--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-334b3be641
2024-01-30 04:21:41.500079
--------------------------------------------------------------------------------

Name        : selinux-policy
Product     : Fedora 39
Version     : 39.4
Release     : 1.fc39
URL         : https://github.com/fedora-selinux/selinux-policy
Summary     : SELinux policy configuration
Description :
SELinux core policy package.
Originally based off of reference policy,
the policy has been adjusted to provide support for Fedora.

--------------------------------------------------------------------------------
Update Information:

 New F39 selinux-policy build
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 25 2024 Zdenek Pytela  - 39.4-1
- Allow collectd read raw fixed disk device
- Allow collectd read udev pid files
- Allow httpd work with PrivateTmp
- Allow certmonger read network sysctls
- Allow systemd-sleep set attributes of efivarfs files
- Allow spamd_update_t the sys_ptrace capability in user namespace
- Allow alsa get attributes filesystems with extended attributes
- Allow systemd-sleep send a message to syslog over a unix dgram socket
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2249960 - SELinux is preventing rm from getattr access on the filesystem /.
        https://bugzilla.redhat.com/show_bug.cgi?id=2249960
  [ 2 ] Bug #2252484 - avc denials policykit_auth_t policykit_t spamd_update_t Fedora 39
        https://bugzilla.redhat.com/show_bug.cgi?id=2252484
  [ 3 ] Bug #2255693 - SELinux is preventing systemd-sleep from setattr access on the file /sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67.
        https://bugzilla.redhat.com/show_bug.cgi?id=2255693
  [ 4 ] Bug #2258637 - [selinux] systemd cannot flush the privatetmp cache used by php-fpm
        https://bugzilla.redhat.com/show_bug.cgi?id=2258637
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-334b3be641' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
--
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Do not reply to spam, report it: https://pagure.io/login/

Fedora 39: selinux-policy 2024-334b3be641

January 30, 2024
New F39 selinux-policy build

Summary

SELinux core policy package.

Originally based off of reference policy,

the policy has been adjusted to provide support for Fedora.

Update Information:

New F39 selinux-policy build

Change Log

* Thu Jan 25 2024 Zdenek Pytela - 39.4-1 - Allow collectd read raw fixed disk device - Allow collectd read udev pid files - Allow httpd work with PrivateTmp - Allow certmonger read network sysctls - Allow systemd-sleep set attributes of efivarfs files - Allow spamd_update_t the sys_ptrace capability in user namespace - Allow alsa get attributes filesystems with extended attributes - Allow systemd-sleep send a message to syslog over a unix dgram socket

References

[ 1 ] Bug #2249960 - SELinux is preventing rm from getattr access on the filesystem /. https://bugzilla.redhat.com/show_bug.cgi?id=2249960 [ 2 ] Bug #2252484 - avc denials policykit_auth_t policykit_t spamd_update_t Fedora 39 https://bugzilla.redhat.com/show_bug.cgi?id=2252484 [ 3 ] Bug #2255693 - SELinux is preventing systemd-sleep from setattr access on the file /sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67. https://bugzilla.redhat.com/show_bug.cgi?id=2255693 [ 4 ] Bug #2258637 - [selinux] systemd cannot flush the privatetmp cache used by php-fpm https://bugzilla.redhat.com/show_bug.cgi?id=2258637

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-334b3be641' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
Name : selinux-policy
Product : Fedora 39
Version : 39.4
Release : 1.fc39
URL : https://github.com/fedora-selinux/selinux-policy
Summary : SELinux policy configuration

Related News