Scientific Linux: SELinux Important Session Lock Locking Update 2011:0011-1

Date:         Thu, 22 Dec 2011 11:24:52 -0600
Reply-To:     Pat Riehecky 
Sender:       Security Errata for Scientific Linux
              
From:         Pat Riehecky 
Organization: Fermilab
Subject:      Security ERRATA Low: selinux-policy on  SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Low: selinux-policy enhancement update
Issue date: 2011-12-19

This update fixes the following bug:

* When running a KDE session on a virtual machine with SELinux in enforcing
mode, the session was not locked as expected when the SPICE console was 
closed.
This update adds necessary SELinux rules which ensure that the user's 
session is
properly locked under these circumstances.

SL6.x

SRPMS:
selinux-policy-3.7.19-126.el6_2.4.src.rpm

i386:
selinux-policy-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-doc-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-minimum-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-mls-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-targeted-3.7.19-126.el6_2.4.noarch.rpm

x86_64:
selinux-policy-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-doc-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-minimum-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-mls-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-targeted-3.7.19-126.el6_2.4.noarch.rpm

Changelog:
* Thu Dec 08 2011 Miroslav Grepl  3.7.19-126.el6_2.4
- Allow rhev_agentd_consolehelper to dbus chat with session bus

* Wed Nov 23 2011 Miroslav Grepl 3.7.19-126.el6_2.3
- Update config.tgz to make cronjob working also for user_t

* Wed Nov 16 2011 Miroslav Grepl 3.7.19-126.el6_2.2
- Add cron_role for sysadm_t

* Wed Nov 16 2011 Miroslav Grepl 3.7.19-126.el6_2.1
- Make cronjob working on MLS

* Wed Nov 09 2011 Miroslav Grepl 3.7.19-126
- Fix dev_rw_generic_usb_dev