Synopsis: Low: selinux-policy enhancement update Issue date: 2013-11-04 This update adds the following enhancements: * Previously, the pacemaker resource manager did not have its own policy defined and started in the initrc_t domain. With this update, the wrong context has been fixed and proper permissions have been set for pacemaker, thus fixing the bug. * Previously, the SELinux policy prevented running virtual machines based on volumes under the VDSM's deamon directory, /var/run/vdsm/storage/. As a consequence, trying to a run virtual machine with these settings resulted in an error. This update fixes the ability of the svirt_t SELinux process domain to read symbolic links in the /var/run/ directory, and now virtual machines based on volumes can be used under the VDSM's daemon directory. * Previously, due to SELinux permission errors, trying to run a QEMU process using the libvirt library resulted in and error and the process being terminated. This bug has now been fixed, and QEMU processes start and run successfully in this scenario. This update has been placed in the security tree to avoid selinux related problems. SL6.x SRPMS: selinux-policy-3.7.19-195.el6_4.18.src.rpm i386: selinux-policy-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-targeted-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-doc-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-minimum-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-mls-3.7.19-195.el6_4.18.noarch.rpm x86_64: selinux-policy-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-targeted-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-doc-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-minimum-3.7.19-195.el6_4.18.noarch.rpm selinux-policy-mls-3.7.19-195.el6_4.18.noarch.rpm