--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-5e64167ac4
2025-05-15 01:54:32.818528+00:00
--------------------------------------------------------------------------------

Name        : selinux-policy
Product     : Fedora 42
Version     : 41.40
Release     : 1.fc42
URL         : https://github.com/fedora-selinux/selinux-policy
Summary     : SELinux policy configuration
Description :
SELinux core policy package.
Originally based off of reference policy,
the policy has been adjusted to provide support for Fedora.

--------------------------------------------------------------------------------
Update Information:

New F42 selinux-policy build
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 13 2025 Zdenek Pytela <[email protected]> - 41.40-1
- Add missing permissions for ftpd_anon_write to manage NFS directories
- Add missing permissions for ftpd_anon_write to manage CIFS directories
- Allow nut-upsmon write systemd inhibit pipes
- Allow systemd-user-runtime-dir connect to systemd-userdbd over a unix socket
- Remove permissive domain for systemd_vsftpd_generator_t
- Change generator-specific rules to apply to systemd_generator
- Define file equivalency for /var/etc
- Allow tuned-ppd create ppd_base_profile with a file transition
- Allow lldpd connect to systemd-homed over a unix socket
- Allow sysadm_sudo_t signal rpm script
- Fix the "/var/cache/systemd/home(/.*)?" regex
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2359851 - SELinux denies tuned-ppd from creating ppd_base_profile 
(tuned_ppd_t → tuned_etc_t)
        https://bugzilla.redhat.com/show_bug.cgi?id=2359851
  [ 2 ] Bug #2361423 - SELinux is preventing tuned-ppd from 'create' accesses 
on the file ppd_base_profile.
        https://bugzilla.redhat.com/show_bug.cgi?id=2361423
  [ 3 ] Bug #2362879 - SELinux is preventing unbound-anchor from 'read' 
accesses on the file no-stub-resolv.conf.
        https://bugzilla.redhat.com/show_bug.cgi?id=2362879
  [ 4 ] Bug #2365764 - SELinux policy preventing nut-monitor (upsmon) from 
creating sleep inhibitor
        https://bugzilla.redhat.com/show_bug.cgi?id=2365764
  [ 5 ] Bug #2365799 - SELinux is preventing systemd-user-ru from connectto 
access on the unix_stream_socket /systemd/userdb/io.systemd.DynamicUser
        https://bugzilla.redhat.com/show_bug.cgi?id=2365799
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-5e64167ac4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to