Bug Fix Advisory nss_db bug fix update

Advisory: RHBA-2007:1145-5
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2008-05-21
Last updated on: 2008-05-21
Affected Products: Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux Desktop (v. 5 client)
OVAL: N/A

Details

An updated nss_db package that fixes a bug is now available.

The nss_db package is a set of C library extensions which allow Berkeley
Databases to be used as a primary source of aliases, ethers, groups, hosts,
networks, protocols, users, RPCs, services, and shadow passwords. These
databases are used instead of or in addition to the flat files used by
these tools by default.

The makedb utility attempts to look up and apply the correct SELinux
context when creating new files. When SELinux was set to "enforcing" or
"permissive" mode, the makedb utility was unable to determine the correct
SELinux context when creating a new database outside of the "/var/db/"
directory, causing makedb to fail and log the following errors:

makedb: cannot determine file context for '/path/to/database.db'
make: *** [/path/to/database.db] Error 1

Where '/path/to/database.db' is the path to the database which makedb tried
to create.

In these updated packages, if makedb cannot determine the correct SELinux
context for a new database, the context of the directory into which the new
database is being written is applied.

Users of nss_db are advised to upgrade to this updated package, which
resolves this issue.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

Red Hat Enterprise Linux (v. 5 server)

SRPMS:
nss_db-2.2-35.3.src.rpm     eae5189e16238893b141d8c5a28d5fe8
 
IA-32:
nss_db-2.2-35.3.i386.rpm     16bc0dcfb12c148cc34fc59c15843cd1
 
IA-64:
nss_db-2.2-35.3.i386.rpm     16bc0dcfb12c148cc34fc59c15843cd1
nss_db-2.2-35.3.ia64.rpm     838e9cbd621639485fefeb10f65d96c4
 
PPC:
nss_db-2.2-35.3.ppc.rpm     ba11120f4fae18d0f1f07fdd66eab684
nss_db-2.2-35.3.ppc64.rpm     2a85edeb3956fc0cf686c38990695d8a
 
s390x:
nss_db-2.2-35.3.s390.rpm     7d4761ee96478d628b522b60db26604c
nss_db-2.2-35.3.s390x.rpm     1bb77750a3092059db93d0d633ae19ee
 
x86_64:
nss_db-2.2-35.3.i386.rpm     16bc0dcfb12c148cc34fc59c15843cd1
nss_db-2.2-35.3.x86_64.rpm     eaf0f6c705c5768231a21c62f44edac1
 
Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
nss_db-2.2-35.3.src.rpm     eae5189e16238893b141d8c5a28d5fe8
 
IA-32:
nss_db-2.2-35.3.i386.rpm     16bc0dcfb12c148cc34fc59c15843cd1
 
x86_64:
nss_db-2.2-35.3.i386.rpm     16bc0dcfb12c148cc34fc59c15843cd1
nss_db-2.2-35.3.x86_64.rpm     eaf0f6c705c5768231a21c62f44edac1
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

368281 - makedb cannot make db files outside of /var/db


Keywords

label, nss_db, selinux


These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/