ELBA-2019-3982

ELBA-2019-3982 - selinux-policy bug fix update

Type:	BUG
Severity:	NA
Release Date:	2019-11-27

Description

[3.13.1-252.0.2]
- Make tuned work with mls policy [Orabug: 29778485]
- Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-252.6]
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095

[3.13.1-252.5]
- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095

[3.13.1-252.4]
- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
Resolves: rhbz#1766095

[3.13.1-252.3]
- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095

[3.13.1-252.2]
- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095

[3.13.1-252.1]
- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team