Scientific Linux alert SL-seli-20120911 (selinux-policy)

From:
    	     
 
Pat Riehecky <riehecky@fnal.gov> 
To:
    	     
 
"SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV"
	<SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV> 
Subject:
    	     
 
Security ERRATA Low: selinux-policy enhancement update on SL5.x, SL6.x i386/x86_64 
Date:
    	     
 
Tue, 11 Sep 2012 08:50:55 -0500
Message-ID:
    	     
 
<504F41BF.20100@fnal.gov>
Archive-link:
    	     
 
Article, Thread
              
Synopsis: Low: selinux-policy enhancement update
Issue date: 2012-09-11

This update adds the following enhancements:


* Previously, with the MLS policy activated, a user created with a MLS 
level was
not able to log into the system using the ssh utility because an 
appropriate MLS
policy rule was missing. This update adds the MLS rule and users can now log
into the system as expected in the described scenario.

* When OpenMPI (Open Message Passing Interface) was configured to use the
parallel universe environment in the Condor server, a large number of AVC
messages was returned when an OpenMPI job was submitted. Consequently, 
the job
failed. This update fixes the appropriate SELinux policy and OpenMPI 
jobs now
pass successfully and no longer cause AVC messages to be returned.

This update has been placed in the security tree to avoid selinux bugs.


SL6.x

SRPMS:

selinux-policy-3.7.19-155.el6_3.4.src.rpm

i386:

selinux-policy-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-doc-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-minimum-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-mls-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-targeted-3.7.19-155.el6_3.4.noarch.rpm


x86_64:

selinux-policy-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-doc-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-minimum-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-mls-3.7.19-155.el6_3.4.noarch.rpm
selinux-policy-targeted-3.7.19-155.el6_3.4.noarch.rpm