Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Fedora 26 SELinux-Policy Security Update: Access Control Fixes

fedora
Calendar Grey October 17, 2017
Dist Fedora Esm H88
Fedora 26 sees significant improvements in SELinux policy settings. This update addresses multiple access denial issues.
More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=982578

Summary

SELinux Base package for SELinux Reference Policy - modular.

Based off of reference policy: Checked out revision 2.20091117

More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=982578

[ 1 ] Bug #1497507 - Postfix (SMTP): SELinux is preventing smtpd from read, write access on the Datei inet.smtp.

https://bugzilla.redhat.com/show_bug.cgi?id=1497507

[ 2 ] Bug #1491427 - SELinux is preventing postgres from unix_read, unix_write access on the shared memory Unknown.

https://bugzilla.redhat.com/show_bug.cgi?id=1491427

[ 3 ] Bug #1487044 - SELinux is preventing systemd-logind from 'getattr' accesses on the file /dev/shm/PostgreSQL.188495196.

https://bugzilla.redhat.com/show_bug.cgi?id=1487044

[ 4 ] Bug #1471545 - SElinux prevents postfix from reading /run/systemd/resolve/resolv.conf

https://bugzilla.redhat.com/show_bug.cgi?id=1471545

[ 5 ] Bug #1436026 - selinux prevents postfix cleanup from accessing socket based non_smtpd_milters

https://bugzilla.redhat.com/show_bug.cgi?id=1436026

[ 6 ] Bug #1398907 - postfix chroot-update has incorrect SELinux label

https://bugzilla.redhat.com/show_bug.cgi?id=1398907

[ 7 ] Bug #1500820 - multiple 'systemd' AVC denials related to 'sysfs'

https://bugzilla.redhat.com/show_bug.cgi?id=1500820

su -c 'dnf upgrade selinux-policy' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 26
Version: 3.13.1
Release: 260.13.fc26
Summary: SELinux policy configuration

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here