Red Hat Product Errata RHBA-2023:6488 - Bug Fix Advisory
Issued:
2023-11-07
Updated:
2023-11-07

RHBA-2023:6488 - Bug Fix Advisory

Synopsis

fapolicyd bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for fapolicyd is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • RHEL-621 - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  • RHEL-622 - fapolicyd still allows execution of a program after "untrusting" it
  • RHEL-623 - fapolicyd needs to make sure the FD limit is never reached
  • RHEL-624 - RFE: send rule number to fanotify so it gets audited
  • RHEL-627 - Default q_size doesn't match manpage's one

CVEs

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
x86_64
fapolicyd-1.3.2-100.el9.x86_64.rpm SHA-256: 4b74ad1b4decf8ae297694cf785c515224c1ab2fca127d89b927cd5c2ad27131
fapolicyd-debuginfo-1.3.2-100.el9.x86_64.rpm SHA-256: dbc7f0dc634d6fe0fdbe46836d97c2f33e87a750c83de8286ab19b9d8cb8e97d
fapolicyd-debugsource-1.3.2-100.el9.x86_64.rpm SHA-256: e50954d4c8259baf08e153b11c229c5cb611ead27357a415303ac2155ab3950d
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
x86_64
fapolicyd-1.3.2-100.el9.x86_64.rpm SHA-256: 4b74ad1b4decf8ae297694cf785c515224c1ab2fca127d89b927cd5c2ad27131
fapolicyd-debuginfo-1.3.2-100.el9.x86_64.rpm SHA-256: dbc7f0dc634d6fe0fdbe46836d97c2f33e87a750c83de8286ab19b9d8cb8e97d
fapolicyd-debugsource-1.3.2-100.el9.x86_64.rpm SHA-256: e50954d4c8259baf08e153b11c229c5cb611ead27357a415303ac2155ab3950d
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
x86_64
fapolicyd-1.3.2-100.el9.x86_64.rpm SHA-256: 4b74ad1b4decf8ae297694cf785c515224c1ab2fca127d89b927cd5c2ad27131
fapolicyd-debuginfo-1.3.2-100.el9.x86_64.rpm SHA-256: dbc7f0dc634d6fe0fdbe46836d97c2f33e87a750c83de8286ab19b9d8cb8e97d
fapolicyd-debugsource-1.3.2-100.el9.x86_64.rpm SHA-256: e50954d4c8259baf08e153b11c229c5cb611ead27357a415303ac2155ab3950d
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
s390x
fapolicyd-1.3.2-100.el9.s390x.rpm SHA-256: b1de87542d7e877f8a58325713120e2e500be6d9ca314ff98f11dc1fcf31d7b6
fapolicyd-debuginfo-1.3.2-100.el9.s390x.rpm SHA-256: 4fdbad5c862f5990cfb1894d1c934db46086ba0122b8eaa6768423811a0b97db
fapolicyd-debugsource-1.3.2-100.el9.s390x.rpm SHA-256: 63473b3164e1555dcab16bb76917a4ab47299c2d1468d5c623d36f7f85df8bd6
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
s390x
fapolicyd-1.3.2-100.el9.s390x.rpm SHA-256: b1de87542d7e877f8a58325713120e2e500be6d9ca314ff98f11dc1fcf31d7b6
fapolicyd-debuginfo-1.3.2-100.el9.s390x.rpm SHA-256: 4fdbad5c862f5990cfb1894d1c934db46086ba0122b8eaa6768423811a0b97db
fapolicyd-debugsource-1.3.2-100.el9.s390x.rpm SHA-256: 63473b3164e1555dcab16bb76917a4ab47299c2d1468d5c623d36f7f85df8bd6
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for Power, little endian 9

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
ppc64le
fapolicyd-1.3.2-100.el9.ppc64le.rpm SHA-256: 9f8b1d0cbd8fc865747f09095ad6ba0d1535050dfb0a5397092283329b64abeb
fapolicyd-debuginfo-1.3.2-100.el9.ppc64le.rpm SHA-256: 4f18d95395461c7e6bdfc10c335e939459f1d0f5576a5932d173422ff8ebdd44
fapolicyd-debugsource-1.3.2-100.el9.ppc64le.rpm SHA-256: 2f95761fb0c11417c6cc5e472dab8490400da36df5d934dcbdae6fa09f9a5c43
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
ppc64le
fapolicyd-1.3.2-100.el9.ppc64le.rpm SHA-256: 9f8b1d0cbd8fc865747f09095ad6ba0d1535050dfb0a5397092283329b64abeb
fapolicyd-debuginfo-1.3.2-100.el9.ppc64le.rpm SHA-256: 4f18d95395461c7e6bdfc10c335e939459f1d0f5576a5932d173422ff8ebdd44
fapolicyd-debugsource-1.3.2-100.el9.ppc64le.rpm SHA-256: 2f95761fb0c11417c6cc5e472dab8490400da36df5d934dcbdae6fa09f9a5c43
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for ARM 64 9

