selinux-policy - SELinux policy configuration

Property Value
Distribution Fedora 28
Repository Fedora Updates x86_64
Package filename selinux-policy-3.14.1-54.fc28.noarch.rpm
Package name selinux-policy
Package version 3.14.1
Package release 54.fc28
Package architecture noarch
Package type rpm
Category System Environment/Base
Homepage %{git0-base}
License GPLv2+
Maintainer -
Download size 584.26 KB
Installed size 24.33 KB
SELinux Base package for SELinux Reference Policy - modular.
Based off of reference policy: Checked out revision  2.20091117


Package Version Architecture Repository
selinux-policy-3.14.1-54.fc28.noarch.rpm 3.14.1 noarch Fedora Updates
selinux-policy-3.14.1-21.fc28.noarch.rpm 3.14.1 noarch Fedora
selinux-policy-3.14.1-21.fc28.noarch.rpm 3.14.1 noarch Fedora
selinux-policy - - -


Name Value
/bin/awk -
/usr/bin/sha512sum -
policycoreutils >= 2.7-18
rpm-plugin-selinux -


Name Value
config(selinux-policy) = 3.14.1-54.fc28
selinux-policy = 3.14.1-54.fc28


Type URL
Binary Package selinux-policy-3.14.1-54.fc28.noarch.rpm
Source Package selinux-policy-3.14.1-54.fc28.src.rpm

Install Howto

Install selinux-policy rpm package:

# dnf install selinux-policy




2019-02-12 - Lukas Vrabec <> - 3.14.1-54
- Allow dovecot_t to connect to MySQL UNIX socket
2019-02-02 - Lukas Vrabec <> - 3.14.1-53
- Update kdump_manage_crash() interface to allow also manage dirs by caller domain Resolves: rhbz#1491585
- Add multiple interfaces for vpnc interface file
- Allow openvpn_t domain to manage vpnc pidfiles BZ(1667572)
- Label /var/run/fcgiwrap dir as httpd_var_run_t BZ(1655702)
- In MongoDB 3.4.16, 3.6.6, 4.0.0 and later, mongod reads netstat info from proc and stores it in its diagnostic system (FTDC). See: This means that we need to adjust the policy so that the mongod process is allowed to open and read /proc/net/netstat, which typically has symlinks (e.g. /proc/net/snmp).
- Allow init_t domain access to USB ttys BZ(1663620)
2019-01-17 - Lukas Vrabec <> - 3.14.1-52
- Allow arpwatch send e-mail notifications BZ(1657327)
- Allow staff_t domain to read read_binfmt_misc filesystem
- Add interface fs_read_binfmt_misc()
2019-01-11 - Lukas Vrabec <> - 3.14.1-51
- Dontaudit ptrace all domains for blueman_t BZ(1653671)
- Change label of /usr/libexec/lm_sensors/sensord-service-wrapper from lsmd_exec_t to sensord_exec_t BZ(1662922)
- Allow hddtemp_t domain to read nvme block devices BZ(1663579)
- Add dac_override capability to spamd_t domain BZ(1645667)
- Allow pcp_pmlogger_t to mount tracefs_t filesystem BZ(1662983)
- Allow pcp_pmlogger_t domain to read al sysctls BZ(1662441)
- Dontaudit certwatch_t domain to write to all mountpoints BZ(1655357)
- Add dac_override capability for snapperd_t domain BZ(1619356)
- Allow pcp_pmlogger_t domain to send signals to rpm_script_t BZ(1651030)
- Add new interface: rpm_script_signal()
- Label for /home/$USER/.config/chromium should be chrome_sandbox_home_t instead of  mozilla_home_t. BZ(1650053)
- Allow pcp_pmie_t domain to dbus chat with systemd_resolved_t domain BZ(1650997)
- Allow staff_t domain to read read_binfmt_misc filesystem
- Add interface fs_read_binfmt_misc()
- Revert "Allow staff_t to rw binfmt_misc_fs_t files BZ(1658975)"
- Make workin: systemd-run --system --pty bash BZ(1647162)
- Allow ipsec_t domain dbus chat with systemd_resolved_t BZ(1662443)
- Allow staff_t to rw binfmt_misc_fs_t files BZ(1658975)

See Also

Package Description
selinux-policy-devel-3.14.1-54.fc28.noarch.rpm SELinux policy devel
selinux-policy-doc-3.14.1-54.fc28.noarch.rpm SELinux policy documentation
selinux-policy-minimum-3.14.1-54.fc28.noarch.rpm SELinux minimum base policy
selinux-policy-mls-3.14.1-54.fc28.noarch.rpm SELinux mls base policy
selinux-policy-sandbox-3.14.1-54.fc28.noarch.rpm SELinux policy sandbox
selinux-policy-targeted-3.14.1-54.fc28.noarch.rpm SELinux targeted base policy
sendmail-8.15.2-27.fc28.x86_64.rpm A widely used Mail Transport Agent (MTA)
sendmail-cf-8.15.2-27.fc28.noarch.rpm The files needed to reconfigure Sendmail
sendmail-doc-8.15.2-27.fc28.noarch.rpm Documentation about the Sendmail Mail Transport Agent program
sendmail-milter-8.15.2-27.fc28.i686.rpm The sendmail milter library
sendmail-milter-8.15.2-27.fc28.x86_64.rpm The sendmail milter library
sendmail-milter-devel-8.15.2-27.fc28.i686.rpm Development files for the sendmail milter library
sendmail-milter-devel-8.15.2-27.fc28.x86_64.rpm Development files for the sendmail milter library
sequeler-0.6.5-1.fc28.x86_64.rpm SQL Client built in Vala
sequence-library-1.0.3-1.fc28.noarch.rpm Textual diff and merge library