- Issued:
- 2012-02-14
- Updated:
- 2012-02-14
RHBA-2012:0134 - policycoreutils bug fix update
Synopsis
policycoreutils bug fix update
Type/Severity
Bug Fix Advisory
Topic
Updated policycoreutils packages that fix three bugs are now available for Red Hat Enterprise Linux 6.
Description
The policycoreutils packages contain the core utilities that are required for the basic operation of a Security-Enhanced Linux (SELinux) system and its policies.
This update fixes the following bugs:
- The semanage utility did not produce correct audit messages in the Common Criteria certified environment. This update modifies semanage so that it now sends correct audit events when the user is assigned to or removed from a new role.
This update also modifies behavior of semanage concerning the user's SELinux Multi-Level Security (MLS) and Multi-Category Security (MCS) range. The utility now works with the user's default range of the MLS/MCS security level instead of the lowest.
In addition, the semange(8) manual page has been corrected to reflect the current semanage functionality. (BZ#785678)
-
The missing exit(1) function call in the underlying code of the sepolgen-ifgen utility could cause the restorecond daemon to access already freed memory when retrieving user's information. This would cause restorecond to terminate unexpectedly with a segmentation fault. With this update, restorecond has been modified to check the return value of the getpwuid() function to avoid this situation. (BZ#787579)
-
When installing packages on the system in Federal Information Processing Standard (FIPS) mode, parsing errors could occur and installation failed. This was caused by the "/usr/lib64/python2.7/site-packages/sepolgen/yacc.py" parser, which used MD5 checksums that are not supported in FIPS mode. This update modifies the parser to use SHA-256 checksums and installation process is now successful. (BZ#787605)
All users of policycoreutils are advised to upgrade to these updated packages, which fix these bugs.
Solution
Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Storage | 2.0 | x86_64 |
| Red Hat Storage for Public Cloud (via RHUI) | 2.0 | x86_64 |
| Red Hat Gluster Storage Server for On-premise | 2.0 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 6.2 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 6.2 | i386 |
| Red Hat Enterprise Linux for Scientific Computing | 6 | x86_64 |
| Red Hat Enterprise Linux for Power, big endian | 6 | ppc64 |
| Red Hat Enterprise Linux for Power, big endian - Extended Update Support | 6.2 | ppc64 |
| Red Hat Enterprise Linux for IBM z Systems | 6 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Update Support | 6.2 | s390x |
| Red Hat Enterprise Linux Workstation | 6 | x86_64 |
| Red Hat Enterprise Linux Workstation | 6 | i386 |
| Red Hat Enterprise Linux Server | 6 | x86_64 |
| Red Hat Enterprise Linux Server | 6 | i386 |
| Red Hat Enterprise Linux Server from RHUI | 6 | x86_64 |
| Red Hat Enterprise Linux Server from RHUI | 6 | i386 |
| Red Hat Enterprise Linux Server - Extended Update Support from RHUI | 6.2 | x86_64 |
| Red Hat Enterprise Linux Server - Extended Update Support from RHUI | 6.2 | i386 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support | 6 | x86_64 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support | 6 | i386 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension | 6 | x86_64 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension | 6 | i386 |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) | 6 | s390x |
| Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) | 6 | s390x |
| Red Hat Enterprise Linux Server - AUS | 6.2 | x86_64 |
| Red Hat Enterprise Linux Desktop | 6 | x86_64 |
| Red Hat Enterprise Linux Desktop | 6 | i386 |
Updated Packages
- policycoreutils-python-2.0.83-19.21.el6_2.i686.rpm
- policycoreutils-gui-2.0.83-19.21.el6_2.x86_64.rpm
- policycoreutils-debuginfo-2.0.83-19.21.el6_2.ppc64.rpm
- policycoreutils-python-2.0.83-19.21.el6_2.ppc64.rpm
- policycoreutils-python-2.0.83-19.21.el6_2.s390x.rpm
- policycoreutils-sandbox-2.0.83-19.21.el6_2.x86_64.rpm
- policycoreutils-sandbox-2.0.83-19.21.el6_2.s390x.rpm
- policycoreutils-newrole-2.0.83-19.21.el6_2.x86_64.rpm
- policycoreutils-gui-2.0.83-19.21.el6_2.ppc64.rpm
- policycoreutils-debuginfo-2.0.83-19.21.el6_2.x86_64.rpm
- policycoreutils-2.0.83-19.21.el6_2.x86_64.rpm
- policycoreutils-sandbox-2.0.83-19.21.el6_2.ppc64.rpm
- policycoreutils-2.0.83-19.21.el6_2.i686.rpm
- policycoreutils-gui-2.0.83-19.21.el6_2.i686.rpm
- policycoreutils-python-2.0.83-19.21.el6_2.x86_64.rpm
- policycoreutils-newrole-2.0.83-19.21.el6_2.ppc64.rpm
- policycoreutils-2.0.83-19.21.el6_2.ppc64.rpm
- policycoreutils-debuginfo-2.0.83-19.21.el6_2.i686.rpm
- policycoreutils-newrole-2.0.83-19.21.el6_2.i686.rpm
- policycoreutils-2.0.83-19.21.el6_2.s390x.rpm
- policycoreutils-newrole-2.0.83-19.21.el6_2.s390x.rpm
- policycoreutils-gui-2.0.83-19.21.el6_2.s390x.rpm
- policycoreutils-debuginfo-2.0.83-19.21.el6_2.s390x.rpm
- policycoreutils-2.0.83-19.21.el6_2.src.rpm
- policycoreutils-sandbox-2.0.83-19.21.el6_2.i686.rpm
Fixes
- This content is not included.BZ - 785678
- This content is not included.BZ - 787579
- This content is not included.BZ - 787605
CVEs
(none)
References
(none)
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.