RHBA-2005:254 - Bug Fix Advisory

Topic

An updated policycoreutils package that fixes various bugs is now available.

Description

Security-enhanced Linux is a patch of the Linux kernel and a number of
utilities with enhanced security functionality designed to add mandatory
access controls to Linux. The Security-enhanced Linux kernel contains new
architectural components originally developed to improve the security of
the Flask operating system. These architectural components provide general
support for the enforcement of many kinds of mandatory access control
policies, including those based on the concepts of Type Enforcement,
Role-based Access Control, and Multi-level Security.

The policycoreutils package contains the policy core utilities that are
required for basic operation of a SELinux system. These utilities include
load_policy to load policies, setfiles to label filesystems, newrole
to switch roles, and run_init to run /etc/init.d scripts in the proper
context.

This updated package addresses the following issues:

• - The restorecon utility crashed on unlabeled file systems. For example,

if a disk was added and restorecon was executed, the application would
result in a segmentation fault.

• - Runnning 'fixfiles -R libselinux restore' without /sbin in the path

would result in a system crash.

All users of policycoreutils should upgrade to this updated package, which
resolves these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 144666 - restorecon segfaults with options "-R -v -n"
• BZ - 145888 - fixfiles cannot locate restorecon
• BZ - 146336 - STARTING_UID not numeric in /usr/sbin/genhomedircon
• BZ - 147473 - restorecon seg fault in /var/spool/squid

CVEs

(none)

References

(none)