Fedora 24 Update: selinux-policy-3.13.1-179.fc24

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-8f142bb969
2016-03-23 16:54:07.152634
--------------------------------------------------------------------------------

Name        : selinux-policy
Product     : Fedora 24
Version     : 3.13.1
Release     : 179.fc24
URL         : http://github.com/TresysTechnology/refpolicy/wiki
Summary     : SELinux policy configuration
Description :
SELinux Base package for SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision  2.20091117

--------------------------------------------------------------------------------
Update Information:

More info: http://koji.fedoraproject.org/koji/buildinfo?buildID=745646  ----
More info: http://koji.fedoraproject.org/koji/buildinfo?buildID=743665
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1314968 - SELinux is preventing systemd-gpt-aut from 'ioctl' accesses on the blk_file /dev/nvme0n1.
        https://bugzilla.redhat.com/show_bug.cgi?id=1314968
  [ 2 ] Bug #1316717 - SELinux is preventing gpg2 from 'write' accesses on the directory /root.
        https://bugzilla.redhat.com/show_bug.cgi?id=1316717
  [ 3 ] Bug #1317173 - SELinux is preventing systemd-gpt-aut from 'read' accesses on the blk_file sda.
        https://bugzilla.redhat.com/show_bug.cgi?id=1317173
  [ 4 ] Bug #1317174 - SELinux is preventing systemd-gpt-aut from 'open' accesses on the blk_file /dev/sda.
        https://bugzilla.redhat.com/show_bug.cgi?id=1317174
  [ 5 ] Bug #1317175 - SELinux is preventing systemd-gpt-aut from 'getattr' accesses on the blk_file /dev/sda.
        https://bugzilla.redhat.com/show_bug.cgi?id=1317175
  [ 6 ] Bug #1317176 - SELinux is preventing systemd-gpt-aut from 'ioctl' accesses on the blk_file /dev/sda.
        https://bugzilla.redhat.com/show_bug.cgi?id=1317176
  [ 7 ] Bug #1191044 - SELinux is preventing /usr/sbin/collectd from write access on the sock_file pdns.controlsocket
        https://bugzilla.redhat.com/show_bug.cgi?id=1191044
  [ 8 ] Bug #1243568 - Apache suEXEC and SELinux
        https://bugzilla.redhat.com/show_bug.cgi?id=1243568
  [ 9 ] Bug #1255307 - sanlk-resetd runs as unconfined_service_t
        https://bugzilla.redhat.com/show_bug.cgi?id=1255307
  [ 10 ] Bug #1260272 - SELinux is preventing named from 'read' accesses on the file ip_local_port_range.
        https://bugzilla.redhat.com/show_bug.cgi?id=1260272
  [ 11 ] Bug #1261854 - /usr/share/nginx/html should be httpd_sys_content_t
        https://bugzilla.redhat.com/show_bug.cgi?id=1261854
  [ 12 ] Bug #1272846 - Docker policy defines rules for distro types.
        https://bugzilla.redhat.com/show_bug.cgi?id=1272846
  [ 13 ] Bug #1276251 - SELinux is preventing spice-vdagentd from 'getattr' accesses on the filesystem /sys/fs/cgroup.
        https://bugzilla.redhat.com/show_bug.cgi?id=1276251
  [ 14 ] Bug #1287739 - lvmlockd runs as unconfined_service_t
        https://bugzilla.redhat.com/show_bug.cgi?id=1287739
  [ 15 ] Bug #1291940 - SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.
        https://bugzilla.redhat.com/show_bug.cgi?id=1291940
  [ 16 ] Bug #1299106 - SELinux is preventing systemd from 'getattr' accesses on the file /etc/ssh/ssh_host_rsa_key.
        https://bugzilla.redhat.com/show_bug.cgi?id=1299106
  [ 17 ] Bug #1299474 - New SELinux policy for fwupd daemon.
        https://bugzilla.redhat.com/show_bug.cgi?id=1299474
  [ 18 ] Bug #1300334 - SELinux is preventing abrt-hook-ccpp from 'getattr' accesses on the file file.
        https://bugzilla.redhat.com/show_bug.cgi?id=1300334
  [ 19 ] Bug #1300339 - SELinux is preventing fwupd from 'getattr' accesses on the filesystem /sys/firmware/efi/efivars.
        https://bugzilla.redhat.com/show_bug.cgi?id=1300339
  [ 20 ] Bug #1303533 - SELinux is preventing fwupd from 'open' accesses on the file /etc/pki/fwupd-metadata/GPG-KEY-Linux-Vendor-Firmware-Service.
        https://bugzilla.redhat.com/show_bug.cgi?id=1303533
  [ 21 ] Bug #1315829 - AVC denial: systemd-resolve, unable to create /run/systemd/resolve/resolv.conf: Permission denied
        https://bugzilla.redhat.com/show_bug.cgi?id=1315829
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use
su -c 'yum update selinux-policy' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------