-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-8c0636295a 2024-05-22 01:26:21.009316 -------------------------------------------------------------------------------- Name : selinux-policy Product : Fedora 40 Version : 40.20 Release : 1.fc40 URL : https://github.com/fedora-selinux/selinux-policy Summary : SELinux policy configuration Description : SELinux core policy package. Originally based off of reference policy, the policy has been adjusted to provide support for Fedora. -------------------------------------------------------------------------------- Update Information: New F40 selinux-policy build New F40 selinux-policy build -------------------------------------------------------------------------------- ChangeLog: * Mon May 20 2024 Zdenek Pytela <zpytela@xxxxxxxxxx> - 40.20-1 - Allow journald read systemd config files and directories - Allow systemd_domain read systemd_conf_t dirs - Fix bad Python regexp escapes - Allow fido services connect to postgres database * Fri May 17 2024 Zdenek Pytela <zpytela@xxxxxxxxxx> - 40.19-1 - Allow postfix smtpd map aliases file - Ensure dbus communication is allowed bidirectionally - Label systemd configuration files with systemd_conf_t - Label /run/systemd/machine with systemd_machined_var_run_t - Allow systemd-hostnamed read the vsock device - Allow sysadm execute dmidecode using sudo - Allow sudodomain list files in /var - Allow setroubleshootd get attributes of all sysctls - Allow various services read and write z90crypt device - Allow nfsidmap connect to systemd-homed - Allow sandbox_x_client_t dbus chat with accountsd - Allow system_cronjob_t dbus chat with avahi_t - Allow staff_t the io_uring sqpoll permission - Allow staff_t use the io_uring API - Add support for secretmem anon inode * Thu May 16 2024 Adam Williamson <awilliam@xxxxxxxxxx> - 40.18-3 - Correct some errors in the RPM macro changes from -2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2279923 - selinux denials for systemd 256: denied { create } for pid=773 comm="systemd-machine" name="machine" scontext=system_u:system_r:systemd_machined_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=0 https://bugzilla.redhat.com/show_bug.cgi?id=2279923 [ 2 ] Bug #2280017 - SELinux is preventing nfsidmap from connectto access on the unix_stream_socket /run/systemd/userdb/io.systemd.Home. https://bugzilla.redhat.com/show_bug.cgi?id=2280017 [ 3 ] Bug #2281489 - SELinux is preventing systemd-journal from 'read' accesses on the file /etc/systemd/journald.conf. https://bugzilla.redhat.com/show_bug.cgi?id=2281489 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-8c0636295a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
