ELBA-2020-1924

ELBA-2020-1924 - selinux-policy bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2020-05-07

Description

[3.14.3-41.0.1.el8_2.2]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671] (Naoki Tanaka)
- Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
- Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511] (Naoki Tanaka)
- Allow init_t to relabel all lock files [Orabug: 29846265] (Naoki Tanaka)
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Allow udev_t to load modules [Orabug: 28260775]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Obsolete docker-engine-selinux [Orabug: 26439663]
- Fix container selinux policy [Orabug: 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.14.3-41.2]
- Allow glusterd synchronize between master and slave
Resolves: rhbz#1824662

[3.14.3-41.1]
- Allow ssh-keygen create file in /var/lib/glusterd
Resolves: rhbz#1821759
- Update ctdbd_manage_lib_files() to also allow mmap ctdbd_var_lib_t files
Resolves: rhbz#1821226
- Remove container interface calling by named_filetrans_domain.

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team