ELBA-2020-1924

ELBA-2020-1924 - selinux-policy bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2020-05-07

Description

[3.14.3-41.0.1.el8_2.2]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671] (Naoki Tanaka)
- Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
- Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511] (Naoki Tanaka)
- Allow init_t to relabel all lock files [Orabug: 29846265] (Naoki Tanaka)
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Allow udev_t to load modules [Orabug: 28260775]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Obsolete docker-engine-selinux [Orabug: 26439663]
- Fix container selinux policy [Orabug: 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.14.3-41.2]
- Allow glusterd synchronize between master and slave
Resolves: rhbz#1824662

[3.14.3-41.1]
- Allow ssh-keygen create file in /var/lib/glusterd
Resolves: rhbz#1821759
- Update ctdbd_manage_lib_files() to also allow mmap ctdbd_var_lib_t files
Resolves: rhbz#1821226
- Remove container interface calling by named_filetrans_domain.

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	selinux-policy-3.14.3-41.0.1.el8_2.2.src.rpm	18f8cd28a3d8faf7c0a935f0ea3e5946f92465de4c7b27fd783f3ed6b911f5bc	-	ol8_aarch64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.2.src.rpm	18f8cd28a3d8faf7c0a935f0ea3e5946f92465de4c7b27fd783f3ed6b911f5bc	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-3.14.3-41.0.1.el8_2.2.noarch.rpm	d35d7546e3d428d911d5f8633cc37d925beb99745a44b06a3a1e244131235fd7	-	ol8_aarch64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.2.noarch.rpm	d35d7546e3d428d911d5f8633cc37d925beb99745a44b06a3a1e244131235fd7	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-devel-3.14.3-41.0.1.el8_2.2.noarch.rpm	24858e4ef14c7c95c63a74aba4268a21c97dd012592cf1cf73bbc574d8c0a49a	-	ol8_aarch64_baseos_latest
	selinux-policy-devel-3.14.3-41.0.1.el8_2.2.noarch.rpm	24858e4ef14c7c95c63a74aba4268a21c97dd012592cf1cf73bbc574d8c0a49a	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-doc-3.14.3-41.0.1.el8_2.2.noarch.rpm	92702ef47c3f97bcae2f294616246fbd6f6a1ab0830617003f1144cb69028293	-	ol8_aarch64_baseos_latest
	selinux-policy-doc-3.14.3-41.0.1.el8_2.2.noarch.rpm	92702ef47c3f97bcae2f294616246fbd6f6a1ab0830617003f1144cb69028293	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.2.noarch.rpm	801554134325482dd58d24c6b42f712a334a31c4b35157ef27002444231ed67e	-	ol8_aarch64_baseos_latest
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.2.noarch.rpm	801554134325482dd58d24c6b42f712a334a31c4b35157ef27002444231ed67e	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-mls-3.14.3-41.0.1.el8_2.2.noarch.rpm	702fa42510a38c9b0628b375d7a261c00ec9bf4450e4b49306dd785984d8c7c3	-	ol8_aarch64_baseos_latest
	selinux-policy-mls-3.14.3-41.0.1.el8_2.2.noarch.rpm	702fa42510a38c9b0628b375d7a261c00ec9bf4450e4b49306dd785984d8c7c3	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.2.noarch.rpm	fc7f159c60f6195b46fe196893193c2dfa13119f528da647b9764a1d4001fac0	-	ol8_aarch64_baseos_latest
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.2.noarch.rpm	fc7f159c60f6195b46fe196893193c2dfa13119f528da647b9764a1d4001fac0	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.2.noarch.rpm	7b744664fb03a45b3c3b78207c249eb4f6138af794fc14f81ab0daccb109278a	-	ol8_aarch64_baseos_latest
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.2.noarch.rpm	7b744664fb03a45b3c3b78207c249eb4f6138af794fc14f81ab0daccb109278a	-	ol8_aarch64_u2_baseos_patch
Oracle Linux 8 (x86_64)	selinux-policy-3.14.3-41.0.1.el8_2.2.src.rpm	18f8cd28a3d8faf7c0a935f0ea3e5946f92465de4c7b27fd783f3ed6b911f5bc	-	ol8_x86_64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.2.src.rpm	18f8cd28a3d8faf7c0a935f0ea3e5946f92465de4c7b27fd783f3ed6b911f5bc	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-3.14.3-41.0.1.el8_2.2.noarch.rpm	d35d7546e3d428d911d5f8633cc37d925beb99745a44b06a3a1e244131235fd7	-	ol8_x86_64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.2.noarch.rpm	d35d7546e3d428d911d5f8633cc37d925beb99745a44b06a3a1e244131235fd7	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-devel-3.14.3-41.0.1.el8_2.2.noarch.rpm	24858e4ef14c7c95c63a74aba4268a21c97dd012592cf1cf73bbc574d8c0a49a	-	ol8_x86_64_baseos_latest
	selinux-policy-devel-3.14.3-41.0.1.el8_2.2.noarch.rpm	24858e4ef14c7c95c63a74aba4268a21c97dd012592cf1cf73bbc574d8c0a49a	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-doc-3.14.3-41.0.1.el8_2.2.noarch.rpm	92702ef47c3f97bcae2f294616246fbd6f6a1ab0830617003f1144cb69028293	-	ol8_x86_64_baseos_latest
	selinux-policy-doc-3.14.3-41.0.1.el8_2.2.noarch.rpm	92702ef47c3f97bcae2f294616246fbd6f6a1ab0830617003f1144cb69028293	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.2.noarch.rpm	801554134325482dd58d24c6b42f712a334a31c4b35157ef27002444231ed67e	-	ol8_x86_64_baseos_latest
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.2.noarch.rpm	801554134325482dd58d24c6b42f712a334a31c4b35157ef27002444231ed67e	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-mls-3.14.3-41.0.1.el8_2.2.noarch.rpm	702fa42510a38c9b0628b375d7a261c00ec9bf4450e4b49306dd785984d8c7c3	-	ol8_x86_64_baseos_latest
	selinux-policy-mls-3.14.3-41.0.1.el8_2.2.noarch.rpm	702fa42510a38c9b0628b375d7a261c00ec9bf4450e4b49306dd785984d8c7c3	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.2.noarch.rpm	fc7f159c60f6195b46fe196893193c2dfa13119f528da647b9764a1d4001fac0	-	ol8_x86_64_baseos_latest
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.2.noarch.rpm	fc7f159c60f6195b46fe196893193c2dfa13119f528da647b9764a1d4001fac0	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.2.noarch.rpm	7b744664fb03a45b3c3b78207c249eb4f6138af794fc14f81ab0daccb109278a	-	ol8_x86_64_baseos_latest
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.2.noarch.rpm	7b744664fb03a45b3c3b78207c249eb4f6138af794fc14f81ab0daccb109278a	-	ol8_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team