selinux-policy-3.13.1-166.el7.7

The selinux-policy packages contain the rules that govern how confined processes run on the system.

This update fixes the following bugs:

* Previously, an SELinux allow rule for the Apache Tomcat servlet container was missing, and SELinux prevented Tomcat from connecting to Microsoft SQL Server on port 1433. This rule has been added to the selinux-policy packages, and Tomcat is now able to connect to Microsoft SQL Server. (BZ#1500697)

* In Asianux Server 7 SP2, an SELinux allow rule for the keepalived utility was missing. Consequently, an SELinux denial occurred when keepalived had been run. With this update, the missing rule has been added, and keepalived is now working with SELinux in Enforcing mode. (BZ#1500813)

* Prior to this update, the /var/log/pacemaker directories for the Pacemaker cluster resource manager were labeled as cluster_var_log_t. Consequently, an SELinux denial occurred when containerized Pacemaker tried to access the /var/log directory. An exception labeling the /var/log/pacemaker/bundles/ directory with the var_log_t label has been added, and Pacemaker is now able to map logging correctly with SELinux in Enforcing mode. (BZ#1513075)

Users of selinux-policy are advised to upgrade to these updated packages, which fix these bugs.