Issued:

2015-03-05

Updated:

2015-03-05

RHBA-2015:0446 - oddjob bug fix and enhancement update

Synopsis

oddjob bug fix and enhancement update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated oddjob packages that fix two bugs and add one enhancement are now available for Red Hat Enterprise Linux 7.

Description

The oddjob service runs specified privileged tasks for unprivileged client applications which communicate with it through the system message bus.

This update fixes the following bugs:

• Prior to this update, the mkhomedir helper process for oddjob incorrectly interpreted results returned by the getpwnam_r() function. The function then sometimes failed to look up the home directory of a user, including situations when the system stored the user password information in the /etc/passwd file. Consequently, mkhomedir ignored requests to create a home directory for every affected user. This update corrects the logic error, and mkhomedir now works as expected in the described situation. (BZ#1098616)

• Previously, the default configuration for the mkhomedir helper process for oddjob specified that the umask value of 002 was to be used when populating the home directory of a user. Consequently, the system ignored any UMASK setting defined in the /etc/login.defs configuration file and always used the default configuration instead. The mkhomedir default configuration has been modified to no longer specify that the default umask value is passed to mkhomedir when the helper process is run. As a result, mkhomedir now uses the value specified in /etc/login.defs. (BZ#1123860)

In addition, this update adds the following enhancement:

• Previously, the pam_oddjob_mkhomedir(8) man page did not mention that pam_oddjob_mkhomedir module does not accept any options. As a consequence, the user could assume that pam_oddjob_mkhomedir accepted the same options as the similarly-named pam_mkhomedir module documented in the pam_mkhomedir(8) man page, including the umask option. The pam_oddjob_mkhomedir(8) man page has been updated with the information that pam_oddjob_mkhomedir does not accept any options. (BZ#1108398)

Users of oddjob are advised to upgrade to these updated packages, which fix these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• oddjob-debuginfo-0.31.5-4.el7.ppc64.rpm
• oddjob-debuginfo-0.31.5-4.el7.ppc.rpm
• oddjob-debuginfo-0.31.5-4.el7.x86_64.rpm
• oddjob-0.31.5-4.el7.ppc64.rpm
• oddjob-mkhomedir-0.31.5-4.el7.i686.rpm
• oddjob-debuginfo-0.31.5-4.el7.s390.rpm
• oddjob-mkhomedir-0.31.5-4.el7.x86_64.rpm
• oddjob-debuginfo-0.31.5-4.el7.s390x.rpm
• oddjob-mkhomedir-0.31.5-4.el7.ppc64.rpm
• oddjob-mkhomedir-0.31.5-4.el7.s390x.rpm
• oddjob-debuginfo-0.31.5-4.el7.i686.rpm
• oddjob-0.31.5-4.el7.s390x.rpm
• oddjob-mkhomedir-0.31.5-4.el7.ppc.rpm
• oddjob-0.31.5-4.el7.x86_64.rpm
• oddjob-mkhomedir-0.31.5-4.el7.s390.rpm
• oddjob-0.31.5-4.el7.src.rpm

Fixes

• This content is not included.BZ - 1098616
• This content is not included.BZ - 1123860

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.