Fedora 42 Update: selinux-policy-42.7-1.fc42

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-7a468a12c5
2025-09-01 00:50:28.877920+00:00
--------------------------------------------------------------------------------

Name        : selinux-policy
Product     : Fedora 42
Version     : 42.7
Release     : 1.fc42
URL         : https://github.com/fedora-selinux/selinux-policy
Summary     : SELinux policy configuration
Description :
SELinux core policy package.
Originally based off of reference policy,
the policy has been adjusted to provide support for Fedora.

--------------------------------------------------------------------------------
Update Information:

New F42 selinux-policy build
--------------------------------------------------------------------------------
ChangeLog:

* Fri Aug 29 2025 Zdenek Pytela <zpytela@xxxxxxxxxx> - 42.7-1
- Label /usr/lib/systemd/systemd-ssh-issue with systemd_ssh_issue_exec_t
- Allow stalld map sysfs files
- Allow NetworkManager-dispatcher-winbind get pidfs attributes
- Allow openvpn create and use generic netlink socket
- policy_capabilities: remove estimated from released versions
- policy_capabilities: add stub for userspace_initial_context
- add netlink_xperm policy capability and nlmsg permission definitions
- policy_capabilities: add ioctl_skip_cloexec
- selinux-policy: add allow rule for tuned_ppd_t
- selinux-policy: add allow rule for switcheroo_control_t
- Label /run/audit with auditd_var_run_t
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2385328 - SELinux is preventing switcheroo-cont from 'getattr' accesses on the filesystem /dev/shm.
        https://bugzilla.redhat.com/show_bug.cgi?id=2385328
  [ 2 ] Bug #2387572 - SELinux is preventing tuned-ppd from 'getattr' accesses on the filesystem /.
        https://bugzilla.redhat.com/show_bug.cgi?id=2387572
  [ 3 ] Bug #2391164 - SELinux blocking OpenVPN from creating generic netlink socket
        https://bugzilla.redhat.com/show_bug.cgi?id=2391164
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-7a468a12c5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Index of Archives]     [Fedora Users]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Photos]     [KDE Users]

  Powered by Linux