Skip to navigation

Bug Fix Advisory libsemanage bug fix update

Advisory: RHBA-2011:1770-2
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2011-12-06
Last updated on: 2011-12-06
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Workstation (v. 6)

Details

Updated libsemanage packages that fix file creation when umask is changed.

The libsemanage library provides an API for the manipulation of SELinux binary
policies. It is used by checkpolicy (the policy compiler) and similar tools, as
well as by programs such as load_policy, which must perform specific
transformations on binary policies (for example, customizing policy boolean
settings).

This update fixes the following bug:

* When running semanage commands while umask is set to 027 (or to a similar
value that restricts a non-priviledged user from reading files created with such
a file-creating mask), semanage changed the permissions of certain files such as
the /etc/selinux/mls/contexts/files/file_contexts file. As a consequence,
non-priviledged processes were not able to read such files and certain commands
such as the restorecon command failed to run on these files. To solve this
problem, libsemanage has been modified to save and clear umask before
libsemanage creates context files and then restore it after the files are
created so the file permissions are readable by non-priviledged processes.
Operations on these context files now work as expected. (BZ#747345)

All users of libsemange are advised to upgrade to these updated packages, which
fix this bug.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
libsemanage-2.0.43-4.1.el6.src.rpm
File outdated by:  RHBA-2013:0465
    MD5: 35b065290c5644f3a1608da34336785f
SHA-256: 925466c1efb5984e432ed3383e6a14bf2f9584bc38eac28e87d7e7163fde7aa5
 
IA-32:
libsemanage-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9f828df4d93fdd0c185abd8441d97569
SHA-256: b3c3938e27d19e024f585a9e1fecce594bd0cf7c5aa0a408e873487a76ef133e
libsemanage-debuginfo-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: ee85ea3c4929a40692a4eb2061d181d1
SHA-256: a747013c6a55087bf462d92594c3705d7caa1df40ade001033d641876ee50428
libsemanage-devel-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b3e9404a0349c9b037cc7aee8dd4755
SHA-256: fa834fc211b73e1e6374a6eb863802bfef1805ada9c8f9c7bedd8cfa43181606
libsemanage-python-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 6ba12032070035083122640f93a912a0
SHA-256: d849b8be067c2bf39950dd0a53f1def8b7fe2a958883c41ab8cfdb648dd13835
libsemanage-static-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: aea2d39ca39f94508bddaa9b8233e0c0
SHA-256: fdae3cd0c6016edcd98ecd0379ce9cb56bcb2c64bd288cf51d51fcedd6c25efb
 
x86_64:
libsemanage-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9f828df4d93fdd0c185abd8441d97569
SHA-256: b3c3938e27d19e024f585a9e1fecce594bd0cf7c5aa0a408e873487a76ef133e
libsemanage-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b69bd15dfdb282200614e8598d83eba
SHA-256: 4164b2c30db16c98f9c2083e35609ba03f5a44b463cb4ebe2ed12ea10f7a33fd
libsemanage-debuginfo-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: ee85ea3c4929a40692a4eb2061d181d1
SHA-256: a747013c6a55087bf462d92594c3705d7caa1df40ade001033d641876ee50428
libsemanage-debuginfo-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 54039f472bc366b207ad192a96584a15
SHA-256: 535dd731a0635747550e1cece507107d398cc75e5cc77955d2019a61012c68eb
libsemanage-devel-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b3e9404a0349c9b037cc7aee8dd4755
SHA-256: fa834fc211b73e1e6374a6eb863802bfef1805ada9c8f9c7bedd8cfa43181606
libsemanage-devel-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 4da577bd7bb155bed280ed02b1a6ae12
SHA-256: 1b936fe741b96562717667f5558be9ff49e069b55198ed5f7c1a1ac9c6f08e21
libsemanage-python-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 810bfc3b66bd728c2f46c80dbbd8caa2
SHA-256: d2651875a97ac7cdf8592c57e823f16bef42159edf132a9975f174d3f795cbfa
libsemanage-static-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 003f909f6f7d2ffa680dc3075ec66aed
SHA-256: edceb0f27d2b8b8b0f8ea65998f9e690043d7911831f7f85b6135c4976dbeb9a
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
libsemanage-2.0.43-4.1.el6.src.rpm
File outdated by:  RHBA-2013:0465
    MD5: 35b065290c5644f3a1608da34336785f
SHA-256: 925466c1efb5984e432ed3383e6a14bf2f9584bc38eac28e87d7e7163fde7aa5
 
