Issued:

2011-12-06

Updated:

2011-12-06

RHEA-2011:1657 - acl enhancement update

Synopsis

acl enhancement update

Type/Severity

Product Enhancement Advisory (none)

Topic

Updated acl packages that add two enhancements are now available for Red Hat Enterprise Linux 6.

Description

Access Control Lists (ACLs) are used to define finer-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists.

This update adds the following enhancements:

• Prior to this update, the ACL library did not provide any function to check for extended ACLs of a file without following symbolic links. The only available function, acl_extended_file(), used to cause unnecessary mounts of autofs. This update introduces a new function, acl_extended_file_nofollow(), that checks for extended ACLs of a file without following symbolic links. (BZ#720318)

• Previously, the ACL library was linked without support for RELRO (read-only relocations) flags. With this update, the library is now linked with partial RELRO support. (BZ#723998)

Users of acl are advised to upgrade to these updated packages, which add these enhancements.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• acl-2.2.49-6.el6.s390x.rpm
• libacl-2.2.49-6.el6.ppc64.rpm
• libacl-devel-2.2.49-6.el6.s390x.rpm
• acl-2.2.49-6.el6.src.rpm
• libacl-devel-2.2.49-6.el6.s390.rpm
• acl-2.2.49-6.el6.ppc64.rpm
• acl-debuginfo-2.2.49-6.el6.ppc64.rpm
• libacl-devel-2.2.49-6.el6.i686.rpm
• acl-debuginfo-2.2.49-6.el6.ppc.rpm
• libacl-2.2.49-6.el6.s390.rpm
• libacl-devel-2.2.49-6.el6.x86_64.rpm
• libacl-2.2.49-6.el6.i686.rpm
• libacl-devel-2.2.49-6.el6.ppc64.rpm
• acl-debuginfo-2.2.49-6.el6.s390x.rpm
• acl-debuginfo-2.2.49-6.el6.i686.rpm
• libacl-2.2.49-6.el6.ppc.rpm
• libacl-2.2.49-6.el6.s390x.rpm
• acl-debuginfo-2.2.49-6.el6.s390.rpm
• acl-2.2.49-6.el6.x86_64.rpm
• acl-debuginfo-2.2.49-6.el6.x86_64.rpm
• acl-2.2.49-6.el6.i686.rpm
• libacl-2.2.49-6.el6.x86_64.rpm
• libacl-devel-2.2.49-6.el6.ppc.rpm

Fixes

• This content is not included.BZ - 720318
• This content is not included.BZ - 723998

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.