Low: selinux-policy enhancement update. Date: Mon, 4 Nov 2013 13:13:51 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Low: selinux-policy enhancement update on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Low: selinux-policy enhancement update Issue date: 2013-11-04 This update adds the following enhancements: * Previously, the pacemaker resource manager did not have its own policy defined and started in the initrc_t domain. With this update, the wrong context has been fixed and proper permissions have been set for pacemaker, thus fixing the bug. * Previously, the SELinux policy prevented running virtual machines based on volumes under the VDSM's deamon directory, /var/run/vdsm/storage/. As a consequence, trying to a run virtual machine with these settings resulted in an error. This update fixes the ability of the svirt_t SELinux process domain to read symbolic links in the /var/run/ directory, and now virtual machines based on volumes can be used under the VDSM's daemon directory. * Previously, due to SELinux permission errors, trying to run a QEMU process using the libvirt library resulted in and error and the process being terminated. This bug has now been fixed, and QEMU processes start and run successfully in this scenario. This update has been placed in the security tree to avoid selinux related problems. SL6.x SRPMS: selinux-policy-3.7.19-195.el6_4.18.src.rpm i386: selinux-policy-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-targeted-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-doc-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-minimum-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-mls-3.7.19-195.el6_4.18.noarch.rpm x86_64: selinux-policy-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-targeted-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-doc-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-minimum-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-mls-3.7.19-195.el6_4.18.noarch.rpm . Advance your SELinux policythrough this latest revision tackling critical authorization challenges.. SELinux Policy, Security Updates, Enhancement Fixes. . Severity: Low. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.