SUSE-SU-2025:20042-1: important: Security update for selinux-policy

[SLE-SECURITY-UPDATES]

# Security update for selinux-policy

Announcement ID: SUSE-SU-2025:20042-1  
Release Date: 2025-02-03T08:54:23Z  
Rating: important  
References:

  * bsc#1210717
  * bsc#1215405
  * bsc#1225984
  * bsc#1227930
  * bsc#1228247
  * bsc#1229132

  
Affected Products:

  * SUSE Linux Micro 6.0

  
  
An update that has six fixes can now be installed.

## Description:

This update for selinux-policy fixes the following issues:

Update to version 20230523+git25.ad22dd7f:

  * Backport wtmpdb label change to have the same wtmpdb label as in SL Micro
    6.1 (bsc#1229132)
  * Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records
  * Add auth_rw_wtmpdb_login_records to modules
  * Allow xdm_t to read-write to wtmpdb (bsc#1225984)
  * Introduce types for wtmpdb and rw interface
  * Introduce wtmp_file_type attribute
  * Revert "Add policy for wtmpdb (bsc#1210717)"

Update to version 20230523+git18.f44daf8a:

  * Provide type for sysstat lock files (bsc#1228247)

Update to version 20230523+git16.0849f54c:

  * allow firewalld access to /dev/random and write HW acceleration logs
    (bsc#1215405, bsc#1227930)

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro 6.0  
    zypper in -t patch SUSE-SLE-Micro-6.0-43=1

## Package List:

  * SUSE Linux Micro 6.0 (noarch)
    * selinux-policy-20230523+git25.ad22dd7f-1.1
    * selinux-policy-targeted-20230523+git25.ad22dd7f-1.1
    * selinux-policy-devel-20230523+git25.ad22dd7f-1.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1210717
  * https://bugzilla.suse.com/show_bug.cgi?id=1215405
  * https://bugzilla.suse.com/show_bug.cgi?id=1225984
  * https://bugzilla.suse.com/show_bug.cgi?id=1227930
  * https://bugzilla.suse.com/show_bug.cgi?id=1228247
  * https://bugzilla.suse.com/show_bug.cgi?id=1229132

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20250604/e1aef903/attachment.htm>