--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-8872
2015-05-27 10:14:44
--------------------------------------------------------------------------------
Name : libselinux
Product : Fedora 22
Version : 2.3
Release : 10.fc22
URL :
https://github.com/SELinuxProject/selinux/wiki
Summary : SELinux library and simple utilities
Description :
Security-enhanced Linux is a feature of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.
libselinux provides an API for SELinux applications to get and set
process and file security contexts and to obtain security policy
decisions. Required for any applications that use the SELinux API.
--------------------------------------------------------------------------------
Update Information:
2.3-9 simplified the method for is_selinux_enabled() to be faster and doesn't create
deadlocks. This change broke systems with SELinux enabled but without selinux-policy
package installed. This update adds a check of existence of /etc/selinux/config. In case
there's no such file in a system, SELinux is considered disabled even if it's
running on SELinux enabled kernel.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 12 2015 Petr Lautrbach <plautrba(a)redhat.com> 2.3-10
- is_selinux_enabled: Add /etc/selinux/config test (#1219045)
- matchpathcon/selabel_file: Fix man pages (#1219718)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1219045 - changes to is_selinux_enabled() renders machines unbootable which
never had selinux installed or active
https://bugzilla.redhat.com/show_bug.cgi?id=1219045
[ 2 ] Bug #1219718 - matchpathcon_init_prefix() does not behave as advertised
https://bugzilla.redhat.com/show_bug.cgi?id=1219718
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libselinux' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------