ELBA-2026-76625

ELBA-2026-76625 - selinux-policy bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-10-06

Description

[42.1.18-4.0.1.el10_2.4]
- Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
- Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
- Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
removable_device_t [Orabug: 37139639]
- Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
- Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
- Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
- Make import-state work with mls policy [Orabug: 32636699]
- Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
- Add comment for map on lvm_metadata_t. [Orabug: 31405325]
- Make cloud-init work with mls policy [Orabug: 32430460]
- Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
- Make lsmd and rngd work with mls policy [Orabug: 31405378]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]

[42.1.18-4.4]
- Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
Resolves: RHEL-193860
- Label /run/coreos with coreos_installer_var_run_t
Resolves: RHEL-193859
- Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
Resolves: RHEL-193859

[42.1.18-4.3]
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-224484

[42.1.18-4.2]
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897

[42.1.18-4.1]
- Replace '\_' (backslash underscore) with '_' (just underscore)
Resolves: RHEL-171367

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_aarch64_appstream
	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_aarch64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_aarch64_codeready_builder
	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-42.1.18-4.0.1.el10_2.4.noarch.rpm	dbe20c81106517ef2cf482995dbfcd7aa86fe69ab5d6ca47a3014f1991752e12	-	ol10_aarch64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.4.noarch.rpm	dbe20c81106517ef2cf482995dbfcd7aa86fe69ab5d6ca47a3014f1991752e12	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-devel-42.1.18-4.0.1.el10_2.4.noarch.rpm	82d387295a3230bf6a7696b51d85da56f4ffd843892464fb6bc4edec56e4d4dd	-	ol10_aarch64_appstream
	selinux-policy-doc-42.1.18-4.0.1.el10_2.4.noarch.rpm	5f51cfe9f7a974e0cd13d119fdade0a2577dacb585a8551b472a0794938f8c4c	-	ol10_aarch64_baseos_latest
	selinux-policy-doc-42.1.18-4.0.1.el10_2.4.noarch.rpm	5f51cfe9f7a974e0cd13d119fdade0a2577dacb585a8551b472a0794938f8c4c	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm	318a4708c5c6792840f4e4021d16a3bc869ff784d4bb058803dae6daa8542223	-	ol10_aarch64_codeready_builder
	selinux-policy-mls-42.1.18-4.0.1.el10_2.4.noarch.rpm	ea3ad86385f77a198f27128bd486e8e69ff1492b94eb621deaf0a8f8ddc9e542	-	ol10_aarch64_baseos_latest
	selinux-policy-mls-42.1.18-4.0.1.el10_2.4.noarch.rpm	ea3ad86385f77a198f27128bd486e8e69ff1492b94eb621deaf0a8f8ddc9e542	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm	22e49dd72bf6a8e9d030356cf125f73c740fee88a041cc21ec53585328c02d29	-	ol10_aarch64_codeready_builder
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.4.noarch.rpm	fad19f5ecd66ca3b88a8fa02bd94cf2c13cbf9744feb74f82d0ef74427af07bf	-	ol10_aarch64_baseos_latest
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.4.noarch.rpm	fad19f5ecd66ca3b88a8fa02bd94cf2c13cbf9744feb74f82d0ef74427af07bf	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.4.noarch.rpm	594182443cce200826c90619866c9ed8388e4da930e4a56b7ffa2cb3f2d81b24	-	ol10_aarch64_baseos_latest
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.4.noarch.rpm	594182443cce200826c90619866c9ed8388e4da930e4a56b7ffa2cb3f2d81b24	-	ol10_aarch64_u2_baseos_patch
	selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm	d99438394a56a0636ab253010fb875d1ece549d0636528b2ed06adb9cbfb5c6e	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_x86_64_appstream
	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_x86_64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_x86_64_codeready_builder
	selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm	dc04ae7b1b6f732a53dcc6d8265fd2e7fdb7a9810de70fe94a8a08f790223a49	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-42.1.18-4.0.1.el10_2.4.noarch.rpm	dbe20c81106517ef2cf482995dbfcd7aa86fe69ab5d6ca47a3014f1991752e12	-	ol10_x86_64_baseos_latest
	selinux-policy-42.1.18-4.0.1.el10_2.4.noarch.rpm	dbe20c81106517ef2cf482995dbfcd7aa86fe69ab5d6ca47a3014f1991752e12	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-devel-42.1.18-4.0.1.el10_2.4.noarch.rpm	82d387295a3230bf6a7696b51d85da56f4ffd843892464fb6bc4edec56e4d4dd	-	ol10_x86_64_appstream
	selinux-policy-doc-42.1.18-4.0.1.el10_2.4.noarch.rpm	5f51cfe9f7a974e0cd13d119fdade0a2577dacb585a8551b472a0794938f8c4c	-	ol10_x86_64_baseos_latest
	selinux-policy-doc-42.1.18-4.0.1.el10_2.4.noarch.rpm	5f51cfe9f7a974e0cd13d119fdade0a2577dacb585a8551b472a0794938f8c4c	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm	318a4708c5c6792840f4e4021d16a3bc869ff784d4bb058803dae6daa8542223	-	ol10_x86_64_codeready_builder
	selinux-policy-mls-42.1.18-4.0.1.el10_2.4.noarch.rpm	ea3ad86385f77a198f27128bd486e8e69ff1492b94eb621deaf0a8f8ddc9e542	-	ol10_x86_64_baseos_latest
	selinux-policy-mls-42.1.18-4.0.1.el10_2.4.noarch.rpm	ea3ad86385f77a198f27128bd486e8e69ff1492b94eb621deaf0a8f8ddc9e542	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm	22e49dd72bf6a8e9d030356cf125f73c740fee88a041cc21ec53585328c02d29	-	ol10_x86_64_codeready_builder
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.4.noarch.rpm	fad19f5ecd66ca3b88a8fa02bd94cf2c13cbf9744feb74f82d0ef74427af07bf	-	ol10_x86_64_baseos_latest
	selinux-policy-sandbox-42.1.18-4.0.1.el10_2.4.noarch.rpm	fad19f5ecd66ca3b88a8fa02bd94cf2c13cbf9744feb74f82d0ef74427af07bf	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.4.noarch.rpm	594182443cce200826c90619866c9ed8388e4da930e4a56b7ffa2cb3f2d81b24	-	ol10_x86_64_baseos_latest
	selinux-policy-targeted-42.1.18-4.0.1.el10_2.4.noarch.rpm	594182443cce200826c90619866c9ed8388e4da930e4a56b7ffa2cb3f2d81b24	-	ol10_x86_64_u2_baseos_patch
	selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm	d99438394a56a0636ab253010fb875d1ece549d0636528b2ed06adb9cbfb5c6e	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team