RHBA-2021:5182 - Bug Fix Advisory

Topic

An update for selinux-policy is now available for Red Hat Enterprise Linux
8.4 Extended Update Support.

Description

The selinux-policy packages contain the rules that govern how confined
processes run on the system.

Bug Fix(es) and Enhancement(s):

• [RHEL 8.4] Backport container-selinux policy to allow spc_t domains to

set bpf rules on any domain (BZ#2015845)

• AVC prevents ping -I from running in UBI 8 container (BZ#2029802)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
• Red Hat Enterprise Linux Server - AUS 8.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

• BZ - 2015845 - [RHEL 8.4] Backport container-selinux policy to allow spc_t domains to set bpf rules on any domain [rhel-8.4.0.z]
• BZ - 2029802 - AVC prevents ping -I from running in UBI 8 container [rhel-8.4.0.z]

CVEs

(none)

References

(none)