Bug Fix Advisory selinux-policy bug fix update

Advisory: RHBA-2017:0504-1
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2017-03-14
Last updated on: 2017-03-14
Affected Products: Red Hat Enterprise Linux HPC Node EUS (v. 7.2)
Red Hat Enterprise Linux Server AUS (v. 7.2)
Red Hat Enterprise Linux Server EUS (v. 7.2)
Red Hat Enterprise Linux Server TUS (v. 7.2)

Details

Updated selinux-policy packages that fix one bug are now available for Red Hat
Enterprise Linux 7.2 Extended Update Support.

The selinux-policy packages contain the rules that govern how confined processes
run on the system.

This update fixes the following bug:

* Previously, an SELinux rule allowing the System Security Services Daemon
(SSSD) to update the /etc/krb5.keytab file was missing. Consequently, when
running SELinux in enforcing mode, the adcli tool was not able to write the
latest host principal to /etc/krb5.keytab. The missing policy rule has been
added, and SSSD adcli no longer fails to update /etc/krb5.keytab when running
SELinux in enforcing mode. (BZ#1422185)

Users of selinux-policy are advised to upgrade to these updated packages, which
fix this bug.


Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Updated packages

Red Hat Enterprise Linux HPC Node EUS (v. 7.2)

SRPMS:
selinux-policy-3.13.1-60.el7_2.12.src.rpm
File outdated by:  RHBA-2017:0511
    MD5: f77014d77fe9701a45c2a3241e6fac58
SHA-256: 17fe5e8b0b14972aee5cf68d50335e3ad8bea2497dff334f23b20bb4dea03cd8
 
x86_64:
selinux-policy-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 0d49a5c15d95d22392771dba12d1cac5
SHA-256: b3a77f8280186bead0b4f4607d25537a5e6f6209d5b36b6e58f1600b1d49455d
selinux-policy-devel-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2936864429b5e7a08beffa4fda14aace
SHA-256: 71ca099ca01f79796b03484608f7697a234f88ea01a6484f7823e2dc5f11c28f
selinux-policy-doc-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2201dcf7cbf4ab5b6417dc42d530e564
SHA-256: a1983c398b1a9c82a51f255044b253e075e8416a6261a8cd24f01414ae5f3fd7
selinux-policy-minimum-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 8a31a7225663397a3ff5fd571249d8d5
SHA-256: d3c1f912fe2ad2959f5dbfc783b8b95f7c5fd70032598f0f6f87d9f27912d005
selinux-policy-mls-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 972156c09f7f42d45d27319d5744cd20
SHA-256: e591fb9d10292dde4dd25a3e438c31c10e99ca735cbb42dc3423f7be96df62f6
selinux-policy-sandbox-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: c9f0222f8ab66831c7d8a67886cf6252
SHA-256: f836c0058028ea095487f051054dc711ff5ae6f761a82a4c8b81f27957611de6
selinux-policy-targeted-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 61a1abb2d9e8300dbd4d092d52ae569b
SHA-256: 71205ed360ff8156dfad70d8f9701df3f2895e06b23dd5316456bd3c670718ec
 
Red Hat Enterprise Linux Server AUS (v. 7.2)

SRPMS:
selinux-policy-3.13.1-60.el7_2.12.src.rpm
File outdated by:  RHBA-2017:0511
    MD5: f77014d77fe9701a45c2a3241e6fac58
SHA-256: 17fe5e8b0b14972aee5cf68d50335e3ad8bea2497dff334f23b20bb4dea03cd8
 
x86_64:
selinux-policy-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 0d49a5c15d95d22392771dba12d1cac5
SHA-256: b3a77f8280186bead0b4f4607d25537a5e6f6209d5b36b6e58f1600b1d49455d
selinux-policy-devel-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2936864429b5e7a08beffa4fda14aace
SHA-256: 71ca099ca01f79796b03484608f7697a234f88ea01a6484f7823e2dc5f11c28f
selinux-policy-doc-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2201dcf7cbf4ab5b6417dc42d530e564
SHA-256: a1983c398b1a9c82a51f255044b253e075e8416a6261a8cd24f01414ae5f3fd7
selinux-policy-minimum-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 8a31a7225663397a3ff5fd571249d8d5
SHA-256: d3c1f912fe2ad2959f5dbfc783b8b95f7c5fd70032598f0f6f87d9f27912d005
selinux-policy-mls-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 972156c09f7f42d45d27319d5744cd20
SHA-256: e591fb9d10292dde4dd25a3e438c31c10e99ca735cbb42dc3423f7be96df62f6
selinux-policy-sandbox-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: c9f0222f8ab66831c7d8a67886cf6252
SHA-256: f836c0058028ea095487f051054dc711ff5ae6f761a82a4c8b81f27957611de6
selinux-policy-targeted-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 61a1abb2d9e8300dbd4d092d52ae569b
SHA-256: 71205ed360ff8156dfad70d8f9701df3f2895e06b23dd5316456bd3c670718ec
 
