エラータID: AXBA:2017-2451:07

2017/12/07 Thursday - 11:51
Asianux Server 7 for x86_64

The selinux-policy packages contain the rules that govern how confined processes run on the system.

This update fixes the following bugs:

* Previously, an SELinux allow rule for the Apache Tomcat servlet container was missing, and SELinux prevented Tomcat from connecting to Microsoft SQL Server on port 1433. This rule has been added to the selinux-policy packages, and Tomcat is now able to connect to Microsoft SQL Server. (BZ#1500697)

* In Asianux Server 7 SP2, an SELinux allow rule for the keepalived utility was missing. Consequently, an SELinux denial occurred when keepalived had been run. With this update, the missing rule has been added, and keepalived is now working with SELinux in Enforcing mode. (BZ#1500813)

* Prior to this update, the /var/log/pacemaker directories for the Pacemaker cluster resource manager were labeled as cluster_var_log_t. Consequently, an SELinux denial occurred when containerized Pacemaker tried to access the /var/log directory. An exception labeling the /var/log/pacemaker/bundles/ directory with the var_log_t label has been added, and Pacemaker is now able to map logging correctly with SELinux in Enforcing mode. (BZ#1513075)

Users of selinux-policy are advised to upgrade to these updated packages, which fix these bugs.


Update packages.




  1. selinux-policy-3.13.1-166.el7.7.src.rpm
    MD5: 13f424f71323c71fa8ea5a467c6752ab
    SHA-256: 49e32350337f51e30886e4377e027466b3322faeaff9f4855af0cebbe6c54715
    Size: 2.69 MB

Asianux Server 7 for x86_64
  1. selinux-policy-3.13.1-166.el7.7.noarch.rpm
    MD5: c71ae6c5794c383c3c45667eb7e4f7a4
    SHA-256: d7fa0e46d06e648248436e4e4a5c08ede298b4d2fe5aa6505f0001b2e5419482
    Size: 435.76 kB
  2. selinux-policy-devel-3.13.1-166.el7.7.noarch.rpm
    MD5: 353054d1d1a3152ad837ec1951755c59
    SHA-256: dd9b61a173164ae349c09ef8e73688aeff4ce648f21f2b8cee6b7589f4f53c25
    Size: 1.65 MB
  3. selinux-policy-minimum-3.13.1-166.el7.7.noarch.rpm
    MD5: 7fcdfc52e3de8920cd32757e75957a27
    SHA-256: 8f12a16443911cb5da49cda5701cf6765841d1f5e61752288b61ee7383151755
    Size: 6.50 MB
  4. selinux-policy-mls-3.13.1-166.el7.7.noarch.rpm
    MD5: 09d2bae0d2d036f2510865ae18b2dae4
    SHA-256: e215fb58b00a56f6f65b19ea165476e80824a2b6c463f659954d7860e95f6215
    Size: 4.79 MB
  5. selinux-policy-targeted-3.13.1-166.el7.7.noarch.rpm
    MD5: 521105e1c1ce1354d4613fa17bc2e047
    SHA-256: 8c28f0f7be272de88df5c915fbe6cd8157714b9e2a4088f882d0fbd77abedd10
    Size: 6.50 MB