Skip to navigation

Bug Fix Advisory selinux-policy bug fix update

Advisory: RHBA-2012:1581-1
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2012-12-18
Last updated on: 2012-12-18
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Server EUS (v. 6.3.z)
Red Hat Enterprise Linux Workstation (v. 6)

Details

Updated selinux-policy packages that fix the bug are now available for Red Hat
Enterprise Linux 6.

The selinux-policy packages contain the rules that govern how confined processes
run on the system.

This update fixes the following bug:

* Due to a bug in the SELinux policy, it was not possible to run a cron job with
a valid MLS (Multi Level Security) context for the sysadm_u SELinux user. This
update fixes relevant SELinux policy rules and cron now works as expected in the
described scenario. (BZ#878360)

* Previously, SELinux prevented "rhevm-guest-agent-gdm-plugin" to connect to the
SO_PASSCRED UNIX domain socket. Consequently, Single Sign-On (SSO) did not work
because the access to the credential socket was blocked. This update fixes the
relevant policy and SSO now works as expected in the described scenario.
(BZ#886210)

All users of SELinux are advised to upgrade to these updated packages, which fix
this bug.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.13.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 50228ed8f5ae6f4d3646217d221aa330
SHA-256: 0f8fd609718a525baade015c94157cb5579e88294b87c731d872c72d1ed5bc0f
 
IA-32:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
x86_64:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.13.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 50228ed8f5ae6f4d3646217d221aa330
SHA-256: 0f8fd609718a525baade015c94157cb5579e88294b87c731d872c72d1ed5bc0f
 
x86_64:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.13.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 50228ed8f5ae6f4d3646217d221aa330
SHA-256: 0f8fd609718a525baade015c94157cb5579e88294b87c731d872c72d1ed5bc0f
 
IA-32:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
PPC:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
s390x:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
x86_64:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
Red Hat Enterprise Linux Server EUS (v. 6.3.z)

SRPMS:
selinux-policy-3.7.19-155.el6_3.13.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 50228ed8f5ae6f4d3646217d221aa330
SHA-256: 0f8fd609718a525baade015c94157cb5579e88294b87c731d872c72d1ed5bc0f
 
IA-32:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
PPC:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
s390x:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
x86_64:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2013:0904
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
selinux-policy-3.7.19-155.el6_3.13.src.rpm
File outdated by:  RHBA-2014:0324
    MD5: 50228ed8f5ae6f4d3646217d221aa330
SHA-256: 0f8fd609718a525baade015c94157cb5579e88294b87c731d872c72d1ed5bc0f
 
IA-32:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
x86_64:
selinux-policy-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 0a5183d89b5f20065f1068bdc5548842
SHA-256: 546f5c33f75bf86cb535eacf37a3c983b9564cb26451473efc3496636bdeb4a6
selinux-policy-doc-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 8ee9267d3971171216ac3b0e3e7191e7
SHA-256: c728ef07a1a506c32b70e060f3d76c5d69dcb2a63cfa4ca4896189c3c3b94616
selinux-policy-minimum-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 3022af992dbcf5fe52d3691b0825b2cc
SHA-256: 6bee98cf8cf37ee6fd500312aa1b35441e6eb6819f09cc06fd225067e4449790
selinux-policy-mls-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: 9febafdc323ddea460be285ace5bc149
SHA-256: 1e220efd50a169ba16eef84b7dbf01ea9b0ebe6a02719acb6262bfef2a875236
selinux-policy-targeted-3.7.19-155.el6_3.13.noarch.rpm
File outdated by:  RHBA-2014:0324
    MD5: f59f5e8489e6a5a14aba6e35545c3ca6
SHA-256: bc25089d39b570681bd48cf772bfc600c9564acf3068b9f389a87ad729012bcb
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

886210 - selinux prevents RHEV-M SSO plugin from accessing credentials channel created by ovirt/rhevm-guest-agent



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/