RHBA-2015:1336 - Bug Fix Advisory

Topic

Updated udisks packages that fix one bug and add two enhancements are now
available for Red Hat Enterprise Linux 6.

Description

The udisks packages provide a daemon, D-Bus API, and command-line tools for
managing disks and storage devices.

This update fixes the following bug:

• Prior to this update, an external storage device could be unmounted forcefully

when a device entered the DM_SUSPENDED=1 state for a moment while performing a
set of changes during the cleanup procedure. To fix this bug, an exception for
ignoring such a device in the cleanup procedure has been added to the UDisks
daemon. As a result, DeviceMapper devices are no longer unmounted forcefully in
the described situation. (BZ#1121742)

In addition, this update adds the following enhancements:

• With this update, additional mount points and a list of allowed mount options

can be specified by means of udev rules. Flexibility of the udev rules format
enables the system administrator to write custom rules to enforce or limit
specific mount options for a specific set of devices. For example, USB drives
can be limited to be always mounted as read-only. (BZ#673102)

• This update enables the user to configure the udisks tool to enforce the

"noexec" global option on all unprivileged users mount points. On desktop
systems, the "noexec" option can protect users from mistakenly running certain
applications. (BZ#681875)

Users of udisks are advised to upgrade to these updated packages, which fix this
bug and add these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 681875 - RFE: Allow configuring udisks to enforce "noexec" on mounts by users

CVEs

(none)

References

(none)