RHBA-2015:1824 - Bug Fix Advisory

Topic

An updated selinux-policy package that fixes two bugs is now available for Red
Hat Enterprise Linux 6.

Description

The selinux-policy package contains the rules that govern how confined processes
run on the system.

This update fixes the following bugs:

• Previously, symlink creation failed when running the qpidd service.

Consequently, an attempt to create a durable queue with qpidd reported a
misleading error, and the queue was not properly created. The SELinux code
preventing the symlink creation has been changed, and qpidd now creates a
durable queue as expected. (BZ#1257318)

• When manually upgrading a linear-store Empty File Pool (EFP) to the new

partitioning structure, after changing the owner and group of created files in
the qls/ directory, the qpidd service previously returned a permission denied
error when attempting to access the migrated journal file. The corresponding
SELinux rule has been updated, and qpidd is able to access the migrated journal
file as expected. (BZ#1257319)

Users of selinux-policy are advised to upgrade to this updated package, which
fixes these bugs.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.7 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 6.7 x86_64
• Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Update Support 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1257318 - [linearstore] Symlink creation fails when running broker as a service
• BZ - 1257319 - SELinux prevents qpidd from starting after update MRGM 3.1 to MRGM 3.2

CVEs

(none)

References

(none)