ELBA-2020-5027

ELBA-2020-5027 - selinux-policy bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2020-11-12

Description

[3.13.1-268.0.1.2]
- Make cloud-init work with mls policy [Orabug: 31428176]
- Allow cloud-init to create /var/run/cloud-init dir with net_conf_t SELinux label. [Orabug: 31428176]
- Make various processes work with mls policy [Orabug: 29848756]
- Make unconfined domains part of domain_named_attribute [Orabug: 30700069]
- Make tuned work with mls policy [Orabug: 29778485]
- Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-268.2]
- Allow certmonger add new entries in a generic certificates directory
Resolves: rhbz#1879496
- Allow slapd add new entries in ldap certificates directory
Resolves: rhbz#1879496
- Add miscfiles_add_entry_generic_cert_dirs() interface
Resolves: rhbz#1879496

[3.13.1-268.1]
- Allow ssh-keygen create file in /var/lib/glusterd
Resolves: rhbz#1867995

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	selinux-policy-3.13.1-268.0.1.el7_9.2.src.rpm	52922792a0126be50616241c385dba7acbb83ce2581a0c0aa8c1304450125b18	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-3.13.1-268.0.1.el7_9.2.src.rpm	52922792a0126be50616241c385dba7acbb83ce2581a0c0aa8c1304450125b18	ELBA-2024-12651	ol7_aarch64_optional_latest
	selinux-policy-3.13.1-268.0.1.el7_9.2.src.rpm	52922792a0126be50616241c385dba7acbb83ce2581a0c0aa8c1304450125b18	ELBA-2024-12651	ol7_aarch64_u9_patch
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	ol7_aarch64_u9_patch
	selinux-policy-devel-3.13.1-268.0.1.el7_9.2.noarch.rpm	c1376cc2391473ba209dc713ea38dc75f1c8b75ee5b54923ed1a1eb1d0707f4b	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-devel-3.13.1-268.0.1.el7_9.2.noarch.rpm	c1376cc2391473ba209dc713ea38dc75f1c8b75ee5b54923ed1a1eb1d0707f4b	ELBA-2024-12651	ol7_aarch64_u9_patch
	selinux-policy-doc-3.13.1-268.0.1.el7_9.2.noarch.rpm	9fa17769de50ae9ed4ff274ad3dd05bcb89c593e1671dce2bb2220bb0476af46	ELBA-2024-12651	ol7_aarch64_optional_latest
	selinux-policy-minimum-3.13.1-268.0.1.el7_9.2.noarch.rpm	c42efa6db8c2b5db686e145d341f9633eda038c0743d5b0a8547c6b4495bb884	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-minimum-3.13.1-268.0.1.el7_9.2.noarch.rpm	c42efa6db8c2b5db686e145d341f9633eda038c0743d5b0a8547c6b4495bb884	ELBA-2024-12651	ol7_aarch64_u9_patch
	selinux-policy-mls-3.13.1-268.0.1.el7_9.2.noarch.rpm	1a88c0f313f88628c3d44a2d014253bc41404dc872c75d8edd3c3605138829cd	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-mls-3.13.1-268.0.1.el7_9.2.noarch.rpm	1a88c0f313f88628c3d44a2d014253bc41404dc872c75d8edd3c3605138829cd	ELBA-2024-12651	ol7_aarch64_u9_patch
	selinux-policy-sandbox-3.13.1-268.0.1.el7_9.2.noarch.rpm	d6343441dfcfb191f97203e564b541ef041f05191a0d89db8b009ba75c8a9d10	ELBA-2024-12651	ol7_aarch64_optional_latest
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	ol7_aarch64_latest
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	selinux-policy-3.13.1-268.0.1.el7_9.2.src.rpm	52922792a0126be50616241c385dba7acbb83ce2581a0c0aa8c1304450125b18	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-3.13.1-268.0.1.el7_9.2.src.rpm	52922792a0126be50616241c385dba7acbb83ce2581a0c0aa8c1304450125b18	ELBA-2024-12651	ol7_x86_64_optional_latest
	selinux-policy-3.13.1-268.0.1.el7_9.2.src.rpm	52922792a0126be50616241c385dba7acbb83ce2581a0c0aa8c1304450125b18	ELBA-2024-12651	ol7_x86_64_u9_patch
