RHBA-2015:0575 - Bug Fix Advisory

Topic

Updated libnfsidmap packages that fix several bugs and add one enhancement are
now available for Red Hat Enterprise Linux 7.

Description

The libnfsidmap library handles mapping between names and ids for NFSv4.

This update fixes the following bugs:

• Previously, when the chown utility was used on an NFSv4 mount, chown did not

respect the "no_root_squash" option, and thus was not able to change the user
and group ownership of each given file. With this update, chown properly adheres
to "no_root_squash" and as a result handles the user and group ownership as
expected. (BZ#1093093)

• Prior to this update, libnfsidmap used the "nobody@DEFAULTDOMAIN" when

performing name lookup, but this did not match the behavior of the rpc.idmapd
daemon. As a consequence, the nfsidmap utility did not properly handle
situations when "nobody@DEFAULTDOMAIN" did not directly map to any user or group
on the system. With this update, libnfsidmap uses the "Nobody-User" and
"Nobody-Group" values in the /etc/idmapd.conf file when the default "nobody"
user and group are set, and the described problem no longer occurs. (BZ#1129790)

• This update removes a number of redundant warnings that display while

compiling the libnfsidmap source code. (BZ#1152658)

In addition, this update adds the following enhancement:

• The rpc.idmapd daemon now uses the strrchr() function, and thus parses fully

qualified user names, including a subdomain name. This allows rpc.idmapd to
reliably create UID and GID mappings for Identity Management tools. (BZ#1114053)

Users of libnfsidmap are advised to upgrade to these updated packages, which fix
these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 1093093 - chown does not respect NFSv4 no_root_squash
• BZ - 1129790 - libnfsidmap: respect Nobody-User/Nobody-Group
• BZ - 1152658 - A large number of warning occur when the source is compiled

CVEs

(none)

References

(none)