Scientific Linux alert SL-seli-20120709 (selinux-policy)

From:
    	     
 
Pat Riehecky <riehecky@fnal.gov> 
To:
    	     
 
"SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV"
    <SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV> 
Subject:
    	     
 
Security ERRATA Low: selinux-policy on SL6.x i386/x86_64 
Date:
    	     
 
Mon, 9 Jul 2012 09:55:39 -0500
Message-ID:
    	     
 
<4FFAF0EB.2070509@fnal.gov>
Archive-link:
    	     
 
Article, Thread
              
Synopsis: Low: selinux-policy enhancement update
Issue date: 2012-07-09

This update adds the following enhancements:

* When the system produces a new SELinux denial, the setroubleshootd daemon
executes the rpm tool to check information about the relevant packages.
Previously, setroubleshootd was unable to execute the rpm tool, and AVC 
denials
were logged in the /var/log/audit/audit.log file. With this update, the 
relevant
policy has been corrected so that SELinux denials are no longer produced 
in the
described scenario.

* A number of additional enhancements have provided by upstream in this 
release.

This update has been placed in the security tree to avoid system issues 
related
to possible changes in how the applications interface with the selinux 
policy.


SL6.x

SRPMS:
     selinux-policy-3.7.19-155.el6_3.src.rpm

i386:
     selinux-policy-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-doc-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-minimum-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-mls-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-targeted-3.7.19-155.el6_3.noarch.rpm

x86_64:
      `selinux-policy-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-doc-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-minimum-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-mls-3.7.19-155.el6_3.noarch.rpm
     selinux-policy-targeted-3.7.19-155.el6_3.noarch.rpm