Issued:

2017-01-17

Updated:

2017-01-17

RHBA-2017:0075 - libsemanage and policycoreutils bug fix update

Synopsis

libsemanage and policycoreutils bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Updated libsemanage and policycoreutils packages that fix several bugs are now available for Red Hat Enterprise Linux 7.

Description

The libsemanage library provides an API for the manipulation of SELinux binary policies. It is used by the checkpolicy compiler and similar utilitlies, as well as by programs such as load_policy, which must perform specific transformations on binary policies, such as customizing policy Boolean settings.

The policycoreutils packages contain the core policy utilities required to manage a SELinux environment.

This update fixes the following bugs:

• In Red Hat Enterprise Linux 7.3, the semodule tool did not show module versions. Consequently, tools such as Puppet, which expect module version in the output of the "semodule -l" command, stopped working or worked incorrectly. The libsemanage and semodule tools have been fixed to return a module version. If there is no module version available, "(null)" is printed. (BZ#1395733)

• Previously, the "semanage fcontext -m" operation returned "OSError: No such file or directory" and failed to modify the target file context. A patch has been applied, and the exception is handled correctly. As a result, it is possible to modify the file context with the "semanage fcontext -m" command. (BZ#1402006)

Users of libsemanage and policycoreutils are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• libsemanage-static-2.5-5.1.el7_3.ppc.rpm
• policycoreutils-gui-2.5-11.el7_3.s390x.rpm
• policycoreutils-devel-2.5-11.el7_3.s390x.rpm
• libsemanage-static-2.5-5.1.el7_3.x86_64.rpm
• policycoreutils-python-2.5-11.el7_3.aarch64.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.ppc64.rpm
• policycoreutils-gui-2.5-11.el7_3.x86_64.rpm
• policycoreutils-sandbox-2.5-11.el7_3.x86_64.rpm
• libsemanage-2.5-5.1.el7_3.s390x.rpm
• libsemanage-2.5-5.1.el7_3.ppc64le.rpm
• policycoreutils-2.5-11.el7_3.s390x.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.ppc.rpm
• libsemanage-2.5-5.1.el7_3.src.rpm
• policycoreutils-sandbox-2.5-11.el7_3.aarch64.rpm
• libsemanage-devel-2.5-5.1.el7_3.aarch64.rpm
• policycoreutils-devel-2.5-11.el7_3.ppc.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.s390x.rpm
• policycoreutils-restorecond-2.5-11.el7_3.aarch64.rpm
• policycoreutils-newrole-2.5-11.el7_3.aarch64.rpm
• policycoreutils-gui-2.5-11.el7_3.ppc64le.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.i686.rpm
• policycoreutils-restorecond-2.5-11.el7_3.x86_64.rpm
• libsemanage-2.5-5.1.el7_3.ppc.rpm
• libsemanage-static-2.5-5.1.el7_3.s390x.rpm
• libsemanage-devel-2.5-5.1.el7_3.i686.rpm
• libsemanage-devel-2.5-5.1.el7_3.ppc64.rpm
• policycoreutils-restorecond-2.5-11.el7_3.ppc64le.rpm
• policycoreutils-gui-2.5-11.el7_3.ppc64.rpm
• libsemanage-2.5-5.1.el7_3.ppc64.rpm
• libsemanage-2.5-5.1.el7_3.x86_64.rpm
• libsemanage-devel-2.5-5.1.el7_3.s390x.rpm
• libsemanage-python-2.5-5.1.el7_3.aarch64.rpm
• libsemanage-devel-2.5-5.1.el7_3.ppc64le.rpm
• libsemanage-python-2.5-5.1.el7_3.x86_64.rpm
• libsemanage-devel-2.5-5.1.el7_3.x86_64.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.x86_64.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.aarch64.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.ppc64le.rpm
• policycoreutils-newrole-2.5-11.el7_3.ppc64le.rpm
• policycoreutils-python-2.5-11.el7_3.ppc64.rpm
• policycoreutils-python-2.5-11.el7_3.s390x.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.s390x.rpm
• policycoreutils-restorecond-2.5-11.el7_3.ppc64.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.x86_64.rpm
• policycoreutils-devel-2.5-11.el7_3.ppc64.rpm
• policycoreutils-devel-2.5-11.el7_3.ppc64le.rpm
• policycoreutils-devel-2.5-11.el7_3.x86_64.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.ppc.rpm
• libsemanage-python-2.5-5.1.el7_3.s390x.rpm
• libsemanage-static-2.5-5.1.el7_3.s390.rpm
• policycoreutils-2.5-11.el7_3.src.rpm
• policycoreutils-newrole-2.5-11.el7_3.s390x.rpm
• policycoreutils-newrole-2.5-11.el7_3.x86_64.rpm
• policycoreutils-2.5-11.el7_3.x86_64.rpm
• libsemanage-python-2.5-5.1.el7_3.ppc64le.rpm
• policycoreutils-2.5-11.el7_3.ppc64.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.ppc64.rpm
• libsemanage-static-2.5-5.1.el7_3.i686.rpm
• policycoreutils-2.5-11.el7_3.ppc64le.rpm
• policycoreutils-devel-2.5-11.el7_3.i686.rpm
• policycoreutils-sandbox-2.5-11.el7_3.s390x.rpm
• policycoreutils-2.5-11.el7_3.aarch64.rpm
• policycoreutils-devel-2.5-11.el7_3.aarch64.rpm
• policycoreutils-restorecond-2.5-11.el7_3.s390x.rpm
• libsemanage-2.5-5.1.el7_3.aarch64.rpm
• libsemanage-devel-2.5-5.1.el7_3.ppc.rpm
• libsemanage-static-2.5-5.1.el7_3.ppc64.rpm
• policycoreutils-sandbox-2.5-11.el7_3.ppc64.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.ppc64le.rpm
• libsemanage-devel-2.5-5.1.el7_3.s390.rpm
• libsemanage-static-2.5-5.1.el7_3.ppc64le.rpm
• libsemanage-2.5-5.1.el7_3.s390.rpm
• policycoreutils-devel-2.5-11.el7_3.s390.rpm
• policycoreutils-python-2.5-11.el7_3.ppc64le.rpm
• policycoreutils-python-2.5-11.el7_3.x86_64.rpm
• policycoreutils-sandbox-2.5-11.el7_3.ppc64le.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.aarch64.rpm
• libsemanage-debuginfo-2.5-5.1.el7_3.s390.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.i686.rpm
• policycoreutils-gui-2.5-11.el7_3.aarch64.rpm
• policycoreutils-debuginfo-2.5-11.el7_3.s390.rpm
• libsemanage-2.5-5.1.el7_3.i686.rpm
• policycoreutils-newrole-2.5-11.el7_3.ppc64.rpm
• libsemanage-static-2.5-5.1.el7_3.aarch64.rpm
• libsemanage-python-2.5-5.1.el7_3.ppc64.rpm

Fixes

• This content is not included.BZ - 1395732
• This content is not included.BZ - 1395733
• This content is not included.BZ - 1402006

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.