FEDORA-2017-c2721b7375 — bugfix update for selinux-policy

selinux-policy-3.13.1-260.1.fc26

FEDORA-2017-c2721b7375 created by lvrabec 2 years ago for Fedora 26

stable

More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=917643

How to install

sudo dnf upgrade --advisory=FEDORA-2017-c2721b7375

This update has been submitted for testing by lvrabec. 2 years ago

This update has been pushed to testing. 2 years ago

adelton commented & provided feedback 2 years ago

karma

The https://bugzilla.redhat.com/show_bug.cgi?id=1461817 is fixed by this release, thank you.

BZ#1461817 Starting docker daemon produces AVC denial about iptables_t and container_runtime_t

frieben provided feedback 2 years ago

karma

cserpentis commented & provided feedback 2 years ago

karma

works for me

anassahmed commented & provided feedback 2 years ago

karma

LGTM.

Also fixes RHBZ Bug #1461407.

BZ#1461817 Starting docker daemon produces AVC denial about iptables_t and container_runtime_t

bt0dotninja commented & provided feedback 2 years ago

karma

wfm

besser82 commented & provided feedback 2 years ago

karma

Works great! LGTM! =)

This update has been submitted for stable by bodhi. 2 years ago

This update has been pushed to stable. 2 years ago

Please login to add feedback.

Metadata

Type

bugfix

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

Builds

selinux-policy-3.13.1-260.1.fc26

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#1360716 systemd v231 libsystemd-shared selinux denials

BZ#1363655 SELinux is preventing gdbus from 'write' accesses on the fifo_file /run/systemd/inhibit/1.ref.

BZ#1367150 SELinux is preventing firewalld from 'write' accesses on the directory root.

BZ#1370427 When running systemd inside of a container I see it wants to write to unix sysctls.

BZ#1370428 I have disabled domain_fd_use and I see sandbox domains need access to docker_t fds.

BZ#1372645 SELinux is preventing systemd-machine from using the 'kill' capabilities.

BZ#1443778 selinux-policy-sandbox always disable the sandbox module on upgrade

BZ#1461817 Starting docker daemon produces AVC denial about iptables_t and container_runtime_t

selinux-policy-3.13.1-260.1.fc26

How to install

Automated Test Results