Scientific Linux: Enhanced Minor SELinux Policy Revision

Date: Mon, 4 Nov 2013 13:13:51 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Low: selinux-policy enhancement update on SL6.x
 i386/x86_64
MIME-Version: 1.0

Synopsis: Low: selinux-policy enhancement update
Issue date: 2013-11-04

This update adds the following enhancements:

* Previously, the pacemaker resource manager did not have its own policy
defined and started in the initrc_t domain. With this update, the wrong
context has been fixed and proper permissions have been set for pacemaker,
thus fixing the bug.

* Previously, the SELinux policy prevented running virtual machines based
on volumes under the VDSM's deamon directory, /var/run/vdsm/storage/. As a
consequence, trying to a run virtual machine with these settings resulted
in an error. This update fixes the ability of the svirt_t SELinux process
domain to read symbolic links in the /var/run/ directory, and now virtual
machines based on volumes can be used under the VDSM's daemon directory.

* Previously, due to SELinux permission errors, trying to run a QEMU
process using the libvirt library resulted in and error and the process
being terminated. This bug has now been fixed, and QEMU processes start
and run successfully in this scenario.

This update has been placed in the security tree to avoid selinux
related problems.

SL6.x

SRPMS:
 selinux-policy-3.7.19-195.el6_4.18.src.rpm

i386:
 selinux-policy-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-targeted-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-doc-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-minimum-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-mls-3.7.19-195.el6_4.18.noarch.rpm

x86_64:
 selinux-policy-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-targeted-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-doc-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-minimum-3.7.19-195.el6_4.18.noarch.rpm
 selinux-policy-mls-3.7.19-195.el6_4.18.noarch.rpm