[El-errata] ELBA-2014-0721 Oracle Linux 7 selinux-policy bug fix update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Wed Jul 23 16:02:04 PDT 2014


Oracle Linux Bug Fix Advisory ELBA-2014-0721

https://access.redhat.com/errata/RHBA-2014:0721.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
selinux-policy-3.12.1-153.0.1.el7_0.10.noarch.rpm
selinux-policy-devel-3.12.1-153.0.1.el7_0.10.noarch.rpm
selinux-policy-doc-3.12.1-153.0.1.el7_0.10.noarch.rpm
selinux-policy-minimum-3.12.1-153.0.1.el7_0.10.noarch.rpm
selinux-policy-mls-3.12.1-153.0.1.el7_0.10.noarch.rpm
selinux-policy-sandbox-3.12.1-153.0.1.el7_0.10.noarch.rpm
selinux-policy-targeted-3.12.1-153.0.1.el7_0.10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/selinux-policy-3.12.1-153.0.1.el7_0.10.src.rpm



Description of changes:

[3.12.1-153.0.1.el7_0.10]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.12.1-153.el7_0.10]
- Allow swift to execute bin_t
- Allow swift to bind http_cache
- Label /var/log/horizon as an apache log

[3.12.1-153.el7_0.9]
- Allow neutron to bind xserver port
- Allow neutron to execute kmod in insmod_t
- Allow neutron to execute udevadm in udev_t
- Allow keepalived to execute bin_t/shell_exec_t
- Allow neutron to create sock files
- Label swift-proxy-server as swift_exec_t

[3.12.1-153.el7_0.8]
- Allow rsync to create  swift_server.lock with swift.log labeling
- Add labeling for swift lock files
- Make neutron_t as unconfined domain

[3.12.1-153.el7_0.7]
- Add more fixes for OpenStack
- Add fixes for geard
- Make openwsman as unconfined_domain in RHEL7.0

[3.12.1-153.el7_0.6]
- Back port openstack fixes
- svirt sandbox domains to read gear content in /run
- Allow gear_t to manage openshift files

[3.12.1-153.el7_0.5]
-  More rules for gears and openshift
Resolves:#1092405

[3.12.1-153.el7_0.4]
- Bump release to rebuild as z-stream
Resolves:#1092405

[3.12.1-153.el7_0.3]
- Add fixes for gear to just execute ifconfig
- More fixes for mongod_t
Resolves:#1092405

[3.12.1-153.el7_0.2]
- Bump release
Resolves:#1092405

[3.12.1-153.el7_0.1]
- Allow mongod to create sock files
Resolves:#1092405
- Add additional fixes related to docker and upgrade issues





More information about the El-errata mailing list