[El-errata] ELBA-2018-3664 Oracle Linux 7 selinux-policy bug fix update (aarch64)

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2018-3664

http://linux.oracle.com/errata/ELBA-2018-3664.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

aarch64:
selinux-policy-3.13.1-229.0.1.el7_6.6.noarch.rpm
selinux-policy-devel-3.13.1-229.0.1.el7_6.6.noarch.rpm
selinux-policy-minimum-3.13.1-229.0.1.el7_6.6.noarch.rpm
selinux-policy-mls-3.13.1-229.0.1.el7_6.6.noarch.rpm
selinux-policy-targeted-3.13.1-229.0.1.el7_6.6.noarch.rpm
selinux-policy-doc-3.13.1-229.0.1.el7_6.6.noarch.rpm
selinux-policy-sandbox-3.13.1-229.0.1.el7_6.6.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/selinux-policy-3.13.1-229.0.1.el7_6.6.src.rpm



Description of changes:

[3.13.1-229.0.1]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-229.6]
- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271

[3.13.1-229.5]
- Remove disabling ganesha module in pre install phase of installation 
new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257

[3.13.1-229.4]
- Allow staff_t userdomain and confined_admindomain attribute to allow 
use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427

[3.13.1-229.3]
- Run ganesha as ganesha_t domain again, revert changes where ganesha is 
running as nfsd_t
Resolves: rhbz#1638257

[3.13.1-229.2]
- Fix missing patch in spec file
Resolves: rhbz#1635704

[3.13.1-229.1]
- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704