selinux-policy-3.13.1-229.el7.5

The selinux-policy packages contain the rules that govern how confined processes run on the system.

This update fixes the following bugs:

* Previously, SELinux denied communication between the systemd-logind process and the D-Bus interprocess communication system. Consequently, the neutron-openvswitch-agent process crashed. With this update, SELinux policy rules have been added to allow communication between systemd-logind and D-Bus. As a result, neutron-openvswitch-agent no longer crashes with SELinux in enforcing mode. (BZ#1635704)

* Prior to this update of the SELinux policy, rules that allow user domains to use generic pseudoterminal interfaces were missing. As a consequence, the I/O logging function of the sudo utility did not work for SELinux-confined users. The missing rules have been added to the policy, and the I/O logging function no longer fails in the described scenario. (BZ#1638427)

Users of selinux-policy are advised to upgrade to these updated packages, which fix these bugs.