RHBA-2016:2772 - Bug Fix Advisory

Topic

Updated selinux-policy packages that fix several bugs are now available for Red Hat Enterprise Linux 6.

Description

The selinux-policy packages contain the rules that govern how confined processes run on the system.

This update fixes the following bugs:

• Previously, the SELinux policy prevented the GlusterFS volumes configured for the Remote Direct Memory Access (RDMA) transport from the File System in User Space (FUSE) mounting. With this update, a patch has been applied that fixes this bug, and the SELinux denial no longer occurs in the described situation. (BZ#1388582)
• Prior to this update, SELinux did not allow the HugeTLBfs memory management feature for the Apache web server. As a consequence, PHP7 in FastCGI Process Manager (FPM) mode did not work properly. The selinux-policy packages have been updated, and HugeTLBfs is now available. (BZ#1393253)
• Previously, with SELinux in enforcing mode, it was not possible to create a UNIX Domain Socket on the Red Hat Gluster Storage volumes. As a consequence, the user could not store containers on the volumes. The relevant policy module has been updated, and the user is now able to store containers on the Red Hat Storage Gluster volumes. (BZ#1393267)

Users of selinux-policy are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 1388582 - [RHEL6] SELinux prevents FUSE mounting of RDMA transport type volumes
• BZ - 1393267 - [SELinux]: Cases in pynfs test suite fails because of selinux errors.

CVEs

(none)

References

(none)