- Issued:
- 2010-03-30
- Updated:
- 2010-03-30
RHBA-2010:0208 - Bug Fix Advisory
Synopsis
policycoreutils bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated policycoreutils packages that fix several bugs are now available.
Description
The policycoreutils packages contain the core utilities that are
required for the basic operation of a Security-Enhanced Linux (SELinux)
system and its policies. These utilities include load_policy to load
policies, setfiles to label file systems, newrole to switch roles, and
run_init to run /etc/init.d/ scripts in their proper context.
These updated packages fix the following bugs:
- executing the semanage command with the translation option caused
denials and undesired mode changes to the setrans.conf file. This update
removes the translation functionality from the semanage command.
(BZ#460970)
- the semanage command allowed an invalid network port number to be
passed to it. This update adds proper verification of the port number
option to semanage. Any invalid port number is now rejected. (BZ#505521)
- the use of the #!/usr/bin/env python option at the top of python
scripts is being phased out, in favour of the #!/usr/bin/python option.
There was one instance of the former option in a policycoreutils python
script. This fix replaces this line with the latter option in this file.
(BZ#521298)
- the semanage command did not support the node option being passed to
it and resulted in an error when it was used. This fix adds the node
option to the semanage command. This option allows you to list, add and
modify nodes in SELinux policy. (BZ#527487)
Users of policycoreutils are advised to upgrade to these updated
packages, which resolve these issues.
Solution
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259
Affected Products
- Red Hat Enterprise Linux Server 5 x86_64
- Red Hat Enterprise Linux Server 5 ia64
- Red Hat Enterprise Linux Server 5 i386
- Red Hat Enterprise Linux Workstation 5 x86_64
- Red Hat Enterprise Linux Workstation 5 i386
- Red Hat Enterprise Linux Desktop 5 x86_64
- Red Hat Enterprise Linux Desktop 5 i386
- Red Hat Enterprise Linux for IBM z Systems 5 s390x
- Red Hat Enterprise Linux for Power, big endian 5 ppc
- Red Hat Enterprise Linux Server from RHUI 5 x86_64
- Red Hat Enterprise Linux Server from RHUI 5 i386
Fixes
- BZ - 460970 - "semanage translation -a" causes denials; setrans.conf mode changed
- BZ - 505521 - semanage port add/delete problems
- BZ - 521298 - Fix instances of #!/usr/bin/env python in policycoreutils-gui
- BZ - 527487 - semanage command does not support -node option
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 5
SRPM | |
---|---|
policycoreutils-1.33.12-14.8.el5.src.rpm | SHA-256: 22416feade8b51463d316ade396867621ac6eeef4f8ea7a534d06caabf7dfe70 |
x86_64 | |
policycoreutils-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 82b36c9e6ce777036c55d7593e4503cea8d00ef32d56711294c13a21b324267d |
policycoreutils-gui-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 31b61019d80bc781b419d0a3f191998e570a1ed312f8175fa48fd1f920e7ffa2 |
policycoreutils-newrole-1.33.12-14.8.el5.x86_64.rpm | SHA-256: e8707f8036751d0a70902426e9534063315988e25010c162f2cb41b8a430a8f7 |
ia64 | |
policycoreutils-1.33.12-14.8.el5.ia64.rpm | SHA-256: 0b4b660b3ca07e68b1788d02bcdd1acd4951783fc5118838444f99244240e382 |
policycoreutils-gui-1.33.12-14.8.el5.ia64.rpm | SHA-256: a807778a80c0846260440f6a9d43abf67808b843e9476468ee8a3eba35dd5b75 |
policycoreutils-newrole-1.33.12-14.8.el5.ia64.rpm | SHA-256: 363ef4bdbdffeaeb81a649be2c81e9a891a65ea56f7bd02e633dab3c5777ae50 |
i386 | |
policycoreutils-1.33.12-14.8.el5.i386.rpm | SHA-256: 7afc22c1652656a5860ae55f4e821171b35d3cb9358d2011135317a6707f3f68 |
policycoreutils-gui-1.33.12-14.8.el5.i386.rpm | SHA-256: 37eccbd2cbf69b0ba0a34c6c3a520bd2e1a36809aca3cadbd4a637fccf5665cd |
policycoreutils-newrole-1.33.12-14.8.el5.i386.rpm | SHA-256: 888ad42089d00b0c2a130ad1c6912c51032328e9aa63d29f2df759d5d8d9992a |
Red Hat Enterprise Linux Workstation 5
SRPM | |
---|---|
