RHBA-2012:0242 - Bug Fix Advisory

Topic

Updated acl packages that fix two bugs are now available for Red Hat Enterprise
Linux 5.

Description

Access Control Lists (ACLs) are used to define fine-grained discretionary access
rights for files and directories. The acl packages contain the getfacl and
setfacl utilities needed for manipulating access control lists.

These updated acl packages provide fixes for the following bugs:

• Prior to this update, the "-h" and "-v" options of the getfacl and setfacl

utilities were not working although they were listed in the documentation. With
this update, a patch has been applied and these options are now recognized by
the getfacl and setfacl utilities as expected. (BZ#536766)

• Prior to this update, the getfacl and setfacl utilities failed to preserve the

SUID and SGID Sticky Bits along with ACLs. Consequently, after restoring ACLs
from a file using the "setfacl --restore" command, all the SUID and SGID Sticky
Bits were missing. This update applies backported patches from the upstream
package and the problem no longer occurs in the scenario described. (BZ#580572)

All users of acl are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 536766 - getfacl and setfacl does not accept -h -v options although they are mentioned in manpages
• BZ - 580572 - getfacl/setfacl remove SUID/SGID/Sticky-Bits

CVEs

(none)

References

(none)