RHBA-2019:1387 - Bug Fix Advisory

Topic

An update for openvswitch-selinux-extra-policy is now available in the Fast Datapath channel of Red Hat Enterprise Linux 8.

Description

The Open vSwitch suite provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. The openvswitch-selinux-extra-policy package adds an SELinux policy that enables the Open vSwitch suite of utilities to function with SELinux in enforcing mode.

This update fixes the following bugs:

• SELinux preventing ovs to create/access/manage netlink_netfilter_socket (BZ#1690783)
• OVS daemon got AVC when server has a mlx5 NIC (BZ#1687941)

Users of openvswitch-selinux-extra-policy are advised to upgrade to this updated package, which fixes this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 8 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 8 ppc64le

Fixes

• BZ - 1690783 - SELinux preventing ovs to create/access/manage netlink_netfilter_socket

CVEs

(none)

References

(none)