{"id":"SUSE-SU-2025:20042-1","aliases":[],"status":"published","title":"Security update for selinux-policy","description":"This update for selinux-policy fixes the following issues:\n\nUpdate to version 20230523+git25.ad22dd7f:\n\n* Backport wtmpdb label change to have the same wtmpdb label\n  as in SL Micro 6.1 (bsc#1229132)\n* Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records\n* Add auth_rw_wtmpdb_login_records to modules\n* Allow xdm_t to read-write to wtmpdb (bsc#1225984)\n* Introduce types for wtmpdb and rw interface\n* Introduce wtmp_file_type attribute\n* Revert \"Add policy for wtmpdb (bsc#1210717)\"\n\nUpdate to version 20230523+git18.f44daf8a:\n\n* Provide type for sysstat lock files (bsc#1228247)\n\nUpdate to version 20230523+git16.0849f54c:\n\n* allow firewalld access to /dev/random and write HW acceleration logs\n  (bsc#1215405, bsc#1227930)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-02-03T08:54:14Z","modified":"2026-03-23T04:50:02Z","fixes":[{"ecosystem":"SUSE:Linux Micro 6.0","package":"selinux-policy","fixed_in":["20230523+git25.ad22dd7f-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"selinux-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230523+git25.ad22dd7f-1.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520042-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210717","tags":["report"]},{"url":"https://bugzilla.suse.com/1215405","tags":["report"]},{"url":"https://bugzilla.suse.com/1225984","tags":["report"]},{"url":"https://bugzilla.suse.com/1227930","tags":["report"]},{"url":"https://bugzilla.suse.com/1228247","tags":["report"]},{"url":"https://bugzilla.suse.com/1229132","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2025:20042-1","title":"Security update for selinux-policy","description":"This update for selinux-policy fixes the following issues:\n\nUpdate to version 20230523+git25.ad22dd7f:\n\n* Backport wtmpdb label change to have the same wtmpdb label\n  as in SL Micro 6.1 (bsc#1229132)\n* Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records\n* Add auth_rw_wtmpdb_login_records to modules\n* Allow xdm_t to read-write to wtmpdb (bsc#1225984)\n* Introduce types for wtmpdb and rw interface\n* Introduce wtmp_file_type attribute\n* Revert \"Add policy for wtmpdb (bsc#1210717)\"\n\nUpdate to version 20230523+git18.f44daf8a:\n\n* Provide type for sysstat lock files (bsc#1228247)\n\nUpdate to version 20230523+git16.0849f54c:\n\n* allow firewalld access to /dev/random and write HW acceleration logs\n  (bsc#1215405, bsc#1227930)\n","status":"published","published":"2025-02-03T08:54:14Z","modified":"2026-03-23T04:50:02.75888Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}