ELBA-2019-3982

ELBA-2019-3982 - selinux-policy bug fix update

Type:BUG
Severity:NA
Release Date:2019-11-27

Description


[3.13.1-252.0.2]
- Make tuned work with mls policy [Orabug: 29778485]
- Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-252.6]
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095

[3.13.1-252.5]
- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095

[3.13.1-252.4]
- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095

[3.13.1-252.3]
- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095

[3.13.1-252.2]
- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095

[3.13.1-252.1]
- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593




Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (aarch64) selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm5de3bfbc1b58bb3b053190b890f3b2f7-
selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpmb8f88ca3cd000d8382d1b000ea7e6dcc-
selinux-policy-devel-3.13.1-252.0.2.el7_7.6.noarch.rpm89f0882984c0b53aaf9dcff84c9754ab-
selinux-policy-doc-3.13.1-252.0.2.el7_7.6.noarch.rpm32eca5f6e700d1b55fa583b6e7218df4-
selinux-policy-minimum-3.13.1-252.0.2.el7_7.6.noarch.rpm53b0dc15b6f844ebdec6327745f6cbba-
selinux-policy-mls-3.13.1-252.0.2.el7_7.6.noarch.rpm8bb1964346ff0955675e4604d9479095-
selinux-policy-sandbox-3.13.1-252.0.2.el7_7.6.noarch.rpm10b7a8f4d150c3b004da42b4effad2c5-
selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm47e16dc33a77711277d1622a24a03982-
Oracle Linux 7 (x86_64) selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm5de3bfbc1b58bb3b053190b890f3b2f7-
selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpmb8f88ca3cd000d8382d1b000ea7e6dcc-
selinux-policy-devel-3.13.1-252.0.2.el7_7.6.noarch.rpm89f0882984c0b53aaf9dcff84c9754ab-
selinux-policy-doc-3.13.1-252.0.2.el7_7.6.noarch.rpm32eca5f6e700d1b55fa583b6e7218df4-
selinux-policy-minimum-3.13.1-252.0.2.el7_7.6.noarch.rpm53b0dc15b6f844ebdec6327745f6cbba-
selinux-policy-mls-3.13.1-252.0.2.el7_7.6.noarch.rpm8bb1964346ff0955675e4604d9479095-
selinux-policy-sandbox-3.13.1-252.0.2.el7_7.6.noarch.rpm10b7a8f4d150c3b004da42b4effad2c5-
selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm47e16dc33a77711277d1622a24a03982-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete