[SECURITY] Fedora 39 Update: selinux-policy-39.4-1.fc39

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-334b3be641
2024-01-30 04:21:41.500079
--------------------------------------------------------------------------------

Name        : selinux-policy
Product     : Fedora 39
Version     : 39.4
Release     : 1.fc39
URL         : https://github.com/fedora-selinux/selinux-policy
Summary     : SELinux policy configuration
Description :
SELinux core policy package.
Originally based off of reference policy,
the policy has been adjusted to provide support for Fedora.

--------------------------------------------------------------------------------
Update Information:

 New F39 selinux-policy build
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jan 25 2024 Zdenek Pytela <zpytela@xxxxxxxxxx> - 39.4-1
- Allow collectd read raw fixed disk device
- Allow collectd read udev pid files
- Allow httpd work with PrivateTmp
- Allow certmonger read network sysctls
- Allow systemd-sleep set attributes of efivarfs files
- Allow spamd_update_t the sys_ptrace capability in user namespace
- Allow alsa get attributes filesystems with extended attributes
- Allow systemd-sleep send a message to syslog over a unix dgram socket
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2249960 - SELinux is preventing rm from getattr access on the filesystem /.
        https://bugzilla.redhat.com/show_bug.cgi?id=2249960
  [ 2 ] Bug #2252484 - avc denials policykit_auth_t policykit_t spamd_update_t Fedora 39
        https://bugzilla.redhat.com/show_bug.cgi?id=2252484
  [ 3 ] Bug #2255693 - SELinux is preventing systemd-sleep from setattr access on the file /sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67.
        https://bugzilla.redhat.com/show_bug.cgi?id=2255693
  [ 4 ] Bug #2258637 - [selinux] systemd cannot flush the privatetmp cache used by php-fpm
        https://bugzilla.redhat.com/show_bug.cgi?id=2258637
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-334b3be641' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
_______________________________________________
package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Index of Archives]     [Fedora Users]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Photos]     [KDE Users]

  Powered by Linux