[El-errata] ELBA-2026-76625 Oracle Linux 10 selinux-policy bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2026-76625

http://linux.oracle.com/errata/ELBA-2026-76625.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
selinux-policy-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-devel-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-doc-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-mls-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-sandbox-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-targeted-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm

aarch64:
selinux-policy-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-devel-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-doc-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-mls-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-sandbox-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-targeted-42.1.18-4.0.1.el10_2.4.noarch.rpm
selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.4.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/selinux-policy-42.1.18-4.0.1.el10_2.4.src.rpm



Description of changes:

[42.1.18-4.0.1.el10_2.4]
- Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
- Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
- Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
  removable_device_t [Orabug: 37139639]
- Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
- Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
- Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
- Make import-state work with mls policy [Orabug: 32636699]
- Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
- Add comment for map on lvm_metadata_t. [Orabug: 31405325]
- Make cloud-init work with mls policy [Orabug: 32430460]
- Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
- Make lsmd and rngd work with mls policy [Orabug: 31405378]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]

[42.1.18-4.4]
- Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
Resolves: RHEL-193860
- Label /run/coreos with coreos_installer_var_run_t
Resolves: RHEL-193859
- Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
Resolves: RHEL-193859

[42.1.18-4.3]
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-224484

[42.1.18-4.2]
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897

[42.1.18-4.1]
- Replace "\_" (backslash underscore) with "_" (just underscore)
Resolves: RHEL-171367