RHBA-2010:0561 - Bug Fix Advisory

Topic

Updated selinux-policy packages that resolve an issue are now available.

Description

The selinux-policy packages contain the rules that govern how confined processes
run on the system.

These updated selinux-policy packages fix the following bug:

• after upgrading to Red Hat Enterprise Linux 5.5, the Xen hypervisor was unable

to auto-start domains linked to in the /etc/xen/auto/ directory. This was caused
by the default Red Hat Enterprise Linux 5.5 SELinux policy preventing the xm
daemon from reading the symlinks in the /etc/xen/auto directory, with the result
that the xm daemon could not start the virtual guests. These updated
selinux-policy packages contain an updated SELinux policy that allows the xm
daemon to correctly read the symbolic links in /etc/xen/auto. The xm service is
now able to auto-start virtual guests upon system startup. (BZ#617169)

All users of selinux-policy are advised to upgrade to these updated packages,
which resolve this issue.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 617169 - Regression: After upgrade from RHEL 5.4 to RHEL 5.5, xendomains doesn't autostart domUs due to selinux trouble

CVEs

(none)

References

(none)