-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-8225c4e502 2018-01-02 14:45:21.619099 --------------------------------------------------------------------------------
Name : selinux-policy Product : Fedora 27 Version : 3.13.1 Release : 283.19.fc27 URL : http://github.com/TresysTechnology/refpolicy/wiki Summary : SELinux policy configuration Description : SELinux Base package for SELinux Reference Policy - modular. Based off of reference policy: Checked out revision 2.20091117
-------------------------------------------------------------------------------- Update Information:
More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=1010382 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1517720 - SELinux is preventing gsf-office-thum from 'map' accesses on the tiedosto /run/media/yk/FEDORA-WS-L/Vincent/Linux_opas.odt. https://bugzilla.redhat.com/show_bug.cgi?id=1517720 [ 2 ] Bug #1521137 - cupsd_t accesses font files using "map" https://bugzilla.redhat.com/show_bug.cgi?id=1521137 [ 3 ] Bug #1519810 - SELinux is preventing charon-nm from 'map' accesses on the file /home/mirek/.pki/goodboyKey.der. https://bugzilla.redhat.com/show_bug.cgi?id=1519810 [ 4 ] Bug #1510139 - Can't run systemd in non-privileged container https://bugzilla.redhat.com/show_bug.cgi?id=1510139 [ 5 ] Bug #1513704 - nssdb auth doesn't work with selinux enforcing due to map permissions denials https://bugzilla.redhat.com/show_bug.cgi?id=1513704 [ 6 ] Bug #1520033 - systemd containers now cause AVC denials about init_t and container_file_t https://bugzilla.redhat.com/show_bug.cgi?id=1520033 [ 7 ] Bug #1501331 - None https://bugzilla.redhat.com/show_bug.cgi?id=1501331 [ 8 ] Bug #1519948 - SELinux denial new in F27 https://bugzilla.redhat.com/show_bug.cgi?id=1519948 [ 9 ] Bug #1516816 - [antivirus_t] SELinux is preventing /usr/sbin/amavi from map access on the file /var/spool/amavisd/db/__db.001 https://bugzilla.redhat.com/show_bug.cgi?id=1516816 [ 10 ] Bug #1517405 - SELinux is preventing plymouthd from 'map' accesses on the chr_file /dev/fb0. https://bugzilla.redhat.com/show_bug.cgi?id=1517405 [ 11 ] Bug #1517517 - SELinux is preventing evince-thumbnai from 'map' accesses on the �������� /tmp/gnome-desktop-file-to-thumbnail.djvu. https://bugzilla.redhat.com/show_bug.cgi?id=1517517 [ 12 ] Bug #1515849 - SELinux is preventing ps from 'sys_ptrace' accesses on the cap_userns Unknown. https://bugzilla.redhat.com/show_bug.cgi?id=1515849 [ 13 ] Bug #1517125 - SELinux is preventing gsf-office-thum from 'map' accesses on the file /tmp/gnome-desktop-file-to-thumbnail.xlsx. https://bugzilla.redhat.com/show_bug.cgi?id=1517125 [ 14 ] Bug #1447909 - SELinux is preventing sendmail from 'write' accesses on the sock_file system_bus_socket. https://bugzilla.redhat.com/show_bug.cgi?id=1447909 [ 15 ] Bug #1514093 - SELinux is preventing mandb from 'map' accesses on the archivo /var/cache/man/2883. https://bugzilla.redhat.com/show_bug.cgi?id=1514093 [ 16 ] Bug #1517541 - [git_script_t] SELinux is preventing git from map access on the file /var/lib/git/ansible.git/objects/pack/pack-277152cd4f4e150f5bdd3c0a5d13bbf9eb946d69.idx https://bugzilla.redhat.com/show_bug.cgi?id=1517541 [ 17 ] Bug #1524256 - arpwatch fails to start on fc27 due to selinux denials https://bugzilla.redhat.com/show_bug.cgi?id=1524256 [ 18 ] Bug #1515956 - SELinux is preventing pulseaudio from 'map' accesses on the file /home/gholms/.config/pulse/1aed1b1d684145f0b3b77b0530662854-card-database.tdb. https://bugzilla.redhat.com/show_bug.cgi?id=1515956 [ 19 ] Bug #1517447 - SELinux is preventing dovecot-lda from map access on the file /var/spool/mail/vdomains/example.com/user/Maildir/dovecot.index. https://bugzilla.redhat.com/show_bug.cgi?id=1517447 [ 20 ] Bug #1521125 - SELinux is preventing rpc.gssd from 'read' accesses on the file /var/lib/ipa-client/pki/kdc-ca-bundle.pem. https://bugzilla.redhat.com/show_bug.cgi?id=1521125 [ 21 ] Bug #1517124 - SELinux is preventing smbclient from 'map' accesses on the file /var/lib/samba/lock/gencache_notrans.tdb. https://bugzilla.redhat.com/show_bug.cgi?id=1517124 [ 22 ] Bug #1517395 - SELinux is preventing pmlogger_check from 'execute_no_trans' accesses on the archivo /usr/bin/pmlogger. https://bugzilla.redhat.com/show_bug.cgi?id=1517395 [ 23 ] Bug #1478642 - openvpn-server@service writes status-server.log to a directory with selinux write denials https://bugzilla.redhat.com/show_bug.cgi?id=1478642 [ 24 ] Bug #1516899 - [mysqld_t] SELinux is preventing mysqld from map access on the file /var/tmp/#sql_3f2_0.MAD https://bugzilla.redhat.com/show_bug.cgi?id=1516899 [ 25 ] Bug #1520775 - SELinux is preventing mandb from 'write' accesses on the sock_file /var/lib/sss/pipes/nss. https://bugzilla.redhat.com/show_bug.cgi?id=1520775 [ 26 ] Bug #1500737 - SELinux is preventing gsf-office-thum from 'map' accesses on the fichier 2F72756E2F6D656469612F746573742F363346363534303632374143324430362F4C69737465206465732070726F6772616D6D65206E6F6E20646973706F20706F7572206665646F72612032372E6F6473. https://bugzilla.redhat.com/show_bug.cgi?id=1500737 [ 27 ] Bug #1519824 - SELinux is preventing cat from 'read' accesses on the file last_pwr. https://bugzilla.redhat.com/show_bug.cgi?id=1519824 [ 28 ] Bug #1436048 - SELinux prevents openvpn from starting when using a tunnel device managed by NetworkManager https://bugzilla.redhat.com/show_bug.cgi?id=1436048 [ 29 ] Bug #1508659 - SELinux is preventing ypbind from 'write' accesses on the sock_file rpcbind.sock. https://bugzilla.redhat.com/show_bug.cgi?id=1508659 [ 30 ] Bug #1516282 - SELinux is preventing cups-pdf from 'read' accesses on the directory /etc/cups. https://bugzilla.redhat.com/show_bug.cgi?id=1516282 [ 31 ] Bug #1517449 - SELinux is preventing imap from map access on the file /var/spool/mail/vdomains/example.com/user/Maildir/dovecot.index https://bugzilla.redhat.com/show_bug.cgi?id=1517449 [ 32 ] Bug #1519729 - SELinux is preventing imap from 'map' accesses on the file /home/.../dovecot.index.log. https://bugzilla.redhat.com/show_bug.cgi?id=1519729 [ 33 ] Bug #1519565 - SELinux is preventing charon-nm from 'map' accesses on the file /etc/pki/tls/certs/Makefile. https://bugzilla.redhat.com/show_bug.cgi?id=1519565 [ 34 ] Bug #1519966 - Missing policy for mysqld_safe_helper https://bugzilla.redhat.com/show_bug.cgi?id=1519966 [ 35 ] Bug #1518382 - SELinux is preventing colord from 'map' accesses on the file /run/gnome-initial-setup/.local/share/icc/edid-aca41ed5ad1cf4faeb4f014fe52c1e3b.icc. https://bugzilla.redhat.com/show_bug.cgi?id=1518382 [ 36 ] Bug #1527173 - SELinux is preventing certutil from 'map' accesses on the fichier /etc/pki/ca-trust/source/README. https://bugzilla.redhat.com/show_bug.cgi?id=1527173 [ 37 ] Bug #1507476 - slapd can not map it's database to memeory https://bugzilla.redhat.com/show_bug.cgi?id=1507476 [ 38 ] Bug #1452783 - SELinux is preventing plugin-containe from 'read' accesses on the file libwidevinecdm.so. https://bugzilla.redhat.com/show_bug.cgi?id=1452783 [ 39 ] Bug #1515961 - SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown. https://bugzilla.redhat.com/show_bug.cgi?id=1515961 [ 40 ] Bug #1518864 - dbus-broker fails due to mmap denial https://bugzilla.redhat.com/show_bug.cgi?id=1518864 [ 41 ] Bug #1515965 - SELinux is preventing gnome-keyring-d from 'write' accesses on the sock_file system_bus_socket. https://bugzilla.redhat.com/show_bug.cgi?id=1515965 [ 42 ] Bug #1526722 - SELinux prevents dbus signals and method calls from/to ModemManager https://bugzilla.redhat.com/show_bug.cgi?id=1526722 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade selinux-policy' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------