ELBA-2019-3982

ELBA-2019-3982 - selinux-policy bug fix update

Type:	BUG
Impact:	NA
Release Date:	2019-11-27

Description

[3.13.1-252.0.2]
- Make tuned work with mls policy [Orabug: 29778485]
- Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-252.6]
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095

[3.13.1-252.5]
- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095

[3.13.1-252.4]
- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095

[3.13.1-252.3]
- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095

[3.13.1-252.2]
- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095

[3.13.1-252.1]
- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm	e8bcb30f7ea57248bf3660dc954e8c58f926af6783bc3ed6328157276ef05e3b	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm	e8bcb30f7ea57248bf3660dc954e8c58f926af6783bc3ed6328157276ef05e3b	ELBA-2024-12651	ol7_aarch64_optional_latest
	selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm	e8bcb30f7ea57248bf3660dc954e8c58f926af6783bc3ed6328157276ef05e3b	ELBA-2024-12651	ol7_aarch64_u7_patch
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	ol7_aarch64_u7_patch
	selinux-policy-devel-3.13.1-252.0.2.el7_7.6.noarch.rpm	7d139c9a2d04411f21208784091de1d8a816a21b7413682cf103b93eb40a4411	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-devel-3.13.1-252.0.2.el7_7.6.noarch.rpm	7d139c9a2d04411f21208784091de1d8a816a21b7413682cf103b93eb40a4411	ELBA-2024-12651	ol7_aarch64_u7_patch
	selinux-policy-doc-3.13.1-252.0.2.el7_7.6.noarch.rpm	dddb82109b4552787a19181547785d0ca900fc3aadf9e6f69c8642817feac192	ELBA-2024-12651	ol7_aarch64_optional_latest
	selinux-policy-minimum-3.13.1-252.0.2.el7_7.6.noarch.rpm	882c0cce7b9aeac38ec2e5d27f4f089b28b6dd3fb1326af6630406b235e55203	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-minimum-3.13.1-252.0.2.el7_7.6.noarch.rpm	882c0cce7b9aeac38ec2e5d27f4f089b28b6dd3fb1326af6630406b235e55203	ELBA-2024-12651	ol7_aarch64_u7_patch
	selinux-policy-mls-3.13.1-252.0.2.el7_7.6.noarch.rpm	173aa22586c05b6982c471bca74e606be48bb857ba63e1bb2089d65a5aa4c806	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-mls-3.13.1-252.0.2.el7_7.6.noarch.rpm	173aa22586c05b6982c471bca74e606be48bb857ba63e1bb2089d65a5aa4c806	ELBA-2024-12651	ol7_aarch64_u7_patch
	selinux-policy-sandbox-3.13.1-252.0.2.el7_7.6.noarch.rpm	7bb81f4b13ac63ef5bcdaad8d18437934e5ed9365d02dc2fbceff3c87cfa9ec7	ELBA-2024-12651	ol7_aarch64_optional_latest
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	ol7_aarch64_u7_patch
Oracle Linux 7 (x86_64)	selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm	e8bcb30f7ea57248bf3660dc954e8c58f926af6783bc3ed6328157276ef05e3b	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm	e8bcb30f7ea57248bf3660dc954e8c58f926af6783bc3ed6328157276ef05e3b	ELBA-2024-12651	ol7_x86_64_optional_latest
	selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm	e8bcb30f7ea57248bf3660dc954e8c58f926af6783bc3ed6328157276ef05e3b	ELBA-2024-12651	ol7_x86_64_u7_patch
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.2.10.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.2.11.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.2.12.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.2.13.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.2.14.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.3.4.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.3.5.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.3.6.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.3.7.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	exadata_dbserver_19.3.8.0.0_x86_64_base
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm	8ca4ac5c7203a06f1102377d4ffd31f2ebd0cf92133732d6eb8e54909ab3d735	ELBA-2024-12651	ol7_x86_64_u7_patch
	selinux-policy-devel-3.13.1-252.0.2.el7_7.6.noarch.rpm	7d139c9a2d04411f21208784091de1d8a816a21b7413682cf103b93eb40a4411	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-devel-3.13.1-252.0.2.el7_7.6.noarch.rpm	7d139c9a2d04411f21208784091de1d8a816a21b7413682cf103b93eb40a4411	ELBA-2024-12651	ol7_x86_64_u7_patch
	selinux-policy-doc-3.13.1-252.0.2.el7_7.6.noarch.rpm	dddb82109b4552787a19181547785d0ca900fc3aadf9e6f69c8642817feac192	ELBA-2024-12651	ol7_x86_64_optional_latest
	selinux-policy-minimum-3.13.1-252.0.2.el7_7.6.noarch.rpm	882c0cce7b9aeac38ec2e5d27f4f089b28b6dd3fb1326af6630406b235e55203	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-minimum-3.13.1-252.0.2.el7_7.6.noarch.rpm	882c0cce7b9aeac38ec2e5d27f4f089b28b6dd3fb1326af6630406b235e55203	ELBA-2024-12651	ol7_x86_64_u7_patch
	selinux-policy-mls-3.13.1-252.0.2.el7_7.6.noarch.rpm	173aa22586c05b6982c471bca74e606be48bb857ba63e1bb2089d65a5aa4c806	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-mls-3.13.1-252.0.2.el7_7.6.noarch.rpm	173aa22586c05b6982c471bca74e606be48bb857ba63e1bb2089d65a5aa4c806	ELBA-2024-12651	ol7_x86_64_u7_patch
	selinux-policy-sandbox-3.13.1-252.0.2.el7_7.6.noarch.rpm	7bb81f4b13ac63ef5bcdaad8d18437934e5ed9365d02dc2fbceff3c87cfa9ec7	ELBA-2024-12651	ol7_x86_64_optional_latest
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.2.10.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.2.11.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.2.12.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.2.13.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.2.14.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.3.4.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.3.5.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.3.6.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.3.7.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	exadata_dbserver_19.3.8.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm	64f7dbaab8d6be9bebae90247e5b2faa05a29cad253567754f3c1da705df3238	ELBA-2024-12651	ol7_x86_64_u7_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team