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
aarch64
fapolicyd-1.3.2-100.el9.aarch64.rpm SHA-256: c2ecb5c5babe57ea50303fdfd503293bf07379f44ae6a1db50eafaee091219a0
fapolicyd-debuginfo-1.3.2-100.el9.aarch64.rpm SHA-256: bfc2a1eba74a84873f3dc95a06b0b40d614b8ddd4e9eb42825c81b19f5895d1a
fapolicyd-debugsource-1.3.2-100.el9.aarch64.rpm SHA-256: 9798a4b5ea9e49b94a4f6225b67ee2ff5cef9b79a9831f96b2183f0d408ee06d
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
aarch64
fapolicyd-1.3.2-100.el9.aarch64.rpm SHA-256: c2ecb5c5babe57ea50303fdfd503293bf07379f44ae6a1db50eafaee091219a0
fapolicyd-debuginfo-1.3.2-100.el9.aarch64.rpm SHA-256: bfc2a1eba74a84873f3dc95a06b0b40d614b8ddd4e9eb42825c81b19f5895d1a
fapolicyd-debugsource-1.3.2-100.el9.aarch64.rpm SHA-256: 9798a4b5ea9e49b94a4f6225b67ee2ff5cef9b79a9831f96b2183f0d408ee06d
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
ppc64le
fapolicyd-1.3.2-100.el9.ppc64le.rpm SHA-256: 9f8b1d0cbd8fc865747f09095ad6ba0d1535050dfb0a5397092283329b64abeb
fapolicyd-debuginfo-1.3.2-100.el9.ppc64le.rpm SHA-256: 4f18d95395461c7e6bdfc10c335e939459f1d0f5576a5932d173422ff8ebdd44
fapolicyd-debugsource-1.3.2-100.el9.ppc64le.rpm SHA-256: 2f95761fb0c11417c6cc5e472dab8490400da36df5d934dcbdae6fa09f9a5c43
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
x86_64
fapolicyd-1.3.2-100.el9.x86_64.rpm SHA-256: 4b74ad1b4decf8ae297694cf785c515224c1ab2fca127d89b927cd5c2ad27131
fapolicyd-debuginfo-1.3.2-100.el9.x86_64.rpm SHA-256: dbc7f0dc634d6fe0fdbe46836d97c2f33e87a750c83de8286ab19b9d8cb8e97d
fapolicyd-debugsource-1.3.2-100.el9.x86_64.rpm SHA-256: e50954d4c8259baf08e153b11c229c5cb611ead27357a415303ac2155ab3950d
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
aarch64
fapolicyd-1.3.2-100.el9.aarch64.rpm SHA-256: c2ecb5c5babe57ea50303fdfd503293bf07379f44ae6a1db50eafaee091219a0
fapolicyd-debuginfo-1.3.2-100.el9.aarch64.rpm SHA-256: bfc2a1eba74a84873f3dc95a06b0b40d614b8ddd4e9eb42825c81b19f5895d1a
fapolicyd-debugsource-1.3.2-100.el9.aarch64.rpm SHA-256: 9798a4b5ea9e49b94a4f6225b67ee2ff5cef9b79a9831f96b2183f0d408ee06d
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
fapolicyd-1.3.2-100.el9.src.rpm SHA-256: f361f41b8adc19c2a102c4138a30c34dc9be7b0ea9a38ce7830507911017ef17
s390x
fapolicyd-1.3.2-100.el9.s390x.rpm SHA-256: b1de87542d7e877f8a58325713120e2e500be6d9ca314ff98f11dc1fcf31d7b6
fapolicyd-debuginfo-1.3.2-100.el9.s390x.rpm SHA-256: 4fdbad5c862f5990cfb1894d1c934db46086ba0122b8eaa6768423811a0b97db
fapolicyd-debugsource-1.3.2-100.el9.s390x.rpm SHA-256: 63473b3164e1555dcab16bb76917a4ab47299c2d1468d5c623d36f7f85df8bd6
fapolicyd-selinux-1.3.2-100.el9.noarch.rpm SHA-256: 89fe0057afd9057a12c7efd53a19baa1828e686d4ab1d28bd552e7666489331d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.