RHBA-2007:0192 - Bug Fix Advisory

Topic

Updated setools packages that fix various bugs are now available.

Description

Security-Enhanced Linux is a patch of the Linux kernel and a number of
utilities with enhanced security functionality designed to add mandatory
access controls to Linux. The Security-Enhanced Linux kernel contains new
architectural components originally developed to improve the security of
the Flask operating system. These architectural components provide general
support for the enforcement of many kinds of mandatory access control
policies, including those based on the concepts of Type Enforcement,
Role-based Access Control, and Multi-level Security.

setools is a collection of utilities to aid in the analysis and debugging
of an SELinux policy.

Several problems have been fixed in the latest setools package. Most of
these problems were due to setools being designed for a strict policy
machine, and not having been ported to targeted policy machines.

Bugs fixed in these updated packages include:

• seuseradd segfaulted (and is not needed for targeted policy).
• setools did not support Big Endian systems.
• setools failed to open the default policy.
• seinfo did not detect the targeted policy.

All SELinux users are advised to upgrade to these updated setools packages,
which resolve these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 169853 - seinfo says "not an selinux system" if strict policy not installed
• BZ - 169856 - selinux can't open default policy when no sources are installed

CVEs

(none)

References

(none)