Scientific Linux alert SL-NotF-20110822 (selinux-policy)

From:
    	     
 
Troy Dawson <dawson@fnal.gov> 
To:
    	     
 
"scientific-linux-errata@fnal.gov" <scientific-linux-errata@fnal.gov> 
Subject:
    	     
 
Security ERRATA Low: selinux-policy on SL6.x i386/x86_64 
Date:
    	     
 
Wed, 24 Aug 2011 16:36:31 -0500
Message-ID:
    	     
 
<4E556EDF.9030208@fnal.gov>

Synopsis:	Low: selinux-policy bug fix update
Issue date:	2011-08-22

This update fixes the following bug:

* Prior to this update, the SELinux policy package did not allow the 
RHEV agent to execute. This update adds the policy for RHEV agents, so 
that they can be executed as expected.

* Previously, several labels were incorrect and rules for creating new 
389-ds instances were missing. As a result, access vector caches (AVC) 
appeared when a new 389-ds instance was created through the 389-console. 
This update fixes the labels and adds the missing rules. Now, new 389-ds 
instances are created without further errors.

* Prior to this update, AVC error messages occurred in the audit.log 
file. With this update, the labels causing the error messages have been 
fixed, thus preventing this bug.


SL 6.x

       SRPMS:
selinux-policy-3.7.19-93.el6_1.7.src.rpm
       i386:
selinux-policy-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-doc-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-minimum-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-mls-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-targeted-3.7.19-93.el6_1.7.noarch.rpm
       x86_64:
selinux-policy-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-doc-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-minimum-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-mls-3.7.19-93.el6_1.7.noarch.rpm
selinux-policy-targeted-3.7.19-93.el6_1.7.noarch.rpm

- Scientific Linux Development Team