RHBA-2008:0405 - Bug Fix Advisory

Topic

Enhanced policycoreutils packages that fix several bugs are now available.

Description

policycoreutils contains the policy core utilities that are required for
the basic operation of a Security-Enhanced Linux (SELinux) system. These
utilities include load_policy to load policies, setfiles to label
filesystems, newrole to switch roles, and run_init to run /etc/init.d
scripts in the proper context.

These updated policycoreutils packages add the following enhancements:

• Add support for selecting a store with semanage, so that policy can be

updated even when SELinux is disabled.

• support has been added for newrole for alternate pam configurations.

In addition, these updated policycoreutils packages provides fixes for the
following bugs:

• invoking semodule with the '-B' option and an extra argument caused the

process to hang and consume CPU.

• the init script for the restorecond command would sometimes exit with

incorrect or invalid return codes, thus causing the 'status' command to
return an incorrect value. This has been fixed so that the init script is
compliant with Linux Standard Base (LSB) guidelines, which resolves these
issues.

Users of policycoreutils are advised to upgrade to these updated packages,
which add these enhancements and resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 243687 - policycoreutils - Wrong init script
• BZ - 326721 - semodule hangs and consumes CPU with extra argument to -B option
• BZ - 336171 - Add newrole support for alternate pam configurations

CVEs

(none)

References

(none)