RHBA-2011:0339 - Bug Fix Advisory

Topic

Updated oddjob packages that fix multiple bugs are now available for Red Hat
Enterprise Linux 6.

Description

The oddjobd service runs specified privileged tasks for unprivileged client
applications which communicate with it through the system message bus.

This update fixes the following bugs:

• Previously, the oddjobd service failed to reconnect to the system message bus

after it lost its connection due to an internal function call. With this update,
the oddjobd service is now able to reconnect to the message bus successfully
after it loses a connection. (BZ#634356)

• If a umask is not specified in the oddjobd service's configuration file, the

service now uses the UMASK setting, if present, to calculate the permissions
which should be set on a user's home directory. (BZ#678345)

• The oddjobd service did not ensure, when creating a user's home directory,

that any intermediate directories that were created would have correct
permissions. This could have caused users to be unable to access their home
directory. With this update, oddjobd ensures that correct permissions are set
for any intervening directories such that the user is able to access their home
directory. (BZ#664418)

• The oddjobd init script exited with a exit status of "1" when it was passed a

non-existent action. Service init scripts should exit with an exit code of "2"
when they are asked to perform an unknown action. The oddjobd init script has
been corrected, and now conforms with init script guidelines. (BZ#674534)

• The oddjobd service failed to register the name of the mkhomedir service

because the message bus was not signaled to re-read its configuration files when
the oddjob-mkhomedir package was installed. With this update, oddjobd is now
able to register the mkhomedir service name successfully. (BZ#659681)

All oddjobd service users are advised to upgrade to these updated packages which
fix these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 612617 - Source testsuite in oddjob does not completely PASS
• BZ - 634356 - oddjob-mkhomedir not working
• BZ - 659681 - pam_oddjob_mkhomedir.so wrong permissions
• BZ - 666418 - When using ADS security, oddjobd-mkhomedir creates /home/DOMAIN with user directory umask
• BZ - 674534 - oddjob init script returns wrong code for nonexist action
• BZ - 678345 - oddjobd needs to signal dbus about its restart

CVEs

(none)

References

(none)