After a hickup with Manifest files, you can now enjoy rev 7 of the policies
in the hardened-dev overlay. Its main purpose is to fix a broken admin
interface that was in r6 (which is also the reason r6 didn't make it to the
main tree).
It fixes the following bugs as well:
#441662 Broken admin interface for bind
#442378 Make samba policy optional for virt module
#440128 Allow syslog to manage some logs files completely (incl. cleanup)
#437220 Support lvm utilities properly
#442528 Support ipset command
#442454 Allow accessing certificates for portage fetch domain
#441612 Allow nginx to connect to phpfpm
#428686 Support using offline postfix commands
#402667 Support xattr on ZFS
Give it a spin, and let me know if there are any blocking issues. If not,
I'll push it out to the main tree.
Wkr,
Sven Vermeulen
in the hardened-dev overlay. Its main purpose is to fix a broken admin
interface that was in r6 (which is also the reason r6 didn't make it to the
main tree).
It fixes the following bugs as well:
#441662 Broken admin interface for bind
#442378 Make samba policy optional for virt module
#440128 Allow syslog to manage some logs files completely (incl. cleanup)
#437220 Support lvm utilities properly
#442528 Support ipset command
#442454 Allow accessing certificates for portage fetch domain
#441612 Allow nginx to connect to phpfpm
#428686 Support using offline postfix commands
#402667 Support xattr on ZFS
Give it a spin, and let me know if there are any blocking issues. If not,
I'll push it out to the main tree.
Wkr,
Sven Vermeulen