RHBA-2018:1073 - Bug Fix Advisory

Topic

Updated container-selinux packages that fix several bugs are now available for Red Hat Enterprise Linux 7 Extras.

Description

The container-selinux package provides SELinux policies for container runtimes.

Users of container-selinux are advised to upgrade to this updated package, which fixes several bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power 9 7 ppc64le
• Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Fixes

• BZ - 1542997 - SELINUX_ERR generated when building docker images
• BZ - 1550037 - selinux prevents AD user ssh to Atomic host configured using sssd
• BZ - 1550332 - system container failed to start due to container-selinux identified unexpected selinux label against binary /bin/bash
• BZ - 1551585 - Selinux policy block container from creating sockets - avc: denied { create } comm="yum" scontext=system_u:system_r:container_t:s0:c14,c957 tcontext=system_u:system_r:container_t:s0:c14,c957 tclass=udp_socket
• BZ - 1558710 - allow iptables_t container_runtime_t:file read;

CVEs

(none)

References

(none)