RHBA-2026:18611 - Bug Fix Advisory

标题

An update for selinux-policy is now available for Red Hat Enterprise Linux 9.

描述

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
• Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
• Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

修复

• RHEL-103975 - [rhel-9] SELinux prevents start of ras-mc-ctl service
• RHEL-112367 - Reinstate reverted selinux-policy rules to back insights-core policy module [rhel-9]
• RHEL-113647 - SELinux restricts systemd from creating vsock listeners
• RHEL-113906 - the tuned-ppd service creates a mislabeled /etc/tuned/ppd_base_profile file
• RHEL-101155 - bootupctl adopt with static config get denied logs
• RHEL-108826 - insights-client cannot find core / execute during automatic registration [rhel-9]
• RHEL-123225 - Kerberos5 files ".{k5login,k5users,k5identity}" are not getting proper label for "pgsql" user
• RHEL-127329 - insights-client cannot 'getattr' rpm_exec_t (rhel9)
• RHEL-108068 - Cockpit web console login for SELinux staff_u users fails
• RHEL-119055 - SELinux prevents sysadm_t from interacting with TPM
• RHEL-119686 - Cockpit web console actions generating SELinux denials
• RHEL-111946 - SELinux is blocking NetworkManager dispatcher from starting the nvmf-connect-nbft.service
• RHEL-121936 - Cannot start systemd user's ssh-agent service for confined users due to missing rules in SELinux policy
• RHEL-129879 - [rhel-9] more specific labels for new /dev/papr-* devices
• RHEL-101165 - /etc/redis.conf has context 'etc_t' when it should have 'redis_conf_t'
• RHEL-132748 - rhc-worker-playbook can't invoke rhc-playbook-verifier
• RHEL-121158 - pam_ssh_agent_auth requires additional SELinux rules for confined users
• RHEL-121165 - Cannot add smartcard key to SSH agent when user is confined
• RHEL-108775 - Create selinux-policy for rhc-worker-playbook [rhel-9]

CVE

(none)

参考

• https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index