ELBA-2026-50146-0

ELBA-2026-50146-0 - selinux-policy bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-08-06

Description

[42.1.18-4.0.1.el10_2.2]
- Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
- Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
- Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
removable_device_t [Orabug: 37139639]
- Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
- Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
- Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
- Make import-state work with mls policy [Orabug: 32636699]
- Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
- Add comment for map on lvm_metadata_t. [Orabug: 31405325]
- Make cloud-init work with mls policy [Orabug: 32430460]
- Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
- Make lsmd and rngd work with mls policy [Orabug: 31405378]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]

[42.1.18-4.2]
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897

[42.1.18-4.1]
- Replace '\_' (backslash underscore) with '_' (just underscore)
Resolves: RHEL-171367

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_aarch64_appstream
	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_aarch64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_aarch64_codeready_builder
	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-42.1.18-4.0.1.el10_2.2.noarch.rpm	21602675612e42d32abadfb72b7ab0de89939170be60984fc5905ef3e434c13c	-	ol10_aarch64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.2.noarch.rpm	21602675612e42d32abadfb72b7ab0de89939170be60984fc5905ef3e434c13c	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-devel-42.1.18-4.0.1.el10_2.2.noarch.rpm	5a7c523f489980a49ee5f7142e67600abf7705d57cad558f3b6d9be198f51d58	-	ol10_aarch64_appstream
	selinux-policy-doc-42.1.18-4.0.1.el10_2.2.noarch.rpm	7b058aa9d10c0395110c5752132918b9049ccc32bcf63e3530d2a4c945ab3281	-	ol10_aarch64_baseos_latest
	selinux-policy-doc-42.1.18-4.0.1.el10_2.2.noarch.rpm	7b058aa9d10c0395110c5752132918b9049ccc32bcf63e3530d2a4c945ab3281	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm	e037e7de1898ef367d0eff80f1f6f92d9302563d1dc492005c296036d0c4eda9	-	ol10_aarch64_codeready_builder
	selinux-policy-mls-42.1.18-4.0.1.el10_2.2.noarch.rpm	7be9297aa8c9feefd01ed6d0bf94f7d048f0bc8be7094c326e52fc11ff8f07a5	-	ol10_aarch64_baseos_latest
	selinux-policy-mls-42.1.18-4.0.1.el10_2.2.noarch.rpm	7be9297aa8c9feefd01ed6d0bf94f7d048f0bc8be7094c326e52fc11ff8f07a5	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm	66376b48c64a8de9f93d63763b6e56731cc68baf9f8936663b4493134768e569	-	ol10_aarch64_codeready_builder
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.2.noarch.rpm	bb08925b09a9c95f2a47f3b50bc828e286ddf041e86eea08154ab6b91f0d5543	-	ol10_aarch64_baseos_latest
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.2.noarch.rpm	bb08925b09a9c95f2a47f3b50bc828e286ddf041e86eea08154ab6b91f0d5543	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.2.noarch.rpm	0ef72e735e75f0e6a221bfc56dfa1e65ed259da5dba413ca75052654488b5a43	-	ol10_aarch64_baseos_latest
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.2.noarch.rpm	0ef72e735e75f0e6a221bfc56dfa1e65ed259da5dba413ca75052654488b5a43	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm	4d5efb9358fc35878ab789764741f02300401fd1715017459c43e09f5f5a4b5f	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_x86_64_appstream
	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_x86_64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_x86_64_codeready_builder
	selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm	579b70ce86b44f1ff5b479f5be48070e80811acc7bec06f85582f53255a7bd6c	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-42.1.18-4.0.1.el10_2.2.noarch.rpm	21602675612e42d32abadfb72b7ab0de89939170be60984fc5905ef3e434c13c	-	ol10_x86_64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.2.noarch.rpm	21602675612e42d32abadfb72b7ab0de89939170be60984fc5905ef3e434c13c	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-devel-42.1.18-4.0.1.el10_2.2.noarch.rpm	5a7c523f489980a49ee5f7142e67600abf7705d57cad558f3b6d9be198f51d58	-	ol10_x86_64_appstream
	selinux-policy-doc-42.1.18-4.0.1.el10_2.2.noarch.rpm	7b058aa9d10c0395110c5752132918b9049ccc32bcf63e3530d2a4c945ab3281	-	ol10_x86_64_baseos_latest
	selinux-policy-doc-42.1.18-4.0.1.el10_2.2.noarch.rpm	7b058aa9d10c0395110c5752132918b9049ccc32bcf63e3530d2a4c945ab3281	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm	e037e7de1898ef367d0eff80f1f6f92d9302563d1dc492005c296036d0c4eda9	-	ol10_x86_64_codeready_builder
	selinux-policy-mls-42.1.18-4.0.1.el10_2.2.noarch.rpm	7be9297aa8c9feefd01ed6d0bf94f7d048f0bc8be7094c326e52fc11ff8f07a5	-	ol10_x86_64_baseos_latest
	selinux-policy-mls-42.1.18-4.0.1.el10_2.2.noarch.rpm	7be9297aa8c9feefd01ed6d0bf94f7d048f0bc8be7094c326e52fc11ff8f07a5	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm	66376b48c64a8de9f93d63763b6e56731cc68baf9f8936663b4493134768e569	-	ol10_x86_64_codeready_builder
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.2.noarch.rpm	bb08925b09a9c95f2a47f3b50bc828e286ddf041e86eea08154ab6b91f0d5543	-	ol10_x86_64_baseos_latest
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.2.noarch.rpm	bb08925b09a9c95f2a47f3b50bc828e286ddf041e86eea08154ab6b91f0d5543	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.2.noarch.rpm	0ef72e735e75f0e6a221bfc56dfa1e65ed259da5dba413ca75052654488b5a43	-	ol10_x86_64_baseos_latest
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.2.noarch.rpm	0ef72e735e75f0e6a221bfc56dfa1e65ed259da5dba413ca75052654488b5a43	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm	4d5efb9358fc35878ab789764741f02300401fd1715017459c43e09f5f5a4b5f	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team