Fedora: FEDORA-2004-566 Critical: SELinux Update For Apache, Squid

Security-enhanced Linux is a patch of the Linux® kernel and a number

of utilities with enhanced security functionality designed to add

mandatory access controls to Linux. The Security-enhanced Linux

kernel contains new architectural components originally developed to

improve the security of the Flask operating system. These

architectural components provide general support for the enforcement

of many kinds of mandatory access control policies, including those

based on the concepts of Type Enforcement®, Role-based Access

Control, and Multi-level Security.

This package contains the SELinux example policy configuration along

with the Flask configuration information and the application

configuration files.

Several updates to fix problems with Apache, Squid, postgresql

- Back port changes for apache_macros.te file to support php execing ls

* Tue Dec 21 2004 Dan Walsh 1.17.30-2.57

- Add general domain access to squid

* Mon Dec 20 2004 Dan Walsh 1.17.30-2.56

- Allow nscd to use random_device_t

- Change initdb to run under postgresql_t

* Mon Dec 20 2004 Dan Walsh 1.17.30-2.55

- Allow windbind to create files in samba directories.

- Allow sendmail to read urandom

* Fri Dec 17 2004 Dan Walsh 1.17.30-2.54

- Fixes for ldconfig

* Fri Dec 17 2004 Dan Walsh 1.17.30-2.53

- Bump for FC3

* Fri Dec 17 2004 Dan Walsh 1.17.30-2.52

- Add emul patch

3fe6f4ef5505eb496d3c4e6f29d43292

SRPMS/selinux-policy-targeted-1.17.30-2.58.src.rpm

beb942d064baf5e59a1438482502c336

x86_64/selinux-policy-targeted-1.17.30-2.58.noarch.rpm

2be781efe590df6319e23fc590e2996f

x86_64/selinux-policy-targeted-sources-1.17.30-2.58.noarch.rpm

beb942d064baf5e59a1438482502c336

i386/selinux-policy-targeted-1.17.30-2.58.noarch.rpm

2be781efe590df6319e23fc590e2996f

i386/selinux-policy-targeted-sources-1.17.30-2.58.noarch.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com