Table of Contents
Advertisement
* newer SELinux kernels have access checks that the shipping SELinux policy package does not
understand. The kernel currently denies these access checks by default. This updated checkpolicy
package can build an selinux-policy package that tells the kernel to "Allow" unknown access.
104
(BZ#531229
)
* the checkpolicy man page listed (but did not otherwise document) a "-m" switch. checkpolicy
supports a "-M" switch but not a "-m" switch. This update removes the "-m" option from the checkpolicy
SYNOPSIS. Note: the "-M" switch was and is documented in the OPTIONS section of the checkpolicy
man page.
(BZ#533790
* checkmodule's "-d" switch (which switches the tool to debug mode) was documented in the
checkmodule man page but not in the output of checkmodule's help message (ie the output of
"checkmodule --help" or "checkmodule -h"). Also, the "-h" switch was not documented at all. With this
update, the "-d" switch is now included in help message output and the "-h" switch is documented in
both the checkmodule man page and the checkmodule help message.
All SELinux users should install this updated package which resolves these issues.
1.18. chkconfig
1.18.1. RHBA-2009:1628: bug fix update
Note
This update has already been released (prior to the GA of this release) as FASTRACK
RHBA-2009:1628
errata
Updated chkconfig packages that resolve several issues with the alternatives utility and provide
various man page corrections are now available.
The basic system utility chkconfig updates and queries runlevel information for system services.
These updated chkconfig packages provide fixes for the following bugs:
* when the "alternatives" utility was run and an error occurred, no contextual information such as the
line number of the error was provided. With this update, upon an error, "alternatives" now provides
the line number where the error occurred in the relevant file in the /var/lib/alternatives directory, which
helps to diagnose alternatives-related errors.
* using the "alternatives" utility and selecting the last available option and then uninstalling the
program which provided that alternative did not result in the removal of the symbolic links for that
option. Because the previously-set alternative was no longer available and the symbolic link remained,
the program was then rendered unusable. With this update, when the aforementioned condition is met,
the "alternatives" program now recognizes that the program is no longer available and removes the
extraneous symbolic link, with the result that the next-best alternative is properly selected, and running
the program works as expected.
104
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=531229
105
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=533790
106
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=533796
108
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=441443
109
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=525051
105
)
107
(BZ#441443
109
(BZ#525051
108
)
)
chkconfig
106
(BZ#533796
)
19
Advertisement
Table of Contents
