- Issued:
- 2020-11-10
- Updated:
- 2020-11-10
RHBA-2020:5027 - Bug Fix Advisory
Synopsis
selinux-policy bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for selinux-policy is now available for Red Hat Enterprise Linux
7.
Description
The selinux-policy packages contain the rules that govern how confined
processes run on the system.
Bug Fix(es) and Enhancement(s):
- [RHEL-7.9]- Selinux policy need to be updated for RHGS to fix permission
issues (BZ#1867995)
- Selinux prevents nss from creating directory inside the certs directory.
(BZ#1879496)
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
- Red Hat Enterprise Linux Workstation 7 x86_64
- Red Hat Enterprise Linux Desktop 7 x86_64
- Red Hat Enterprise Linux for IBM z Systems 7 s390x
- Red Hat Enterprise Linux for Power, big endian 7 ppc64
- Red Hat Enterprise Linux for Scientific Computing 7 x86_64
- Red Hat Enterprise Linux for Power, little endian 7 ppc64le
- Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
- Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
- Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
Fixes
- BZ - 1867995 - [RHEL-7.9]- Selinux policy need to be updated for RHGS to fix permission issues [rhel-7.9.z]
CVEs
(none)
References
(none)
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux Server 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| x86_64 | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| x86_64 | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux Workstation 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| x86_64 | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux Desktop 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| x86_64 | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux for IBM z Systems 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| s390x | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux for Power, big endian 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| ppc64 | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux for Scientific Computing 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| x86_64 | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux for Power, little endian 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| ppc64le | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| s390x | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| ppc64 | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7
| SRPM | |
|---|---|
| selinux-policy-3.13.1-268.el7_9.2.src.rpm | SHA-256: 5fce0ad065ae61e17df80b72c5c6fe44e08a2d07b4b32601cf2fb65b6c61d97c |
| ppc64le | |
| selinux-policy-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 711f994f546a7458cc42a1d5c12a0c157ff86fe49c7398f4e98a78907b6fe33b |
| selinux-policy-devel-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 6fb8dbbdb021069e06486e1b04b431496bca697ef9f4e28f24f4a1831b29469b |
| selinux-policy-doc-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 8aaaa89c53807dad9f64832e063785d56745b7ea6ddf4b7d56d410cc8fac9995 |
| selinux-policy-minimum-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 9da6837fec0aaf00db9760a361e8519895498857982f5341953fecf55f208710 |
| selinux-policy-mls-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 0ae3b3cfe0d04b25e76e3848f1488f11252d28e5b0f280d628948fab6c8f6df9 |
| selinux-policy-sandbox-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 552f4ce3954862a56882e9ec838053b52f645d0e20596f794670787cfc3723d0 |
| selinux-policy-targeted-3.13.1-268.el7_9.2.noarch.rpm | SHA-256: 3ffca765c093dcaa04b5740e291000de125e5f3e4e9f8d9befc9a15a9e047e5b |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
