ELBA-2019-1878

ELBA-2019-1878 - selinux-policy bug fix update

Type:BUG
Severity:NA
Release Date:2019-07-30

Description


[3.13.1-229.0.4]
- Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-229.15]
- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728592

[3.13.1-229.14]
- Allow nrpe_t domain to read process state of systemd_logind_t
- Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
- Allow nrpe_t domain to be dbus cliennt
- Allow ngaios to use chown capability
Resolves: rhbz#1692893

[3.13.1-229.13]
- Update Nagios policy when sudo is used
Resolves: rhbz#1692893




Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete