RHEA-2011:1657 - Product Enhancement Advisory

Topic

Updated acl packages that add two enhancements are now available for Red Hat
Enterprise Linux 6.

Description

Access Control Lists (ACLs) are used to define finer-grained discretionary
access rights for files and directories. The acl packages contain the getfacl
and setfacl utilities needed for manipulating access control lists.

This update adds the following enhancements:

• Prior to this update, the ACL library did not provide any function to check

for extended ACLs of a file without following symbolic links. The only available
function, acl_extended_file(), used to cause unnecessary mounts of autofs. This
update introduces a new function, acl_extended_file_nofollow(), that checks for
extended ACLs of a file without following symbolic links. (BZ#720318)

• Previously, the ACL library was linked without support for RELRO (read-only

relocations) flags. With this update, the library is now linked with partial
RELRO support. (BZ#723998)

Users of acl are advised to upgrade to these updated packages, which add these
enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 720318 - [RFE] add function acl_extended_file_nofollow()
• BZ - 723998 - Library needs partial RELRO support added

CVEs

(none)

References

(none)