Skip to navigation

Bug Fix Advisory selinux-policy bug fix update

Advisory: RHBA-2012:1441-1
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2012-11-08
Last updated on: 2012-11-08
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Server EUS (v. 6.3.z)
Red Hat Enterprise Linux Workstation (v. 6)

Details

Updated selinux-policy packages that fix two bugs are now available for Red Hat
Enterprise Linux 6.

The selinux-policy packages contain the rules that govern how confined processes
run on the system.

This update fixes the following bugs:

* Previously, SELinux was blocking the /usr/libexec/qemu-kvm utility during a
migration of a virtual machine from Red Hat Enterprise Virtualization Manager.
Consequently, such a migration attempt failed and AVC messages were returned.
This update fixes the virt_use_fusefs boolean and adds the sanlock_use_fusefs
boolean, thus allowing the migration to succeed in the described scenario.
(BZ#864366)

* When trying to start a virtual machine on a POSIX-compliant file system,
SELinux denied the operation and returned AVC messages. This update amends the
SELinux policy to allow the described scenario to succeed. (BZ#867395)

Users of selinux-policy are advised to upgrade to these updated packages, which
fix these bugs.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.6.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 6b891f5e751854079e67e50f7f57d573
SHA-256: be78e06065ee361c4039a6a20807d48bfc1a628da2f8f0677a47306b9ca020e8
 
IA-32:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
x86_64:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.6.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 6b891f5e751854079e67e50f7f57d573
SHA-256: be78e06065ee361c4039a6a20807d48bfc1a628da2f8f0677a47306b9ca020e8
 
x86_64:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.6.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 6b891f5e751854079e67e50f7f57d573
SHA-256: be78e06065ee361c4039a6a20807d48bfc1a628da2f8f0677a47306b9ca020e8
 
IA-32:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
PPC:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
s390x:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
x86_64:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
Red Hat Enterprise Linux Server EUS (v. 6.3.z)

SRPMS:
selinux-policy-3.7.19-155.el6_3.6.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 6b891f5e751854079e67e50f7f57d573
SHA-256: be78e06065ee361c4039a6a20807d48bfc1a628da2f8f0677a47306b9ca020e8
 
IA-32:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
PPC:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
s390x:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
x86_64:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.6.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 6b891f5e751854079e67e50f7f57d573
SHA-256: be78e06065ee361c4039a6a20807d48bfc1a628da2f8f0677a47306b9ca020e8
 
IA-32:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
x86_64:
selinux-policy-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 85271647828ecdbff26906dc5341ddef
SHA-256: a36870ddacce30a4c8c60eea06b445ff76a14d3a5d281223d138b82b885605ac
selinux-policy-doc-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: ff7089d1346a667aa1179e4b3e8471d0
SHA-256: 0c88e419063b1fadae602f3ad6cc11104ab9337488e5f3d967c42e39c0e6d9f8
selinux-policy-minimum-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: b5db3dd15f43b973f1f547a467a0a754
SHA-256: 42d00b35d4e06cdf0f60cd1cad42bb1f58bcad09555ef1e8eb90f13594663e30
selinux-policy-mls-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 710119cd9e977d38d9811ad7f308e90b
SHA-256: 3b76d8e919b19710b9527ca2c1039b76f8cea4843e47c46f67a1cae19d251d74
selinux-policy-targeted-3.7.19-155.el6_3.6.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 367ff5bdf2716f6665795a220d1eb844
SHA-256: 2c782153a33e42516449a6960af9c589b4d4ea4146c83f939dc09ac77e1b4020
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

867395 - [selinux-policy] AVC when trying to start qemu-kvm domain (guest) on posix compliant file-system



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/