groombridge <concord@gentoo.org> | 2024-03-01 12:06:53 -0500 |
| commit | 9a2384303ee211148b6a85974028743d5a482317 (patch) | |
| tree | 6b88892504bd1aeeb8af5d2cff212aa056ea1921 /policy | |
| parent | Merge upstream (diff) | |
| download | hardened-refpolicy-9a2384303ee211148b6a85974028743d5a482317.tar.gz hardened-refpolicy-9a2384303ee211148b6a85974028743d5a482317.tar.bz2 hardened-refpolicy-9a2384303ee211148b6a85974028743d5a482317.zip | |
Update generated policy and doc files2.20240226-r1
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
Diffstat (limited to 'policy')
| -rw-r--r-- | policy/booleans.conf | 14 | ||||
| -rw-r--r-- | policy/modules.conf | 7 |
2 files changed, 21 insertions, 0 deletions
diff --git a/policy/booleans.conf b/policy/booleans.conf index f244d9c5..f38f543f 100644 --- a/policy/booleans.conf +++ b/policy/booleans.conf @@ -29,6 +29,11 @@ secure_mode = false aide_mmap_files = false # +# Enable support for cloud-init to manage all non-security files. +# +cloudinit_manage_non_security = false + +# # Grant the firstboot domains read access to generic user content # firstboot_read_generic_user_content = true @@ -1591,6 +1596,15 @@ git_client_manage_all_user_home_content = false allow_httpd_git_script_anon_write = false # +# Allow the gluster daemon to manage unlabeled +# objects. This could happen if the underlying +# gluster brick experiences data corruption +# and you want to allow gluster to handle +# files with corrupted or missing xattrs. +# +glusterfs_manage_unlabeled = false + +# # Allow the gluster daemon to automatically # add and remove file contexts from the local # SELinux policy when adding and removing diff --git a/policy/modules.conf b/policy/modules.conf index 8741c1eb..07319bbe 100644 --- a/policy/modules.conf +++ b/policy/modules.conf @@ -1289,6 +1289,13 @@ clamav = module cobbler = module # Layer: services +# Module: cockpit +# +# Cockpit web management system for Linux +# +cockpit = module + +# Layer: services # Module: collectd # # Statistics collection daemon for filling RRD files. |