SUSE-RU-2025:20228-1: moderate: Recommended update for selinux-policy

[SLE-UPDATES]

# Recommended update for selinux-policy

Announcement ID: SUSE-RU-2025:20228-1  
Release Date: 2025-03-04T08:21:45Z  
Rating: moderate  
References:

  * bsc#1230961
  * bsc#1232655
  * bsc#1232753

  
Affected Products:

  * SUSE Linux Micro 6.1

  
  
An update that has three fixes can now be installed.

## Description:

This update for selinux-policy fixes the following issues:

  * Update to version 20241031+git6.af97b0a3:
  * Allow vhostmd_t list virtqemud pid dirs (bsc#1230961)

  * Update to version 20241031+git4.96add794:

  * Label /run/libvirt/qemu/channel with virtqemud_var_run_t (bsc#1230961)

  * Update macros.selinux-policy to trigger a full relabel on transactional
    systems upon module installation. This is rather expensive and will
    hopefully be replaced by a more fine grained solution later on (bsc#1232753)

  * Update to version 20241031+git2.f85cbd70:

  * Allow virt_dbus_t to connect to virtd_t over unix_stream_socket
    (bsc#1232655)

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro 6.1  
    zypper in -t patch SUSE-SLE-Micro-6.1-25=1

## Package List:

  * SUSE Linux Micro 6.1 (noarch)
    * selinux-policy-targeted-20241031+git6.af97b0a3-slfo.1.1_1.1
    * selinux-policy-devel-20241031+git6.af97b0a3-slfo.1.1_1.1
    * cockpit-networkmanager-321-slfo.1.1_2.5
    * selinux-policy-20241031+git6.af97b0a3-slfo.1.1_1.1
    * cockpit-selinux-321-slfo.1.1_2.5
    * container-selinux-2.211.0-slfo.1.1_1.5
    * swtpm-selinux-0.9.0-slfo.1.1_2.5
    * passt-selinux-20240906.6b38f07-slfo.1.1_1.6
    * cockpit-storaged-321-slfo.1.1_2.5
    * pcp-conf-6.2.0-slfo.1.1_1.3
    * cockpit-system-321-slfo.1.1_2.5
  * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64)
    * cockpit-bridge-debuginfo-321-slfo.1.1_2.5
    * libpcp_import1-6.2.0-slfo.1.1_1.3
    * cockpit-debuginfo-321-slfo.1.1_2.5
    * swtpm-0.9.0-slfo.1.1_2.5
    * swtpm-debugsource-0.9.0-slfo.1.1_2.5
    * libpcp3-debuginfo-6.2.0-slfo.1.1_1.3
    * tpm2.0-abrmd-debugsource-3.0.0-slfo.1.1_1.3
    * cockpit-bridge-321-slfo.1.1_2.5
    * tpm2.0-abrmd-debuginfo-3.0.0-slfo.1.1_1.3
    * passt-debugsource-20240906.6b38f07-slfo.1.1_1.6
    * libpcp3-6.2.0-slfo.1.1_1.3
    * cockpit-321-slfo.1.1_2.5
    * libtss2-tcti-tabrmd0-debuginfo-3.0.0-slfo.1.1_1.3
    * swtpm-debuginfo-0.9.0-slfo.1.1_2.5
    * libpcp_import1-debuginfo-6.2.0-slfo.1.1_1.3
    * libtss2-tcti-tabrmd0-3.0.0-slfo.1.1_1.3
    * passt-20240906.6b38f07-slfo.1.1_1.6
    * cockpit-ws-321-slfo.1.1_2.5
    * pcp-debugsource-6.2.0-slfo.1.1_1.3
    * passt-debuginfo-20240906.6b38f07-slfo.1.1_1.6
    * cockpit-debugsource-321-slfo.1.1_2.5
    * tpm2.0-abrmd-3.0.0-slfo.1.1_1.3
    * cockpit-ws-debuginfo-321-slfo.1.1_2.5

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1230961
  * https://bugzilla.suse.com/show_bug.cgi?id=1232655
  * https://bugzilla.suse.com/show_bug.cgi?id=1232753

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20250604/fe3accea/attachment.htm>