policycoreutils-1.33.12-14.8.el5.src.rpm | SHA-256: 22416feade8b51463d316ade396867621ac6eeef4f8ea7a534d06caabf7dfe70 |
x86_64 | |
policycoreutils-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 82b36c9e6ce777036c55d7593e4503cea8d00ef32d56711294c13a21b324267d |
policycoreutils-gui-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 31b61019d80bc781b419d0a3f191998e570a1ed312f8175fa48fd1f920e7ffa2 |
policycoreutils-newrole-1.33.12-14.8.el5.x86_64.rpm | SHA-256: e8707f8036751d0a70902426e9534063315988e25010c162f2cb41b8a430a8f7 |
i386 | |
policycoreutils-1.33.12-14.8.el5.i386.rpm | SHA-256: 7afc22c1652656a5860ae55f4e821171b35d3cb9358d2011135317a6707f3f68 |
policycoreutils-gui-1.33.12-14.8.el5.i386.rpm | SHA-256: 37eccbd2cbf69b0ba0a34c6c3a520bd2e1a36809aca3cadbd4a637fccf5665cd |
policycoreutils-newrole-1.33.12-14.8.el5.i386.rpm | SHA-256: 888ad42089d00b0c2a130ad1c6912c51032328e9aa63d29f2df759d5d8d9992a |
Red Hat Enterprise Linux Desktop 5
SRPM | |
---|---|
policycoreutils-1.33.12-14.8.el5.src.rpm | SHA-256: 22416feade8b51463d316ade396867621ac6eeef4f8ea7a534d06caabf7dfe70 |
x86_64 | |
policycoreutils-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 82b36c9e6ce777036c55d7593e4503cea8d00ef32d56711294c13a21b324267d |
policycoreutils-gui-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 31b61019d80bc781b419d0a3f191998e570a1ed312f8175fa48fd1f920e7ffa2 |
policycoreutils-newrole-1.33.12-14.8.el5.x86_64.rpm | SHA-256: e8707f8036751d0a70902426e9534063315988e25010c162f2cb41b8a430a8f7 |
i386 | |
policycoreutils-1.33.12-14.8.el5.i386.rpm | SHA-256: 7afc22c1652656a5860ae55f4e821171b35d3cb9358d2011135317a6707f3f68 |
policycoreutils-gui-1.33.12-14.8.el5.i386.rpm | SHA-256: 37eccbd2cbf69b0ba0a34c6c3a520bd2e1a36809aca3cadbd4a637fccf5665cd |
policycoreutils-newrole-1.33.12-14.8.el5.i386.rpm | SHA-256: 888ad42089d00b0c2a130ad1c6912c51032328e9aa63d29f2df759d5d8d9992a |
Red Hat Enterprise Linux for IBM z Systems 5
SRPM | |
---|---|
policycoreutils-1.33.12-14.8.el5.src.rpm | SHA-256: 22416feade8b51463d316ade396867621ac6eeef4f8ea7a534d06caabf7dfe70 |
s390x | |
policycoreutils-1.33.12-14.8.el5.s390x.rpm | SHA-256: aa9dcf612c3c7a1f279a22a6f2d2d4b226e02b912b8d9d6279ee2cea95fd4499 |
policycoreutils-gui-1.33.12-14.8.el5.s390x.rpm | SHA-256: 0984eb9bec6dc3371c476a74318e45cfca83b0db9a0fa86091f42255bca552e6 |
policycoreutils-newrole-1.33.12-14.8.el5.s390x.rpm | SHA-256: 616f6dc9ccad576a3077ee76970674c17500a5842b27306d05bec92e5a3cfb42 |
Red Hat Enterprise Linux for Power, big endian 5
SRPM | |
---|---|
policycoreutils-1.33.12-14.8.el5.src.rpm | SHA-256: 22416feade8b51463d316ade396867621ac6eeef4f8ea7a534d06caabf7dfe70 |
ppc | |
policycoreutils-1.33.12-14.8.el5.ppc.rpm | SHA-256: 742a989bca9fe08e679c73ada77a2dfc9623d40763b19e666264ab940e213e80 |
policycoreutils-gui-1.33.12-14.8.el5.ppc.rpm | SHA-256: 2059405117521248777ee2198c4a7680545cfc2d0fcc6f4f1df9a10fca502cae |
policycoreutils-newrole-1.33.12-14.8.el5.ppc.rpm | SHA-256: 751aa8518faeb78a319fbaf72a17132ba212080224939b569549a6ccc068b1dc |
Red Hat Enterprise Linux Server from RHUI 5
SRPM | |
---|---|
policycoreutils-1.33.12-14.8.el5.src.rpm | SHA-256: 22416feade8b51463d316ade396867621ac6eeef4f8ea7a534d06caabf7dfe70 |
x86_64 | |
policycoreutils-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 82b36c9e6ce777036c55d7593e4503cea8d00ef32d56711294c13a21b324267d |
policycoreutils-gui-1.33.12-14.8.el5.x86_64.rpm | SHA-256: 31b61019d80bc781b419d0a3f191998e570a1ed312f8175fa48fd1f920e7ffa2 |
policycoreutils-newrole-1.33.12-14.8.el5.x86_64.rpm | SHA-256: e8707f8036751d0a70902426e9534063315988e25010c162f2cb41b8a430a8f7 |
i386 | |
policycoreutils-1.33.12-14.8.el5.i386.rpm | SHA-256: 7afc22c1652656a5860ae55f4e821171b35d3cb9358d2011135317a6707f3f68 |
policycoreutils-gui-1.33.12-14.8.el5.i386.rpm | SHA-256: 37eccbd2cbf69b0ba0a34c6c3a520bd2e1a36809aca3cadbd4a637fccf5665cd |
policycoreutils-newrole-1.33.12-14.8.el5.i386.rpm | SHA-256: 888ad42089d00b0c2a130ad1c6912c51032328e9aa63d29f2df759d5d8d9992a |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.