-
Tue Oct 06 2026 Craig Guiller <craig.guiller@oracle.com> - 42.1.18-4.0.1.el10_2.4
- Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
- Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
- Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
removable_device_t [Orabug: 37139639]
- Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
- Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
- Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
- Make import-state work with mls policy [Orabug: 32636699]
- Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
- Add comment for map on lvm_metadata_t. [Orabug: 31405325]
- Make cloud-init work with mls policy [Orabug: 32430460]
- Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
- Make lsmd and rngd work with mls policy [Orabug: 31405378]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]
-
Mon Sep 21 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.4
- Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t
Resolves: RHEL-193860
- Label /run/coreos with coreos_installer_var_run_t
Resolves: RHEL-193859
- Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file()
Resolves: RHEL-193859
-
Thu Aug 06 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.3
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-224484
-
Tue Jun 23 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.2
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897
-
Thu May 21 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.1
- Replace "\_" (backslash underscore) with "_" (just underscore)
Resolves: RHEL-171367
-
Tue Mar 10 2026 Vit Mojzis <vmojzis@redhat.com> - 42.1.18-4
- Rebuild because of a missing target tag
Resolves: RHEL-152308
-
Fri Feb 27 2026 Vit Mojzis <vmojzis@redhat.com> - 42.1.18-2
- Rebuild for SELinux userspace 3.10
-
Mon Feb 23 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
- Allow NetworkManager list bpf directories
Resolves: RHEL-142171
- Dontaudit systemd-generator connect to sssd over a unix stream socket
Resolves: RHEL-114886
- Allow pkcsslotd read files in /proc and /sys
Resolves: RHEL-130812
- Allow pkcsslotd map its private tmpfs files
Resolves: RHEL-130812
- Allow tlshd communication to unconfined_t over a tcp socket
Resolves: RHEL-125106
- Label /run/insights-client.ppid with insights_client_run_t
Resolves: RHEL-146687
- Allow NM nvme dispatcher script start systemd services
Resolves: RHEL-140760
- Allow tlshd write generic certificate dirs
Resolves: RHEL-127023
- Allow aide get attributes of tmpfs and devtmpfs filesystems
Resolves: RHEL-121479
- Allow plasma login manager stop login services
Resolves: RHEL-140911
- Rebuild selinux policy after installation of the extra package
Resolves: RHEL-135875
Resolves: RHEL-143926
- Move triggerin scriptlets to the parent packages
Resolves: RHEL-141813
- Rebuild policy before running {binsbin|varrun}-convert.sh
Resolves: RHEL-141813
-
Wed Feb 18 2026 Veronika Syncakova <vsyncako@redhat.com> - 42.1.17-2
- Rebuild selinux policy after installation of the extra package
Resolves: RHEL-135875
-
Fri Feb 13 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
- Allow rhsmcertd read anaconda run files
Resolves: RHEL-141391
- Allow mdadm to use CAP_BPF during RAID monitoring
Resolves: RHEL-135765
- Allow mdadm the CAP_SYS_PTRACE capability
Resolves: RHEL-135765
- Allow staff and sysadm execute iotop using sudo
Resolves: RHEL-134940
- Allow kernel_t to read/write all domains' pipes
Resolves: RHEL-124442
- Allow nfsd_t domain setuid and setgid capability for rpc.mountd
Resolves: RHEL-148107