RHBA-2007:0543 - Bug Fix Advisory

Topic

Updated policycoreutils packages that fix various issues are now available.

Description

Policycoreutils contains utilities that are required for basic operation of
an SELinux system.

This patch contains many fixes for policycoreutils, including some that are
critical for LSPP conformance:

• stop chcat from issuing python exceptions messages while changing

context with invalid input.

• stop fixfiles from assuming it is running on a tty.
• allow newrole to work on serial consoles.
• allow system-config-selinux to manage multiple sasl categories.
• fix restorecond init script to not return 0 when the service is not

running.

• Fix system-config-selinux to start when selinux=0.
• Add sed requirement to policycoreutils package.
• genhomedircon did not pick up default user types correctly.

Users are advised to upgrade to these updated policycoreutils packages,
which resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 228102 - lspp: newrole doesn't work on serial consoles
• BZ - 231868 - system-config-selinux has multiple sasl categories
• BZ - 232544 - system-config-selinux does not start when selinux=0
• BZ - 236920 - policycoreutils missing sed requirement
• BZ - 237324 - LSPP: genhomedircon does not pick up default user types correctly

CVEs

(none)

References

(none)