RHBA-2017:2436 - Bug Fix Advisory

Topic

Updated selinux-policy packages that fix several bugs are now available for Red Hat Enterprise Linux 7 Extended Update Support.

Description

The selinux-policy packages contain the rules that govern how confined processes run on the system.

This update fixes the following bugs:

• Previously, an SELinux rule for the NFS system was missing. Consequently, when running SELinux in enforcing mode, accessing NFS shares sometimes failed with the "stale NFS file handle" error message. The policy rule has been added, and accessing NFS shares no longer fails. (BZ#1466261)
• Prior to this update, an SELinux rule for the acpid service was missing. Consequently, when running SELinux in enforcing mode, acpid was unable to process Advanced Configuration and Power Interface (ACPI) events, for example pressing the power button. The policy rule has been added, and the described problem no longer occurs. (BZ#1468548)
• Previously, an SELinux rule for the libvirtd virtualization server was missing. Consequently, when running SELinux in enforcing mode, starting new OpenStack instances failed if the /var/lib/nova/instances/ directory was an NFS share. The policy rule has been added, and starting instances from an NFS share now works as expected. (BZ#1469428)

Users of selinux-policy are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1469428 - Unable to launch instance when /var/lib/nova/instances is mounted on an NFS share

CVEs

(none)

References

(none)