RHBA-2007:0787 - Bug Fix Advisory

Topic

Updated policycoreutils packages that fix various issues are now available.

Description

policycoreutils contains the policy core utilities that are required for
the basic operation of a Security-Enhanced Linux (SELinux) system. These
utilities include load_policy to load policies, setfiles to label
filesystems, newrole to switch roles, and run_init to run /etc/init.d
scripts in the proper context.

This updated package includes the following fixes:

• when "fixfiles relabel" was run on a system where the /.autorelabel file

was present, fixfiles appeared to hang. The command was actually waiting on
user input. The updated package now exits cleanly when "fixfiles relabel"
is run.

• the "-e" option on the "restorecon" command has been restored and now

works as expected.

All SELinux users should install these updated packages which resolve these
issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 244636 - fixfiles appears to hang on reboot
• BZ - 250158 - but the update 5 4.5 doesn't accept the -e option.

CVEs

(none)

References

(none)