[El-errata] ELBA-2020-5027 Oracle Linux 7 selinux-policy bug fix and enhancement update (aarch64)

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Nov 12 07:56:25 PST 2020

Oracle Linux Bug Fix Advisory ELBA-2020-5027


The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:



Description of changes:

- Make cloud-init work with mls policy [Orabug: 31428176]
- Allow cloud-init to create /var/run/cloud-init dir with net_conf_t 
SELinux label. [Orabug: 31428176]
- Make various processes work with mls policy [Orabug: 29848756]
- Make unconfined domains part of domain_named_attribute [Orabug: 30700069]
- Make tuned work with mls policy [Orabug: 29778485]
- Make rpm_transition_script() a nested optional policy in init policy 
module [Orabug: 29661269]
- Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
- Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
- Allow systemd running as init_t to relabel pstore directories. 
[Orabug: 28260775]
- Allow udev_t to load modules [Orabug: 28260775]
- Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
- Allow chronyd_t to execute shell scripts [Orabug: 28260775]
- SELinux support for cgroup2 filesystem. [OraBug 28127822]
- refpolicy: Define getrlimit permission for class process [OraBug 28229492]
- Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
- Obsolete docker-engine-selinux [OraBug 26439663]
- Fix container selinux policy [OraBug 26427364]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.

- Allow certmonger add new entries in a generic certificates directory
Resolves: rhbz#1879496
- Allow slapd add new entries in ldap certificates directory
Resolves: rhbz#1879496
- Add miscfiles_add_entry_generic_cert_dirs() interface
Resolves: rhbz#1879496

- Allow ssh-keygen create file in /var/lib/glusterd
Resolves: rhbz#1867995

More information about the El-errata mailing list