SCIENTIFIC-LINUX-ERRATA Archives

December 2011

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Low: selinux-policy on SL6.x i386/x86_64
From:
Pat Riehecky <[log in to unmask]>
Reply To:
Pat Riehecky <[log in to unmask]>
Date:
Thu, 22 Dec 2011 11:24:52 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (47 lines) 
Synopsis: Low: selinux-policy enhancement update
Issue date: 2011-12-19

This update fixes the following bug:

* When running a KDE session on a virtual machine with SELinux in enforcing
mode, the session was not locked as expected when the SPICE console was 
closed.
This update adds necessary SELinux rules which ensure that the user's 
session is
properly locked under these circumstances.

SL6.x

SRPMS:
selinux-policy-3.7.19-126.el6_2.4.src.rpm

i386:
selinux-policy-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-doc-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-minimum-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-mls-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-targeted-3.7.19-126.el6_2.4.noarch.rpm

x86_64:
selinux-policy-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-doc-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-minimum-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-mls-3.7.19-126.el6_2.4.noarch.rpm
selinux-policy-targeted-3.7.19-126.el6_2.4.noarch.rpm

Changelog:
* Thu Dec 08 2011 Miroslav Grepl  3.7.19-126.el6_2.4
- Allow rhev_agentd_consolehelper to dbus chat with session bus

* Wed Nov 23 2011 Miroslav Grepl 3.7.19-126.el6_2.3
- Update config.tgz to make cronjob working also for user_t

* Wed Nov 16 2011 Miroslav Grepl 3.7.19-126.el6_2.2
- Add cron_role for sysadm_t

* Wed Nov 16 2011 Miroslav Grepl 3.7.19-126.el6_2.1
- Make cronjob working on MLS

* Wed Nov 09 2011 Miroslav Grepl 3.7.19-126
- Fix dev_rw_generic_usb_dev

ATOM RSS1 RSS2