[El-errata] ELBA-2019-3982 Oracle Linux 7 selinux-policy bug fix update (aarch64)

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2019-3982

http://linux.oracle.com/errata/ELBA-2019-3982.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

aarch64:
selinux-policy-3.13.1-252.0.2.el7_7.6.noarch.rpm
selinux-policy-devel-3.13.1-252.0.2.el7_7.6.noarch.rpm
selinux-policy-minimum-3.13.1-252.0.2.el7_7.6.noarch.rpm
selinux-policy-mls-3.13.1-252.0.2.el7_7.6.noarch.rpm
selinux-policy-targeted-3.13.1-252.0.2.el7_7.6.noarch.rpm
selinux-policy-doc-3.13.1-252.0.2.el7_7.6.noarch.rpm
selinux-policy-sandbox-3.13.1-252.0.2.el7_7.6.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/selinux-policy-3.13.1-252.0.2.el7_7.6.src.rpm



Description of changes:

[3.13.1-252.0.2]
- Make tuned work with mls policy [Orabug: 29778485]
- Make rpm_transition_script() a nested optional policy in init policy 
module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. 
[Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

[3.13.1-252.6]
- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095

[3.13.1-252.5]
- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1766095

[3.13.1-252.4]
- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser 
command.
Resolves: rhbz#1766095

[3.13.1-252.3]
- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1766095

[3.13.1-252.2]
- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1766095

[3.13.1-252.1]
- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593