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_19.2.21.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_19.2.22.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_19.3.15.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_19.3.16.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_19.3.17.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_19.3.18.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_19.3.19.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_20.1.10.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_20.1.5.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_20.1.6.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_20.1.7.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_20.1.8.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_20.1.9.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	exadata_dbserver_21.2.0.0.0_x86_64_base
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-3.13.1-268.0.1.el7_9.2.noarch.rpm	2d2f8fdf3d0851c1fcbdcebd1b02bdf4abbd4fe19d651a1e6c8b33ad2935baf4	ELBA-2024-12651	ol7_x86_64_u9_patch
	selinux-policy-devel-3.13.1-268.0.1.el7_9.2.noarch.rpm	c1376cc2391473ba209dc713ea38dc75f1c8b75ee5b54923ed1a1eb1d0707f4b	ELBA-2024-12651	exadata_dbserver_21.2.0.0.0_x86_64_base
	selinux-policy-devel-3.13.1-268.0.1.el7_9.2.noarch.rpm	c1376cc2391473ba209dc713ea38dc75f1c8b75ee5b54923ed1a1eb1d0707f4b	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-devel-3.13.1-268.0.1.el7_9.2.noarch.rpm	c1376cc2391473ba209dc713ea38dc75f1c8b75ee5b54923ed1a1eb1d0707f4b	ELBA-2024-12651	ol7_x86_64_u9_patch
	selinux-policy-doc-3.13.1-268.0.1.el7_9.2.noarch.rpm	9fa17769de50ae9ed4ff274ad3dd05bcb89c593e1671dce2bb2220bb0476af46	ELBA-2024-12651	ol7_x86_64_optional_latest
	selinux-policy-minimum-3.13.1-268.0.1.el7_9.2.noarch.rpm	c42efa6db8c2b5db686e145d341f9633eda038c0743d5b0a8547c6b4495bb884	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-minimum-3.13.1-268.0.1.el7_9.2.noarch.rpm	c42efa6db8c2b5db686e145d341f9633eda038c0743d5b0a8547c6b4495bb884	ELBA-2024-12651	ol7_x86_64_u9_patch
	selinux-policy-mls-3.13.1-268.0.1.el7_9.2.noarch.rpm	1a88c0f313f88628c3d44a2d014253bc41404dc872c75d8edd3c3605138829cd	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-mls-3.13.1-268.0.1.el7_9.2.noarch.rpm	1a88c0f313f88628c3d44a2d014253bc41404dc872c75d8edd3c3605138829cd	ELBA-2024-12651	ol7_x86_64_u9_patch
	selinux-policy-sandbox-3.13.1-268.0.1.el7_9.2.noarch.rpm	d6343441dfcfb191f97203e564b541ef041f05191a0d89db8b009ba75c8a9d10	ELBA-2024-12651	ol7_x86_64_optional_latest
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_19.2.21.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_19.2.22.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_19.3.15.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_19.3.16.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_19.3.17.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_19.3.18.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_19.3.19.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_20.1.10.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_20.1.5.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_20.1.6.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_20.1.7.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_20.1.8.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_20.1.9.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	exadata_dbserver_21.2.0.0.0_x86_64_base
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	ol7_x86_64_latest
	selinux-policy-targeted-3.13.1-268.0.1.el7_9.2.noarch.rpm	7d412ec9bf9b32ef5f2a0384cc72ff2945b603a22a40cc52cfe8fd5d075abca4	ELBA-2024-12651	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team