[ol10_baseos_latest] selinux-policy-sandbox-42.1.7-1.0.2.el10.noarch

SELinux sandbox policy for use with the sandbox utility.

Changelog (Show File list) (Show related packages)

• Fri Nov 21 2025 Ilya Okomin <ilya.okomin@oracle.com> - 42.1.7-1.0.2

  - Fix specfile triggers for fapolicyd and usbguard DSP modules [Orabug: 38681740] [Orabug: 38579739]

• Tue Sep 30 2025 Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com>- 42.1.7-1.0.1

  - Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
  - Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
    removable_device_t [Orabug: 37139639]
  - Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
  - Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
  - Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make lsmd and rngd work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]

• Thu Aug 21 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1

  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651

• Wed Aug 13 2025 Vit Mojzis <vmojzis@redhat.com> - 42.1.6-2

  - Add selinux-policy-automotive sub-package (RHEL-105410)

• Tue Aug 12 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1

  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118

• Fri Aug 08 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1

  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656

• Thu Jul 31 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.4-1

  - Allow systemd-coredump the sys_chroot capability
  Resolves: RHEL-97586
  - Add the rhcd_rw_fifo_files() interface
  Related: RHEL-99318
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-99318

• Wed Jul 23 2025 Vit Mojzis <vmojzis@redhat.com> - 42.1.3-2

  - Rebuild for SELinux userspace 3.9

• Fri Jul 18 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1

  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490

• Wed Jul 16 2025 Zdenek Pytela <zpytela@redhat.com> - 42.1.2-1

  - Remove permissive domains
  Resolves: RHEL-103661
  - Adjust modules list
  Resolves: RHEL-103661