Issued:
2010-01-21
Updated:
2010-01-21

RHBA-2010:0063 - selinux-policy bug fix update

Synopsis

selinux-policy bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated selinux-policy packages that fix a regression that prevented postfix-driven systems from sending e-mail via sendmail are now available.

Description

The selinux-policy packages contain the rules that govern how confined processes run on the system.

These updated selinux-policy packages provide the fix for the following bug:

  • selinux-policy errata update RHBA-2010:0013 introduced a regression which prevented postfix-driven systems from sending e-mail using sendmail if SELinux was in enforcing mode. With this update, postfix_postdrop can read and write sendmail unix_stream_sockets, correcting the regression and allowing e-mails to be sent using sendmail. (BZ#555793)

Note: a workaround involving the manual creation of a mypostfix.te was documented in BZ#553492 (see References below). Once this update is installed, the workaround and manually created file are no longer required.

All users should upgrade to these updated packages, which resolve this issue.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for x86_64 - Extended Update Support5.4x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support5.4ia64
Red Hat Enterprise Linux for x86_64 - Extended Update Support5.4i386
Red Hat Enterprise Linux for Power, big endian5ppc
Red Hat Enterprise Linux for Power, big endian - Extended Update Support5.4ppc
Red Hat Enterprise Linux for IBM z Systems5s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support5.4s390x
Red Hat Enterprise Linux Workstation5x86_64
Red Hat Enterprise Linux Workstation5i386
Red Hat Enterprise Linux Server5x86_64
Red Hat Enterprise Linux Server5ia64
Red Hat Enterprise Linux Server5i386
Red Hat Enterprise Linux Server from RHUI5x86_64
Red Hat Enterprise Linux Server from RHUI5i386
Red Hat Enterprise Linux Desktop5x86_64
Red Hat Enterprise Linux Desktop5i386

Updated Packages

  • selinux-policy-targeted-2.4.6-255.el5_4.4.noarch.rpm
  • selinux-policy-mls-2.4.6-255.el5_4.4.noarch.rpm
  • selinux-policy-devel-2.4.6-255.el5_4.4.noarch.rpm
  • selinux-policy-2.4.6-255.el5_4.4.src.rpm
  • selinux-policy-minimum-2.4.6-255.el5_4.4.noarch.rpm
  • selinux-policy-2.4.6-255.el5_4.4.noarch.rpm
  • selinux-policy-strict-2.4.6-255.el5_4.4.noarch.rpm

Fixes

CVEs

(none)

References

Additional information