RHBA-2017:1331 - Bug Fix Advisory

Topic

An updated container-selinux package that fixes one bug is now available for Red Hat Enterprise Linux 7 Extras.

Description

The container-selinux package provides SELinux policies for container runtimes.

This update fixes the following bug:

• Previously, a SELinux boolean allowed containers to use fuse file systems, but not execute content on them. This update adds the allow rules for executing content on fuse file systems. (BZ#1445226)

Users of container-selinux are advised to upgrade to this updated package, which fixes this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64

Fixes

• BZ - 1427335 - [extras-rhel-7.3.4] container selinux policy not removed after rpm package remove
• BZ - 1445226 - selinux policy does not allow execute on fusefs filesystems (like glusterfs)

CVEs

(none)

References

(none)