Red Hat Product Errata RHEA-2017:3179 - Product Enhancement Advisory
Issued:
2017-11-09
Updated:
2017-11-09

RHEA-2017:3179 - Product Enhancement Advisory

Synopsis

selinux-policy enhancement update

Type/Severity

Product Enhancement Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for selinux-policy is now available for Red Hat Enterprise Linux 7.

Description

The selinux-policy packages contain the rules that govern how confined processes run on the system.

This enhancement update adds the selinux-policy packages to Red Hat Enterprise Linux 7 for ARM and for IBM Power LE (POWER9).

For detailed information on changes in this release, see the Release Notes linked from the References section.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le

Fixes

  • BZ - 1483550 - avc denial when changing smp_affinity_list
  • BZ - 1486253 - selinux will prevent named-chroot from properly reloading
  • BZ - 1486256 - ipmievd service wants to load certain kernel modules but SELinux complains
  • BZ - 1486258 - SELinux is preventing /usr/bin/certwatch from using the dac_override capability
  • BZ - 1486259 - Selinux is preventing targetd from running

CVEs

(none)

Red Hat Enterprise Linux for ARM 64 7

SRPM
selinux-policy-3.13.1-172.el7a.src.rpm SHA-256: c413540a5cec2c094fa41bd3a6574c81585ac66d9b1bb9787e0ee61557ad6048
aarch64
selinux-policy-3.13.1-172.el7a.noarch.rpm SHA-256: be811d6c9e184e9868919ccdbcac6743f2469ae324ff032ad72c804bc5f809a8
selinux-policy-devel-3.13.1-172.el7a.noarch.rpm SHA-256: 7670ab555c4c257c9e834226b96324d7bdc91f9de0b4c3891d50b53436edb534
selinux-policy-doc-3.13.1-172.el7a.noarch.rpm SHA-256: 82377c782848f5c70f9e4b0bdb8f7ddb7ab02fc7d740b460f0ff47a3173c5715
selinux-policy-minimum-3.13.1-172.el7a.noarch.rpm SHA-256: 39fcd84587628d5ad20c3bc844c1dd755a60f9008011369f5d888812cc8d6397
selinux-policy-mls-3.13.1-172.el7a.noarch.rpm SHA-256: a3c20739657c2d43feb4fb5dd058194893047e64d44a37a5ede0b6434ba1a67d
selinux-policy-sandbox-3.13.1-172.el7a.noarch.rpm SHA-256: ec9b10e60ff004d4f58c553c41905bdae049898d826579fd24d7d96e937f1975
selinux-policy-targeted-3.13.1-172.el7a.noarch.rpm SHA-256: ae8e25ec74faeb6ce8c6afd5f50610840e551e5391fc7a3d7c756244c65d29aa

Red Hat Enterprise Linux for Power 9 7

SRPM
selinux-policy-3.13.1-172.el7a.src.rpm SHA-256: c413540a5cec2c094fa41bd3a6574c81585ac66d9b1bb9787e0ee61557ad6048
ppc64le
selinux-policy-3.13.1-172.el7a.noarch.rpm SHA-256: be811d6c9e184e9868919ccdbcac6743f2469ae324ff032ad72c804bc5f809a8
selinux-policy-devel-3.13.1-172.el7a.noarch.rpm SHA-256: 7670ab555c4c257c9e834226b96324d7bdc91f9de0b4c3891d50b53436edb534
selinux-policy-doc-3.13.1-172.el7a.noarch.rpm SHA-256: 82377c782848f5c70f9e4b0bdb8f7ddb7ab02fc7d740b460f0ff47a3173c5715
selinux-policy-minimum-3.13.1-172.el7a.noarch.rpm SHA-256: 39fcd84587628d5ad20c3bc844c1dd755a60f9008011369f5d888812cc8d6397
selinux-policy-mls-3.13.1-172.el7a.noarch.rpm SHA-256: a3c20739657c2d43feb4fb5dd058194893047e64d44a37a5ede0b6434ba1a67d
selinux-policy-sandbox-3.13.1-172.el7a.noarch.rpm SHA-256: ec9b10e60ff004d4f58c553c41905bdae049898d826579fd24d7d96e937f1975
selinux-policy-targeted-3.13.1-172.el7a.noarch.rpm SHA-256: ae8e25ec74faeb6ce8c6afd5f50610840e551e5391fc7a3d7c756244c65d29aa

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.