Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 39 Advisory 2024-334b3be641 Critical: SELinux Policy Enhancements

fedora
Calendar Grey January 30, 2024
Dist Fedora Esm H88
The Fedora 39 update brings an upgraded SELinux policy build, boosting both security measures and system capabilities.
New F39 selinux-policy build

Summary

SELinux core policy package.

Originally based off of reference policy,

the policy has been adjusted to provide support for Fedora.

Update Information:

New F39 selinux-policy build

Topics%20covered

Topics Covered

security advisory Fedora critical update SELinux system enhancements policy change

Change Log

* Thu Jan 25 2024 Zdenek Pytela - 39.4-1 - Allow collectd read raw fixed disk device - Allow collectd read udev pid files - Allow httpd work with PrivateTmp - Allow certmonger read network sysctls - Allow systemd-sleep set attributes of efivarfs files - Allow spamd_update_t the sys_ptrace capability in user namespace - Allow alsa get attributes filesystems with extended attributes - Allow systemd-sleep send a message to syslog over a unix dgram socket

References


[ 1 ] Bug #2249960 - SELinux is preventing rm from getattr access on the filesystem /. https://bugzilla.redhat.com/show_bug.cgi?id=2249960 [ 2 ] Bug #2252484 - avc denials policykit_auth_t policykit_t spamd_update_t Fedora 39 https://bugzilla.redhat.com/show_bug.cgi?id=2252484 [ 3 ] Bug #2255693 - SELinux is preventing systemd-sleep from setattr access on the file /sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67. https://bugzilla.redhat.com/show_bug.cgi?id=2255693 [ 4 ] Bug #2258637 - [selinux] systemd cannot flush the privatetmp cache used by php-fpm https://bugzilla.redhat.com/show_bug.cgi?id=2258637

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-334b3be641' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: selinux-policy
Product: Fedora 39
Version: 39.4
Release: 1.fc39
URL: https://github.com/fedora-selinux/selinux-policy
Summary: SELinux policy configuration

Topics%20covered

Topics Covered

security advisory Fedora critical update SELinux system enhancements policy change

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here