x86_64:
libsemanage-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9f828df4d93fdd0c185abd8441d97569
SHA-256: b3c3938e27d19e024f585a9e1fecce594bd0cf7c5aa0a408e873487a76ef133e
libsemanage-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b69bd15dfdb282200614e8598d83eba
SHA-256: 4164b2c30db16c98f9c2083e35609ba03f5a44b463cb4ebe2ed12ea10f7a33fd
libsemanage-debuginfo-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: ee85ea3c4929a40692a4eb2061d181d1
SHA-256: a747013c6a55087bf462d92594c3705d7caa1df40ade001033d641876ee50428
libsemanage-debuginfo-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 54039f472bc366b207ad192a96584a15
SHA-256: 535dd731a0635747550e1cece507107d398cc75e5cc77955d2019a61012c68eb
libsemanage-devel-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b3e9404a0349c9b037cc7aee8dd4755
SHA-256: fa834fc211b73e1e6374a6eb863802bfef1805ada9c8f9c7bedd8cfa43181606
libsemanage-devel-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 4da577bd7bb155bed280ed02b1a6ae12
SHA-256: 1b936fe741b96562717667f5558be9ff49e069b55198ed5f7c1a1ac9c6f08e21
libsemanage-python-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 810bfc3b66bd728c2f46c80dbbd8caa2
SHA-256: d2651875a97ac7cdf8592c57e823f16bef42159edf132a9975f174d3f795cbfa
libsemanage-static-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 003f909f6f7d2ffa680dc3075ec66aed
SHA-256: edceb0f27d2b8b8b0f8ea65998f9e690043d7911831f7f85b6135c4976dbeb9a
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
libsemanage-2.0.43-4.1.el6.src.rpm
File outdated by:  RHBA-2013:0465
    MD5: 35b065290c5644f3a1608da34336785f
SHA-256: 925466c1efb5984e432ed3383e6a14bf2f9584bc38eac28e87d7e7163fde7aa5
 
IA-32:
libsemanage-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9f828df4d93fdd0c185abd8441d97569
SHA-256: b3c3938e27d19e024f585a9e1fecce594bd0cf7c5aa0a408e873487a76ef133e
libsemanage-debuginfo-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: ee85ea3c4929a40692a4eb2061d181d1
SHA-256: a747013c6a55087bf462d92594c3705d7caa1df40ade001033d641876ee50428
libsemanage-devel-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b3e9404a0349c9b037cc7aee8dd4755
SHA-256: fa834fc211b73e1e6374a6eb863802bfef1805ada9c8f9c7bedd8cfa43181606
libsemanage-python-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 6ba12032070035083122640f93a912a0
SHA-256: d849b8be067c2bf39950dd0a53f1def8b7fe2a958883c41ab8cfdb648dd13835
libsemanage-static-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: aea2d39ca39f94508bddaa9b8233e0c0
SHA-256: fdae3cd0c6016edcd98ecd0379ce9cb56bcb2c64bd288cf51d51fcedd6c25efb
 
PPC:
libsemanage-2.0.43-4.1.el6.ppc.rpm
File outdated by:  RHBA-2013:0465
    MD5: 54062aadfe17cf7e55d2547be14b5513
SHA-256: a03022e4da16405cd00ae6560ac3b5451e302b5d42badb00af90cbb8667bcd29
libsemanage-2.0.43-4.1.el6.ppc64.rpm
File outdated by:  RHBA-2013:0465
    MD5: c3866f975210f148d81d2b3e760436e4
SHA-256: c85f5711e20a8994efdcb0454df84c395f55c5b6657c32ffbcfdc545be592f4b
libsemanage-debuginfo-2.0.43-4.1.el6.ppc.rpm
File outdated by:  RHBA-2013:0465
    MD5: 190dbad63977b09d1a8db63e7ae4652b
SHA-256: 7c54d0ea98ecb407c38dc65844c73a3710f14cc7fd420038351243a066ceb6d2
libsemanage-debuginfo-2.0.43-4.1.el6.ppc64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 19cc3cc8af3403a45721838631ca8343
SHA-256: 1950136d874c59ac1376719880efdaad2e0a8d792e2ca92b24c94ae2c6f718d5
libsemanage-devel-2.0.43-4.1.el6.ppc.rpm
File outdated by:  RHBA-2013:0465
    MD5: 8134c9b2c62a0551e38ba2b11ed9bedc
SHA-256: 88500f668ed57281f95dee6fa3eb3c300b35635530478093d8a53bc042e05607
libsemanage-devel-2.0.43-4.1.el6.ppc64.rpm
File outdated by:  RHBA-2013:0465
    MD5: ca1ba05ab0d8c81955acc66d9ca5950d
SHA-256: 1c824438c261f19dbbe67f1594266b76251541427bfcfac8d4064605e5f6ee95
libsemanage-python-2.0.43-4.1.el6.ppc64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 43c58c2c9ae627969b539a142cd11bb9
SHA-256: 7e7b7963102f3bac4e08728a9c93dd77fac5800438663d6fb6a3c746ea46b0b2
libsemanage-static-2.0.43-4.1.el6.ppc64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 559621bb5a8e0477e9aadbc4d6f01142
SHA-256: 43c6cd27f0731a8d4587a4fbc98997c41b25018d960aa2cdf3d5b1857af8e93c
 
