<div class="container">
<h1>Recommended update for selinux-policy</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2025:20228-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2025-03-04T08:21:45Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1230961">bsc#1230961</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1232655">bsc#1232655</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1232753">bsc#1232753</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Micro 6.1</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that has three fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for selinux-policy fixes the following issues:</p>
<ul>
<li>Update to version 20241031+git6.af97b0a3:</li>
<li>
<p>Allow vhostmd_t list virtqemud pid dirs (bsc#1230961)</p>
</li>
<li>
<p>Update to version 20241031+git4.96add794:</p>
</li>
<li>
<p>Label /run/libvirt/qemu/channel with virtqemud_var_run_t (bsc#1230961)</p>
</li>
<li>
<p>Update macros.selinux-policy to trigger a full relabel on transactional
systems upon module installation. This is rather expensive and will
hopefully be replaced by a more fine grained solution later on (bsc#1232753)</p>
</li>
<li>
<p>Update to version 20241031+git2.f85cbd70:</p>
</li>
<li>Allow virt_dbus_t to connect to virtd_t over unix_stream_socket (bsc#1232655)</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Micro 6.1
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-6.1-25=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Micro 6.1 (noarch)
<ul>
<li>selinux-policy-targeted-20241031+git6.af97b0a3-slfo.1.1_1.1</li>
<li>cockpit-networkmanager-321-slfo.1.1_2.5</li>
<li>cockpit-selinux-321-slfo.1.1_2.5</li>
<li>selinux-policy-20241031+git6.af97b0a3-slfo.1.1_1.1</li>
<li>passt-selinux-20240906.6b38f07-slfo.1.1_1.6</li>
<li>cockpit-storaged-321-slfo.1.1_2.5</li>
<li>container-selinux-2.211.0-slfo.1.1_1.5</li>
<li>pcp-conf-6.2.0-slfo.1.1_1.3</li>
<li>selinux-policy-devel-20241031+git6.af97b0a3-slfo.1.1_1.1</li>
<li>cockpit-system-321-slfo.1.1_2.5</li>
<li>swtpm-selinux-0.9.0-slfo.1.1_2.5</li>
</ul>
</li>
<li>
SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64)
<ul>
<li>pcp-debugsource-6.2.0-slfo.1.1_1.3</li>
<li>swtpm-debugsource-0.9.0-slfo.1.1_2.5</li>
<li>libtss2-tcti-tabrmd0-debuginfo-3.0.0-slfo.1.1_1.3</li>
<li>cockpit-ws-321-slfo.1.1_2.5</li>
<li>cockpit-bridge-321-slfo.1.1_2.5</li>
<li>passt-debuginfo-20240906.6b38f07-slfo.1.1_1.6</li>
<li>libpcp_import1-debuginfo-6.2.0-slfo.1.1_1.3</li>
<li>passt-20240906.6b38f07-slfo.1.1_1.6</li>
<li>cockpit-debuginfo-321-slfo.1.1_2.5</li>
<li>libpcp_import1-6.2.0-slfo.1.1_1.3</li>
<li>passt-debugsource-20240906.6b38f07-slfo.1.1_1.6</li>
<li>libpcp3-debuginfo-6.2.0-slfo.1.1_1.3</li>
<li>tpm2.0-abrmd-debugsource-3.0.0-slfo.1.1_1.3</li>
<li>cockpit-ws-debuginfo-321-slfo.1.1_2.5</li>
<li>libtss2-tcti-tabrmd0-3.0.0-slfo.1.1_1.3</li>
<li>libpcp3-6.2.0-slfo.1.1_1.3</li>
<li>tpm2.0-abrmd-3.0.0-slfo.1.1_1.3</li>
<li>swtpm-0.9.0-slfo.1.1_2.5</li>
<li>cockpit-bridge-debuginfo-321-slfo.1.1_2.5</li>
<li>cockpit-321-slfo.1.1_2.5</li>
<li>swtpm-debuginfo-0.9.0-slfo.1.1_2.5</li>
<li>tpm2.0-abrmd-debuginfo-3.0.0-slfo.1.1_1.3</li>
<li>cockpit-debugsource-321-slfo.1.1_2.5</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1230961">https://bugzilla.suse.com/show_bug.cgi?id=1230961</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1232655">https://bugzilla.suse.com/show_bug.cgi?id=1232655</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1232753">https://bugzilla.suse.com/show_bug.cgi?id=1232753</a>
</li>
</ul>
</div>