Red Hat Enterprise Linux Server EUS (v. 7.2)

SRPMS:
selinux-policy-3.13.1-60.el7_2.12.src.rpm
File outdated by:  RHBA-2017:0511
    MD5: f77014d77fe9701a45c2a3241e6fac58
SHA-256: 17fe5e8b0b14972aee5cf68d50335e3ad8bea2497dff334f23b20bb4dea03cd8
 
PPC:
selinux-policy-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 0d49a5c15d95d22392771dba12d1cac5
SHA-256: b3a77f8280186bead0b4f4607d25537a5e6f6209d5b36b6e58f1600b1d49455d
selinux-policy-devel-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2936864429b5e7a08beffa4fda14aace
SHA-256: 71ca099ca01f79796b03484608f7697a234f88ea01a6484f7823e2dc5f11c28f
selinux-policy-doc-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2201dcf7cbf4ab5b6417dc42d530e564
SHA-256: a1983c398b1a9c82a51f255044b253e075e8416a6261a8cd24f01414ae5f3fd7
selinux-policy-minimum-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 8a31a7225663397a3ff5fd571249d8d5
SHA-256: d3c1f912fe2ad2959f5dbfc783b8b95f7c5fd70032598f0f6f87d9f27912d005
selinux-policy-mls-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 972156c09f7f42d45d27319d5744cd20
SHA-256: e591fb9d10292dde4dd25a3e438c31c10e99ca735cbb42dc3423f7be96df62f6
selinux-policy-sandbox-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: c9f0222f8ab66831c7d8a67886cf6252
SHA-256: f836c0058028ea095487f051054dc711ff5ae6f761a82a4c8b81f27957611de6
selinux-policy-targeted-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 61a1abb2d9e8300dbd4d092d52ae569b
SHA-256: 71205ed360ff8156dfad70d8f9701df3f2895e06b23dd5316456bd3c670718ec
 
PPC64LE:
selinux-policy-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 0d49a5c15d95d22392771dba12d1cac5
SHA-256: b3a77f8280186bead0b4f4607d25537a5e6f6209d5b36b6e58f1600b1d49455d
selinux-policy-devel-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2936864429b5e7a08beffa4fda14aace
SHA-256: 71ca099ca01f79796b03484608f7697a234f88ea01a6484f7823e2dc5f11c28f
selinux-policy-doc-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2201dcf7cbf4ab5b6417dc42d530e564
SHA-256: a1983c398b1a9c82a51f255044b253e075e8416a6261a8cd24f01414ae5f3fd7
selinux-policy-minimum-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 8a31a7225663397a3ff5fd571249d8d5
SHA-256: d3c1f912fe2ad2959f5dbfc783b8b95f7c5fd70032598f0f6f87d9f27912d005
selinux-policy-mls-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 972156c09f7f42d45d27319d5744cd20
SHA-256: e591fb9d10292dde4dd25a3e438c31c10e99ca735cbb42dc3423f7be96df62f6
selinux-policy-sandbox-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: c9f0222f8ab66831c7d8a67886cf6252
SHA-256: f836c0058028ea095487f051054dc711ff5ae6f761a82a4c8b81f27957611de6
selinux-policy-targeted-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 61a1abb2d9e8300dbd4d092d52ae569b
SHA-256: 71205ed360ff8156dfad70d8f9701df3f2895e06b23dd5316456bd3c670718ec
 