s390x:
libsemanage-2.0.43-4.1.el6.s390.rpm
File outdated by:  RHBA-2013:0465
    MD5: 4f48be0b4858cdfd0c302d3677095f69
SHA-256: 8904b326eacab334c14a47b1afe8dbcf068d393b27b0e8721395d83ecc74c2dc
libsemanage-2.0.43-4.1.el6.s390x.rpm
File outdated by:  RHBA-2013:0465
    MD5: 2f5bc881b9f5e734a74fd799d50b5f1c
SHA-256: 9ef7de9a791dab7c1358aca2e7f4a135583d7d433eac3b20e75ce0bda8f3e9d9
libsemanage-debuginfo-2.0.43-4.1.el6.s390.rpm
File outdated by:  RHBA-2013:0465
    MD5: b5b590303fe3b589b64c8f79241f47e9
SHA-256: cd2b93bb17800b4b97f0b44b1c203b9cda44b1c40ec1c922423ba50b06863ace
libsemanage-debuginfo-2.0.43-4.1.el6.s390x.rpm
File outdated by:  RHBA-2013:0465
    MD5: 5ddac040d6f074723e0f661b7c3d4627
SHA-256: 0655226b10fb5a1301eb1db55021df250c174a4269c1b7d4dcc9999b1624bb2f
libsemanage-devel-2.0.43-4.1.el6.s390.rpm
File outdated by:  RHBA-2013:0465
    MD5: 698ed247ba2dd0bb0c039a8e3767e3ed
SHA-256: 8f3a63a55e1bd600863915f2b126864a5a07766f6ddb006c69f2aefcc71f3696
libsemanage-devel-2.0.43-4.1.el6.s390x.rpm
File outdated by:  RHBA-2013:0465
    MD5: 485b71c7a111fce9eb7f19b20654b456
SHA-256: b55ff639d5ab18b4707c1f2c8fb83adc065b5ba6dc9cff7a5186f9a66049eb36
libsemanage-python-2.0.43-4.1.el6.s390x.rpm
File outdated by:  RHBA-2013:0465
    MD5: 1dff6fe9f8802f8d6f15c0494c480b44
SHA-256: 1968153251c42f344b6161ca0d2acc56f8859b1532cf2e7c96b98bf681d11e84
libsemanage-static-2.0.43-4.1.el6.s390x.rpm
File outdated by:  RHBA-2013:0465
    MD5: 4e5579fcc45a71c2e84b1040c5ab4500
SHA-256: d64426d3c16dba56aa910f04cfebe8249089c0f7a560e031b4012c8798eee533
 
