[Apollo] Advisories Statistics light light Login

RLBA-2026:76625

Bug Fix Mirrored from RHBA-2026:76625
Issued at: 2026-10-06
Updated at: 2026-10-12

Advisory content derived from Red Hat RHBA-2026:76625, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

selinux-policy bug fix and enhancement update



Description

The selinux-policy packages contain the rules that govern how confined processes run on the system.

Bug Fix(es) and Enhancement(s):

* coreos_boot_mount_generator_t lacks permissions to read boot metadata and write systemd units. [rhel-10.2.z] (JIRA:Rocky Linux-193859)

* systemd_generic_generator_t lacks execution and remount rights for ostree [rhel-10.2.z] (JIRA:Rocky Linux-193860)



Affected products

Rocky Linux 10 riscv64

Fixes



CVEs

Affected packages

Rocky Linux 10 riscv64 - AppStream

selinux-policy-devel-0:42.1.18-4.el10_2.4.noarch.rpm

Rocky Linux 10 riscv64 - BaseOS

selinux-policy-0:42.1.18-4.el10_2.4.noarch.rpm selinux-policy-sandbox-0:42.1.18-4.el10_2.4.noarch.rpm selinux-policy-doc-0:42.1.18-4.el10_2.4.noarch.rpm selinux-policy-mls-0:42.1.18-4.el10_2.4.noarch.rpm selinux-policy-0:42.1.18-4.el10_2.4.src.rpm selinux-policy-targeted-0:42.1.18-4.el10_2.4.noarch.rpm

Rocky Linux 10 riscv64 - CRB

selinux-policy-targeted-extra-0:42.1.18-4.el10_2.4.noarch.rpm selinux-policy-extra-0:42.1.18-4.el10_2.4.noarch.rpm selinux-policy-mls-extra-0:42.1.18-4.el10_2.4.noarch.rpm