ELBA-2020-3655

ELBA-2020-3655 - selinux-policy bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2020-09-09

Description

[3.14.3-41.0.1.el8_2.6]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671] (Naoki Tanaka)
- Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
- Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511] (Naoki Tanaka)
- Allow init_t to relabel all lock files [Orabug: 29846265] (Naoki Tanaka)
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Allow udev_t to load modules [Orabug: 28260775]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Obsolete docker-engine-selinux [Orabug: 26439663]
- Fix container selinux policy [Orabug: 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.14.3-41.6]
- Label systemd-growfs and systemd-makefs as fsadm_exec_t
Resolves: rhbz#1859162
- Update xserver_rw_session macro
Resolves: rhbz#1866362

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	selinux-policy-3.14.3-41.0.1.el8_2.6.src.rpm	6bb8e10b3e57090e4dac32a6ab5c434995cf57c9583546fd9ab30b4cd5d53c03	-	ol8_aarch64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.6.src.rpm	6bb8e10b3e57090e4dac32a6ab5c434995cf57c9583546fd9ab30b4cd5d53c03	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-3.14.3-41.0.1.el8_2.6.noarch.rpm	111e4af5c1ccfa3f8e055ee135da3804dbaa7a53264c77b1379c86cd306e0464	-	ol8_aarch64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.6.noarch.rpm	111e4af5c1ccfa3f8e055ee135da3804dbaa7a53264c77b1379c86cd306e0464	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-devel-3.14.3-41.0.1.el8_2.6.noarch.rpm	5adc6c8dc0be91790f7b2d8a0bad00b0984f3a4652aa2961e2d0129d17d6e8be	-	ol8_aarch64_baseos_latest
	selinux-policy-devel-3.14.3-41.0.1.el8_2.6.noarch.rpm	5adc6c8dc0be91790f7b2d8a0bad00b0984f3a4652aa2961e2d0129d17d6e8be	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-doc-3.14.3-41.0.1.el8_2.6.noarch.rpm	cf5bb85289ea936ba97862cc9f23237b53739bb0dfcf1c898a5bfcfb4723976f	-	ol8_aarch64_baseos_latest
	selinux-policy-doc-3.14.3-41.0.1.el8_2.6.noarch.rpm	cf5bb85289ea936ba97862cc9f23237b53739bb0dfcf1c898a5bfcfb4723976f	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.6.noarch.rpm	94df7b2f530d1f1b073e80daf4945ff6ff3cef24a17eb2a211c2473bda9deacc	-	ol8_aarch64_baseos_latest
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.6.noarch.rpm	94df7b2f530d1f1b073e80daf4945ff6ff3cef24a17eb2a211c2473bda9deacc	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-mls-3.14.3-41.0.1.el8_2.6.noarch.rpm	6b18039964a2217e2d936e44af041df5c877a4966645657a1867a28fc8ed281d	-	ol8_aarch64_baseos_latest
	selinux-policy-mls-3.14.3-41.0.1.el8_2.6.noarch.rpm	6b18039964a2217e2d936e44af041df5c877a4966645657a1867a28fc8ed281d	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.6.noarch.rpm	ba82a3f92dc024438d6d735fe3e7113ac5b3953ce047297666c6011458a9f4e8	-	ol8_aarch64_baseos_latest
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.6.noarch.rpm	ba82a3f92dc024438d6d735fe3e7113ac5b3953ce047297666c6011458a9f4e8	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.6.noarch.rpm	9b26106328e471c426786648b0ccd754b78b77ca6cab9a6f6bac1c3f07e364b8	-	ol8_aarch64_baseos_latest
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.6.noarch.rpm	9b26106328e471c426786648b0ccd754b78b77ca6cab9a6f6bac1c3f07e364b8	-	ol8_aarch64_u2_baseos_patch
Oracle Linux 8 (x86_64)	selinux-policy-3.14.3-41.0.1.el8_2.6.src.rpm	6bb8e10b3e57090e4dac32a6ab5c434995cf57c9583546fd9ab30b4cd5d53c03	-	ol8_x86_64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.6.src.rpm	6bb8e10b3e57090e4dac32a6ab5c434995cf57c9583546fd9ab30b4cd5d53c03	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-3.14.3-41.0.1.el8_2.6.noarch.rpm	111e4af5c1ccfa3f8e055ee135da3804dbaa7a53264c77b1379c86cd306e0464	-	ol8_x86_64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.6.noarch.rpm	111e4af5c1ccfa3f8e055ee135da3804dbaa7a53264c77b1379c86cd306e0464	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-devel-3.14.3-41.0.1.el8_2.6.noarch.rpm	5adc6c8dc0be91790f7b2d8a0bad00b0984f3a4652aa2961e2d0129d17d6e8be	-	ol8_x86_64_baseos_latest
	selinux-policy-devel-3.14.3-41.0.1.el8_2.6.noarch.rpm	5adc6c8dc0be91790f7b2d8a0bad00b0984f3a4652aa2961e2d0129d17d6e8be	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-doc-3.14.3-41.0.1.el8_2.6.noarch.rpm	cf5bb85289ea936ba97862cc9f23237b53739bb0dfcf1c898a5bfcfb4723976f	-	ol8_x86_64_baseos_latest
	selinux-policy-doc-3.14.3-41.0.1.el8_2.6.noarch.rpm	cf5bb85289ea936ba97862cc9f23237b53739bb0dfcf1c898a5bfcfb4723976f	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.6.noarch.rpm	94df7b2f530d1f1b073e80daf4945ff6ff3cef24a17eb2a211c2473bda9deacc	-	ol8_x86_64_baseos_latest
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.6.noarch.rpm	94df7b2f530d1f1b073e80daf4945ff6ff3cef24a17eb2a211c2473bda9deacc	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-mls-3.14.3-41.0.1.el8_2.6.noarch.rpm	6b18039964a2217e2d936e44af041df5c877a4966645657a1867a28fc8ed281d	-	ol8_x86_64_baseos_latest
	selinux-policy-mls-3.14.3-41.0.1.el8_2.6.noarch.rpm	6b18039964a2217e2d936e44af041df5c877a4966645657a1867a28fc8ed281d	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.6.noarch.rpm	ba82a3f92dc024438d6d735fe3e7113ac5b3953ce047297666c6011458a9f4e8	-	ol8_x86_64_baseos_latest
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.6.noarch.rpm	ba82a3f92dc024438d6d735fe3e7113ac5b3953ce047297666c6011458a9f4e8	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.6.noarch.rpm	9b26106328e471c426786648b0ccd754b78b77ca6cab9a6f6bac1c3f07e364b8	-	ol8_x86_64_baseos_latest
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.6.noarch.rpm	9b26106328e471c426786648b0ccd754b78b77ca6cab9a6f6bac1c3f07e364b8	-	ol8_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team