s390x:
selinux-policy-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 0d49a5c15d95d22392771dba12d1cac5
SHA-256: b3a77f8280186bead0b4f4607d25537a5e6f6209d5b36b6e58f1600b1d49455d
selinux-policy-devel-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2936864429b5e7a08beffa4fda14aace
SHA-256: 71ca099ca01f79796b03484608f7697a234f88ea01a6484f7823e2dc5f11c28f
selinux-policy-doc-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2201dcf7cbf4ab5b6417dc42d530e564
SHA-256: a1983c398b1a9c82a51f255044b253e075e8416a6261a8cd24f01414ae5f3fd7
selinux-policy-minimum-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 8a31a7225663397a3ff5fd571249d8d5
SHA-256: d3c1f912fe2ad2959f5dbfc783b8b95f7c5fd70032598f0f6f87d9f27912d005
selinux-policy-mls-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 972156c09f7f42d45d27319d5744cd20
SHA-256: e591fb9d10292dde4dd25a3e438c31c10e99ca735cbb42dc3423f7be96df62f6
selinux-policy-sandbox-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: c9f0222f8ab66831c7d8a67886cf6252
SHA-256: f836c0058028ea095487f051054dc711ff5ae6f761a82a4c8b81f27957611de6
selinux-policy-targeted-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 61a1abb2d9e8300dbd4d092d52ae569b
SHA-256: 71205ed360ff8156dfad70d8f9701df3f2895e06b23dd5316456bd3c670718ec
 
x86_64:
selinux-policy-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 0d49a5c15d95d22392771dba12d1cac5
SHA-256: b3a77f8280186bead0b4f4607d25537a5e6f6209d5b36b6e58f1600b1d49455d
selinux-policy-devel-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2936864429b5e7a08beffa4fda14aace
SHA-256: 71ca099ca01f79796b03484608f7697a234f88ea01a6484f7823e2dc5f11c28f
selinux-policy-doc-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2201dcf7cbf4ab5b6417dc42d530e564
SHA-256: a1983c398b1a9c82a51f255044b253e075e8416a6261a8cd24f01414ae5f3fd7
selinux-policy-minimum-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 8a31a7225663397a3ff5fd571249d8d5
SHA-256: d3c1f912fe2ad2959f5dbfc783b8b95f7c5fd70032598f0f6f87d9f27912d005
selinux-policy-mls-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 972156c09f7f42d45d27319d5744cd20
SHA-256: e591fb9d10292dde4dd25a3e438c31c10e99ca735cbb42dc3423f7be96df62f6
selinux-policy-sandbox-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: c9f0222f8ab66831c7d8a67886cf6252
SHA-256: f836c0058028ea095487f051054dc711ff5ae6f761a82a4c8b81f27957611de6
selinux-policy-targeted-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 61a1abb2d9e8300dbd4d092d52ae569b
SHA-256: 71205ed360ff8156dfad70d8f9701df3f2895e06b23dd5316456bd3c670718ec
 
Red Hat Enterprise Linux Server TUS (v. 7.2)

SRPMS:
selinux-policy-3.13.1-60.el7_2.12.src.rpm
File outdated by:  RHBA-2017:0511
    MD5: f77014d77fe9701a45c2a3241e6fac58
SHA-256: 17fe5e8b0b14972aee5cf68d50335e3ad8bea2497dff334f23b20bb4dea03cd8
 
x86_64:
selinux-policy-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 0d49a5c15d95d22392771dba12d1cac5
SHA-256: b3a77f8280186bead0b4f4607d25537a5e6f6209d5b36b6e58f1600b1d49455d
selinux-policy-devel-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2936864429b5e7a08beffa4fda14aace
SHA-256: 71ca099ca01f79796b03484608f7697a234f88ea01a6484f7823e2dc5f11c28f
selinux-policy-doc-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 2201dcf7cbf4ab5b6417dc42d530e564
SHA-256: a1983c398b1a9c82a51f255044b253e075e8416a6261a8cd24f01414ae5f3fd7
selinux-policy-minimum-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 8a31a7225663397a3ff5fd571249d8d5
SHA-256: d3c1f912fe2ad2959f5dbfc783b8b95f7c5fd70032598f0f6f87d9f27912d005
selinux-policy-mls-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 972156c09f7f42d45d27319d5744cd20
SHA-256: e591fb9d10292dde4dd25a3e438c31c10e99ca735cbb42dc3423f7be96df62f6
selinux-policy-sandbox-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: c9f0222f8ab66831c7d8a67886cf6252
SHA-256: f836c0058028ea095487f051054dc711ff5ae6f761a82a4c8b81f27957611de6
selinux-policy-targeted-3.13.1-60.el7_2.12.noarch.rpm
File outdated by:  RHBA-2017:0511
    MD5: 61a1abb2d9e8300dbd4d092d52ae569b
SHA-256: 71205ed360ff8156dfad70d8f9701df3f2895e06b23dd5316456bd3c670718ec
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

1422185 - adcli fails to update /etc/krb5.keytab for keytab renewal



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/