- Issued:
- 2007-04-27
- Updated:
- 2007-04-27
RHBA-2007:0227 - Bug Fix Advisory
Synopsis
policycoreutils bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An updated policycoreutils package that fixes various bugs is now available.
Description
policycoreutils contains the policy core utilities that are required
for basic operation of a SELinux system. These utilities include
load_policy to load policies, setfiles to label filesystems, newrole
to switch roles, and run_init to run /etc/init.d scripts in the proper
context.
When relabeling a file system, the initscripts ran /sbin/fixfiles which
attempted to run /usr/sbin/setfiles. On a system with an NFS mounted /usr,
this happened before /usr was mounted, therefore the relabel failed.
The script /sbin/fixfiles has been changed to execute /sbin/restorecon
when /usr/sbin/setfiles is not available, which fixes the problem.
restorecon -o - prints to stdout. Previously this was creating a file
named "-".
If you added a file path description with an invalid Regular expression in
/etc/selinux/targeted/contexts/files/file_contexts, and then executed
setfiles, it would segfault. This was caused by an invalid free in the setfiles.
Users should upgrade to this updated package, which resolves these issues.
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.
Affected Products
- Red Hat Enterprise Linux Server 4 x86_64
- Red Hat Enterprise Linux Server 4 ia64
- Red Hat Enterprise Linux Server 4 i386
- Red Hat Enterprise Linux Workstation 4 x86_64
- Red Hat Enterprise Linux Workstation 4 ia64
- Red Hat Enterprise Linux Workstation 4 i386
- Red Hat Enterprise Linux Desktop 4 x86_64
- Red Hat Enterprise Linux Desktop 4 i386
- Red Hat Enterprise Linux for IBM z Systems 4 s390x
- Red Hat Enterprise Linux for IBM z Systems 4 s390
- Red Hat Enterprise Linux for Power, big endian 4 ppc
Fixes
- BZ - 184228 - /sbin/fixfiles depends on files in /usr
- BZ - 189330 - setfiles segfaults in case of e.g. *.cgi is specified in context file
- BZ - 207169 - restorecon fails to report errors to stdout
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 4
SRPM | |
---|---|
policycoreutils-1.18.1-4.12.src.rpm | SHA-256: c5bbbd7a642893478e04fff7ac89ec9b2757263e4dce4635b836403e0259f9c7 |
x86_64 | |
policycoreutils-1.18.1-4.12.x86_64.rpm | SHA-256: a059c384fc827effd7879a9937d68cb20029aa37b5efe2e4171c0cd67005e220 |
policycoreutils-1.18.1-4.12.x86_64.rpm | SHA-256: a059c384fc827effd7879a9937d68cb20029aa37b5efe2e4171c0cd67005e220 |
ia64 | |
policycoreutils-1.18.1-4.12.ia64.rpm | SHA-256: 1d446ee38faa1ac7fbd93b0b0462c73e6d289a8cabc51e3462f74c0b66a4e648 |
policycoreutils-1.18.1-4.12.ia64.rpm | SHA-256: 1d446ee38faa1ac7fbd93b0b0462c73e6d289a8cabc51e3462f74c0b66a4e648 |
i386 | |
policycoreutils-1.18.1-4.12.i386.rpm | SHA-256: 02f6e65e7eabf2210d900cffc419ea24a07eafebcc32ce61f82357aac6ccce0c |
policycoreutils-1.18.1-4.12.i386.rpm | SHA-256: 02f6e65e7eabf2210d900cffc419ea24a07eafebcc32ce61f82357aac6ccce0c |
Red Hat Enterprise Linux Workstation 4
SRPM | |
---|---|
policycoreutils-1.18.1-4.12.src.rpm | SHA-256: c5bbbd7a642893478e04fff7ac89ec9b2757263e4dce4635b836403e0259f9c7 |
x86_64 | |
policycoreutils-1.18.1-4.12.x86_64.rpm | SHA-256: a059c384fc827effd7879a9937d68cb20029aa37b5efe2e4171c0cd67005e220 |
ia64 | |
policycoreutils-1.18.1-4.12.ia64.rpm | SHA-256: 1d446ee38faa1ac7fbd93b0b0462c73e6d289a8cabc51e3462f74c0b66a4e648 |
i386 | |
policycoreutils-1.18.1-4.12.i386.rpm | SHA-256: 02f6e65e7eabf2210d900cffc419ea24a07eafebcc32ce61f82357aac6ccce0c |
Red Hat Enterprise Linux Desktop 4
SRPM | |
---|---|
policycoreutils-1.18.1-4.12.src.rpm | SHA-256: c5bbbd7a642893478e04fff7ac89ec9b2757263e4dce4635b836403e0259f9c7 |
x86_64 | |
policycoreutils-1.18.1-4.12.x86_64.rpm | SHA-256: a059c384fc827effd7879a9937d68cb20029aa37b5efe2e4171c0cd67005e220 |
i386 | |
policycoreutils-1.18.1-4.12.i386.rpm | SHA-256: 02f6e65e7eabf2210d900cffc419ea24a07eafebcc32ce61f82357aac6ccce0c |
Red Hat Enterprise Linux for IBM z Systems 4
SRPM | |
---|---|
policycoreutils-1.18.1-4.12.src.rpm | SHA-256: c5bbbd7a642893478e04fff7ac89ec9b2757263e4dce4635b836403e0259f9c7 |
s390x | |
policycoreutils-1.18.1-4.12.s390x.rpm | SHA-256: 20ad72c6a1a369fcf3c57450734f1c32f0ebc73c4c17022724d62d0b5eeb3a68 |
s390 | |
policycoreutils-1.18.1-4.12.s390.rpm | SHA-256: 737d5ee7573286c29808aeff482ca6f29d78c36fcc3c22bc8a75df6d11f5c7b4 |
Red Hat Enterprise Linux for Power, big endian 4
SRPM | |
---|---|
policycoreutils-1.18.1-4.12.src.rpm | SHA-256: c5bbbd7a642893478e04fff7ac89ec9b2757263e4dce4635b836403e0259f9c7 |
ppc | |
policycoreutils-1.18.1-4.12.ppc.rpm | SHA-256: 22a2840e325d523b11afef64c24f04f3cfc212dd11d270e5f084089867560bb7 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.