RHBA-2015:1403 - Bug Fix Advisory

Topic

Updated libsemanage packages that fix two bugs are now available for Red Hat
Enterprise Linux 6.

Description

The libsemanage library provides an API for the manipulation of SELinux binary
policies. It is used by the checkpolicy compiler and similar tools, as well as
by programs such as load_policy, which must perform specific transformations on
binary policie, such as customizing policy boolean settings.

This update fixes the following bugs:

• The libsemanage test suite previously failed when attempting to test the

libsemanage library. With this update, an error in the underlying code has been
corrected, which allows the libsemanage test suite to work as expected.
(BZ#591451)

• Prior to this update, the semodule command failed with an error message when

attempting to enable an already enabled module, or disable an already disabled
module. This update adjusts the behavior of the command to succeed and not to
produce error messages in the described scenarios. (BZ#872700)

Users of libsemanage are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 591451 - upstream test suite for libsemanage fails
• BZ - 872700 - semodule in RHEL-6 behaves differently than in RHEL-7

CVEs

(none)

References

(none)