x86_64:
libsemanage-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9f828df4d93fdd0c185abd8441d97569
SHA-256: b3c3938e27d19e024f585a9e1fecce594bd0cf7c5aa0a408e873487a76ef133e
libsemanage-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b69bd15dfdb282200614e8598d83eba
SHA-256: 4164b2c30db16c98f9c2083e35609ba03f5a44b463cb4ebe2ed12ea10f7a33fd
libsemanage-debuginfo-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: ee85ea3c4929a40692a4eb2061d181d1
SHA-256: a747013c6a55087bf462d92594c3705d7caa1df40ade001033d641876ee50428
libsemanage-debuginfo-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 54039f472bc366b207ad192a96584a15
SHA-256: 535dd731a0635747550e1cece507107d398cc75e5cc77955d2019a61012c68eb
libsemanage-devel-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b3e9404a0349c9b037cc7aee8dd4755
SHA-256: fa834fc211b73e1e6374a6eb863802bfef1805ada9c8f9c7bedd8cfa43181606
libsemanage-devel-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 4da577bd7bb155bed280ed02b1a6ae12
SHA-256: 1b936fe741b96562717667f5558be9ff49e069b55198ed5f7c1a1ac9c6f08e21
libsemanage-python-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 810bfc3b66bd728c2f46c80dbbd8caa2
SHA-256: d2651875a97ac7cdf8592c57e823f16bef42159edf132a9975f174d3f795cbfa
libsemanage-static-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 003f909f6f7d2ffa680dc3075ec66aed
SHA-256: edceb0f27d2b8b8b0f8ea65998f9e690043d7911831f7f85b6135c4976dbeb9a
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
libsemanage-2.0.43-4.1.el6.src.rpm
File outdated by:  RHBA-2013:0465
    MD5: 35b065290c5644f3a1608da34336785f
SHA-256: 925466c1efb5984e432ed3383e6a14bf2f9584bc38eac28e87d7e7163fde7aa5
 
IA-32:
libsemanage-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9f828df4d93fdd0c185abd8441d97569
SHA-256: b3c3938e27d19e024f585a9e1fecce594bd0cf7c5aa0a408e873487a76ef133e
libsemanage-debuginfo-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: ee85ea3c4929a40692a4eb2061d181d1
SHA-256: a747013c6a55087bf462d92594c3705d7caa1df40ade001033d641876ee50428
libsemanage-devel-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b3e9404a0349c9b037cc7aee8dd4755
SHA-256: fa834fc211b73e1e6374a6eb863802bfef1805ada9c8f9c7bedd8cfa43181606
libsemanage-python-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 6ba12032070035083122640f93a912a0
SHA-256: d849b8be067c2bf39950dd0a53f1def8b7fe2a958883c41ab8cfdb648dd13835
libsemanage-static-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: aea2d39ca39f94508bddaa9b8233e0c0
SHA-256: fdae3cd0c6016edcd98ecd0379ce9cb56bcb2c64bd288cf51d51fcedd6c25efb
 
x86_64:
libsemanage-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9f828df4d93fdd0c185abd8441d97569
SHA-256: b3c3938e27d19e024f585a9e1fecce594bd0cf7c5aa0a408e873487a76ef133e
libsemanage-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b69bd15dfdb282200614e8598d83eba
SHA-256: 4164b2c30db16c98f9c2083e35609ba03f5a44b463cb4ebe2ed12ea10f7a33fd
libsemanage-debuginfo-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: ee85ea3c4929a40692a4eb2061d181d1
SHA-256: a747013c6a55087bf462d92594c3705d7caa1df40ade001033d641876ee50428
libsemanage-debuginfo-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 54039f472bc366b207ad192a96584a15
SHA-256: 535dd731a0635747550e1cece507107d398cc75e5cc77955d2019a61012c68eb
libsemanage-devel-2.0.43-4.1.el6.i686.rpm
File outdated by:  RHBA-2013:0465
    MD5: 9b3e9404a0349c9b037cc7aee8dd4755
SHA-256: fa834fc211b73e1e6374a6eb863802bfef1805ada9c8f9c7bedd8cfa43181606
libsemanage-devel-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 4da577bd7bb155bed280ed02b1a6ae12
SHA-256: 1b936fe741b96562717667f5558be9ff49e069b55198ed5f7c1a1ac9c6f08e21
libsemanage-python-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 810bfc3b66bd728c2f46c80dbbd8caa2
SHA-256: d2651875a97ac7cdf8592c57e823f16bef42159edf132a9975f174d3f795cbfa
libsemanage-static-2.0.43-4.1.el6.x86_64.rpm
File outdated by:  RHBA-2013:0465
    MD5: 003f909f6f7d2ffa680dc3075ec66aed
SHA-256: edceb0f27d2b8b8b0f8ea65998f9e690043d7911831f7f85b6135c4976dbeb9a
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

747345 - semanage is changing permissions of /etc/selinux files



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/