ELBA-2020-4355

ELBA-2020-4355 - selinux-policy bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2020-10-28

Description

[3.14.3-41.0.1.el8_2.8]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671] (Naoki Tanaka)
- Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
- Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511] (Naoki Tanaka)
- Allow init_t to relabel all lock files [Orabug: 29846265] (Naoki Tanaka)
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Allow udev_t to load modules [Orabug: 28260775]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Obsolete docker-engine-selinux [Orabug: 26439663]
- Fix container selinux policy [Orabug: 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.14.3-41.8]
- Allow ptp4l_t sys_admin capability to run bpf programs
Resolves: rhbz#1884267

[3.14.3-41.7]
- Allow ptp4l_t create and use packet_socket sockets
Resolves: rhbz#1884267

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	selinux-policy-3.14.3-41.0.1.el8_2.8.src.rpm	6eeb607097745b50e57d6466033f0395689c61039c4ed8def14a5982e606f091	-	ol8_aarch64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.8.src.rpm	6eeb607097745b50e57d6466033f0395689c61039c4ed8def14a5982e606f091	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-3.14.3-41.0.1.el8_2.8.noarch.rpm	b37480f9ccb9c4340d7d377f143c20658a2a667fcb0d006f8384c16bea492757	-	ol8_aarch64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.8.noarch.rpm	b37480f9ccb9c4340d7d377f143c20658a2a667fcb0d006f8384c16bea492757	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-devel-3.14.3-41.0.1.el8_2.8.noarch.rpm	159d20616f2988e6da0f6077b6cea63146be24d8e9cd8580783529c93ce4d5ac	-	ol8_aarch64_baseos_latest
	selinux-policy-devel-3.14.3-41.0.1.el8_2.8.noarch.rpm	159d20616f2988e6da0f6077b6cea63146be24d8e9cd8580783529c93ce4d5ac	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-doc-3.14.3-41.0.1.el8_2.8.noarch.rpm	779144ec7f6fa649b634411745d25dbc5ae1312f78da8fdeb3be7c613f7b47d2	-	ol8_aarch64_baseos_latest
	selinux-policy-doc-3.14.3-41.0.1.el8_2.8.noarch.rpm	779144ec7f6fa649b634411745d25dbc5ae1312f78da8fdeb3be7c613f7b47d2	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.8.noarch.rpm	f669ddbd64f81a54334c162a0ec4b4b32aac84149710a8ddda15808689997747	-	ol8_aarch64_baseos_latest
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.8.noarch.rpm	f669ddbd64f81a54334c162a0ec4b4b32aac84149710a8ddda15808689997747	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-mls-3.14.3-41.0.1.el8_2.8.noarch.rpm	97f277dfc151c3a708a1591eb1d8ca502bf5e88c91dab4d5ea5cfba9c1cb7ebf	-	ol8_aarch64_baseos_latest
	selinux-policy-mls-3.14.3-41.0.1.el8_2.8.noarch.rpm	97f277dfc151c3a708a1591eb1d8ca502bf5e88c91dab4d5ea5cfba9c1cb7ebf	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.8.noarch.rpm	1fa9afd29d3e43dfc504b936b5022d10ae93451d0fd51d2d191df70f784b1ac2	-	ol8_aarch64_baseos_latest
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.8.noarch.rpm	1fa9afd29d3e43dfc504b936b5022d10ae93451d0fd51d2d191df70f784b1ac2	-	ol8_aarch64_u2_baseos_patch
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.8.noarch.rpm	dd7b480f1f3475c813ee3cb95513066447f7a3a05624024b87a39b777f9fa4da	-	ol8_aarch64_baseos_latest
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.8.noarch.rpm	dd7b480f1f3475c813ee3cb95513066447f7a3a05624024b87a39b777f9fa4da	-	ol8_aarch64_u2_baseos_patch
Oracle Linux 8 (x86_64)	selinux-policy-3.14.3-41.0.1.el8_2.8.src.rpm	6eeb607097745b50e57d6466033f0395689c61039c4ed8def14a5982e606f091	-	ol8_x86_64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.8.src.rpm	6eeb607097745b50e57d6466033f0395689c61039c4ed8def14a5982e606f091	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-3.14.3-41.0.1.el8_2.8.noarch.rpm	b37480f9ccb9c4340d7d377f143c20658a2a667fcb0d006f8384c16bea492757	-	ol8_x86_64_baseos_latest
	selinux-policy-3.14.3-41.0.1.el8_2.8.noarch.rpm	b37480f9ccb9c4340d7d377f143c20658a2a667fcb0d006f8384c16bea492757	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-devel-3.14.3-41.0.1.el8_2.8.noarch.rpm	159d20616f2988e6da0f6077b6cea63146be24d8e9cd8580783529c93ce4d5ac	-	ol8_x86_64_baseos_latest
	selinux-policy-devel-3.14.3-41.0.1.el8_2.8.noarch.rpm	159d20616f2988e6da0f6077b6cea63146be24d8e9cd8580783529c93ce4d5ac	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-doc-3.14.3-41.0.1.el8_2.8.noarch.rpm	779144ec7f6fa649b634411745d25dbc5ae1312f78da8fdeb3be7c613f7b47d2	-	ol8_x86_64_baseos_latest
	selinux-policy-doc-3.14.3-41.0.1.el8_2.8.noarch.rpm	779144ec7f6fa649b634411745d25dbc5ae1312f78da8fdeb3be7c613f7b47d2	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.8.noarch.rpm	f669ddbd64f81a54334c162a0ec4b4b32aac84149710a8ddda15808689997747	-	ol8_x86_64_baseos_latest
	selinux-policy-minimum-3.14.3-41.0.1.el8_2.8.noarch.rpm	f669ddbd64f81a54334c162a0ec4b4b32aac84149710a8ddda15808689997747	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-mls-3.14.3-41.0.1.el8_2.8.noarch.rpm	97f277dfc151c3a708a1591eb1d8ca502bf5e88c91dab4d5ea5cfba9c1cb7ebf	-	ol8_x86_64_baseos_latest
	selinux-policy-mls-3.14.3-41.0.1.el8_2.8.noarch.rpm	97f277dfc151c3a708a1591eb1d8ca502bf5e88c91dab4d5ea5cfba9c1cb7ebf	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.8.noarch.rpm	1fa9afd29d3e43dfc504b936b5022d10ae93451d0fd51d2d191df70f784b1ac2	-	ol8_x86_64_baseos_latest
	selinux-policy-sandbox-3.14.3-41.0.1.el8_2.8.noarch.rpm	1fa9afd29d3e43dfc504b936b5022d10ae93451d0fd51d2d191df70f784b1ac2	-	ol8_x86_64_u2_baseos_patch
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.8.noarch.rpm	dd7b480f1f3475c813ee3cb95513066447f7a3a05624024b87a39b777f9fa4da	-	ol8_x86_64_baseos_latest
	selinux-policy-targeted-3.14.3-41.0.1.el8_2.8.noarch.rpm	dd7b480f1f3475c813ee3cb95513066447f7a3a05624024b87a39b777f9fa4da	-	ol8_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team